@izagood/avcs 0.1.0

package/dist/objects/types.d.ts

@@ -0,0 +1,352 @@
+export type ObjectType = "blob" | "intent" | "session" | "operation" | "evidence" | "decision" | "checkpoint" | "view" | "policy" | "lease" | "release" | "line" | "membership" | "protection" | "promotion" | "redaction" | "override" | "approval";
+/** ed25519 signature over an object's oid. Excluded from the oid hash. */
+export interface Signature {
+    keyId: string;
+    alg: "ed25519";
+    sig: string;
+}
+export interface BaseObject {
+    type: ObjectType;
+    /** Content address. Filled in by the store on write; absent while building. */
+    oid?: string;
+    /** Optional signature by the producing actor over this object's oid (Phase 3). */
+    sig?: Signature;
+}
+export type ActorKind = "human" | "ai_agent" | "ci_bot";
+export interface Actor {
+    kind: ActorKind;
+    /** Stable id, e.g. "human:jinbin" or "ai:claude-code". */
+    id: string;
+    /** For ai_agent: model identifier. */
+    model?: string;
+}
+export interface Blob extends BaseObject {
+    type: "blob";
+    /** Base64 of the raw bytes (empty for a chunked manifest). */
+    data: string;
+    encoding: "base64";
+    /**
+     * Phase 9b: a large blob is split into chunk blobs and stored as a manifest
+     * (data="", chunked=true, chunks=[oids]). Identical chunks dedup by oid, and
+     * reads stream chunk-by-chunk instead of inflating one huge JSON object.
+     */
+    chunked?: boolean;
+    chunks?: string[];
+    /** Phase 12: set once a Redaction evicted the original bytes (oid preserved). */
+    redacted?: boolean;
+    redactionOid?: string;
+}
+export type IntentKind = "feature" | "bugfix" | "refactor" | "formatting" | "generated";
+/** A symbol/file/glob scope the intent is allowed to touch. */
+export type ScopeRef = string;
+/** Machine-checkable invariants. `constraints` (NL) is human prose; these are enforced. */
+export type ConstraintKind = "forbid_public_api_break" | "forbid_behavior_change" | "require_tests";
+export interface Intent extends BaseObject {
+    type: "intent";
+    title: string;
+    owner: string;
+    kind: IntentKind;
+    priority: "low" | "normal" | "high" | "critical";
+    constraints: string[];
+    /** Structured, enforced invariants. Take precedence over NL `constraints`. */
+    constraintKinds?: ConstraintKind[];
+    successCriteria: string[];
+    allowedScopes: ScopeRef[];
+    createdAt: string;
+}
+export interface Session extends BaseObject {
+    type: "session";
+    intentOid: string;
+    actor: Actor;
+    baseViewOid: string | null;
+    /** Distilled, redaction-safe context. Raw transcripts live out of band. */
+    summary: string;
+    openedEntities: ScopeRef[];
+    toolCalls: string[];
+    startedAt: string;
+}
+export type OperationKind = "put_file" | "delete_file" | "rename_file" | "set_symbol" | "rename_symbol" | "move_symbol" | "note";
+export interface OperationTarget {
+    /** What conceptual entity this op changes. */
+    entityKind: "file" | "symbol" | "contract" | "config" | "test";
+    /** Stable entity id. file: the path. symbol: `<path>#<symbolName>`. */
+    entityId: string;
+}
+export interface OperationBody {
+    kind: OperationKind;
+    /** put_file / rename_file / set_symbol destination path. */
+    path?: string;
+    /** rename_file source path. */
+    fromPath?: string;
+    /** put_file content, or set_symbol's new symbol text. */
+    blobOid?: string;
+    /** set_symbol / rename_symbol: the top-level symbol name (the OLD name for rename). */
+    symbolName?: string;
+    /** rename_symbol: the new symbol name. */
+    newName?: string;
+}
+export interface Operation extends BaseObject {
+    type: "operation";
+    sessionOid: string;
+    intentOid: string;
+    actor: Actor;
+    target: OperationTarget;
+    body: OperationBody;
+    /** Direct causal predecessors (this op was authored "after" seeing these). */
+    causalDeps: string[];
+    /** Human/agent statement of purpose for this single op. */
+    declaredPurpose: string;
+    /** Declared reads/effects — used by the semantic-conflict detector. */
+    effects?: {
+        reads?: ScopeRef[];
+        changesBehavior?: boolean;
+        breaksPublicApi?: boolean;
+    };
+    /** Lamport time for deterministic tie-break of concurrent ops. */
+    lamport: number;
+    createdAt: string;
+    /** Self-reported confidence; advisory, never authoritative. */
+    confidence?: number;
+    /**
+     * Lineage (Phase 8). Which line this op was authored on; absent ⇒ "main". A line
+     * materializes only its own ops + everything inherited from its fork checkpoint, so
+     * two lines can hold intentionally different content on the same entity without
+     * contending. See docs/09 G1.
