@hongmaple0820/scale-engine 0.26.0 → 0.27.0

package/dist/runtime/AiOsRuntime.js

@@ -0,0 +1,142 @@
+import { resolve } from 'node:path';
+import { buildContextPack, scanContextBudget, } from '../context/ContextBudget.js';
+import { createGovernanceRoiReport, } from '../governance/GovernanceRoi.js';
+import { evaluateProgressiveGovernance, } from '../governance/ProgressiveGovernance.js';
+import { MemoryFabric, recallMemoryProviders, } from '../memory/index.js';
+import { createSkillPlan, loadSkillRoutingPolicy, } from '../skills/routing/index.js';
+import { SCALE_ENGINE_VERSION } from '../version.js';
+export async function createAiOsPlan(input) {
+    const projectDir = resolve(input.projectDir ?? process.cwd());
+    const scaleDir = input.scaleDir ?? '.scale';
+    const level = normalizeSkillTaskLevel(input.level);
+    const files = input.files ?? [];
+    const services = input.services ?? [];
+    const taskId = input.taskId;
+    const budget = input.budget ?? 8_000;
+    const governance = evaluateProgressiveGovernance({
+        task: input.task,
+        changedFiles: files,
+        requestedMode: input.requestedMode,
+    });
+    const contextBudget = scanContextBudget({ projectDir, scaleDir, maxTaskTokens: budget });
+    const context = buildContextPack({
+        projectDir,
+        scaleDir,
+        task: input.task,
+        taskId,
+        level,
+        files,
+        budget,
+    });
+    const memoryRecall = await recallMemoryProviders({
+        projectDir,
+        scaleDir,
+        query: [input.task, files.join(' ')].filter(Boolean).join('\n'),
+        task: input.task,
+        files,
+        limit: input.memoryTopK ?? 5,
+    });
+    const memoryPack = await new MemoryFabric({
+        projectDir,
+        scaleDir,
+        knowledgeBase: input.knowledgeBase,
+    }).createContextPack({
+        task: input.task,
+        taskId,
+        level,
+        files,
+        budgetTokens: Math.max(1, Math.floor(budget / 2)),
+        knowledgeTopK: input.memoryTopK,
+    });
+    const skillPolicy = loadSkillRoutingPolicy(projectDir, scaleDir);
+    const skillPlan = createSkillPlan({
+        taskId: taskId ?? `AIOS-${Date.now()}`,
+        taskName: input.task,
+        description: input.task,
+        level,
+        files,
+        services,
+        policy: skillPolicy,
+    });
+    const adaptiveWorkflow = createAdaptiveWorkflow(governance, skillPlan);
+    const roi = createGovernanceRoiReport({
+        taskId,
+        contextBudget,
+        contextPack: context,
+        governance,
+        memoryRecall,
+        skillPlan,
+    });
+    return {
+        version: SCALE_ENGINE_VERSION,
+        generatedAt: new Date().toISOString(),
+        task: {
+            taskId,
+            task: input.task,
+            level,
+            files,
+            services,
