@holoscript/core 6.0.3 → 6.1.1

package/dist/{chunk-AIUXRS74.cjs → chunk-RMHC2VG7.cjs}

@@ -1,8 +1,12 @@
 'use strict';
 
-var chunkEGIZHYJP_cjs = require('./chunk-EGIZHYJP.cjs');
+var chunk5FSKKMR7_cjs = require('./chunk-5FSKKMR7.cjs');
+var chunkGTU2Z2WW_cjs = require('./chunk-GTU2Z2WW.cjs');
+var chunkE7JP3BS3_cjs = require('./chunk-E7JP3BS3.cjs');
+var chunkHCCQLAA4_cjs = require('./chunk-HCCQLAA4.cjs');
 var crypto3 = require('crypto');
 var util = require('util');
+var zod = require('zod');
 var jwt = require('jsonwebtoken');
 var path = require('path');
 
@@ -69,7 +73,7 @@ function buildCanonicalJwk(jwk) {
       throw new Error(`Unsupported JWK key type: ${kty ?? "(undefined)"}`);
   }
 }
-var init_JwkThumbprint = chunkEGIZHYJP_cjs.__esm({
+var init_JwkThumbprint = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/JwkThumbprint.ts"() {
   }
 });
@@ -127,7 +131,7 @@ function getDefaultPermissions(role) {
   return [...ROLE_PERMISSIONS[role]];
 }
 var generateKeyPairAsync, AgentPermission, WorkflowStep, ROLE_PERMISSIONS, WORKFLOW_SEQUENCES;
-var init_AgentIdentity = chunkEGIZHYJP_cjs.__esm({
+var init_AgentIdentity = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/AgentIdentity.ts"() {
     init_JwkThumbprint();
     generateKeyPairAsync = typeof crypto3__namespace.generateKeyPair === "function" ? util.promisify(crypto3__namespace.generateKeyPair) : null;
@@ -207,6 +211,60 @@ var init_AgentIdentity = chunkEGIZHYJP_cjs.__esm({
 });
 
 // src/traits/CultureTraits.ts
+function normalizeNormProvenance(value) {
+  if (!value) return { ...exports.UNKNOWN_NORM_PROVENANCE };
+  return {
+    source: value.source ?? "unknown",
+    ...value.sourceAgentId !== void 0 && { sourceAgentId: value.sourceAgentId },
+    ...value.sourceCorpus !== void 0 && { sourceCorpus: value.sourceCorpus },
+    ...value.declarationSite !== void 0 && { declarationSite: value.declarationSite },
+    ...value.originInteractionId !== void 0 && {
+      originInteractionId: value.originInteractionId
+    },
+    ...value.confidenceClassification !== void 0 && {
+      confidenceClassification: value.confidenceClassification
+    },
+    ...value.recordedAtIso !== void 0 && { recordedAtIso: value.recordedAtIso }
+  };
+}
+function serializeNormProvenance(value) {
+  return normalizeNormProvenance(value);
+}
+function deserializeNormProvenance(value) {
+  if (!value || typeof value !== "object") return { ...exports.UNKNOWN_NORM_PROVENANCE };
+  const obj = value;
+  const knownSources = [
+    "agent",
+    "corpus",
+    "declaration_site",
+    "builtin",
+    "observation",
+    "unknown"
+  ];
+  const rawSource = obj.source;
+  const source = typeof rawSource === "string" && knownSources.includes(rawSource) ? rawSource : "unknown";
+  const result = { source };
+  if (typeof obj.sourceAgentId === "string") result.sourceAgentId = obj.sourceAgentId;
+  if (typeof obj.sourceCorpus === "string") result.sourceCorpus = obj.sourceCorpus;
+  if (obj.declarationSite && typeof obj.declarationSite === "object") {
+    const site = obj.declarationSite;
+    if (typeof site.file === "string") {
+      result.declarationSite = {
+        file: site.file,
+        ...typeof site.line === "number" && { line: site.line },
+        ...typeof site.column === "number" && { column: site.column }
+      };
+    }
+  }
+  if (typeof obj.originInteractionId === "string") {
+    result.originInteractionId = obj.originInteractionId;
+  }
+  if (obj.confidenceClassification === "genuine" || obj.confidenceClassification === "confabulated" || obj.confidenceClassification === "bullshitted") {
+    result.confidenceClassification = obj.confidenceClassification;
+  }
+  if (typeof obj.recordedAtIso === "string") result.recordedAtIso = obj.recordedAtIso;
+  return result;
+}
 function getBuiltinNorm(id) {
   return exports.BUILTIN_NORMS.find((n) => n.id === id);
 }
@@ -231,9 +289,17 @@ function getFamilyCompatibility(familyA, familyB) {
   }
   return { rating: "compatible", reason: "No known incompatibility between these families." };
 }
-exports.BUILTIN_NORMS = void 0; var CULTURAL_FAMILY_COMPATIBILITY, CONTRADICTORY_NORM_PAIRS, customContradictoryNorms;
-var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
+exports.UNKNOWN_NORM_PROVENANCE = void 0; exports.BUILTIN_NORM_PROVENANCE = void 0; exports.BUILTIN_NORMS = void 0; var CULTURAL_FAMILY_COMPATIBILITY, CONTRADICTORY_NORM_PAIRS, customContradictoryNorms;
+var init_CultureTraits = chunkHCCQLAA4_cjs.__esm({
   "src/traits/CultureTraits.ts"() {
+    exports.UNKNOWN_NORM_PROVENANCE = Object.freeze({
+      source: "unknown"
+    });
+    exports.BUILTIN_NORM_PROVENANCE = Object.freeze({
+      source: "builtin",
+      sourceCorpus: "@holoscript/core/BUILTIN_NORMS",
+      confidenceClassification: "genuine"
+    });
     exports.BUILTIN_NORMS = [
       // Safety norms
       {
@@ -245,7 +311,8 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         scope: "world",
         activationThreshold: 0,
         strength: "strong",
-        forbiddenEffects: ["agent:kill", "inventory:destroy", "physics:teleport"]
+        forbiddenEffects: ["agent:kill", "inventory:destroy", "physics:teleport"],
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       },
       {
         id: "resource_sharing",
@@ -256,7 +323,8 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         scope: "zone",
         activationThreshold: 0.5,
         strength: "moderate",
-        requiredEffects: ["inventory:give"]
+        requiredEffects: ["inventory:give"],
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       },
       {
         id: "zone_respect",
@@ -268,7 +336,8 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         activationThreshold: 0.3,
         strength: "moderate",
         requiredEffects: ["agent:communicate"],
-        forbiddenEffects: ["authority:zone"]
+        forbiddenEffects: ["authority:zone"],
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       },
       {
         id: "fair_trade",
@@ -279,7 +348,8 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         scope: "world",
         activationThreshold: 0,
         strength: "strong",
-        requiredEffects: ["inventory:trade", "agent:communicate"]
+        requiredEffects: ["inventory:trade", "agent:communicate"],
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       },
       {
         id: "greeting_convention",
@@ -290,7 +360,8 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         scope: "session",
         activationThreshold: 0.6,
         strength: "weak",
-        requiredEffects: ["agent:communicate"]
+        requiredEffects: ["agent:communicate"],
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       },
       {
         id: "noise_courtesy",
@@ -301,7 +372,8 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         scope: "zone",
         activationThreshold: 0.4,
         strength: "moderate",
-        forbiddenEffects: ["audio:global"]
+        forbiddenEffects: ["audio:global"],
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       },
       {
         id: "spawn_limits",
@@ -312,8 +384,9 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         scope: "zone",
         activationThreshold: 0,
         strength: "strong",
-        forbiddenEffects: ["render:spawn"]
+        forbiddenEffects: ["render:spawn"],
         // Catches excessive spawning via budget
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       },
       {
         id: "metanorm_enforcement",
@@ -324,7 +397,8 @@ var init_CultureTraits = chunkEGIZHYJP_cjs.__esm({
         scope: "world",
         activationThreshold: 0.7,
         strength: "weak",
-        requiredEffects: ["agent:communicate", "agent:observe"]
+        requiredEffects: ["agent:communicate", "agent:observe"],
+        provenance: exports.BUILTIN_NORM_PROVENANCE
       }
     ];
     CULTURAL_FAMILY_COMPATIBILITY = [
@@ -401,10 +475,18 @@ function getKeystore(config) {
   }
   return globalKeystore;
 }
-var DEFAULT_TOKEN_LIFETIME, ENCRYPTION_ALGORITHM, KEY_LENGTH, IV_LENGTH, SALT_LENGTH, AgentKeystore, globalKeystore;
-var init_AgentKeystore = chunkEGIZHYJP_cjs.__esm({
+var SerializedCredentialSchema, DEFAULT_TOKEN_LIFETIME, ENCRYPTION_ALGORITHM, KEY_LENGTH, IV_LENGTH, SALT_LENGTH, AgentKeystore, globalKeystore;
+var init_AgentKeystore = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/AgentKeystore.ts"() {
     init_AgentIdentity();
+    chunkE7JP3BS3_cjs.init_safeJsonParse();
+    SerializedCredentialSchema = zod.z.object({
+      role: zod.z.string(),
+      token: zod.z.string(),
+      keyPair: zod.z.unknown(),
+      createdAt: zod.z.string(),
+      expiresAt: zod.z.string()
+    });
     DEFAULT_TOKEN_LIFETIME = 24 * 60 * 60 * 1e3;
     ENCRYPTION_ALGORITHM = "aes-256-gcm";
     KEY_LENGTH = 32;
@@ -535,7 +617,21 @@ var init_AgentKeystore = chunkEGIZHYJP_cjs.__esm({
           return this.getCredential(role);
         }
         const decrypted = this.decrypt(encrypted);
-        const parsed = JSON.parse(decrypted);
+        const parseResult = chunkE7JP3BS3_cjs.safeJsonParse(decrypted, SerializedCredentialSchema);
+        if (!parseResult.ok) {
+          this.logAudit({
+            timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+            event: "key_parse_failed",
+            agentRole: role,
+            details: {
+              source: "storage",
+              error: parseResult.error.message,
+              kind: parseResult.error.kind
+            }
+          });
+          return null;
+        }
+        const parsed = parseResult.value;
         const credential = {
           role: parsed.role,
           token: parsed.token,
@@ -659,10 +755,10 @@ var init_AgentKeystore = chunkEGIZHYJP_cjs.__esm({
 });
 
 // src/compiler/identity/CapabilityToken.ts
-exports.HOLOSCRIPT_RESOURCE_SCHEME = void 0; var HOLOSCRIPT_RESOURCE_ALL, CapabilityActions, PERMISSION_TO_ACTION;
-var init_CapabilityToken = chunkEGIZHYJP_cjs.__esm({
+var HOLOSCRIPT_RESOURCE_SCHEME, HOLOSCRIPT_RESOURCE_ALL, CapabilityActions, PERMISSION_TO_ACTION;
+var init_CapabilityToken = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/CapabilityToken.ts"() {
-    exports.HOLOSCRIPT_RESOURCE_SCHEME = "holoscript://";
+    HOLOSCRIPT_RESOURCE_SCHEME = "holoscript://";
     HOLOSCRIPT_RESOURCE_ALL = "holoscript://*";
     CapabilityActions = {
       // Source
@@ -727,12 +823,13 @@ function getCapabilityTokenIssuer(config) {
   }
   return globalCapabilityIssuer;
 }
-exports.HoloScriptCapabilitySemantics = void 0; var CapabilityTokenIssuer, globalCapabilityIssuer;
-var init_CapabilityTokenIssuer = chunkEGIZHYJP_cjs.__esm({
+var HoloScriptCapabilitySemantics, CapabilityTokenIssuer, globalCapabilityIssuer;
+var init_CapabilityTokenIssuer = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/CapabilityTokenIssuer.ts"() {
+    chunkE7JP3BS3_cjs.init_safeJsonParse();
     init_AgentIdentity();
     init_CapabilityToken();
-    exports.HoloScriptCapabilitySemantics = class {
+    HoloScriptCapabilitySemantics = class {
       /**
        * Check whether `child` is a valid attenuation (subset) of `parent`.