+     */
+    line?: string;
+    /** Provenance for a ported/backported/cherry-picked op: the source op's oid. */
+    derivedFrom?: string;
+    /** The op this one reverts (forward-only inverse). */
+    revertOf?: string;
+    /** Additional authors (git Co-authored-by). The signing `actor` stays single. */
+    coAuthors?: Actor[];
+    /** Stash: kept local — excluded from gossip/pull until promoted to shared. */
+    private?: boolean;
+}
+export type OperationStatus = "proposed" | "validating" | "accepted" | "rejected" | "superseded" | "needs_decision" | "quarantined";
+export type EvidenceKind = "parse" | "typecheck" | "lint" | "unit_test" | "integration_test" | "benchmark" | "security_scan" | "api_compat";
+export type EvidenceResult = "pass" | "fail" | "partial" | "not_run";
+export interface Evidence extends BaseObject {
+    type: "evidence";
+    forOps: string[];
+    kind: EvidenceKind;
+    result: EvidenceResult;
+    command?: string;
+    detail?: string;
+    producedBy: Actor;
+    createdAt: string;
+    /**
+     * Phase 11: produced by a secret-less, network-isolated runner over untrusted code.
+     * Such evidence is NOT trusted for the policy gate (you must re-run in the trusted
+     * lane after promotion) — it's the pull_request_target hazard guard.
+     */
+    fromUntrustedRunner?: boolean;
+}
+export interface Decision extends BaseObject {
+    type: "decision";
+    conflictId: string;
+    chosenOps: string[];
+    rejectedOps: string[];
+    reason: string;
+    decidedBy: Actor;
+    /** Optional reusable rule distilled from this decision. */
+    futurePolicy?: string;
+    createdAt: string;
+}
+export interface ViewQuery {
+    /** Only ops in these statuses are candidates (post-reduction). */
+    includeStatuses: OperationStatus[];
+    /** Restrict to these intents (empty = all). */
+    intentOids?: string[];
+    /** Restrict to these sessions (empty = all). */
+    sessionOids?: string[];
+    /** Hard-exclude specific ops. */
+    excludeOps?: string[];
+    /** Lineage (Phase 8): which line to materialize. Absent ⇒ "main". */
+    line?: string;
+}
+export interface View extends BaseObject {
+    type: "view";
+    name: string;
+    baseViewOid: string | null;
+    query: ViewQuery;
+    createdAt: string;
+}
+export interface Checkpoint extends BaseObject {
+    type: "checkpoint";
+    viewOid: string;
+    /** Frontier operation ids that define this state. */
+    headOps: string[];
+    treeHash: string;
+    policyOid: string;
+    materializerVersion: string;
+    evidence: Partial<Record<EvidenceKind, EvidenceResult>>;
+    status: "draft" | "verified" | "released";
+    summary: string;
+    createdAt: string;
+}
+export interface PolicyRule {
+    name: string;
+    /** Coarse trigger; the engine matches these against each conflict/op. */
+    when: {
+        opKind?: OperationKind;
+        breaksPublicApi?: boolean;
+        changesBehavior?: boolean;
+        onConflict?: boolean;
+    };
+    /** Effect on priority/decision. */
+    effect: {
+        type: "require_human";
+    } | {
+        type: "require_evidence";
+        evidence: EvidenceKind;
+        result: EvidenceResult;
+    } | {
+        type: "priority";
+        weight: number;
+    } | {
+        type: "prefer_actor";
+        kind: ActorKind;
+    };
+}
+/** Maps a scope pattern to the actor ids that must approve changes there (Phase 5). */
+export interface OwnerRule {
+    scope: ScopeRef;
+    owners: string[];
