@iflow-mcp/jkheadley-instar 0.26.2

package/dist/core/ExecutionJournal.d.ts

@@ -0,0 +1,101 @@
+/**
+ * ExecutionJournal — Step-level execution tracking for Living Skills (PROP-229).
+ *
+ * Records what actually happens during job execution at the action level,
+ * enabling cross-execution pattern detection and data-driven evolution proposals.
+ *
+ * Storage: JSONL files at {stateDir}/state/execution-journal/{agentId}/{jobSlug}.jsonl
+ * Pending: Per-session temp files at {stateDir}/state/execution-journal/_pending.{sessionId}.jsonl
+ * Creation: Lazy — directories and files created on first write.
+ *
+ * Two capture mechanisms:
+ * - Hook-captured (source: "hook"): PostToolUse hook logs significant commands. Authoritative.
+ * - Agent-reported (source: "agent"): Agent calls CLI at completion. Advisory.
+ */
+import type { ExecutionRecord, ExecutionStep, PendingStep } from './types.js';
+export interface ExecutionJournalStats {
+    /** Total number of execution records */
+    count: number;
+    /** Number of successful runs */
+    successCount: number;
+    /** Number of failed runs */
+    failureCount: number;
+    /** Average duration in minutes (null if no duration data) */
+    avgDurationMinutes: number | null;
+    /** ISO timestamp of earliest record */
+    earliest: string | null;
+    /** ISO timestamp of latest record */
+    latest: string | null;
+}
+export declare class ExecutionJournal {
+    private baseDir;
+    constructor(stateDir: string);
+    /**
+     * Append a pending step captured by the hook during live execution.
+     * Written to _pending.{sessionId}.jsonl — one line per hook invocation.
+     */
+    appendPendingStep(step: PendingStep): void;
+    /**
+     * Finalize a session's pending steps into a full ExecutionRecord.
+     * Reads _pending.{sessionId}.jsonl, computes deviations, writes to the job's journal,
+     * and removes the pending file.
+     *
+     * Returns the finalized record, or null if no pending data exists.
+     */
+    finalizeSession(opts: {
+        sessionId: string;
+        jobSlug: string;
+        agentId?: string;
+        definedSteps?: string[];
+        outcome: ExecutionRecord['outcome'];
+        startedAt: string;
+        agentReportedSteps?: ExecutionStep[];
+    }): ExecutionRecord | null;
+    /**
+     * Read finalized execution records for a job (newest first).
+     */
+    read(jobSlug: string, opts?: {
+        agentId?: string;
+        days?: number;
+        limit?: number;
+    }): ExecutionRecord[];
+    /**
+     * Aggregate statistics for a job's execution history.
+     */
+    stats(jobSlug: string, opts?: {
+        agentId?: string;
+        days?: number;
+    }): ExecutionJournalStats;
+    /**
+     * List all job slugs that have journal data for a given agent.
+     */
+    listJobs(agentId?: string): string[];
+    /**
+     * Delete pending steps file for a session (cleanup on unexpected completion).
+     */
+    clearPending(sessionId: string): void;
+    /**
+     * Apply retention policy — prune entries older than maxDays.
+     * Returns the number of entries removed.
+     */
+    applyRetention(jobSlug: string, agentId?: string, maxDays?: number): number;
+    /**
+     * Sanitize a command string by redacting common secret patterns.
+     * Public static so the hook can also use this logic.
+     */
+    static sanitizeCommand(command: string): string;
+    private journalPath;
+    private ensureDir;
+    private removeSafe;
+    private readPendingSteps;
+    private readJsonlFile;
+    /**
+     * Infer a human-readable step label from a command string.
+     */
+    private inferStepLabel;
+    /**
+     * Compute deviations between defined steps and actual steps.
+     */
+    private computeDeviations;
+}
+//# sourceMappingURL=ExecutionJournal.d.ts.map

package/dist/core/ExecutionJournal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionJournal.d.ts","sourceRoot":"","sources":["../../src/core/ExecutionJournal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EAEb,WAAW,EACZ,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,qBAAqB;IACpC,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,4BAA4B;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,6DAA6D;IAC7D,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,uCAAuC;IACvC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,qCAAqC;IACrC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAkBD,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAS;gBAEZ,QAAQ,EAAE,MAAM;IAI5B;;;OAGG;IACH,iBAAiB,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAW1C;;;;;;OAMG;IACH,eAAe,CAAC,IAAI,EAAE;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;QACxB,OAAO,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;QACpC,SAAS,EAAE,MAAM,CAAC;QAClB,kBAAkB,CAAC,EAAE,aAAa,EAAE,CAAC;KACtC,GAAG,eAAe,GAAG,IAAI;IAiD1B;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAC3B,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GAAG,eAAe,EAAE;IAoBrB;;OAEG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,qBAAqB;IA8BzF;;OAEG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE;IAUpC;;OAEG;IACH,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKrC;;;OAGG;IACH,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,GAAE,MAAW,GAAG,MAAM;IAsB/E;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM;IAY/C,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,SAAS;IAMjB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,gBAAgB;IAYxB,OAAO,CAAC,aAAa;IAoBrB;;OAEG;IACH,OAAO,CAAC,cAAc;IA2BtB;;OAEG;IACH,OAAO,CAAC,iBAAiB;CA2B1B"}

package/dist/core/ExecutionJournal.js

@@ -0,0 +1,301 @@
+/**
+ * ExecutionJournal — Step-level execution tracking for Living Skills (PROP-229).