        */
@@ -741,7 +838,7 @@ var init_CapabilityTokenIssuer = chunkEGIZHYJP_cjs.__esm({
           return false;
         }
         if (parent.with === HOLOSCRIPT_RESOURCE_ALL) {
-          return child.with.startsWith(exports.HOLOSCRIPT_RESOURCE_SCHEME);
+          return child.with.startsWith(HOLOSCRIPT_RESOURCE_SCHEME);
         }
         if (child.with === parent.with) {
           return true;
@@ -760,7 +857,7 @@ var init_CapabilityTokenIssuer = chunkEGIZHYJP_cjs.__esm({
           return false;
         }
         if (capability.with === HOLOSCRIPT_RESOURCE_ALL) {
-          return resource.startsWith(exports.HOLOSCRIPT_RESOURCE_SCHEME);
+          return resource.startsWith(HOLOSCRIPT_RESOURCE_SCHEME);
         }
         if (capability.with === resource) {
           return true;
@@ -773,7 +870,7 @@ var init_CapabilityTokenIssuer = chunkEGIZHYJP_cjs.__esm({
        */
       fromPermission(permission, scope) {
         const action = PERMISSION_TO_ACTION[permission] || permission;
-        const resource = scope ? `${exports.HOLOSCRIPT_RESOURCE_SCHEME}${scope}` : HOLOSCRIPT_RESOURCE_ALL;
+        const resource = scope ? `${HOLOSCRIPT_RESOURCE_SCHEME}${scope}` : HOLOSCRIPT_RESOURCE_ALL;
         return {
           with: resource,
           can: action
@@ -788,7 +885,7 @@ var init_CapabilityTokenIssuer = chunkEGIZHYJP_cjs.__esm({
         this.usedNonces = /* @__PURE__ */ new Set();
         this.defaultLifetimeSec = config.defaultLifetimeSec ?? 86400;
         this.maxDelegationDepth = config.maxDelegationDepth ?? 10;
-        this.semantics = config.semantics ?? new exports.HoloScriptCapabilitySemantics();
+        this.semantics = config.semantics ?? new HoloScriptCapabilitySemantics();
         this.strictExpiration = config.strictExpiration ?? true;
       }
       // -----------------------------------------------------------------------
@@ -854,7 +951,8 @@ var init_CapabilityTokenIssuer = chunkEGIZHYJP_cjs.__esm({
           }
         }
         const now = Math.floor(Date.now() / 1e3);
-        const requestedLifetime = lifetimeSec ?? this.defaultLifetimeSec;
+        const parentRemainingLifetime = Math.max(0, parentPayload.exp - now);
+        const requestedLifetime = lifetimeSec ?? Math.min(this.defaultLifetimeSec, parentRemainingLifetime);
         const childExp = now + requestedLifetime;
         if (this.strictExpiration && childExp > parentPayload.exp) {
           throw new Error(
@@ -967,7 +1065,7 @@ var init_CapabilityTokenIssuer = chunkEGIZHYJP_cjs.__esm({
         }
         let payload;
         try {
-          payload = JSON.parse(base64urlDecode(payloadB64).toString("utf-8"));
+          payload = chunkE7JP3BS3_cjs.readJson(base64urlDecode(payloadB64).toString("utf-8"));
         } catch {
           return {
             valid: false,
@@ -1174,7 +1272,7 @@ function getTokenIssuer(config) {
   return globalIssuer;
 }
 var DEFAULT_ISSUER, DEFAULT_JWT_SECRET, DEFAULT_TOKEN_EXPIRATION, AgentTokenIssuer, globalIssuer;
-var init_AgentTokenIssuer = chunkEGIZHYJP_cjs.__esm({
+var init_AgentTokenIssuer = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/AgentTokenIssuer.ts"() {
     init_AgentIdentity();
     init_AgentKeystore();
@@ -1381,7 +1479,7 @@ var init_AgentTokenIssuer = chunkEGIZHYJP_cjs.__esm({
         const permissions = getDefaultPermissions(agentConfig.role);
         const capabilities = permissions.map((perm) => {
           const action = PERMISSION_TO_ACTION[perm] || perm;
-          const resource = scope ? `${exports.HOLOSCRIPT_RESOURCE_SCHEME}${scope}` : HOLOSCRIPT_RESOURCE_ALL;
+          const resource = scope ? `${HOLOSCRIPT_RESOURCE_SCHEME}${scope}` : HOLOSCRIPT_RESOURCE_ALL;
           return { with: resource, can: action };
         });
         const issuer = `agent:${agentConfig.role}:${agentConfig.name}`;
@@ -1433,7 +1531,7 @@ var init_AgentTokenIssuer = chunkEGIZHYJP_cjs.__esm({
         const scope = capabilityOptions?.scope ?? request.agentConfig.scope;
         const capabilities = permissions.map((perm) => {
           const action = PERMISSION_TO_ACTION[perm] || perm;
-          const resource = scope ? `${exports.HOLOSCRIPT_RESOURCE_SCHEME}${scope}` : HOLOSCRIPT_RESOURCE_ALL;
+          const resource = scope ? `${HOLOSCRIPT_RESOURCE_SCHEME}${scope}` : HOLOSCRIPT_RESOURCE_ALL;
           return { with: resource, can: action };
         });
         return {
@@ -1532,7 +1630,7 @@ var init_AgentTokenIssuer = chunkEGIZHYJP_cjs.__esm({
 
 // src/compiler/CulturalCompatibilityChecker.ts
 var DEFAULT_CONFIG, CODES, CulturalCompatibilityChecker;
-var init_CulturalCompatibilityChecker = chunkEGIZHYJP_cjs.__esm({
+var init_CulturalCompatibilityChecker = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/CulturalCompatibilityChecker.ts"() {
     init_CultureTraits();
     DEFAULT_CONFIG = {
@@ -1783,7 +1881,7 @@ function getConfabulationValidator(config) {
   return globalConfabulationValidator;
 }
 var BUILT_IN_TRAIT_SCHEMAS, ConfabulationValidator, globalConfabulationValidator;
-var init_ConfabulationValidator = chunkEGIZHYJP_cjs.__esm({
+var init_ConfabulationValidator = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/ConfabulationValidator.ts"() {
     BUILT_IN_TRAIT_SCHEMAS = [
       // =========================================================================
@@ -3345,12 +3443,13 @@ function getRBAC(tokenIssuer) {
   return globalRBAC;
 }
 var RESOURCE_PERMISSION_MAP, AgentRBAC, globalRBAC;
-var init_AgentRBAC = chunkEGIZHYJP_cjs.__esm({
+var init_AgentRBAC = chunkHCCQLAA4_cjs.__esm({
   "src/compiler/identity/AgentRBAC.ts"() {
     init_AgentIdentity();
     init_AgentTokenIssuer();
     init_CulturalCompatibilityChecker();
     init_ConfabulationValidator();
+    chunkGTU2Z2WW_cjs.init_AgentRiskRegistry();
     RESOURCE_PERMISSION_MAP = {
       ["source_file" /* SOURCE_FILE */]: {
         read: "read:source" /* READ_SOURCE */,
@@ -3615,6 +3714,122 @@ var init_AgentRBAC = chunkEGIZHYJP_cjs.__esm({
         return validator.validateComposition(composition);
       }
       // ===========================================================================
+      // CONFABULATION RISK TIER GATE (v1.2.0)
+      //
+      // Sibling of the per-composition schema gate. Where the schema gate asks
+      // "is THIS composition structurally valid?", the risk-tier gate asks
+      // "given this AGENT's history, should we tighten the per-composition
+      // threshold or block dangerous ops outright?"
+      //
+      // Pipeline:
+      //   1. Standard RBAC check (token, role, scope, workflow).
+      //   2. Confabulation schema validation against the supplied composition.
+      //   3. Look up the agent's current risk tier in the AgentRiskRegistry.
+      //   4. If the op is dangerous (write/transform/execute), apply the tier's
+      //      composition risk cap. Quarantined agents are blocked outright.
+      //   5. Record the validation outcome back into the registry so the agent's
+      //      tier evolves with their behavior.
+      // ===========================================================================
+      /**
+       * Check access with both the schema gate AND the per-agent risk tier gate.
+       *
+       * Use this as the primary enforcement point for any AI-generated content
+       * that will land in a downstream compiler target.
+       *
+       * @param request - Standard resource access request.
+       * @param composition - Composition the agent wants to commit/transform.
+       * @param options - Optional registry override + per-call confabulation config.
+       * @returns Extended access decision including risk tier and applied cap.
+       */
+      checkAccessWithRiskGate(request, composition, options) {
+        const registry = options?.registry ?? chunkGTU2Z2WW_cjs.getAgentRiskRegistry();
+        const dryRun = options?.dryRun ?? false;
+        const rbacDecision = this.checkAccess(request);
+        if (!rbacDecision.allowed) {
+          return rbacDecision;
+        }
+        const verification = this.tokenIssuer.verifyToken(request.token);
+        const agentId = verification.valid && verification.payload ? verification.payload.sub : void 0;
+        if (!agentId) {
+          return {
+            allowed: false,
+            reason: "Risk gate cannot identify agent (missing sub claim)",
+            agentRole: rbacDecision.agentRole
+          };
+        }
+        const validator = options?.confabConfig ? new ConfabulationValidator(options.confabConfig) : getConfabulationValidator();
+        const confabResult = validator.validateComposition(composition);
+        const tier = registry.getTier(agentId);
+        const riskScore = registry.getScore(agentId);
+        const cap = chunkGTU2Z2WW_cjs.TIER_COMPOSITION_RISK_CAP[tier];
+        if (chunkGTU2Z2WW_cjs.isDangerousOperation(request.operation)) {
+          if (tier === "quarantined" /* QUARANTINED */) {
+            return {
+              allowed: false,
+              reason: `Agent ${agentId} is quarantined (risk score: ${riskScore.toFixed(1)}). Dangerous operation '${request.operation}' on '${request.resourceType}' blocked.`,
+              agentRole: rbacDecision.agentRole,
+              confabulation: confabResult,
+              agentId,
+              riskTier: tier,
+              riskScore,
+              appliedRiskCap: cap
+            };
+          }
+          if (confabResult.riskScore > cap) {
+            if (!dryRun) {
+              registry.recordValidation(agentId, confabResult);
+            }
+            return {
+              allowed: false,
+              reason: `Composition risk ${confabResult.riskScore} exceeds tier ${tier} cap ${cap} for dangerous operation '${request.operation}' on '${request.resourceType}'. Agent ${agentId} (score: ${riskScore.toFixed(1)}). ${confabResult.errors.length} confabulation error(s).`,
+              agentRole: rbacDecision.agentRole,
+              confabulation: confabResult,
+              agentId,
+              riskTier: tier,
+              riskScore,
+              appliedRiskCap: cap
+            };
+          }
+        } else {
+          if (!confabResult.valid) {
+            if (!dryRun) {
+              registry.recordValidation(agentId, confabResult);
+            }
+            return {
+              allowed: false,
+              reason: `Confabulation detected (risk score: ${confabResult.riskScore}/100, ${confabResult.errors.length} error(s)): ` + confabResult.errors.map((e) => e.message).join("; "),
+              agentRole: rbacDecision.agentRole,
+              confabulation: confabResult,
+              agentId,
+              riskTier: tier,
+              riskScore,
+              appliedRiskCap: cap
+            };
+          }
+        }
+        if (!dryRun) {
+          registry.recordValidation(agentId, confabResult);
+        }
+        return {
+          ...rbacDecision,
+          confabulation: confabResult,
+          agentId,
+          riskTier: tier,
+          riskScore,
+          appliedRiskCap: cap
+        };
+      }
+      /**
+       * Look up an agent's current risk tier without performing an access check.
+       * Useful for dashboards and pre-flight checks.