+        },
+        governance,
+        adaptiveWorkflow,
+        context,
+        memory: {
+            providerOrder: memoryRecall.providerOrder,
+            selectedProviders: memoryRecall.selectedProviders,
+            fallbackUsed: memoryRecall.fallbackUsed,
+            items: memoryRecall.items,
+            warnings: memoryRecall.warnings,
+            contextPack: memoryPack,
+        },
+        skillPlan,
+        roi,
+        recommendations: recommendations({ governance, context, memoryRecall, skillPlan }),
+    };
+}
+function createAdaptiveWorkflow(governance, skillPlan) {
+    const gates = new Set();
+    gates.add('context-compiler');
+    gates.add('memory-provider-recall');
+    if (skillPlan.required || skillPlan.executionPlan.steps.length > 0)
+        gates.add('skill-evidence');
+    gates.add('runtime-evidence');
+    if (governance.effectiveMode === 'expanded' || governance.effectiveMode === 'critical')
+        gates.add('impact-analysis');
+    if (governance.effectiveMode === 'critical')
+        gates.add('security-review');
+    return {
+        strategy: 'risk-adaptive-runtime-v1',
+        mode: governance.effectiveMode,
+        requiredBehaviors: governance.requiredBehaviors,
+        gates: Array.from(gates),
+        exitCriteria: [
+            'Context compiler explains included and omitted sections.',
+            'Memory recall records provider, score, and evidence paths.',
+            'Skill plan lists required proof and fallback policy.',
+            'Governance ROI states benefit and overhead before completion.',
+        ],
+    };
+}
+function recommendations(options) {
+    const output = [];
+    if (options.context.compiler?.estimatedTokenSavings) {
+        output.push(`Keep context compiler active; estimated savings ${options.context.compiler.estimatedTokenSavings} tokens for this task pack.`);
+    }
+    if (options.memoryRecall.items.length === 0) {
+        output.push('No memory recall result found; continue with local evidence and settle reusable knowledge after verification.');
+    }
+    if (options.skillPlan.executionPlan.steps.length > 0) {
+        output.push(`Follow ${options.skillPlan.executionPlan.steps.length} skill routing step(s) and record evidence before ship.`);
+    }
+    if (options.governance.effectiveMode === 'critical') {
+        output.push('Critical workflow mode requires security review and rollback or disable strategy.');
+    }
+    return output;
+}
+function normalizeSkillTaskLevel(value) {
+    const normalized = String(value ?? 'M').trim().toUpperCase();
+    if (normalized === 'S' || normalized === 'M' || normalized === 'L' || normalized === 'CRITICAL')
+        return normalized;
+    throw new Error(`Invalid task level "${String(value)}"; expected S, M, L, or CRITICAL.`);
+}
+//# sourceMappingURL=AiOsRuntime.js.map