+ *
+ * Records what actually happens during job execution at the action level,
+ * enabling cross-execution pattern detection and data-driven evolution proposals.
+ *
+ * Storage: JSONL files at {stateDir}/state/execution-journal/{agentId}/{jobSlug}.jsonl
+ * Pending: Per-session temp files at {stateDir}/state/execution-journal/_pending.{sessionId}.jsonl
+ * Creation: Lazy — directories and files created on first write.
+ *
+ * Two capture mechanisms:
+ * - Hook-captured (source: "hook"): PostToolUse hook logs significant commands. Authoritative.
+ * - Agent-reported (source: "agent"): Agent calls CLI at completion. Advisory.
+ */
+import fs from 'node:fs';
+import path from 'node:path';
+import { maybeRotateJsonl } from '../utils/jsonl-rotation.js';
+/** Regex patterns for common secret formats to redact from commands */
+const REDACT_PATTERNS = [
+    /Bearer\s+[A-Za-z0-9\-._~+/]+=*/gi,
+    /Authorization:\s*[^\s"']*/gi,
+    /(api[_-]?key|apikey|api_secret)\s*[:=]\s*\S+/gi,
+    /(password|passwd|secret|token)\s*[:=]\s*\S+/gi,
+    /sk-[A-Za-z0-9]{20,}/g,
+    /ghp_[A-Za-z0-9]{36}/g,
+    /gho_[A-Za-z0-9]{36}/g,
+    /xox[baprs]-[A-Za-z0-9\-]+/g,
+    /AKIA[0-9A-Z]{16}/g,
+];
+const MAX_COMMAND_LENGTH = 500;
+const DEFAULT_AGENT_ID = 'default';
+export class ExecutionJournal {
+    baseDir;
+    constructor(stateDir) {
+        this.baseDir = path.join(stateDir, 'state', 'execution-journal');
+    }
+    /**
+     * Append a pending step captured by the hook during live execution.
+     * Written to _pending.{sessionId}.jsonl — one line per hook invocation.
+     */
+    appendPendingStep(step) {
+        const sanitized = {
+            ...step,
+            command: ExecutionJournal.sanitizeCommand(step.command),
+        };
+        const pendingFile = path.join(this.baseDir, `_pending.${step.sessionId}.jsonl`);
+        this.ensureDir(this.baseDir);
+        fs.appendFileSync(pendingFile, JSON.stringify(sanitized) + '\n');
+    }
+    /**
+     * Finalize a session's pending steps into a full ExecutionRecord.
+     * Reads _pending.{sessionId}.jsonl, computes deviations, writes to the job's journal,
+     * and removes the pending file.
+     *
+     * Returns the finalized record, or null if no pending data exists.
+     */
+    finalizeSession(opts) {
+        const agentId = opts.agentId || DEFAULT_AGENT_ID;
+        const pendingFile = path.join(this.baseDir, `_pending.${opts.sessionId}.jsonl`);
+        // Read pending steps from hook
+        const hookSteps = this.readPendingSteps(pendingFile);
+        // Merge agent-reported steps if provided
+        const allSteps = [...hookSteps];
+        if (opts.agentReportedSteps) {
+            for (const agentStep of opts.agentReportedSteps) {
+                allSteps.push({ ...agentStep, source: 'agent' });
+            }
+        }
+        // If no steps at all, still record the execution (it ran, just captured nothing)
+        const definedSteps = opts.definedSteps || [];
+        const deviations = this.computeDeviations(definedSteps, allSteps);
+        const now = new Date();
+        const startTime = new Date(opts.startedAt);
+        const durationMinutes = (now.getTime() - startTime.getTime()) / (1000 * 60);
+        const record = {
+            executionId: `exec-${now.toISOString().slice(0, 10).replace(/-/g, '')}-${opts.sessionId.slice(-6)}`,
+            jobSlug: opts.jobSlug,
+            sessionId: opts.sessionId,
+            agentId,
+            timestamp: opts.startedAt,
+            definedSteps,
+            actualSteps: allSteps,
+            deviations,
+            outcome: opts.outcome,
+            durationMinutes: Math.round(durationMinutes * 10) / 10,
+            finalized: true,
+        };
+        // Write to the job's journal
+        const journalFile = this.journalPath(agentId, opts.jobSlug);
+        this.ensureDir(path.dirname(journalFile));
+        maybeRotateJsonl(journalFile);
+        fs.appendFileSync(journalFile, JSON.stringify(record) + '\n');
+        // Clean up pending file
+        this.removeSafe(pendingFile);
+        return record;
+    }
+    /**
+     * Read finalized execution records for a job (newest first).