+       */
+      getAgentRiskTier(token, registry) {
+        const verification = this.tokenIssuer.verifyToken(token);
+        if (!verification.valid || !verification.payload) return null;
+        const reg = registry ?? chunkGTU2Z2WW_cjs.getAgentRiskRegistry();
+        return reg.getTier(verification.payload.sub);
+      }
+      // ===========================================================================
       // CULTURAL PROFILE INTEGRATION
       // ===========================================================================
       /**
@@ -3666,16 +3881,2118 @@ var init_AgentRBAC = chunkEGIZHYJP_cjs.__esm({
   }
 });
 
+// src/compiler/identity/ANSNamespace.ts
+function isValidCompilerName(name) {
+  return ALL_COMPILER_NAMES.includes(name);
+}
+var ANSDomain, ANSRiskTier; exports.ANSCapabilityPath = void 0; var COMPILER_DOMAIN_MAP, COMPILER_ANS_MAP, ALL_COMPILER_NAMES;
+var init_ANSNamespace = chunkHCCQLAA4_cjs.__esm({
+  "src/compiler/identity/ANSNamespace.ts"() {
+    ANSDomain = {
+      GAMEDEV: "gamedev",
+      SOCIAL_VR: "social-vr",
+      XR: "xr",
+      MOBILE: "mobile",
+      WEB3D: "web3d",
+      RUNTIME: "runtime",
+      SHADER: "shader",
+      ROBOTICS: "robotics",
+      INTERCHANGE: "interchange",
+      IOT: "iot",
+      WEB3: "web3",
+      AI: "ai",
+      NEUROMORPHIC: "neuromorphic",
+      META: "meta",
+      MIXIN: "mixin"
+    };
+    ANSRiskTier = {
+      STANDARD: "STANDARD",
+      HIGH: "HIGH",
+      CRITICAL: "CRITICAL"
+    };
+    ({
+      [ANSDomain.GAMEDEV]: ANSRiskTier.STANDARD,
+      [ANSDomain.SOCIAL_VR]: ANSRiskTier.HIGH,
+      [ANSDomain.XR]: ANSRiskTier.HIGH,
+      [ANSDomain.MOBILE]: ANSRiskTier.HIGH,
+      [ANSDomain.WEB3D]: ANSRiskTier.STANDARD,
+      [ANSDomain.RUNTIME]: ANSRiskTier.HIGH,
+      [ANSDomain.SHADER]: ANSRiskTier.STANDARD,
+      [ANSDomain.ROBOTICS]: ANSRiskTier.CRITICAL,
+      [ANSDomain.INTERCHANGE]: ANSRiskTier.STANDARD,
+      [ANSDomain.IOT]: ANSRiskTier.HIGH,
+      [ANSDomain.WEB3]: ANSRiskTier.CRITICAL,
+      [ANSDomain.AI]: ANSRiskTier.HIGH,
+      [ANSDomain.NEUROMORPHIC]: ANSRiskTier.HIGH,
+      [ANSDomain.META]: ANSRiskTier.STANDARD,
+      [ANSDomain.MIXIN]: ANSRiskTier.STANDARD
+    });
+    exports.ANSCapabilityPath = {
+      // ── gamedev ──────────────────────────────────────────────────────────
+      UNITY: "/compile/gamedev/unity",
+      UNREAL: "/compile/gamedev/unreal",
+      GODOT: "/compile/gamedev/godot",
+      // ── social-vr ────────────────────────────────────────────────────────
+      VRCHAT: "/compile/social-vr/vrchat",
+      // ── xr ───────────────────────────────────────────────────────────────
+      OPENXR: "/compile/xr/openxr",
+      OPENXR_SPATIAL_ENTITIES: "/compile/xr/openxr-spatial-entities",
+      VISIONOS: "/compile/xr/visionos",
+      AR: "/compile/xr/ar",
+      ANDROID_XR: "/compile/xr/android-xr",
+      AI_GLASSES: "/compile/xr/ai-glasses",
+      QUILT: "/compile/xr/quilt",
+      MV_HEVC: "/compile/xr/mv-hevc",
+      // ── mobile ───────────────────────────────────────────────────────────
+      ANDROID: "/compile/mobile/android",
+      IOS: "/compile/mobile/ios",
+      // ── web3d ────────────────────────────────────────────────────────────
+      BABYLON: "/compile/web3d/babylon",
+      WEBGPU: "/compile/web3d/webgpu",
+      R3F: "/compile/web3d/r3f",
+      PLAYCANVAS: "/compile/web3d/playcanvas",
+      THREEJS: "/compile/web3d/threejs",
+      // ── runtime ──────────────────────────────────────────────────────────
+      WASM: "/compile/runtime/wasm",
+      NODE_SERVICE: "/compile/runtime/node-service",
+      NEXTJS_API: "/compile/runtime/nextjs-api",
+      // ── shader ───────────────────────────────────────────────────────────
+      TSL: "/compile/shader/tsl",
+      // ── robotics ─────────────────────────────────────────────────────────
+      URDF: "/compile/robotics/urdf",
+      SDF: "/compile/robotics/sdf",
+      // ── interchange ──────────────────────────────────────────────────────
+      USD: "/compile/interchange/usd",
+      GLTF: "/compile/interchange/gltf",
+      GAUSSIAN_SPLATTING: "/compile/interchange/3dgs",
+      // ── iot ──────────────────────────────────────────────────────────────
+      DTDL: "/compile/iot/dtdl",
+      // ── web3 ─────────────────────────────────────────────────────────────
+      NFT_MARKETPLACE: "/compile/web3/nft-marketplace",
+      // ── ai ───────────────────────────────────────────────────────────────
+      SCM: "/compile/ai/scm",
+      VRR: "/compile/ai/vrr",
+      A2A_AGENT_CARD: "/compile/ai/a2a-agent-card",
+      AGENT_INFERENCE: "/compile/ai/agent-inference",
+      // ── neuromorphic ─────────────────────────────────────────────────────
+      NIR: "/compile/neuromorphic/nir",
+      // ── meta ─────────────────────────────────────────────────────────────
+      MULTI_LAYER: "/compile/meta/multi-layer",
+      INCREMENTAL: "/compile/meta/incremental",
+      STATE: "/compile/meta/state",
+      TRAIT_COMPOSITION: "/compile/meta/trait-composition",
+      // ── mixin ────────────────────────────────────────────────────────────
+      DOMAIN_BLOCK: "/compile/mixin/domain-block"
+    };
+    COMPILER_DOMAIN_MAP = {
+      // gamedev
+      unity: ANSDomain.GAMEDEV,
+      unreal: ANSDomain.GAMEDEV,
+      godot: ANSDomain.GAMEDEV,
+      // social-vr
+      vrchat: ANSDomain.SOCIAL_VR,
+      // xr
+      openxr: ANSDomain.XR,
+      "openxr-spatial-entities": ANSDomain.XR,
+      visionos: ANSDomain.XR,
+      ar: ANSDomain.XR,
+      "android-xr": ANSDomain.XR,
+      "ai-glasses": ANSDomain.XR,
+      quilt: ANSDomain.XR,
+      "mv-hevc": ANSDomain.XR,
+      // mobile
+      android: ANSDomain.MOBILE,
+      ios: ANSDomain.MOBILE,
+      // web3d
+      babylon: ANSDomain.WEB3D,
+      webgpu: ANSDomain.WEB3D,
+      r3f: ANSDomain.WEB3D,
+      playcanvas: ANSDomain.WEB3D,
+      threejs: ANSDomain.WEB3D,
+      // runtime
+      wasm: ANSDomain.RUNTIME,
+      "node-service": ANSDomain.RUNTIME,
+      "nextjs-api": ANSDomain.RUNTIME,
+      // shader
+      tsl: ANSDomain.SHADER,
+      // robotics
+      urdf: ANSDomain.ROBOTICS,
+      sdf: ANSDomain.ROBOTICS,
+      // interchange
+      usd: ANSDomain.INTERCHANGE,
+      gltf: ANSDomain.INTERCHANGE,
+      "3dgs": ANSDomain.INTERCHANGE,
+      // iot
+      dtdl: ANSDomain.IOT,
+      // web3
+      "nft-marketplace": ANSDomain.WEB3,
+      // ai
+      scm: ANSDomain.AI,
+      vrr: ANSDomain.AI,
+      "a2a-agent-card": ANSDomain.AI,
+      "agent-inference": ANSDomain.AI,
+      // neuromorphic
+      nir: ANSDomain.NEUROMORPHIC,
+      // meta
+      "multi-layer": ANSDomain.META,
+      incremental: ANSDomain.META,
+      state: ANSDomain.META,
+      "trait-composition": ANSDomain.META,
+      // mixin
+      "domain-block": ANSDomain.MIXIN
+    };
+    COMPILER_ANS_MAP = {
+      unity: exports.ANSCapabilityPath.UNITY,
+      unreal: exports.ANSCapabilityPath.UNREAL,
+      godot: exports.ANSCapabilityPath.GODOT,
+      vrchat: exports.ANSCapabilityPath.VRCHAT,
+      openxr: exports.ANSCapabilityPath.OPENXR,
+      "openxr-spatial-entities": exports.ANSCapabilityPath.OPENXR_SPATIAL_ENTITIES,
+      visionos: exports.ANSCapabilityPath.VISIONOS,
+      ar: exports.ANSCapabilityPath.AR,
+      "android-xr": exports.ANSCapabilityPath.ANDROID_XR,
+      "ai-glasses": exports.ANSCapabilityPath.AI_GLASSES,
+      quilt: exports.ANSCapabilityPath.QUILT,
+      "mv-hevc": exports.ANSCapabilityPath.MV_HEVC,
+      android: exports.ANSCapabilityPath.ANDROID,
+      ios: exports.ANSCapabilityPath.IOS,
+      babylon: exports.ANSCapabilityPath.BABYLON,
+      webgpu: exports.ANSCapabilityPath.WEBGPU,
+      r3f: exports.ANSCapabilityPath.R3F,
+      playcanvas: exports.ANSCapabilityPath.PLAYCANVAS,
+      threejs: exports.ANSCapabilityPath.THREEJS,
+      wasm: exports.ANSCapabilityPath.WASM,
+      "node-service": exports.ANSCapabilityPath.NODE_SERVICE,
+      "nextjs-api": exports.ANSCapabilityPath.NEXTJS_API,
+      tsl: exports.ANSCapabilityPath.TSL,
+      urdf: exports.ANSCapabilityPath.URDF,
+      sdf: exports.ANSCapabilityPath.SDF,
+      usd: exports.ANSCapabilityPath.USD,
+      gltf: exports.ANSCapabilityPath.GLTF,
+      "3dgs": exports.ANSCapabilityPath.GAUSSIAN_SPLATTING,
+      dtdl: exports.ANSCapabilityPath.DTDL,
+      "nft-marketplace": exports.ANSCapabilityPath.NFT_MARKETPLACE,
+      scm: exports.ANSCapabilityPath.SCM,
+      vrr: exports.ANSCapabilityPath.VRR,
+      "a2a-agent-card": exports.ANSCapabilityPath.A2A_AGENT_CARD,
+      "agent-inference": exports.ANSCapabilityPath.AGENT_INFERENCE,
+      nir: exports.ANSCapabilityPath.NIR,
+      "multi-layer": exports.ANSCapabilityPath.MULTI_LAYER,
+      incremental: exports.ANSCapabilityPath.INCREMENTAL,
+      state: exports.ANSCapabilityPath.STATE,
+      "trait-composition": exports.ANSCapabilityPath.TRAIT_COMPOSITION,
+      "domain-block": exports.ANSCapabilityPath.DOMAIN_BLOCK
+    };
+    ALL_COMPILER_NAMES = Object.keys(
+      COMPILER_DOMAIN_MAP
+    );
+    Object.values(ANSDomain);
+  }
+});
+
+// src/compiler/CompilerDocumentationGenerator.ts
+exports.CompilerDocumentationGenerator = void 0;
+var init_CompilerDocumentationGenerator = chunkHCCQLAA4_cjs.__esm({
+  "src/compiler/CompilerDocumentationGenerator.ts"() {
+    chunk5FSKKMR7_cjs.init_traitDocs();
+    exports.CompilerDocumentationGenerator = class {
+      constructor(options = {}) {
+        this.options = {
+          serviceUrl: options.serviceUrl ?? "http://localhost:3000",
+          serviceVersion: options.serviceVersion ?? "1.0.0",
+          maxLlmsTxtTokens: options.maxLlmsTxtTokens ?? 800,
+          includeTraitDocs: options.includeTraitDocs ?? true,
+          includeExamples: options.includeExamples ?? true,
+          mcpTransportType: options.mcpTransportType ?? "streamable-http",
+          contactRepository: options.contactRepository ?? "",
+          contactDocumentation: options.contactDocumentation ?? ""
+        };
+      }
+      getObjectType(obj) {
+        const typeProperty = obj.properties?.find(
+          (property) => property.key === "geometry" || property.key === "shape" || property.key === "type"
+        )?.value;
+        return typeof typeProperty === "string" ? typeProperty : "Object";
+      }
+      /**
+       * Generate all three documentation outputs for a compilation
+       *
+       * @param composition - Parsed HoloScript composition AST
+       * @param targetName - Compiler target (e.g., 'r3f', 'unity', 'unreal')
+       * @param compiledCode - The compiled output code
+       * @returns Triple-output documentation bundle
+       */
+      generate(composition, targetName, compiledCode, generationMeta) {
+        return {
+          llmsTxt: this.generateLlmsTxt(composition, targetName, compiledCode),
+          wellKnownMcp: this.generateMCPServerCard(composition, targetName, generationMeta),
+          markdownDocs: this.generateMarkdownDocs(composition, targetName, compiledCode)
+        };
+      }
+      // ===========================================================================
+      // LLMS.TXT GENERATION
+      // ===========================================================================
+      /**
+       * Generate llms.txt format documentation (max 800 tokens)
+       *
+       * llms.txt is a standardized format for AI-readable project documentation.
+       * It provides a concise overview optimized for LLM context windows.
+       *
+       * Includes: scene description, trait list, export targets, API surface,
+       * MCP tool manifest summary, and state management.
+       *
+       * @see https://llmstxt.org/
+       */
+      generateLlmsTxt(composition, targetName, compiledCode) {
+        const sections = [];
+        sections.push(`# ${composition.name || "HoloScript Composition"}`);
+        sections.push("");
+        sections.push("## Scene Description");
+        sections.push(`Compiled for: ${targetName}`);
+        sections.push(`Objects: ${composition.objects?.length || 0}`);
+        sections.push(`Lights: ${composition.lights?.length || 0}`);
+        sections.push(`Spatial Groups: ${composition.spatialGroups?.length || 0}`);
+        sections.push(`Templates: ${composition.templates?.length || 0}`);
+        sections.push("");
+        const traits = this.extractTraits(composition);
+        if (traits.length > 0) {
+          sections.push("## Traits Used");
+          const traitsByCategory = this.groupTraitsByCategory(traits);
+          for (const [category, categoryTraits] of Object.entries(traitsByCategory)) {
+            sections.push(`- ${category}: ${categoryTraits.join(", ")}`);
+          }
+          sections.push("");
+        }
+        sections.push("## Export Capabilities");
+        sections.push(`Primary target: ${targetName}`);
+        sections.push(
+          "Compatible targets: unity, unreal, godot, r3f, webgpu, babylon, openxr, vrchat, wasm, gltf, usd"
+        );
+        sections.push("");
+        if (typeof compiledCode === "object") {
+          sections.push("## API Surface");
+          const files = Object.keys(compiledCode);
+          sections.push(`Generated files: ${files.length}`);
+          sections.push(`- ${files.slice(0, 5).join("\n- ")}`);
+          if (files.length > 5) {
+            sections.push(`- ... and ${files.length - 5} more`);
+          }
+          sections.push("");
+        }
+        const mcpTools = this.extractMCPTools(composition, targetName);
+        if (mcpTools.length > 0) {
+          sections.push("## MCP Tools");
+          sections.push(`Available tools: ${mcpTools.length}`);
+          for (const tool of mcpTools.slice(0, 8)) {
+            sections.push(`- ${tool.name}: ${tool.description}`);
+          }
+          if (mcpTools.length > 8) {
+            sections.push(`- ... and ${mcpTools.length - 8} more`);
+          }
+          sections.push("");
+        }
+        if (composition.state) {
+          const stateObj = composition.state;
+          let stateProps = [];
+          if (stateObj.properties && Array.isArray(stateObj.properties)) {
+            stateProps = stateObj.properties.map((p) => p.key);
+          } else {
+            stateProps = Object.keys(stateObj);
+          }
+          if (stateProps.length > 0) {
+            sections.push("## State Management");
+            sections.push(`State properties: ${stateProps.length}`);
+            sections.push(`- ${stateProps.slice(0, 5).join(", ")}`);
+            if (stateProps.length > 5) {
+              sections.push(`  ... and ${stateProps.length - 5} more`);
+            }
+            sections.push("");
+          }
+        }
+        if (composition.environment) {
+          const env = composition.environment;
+          sections.push("## Environment");
+          sections.push(`Background: ${env.background || "default"}`);
+          if (env.fog) {
+            sections.push("Fog: enabled");
+          }
+          sections.push("");
+        }
+        const fullText = sections.join("\n");
+        const maxChars = this.options.maxLlmsTxtTokens * 4;
+        if (fullText.length > maxChars) {
+          return fullText.substring(0, maxChars) + "\n\n... (truncated to fit token limit)";
+        }
+        return fullText;
+      }
+      // ===========================================================================
+      // .WELL-KNOWN/MCP GENERATION
+      // ===========================================================================
+      /**
+       * Generate MCP server card conforming to SEP-1649 and SEP-1960
+       *
+       * Produces a server card that satisfies both specification proposals:
+       * - SEP-1649: serverInfo nested object, transport with endpoint, protocolVersion
+       * - SEP-1960: endpoints object, authentication, capabilities as booleans
+       *
+       * The card includes legacy compatibility fields (name, version at root)
+       * for backward compatibility with v1.0.0 consumers.