package/dist/runtime/AiOsRuntime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AiOsRuntime.js","sourceRoot":"","sources":["../../src/runtime/AiOsRuntime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,yBAAyB,GAE1B,MAAM,gCAAgC,CAAA;AACvC,OAAO,EACL,6BAA6B,GAG9B,MAAM,wCAAwC,CAAA;AAE/C,OAAO,EACL,YAAY,EACZ,qBAAqB,GAGtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,eAAe,EACf,sBAAsB,GAGvB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAoDpD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAAuB;IAC1D,MAAM,UAAU,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC,CAAA;IAC7D,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,QAAQ,CAAA;IAC3C,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IAClD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,EAAE,CAAA;IAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAA;IACrC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAA;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAA;IAEpC,MAAM,UAAU,GAAG,6BAA6B,CAAC;QAC/C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAA;IACF,MAAM,aAAa,GAAG,iBAAiB,CAAC,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,gBAAgB,CAAC;QAC/B,UAAU;QACV,QAAQ;QACR,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM;QACN,KAAK;QACL,KAAK;QACL,MAAM;KACP,CAAC,CAAA;IACF,MAAM,YAAY,GAAG,MAAM,qBAAqB,CAAC;QAC/C,UAAU;QACV,QAAQ;QACR,KAAK,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/D,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,KAAK;QACL,KAAK,EAAE,KAAK,CAAC,UAAU,IAAI,CAAC;KAC7B,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,MAAM,IAAI,YAAY,CAAC;QACxC,UAAU;QACV,QAAQ;QACR,aAAa,EAAE,KAAK,CAAC,aAAa;KACnC,CAAC,CAAC,iBAAiB,CAAC;QACnB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM;QACN,KAAK;QACL,KAAK;QACL,YAAY,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QACjD,aAAa,EAAE,KAAK,CAAC,UAAU;KAChC,CAAC,CAAA;IACF,MAAM,WAAW,GAAG,sBAAsB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAA;IAChE,MAAM,SAAS,GAAG,eAAe,CAAC;QAChC,MAAM,EAAE,MAAM,IAAI,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;QACtC,QAAQ,EAAE,KAAK,CAAC,IAAI;QACpB,WAAW,EAAE,KAAK,CAAC,IAAI;QACvB,KAAK;QACL,KAAK;QACL,QAAQ;QACR,MAAM,EAAE,WAAW;KACpB,CAAC,CAAA;IACF,MAAM,gBAAgB,GAAG,sBAAsB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAA;IACtE,MAAM,GAAG,GAAG,yBAAyB,CAAC;QACpC,MAAM;QACN,aAAa;QACb,WAAW,EAAE,OAAO;QACpB,UAAU;QACV,YAAY;QACZ,SAAS;KACV,CAAC,CAAA;IAEF,OAAO;QACL,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,IAAI,EAAE;YACJ,MAAM;YACN,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK;YACL,KAAK;YACL,QAAQ;SACT;QACD,UAAU;QACV,gBAAgB;QAChB,OAAO;QACP,MAAM,EAAE;YACN,aAAa,EAAE,YAAY,CAAC,aAAa;YACzC,iBAAiB,EAAE,YAAY,CAAC,iBAAiB;YACjD,YAAY,EAAE,YAAY,CAAC,YAAY;YACvC,KAAK,EAAE,YAAY,CAAC,KAAK;YACzB,QAAQ,EAAE,YAAY,CAAC,QAAQ;YAC/B,WAAW,EAAE,UAAU;SACxB;QACD,SAAS;QACT,GAAG;QACH,eAAe,EAAE,eAAe,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;KACnF,CAAA;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAuC,EAAE,SAAoB;IAC3F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAC7B,KAAK,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAA;IACnC,IAAI,SAAS,CAAC,QAAQ,IAAI,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAA;IAC/F,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAA;IAC7B,IAAI,UAAU,CAAC,aAAa,KAAK,UAAU,IAAI,UAAU,CAAC,aAAa,KAAK,UAAU;QAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACpH,IAAI,UAAU,CAAC,aAAa,KAAK,UAAU;QAAE,KAAK,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACzE,OAAO;QACL,QAAQ,EAAE,0BAA0B;QACpC,IAAI,EAAE,UAAU,CAAC,aAAa;QAC9B,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;QAC/C,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;QACxB,YAAY,EAAE;YACZ,0DAA0D;YAC1D,4DAA4D;YAC5D,sDAAsD;YACtD,+DAA+D;SAChE;KACF,CAAA;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAKxB;IACC,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,qBAAqB,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,mDAAmD,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,qBAAqB,6BAA6B,CAAC,CAAA;IAC7I,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,+GAA+G,CAAC,CAAA;IAC9H,CAAC;IACD,IAAI,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrD,MAAM,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,SAAS,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,yDAAyD,CAAC,CAAA;IAC9H,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,aAAa,KAAK,UAAU,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,mFAAmF,CAAC,CAAA;IAClG,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IAC5D,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,UAAU;QAAE,OAAO,UAAU,CAAA;IAClH,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,KAAK,CAAC,mCAAmC,CAAC,CAAA;AAC1F,CAAC"}