+}
+export interface Policy extends BaseObject {
+    type: "policy";
+    version: string;
+    /** Ordered actor trust ladder (higher index = more trusted). */
+    actorTrust: ActorKind[];
+    rules: PolicyRule[];
+    /** Code ownership: who must sign off on changes to which scopes. */
+    owners?: OwnerRule[];
+    createdAt: string;
+}
+export interface WorkLease extends BaseObject {
+    type: "lease";
+    intentOid: string;
+    sessionOid: string;
+    actor: Actor;
+    /** Scopes this lease reserves for writing, e.g. "symbol:mod.ts#alpha", "file:a.ts". */
+    writeScopes: ScopeRef[];
+    mode: "exclusive" | "shared";
+    acquiredAt: string;
+    expiresAt: string;
+    /** Set when explicitly released before expiry. */
+    releasedAt?: string;
+}
+export interface SbomComponent {
+    type: "file" | "library";
+    name: string;
+    version?: string;
+    /** sha256 of the file content, for "file" components. */
+    hash?: string;
+}
+export interface Sbom {
+    bomFormat: "CycloneDX";
+    specVersion: string;
+    components: SbomComponent[];
+}
+/** A built artifact tied to this release (container image, bundle, firmware…). */
+export interface ArtifactRef {
+    type: string;
+    ref: string;
+    digest?: string;
+}
+export interface Release extends BaseObject {
+    type: "release";
+    checkpointOid: string;
+    treeHash: string;
+    sbom: Sbom;
+    artifacts: ArtifactRef[];
+    /** Aggregated evidence of the verified checkpoint. */
+    evidence: Partial<Record<EvidenceKind, EvidenceResult>>;
+    /** Actor ids that signed off on this release. */
+    signedBy: string[];
+    status: "draft" | "released";
+    /** Semantic version + support lifecycle (Phase 6 follow-up). */
+    version?: string;
+    supportStatus?: "supported" | "maintenance" | "eol";
+    createdAt: string;
+}
+export interface Line extends BaseObject {
+    type: "line";
+    name: string;
+    baseLine: string | null;
+    forkCheckpointOid: string | null;
+    createdAt: string;
+}
+export type RoleName = "reader" | "proposer" | "reviewer" | "maintainer" | "admin";
+/** Root-signed membership: federates trust and grants a role. See docs/08. */
+export interface Membership extends BaseObject {
+    type: "membership";
+    actorId: string;
+    publicKey: string;
+    role: RoleName;
+    scopes?: ScopeRef[];
+    issuedBy: string;
+    createdAt: string;
+    revokedAt?: string;
+}
+/** Branch-protection-equivalent rule on a protected view. */
+export interface Protection extends BaseObject {
+    type: "protection";
+    view: string;
+    requiredApprovals: number;
+    requireOwnerApproval: boolean;
+    requiredChecks: EvidenceKind[];
+    finalizeRole: "maintainer" | "admin";
+    requireSignedOps: boolean;
+    requireUpToDate: boolean;
+    allowForcePush: boolean;
+    createdAt: string;
+}
+/**
+ * Phase 11: a reviewer's promotion of quarantined (outsider) ops into the normal
+ * accepted flow — the GitHub "maintainer accepts a fork PR" moment.
+ */
+export interface Promotion extends BaseObject {
+    type: "promotion";
+    ops: string[];
+    by: string;
+    reason?: string;
+    createdAt: string;
+}
+/**
+ * Admin-signed tombstone that evicts a blob's bytes (e.g. a leaked secret) while
+ * preserving its oid — so the Merkle DAG, causalDeps, and treeHash references stay
+ * valid and verifiable, but the plaintext is gone from every replica. GitHub's
+ * secret-purge/BFG analog for an append-only, content-addressed store.