+       */
+      generateMCPServerCard(composition, targetName, generationMeta) {
+        const tools = this.extractMCPTools(composition, targetName);
+        const sanitizedName = this.sanitizeServiceName(composition.name || "holoscript-composition");
+        const compositionTitle = composition.name || "Untitled";
+        const traitCount = this.extractTraits(composition).length;
+        const objectCount = composition.objects?.length || 0;
+        const endpoints = {};
+        const transportType = this.options.mcpTransportType;
+        const mcpUrl = `${this.options.serviceUrl}/mcp`;
+        if (transportType === "streamable-http" || transportType === "http") {
+          endpoints.streamable_http = mcpUrl;
+        } else if (transportType === "sse") {
+          endpoints.sse = mcpUrl;
+        } else if (transportType === "websocket" || transportType === "ws") {
+          endpoints.websocket = mcpUrl;
+        } else {
+          endpoints.streamable_http = mcpUrl;
+        }
+        endpoints.health = `${this.options.serviceUrl}/health`;
+        endpoints.render = `${this.options.serviceUrl}/api/render`;
+        const holoscriptMeta = {
+          compiler_target: targetName,
+          generated_at: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        if (generationMeta?.compilationDigest) {
+          holoscriptMeta.compilation_digest = generationMeta.compilationDigest;
+        }
+        return {
+          // SEP-1960 fields
+          mcpVersion: "2025-03-26",
+          // SEP-1649 fields
+          protocolVersion: "2025-06-18",
+          serverInfo: {
+            name: sanitizedName,
+            title: `HoloScript: ${compositionTitle}`,
+            version: this.options.serviceVersion
+          },
+          description: `HoloScript composition "${compositionTitle}" compiled for ${targetName} \u2014 ${objectCount} objects, ${traitCount} unique traits`,
+          transport: {
+            type: transportType,
+            endpoint: mcpUrl,
+            authentication: null
+          },
+          capabilities: {
+            tools: {
+              count: tools.length
+            },
+            resources: false,
+            prompts: false,
+            sampling: false,
+            roots: false
+          },
+          tools,
+          endpoints,
+          authentication: {
+            required: false,
+            methods: ["none"]
+          },
+          contact: {
+            repository: this.options.contactRepository || void 0,
+            documentation: this.options.contactDocumentation || void 0
+          },
+          documentation: this.options.contactDocumentation || void 0,
+          _meta: {
+            holoscript: holoscriptMeta
+          },
+          // Legacy compatibility (v1.0.0)
+          name: sanitizedName,
+          version: this.options.serviceVersion
+        };
+      }
+      /**
+       * Extract MCP tool manifest from composition
+       */
+      extractMCPTools(composition, targetName) {
+        const tools = [];
+        tools.push({
+          name: "compile_composition",
+          description: `Compile this HoloScript composition to ${targetName} format`,
+          inputSchema: {
+            type: "object",
+            properties: {
+              options: {
+                type: "object",
+                description: "Compiler options"
+              }
+            }
+          }
+        });
+        tools.push({
+          name: "render_preview",
+          description: `Render a preview of this composition as PNG/JPEG`,
+          inputSchema: {
+            type: "object",
+            properties: {
+              width: { type: "number", description: "Image width in pixels" },
+              height: { type: "number", description: "Image height in pixels" },
+              format: { type: "string", enum: ["png", "jpeg", "webp"] }
+            }
+          }
+        });
+        if (composition.templates && composition.templates.length > 0) {
+          for (const template of composition.templates.slice(0, 10)) {
+            tools.push({
+              name: `instantiate_${this.sanitizeToolName(template.name)}`,
+              description: `Instantiate the "${template.name}" template with custom properties`,
+              inputSchema: {
+                type: "object",
+                properties: {
+                  properties: {
+                    type: "object",
+                    description: "Template properties to override"
+                  },
+                  position: {
+                    type: "object",
+                    description: "Spatial position",
+                    properties: [{ type: "number" }, { type: "number" }, { type: "number" }]
+                  }
+                }
+              }
+            });
+          }
+        }
+        if (composition.state) {
+          tools.push({
+            name: "update_state",
+            description: "Update composition state properties",
+            inputSchema: {
+              type: "object",
+              properties: {
+                updates: {
+                  type: "object",
+                  description: "State property updates"
+                }
+              }
+            }
+          });
+        }
+        tools.push({
+          name: "list_traits",
+          description: "List all traits used in this composition with their configurations",
+          inputSchema: {
+            type: "object",
+            properties: {
+              category: {
+                type: "string",
+                description: "Filter by trait category (visual, physics, audio, etc.)"
+              }
+            }
+          }
+        });
+        if (composition.objects && composition.objects.length > 0) {
+          tools.push({
+            name: "query_objects",
+            description: `Query scene objects by name, type, or trait (${composition.objects.length} objects available)`,
+            inputSchema: {
+              type: "object",
+              properties: {
+                name: { type: "string", description: "Filter by object name (glob pattern)" },
+                trait: { type: "string", description: "Filter by trait name" }
+              }
+            }
+          });
+        }
+        return tools;
+      }
+      // ===========================================================================
+      // MARKDOWN DOCUMENTATION GENERATION
+      // ===========================================================================
+      /**
+       * Generate comprehensive markdown documentation bundle
+       *
+       * Includes: composition metadata, scene graph, trait documentation,
+       * state management, logic handlers, MCP tool manifests, and compilation output.
+       */
+      generateMarkdownDocs(composition, targetName, compiledCode) {
+        const sections = [];
+        sections.push(`# ${composition.name || "HoloScript Composition"}`);
+        sections.push("");
+        sections.push(`**Target:** ${targetName}`);
+        sections.push(`**Generated:** ${(/* @__PURE__ */ new Date()).toISOString()}`);
+        sections.push(`**Version:** ${this.options.serviceVersion}`);
+        sections.push("");
+        sections.push("## Table of Contents");
+        sections.push("");
+        sections.push("- [Overview](#overview)");
+        sections.push("- [Scene Graph](#scene-graph)");
+        sections.push("- [Traits](#traits)");
+        if (composition.state) {
+          sections.push("- [State Management](#state-management)");
+        }
+        if (composition.logic) {
+          sections.push("- [Logic Handlers](#logic-handlers)");
+        }
+        sections.push("- [MCP Tool Manifest](#mcp-tool-manifest)");
+        sections.push("- [Compilation Output](#compilation-output)");
+        sections.push("");
+        sections.push("## Overview");
+        sections.push("");
+        sections.push(
+          `This composition contains ${composition.objects?.length || 0} objects, ${composition.lights?.length || 0} lights, and ${composition.spatialGroups?.length || 0} spatial groups.`
+        );
+        sections.push("");
+        if (composition.templates && composition.templates.length > 0) {
+          sections.push(`**Templates:** ${composition.templates.length}`);
+        }
+        if (composition.imports && composition.imports.length > 0) {
+          sections.push(`**Imports:** ${composition.imports.length}`);
+        }
+        if (composition.traitDefinitions && composition.traitDefinitions.length > 0) {
+          sections.push(`**Custom Traits:** ${composition.traitDefinitions.length}`);
+        }
+        sections.push("");
+        sections.push("## Scene Graph");
+        sections.push("");
+        if (composition.objects && composition.objects.length > 0) {
+          sections.push("### Objects");
+          sections.push("");
+          sections.push("| Name | Type | Position | Traits |");
+          sections.push("|------|------|----------|--------|");
+          for (const obj of composition.objects.slice(0, 20)) {
+            const objRec = obj;
+            const transform = objRec.transform;
+            const pos = objRec.position || transform?.position;
+            const posStr = pos ? `(${pos[0]}, ${pos[1]}, ${pos[2]})` : "N/A";
+            const traitNames = obj.traits ? this.extractTraitNames(obj.traits).join(", ") || "none" : "none";
+            sections.push(`| ${obj.name} | ${this.getObjectType(obj)} | ${posStr} | ${traitNames} |`);
+          }
+          if (composition.objects.length > 20) {
+            sections.push(`| ... | ... | ... | *${composition.objects.length - 20} more objects* |`);
+          }
+          sections.push("");
+        }
+        if (composition.lights && composition.lights.length > 0) {
+          sections.push("### Lights");
+          sections.push("");
+          sections.push("| Name | Type |");
+          sections.push("|------|------|");
+          for (const light of composition.lights) {
+            const lightRec = light;
+            sections.push(
+              `| ${light.name || "unnamed"} | ${lightRec.lightType || "unknown"} |`
+            );
+          }
+          sections.push("");
+        }
+        const traits = this.extractTraits(composition);
+        if (traits.length > 0) {
+          sections.push("## Traits");
+          sections.push("");
+          sections.push(`This composition uses ${traits.length} unique traits:`);
+          sections.push("");
+          const traitsByCategory = this.groupTraitsByCategory(traits);
+          for (const [category, categoryTraits] of Object.entries(traitsByCategory)) {
+            sections.push(`### ${category}`);
+            sections.push("");
+            for (const trait of categoryTraits) {
+              sections.push(`- **${trait}**`);
+              if (this.options.includeTraitDocs) {
+                const doc = this.getTraitDocumentation(trait);
+                if (doc) {
+                  for (const line of doc.split("\n")) {
+                    sections.push(line === "" ? "" : `  ${line}`);
+                  }
+                }
+              }
+            }
+            sections.push("");
+          }
+        }
+        if (composition.traitDefinitions && composition.traitDefinitions.length > 0) {
+          sections.push("### Custom Trait Definitions");
+          sections.push("");
+          for (const traitDef of composition.traitDefinitions) {
+            const traitDefRec = traitDef;
+            const extendsClause = traitDefRec.extends ? ` extends ${traitDefRec.extends}` : "";
+            sections.push(`- **${traitDef.name}**${extendsClause}`);
+          }
+          sections.push("");
+        }
+        if (composition.state) {
+          sections.push("## State Management");
+          sections.push("");
+          sections.push("### State Properties");
+          sections.push("");
+          sections.push("| Property | Type | Default Value |");
+          sections.push("|----------|------|---------------|");
+          const stateObj = composition.state;
+          if (stateObj.properties) {
+            for (const prop of stateObj.properties) {
+              const typeOf = typeof prop.value;
+              const defaultValue = JSON.stringify(prop.value).substring(0, 50);
+              sections.push(`| ${prop.key} | ${typeOf} | ${defaultValue} |`);
+            }
+          } else {
+            for (const [key, value] of Object.entries(stateObj)) {
+              const typeOf = typeof value;
+              const defaultValue = JSON.stringify(value).substring(0, 50);
+              sections.push(`| ${key} | ${typeOf} | ${defaultValue} |`);
+            }
+          }
+          sections.push("");
+        }
+        if (composition.logic) {
+          sections.push("## Logic Handlers");
+          sections.push("");
+          const logic = composition.logic;
+          if (logic.on_start) {
+            sections.push("### on_start");
+            sections.push("");
+            sections.push("Executed when the composition initializes.");
+            sections.push("");
+          }
+          if (logic.on_update) {
+            sections.push("### on_update");
+            sections.push("");
+            sections.push("Executed every frame.");
+            sections.push("");
+          }
+        }
+        const mcpTools = this.extractMCPTools(composition, targetName);
+        sections.push("## MCP Tool Manifest");
+        sections.push("");
+        sections.push(
+          `This compilation exposes ${mcpTools.length} MCP tools for programmatic interaction:`
+        );
+        sections.push("");
+        sections.push("| Tool | Description | Input Schema |");
+        sections.push("|------|-------------|-------------|");
+        for (const tool of mcpTools) {
+          const schemaStr = tool.inputSchema ? "`" + JSON.stringify(
+            Object.keys(
+              tool.inputSchema.properties || {}
+            )
+          ) + "`" : "none";
+          sections.push(`| \`${tool.name}\` | ${tool.description} | ${schemaStr} |`);
+        }
+        sections.push("");
+        sections.push("### Discovery");
+        sections.push("");
+        sections.push(`Server card available at: \`${this.options.serviceUrl}/.well-known/mcp\``);
+        sections.push("");
+        sections.push("```json");
+        sections.push(`{`);
+        sections.push(`  "mcpVersion": "2025-03-26",`);
+        sections.push(`  "protocolVersion": "2025-06-18",`);
+        sections.push(`  "serverInfo": {`);
+        sections.push(
+          `    "name": "${this.sanitizeServiceName(composition.name || "holoscript-composition")}",`
+        );
+        sections.push(`    "version": "${this.options.serviceVersion}"`);
+        sections.push(`  }`);
+        sections.push(`}`);
+        sections.push("```");
+        sections.push("");
+        sections.push("## Compilation Output");
+        sections.push("");
+        if (typeof compiledCode === "string") {
+          const lineCount = compiledCode.split("\n").length;
+          sections.push(`Generated ${lineCount} lines of ${targetName} code.`);
+        } else {
+          sections.push(`Generated ${Object.keys(compiledCode).length} files:`);
+          sections.push("");
+          for (const [filename, content] of Object.entries(compiledCode)) {
+            const lineCount = content.split("\n").length;
+            sections.push(`- **${filename}** (${lineCount} lines)`);
+          }
+        }
+        sections.push("");
+        sections.push("---");
+        sections.push("");
+        sections.push("*Generated by HoloScript Compiler Documentation Generator v2.0.0*");
+        sections.push("");
+        return sections.join("\n");
+      }
+      // ===========================================================================
+      // HELPER METHODS
+      // ===========================================================================
+      /**
+       * Extract trait names from a traits field.