+     */
+    read(jobSlug, opts) {
+        const agentId = opts?.agentId || DEFAULT_AGENT_ID;
+        const journalFile = this.journalPath(agentId, jobSlug);
+        let entries = this.readJsonlFile(journalFile);
+        if (opts?.days) {
+            const cutoff = new Date(Date.now() - opts.days * 24 * 60 * 60 * 1000).toISOString();
+            entries = entries.filter(e => e.timestamp >= cutoff);
+        }
+        // Newest first
+        entries.sort((a, b) => b.timestamp.localeCompare(a.timestamp));
+        if (opts?.limit) {
+            entries = entries.slice(0, opts.limit);
+        }
+        return entries;
+    }
+    /**
+     * Aggregate statistics for a job's execution history.
+     */
+    stats(jobSlug, opts) {
+        const entries = this.read(jobSlug, { agentId: opts?.agentId, days: opts?.days });
+        if (entries.length === 0) {
+            return {
+                count: 0,
+                successCount: 0,
+                failureCount: 0,
+                avgDurationMinutes: null,
+                earliest: null,
+                latest: null,
+            };
+        }
+        const durations = entries
+            .map(e => e.durationMinutes)
+            .filter((d) => d != null);
+        return {
+            count: entries.length,
+            successCount: entries.filter(e => e.outcome === 'success').length,
+            failureCount: entries.filter(e => e.outcome === 'failure').length,
+            avgDurationMinutes: durations.length > 0
+                ? Math.round((durations.reduce((a, b) => a + b, 0) / durations.length) * 10) / 10
+                : null,
+            earliest: entries[entries.length - 1].timestamp,
+            latest: entries[0].timestamp,
+        };
+    }
+    /**
+     * List all job slugs that have journal data for a given agent.
+     */
+    listJobs(agentId) {
+        const agentDir = path.join(this.baseDir, agentId || DEFAULT_AGENT_ID);
+        if (!fs.existsSync(agentDir))
+            return [];
+        return fs.readdirSync(agentDir)
+            .filter(f => f.endsWith('.jsonl'))
+            .map(f => f.replace('.jsonl', ''))
+            .sort();
+    }
+    /**
+     * Delete pending steps file for a session (cleanup on unexpected completion).
+     */
+    clearPending(sessionId) {
+        const pendingFile = path.join(this.baseDir, `_pending.${sessionId}.jsonl`);
+        this.removeSafe(pendingFile);
+    }
+    /**
+     * Apply retention policy — prune entries older than maxDays.
+     * Returns the number of entries removed.
+     */
+    applyRetention(jobSlug, agentId, maxDays = 30) {
+        const aid = agentId || DEFAULT_AGENT_ID;
+        const journalFile = this.journalPath(aid, jobSlug);
+        const entries = this.readJsonlFile(journalFile);
+        if (entries.length === 0)
+            return 0;
+        const cutoff = new Date(Date.now() - maxDays * 24 * 60 * 60 * 1000).toISOString();
+        const kept = entries.filter(e => e.timestamp >= cutoff);
+        const removed = entries.length - kept.length;
+        if (removed > 0) {
+            // Rewrite the file with only kept entries
+            const content = kept.map(e => JSON.stringify(e)).join('\n') + (kept.length > 0 ? '\n' : '');
+            fs.writeFileSync(journalFile, content);
+        }
+        return removed;
+    }
+    // ── Static Utilities ──────────────────────────────────────────────
+    /**
+     * Sanitize a command string by redacting common secret patterns.
+     * Public static so the hook can also use this logic.