package/dist/runtime/index.d.ts

@@ -3,3 +3,4 @@ export * from './SessionLedger.js';
 export * from './RuntimeDoctor.js';
 export * from './FinalReportGuard.js';
 export * from './ModelUsageLedger.js';
+export * from './AiOsRuntime.js';

package/dist/runtime/index.js

@@ -3,4 +3,5 @@ export * from './SessionLedger.js';
 export * from './RuntimeDoctor.js';
 export * from './FinalReportGuard.js';
 export * from './ModelUsageLedger.js';
+export * from './AiOsRuntime.js';
 //# sourceMappingURL=index.js.map

package/dist/runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAA;AAC1C,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,uBAAuB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAA;AAC1C,cAAc,oBAAoB,CAAA;AAClC,cAAc,oBAAoB,CAAA;AAClC,cAAc,uBAAuB,CAAA;AACrC,cAAc,uBAAuB,CAAA;AACrC,cAAc,kBAAkB,CAAA"}

package/dist/skills/routing/SkillPlanner.js

@@ -25,6 +25,14 @@ export function createSkillPlan(options) {
         requiredVerification,
         mode: resolvePlanMode(level, intents, options.policy),
         required,
+        executionPlan: createExecutionPlan({
+            intents,
+            requiredSkills,
+            recommendedSkills,
+            requiredArtifacts,
+            recommendedArtifacts,
+            requiredVerification,
+        }),
         generatedAt: new Date().toISOString(),
     };
 }
@@ -67,13 +75,93 @@ ${list(plan.recommendedArtifacts)}
 
 ${list(plan.requiredVerification)}
 
+## Execution Plan
+
+| Kind | ID | Required | Priority | Reason | Evidence | Fallback |
+| --- | --- | --- | ---: | --- | --- | --- |
+${executionRows(plan.executionPlan.steps)}
+
 ## Skipped Skills
 
-| Skill | Reason | Fallback Evidence |
-| --- | --- | --- |
-|  |  |  |
+No skipped skills recorded at plan time. Record runtime skips and fallback evidence in \`skill-evidence.md\`.
 `;
 }
+function createExecutionPlan(options) {
+    const intentReason = options.intents.length
+        ? `Detected intents: ${options.intents.map(intent => `${intent.domain}(${intent.score})`).join(', ')}.`
+        : 'No domain-specific intent detected; keep evidence lightweight.';
+    const steps = [];
+    let priority = 100;
+    for (const skill of options.requiredSkills) {
+        steps.push({
+            kind: 'skill',
+            id: skill,
+            required: true,
+            priority: priority--,
+            reason: intentReason,
+            evidenceRequired: 'Record used/executed status and concrete output path in skill-evidence.md.',
+            fallback: 'If unavailable, record skipped/fallback status with manual evidence; block when routing mode is block.',
+        });
+    }
+    for (const skill of options.recommendedSkills) {
+        steps.push({
+            kind: 'skill',
+            id: skill,
+            required: false,
+            priority: priority--,
+            reason: intentReason,
+            evidenceRequired: 'Record used or skipped status when it materially affects delivery quality.',
+            fallback: 'Use the nearest built-in verification or explain why the recommendation was not needed.',
+        });
+    }
+    for (const artifact of options.requiredArtifacts) {
+        steps.push({
+            kind: 'artifact',
+            id: artifact,
+            required: true,
+            priority: priority--,
+            reason: 'Required artifact for task evidence and gate review.',
+            evidenceRequired: `Write substantive ${artifact} content before verification or ship.`,
+            fallback: 'No silent fallback; document accepted non-goal only when the gate policy allows it.',
+        });
+    }
+    for (const artifact of options.recommendedArtifacts) {
+        steps.push({
+            kind: 'artifact',
+            id: artifact,
+            required: false,
+            priority: priority--,
+            reason: 'Recommended artifact for clearer review and future recall.',
+            evidenceRequired: `Write ${artifact} when it reduces ambiguity or review risk.`,
+            fallback: 'Mention omission in summary when the artifact is not useful for this task.',
+        });
+    }
+    for (const verification of options.requiredVerification) {
+        steps.push({
+            kind: 'verification',
+            id: verification,
+            required: true,
+            priority: priority--,
+            reason: 'Required verification evidence for detected task intent.',
+            evidenceRequired: `Attach command, screenshot, report, or reviewer evidence for ${verification}.`,
+            fallback: 'If the verification cannot run, record the blocker and a lower-fidelity fallback.',
+        });
+    }
+    return {
+        strategy: 'intent-evidence-graph-v1',
+        steps,
+        fallbackPolicy: 'Required steps need concrete evidence or an explicit skipped/fallback record; recommended steps may be skipped with a reason.',
+        evidenceSummary: unique(steps.map(step => step.evidenceRequired)),
+    };
+}
+function executionRows(steps) {
+    return steps.length
+        ? steps.map(step => `| ${step.kind} | ${step.id} | ${step.required ? 'yes' : 'no'} | ${step.priority} | ${escapeMarkdownCell(step.reason)} | ${escapeMarkdownCell(step.evidenceRequired)} | ${escapeMarkdownCell(step.fallback)} |`).join('\n')
+        : '| none | none | no | 0 | no routing step required | no extra evidence | continue with standard verification |';
+}
+function escapeMarkdownCell(value) {
+    return value.replace(/\|/g, '\\|').replace(/\r?\n/g, ' ');
+}
 function resolvePlanMode(level, intents, policy) {
     if (policy.policy.mode === 'off')
         return 'off';