+       *
+       * Handles both formats:
+       * - HoloObjectTrait[] (canonical parser output: array of { name, config })
+       * - Map<string, unknown> (R3F compiler output: Map with trait names as keys)
+       */
+      extractTraitNames(traits) {
+        if (!traits) return [];
+        if (traits instanceof Map) {
+          return Array.from(traits.keys());
+        }
+        if (Array.isArray(traits)) {
+          return traits.map((t) => typeof t === "string" ? t : t?.name).filter((name) => typeof name === "string");
+        }
+        return [];
+      }
+      /**
+       * Extract all unique traits from a composition
+       */
+      extractTraits(composition) {
+        const traitSet = /* @__PURE__ */ new Set();
+        if (composition.objects) {
+          for (const obj of composition.objects) {
+            for (const name of this.extractTraitNames(obj.traits)) {
+              traitSet.add(name);
+            }
+          }
+        }
+        if (composition.templates) {
+          for (const template of composition.templates) {
+            for (const name of this.extractTraitNames(template.traits)) {
+              traitSet.add(name);
+            }
+          }
+        }
+        return Array.from(traitSet).sort();
+      }
+      /**
+       * Group traits by category (visual, physics, audio, etc.)
+       */
+      groupTraitsByCategory(traits) {
+        const categories = {
+          Visual: [],
+          Physics: [],
+          Audio: [],
+          Interaction: [],
+          AI: [],
+          Animation: [],
+          Network: [],
+          Other: []
+        };
+        for (const trait of traits) {
+          const category = this.categorizeTrait(trait);
+          categories[category].push(trait);
+        }
+        return Object.fromEntries(
+          Object.entries(categories).filter(([_, traits2]) => traits2.length > 0)
+        );
+      }
+      /**
+       * Categorize a trait by name pattern
+       */
+      categorizeTrait(trait) {
+        if (!trait) return "Other";
+        const lower = trait.toLowerCase();
+        if (lower.includes("material") || lower.includes("color") || lower.includes("texture") || lower.includes("glow") || lower.includes("emissive") || lower.includes("shader") || lower.includes("pbr") || lower.includes("light") || lower.includes("shadow") || lower.includes("fog") || lower.includes("transparency") || lower.includes("opacity")) {
+          return "Visual";
+        }
+        if (lower.includes("physics") || lower.includes("collider") || lower.includes("rigidbody") || lower.includes("gravity") || lower.includes("fluid") || lower.includes("constraint") || lower.includes("joint")) {
+          return "Physics";
+        }
+        if (lower.includes("audio") || lower.includes("sound") || lower.includes("music") || lower.includes("spatial_audio")) {
+          return "Audio";
+        }
+        if (lower.includes("clickable") || lower.includes("draggable") || lower.includes("interactive") || lower.includes("hover") || lower.includes("grab") || lower.includes("pointer") || lower.includes("selectable")) {
+          return "Interaction";
+        }
+        if (lower.includes("ai") || lower.includes("npc") || lower.includes("behavior") || lower.includes("pathfinding") || lower.includes("agent") || lower.includes("decision")) {
+          return "AI";
+        }
+        if (lower.includes("anim") || lower.includes("rotate") || lower.includes("move") || lower.includes("orbit") || lower.includes("keyframe") || lower.includes("tween") || lower.includes("spring")) {
+          return "Animation";
+        }
+        if (lower.includes("network") || lower.includes("sync") || lower.includes("multiplayer") || lower.includes("replicated") || lower.includes("authority") || lower.includes("lobby")) {
+          return "Network";
+        }
+        return "Other";
+      }
+      /** Resolve trait docs from the shared LSP trait database (now in @holoscript/core). */
+      getTraitDocumentation(trait) {
+        const doc = chunk5FSKKMR7_cjs.getTraitDoc(trait);
+        if (!doc) return null;
+        return chunk5FSKKMR7_cjs.formatTraitDocCompact(doc);
+      }
+      /**
+       * Sanitize composition name for use as a service name
+       */
+      sanitizeServiceName(name) {
+        return name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+      }
+      /**
+       * Sanitize template name for use as a tool name
+       */
+      sanitizeToolName(name) {
+        return name.toLowerCase().replace(/[^a-z0-9_]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "");
+      }
+    };
+  }
+});
+
+// src/compiler/identity/CapabilityRBAC.ts
+function getCapabilityRBAC(config) {
+  if (!globalCapabilityRBAC) {
+    globalCapabilityRBAC = new CapabilityRBAC(config);
+  }
+  return globalCapabilityRBAC;
+}
+var RESOURCE_TYPE_TO_URI, OPERATION_TO_ACTION_SUFFIX, CapabilityRBAC, globalCapabilityRBAC;
+var init_CapabilityRBAC = chunkHCCQLAA4_cjs.__esm({
+  "src/compiler/identity/CapabilityRBAC.ts"() {
+    init_AgentRBAC();
+    init_CapabilityToken();
+    init_CapabilityTokenIssuer();
+    RESOURCE_TYPE_TO_URI = {
+      ["source_file" /* SOURCE_FILE */]: `${HOLOSCRIPT_RESOURCE_SCHEME}source`,
+      ["ast" /* AST */]: `${HOLOSCRIPT_RESOURCE_SCHEME}ast`,
+      ["ir" /* IR */]: `${HOLOSCRIPT_RESOURCE_SCHEME}ir`,
+      ["code" /* CODE */]: `${HOLOSCRIPT_RESOURCE_SCHEME}code`,
+      ["output" /* OUTPUT */]: `${HOLOSCRIPT_RESOURCE_SCHEME}output`,
+      ["config" /* CONFIG */]: `${HOLOSCRIPT_RESOURCE_SCHEME}config`
+    };
+    OPERATION_TO_ACTION_SUFFIX = {
+      read: "read",
+      write: "write",
+      execute: "execute",
+      transform: "transform"
+    };
+    CapabilityRBAC = class {
+      constructor(config = {}) {
+        this.denialCounter = 0;
+        this.rbac = config.rbac ?? getRBAC();
+        this.capabilityIssuer = config.capabilityIssuer ?? getCapabilityTokenIssuer();
+        this.strategy = config.strategy ?? "capability-first";
+        this.semantics = new HoloScriptCapabilitySemantics();
+      }
+      buildDenialReceipt(request, deniedBy, opts) {
+        const resourceUri = request.resourceType ? this.buildResourceUri(request.resourceType, request.resourcePath) : "unknown";
+        const action = request.resourceType && request.operation ? this.buildAction(request.resourceType, request.operation) : request.operation || "unknown";
+        return {
+          auditId: `deny-${++this.denialCounter}-${Date.now()}`,
+          deniedAction: action,
+          requestedResource: resourceUri,
+          deniedBy,
+          requiredCapability: opts?.requiredCapability,
+          suggestedFix: opts?.suggestedFix,
+          timestamp: (/* @__PURE__ */ new Date()).toISOString()
+        };
+      }
+      // -----------------------------------------------------------------------
+      // Core access check
+      // -----------------------------------------------------------------------
+      /**
+       * Check access using dual-mode resolution.
+       *
+       * Depending on the configured strategy, this will try JWT and/or UCAN
+       * verification and return the result.
+       */
+      checkAccess(request) {
+        const hasCapability = !!request.capabilityToken && !!request.issuerPublicKey;
+        const hasJwt = !!request.token;
+        switch (this.strategy) {
+          case "capability-only":
+            if (!hasCapability) {
+              return {
+                allowed: false,
+                reason: "Capability token required (strategy: capability-only)",
+                mode: "capability",
+                denial: this.buildDenialReceipt(request, "no-token", {
+                  suggestedFix: "Provide a UCAN capability token with issuerPublicKey"
+                })
+              };
+            }
+            return this.checkCapability(request);
+          case "rbac-only":
+            if (!hasJwt) {
+              return {
+                allowed: false,
+                reason: "JWT token required (strategy: rbac-only)",
+                mode: "rbac",
+                denial: this.buildDenialReceipt(request, "no-token", {
+                  suggestedFix: "Provide a JWT RBAC token"
+                })
+              };
+            }
+            return this.checkRBAC(request);
+          case "rbac-first":
+            if (hasJwt) {
+              const rbacResult = this.checkRBAC(request);
+              if (rbacResult.allowed) return rbacResult;
+            }
+            if (hasCapability) {
+              return this.checkCapability(request);
+            }
+            return {
+              allowed: false,
+              reason: "No valid token provided",
+              mode: "rbac",
+              denial: this.buildDenialReceipt(request, "no-token", {
+                suggestedFix: "Provide a JWT token or UCAN capability token"
+              })
+            };
+          case "capability-first":
+          default:
+            if (hasCapability) {
+              const capResult = this.checkCapability(request);
+              if (capResult.allowed) return capResult;
+            }
+            if (hasJwt) {
+              return this.checkRBAC(request);
+            }
+            return {
+              allowed: false,
+              reason: "No valid token provided",
+              mode: "capability",
+              denial: this.buildDenialReceipt(request, "no-token", {
+                suggestedFix: "Provide a UCAN capability token or JWT token"
+              })
+            };
+        }
+      }
+      // -----------------------------------------------------------------------
+      // UCAN capability check
+      // -----------------------------------------------------------------------
+      /**
+       * Verify access using a UCAN capability token.
+       */
+      checkCapability(request) {
+        const { capabilityToken, issuerPublicKey, resourceType, operation, resourcePath } = request;
+        if (!capabilityToken || !issuerPublicKey) {
+          return {
+            allowed: false,
+            reason: "Missing capability token or issuer public key",
+            mode: "capability",
+            denial: this.buildDenialReceipt(request, "capability", {
+              suggestedFix: "Provide both capabilityToken and issuerPublicKey"
+            })
+          };
+        }
+        const verification = this.capabilityIssuer.verify(capabilityToken, issuerPublicKey);
+        if (!verification.valid) {
+          return {
+            allowed: false,
+            reason: `Capability token verification failed: ${verification.error}`,
+            mode: "capability",
+            capabilityVerification: verification,
+            denial: this.buildDenialReceipt(request, "capability", {
+              requiredCapability: "valid-signature",
+              suggestedFix: `Re-issue capability token: ${verification.error}`
+            })
+          };
+        }
+        if (verification.chain && !verification.chain.verified) {
+          return {
+            allowed: false,
+            reason: "Capability token chain verification failed (attenuation invariant violation)",
+            mode: "capability",
+            capabilityVerification: verification,
+            errorCode: "ATTENUATION_VIOLATION",
+            denial: this.buildDenialReceipt(request, "capability", {
+              requiredCapability: "valid-attenuation-chain",
+              suggestedFix: "Ensure delegated capabilities do not exceed parent scope"
+            })
+          };
+        }
+        const resourceUri = this.buildResourceUri(resourceType, resourcePath);
+        const action = this.buildAction(resourceType, operation);
+        const matchedCapability = capabilityToken.payload.att.find(
+          (cap) => this.semantics.canAccess(cap, resourceUri, action)
+        );
+        if (!matchedCapability) {
+          return {
+            allowed: false,
+            reason: `No capability grants access to resource "${resourceUri}" with action "${action}"`,
+            mode: "capability",
+            capabilityVerification: verification,
+            denial: this.buildDenialReceipt(request, "capability", {
+              requiredCapability: `${resourceUri}#${action}`,
+              suggestedFix: `Add capability { with: "${resourceUri}", can: "${action}" } to token`
+            })
+          };
+        }
+        return {
+          allowed: true,
+          mode: "capability",
+          matchedCapability,
+          capabilityVerification: verification
+        };
+      }
+      // -----------------------------------------------------------------------
+      // Legacy JWT RBAC check (delegates to existing AgentRBAC)
+      // -----------------------------------------------------------------------
+      /**
+       * Verify access using the legacy JWT RBAC system.