+     */
+    static sanitizeCommand(command) {
+        let sanitized = command;
+        for (const pattern of REDACT_PATTERNS) {
+            // Reset lastIndex for global patterns
+            pattern.lastIndex = 0;
+            sanitized = sanitized.replace(pattern, '[REDACTED]');
+        }
+        return sanitized.slice(0, MAX_COMMAND_LENGTH);
+    }
+    // ── Private Helpers ───────────────────────────────────────────────
+    journalPath(agentId, jobSlug) {
+        return path.join(this.baseDir, agentId, `${jobSlug}.jsonl`);
+    }
+    ensureDir(dir) {
+        if (!fs.existsSync(dir)) {
+            fs.mkdirSync(dir, { recursive: true });
+        }
+    }
+    removeSafe(filePath) {
+        try {
+            if (fs.existsSync(filePath)) {
+                fs.unlinkSync(filePath);
+            }
+        }
+        catch {
+            // @silent-fallback-ok — cleanup failure is non-critical
+        }
+    }
+    readPendingSteps(pendingFile) {
+        if (!fs.existsSync(pendingFile))
+            return [];
+        const lines = this.readJsonlFile(pendingFile);
+        return lines.map(ps => ({
+            step: ps.stepLabel || this.inferStepLabel(ps.command) || 'unknown',
+            timestamp: ps.timestamp,
+            source: 'hook',
+            command: ps.command,
+        }));
+    }
+    readJsonlFile(filePath) {
+        if (!fs.existsSync(filePath))
+            return [];
+        try {
+            const content = fs.readFileSync(filePath, 'utf-8').trim();
+            if (!content)
+                return [];
+            return content.split('\n').map(line => {
+                try {
+                    return JSON.parse(line);
+                }
+                catch {
+                    // @silent-fallback-ok — skip corrupted JSONL lines
+                    return null;
+                }
+            }).filter(Boolean);
+        }
+        catch {
+            return [];
+        }
+    }
+    /**
+     * Infer a human-readable step label from a command string.
+     */
+    inferStepLabel(command) {
+        const patterns = [
+            [/\bcurl\b.*\/health/i, 'health-check'],
+            [/\bcurl\b.*\/api/i, 'api-call'],
+            [/\bcurl\b/i, 'http-request'],
+            [/\bgit\s+push\b/i, 'git-push'],
+            [/\bgit\s+pull\b/i, 'git-pull'],
+            [/\bgit\s+commit\b/i, 'git-commit'],
+            [/\bgit\s+clone\b/i, 'git-clone'],
+            [/\bnpm\s+publish\b/i, 'npm-publish'],
+            [/\bnpm\s+install\b/i, 'npm-install'],
+            [/\bnpm\s+test\b/i, 'run-tests'],
+            [/\bnpm\s+run\s+build\b/i, 'build'],
+            [/\bpnpm\s+build\b/i, 'build'],
+            [/\bdocker\b/i, 'docker'],
+            [/\bprisma\b/i, 'database'],
+            [/\bpsql\b/i, 'database'],
+            [/\bdeploy\b/i, 'deploy'],
+        ];
+        for (const [regex, label] of patterns) {
+            if (regex.test(command))
+                return label;
+        }
+        return undefined;
+    }
+    /**
+     * Compute deviations between defined steps and actual steps.
+     */
+    computeDeviations(definedSteps, actualSteps) {
+        const deviations = [];
+        const actualStepNames = new Set(actualSteps.map(s => s.step));
+        const definedSet = new Set(definedSteps);
+        // Omissions: defined but not in actual
+        for (const step of definedSteps) {
+            if (!actualStepNames.has(step)) {
+                deviations.push({ type: 'omission', step });
+            }
+        }
+        // Additions: in actual but not defined
+        for (const step of actualSteps) {
+            if (!definedSet.has(step.step) && step.step !== 'unknown') {
+                // Avoid duplicate addition entries for same step name
+                if (!deviations.some(d => d.type === 'addition' && d.step === step.step)) {
+                    deviations.push({ type: 'addition', step: step.step });
+                }
+            }
+        }
+        return deviations;
+    }
+}
+//# sourceMappingURL=ExecutionJournal.js.map

package/dist/core/ExecutionJournal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExecutionJournal.js","sourceRoot":"","sources":["../../src/core/ExecutionJournal.