package/dist/skills/routing/SkillPlanner.js.map

@@ -1 +1 @@
-{"version":3,"file":"SkillPlanner.js","sourceRoot":"","sources":["../../../src/skills/routing/SkillPlanner.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAQhE,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACnG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE9G,MAAM,iBAAiB,GAAG,MAAM,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;KACpE,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAA;IACxG,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5F,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;SAC/F,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IACnD,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAA;IAExG,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK;QACL,OAAO;QACP,cAAc;QACd,iBAAiB;QACjB,iBAAiB;QACjB,oBAAoB;QACpB,oBAAoB;QACpB,IAAI,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;QACrD,QAAQ;QACR,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAe;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;QACpC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAChH,CAAC,CAAC,mDAAmD,CAAA;IAEvD,OAAO;;eAEM,IAAI,CAAC,MAAM;YACd,IAAI,CAAC,QAAQ;aACZ,IAAI,CAAC,KAAK;YACX,IAAI,CAAC,IAAI;gBACL,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;iBAC3B,IAAI,CAAC,WAAW;;;;;;EAM/B,UAAU;;;;EAIV,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;;;;EAIzB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;;;;EAI5B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;;;;EAI5B,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;;;;EAI/B,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;;;;;;;CAOhC,CAAA;AACD,CAAC;AAED,SAAS,eAAe,CAAC,KAAqB,EAAE,OAAqB,EAAE,MAAkC;IACvG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAA;IAClD,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7G,OAAO,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,KAAe;IAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC5E,CAAC;AAED,SAAS,MAAM,CAAI,KAAU;IAC3B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC"}
+{"version":3,"file":"SkillPlanner.js","sourceRoot":"","sources":["../../../src/skills/routing/SkillPlanner.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAA;AAQhE,MAAM,UAAU,eAAe,CAAC,OAA+B;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAA;IAClC,MAAM,OAAO,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAA;IAC1E,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;IACnG,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;IAE9G,MAAM,iBAAiB,GAAG,MAAM,CAAC;QAC/B,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtC,GAAG,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC;KACpE,CAAC,CAAA;IACF,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAA;IACxG,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,CAAA;IAC5F,MAAM,iBAAiB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,iBAAiB,IAAI,EAAE,CAAC,CAAC;SAC/F,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IACnD,MAAM,oBAAoB,GAAG,MAAM,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC,CAAA;IAExG,OAAO;QACL,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,KAAK;QACL,OAAO;QACP,cAAc;QACd,iBAAiB;QACjB,iBAAiB;QACjB,oBAAoB;QACpB,oBAAoB;QACpB,IAAI,EAAE,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;QACrD,QAAQ;QACR,aAAa,EAAE,mBAAmB,CAAC;YACjC,OAAO;YACP,cAAc;YACd,iBAAiB;YACjB,iBAAiB;YACjB,oBAAoB;YACpB,oBAAoB;SACrB,CAAC;QACF,