+ */
+export interface Redaction extends BaseObject {
+    type: "redaction";
+    blobOid: string;
+    sha256: string;
+    length: number;
+    reason: string;
+    by: string;
+    createdAt: string;
+}
+/** A reviewer's sign-off on a checkpoint (= PR approve). Gates finalize. */
+export interface Approval extends BaseObject {
+    type: "approval";
+    checkpointOid: string;
+    by: string;
+    verdict: "approve" | "request_changes";
+    reason?: string;
+    createdAt: string;
+}
+/** Break-glass: a signed, EXPIRING waiver of specific required checks for a view. */
+export interface Override extends BaseObject {
+    type: "override";
+    view: string;
+    waiveChecks: EvidenceKind[];
+    reason: string;
+    by: string;
+    expiresAt: string;
+    createdAt: string;
+}
+export type AnyObject = Blob | Intent | Session | Operation | Evidence | Decision | View | Checkpoint | Policy | WorkLease | Release | Line | Membership | Protection | Promotion | Redaction | Override | Approval;
+//# sourceMappingURL=types.d.ts.map

package/dist/objects/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/objects/types.ts"],"names":[],"mappings":"AAgBA,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,QAAQ,GACR,SAAS,GACT,WAAW,GACX,UAAU,GACV,UAAU,GACV,YAAY,GACZ,MAAM,GACN,QAAQ,GACR,OAAO,GACP,SAAS,GACT,MAAM,GACN,YAAY,GACZ,YAAY,GACZ,WAAW,GACX,WAAW,GACX,UAAU,GACV,UAAU,CAAC;AAEf,0EAA0E;AAC1E,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,SAAS,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,UAAU,CAAC;IACjB,+EAA+E;IAC/E,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kFAAkF;IAClF,GAAG,CAAC,EAAE,SAAS,CAAC;CACjB;AAGD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;AACxD,MAAM,WAAW,KAAK;IACpB,IAAI,EAAE,SAAS,CAAC;IAChB,0DAA0D;IAC1D,EAAE,EAAE,MAAM,CAAC;IACX,sCAAsC;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAGD,MAAM,WAAW,IAAK,SAAQ,UAAU;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,QAAQ,CAAC;IACnB;;;;OAIG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,iFAAiF;IACjF,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,MAAM,UAAU,GAAG,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,YAAY,GAAG,WAAW,CAAC;AACxF,+DAA+D;AAC/D,MAAM,MAAM,QAAQ,GAAG,MAAM,CAAC;AAC9B,2FAA2F;AAC3F,MAAM,MAAM,cAAc,GACtB,yBAAyB,GACzB,wBAAwB,GACxB,eAAe,CAAC;AAEpB,MAAM,WAAW,MAAO,SAAQ,UAAU;IACxC,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IACjD,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,8EAA8E;IAC9E,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;IACnC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,aAAa,EAAE,QAAQ,EAAE,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,OAAQ,SAAQ,UAAU;IACzC,IAAI,EAAE,SAAS,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,QAAQ,EAAE,CAAC;IAC3B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,MAAM,aAAa,GACrB,UAAU,GACV,aAAa,GACb,aAAa,GACb,YAAY,GACZ,eAAe,GACf,aAAa,GACb,MAAM,CAAC;AAEX,MAAM,WAAW,eAAe;IAC9B,8CAA8C;IAC9C,UAAU,EAAE,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,MAAM,CAAC;IAC/D,uEAAuE;IACvE,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,aAAa,CAAC;IACpB,4DAA4D;IAC5D,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+BAA+B;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uFAAuF;IACvF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,SAAU,SAAQ,UAAU;IAC3C,IAAI,EAAE,WAAW,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;IACb,MAAM,EAAE,eAAe,CAAC;IACxB,IAAI,EAAE,aAAa,CAAC;IACpB,8EAA8E;IAC9E,UAAU,EAAE,MAAM,EAAE,CAAC;IACrB,2DAA2D;IAC3D,eAAe,EAAE,MAAM,CAAC;IACxB,uEAAuE;IACvE,OAAO,CAAC,EAAE;QACR,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;QACnB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;KAC3B,CAAC;IACF,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,sDAAsD;IACtD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC;IACpB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAID,MAAM,MAAM,eAAe,GACvB,UAAU,GACV,YAAY,GACZ,UAAU,GACV,UAAU,GACV,YAAY,GACZ,gBAAgB,GAChB,aAAa,CAAC;AAGlB,MAAM,MAAM,YAAY,GACpB,OAAO,GACP,WAAW,GACX,MAAM,GACN,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,eAAe,GACf,YAAY,CAAC;AACjB,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAErE,MAAM,WAAW,QAAS,SAAQ,UAAU;IAC1C,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,IAAI,EAAE,YAAY,CAAC;IACnB,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,KAAK,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;CAC/B;AAGD,MAAM,WAAW,QAAS,SAAQ,UAAU;IAC1C,IAAI,EAAE,UAAU,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,KAAK,CAAC;IACjB,2DAA2D;IAC3D,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,SAAS;IACxB,kEAAkE;IAClE,eAAe,EAAE,eAAe,EAAE,CAAC;IACnC,+CAA+C;IAC/C,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,gDAAgD;IAChD,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,IAAK,SAAQ,UAAU;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,KAAK,EAAE,SAAS,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;IACxD,MAAM,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,IAAI,EAAE;QACJ,MAAM,CAAC,EAAE,aAAa,CAAC;QACvB,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,eAAe,CAAC,EAAE,OAAO,CAAC;QAC1B,UAAU,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC;IACF,mCAAmC;IACnC,MAAM,EACF;QAAE,IAAI,EAAE,eAAe,CAAA;KAAE,GACzB;QAAE,IAAI,EAAE,kBAAkB,CAAC;QAAC,QAAQ,EAAE,YAAY,CAAC;QAAC,MAAM,EAAE,cAAc,CAAA;KAAE,GAC5E;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GACpC;QAAE,IAAI,EAAE,cAAc,CAAC;QAAC,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;CAC/C;AAED,uFAAuF;AACvF,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,QAAQ,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,MAAO,SAAQ,UAAU;IACxC,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,UAAU,EAAE,SAAS,EAAE,CAAC;IACxB,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,SAAU,SAAQ,UAAU;IAC3C,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,KAAK,CAAC;IACb,uFAAuF;IACvF,WAAW,EAAE,QAAQ,EAAE,CAAC;IACxB,IAAI,EAAE,WAAW,GAAG,QAAQ,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AACD,MAAM,WAAW,IAAI;IACnB,SAAS,EAAE,WAAW,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AACD,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,OAAQ,SAAQ,UAAU;IACzC,IAAI,EAAE,SAAS,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,IAAI,CAAC;IACX,SAAS,EAAE,WAAW,EAAE,CAAC;IACzB,sDAAsD;IACtD,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,CAAC,CAAC;IACxD,iDAAiD;IACjD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;IAC7B,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,aAAa,CAAC,EAAE,WAAW,GAAG,aAAa,GAAG,KAAK,CAAC;IACpD,SAAS,EAAE,MAAM,CAAC;CACnB;AAMD,MAAM,WAAW,IAAK,SAAQ,UAAU;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD,MAAM,MAAM,QAAQ,GAAG,QAAQ,GAAG,UAAU,GAAG,UAAU,GAAG,YAAY,GAAG,OAAO,CAAC;AAEnF,8EAA8E;AAC9E,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,6DAA6D;AAC7D,MAAM,WAAW,UAAW,SAAQ,UAAU;IAC5C,IAAI,EAAE,YAAY,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,MAAM,CAAC;IAC1B,oBAAoB,EAAE,OAAO,CAAC;IAC9B,cAAc,EAAE,YAAY,EAAE,CAAC;IAC/B,YAAY,EAAE,YAAY,GAAG,OAAO,CAAC;IACrC,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,EAAE,OAAO,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,WAAW,SAAU,SAAQ,UAAU;IAC3C,IAAI,EAAE,WAAW,CAAC;IAClB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAGD;;;;;GAKG;AACH,MAAM,WAAW,SAAU,SAAQ,UAAU;IAC3C,IAAI,EAAE,WAAW,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,4EAA4E;AAC5E,MAAM,WAAW,QAAS,SAAQ,UAAU;IAC1C,IAAI,EAAE,UAAU,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,SAAS,GAAG,iBAAiB,CAAC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qFAAqF;AACrF,MAAM,WAAW,QAAS,SAAQ,UAAU;IAC1C,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,YAAY,EAAE,CAAC;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,SAAS,GACjB,IAAI,GACJ,MAAM,GACN,OAAO,GACP,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,IAAI,GACJ,UAAU,GACV,MAAM,GACN,SAAS,GACT,OAAO,GACP,IAAI,GACJ,UAAU,GACV,UAAU,GACV,SAAS,GACT,SAAS,GACT,QAAQ,GACR,QAAQ,CAAC"}

package/dist/objects/types.js

@@ -0,0 +1,17 @@
+// The AVCS object model.