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAuB9D,uEAAuE;AACvE,MAAM,eAAe,GAAa;IAChC,kCAAkC;IAClC,6BAA6B;IAC7B,gDAAgD;IAChD,+CAA+C;IAC/C,sBAAsB;IACtB,sBAAsB;IACtB,sBAAsB;IACtB,4BAA4B;IAC5B,mBAAmB;CACpB,CAAC;AAEF,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAEnC,MAAM,OAAO,gBAAgB;IACnB,OAAO,CAAS;IAExB,YAAY,QAAgB;QAC1B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACnE,CAAC;IAED;;;OAGG;IACH,iBAAiB,CAAC,IAAiB;QACjC,MAAM,SAAS,GAAgB;YAC7B,GAAG,IAAI;YACP,OAAO,EAAE,gBAAgB,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;SACxD,CAAC;QAEF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC;QAChF,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC7B,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC;IACnE,CAAC;IAED;;;;;;OAMG;IACH,eAAe,CAAC,IAQf;QACC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,gBAAgB,CAAC;QACjD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,IAAI,CAAC,SAAS,QAAQ,CAAC,CAAC;QAEhF,+BAA+B;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAErD,yCAAyC;QACzC,MAAM,QAAQ,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC5B,KAAK,MAAM,SAAS,IAAI,IAAI,CAAC,kBAAkB,EAAE,CAAC;gBAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,SAAS,EAAE,MAAM,EAAE,OAAgB,EAAE,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAED,iFAAiF;QACjF,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;QAElE,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3C,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAoB;YAC9B,WAAW,EAAE,QAAQ,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE;YACnG,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO;YACP,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,YAAY;YACZ,WAAW,EAAE,QAAQ;YACrB,UAAU;YACV,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,EAAE,CAAC,GAAG,EAAE;YACtD,SAAS,EAAE,IAAI;SAChB,CAAC;QAEF,6BAA6B;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;QAC1C,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC9B,EAAE,CAAC,cAAc,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QAE9D,wBAAwB;QACxB,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;QAE7B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAe,EAAE,IAIrB;QACC,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,gBAAgB,CAAC;QAClD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,IAAI,CAAC,aAAa,CAAkB,WAAW,CAAC,CAAC;QAE/D,IAAI,IAAI,EAAE,IAAI,EAAE,CAAC;YACf,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YACpF,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QACvD,CAAC;QAED,eAAe;QACf,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAE/D,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;YAChB,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAe,EAAE,IAA0C;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEjF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,KAAK,EAAE,CAAC;gBACR,YAAY,EAAE,CAAC;gBACf,YAAY,EAAE,CAAC;gBACf,kBAAkB,EAAE,IAAI;gBACxB,QAAQ,EAAE,IAAI;gBACd,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,OAAO;aACtB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;QAEzC,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,MAAM;YACrB,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM;YACjE,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,MAAM;YACjE,kBAAkB,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC;gBACtC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;gBACjF,CAAC,CAAC,IAAI;YACR,QAAQ,EAAE,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,SAAS;YAC/C,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,OAAgB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC;QACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAExC,OAAO,EAAE,CAAC,WAAW,CAAC,QAAQ,CAAC;aAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aACjC,IAAI,EAAE,CAAC;IACZ,CAAC;IAED;;OAEG;IACH,YAAY,CAAC,SAAiB;QAC5B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,SAAS,QAAQ,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC;IAC/B,CAAC;IAED;;;OAGG;IACH,cAAc,CAAC,OAAe,EAAE,OAAgB,EAAE,UAAkB,EAAE;QACpE,MAAM,GAAG,GAAG,OAAO,IAAI,gBAAgB,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAkB,WAAW,CAAC,CAAC;QAEjE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAEnC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAClF,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAE7C,IAAI,OAAO,GAAG,CAAC,EAAE,CAAC;YAChB,0CAA0C;YAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5F,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,qEAAqE;IAErE;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,OAAe;QACpC,IAAI,SAAS,GAAG,OAAO,CAAC;QACxB,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;YACtC,sCAAsC;YACtC,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC;YACtB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IAChD,CAAC;IAED,qEAAqE;IAE7D,WAAW,CAAC,OAAe,EAAE,OAAe;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,OAAO,QAAQ,CAAC,CAAC;IAC9D,CAAC;IAEO,SAAS,CAAC,GAAW;QAC3B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,QAAgB;QACjC,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC5B,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;YAC1B,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,WAAmB;QAC1C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,CAAC;QAE3C,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAc,WAAW,CAAC,CAAC;QAC3D,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACtB,IAAI,EAAE,EAAE,CAAC,SAAS,IAAI,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,SAAS;YAClE,SAAS,EAAE,EAAE,CAAC,SAAS;YACvB,MAAM,EAAE,MAAe;YACvB,OAAO,EAAE,EAAE,CAAC,OAAO;SACpB,CAAC,CAAC,CAAC;IACN,CAAC;IAEO,aAAa,CAAI,QAAgB;QACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