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAA;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAAe;IAC/C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM;QACpC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,MAAM,MAAM,MAAM,CAAC,KAAK,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAChH,CAAC,CAAC,mDAAmD,CAAA;IAEvD,OAAO;;eAEM,IAAI,CAAC,MAAM;YACd,IAAI,CAAC,QAAQ;aACZ,IAAI,CAAC,KAAK;YACX,IAAI,CAAC,IAAI;gBACL,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI;iBAC3B,IAAI,CAAC,WAAW;;;;;;EAM/B,UAAU;;;;EAIV,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC;;;;EAIzB,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;;;;EAI5B,IAAI,CAAC,IAAI,CAAC,iBAAiB,CAAC;;;;EAI5B,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;;;;EAI/B,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;;;;;;EAM/B,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;;;;;CAKxC,CAAA;AACD,CAAC;AAED,SAAS,mBAAmB,CAAC,OAO5B;IACC,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM;QACzC,CAAC,CAAC,qBAAqB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACvG,CAAC,CAAC,gEAAgE,CAAA;IACpE,MAAM,KAAK,GAA6B,EAAE,CAAA;IAC1C,IAAI,QAAQ,GAAG,GAAG,CAAA;IAElB,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ,EAAE;YACpB,MAAM,EAAE,YAAY;YACpB,gBAAgB,EAAE,4EAA4E;YAC9F,QAAQ,EAAE,wGAAwG;SACnH,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,OAAO;YACb,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,QAAQ,EAAE;YACpB,MAAM,EAAE,YAAY;YACpB,gBAAgB,EAAE,4EAA4E;YAC9F,QAAQ,EAAE,yFAAyF;SACpG,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACjD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,QAAQ;YACZ,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ,EAAE;YACpB,MAAM,EAAE,sDAAsD;YAC9D,gBAAgB,EAAE,qBAAqB,QAAQ,uCAAuC;YACtF,QAAQ,EAAE,qFAAqF;SAChG,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,UAAU;YAChB,EAAE,EAAE,QAAQ;YACZ,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,QAAQ,EAAE;YACpB,MAAM,EAAE,4DAA4D;YACpE,gBAAgB,EAAE,SAAS,QAAQ,4CAA4C;YAC/E,QAAQ,EAAE,4EAA4E;SACvF,CAAC,CAAA;IACJ,CAAC;IACD,KAAK,MAAM,YAAY,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACxD,KAAK,CAAC,IAAI,CAAC;YACT,IAAI,EAAE,cAAc;YACpB,EAAE,EAAE,YAAY;YAChB,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ,EAAE;YACpB,MAAM,EAAE,0DAA0D;YAClE,gBAAgB,EAAE,gEAAgE,YAAY,GAAG;YACjG,QAAQ,EAAE,mFAAmF;SAC9F,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,0BAA0B;QACpC,KAAK;QACL,cAAc,EAAE,+HAA+H;QAC/I,eAAe,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;KAClE,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAA+B;IACpD,OAAO,KAAK,CAAC,MAAM;QACjB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,MAAM,IAAI,CAAC,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,IAAI,CAAC,QAAQ,MAAM,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAC/O,CAAC,CAAC,+GAA+G,CAAA;AACrH,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;AAC3D,CAAC;AAED,SAAS,eAAe,CAAC,KAAqB,EAAE,OAAqB,EAAE,MAAkC;IACvG,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,KAAK,CAAA;IAC9C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,OAAO,CAAA;IAClD,MAAM,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;IAC7G,OAAO,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;AAC7C,CAAC;AAED,SAAS,IAAI,CAAC,KAAe;IAC3B,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA;AAC5E,CAAC;AAED,SAAS,MAAM,CAAI,KAAU;IAC3B,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAA;AAC5B,CAAC"}