+       */
+      checkRBAC(request) {
+        const decision = this.rbac.checkAccess(request);
+        const result = {
+          ...decision,
+          mode: "rbac"
+        };
+        if (!decision.allowed) {
+          result.denial = this.buildDenialReceipt(request, "rbac", {
+            requiredCapability: `${request.resourceType}/${request.operation}`,
+            suggestedFix: decision.reason ? `RBAC denied: ${decision.reason}` : "Ensure JWT token grants the required role/permission"
+          });
+        }
+        return result;
+      }
+      // -----------------------------------------------------------------------
+      // URI / action building
+      // -----------------------------------------------------------------------
+      /**
+       * Build a UCAN resource URI from a ResourceType and optional path.
+       */
+      buildResourceUri(resourceType, resourcePath) {
+        const base = RESOURCE_TYPE_TO_URI[resourceType];
+        if (resourcePath) {
+          return `${base}/${resourcePath}`;
+        }
+        return base;
+      }
+      /**
+       * Build a UCAN action string from a ResourceType and operation.
+       */
+      buildAction(resourceType, operation) {
+        const prefixMap = {
+          ["source_file" /* SOURCE_FILE */]: "source",
+          ["ast" /* AST */]: "ast",
+          ["ir" /* IR */]: "ir",
+          ["code" /* CODE */]: "code",
+          ["output" /* OUTPUT */]: "output",
+          ["config" /* CONFIG */]: "config"
+        };
+        const prefix = prefixMap[resourceType];
+        const suffix = OPERATION_TO_ACTION_SUFFIX[operation] ?? operation;
+        return `${prefix}/${suffix}`;
+      }
+      // -----------------------------------------------------------------------
+      // Convenience methods (matching AgentRBAC API)
+      // -----------------------------------------------------------------------
+      /**
+       * Check if agent can read source (dual-mode).
+       */
+      canReadSource(tokenOrCapability, filePath) {
+        if (typeof tokenOrCapability === "string") {
+          return this.checkAccess({
+            token: tokenOrCapability,
+            resourceType: "source_file" /* SOURCE_FILE */,
+            operation: "read",
+            resourcePath: filePath
+          });
+        }
+        return this.checkAccess({
+          token: "",
+          capabilityToken: tokenOrCapability.token,
+          issuerPublicKey: tokenOrCapability.publicKey,
+          resourceType: "source_file" /* SOURCE_FILE */,
+          operation: "read",
+          resourcePath: filePath
+        });
+      }
+      /**
+       * Check if agent can modify AST (dual-mode).
+       */
+      canModifyAST(tokenOrCapability) {
+        if (typeof tokenOrCapability === "string") {
+          return this.checkAccess({
+            token: tokenOrCapability,
+            resourceType: "ast" /* AST */,
+            operation: "write"
+          });
+        }
+        return this.checkAccess({
+          token: "",
+          capabilityToken: tokenOrCapability.token,
+          issuerPublicKey: tokenOrCapability.publicKey,
+          resourceType: "ast" /* AST */,
+          operation: "write"
+        });
+      }
+      /**
+       * Check if agent can generate code (dual-mode).
+       */
+      canGenerateCode(tokenOrCapability) {
+        if (typeof tokenOrCapability === "string") {
+          return this.checkAccess({
+            token: tokenOrCapability,
+            resourceType: "code" /* CODE */,
+            operation: "write"
+          });
+        }
+        return this.checkAccess({
+          token: "",
+          capabilityToken: tokenOrCapability.token,
+          issuerPublicKey: tokenOrCapability.publicKey,
+          resourceType: "code" /* CODE */,
+          operation: "write"
+        });
+      }
+      /**
+       * Check if agent can export output (dual-mode).
+       */
+      canExport(tokenOrCapability, outputPath) {
+        if (typeof tokenOrCapability === "string") {
+          return this.checkAccess({
+            token: tokenOrCapability,
+            resourceType: "output" /* OUTPUT */,
+            operation: "write",
+            resourcePath: outputPath
+          });
+        }
+        return this.checkAccess({
+          token: "",
+          capabilityToken: tokenOrCapability.token,
+          issuerPublicKey: tokenOrCapability.publicKey,
+          resourceType: "output" /* OUTPUT */,
+          operation: "write",
+          resourcePath: outputPath
+        });
+      }
+      // -----------------------------------------------------------------------
+      // Accessors
+      // -----------------------------------------------------------------------
+      /**
+       * Get the underlying AgentRBAC instance.
+       */
+      getRBAC() {
+        return this.rbac;
+      }
+      /**
+       * Get the CapabilityTokenIssuer instance.
+       */
+      getCapabilityIssuer() {
+        return this.capabilityIssuer;
+      }
+      /**
+       * Get the current resolution strategy.
+       */
+      getStrategy() {
+        return this.strategy;
+      }
+    };
+    globalCapabilityRBAC = null;
+  }
+});
+
+// src/compiler/identity/SpatialMemoryZones.ts
+function getSpatialZoneEnforcer(config) {
+  if (!globalSpatialZoneEnforcer) {
+    globalSpatialZoneEnforcer = new SpatialZoneEnforcer(config);
+  }
+  return globalSpatialZoneEnforcer;
+}
+var SpatialZoneEnforcer, globalSpatialZoneEnforcer;
+var init_SpatialMemoryZones = chunkHCCQLAA4_cjs.__esm({
+  "src/compiler/identity/SpatialMemoryZones.ts"() {
+    init_AgentTokenIssuer();
+    SpatialZoneEnforcer = class {
+      constructor(config = {}) {
+        this.zones = /* @__PURE__ */ new Map();
+        this.policies = /* @__PURE__ */ new Map();
+        this.auditLog = [];
+        this.tokenIssuer = config.tokenIssuer ?? getTokenIssuer();
+        this.maxAuditEntries = config.maxAuditEntries ?? 1e4;
+      }
+      // -----------------------------------------------------------------------
+      // Zone Management
+      // -----------------------------------------------------------------------
+      /**
+       * Register a spatial zone.
+       */
+      registerZone(zone) {
+        this.zones.set(zone.id, zone);
+      }
+      /**
+       * Get a registered zone by ID.
+       */
+      getZone(zoneId) {
+        return this.zones.get(zoneId);
+      }
+      /**
+       * Remove a registered zone and its policy.
+       */
+      removeZone(zoneId) {
+        this.policies.delete(zoneId);
+        return this.zones.delete(zoneId);
+      }
+      /**
+       * Get all registered zone IDs.
+       */
+      getRegisteredZoneIds() {
+        return Array.from(this.zones.keys());
+      }
+      // -----------------------------------------------------------------------
+      // Policy Management
+      // -----------------------------------------------------------------------
+      /**
+       * Set the access policy for a zone.
+       */
+      setPolicy(policy) {
+        if (!this.zones.has(policy.zoneId)) {
+          throw new Error(`Cannot set policy for unregistered zone: ${policy.zoneId}`);
+        }
+        this.policies.set(policy.zoneId, policy);
+      }
+      /**
+       * Get the policy for a zone.
+       */
+      getPolicy(zoneId) {
+        return this.policies.get(zoneId);
+      }
+      // -----------------------------------------------------------------------
+      // Access Checks
+      // -----------------------------------------------------------------------
+      /**
+       * Check if an agent (identified by JWT token) can perform a spatial
+       * operation in a given zone.
+       *
+       * @param agentToken  JWT token issued by `AgentTokenIssuer`
+       * @param zoneId      Target zone identifier
+       * @param operation   The spatial permission required
+       * @returns           Access decision with reason
+       */
+      checkZoneAccess(agentToken, zoneId, operation) {
+        const verificationResult = this.tokenIssuer.verifyToken(agentToken);
+        if (!verificationResult.valid || !verificationResult.payload) {
+          const decision2 = {
+            allowed: false,
+            reason: `Token verification failed: ${verificationResult.error ?? "unknown error"}`
+          };
+          this.recordAudit("unknown", "unknown", zoneId, operation, false, decision2.reason);
+          return decision2;
+        }
+        const payload = verificationResult.payload;
+        const agentId = payload.sub;
+        const agentRole = payload.agent_role;
+        const zone = this.zones.get(zoneId);
+        if (!zone) {
+          const decision2 = {
+            allowed: false,
+            reason: `Zone not found: ${zoneId}`,
+            agentRole,
+            agentId
+          };
+          this.recordAudit(agentId, agentRole, zoneId, operation, false, decision2.reason);
+          return decision2;
+        }
+        const grantedPermissions = this.resolvePermissions(agentId, agentRole, zoneId, zone);
+        const allowed = grantedPermissions.includes(operation);
+        const reason = allowed ? `Access granted: agent ${agentId} has ${operation} in zone ${zoneId}` : `Access denied: agent ${agentId} lacks ${operation} in zone ${zoneId}`;
+        const decision = {
+          allowed,
+          reason,
+          agentRole,
+          agentId
+        };
+        this.recordAudit(agentId, agentRole, zoneId, operation, allowed, reason);
+        return decision;
+      }
+      /**
+       * Get all zone IDs that an agent can access (for at least one operation).
+       *
+       * @param agentToken  JWT token
+       * @returns           Array of accessible zone IDs
+       */
+      getAccessibleZones(agentToken) {
+        const verificationResult = this.tokenIssuer.verifyToken(agentToken);
+        if (!verificationResult.valid || !verificationResult.payload) {
+          return [];
+        }
+        const payload = verificationResult.payload;
+        const agentId = payload.sub;
+        const agentRole = payload.agent_role;
+        const accessibleZones = [];
+        for (const [zoneId, zone] of this.zones) {
+          const permissions = this.resolvePermissions(agentId, agentRole, zoneId, zone);
+          if (permissions.length > 0) {
+            accessibleZones.push(zoneId);
+          }
+        }
+        return accessibleZones;
+      }
+      /**
+       * Validate whether an agent can perform a spatial operation at a
+       * specific 3D position. The position is checked against all registered
+       * zones to find the enclosing zone(s), then permissions are evaluated.
+       *
+       * @param agentToken  JWT token
+       * @param position    3D position to check
+       * @param operation   Required spatial permission
+       * @returns           Access decision (aggregated across matching zones)
+       */
+      validateSpatialOperation(agentToken, position, operation) {
+        const verificationResult = this.tokenIssuer.verifyToken(agentToken);
+        if (!verificationResult.valid || !verificationResult.payload) {
+          const decision2 = {
+            allowed: false,
+            reason: `Token verification failed: ${verificationResult.error ?? "unknown error"}`
+          };
+          this.recordAudit("unknown", "unknown", "*position*", operation, false, decision2.reason);
+          return decision2;
+        }
+        const payload = verificationResult.payload;
+        const agentId = payload.sub;
+        const agentRole = payload.agent_role;
+        const containingZones = this.findZonesContainingPosition(position);
+        if (containingZones.length === 0) {
+          const decision2 = {
+            allowed: false,
+            reason: `No registered zone contains position (${position[0]}, ${position[1]}, ${position[2]})`,
+            agentRole,
+            agentId
+          };
+          this.recordAudit(agentId, agentRole, "*no-zone*", operation, false, decision2.reason);
+          return decision2;
+        }
+        for (const zone of containingZones) {
+          const permissions = this.resolvePermissions(agentId, agentRole, zone.id, zone);
+          if (permissions.includes(operation)) {
+            const decision2 = {
+              allowed: true,
+              reason: `Access granted via zone ${zone.id} at position (${position[0]}, ${position[1]}, ${position[2]})`,
+              agentRole,
+              agentId
+            };
+            this.recordAudit(agentId, agentRole, zone.id, operation, true, decision2.reason);
+            return decision2;
+          }
+        }
+        const zoneIds = containingZones.map((z2) => z2.id).join(", ");
+        const decision = {
+          allowed: false,
+          reason: `Access denied in all containing zones [${zoneIds}] at position (${position[0]}, ${position[1]}, ${position[2]})`,
+          agentRole,
+          agentId
+        };
+        this.recordAudit(agentId, agentRole, containingZones[0].id, operation, false, decision.reason);
+        return decision;
+      }
+      // -----------------------------------------------------------------------
+      // Audit Trail
+      // -----------------------------------------------------------------------
+      /**
+       * Get the full GDPR audit trail.
+       */
+      getAuditLog() {
+        return this.auditLog;
+      }
+      /**
+       * Get audit entries for a specific agent (GDPR data subject access).
+       */
+      getAuditEntriesForAgent(agentId) {
+        return this.auditLog.filter((entry) => entry.agentId === agentId);
+      }
+      /**
+       * Get audit entries for a specific zone.
+       */
+      getAuditEntriesForZone(zoneId) {
+        return this.auditLog.filter((entry) => entry.zoneId === zoneId);
+      }
+      /**
+       * Clear audit entries for a specific agent (GDPR right-to-erasure).
+       *
+       * @returns Number of entries removed
+       */
+      eraseAuditEntriesForAgent(agentId) {
+        const before = this.auditLog.length;
+        this.auditLog = this.auditLog.filter((entry) => entry.agentId !== agentId);
+        return before - this.auditLog.length;
+      }
+      /**
+       * Clear all audit entries.
+       */
+      clearAuditLog() {
+        this.auditLog = [];
+      }
+      // -----------------------------------------------------------------------
+      // Internal Helpers
+      // -----------------------------------------------------------------------
+      /**
+       * Resolve the effective spatial permissions for an agent in a zone.