QAExC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;YAC1D,IAAI,CAAC,OAAO;gBAAE,OAAO,EAAE,CAAC;YAExB,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;gBACpC,IAAI,CAAC;oBACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;gBAC/B,CAAC;gBAAC,MAAM,CAAC;oBACP,mDAAmD;oBACnD,OAAO,IAAI,CAAC;gBACd,CAAC;YACH,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAQ,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAED;;OAEG;IACK,cAAc,CAAC,OAAe;QACpC,MAAM,QAAQ,GAA4B;YACxC,CAAC,qBAAqB,EAAE,cAAc,CAAC;YACvC,CAAC,kBAAkB,EAAE,UAAU,CAAC;YAChC,CAAC,WAAW,EAAE,cAAc,CAAC;YAC7B,CAAC,iBAAiB,EAAE,UAAU,CAAC;YAC/B,CAAC,iBAAiB,EAAE,UAAU,CAAC;YAC/B,CAAC,mBAAmB,EAAE,YAAY,CAAC;YACnC,CAAC,kBAAkB,EAAE,WAAW,CAAC;YACjC,CAAC,oBAAoB,EAAE,aAAa,CAAC;YACrC,CAAC,oBAAoB,EAAE,aAAa,CAAC;YACrC,CAAC,iBAAiB,EAAE,WAAW,CAAC;YAChC,CAAC,wBAAwB,EAAE,OAAO,CAAC;YACnC,CAAC,mBAAmB,EAAE,OAAO,CAAC;YAC9B,CAAC,aAAa,EAAE,QAAQ,CAAC;YACzB,CAAC,aAAa,EAAE,UAAU,CAAC;YAC3B,CAAC,WAAW,EAAE,UAAU,CAAC;YACzB,CAAC,aAAa,EAAE,QAAQ,CAAC;SAC1B,CAAC;QAEF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;YACtC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,KAAK,CAAC;QACxC,CAAC;QAED,OAAO,SAAS,CAAC;IACnB,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,YAAsB,EACtB,WAA4B;QAE5B,MAAM,UAAU,GAAyB,EAAE,CAAC;QAC5C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC;QAEzC,uCAAuC;QACvC,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;YAChC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/B,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,uCAAuC;QACvC,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC1D,sDAAsD;gBACtD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACzE,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/core/ExternalOperationGate.d.ts

@@ -0,0 +1,204 @@
+/**
+ * External Operation Gate — LLM-supervised safety for external service operations.
+ *
+ * Born from the OpenClaw email deletion incident (2026-02-25): An agent deleted
+ * 200+ emails autonomously, ignoring repeated "stop" commands, because nothing
+ * distinguished safe operations (read email) from destructive ones (delete 200 emails).
+ *
+ * Design principle: Structure > Willpower. A memory.md rule saying "don't delete
+ * emails without approval" degrades as context grows. A gate that physically
+ * intercepts the operation and evaluates risk does not.
+ *
+ * Three layers:
+ * 1. Static classification — operation type × reversibility × scope → risk level
+ * 2. Config permissions — per-service allow/block lists (structural floor)
+ * 3. LLM evaluation — for medium+ risk, a haiku-tier model evaluates proportionality
+ *
+ * Integrates with AdaptiveTrust for organic permission evolution.
+ */
+import type { IntelligenceProvider } from './types.js';
+export type OperationMutability = 'read' | 'write' | 'modify' | 'delete';
+export type OperationReversibility = 'reversible' | 'partially-reversible' | 'irreversible';
+export type OperationScope = 'single' | 'batch' | 'bulk';
+export type RiskLevel = 'low' | 'medium' | 'high' | 'critical';
+export type GateAction = 'proceed' | 'show-plan' | 'suggest-alternative' | 'block';
+export type TrustLevel = 'blocked' | 'approve-always' | 'approve-first' | 'log' | 'autonomous';
+export type TrustSource = 'default' | 'config' | 'user-explicit' | 'earned' | 'revoked';
+export type AutonomyBehavior = 'proceed' | 'log' | 'approve' | 'block';
+export interface OperationClassification {
+    /** What the operation does */
+    mutability: OperationMutability;
+    /** Whether it can be undone */
+    reversibility: OperationReversibility;
+    /** How many items affected */
+    scope: OperationScope;
+    /** Computed risk level */
+    riskLevel: RiskLevel;
+    /** External service name */
+    service: string;
+    /** Human-readable description */
+    description: string;
+    /** Number of items affected (if known) */
+    itemCount?: number;
+}
+export interface GateDecision {
+    /** What the gate recommends */
+    action: GateAction;
+    /** Why this decision was made */
+    reason: string;
+    /** The operation classification that led to this decision */
+    classification: OperationClassification;
+    /** If show-plan: what to present to user */
+    plan?: string;
+    /** If suggest-alternative: safer approach */
+    alternative?: string;
+    /** If batch/bulk: checkpoint config */
+    checkpoint?: CheckpointConfig;
+    /** Whether LLM was consulted */
+    llmEvaluated: boolean;
+    /** Timestamp */
+    evaluatedAt: string;
+}
+export interface CheckpointConfig {
+    /** Pause after this many items */
+    afterCount: number;
+    /** Total items expected */
+    totalExpected: number;
+    /** Items completed so far */
+    completedSoFar: number;
+}
+export interface ServicePermissions {
+    /** Operations the agent CAN perform */
+    permissions: OperationMutability[];