package/dist/skills/routing/SkillRoutingTypes.d.ts

@@ -42,6 +42,22 @@ export interface TaskIntent {
     score: number;
     reasons: string[];
 }
+export type SkillPlanExecutionStepKind = 'skill' | 'artifact' | 'verification';
+export interface SkillPlanExecutionStep {
+    kind: SkillPlanExecutionStepKind;
+    id: string;
+    required: boolean;
+    priority: number;
+    reason: string;
+    evidenceRequired: string;
+    fallback: string;
+}
+export interface SkillPlanExecutionPlan {
+    strategy: 'intent-evidence-graph-v1';
+    steps: SkillPlanExecutionStep[];
+    fallbackPolicy: string;
+    evidenceSummary: string[];
+}
 export interface SkillPlan {
     taskId: string;
     taskName: string;
@@ -54,6 +70,7 @@ export interface SkillPlan {
     requiredVerification: string[];
     mode: SkillRoutingMode;
     required: boolean;
+    executionPlan: SkillPlanExecutionPlan;
     generatedAt: string;
 }
 export interface SkillGateResult {

package/dist/tools/SafeCommandRunner.d.ts

@@ -0,0 +1,16 @@
+export interface ParsedCommand {
+    file: string;
+    args: string[];
+}
+export interface SafeCommandResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export interface SafeCommandOptions {
+    cwd?: string;
+    timeout?: number;
+    allowShell?: boolean;
+}
+export declare function parseCommandLine(command: string): ParsedCommand;
+export declare function runSafeCommand(command: string, options?: SafeCommandOptions): Promise<SafeCommandResult>;

package/dist/tools/SafeCommandRunner.js

@@ -0,0 +1,83 @@
+import { execa } from 'execa';
+const SHELL_META = new Set(['|', '&', ';', '<', '>', '`', '$', '(', ')']);
+export function parseCommandLine(command) {
+    const tokens = [];
+    let current = '';
+    let quote = null;
+    for (let index = 0; index < command.length; index += 1) {
+        const char = command[index];
+        if (quote) {
+            if (char === quote) {
+                quote = null;
+            }
+            else if (quote === '"' && char === '\\' && index + 1 < command.length) {
+                index += 1;
+                current += command[index];
+            }
+            else {
+                current += char;
+            }
+            continue;
+        }
+        if (char === '"' || char === "'") {
+            quote = char;
+            continue;
+        }
+        if (/\s/.test(char)) {
+            if (current) {
+                tokens.push(current);
+                current = '';
+            }
+            continue;
+        }
+        if (char === '\\' && index + 1 < command.length) {
+            index += 1;
+            current += command[index];
+            continue;
+        }
+        if (SHELL_META.has(char)) {
+            throw new Error(`Shell metacharacter "${char}" is not allowed in verification commands. Use package scripts or set SCALE_ALLOW_SHELL_COMMANDS=1 for a trusted local run.`);
+        }
+        current += char;
+    }
+    if (quote)
+        throw new Error('Unterminated quote in command');
+    if (current)
+        tokens.push(current);
+    if (tokens.length === 0)
+        throw new Error('Command is empty');
+    return { file: tokens[0], args: tokens.slice(1) };
+}
+export async function runSafeCommand(command, options = {}) {
+    const allowShell = options.allowShell || process.env.SCALE_ALLOW_SHELL_COMMANDS === '1';
+    const execaOptions = {
+        cwd: options.cwd,
+        timeout: options.timeout,
+        reject: false,
+    };
+    const result = allowShell
+        ? await execa(command, { ...execaOptions, shell: true })
+        : await runWithoutShell(command, execaOptions);
+    return {
+        exitCode: result.exitCode ?? 1,
+        stdout: commandOutputToString(result.stdout),
+        stderr: commandOutputToString(result.stderr),
+    };
+}
+function commandOutputToString(value) {
+    if (typeof value === 'string')
+        return value;
+    if (value === undefined || value === null)
+        return '';
+    if (value instanceof Uint8Array)
+        return new TextDecoder().decode(value);
+    return String(value);
+}
+async function runWithoutShell(command, options) {
+    const parsed = parseCommandLine(command);
+    return execa(parsed.file, parsed.args, {
+        ...options,
+        shell: false,
+    });
+}
+//# sourceMappingURL=SafeCommandRunner.js.map