+       *
+       * Resolution order:
+       * 1. Agent-specific overrides (highest priority)
+       * 2. Role-based permissions from policy
+       * 3. Policy default permissions
+       * 4. Classification-based fallback (if no policy exists)
+       */
+      resolvePermissions(agentId, agentRole, zoneId, zone) {
+        const policy = this.policies.get(zoneId);
+        if (policy) {
+          if (policy.agentOverrides[agentId]) {
+            return policy.agentOverrides[agentId];
+          }
+          if (policy.rolePermissions[agentRole]) {
+            return policy.rolePermissions[agentRole];
+          }
+          return policy.defaultPermissions;
+        }
+        return this.getClassificationDefaults(zone.classification);
+      }
+      /**
+       * Get default permissions based on zone classification.
+       */
+      getClassificationDefaults(classification) {
+        switch (classification) {
+          case "public":
+            return ["spatial:read" /* SPATIAL_READ */];
+          case "restricted":
+            return ["spatial:read" /* SPATIAL_READ */];
+          case "private":
+            return [];
+          case "sensitive":
+            return [];
+          default:
+            return [];
+        }
+      }
+      /**
+       * Find all zones whose bounds contain the given position.
+       *
+       * Named zones (no explicit bounds) are NOT included in positional
+       * lookups because their bounds are resolved at runtime.
+       */
+      findZonesContainingPosition(position) {
+        const result = [];
+        for (const zone of this.zones.values()) {
+          if (!zone.bounds) continue;
+          if (this.isPositionInBounds(position, zone.bounds)) {
+            result.push(zone);
+          }
+        }
+        return result;
+      }
+      /**
+       * Check if a 3D position is within the given bounds.
+       *
+       * For geospatial bounds: x=lat, y=lon, z=alt
+       * For local bounds: x=X, y=Y, z=Z
+       * Named bounds always return false (resolved at runtime).
+       */
+      isPositionInBounds(position, bounds) {
+        switch (bounds.type) {
+          case "geospatial": {
+            const inLat = position[0] >= bounds.minLat && position[0] <= bounds.maxLat;
+            const inLon = position[1] >= bounds.minLon && position[1] <= bounds.maxLon;
+            let inAlt = true;
+            if (bounds.minAlt !== void 0 && bounds.maxAlt !== void 0) {
+              inAlt = position[2] >= bounds.minAlt && position[2] <= bounds.maxAlt;
+            }
+            return inLat && inLon && inAlt;
+          }
+          case "local": {
+            return position[0] >= bounds.minX && position[0] <= bounds.maxX && position[1] >= bounds.minY && position[1] <= bounds.maxY && position[2] >= bounds.minZ && position[2] <= bounds.maxZ;
+          }
+          case "named":
+            return false;
+          default:
+            return false;
+        }
+      }
+      /**
+       * Record a GDPR audit entry.
+       */
+      recordAudit(agentId, agentRole, zoneId, operation, allowed, reason) {
+        const entry = {
+          timestamp: Date.now(),
+          agentId,
+          agentRole,
+          zoneId,
+          operation,
+          allowed,
+          reason
+        };
+        this.auditLog.push(entry);
+        if (this.auditLog.length > this.maxAuditEntries) {
+          this.auditLog = this.auditLog.slice(-this.maxAuditEntries);
+        }
+      }
+    };
+    globalSpatialZoneEnforcer = null;
+  }
+});
+function isCapabilityTokenCredential(token) {
+  if (!token || typeof token === "string") return false;
+  return typeof token === "object" && "capabilityToken" in token && "issuerPublicKey" in token && token.capabilityToken != null && typeof token.issuerPublicKey === "string";
+}
+function escapeCStyle(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/'/g, "\\'").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\0/g, "\\0");
+}
+function escapeGDScript(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/'/g, "\\'").replace(/\n/g, "\\n").replace(/\t/g, "\\t").replace(/\0/g, "");
+}
+function escapeJSX(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;").replace(/\{/g, "&#123;").replace(/\}/g, "&#125;");
+}
+function escapeXML(value) {
+  return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
+}
+function escapeShader(value) {
+  return value.replace(/\\/g, "").replace(/\*/g, "").replace(/\//g, "").replace(/#/g, "").replace(/\n/g, " ").replace(/\r/g, "");
+}
+function escapePython(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/'/g, "\\'").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/\0/g, "\\x00");
+}
+function escapeLua(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/'/g, "\\'").replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\0/g, "\\0");
+}
+function escapeUSD(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r");
+}
+function escapeJSON(value) {
+  return value.replace(/\\/g, "\\\\").replace(/"/g, '\\"').replace(/\n/g, "\\n").replace(/\r/g, "\\r").replace(/\t/g, "\\t").replace(/[\x00-\x1f]/g, (ch) => "\\u" + ch.charCodeAt(0).toString(16).padStart(4, "0"));
+}
+function escapeStringValue(value, target) {
+  if (!value) return value;
+  switch (target) {
+    case "Solidity":
+    case "CSharp":
+    case "Swift":
+    case "Kotlin":
+    case "TypeScript":
+    case "Rust":
+      return escapeCStyle(value);
+    case "GDScript":
+      return escapeGDScript(value);
+    case "JSX":
+      return escapeJSX(value);
+    case "XML":
+      return escapeXML(value);
+    case "GLSL":
+    case "HLSL":
+    case "WGSL":
+      return escapeShader(value);
+    case "Python":
+      return escapePython(value);
+    case "Lua":
+      return escapeLua(value);
+    case "USD":
+      return escapeUSD(value);
+    case "JSON":
+      return escapeJSON(value);
+    default:
+      return value;
+  }
+}
+function createTestCompilerToken() {
+  return "";
+}
+var COMPILER_CLASS_TO_ANS_NAME; exports.UnauthorizedCompilerAccessError = void 0; exports.CompilerBase = void 0;
+var init_CompilerBase = chunkHCCQLAA4_cjs.__esm({
+  "src/compiler/CompilerBase.ts"() {
+    init_AgentRBAC();
+    init_CapabilityRBAC();
+    init_ANSNamespace();
+    init_SpatialMemoryZones();
+    init_CompilerDocumentationGenerator();
+    COMPILER_CLASS_TO_ANS_NAME = {
+      UnityCompiler: "unity",
+      UnrealCompiler: "unreal",
+      GodotCompiler: "godot",
+      VRChatCompiler: "vrchat",
+      OpenXRCompiler: "openxr",
+      OpenXRSpatialEntitiesCompiler: "openxr-spatial-entities",
+      VisionOSCompiler: "visionos",
+      ARCompiler: "ar",
+      AndroidXRCompiler: "android-xr",
+      AIGlassesCompiler: "ai-glasses",
+      AndroidCompiler: "android",
+      IOSCompiler: "ios",
+      BabylonCompiler: "babylon",
+      WebGPUCompiler: "webgpu",
+      R3FCompiler: "r3f",
+      PlayCanvasCompiler: "playcanvas",
+      ThreeJSCompiler: "threejs",
+      WASMCompiler: "wasm",
+      TSLCompiler: "tsl",
+      URDFCompiler: "urdf",
+      SDFCompiler: "sdf",
+      USDPhysicsCompiler: "usd",
+      GLTFPipeline: "gltf",
+      GaussianSplattingCompiler: "3dgs",
+      DTDLCompiler: "dtdl",
+      NFTMarketplaceCompiler: "nft-marketplace",
+      SCMCompiler: "scm",
+      VRRCompiler: "vrr",
+      A2AAgentCardCompiler: "a2a-agent-card",
+      MultiLayerCompiler: "multi-layer",
+      IncrementalCompiler: "incremental",
+      StateCompiler: "state",
+      TraitCompositionCompiler: "trait-composition",
+      DomainBlockCompilerMixin: "domain-block",
+      NIRCompiler: "nir",
+      URDFToUSDZConverter: "urdf",
+      QuiltCompiler: "quilt",
+      MVHEVCCompiler: "mv-hevc",
+      NodeServiceCompiler: "node-service",
+      NextJSAPICompiler: "nextjs-api",
+      MCPConfigCompiler: "domain-block",
+      AgentInferenceCompiler: "agent-inference"
+    };
+    exports.UnauthorizedCompilerAccessError = class extends Error {
+      constructor(decision, operation, compilerName) {
+        super(
+          `[${compilerName}] Unauthorized ${operation}: ${decision.reason || "Access denied"}
+Required Permission: ${decision.requiredPermission || "unknown"}`
+        );
+        this.decision = decision;
+        this.operation = operation;
+        this.compilerName = compilerName;
+        this.name = "UnauthorizedCompilerAccessError";
+      }
+    };
+    exports.CompilerBase = class {
+      constructor() {
+        this.rbac = getRBAC();
+        /**
+         * Lazy-initialized CapabilityRBAC adapter for UCAN token verification.
+         * Only created when a UCAN capability token is first encountered.
+         */
+        this._capabilityRBAC = null;
+        /**
+         * Lazy-initialized SpatialZoneEnforcer for compile-time spatial zone checks.
+         * Only created when spatial zone validation is first invoked.
+         */
+        this._spatialZoneEnforcer = null;
+        /**
+         * Lazy-initialized documentation generator for triple-output compilation.
+         * Only created when generateDocs option is enabled.
+         */
+        this._documentationGenerator = null;
+      }
+      /**
+       * Sanitizes a string value for injection into a specific compiler target language.
+       * Mitigates Cross-Agent Compilation Injection attacks (e.g. CWE-94).
+       *
+       * @param value The raw string value from the AST
+       * @param target The compilation target language
+       * @returns The escaped/sanitized string safe for interpolation
+       */
+      escapeStringValue(value, target) {
+        return escapeStringValue(value, target);
+      }
+      // =========================================================================
+      // P3 Migration Bridge: Dual-mode token support
+      // =========================================================================
+      /**
+       * Get or create the CapabilityRBAC adapter instance.
+       *
+       * Lazily initialized to avoid overhead when only JWT tokens are used.
+       */
+      getCapabilityRBAC() {
+        if (!this._capabilityRBAC) {
+          this._capabilityRBAC = getCapabilityRBAC();
+        }
+        return this._capabilityRBAC;
+      }
+      /**
+       * Get or create the SpatialZoneEnforcer instance.
+       *
+       * Lazily initialized to avoid overhead when spatial zones are not in use.
+       */
+      getSpatialZoneEnforcer() {
+        if (!this._spatialZoneEnforcer) {
+          this._spatialZoneEnforcer = getSpatialZoneEnforcer();
+        }
+        return this._spatialZoneEnforcer;
+      }
+      /**
+       * Get or create the CompilerDocumentationGenerator instance.
+       *
+       * Lazily initialized to avoid overhead when documentation generation is disabled.
+       *
+       * @param options - Documentation generator options
+       */
+      getDocumentationGenerator(options) {
+        if (!this._documentationGenerator) {
+          this._documentationGenerator = new exports.CompilerDocumentationGenerator(options);
+        }
+        return this._documentationGenerator;
+      }
+      /**
+       * Generate triple-output documentation for a compilation result.
+       *
+       * This is a utility method that subclasses can call after successful compilation
+       * to generate llms.txt, .well-known/mcp, and markdown documentation.
+       *
+       * @param composition - Parsed HoloScript composition AST
+       * @param compiledCode - The compiled output code
+       * @param options - Documentation generator options
+       * @returns Triple-output documentation bundle
+       *
+       * @example
+       * ```typescript
+       * compile(composition: HoloComposition, agentToken: string, options?: MyCompilerOptions): CompilationResult {
+       *   this.validateCompilerAccess(agentToken);
+       *   const code = this.performCompilation(composition);
+       *
+       *   if (options?.generateDocs) {
+       *     const docs = this.generateDocumentation(composition, code, options.docsOptions);
+       *     return { output: code, documentation: docs };
+       *   }
+       *
+       *   return { output: code };
+       * }
+       * ```
+       */
+      generateDocumentation(composition, compiledCode, options, generationMeta) {
+        const generator = this.getDocumentationGenerator(options);
+        return generator.generate(composition, this.compilerName, compiledCode, generationMeta);
+      }
+      /**
+       * Normalize primary compiler output for llms.txt / markdown (avoid huge/binary payloads).
+       */
+      serializeOutputForDocumentation(output) {
+        if (typeof output === "string") {
+          return output.length > 2e5 ? output.slice(0, 2e5) : output;
+        }
+        if (output && typeof output === "object") {
+          const rec = output;
+          if ("gltf" in rec || "buffers" in rec) {
+            return {
+              _kind: "binary_or_gltf_bundle",
+              keys: Object.keys(rec).join(",")
+            };
+          }
+          const vals = Object.values(rec);
+          if (vals.length > 0 && vals.every((v) => typeof v === "string")) {
+            return rec;
+          }
+          try {
+            const json = JSON.stringify(output);
+            return json.length > 2e5 ? json.slice(0, 2e5) : json;
+          } catch {
+            return { _kind: "non_serializable", keys: Object.keys(rec).join(",") };
+          }
+        }
+        return String(output);
+      }
+      /** Short digest for MCP card `_meta.holoscript.compilation_digest`. */
+      digestForDocumentation(docPayload) {
+        const payload = typeof docPayload === "string" ? docPayload : JSON.stringify(docPayload);
+        return crypto3.createHash("sha256").update(payload).digest("hex").slice(0, 16);
+      }
+      /**
+       * When `generateDocs` is set on {@link BaseCompilerOptions}, returns a {@link CompilationResult}
+       * with `documentation` (llms.txt, .well-known/mcp, markdown); otherwise returns `output` unchanged.