+    /** Operations that are HARD BLOCKED (no override, no trust escalation) */
+    blocked?: OperationMutability[];
+    /** Maximum batch size before requiring checkpoint */
+    batchLimit?: number;
+    /** Operations that always require approval regardless of trust */
+    requireApproval?: OperationMutability[];
+}
+export interface ExternalOperationGateConfig {
+    /** State directory for operation logs and trust data */
+    stateDir: string;
+    /** Intelligence provider for LLM evaluation (haiku-tier recommended) */
+    intelligence?: IntelligenceProvider;
+    /** Per-service permissions */
+    services?: Record<string, ServicePermissions>;
+    /** Services that are fully blocked */
+    blockedServices?: string[];
+    /** Services that are read-only */
+    readOnlyServices?: string[];
+    /** Batch checkpoint configuration */
+    batchCheckpoint?: {
+        /** Items before first checkpoint (default: 5) */
+        batchThreshold: number;
+        /** Items considered "bulk" (default: 20) */
+        bulkThreshold: number;
+        /** Checkpoint interval for bulk operations (default: 10) */
+        checkpointEvery: number;
+    };
+    /** Autonomy gradient — default behavior per risk level */
+    autonomyDefaults?: Record<RiskLevel, AutonomyBehavior>;
+}
+export interface OperationLogEntry {
+    /** ISO timestamp */
+    timestamp: string;
+    /** The operation that was evaluated */
+    classification: OperationClassification;
+    /** The gate's decision */
+    decision: GateAction;
+    /** Whether the user approved (if approval was requested) */
+    userApproved?: boolean;
+    /** Whether the operation completed successfully */
+    succeeded?: boolean;
+}
+/** Autonomy profiles for the three standard levels */
+export declare const AUTONOMY_PROFILES: Record<string, Record<RiskLevel, AutonomyBehavior>>;
+/**
+ * Compute risk level from operation dimensions.
+ *
+ * The matrix follows the principle: irreversible + bulk = critical,
+ * read operations are always low, and risk escalates with scope.
+ */
+export declare function computeRiskLevel(mutability: OperationMutability, reversibility: OperationReversibility, scope: OperationScope): RiskLevel;
+/**
+ * Determine scope from item count.
+ */
+export declare function scopeFromCount(count: number, config?: {
+    batchThreshold?: number;
+    bulkThreshold?: number;
+}): OperationScope;
+export declare class ExternalOperationGate {
+    private config;
+    private logPath;
+    constructor(config: ExternalOperationGateConfig);
+    /**
+     * Classify an external operation into its risk dimensions.
+     */
+    classify(params: {
+        service: string;
+        mutability: OperationMutability;
+        reversibility: OperationReversibility;
+        description: string;
+        itemCount?: number;
+    }): OperationClassification;
+    /**
+     * Evaluate an operation through the full gate pipeline.
+     *
+     * Pipeline:
+     * 1. Check if service is fully blocked → block
+     * 2. Check if service is read-only and operation mutates → block
+     * 3. Check per-service permission config → block if operation type blocked
+     * 4. Classify operation risk
+     * 5. Check autonomy gradient for this risk level
+     * 6. For medium+ risk with intelligence provider, consult LLM
+     * 7. Check batch limits and add checkpoint if needed
+     * 8. Return final decision
+     */
+    evaluate(params: {
+        service: string;
+        mutability: OperationMutability;
+        reversibility: OperationReversibility;
+        description: string;
+        itemCount?: number;
+        /** The user's original request (for LLM proportionality check) */
+        userRequest?: string;
+    }): Promise<GateDecision>;
+    /**
+     * Consult LLM for proportionality evaluation.
+     *
+     * IMPORTANT: The LLM never sees the content being operated on.
+     * This prevents prompt injection via email body, calendar event, etc.
+     * The LLM only sees: what operation, what scope, what the user asked for.
+     */
+    private consultLLM;
+    /**
+     * Build a human-readable plan for the user.
+     */
+    private buildPlan;
+    /**
+     * Log an operation evaluation to the JSONL log.
+     */
+    private logOperation;
+    /**
+     * Read recent operation log entries.
+     */
+    getOperationLog(limit?: number): OperationLogEntry[];
+    /**
+     * Get the effective service permissions (config + defaults).
+     */
+    getServicePermissions(service: string): ServicePermissions | null;
+    /**
+     * Get the current autonomy profile.
+     */
+    getAutonomyProfile(): Record<RiskLevel, AutonomyBehavior>;
+    /**
+     * Update autonomy defaults (used by AdaptiveTrust when trust changes).
+     */
+    updateAutonomyDefaults(defaults: Record<RiskLevel, AutonomyBehavior>): void;
+    /**
+     * Update service permissions at runtime.