package/dist/tools/SafeCommandRunner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SafeCommandRunner.js","sourceRoot":"","sources":["../../src/tools/SafeCommandRunner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAgB,MAAM,OAAO,CAAA;AAE3C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;AAmBzE,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAA;IAC3B,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,KAAK,GAAqB,IAAI,CAAA;IAElC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;QAE3B,IAAI,KAAK,EAAE,CAAC;YACV,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;gBACnB,KAAK,GAAG,IAAI,CAAA;YACd,CAAC;iBAAM,IAAI,KAAK,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;gBACxE,KAAK,IAAI,CAAC,CAAA;gBACV,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;YAC3B,CAAC;iBAAM,CAAC;gBACN,OAAO,IAAI,IAAI,CAAA;YACjB,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YACjC,KAAK,GAAG,IAAI,CAAA;YACZ,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpB,IAAI,OAAO,EAAE,CAAC;gBACZ,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBACpB,OAAO,GAAG,EAAE,CAAA;YACd,CAAC;YACD,SAAQ;QACV,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAChD,KAAK,IAAI,CAAC,CAAA;YACV,OAAO,IAAI,OAAO,CAAC,KAAK,CAAC,CAAA;YACzB,SAAQ;QACV,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,6HAA6H,CAAC,CAAA;QAC5K,CAAC;QAED,OAAO,IAAI,IAAI,CAAA;IACjB,CAAC;IAED,IAAI,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAC3D,IAAI,OAAO;QAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAA;IAE5D,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAA;AACnD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe,EAAE,UAA8B,EAAE;IACpF,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,0BAA0B,KAAK,GAAG,CAAA;IACvF,MAAM,YAAY,GAAY;QAC5B,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,KAAK;KACd,CAAA;IAED,MAAM,MAAM,GAAG,UAAU;QACvB,CAAC,CAAC,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,GAAG,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;IAEhD,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,CAAC;QAC9B,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;QAC5C,MAAM,EAAE,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;KAC7C,CAAA;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAA;IACpD,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACvE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;AACtB,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,OAAgB;IAC9D,MAAM,MAAM,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;IACxC,OAAO,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;QACrC,GAAG,OAAO;QACV,KAAK,EAAE,KAAK;KACb,CAAC,CAAA;AACJ,CAAC"}

package/dist/workflow/gates/GateSystem.js

@@ -4,12 +4,12 @@ import { EvidenceStore } from '../EvidenceStore.js';
 import { WorkflowArtifactWriter } from '../WorkflowArtifactWriter.js';
 import { detectVerificationCommands } from '../VerificationCommands.js';
 import { registerMetaGovernanceGates } from './MetaGovernanceGates.js';
-import { execa } from 'execa';
 import { createHash } from 'node:crypto';
 import { RuntimeEvidenceLedger } from '../../runtime/RuntimeEvidenceLedger.js';
 import { compressCommandOutput } from '../../tools/CommandOutputCompressor.js';
 import { CommandRunLedger } from '../../tools/CommandRunLedger.js';
 import { auditDependencies } from '../../guardrails/DependencyAuditor.js';
+import { runSafeCommand } from '../../tools/SafeCommandRunner.js';
 function tail(value, maxLength = 1000) {
     return value.length > maxLength ? value.slice(-maxLength) : value;
 }
@@ -19,16 +19,10 @@ function sha256(value) {
 export async function runShellCommand(command, timeout, cwd = process.cwd(), options = {}) {
     const start = Date.now();
     try {
-        const result = await execa(command, {
-            shell: true,
-            timeout,
-            cwd,
-            reject: false,
-            all: false,
-        });
+        const result = await runSafeCommand(command, { timeout, cwd });
         const end = Date.now();
         return finalizeCommandResult(command, {
-            code: result.exitCode ?? 1,
+            code: result.exitCode,
             stdout: result.stdout ?? '',
             stderr: result.stderr ?? '',
             durationMs: end - start,