+       */
+      withTripleOutputIfRequested(composition, output, opts) {
+        if (!opts?.generateDocs) {
+          return output;
+        }
+        const docPayload = this.serializeOutputForDocumentation(output);
+        const generationMeta = {
+          compilationDigest: this.digestForDocumentation(docPayload)
+        };
+        const documentation = this.generateDocumentation(
+          composition,
+          docPayload,
+          opts.docsOptions,
+          generationMeta
+        );
+        return { output, documentation };
+      }
+      /**
+       * Get the ANS capability namespace path for this compiler.
+       *
+       * Subclasses MAY override this to specify their exact ANS namespace.
+       * The default implementation derives it from `compilerName` using the
+       * `COMPILER_CLASS_TO_ANS_NAME` lookup table.
+       *
+       * @returns The ANS capability path (e.g., "/compile/web3d/r3f"), or
+       *          `undefined` if the compiler has no registered ANS namespace.
+       *
+       * @example
+       * ```typescript
+       * // Default: derives from compilerName
+       * class R3FCompiler extends CompilerBase {
+       *   protected readonly compilerName = 'R3FCompiler';
+       *   // getRequiredCapability() returns '/compile/web3d/r3f' automatically
+       * }
+       *
+       * // Override: explicit namespace
+       * class CustomCompiler extends CompilerBase {
+       *   protected readonly compilerName = 'CustomCompiler';
+       *   protected getRequiredCapability(): string | undefined {
+       *     return '/compile/web3d/r3f';
+       *   }
+       * }
+       * ```
+       */
+      getRequiredCapability() {
+        const ansName = COMPILER_CLASS_TO_ANS_NAME[this.compilerName];
+        if (ansName && isValidCompilerName(ansName)) {
+          return COMPILER_ANS_MAP[ansName];
+        }
+        if (process.env["NODE_ENV"] !== "test") {
+          console.warn(
+            `[CompilerBase] Compiler '${this.compilerName}' has no ANS namespace entry. Add it to COMPILER_CLASS_TO_ANS_NAME to enable UCAN capability enforcement.`
+          );
+        }
+        return void 0;
+      }
+      // =========================================================================
+      // Legacy JWT RBAC validation (unchanged from v1.0.0)
+      // =========================================================================
+      /**
+       * Validate agent can read AST
+       * Skips validation when no token is provided.
+       * In production (`NODE_ENV=production`) a warning is emitted when no token is
+       * supplied — callers should always authenticate compiler access in production.
+       *
+       * @param agentToken - Agent JWT token (optional)
+       * @throws UnauthorizedCompilerAccessError if token is provided but invalid
+       */
+      validateASTAccess(agentToken) {
+        if (!agentToken) {
+          if (process.env["NODE_ENV"] === "production") {
+            console.warn(
+              `[${this.compilerName}] validateASTAccess called without a token in production. All compiler calls should be authenticated. Pass an agent token to enforce RBAC.`
+            );
+          }
+          return;
+        }
+        const decision = this.rbac.checkAccess({
+          token: agentToken,
+          resourceType: "ast" /* AST */,
+          operation: "read",
+          expectedWorkflowStep: "generate_assembly" /* GENERATE_ASSEMBLY */
+        });
+        if (!decision.allowed) {
+          throw new exports.UnauthorizedCompilerAccessError(decision, "AST access", this.compilerName);
+        }
+      }
+      /**
+       * Validate agent can generate code
+       * Skips validation when no token is provided.
+       * In production (`NODE_ENV=production`) a warning is emitted when no token is
+       * supplied — callers should always authenticate compiler access in production.
+       *
+       * @param agentToken - Agent JWT token (optional)
+       * @throws UnauthorizedCompilerAccessError if token is provided but invalid
+       */
+      validateCodeGeneration(agentToken) {
+        if (!agentToken) {
+          if (process.env["NODE_ENV"] === "production") {
+            console.warn(
+              `[${this.compilerName}] validateCodeGeneration called without a token in production. All compiler calls should be authenticated. Pass an agent token to enforce RBAC.`
+            );
+          }
+          return;
+        }
+        const decision = this.rbac.checkAccess({
+          token: agentToken,
+          resourceType: "code" /* CODE */,
+          operation: "write",
+          expectedWorkflowStep: "generate_assembly" /* GENERATE_ASSEMBLY */
+        });
+        if (!decision.allowed) {
+          throw new exports.UnauthorizedCompilerAccessError(decision, "code generation", this.compilerName);
+        }
+      }
+      /**
+       * Validate agent can write to output path
+       * Skips validation when no token is provided.
+       * In production (`NODE_ENV=production`) a warning is emitted when no token is
+       * supplied — callers should always authenticate compiler access in production.
+       *
+       * @param agentToken - Agent JWT token (optional)
+       * @param outputPath - Target output file path
+       * @throws UnauthorizedCompilerAccessError if token is provided but invalid
+       */
+      validateOutputPath(agentToken, outputPath) {
+        if (!agentToken) {
+          if (process.env["NODE_ENV"] === "production") {
+            console.warn(
+              `[${this.compilerName}] validateOutputPath called without a token in production. All compiler calls should be authenticated. Pass an agent token to enforce RBAC.`
+            );
+          }
+          return;
+        }
+        const decision = this.rbac.checkAccess({
+          token: agentToken,
+          resourceType: "output" /* OUTPUT */,
+          operation: "write",
+          resourcePath: outputPath,
+          expectedWorkflowStep: "serialize" /* SERIALIZE */
+        });
+        if (!decision.allowed) {
+          throw new exports.UnauthorizedCompilerAccessError(
+            decision,
+            `output write to '${outputPath}'`,
+            this.compilerName
+          );
+        }
+      }
+      // =========================================================================
+      // UCAN Capability Token validation (P3 Migration Bridge)
+      // =========================================================================
+      /**
+       * Validate compiler access using a UCAN capability token.
+       *
+       * Checks that the capability token grants access to the required resources
+       * (AST read, CODE write, and optionally OUTPUT write) using the
+       * CapabilityRBAC adapter.
+       *
+       * @param credential - UCAN capability token credential
+       * @param outputPath - Optional output path for scope validation
+       * @throws UnauthorizedCompilerAccessError if any capability check fails
+       */
+      validateCapabilityAccess(credential, outputPath) {
+        const capRBAC = this.getCapabilityRBAC();
+        const astDecision = capRBAC.checkAccess({
+          token: "",
+          capabilityToken: credential.capabilityToken,
+          issuerPublicKey: credential.issuerPublicKey,
+          resourceType: "ast" /* AST */,
+          operation: "read"
+        });
+        if (!astDecision.allowed) {
+          throw new exports.UnauthorizedCompilerAccessError(astDecision, "AST access", this.compilerName);
+        }
+        const codeDecision = capRBAC.checkAccess({
+          token: "",
+          capabilityToken: credential.capabilityToken,
+          issuerPublicKey: credential.issuerPublicKey,
+          resourceType: "code" /* CODE */,
+          operation: "write"
+        });
+        if (!codeDecision.allowed) {
+          throw new exports.UnauthorizedCompilerAccessError(codeDecision, "code generation", this.compilerName);
+        }
+        if (outputPath) {
+          const outputDecision = capRBAC.checkAccess({
+            token: "",
+            capabilityToken: credential.capabilityToken,
+            issuerPublicKey: credential.issuerPublicKey,
+            resourceType: "output" /* OUTPUT */,
+            operation: "write",
+            resourcePath: outputPath
+          });
+          if (!outputDecision.allowed) {
+            throw new exports.UnauthorizedCompilerAccessError(
+              outputDecision,
+              `output write to '${outputPath}'`,
+              this.compilerName
+            );
+          }
+        }
+      }
+      // =========================================================================
+      // Spatial Memory Zone validation
+      // =========================================================================
+      /**
+       * Validate spatial zone access for the current compilation.
+       *
+       * This step runs **after** RBAC/UCAN token verification and enforces
+       * compile-time spatial zone permissions when zones are registered.
+       *
+       * **Backward compatible**: When no zones are registered in the global
+       * SpatialZoneEnforcer, this method is a no-op.
+       *
+       * **Non-blocking**: Zone enforcement failures are logged as warnings
+       * but do NOT throw or block compilation. This allows gradual rollout
+       * of spatial zone policies without breaking existing pipelines.
+       *
+       * @param agentToken - JWT token string (spatial zones use JWT verification)
+       */
+      validateSpatialZoneAccess(agentToken) {
+        if (!agentToken) return;
+        const enforcer = this.getSpatialZoneEnforcer();
+        const zoneIds = enforcer.getRegisteredZoneIds();
+        if (zoneIds.length === 0) return;
+        for (const zoneId of zoneIds) {
+          const decision = enforcer.checkZoneAccess(
+            agentToken,
+            zoneId,
+            "spatial:read" /* SPATIAL_READ */
+          );
+          if (!decision.allowed) {
+            console.warn(
+              `[${this.compilerName}] Spatial zone access warning: agent ${decision.agentId ?? "unknown"} denied SPATIAL_READ in zone "${zoneId}": ${decision.reason}`
+            );
+          }
+        }
+      }
+      // =========================================================================
+      // Dual-mode access validation (P3 Migration Bridge)
+      // =========================================================================
+      /**
+       * Validate all compiler permissions in single call (dual-mode).
+       *
+       * **P3 Migration Bridge**: This method now accepts both JWT RBAC tokens
+       * (string) and UCAN capability tokens (CapabilityTokenCredential).
+       *
+       * Token routing:
+       * - `undefined` / `null` / empty string: Skip all validation (backwards compatibility)
+       * - `string` (non-empty): Route to legacy JWT RBAC via AgentRBAC.checkAccess()
+       * - `CapabilityTokenCredential`: Route to UCAN via CapabilityRBAC.checkAccess()
+       *
+       * Convenience method combining AST access + code generation + optional output validation.
+       * Skips ALL validation when no token is provided (backwards compatibility / testing).
+       *
+       * @param agentToken - JWT token string OR UCAN CapabilityTokenCredential (optional)
+       * @param outputPath - Optional output path
+       * @throws UnauthorizedCompilerAccessError if any validation fails
+       */
+      validateCompilerAccess(agentToken, outputPath) {
+        if (!agentToken) return;
+        if (isCapabilityTokenCredential(agentToken)) {
+          this.validateCapabilityAccess(agentToken, outputPath);
+          return;
+        }
+        this.validateASTAccess(agentToken);
+        this.validateCodeGeneration(agentToken);
+        if (outputPath) {
+          this.validateOutputPath(agentToken, outputPath);
+        }
+        this.validateSpatialZoneAccess(agentToken);
+      }
+      // =========================================================================
+      // Cultural compatibility validation
+      // =========================================================================
+      /**
+       * Extract cultural profile from an agent token.
+       *
+       * @param agentToken - JWT token string (capability tokens do not carry cultural profiles)
+       * @returns The cultural profile if present, or null
+       */
+      extractCulturalProfile(agentToken) {
+        if (!agentToken) return null;
+        return this.rbac.extractCulturalProfile(agentToken);
+      }
+      /**
+       * Validate cultural compatibility across multiple agent tokens.
+       *
+       * Subclasses can call this during multi-agent compilation to ensure
+       * all participating agents have compatible cultural profiles before
+       * proceeding with code generation.
+       *
+       * @param agentTokens - Map of agent name to JWT token
+       * @param normSets    - Optional map of agent name to norm_set arrays
+       * @returns Cultural compatibility result, or null if fewer than 2 agents
+       *          have cultural profiles
+       */
+      validateCulturalCompatibility(agentTokens, normSets) {
+        return this.rbac.validateCulturalCompatibility(agentTokens, normSets);
+      }
+    };
+  }
+});
+
+exports.createTestCompilerToken = createTestCompilerToken;
 exports.criticalMassForChange = criticalMassForChange;
+exports.deserializeNormProvenance = deserializeNormProvenance;
+exports.escapeStringValue = escapeStringValue;
 exports.getBuiltinNorm = getBuiltinNorm;
-exports.getCapabilityTokenIssuer = getCapabilityTokenIssuer;
 exports.getRBAC = getRBAC;
-exports.getTokenIssuer = getTokenIssuer;
+exports.init_ANSNamespace = init_ANSNamespace;
 exports.init_AgentRBAC = init_AgentRBAC;
-exports.init_AgentTokenIssuer = init_AgentTokenIssuer;
-exports.init_CapabilityToken = init_CapabilityToken;
-exports.init_CapabilityTokenIssuer = init_CapabilityTokenIssuer;
+exports.init_CompilerBase = init_CompilerBase;
+exports.init_CompilerDocumentationGenerator = init_CompilerDocumentationGenerator;
 exports.init_CultureTraits = init_CultureTraits;
+exports.isCapabilityTokenCredential = isCapabilityTokenCredential;
+exports.normalizeNormProvenance = normalizeNormProvenance;
 exports.normsByCategory = normsByCategory;
-//# sourceMappingURL=chunk-AIUXRS74.cjs.map
-//# sourceMappingURL=chunk-AIUXRS74.cjs.map
+exports.serializeNormProvenance = serializeNormProvenance;
+//# sourceMappingURL=chunk-RMHC2VG7.cjs.map
+//# sourceMappingURL=chunk-RMHC2VG7.cjs.map