+     */
+    updateServicePermissions(service: string, permissions: ServicePermissions): void;
+}
+//# sourceMappingURL=ExternalOperationGate.d.ts.map

package/dist/core/ExternalOperationGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ExternalOperationGate.d.ts","sourceRoot":"","sources":["../../src/core/ExternalOperationGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAKvD,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AACzE,MAAM,MAAM,sBAAsB,GAAG,YAAY,GAAG,sBAAsB,GAAG,cAAc,CAAC;AAC5F,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,CAAC;AACzD,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;AAC/D,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,WAAW,GAAG,qBAAqB,GAAG,OAAO,CAAC;AACnF,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,gBAAgB,GAAG,eAAe,GAAG,KAAK,GAAG,YAAY,CAAC;AAC/F,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,eAAe,GAAG,QAAQ,GAAG,SAAS,CAAC;AACxF,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,KAAK,GAAG,SAAS,GAAG,OAAO,CAAC;AAEvE,MAAM,WAAW,uBAAuB;IACtC,8BAA8B;IAC9B,UAAU,EAAE,mBAAmB,CAAC;IAChC,+BAA+B;IAC/B,aAAa,EAAE,sBAAsB,CAAC;IACtC,8BAA8B;IAC9B,KAAK,EAAE,cAAc,CAAC;IACtB,0BAA0B;IAC1B,SAAS,EAAE,SAAS,CAAC;IACrB,4BAA4B;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,WAAW,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,+BAA+B;IAC/B,MAAM,EAAE,UAAU,CAAC;IACnB,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,cAAc,EAAE,uBAAuB,CAAC;IACxC,4CAA4C;IAC5C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IAC9B,gCAAgC;IAChC,YAAY,EAAE,OAAO,CAAC;IACtB,gBAAgB;IAChB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAC;IACnB,2BAA2B;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,WAAW,EAAE,mBAAmB,EAAE,CAAC;IACnC,0EAA0E;IAC1E,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAChC,qDAAqD;IACrD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,eAAe,CAAC,EAAE,mBAAmB,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,2BAA2B;IAC1C,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,YAAY,CAAC,EAAE,oBAAoB,CAAC;IACpC,8BAA8B;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC9C,sCAAsC;IACtC,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,kCAAkC;IAClC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,qCAAqC;IACrC,eAAe,CAAC,EAAE;QAChB,iDAAiD;QACjD,cAAc,EAAE,MAAM,CAAC;QACvB,4CAA4C;QAC5C,aAAa,EAAE,MAAM,CAAC;QACtB,4DAA4D;QAC5D,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;CACxD;AAED,MAAM,WAAW,iBAAiB;IAChC,oBAAoB;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,uCAAuC;IACvC,cAAc,EAAE,uBAAuB,CAAC;IACxC,0BAA0B;IAC1B,QAAQ,EAAE,UAAU,CAAC;IACrB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,mDAAmD;IACnD,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAYD,sDAAsD;AACtD,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAIjF,CAAC;AAUF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,mBAAmB,EAC/B,aAAa,EAAE,sBAAsB,EACrC,KAAK,EAAE,cAAc,GACpB,SAAS,CA+BX;AAED;;GAEG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,cAAc,CAO1H;AAID,qBAAa,qBAAqB;IAChC,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,OAAO,CAAS;gBAEZ,MAAM,EAAE,2BAA2B;IAK/C;;OAEG;IACH,QAAQ,CAAC,MAAM,EAAE;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,mBAAmB,CAAC;QAChC,aAAa,EAAE,sBAAsB,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,GAAG,uBAAuB;IAkB3B;;;;;;;;;;;;OAYG;IACG,QAAQ,CAAC,MAAM,EAAE;QACrB,OAAO,EAAE,MAAM,CAAC;QAChB,UAAU,EAAE,mBAAmB,CAAC;QAChC,aAAa,EAAE,sBAAsB,CAAC;QACtC,WAAW,EAAE,MAAM,CAAC;QACpB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,OAAO,CAAC,YAAY,CAAC;IA0KzB;;;;;;OAMG;YACW,UAAU;IA4CxB;;OAEG;IACH,OAAO,CAAC,SAAS;IAsBjB;;OAEG;IACH,OAAO,CAAC,YAAY;IAapB;;OAEG;IACH,eAAe,CAAC,KAAK,SAAK,GAAG,iBAAiB,EAAE;IAiBhD;;OAEG;IACH,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI;IAYjE;;OAEG;IACH,kBAAkB,IAAI,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC;IAIzD;;OAEG;IACH,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,SAAS,EAAE,gBAAgB,CAAC,GAAG,IAAI;IAI3E;;OAEG;IACH,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,kBAAkB,GAAG,IAAI;CAMjF"}