+//
+// Everything that matters is a content-addressed, append-only object. Code is NOT
+// stored as commits; it is a *projection* computed from the operation graph. The
+// seven first-class object kinds:
+//
+//   intent     — why a change is being made (goal + constraints + scope)
+//   session    — an agent/human work episode against an intent
+//   operation  — a single semantic change unit (the real history)
+//   evidence   — machine-checkable proof attached to operations
+//   decision   — a recorded resolution of a conflict / design choice
+//   checkpoint — a verified (ops + policy + materializer) state vector
+//   view       — a query over the operation graph (replaces branches)
+//
+// Plus `blob` for raw content and `policy` for the merge rules.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/objects/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/objects/types.ts"],"names":[],"mappings":"AAAA,yBAAyB;AACzB,EAAE;AACF,kFAAkF;AAClF,iFAAiF;AACjF,kCAAkC;AAClC,EAAE;AACF,yEAAyE;AACzE,+DAA+D;AAC/D,kEAAkE;AAClE,gEAAgE;AAChE,qEAAqE;AACrE,uEAAuE;AACvE,sEAAsE;AACtE,EAAE;AACF,gEAAgE"}

package/dist/observe/logger.d.ts

@@ -0,0 +1,27 @@
+export type LogLevel = "debug" | "info" | "warn" | "error";
+export interface LogEntry {
+    ts: string;
+    level: LogLevel;
+    event: string;
+    [field: string]: unknown;
+}
+export declare class Logger {
+    #private;
+    constructor(opts?: {
+        sink?: (e: LogEntry) => void;
+        level?: LogLevel;
+        base?: Record<string, unknown>;
+    });
+    log(level: LogLevel, event: string, fields?: Record<string, unknown>): void;
+    debug(event: string, fields?: Record<string, unknown>): void;
+    info(event: string, fields?: Record<string, unknown>): void;
+    warn(event: string, fields?: Record<string, unknown>): void;
+    error(event: string, fields?: Record<string, unknown>): void;
+    /** A logger that adds `fields` to every entry (request/actor context). */
+    child(fields: Record<string, unknown>): Logger;
+}
+/** Silent (default for libraries/tests). */
+export declare function silentLogger(): Logger;
+/** Emit one JSON object per line to stderr (default for CLI/servers). */
+export declare function consoleLogger(level?: LogLevel): Logger;
+//# sourceMappingURL=logger.d.ts.map

package/dist/observe/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/observe/logger.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;AAC3D,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1B;AAID,qBAAa,MAAM;;gBAKL,IAAI,GAAE;QAAE,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC;QAAC,KAAK,CAAC,EAAE,QAAQ,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAO;IAMzG,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GAAG,IAAI;IAI/E,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAC5D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAC3D,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAC3D,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAE5D,0EAA0E;IAC1E,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM;CAI/C;AAED,4CAA4C;AAC5C,wBAAgB,YAAY,IAAI,MAAM,CAErC;AACD,yEAAyE;AACzE,wBAAgB,aAAa,CAAC,KAAK,GAAE,QAAiB,GAAG,MAAM,CAE9D"}

package/dist/observe/logger.js

@@ -0,0 +1,37 @@
+// Structured logging (docs/10 WS-F). JSON entries with a level + event + fields, sent
+// to a pluggable sink. Production wires a console/OTel sink at the entry point (CLI/
+// hub/MCP); the Repo defaults to silent so the test suite stays quiet.
+const ORDER = { debug: 0, info: 1, warn: 2, error: 3 };
+export class Logger {
+    #sink;
+    #min;
+    #base;
+    constructor(opts = {}) {
+        this.#sink = opts.sink ?? (() => { });
+        this.#min = ORDER[opts.level ?? "info"];
+        this.#base = opts.base ?? {};
+    }
+    log(level, event, fields = {}) {
+        if (ORDER[level] < this.#min)
+            return;
+        this.#sink({ ts: new Date().toISOString(), level, event, ...this.#base, ...fields });
+    }
+    debug(event, fields) { this.log("debug", event, fields); }
+    info(event, fields) { this.log("info", event, fields); }
+    warn(event, fields) { this.log("warn", event, fields); }
+    error(event, fields) { this.log("error", event, fields); }
+    /** A logger that adds `fields` to every entry (request/actor context). */
+    child(fields) {
+        const c = new Logger({ sink: this.#sink, base: { ...this.#base, ...fields } });
+        return c;
+    }
+}
+/** Silent (default for libraries/tests). */
+export function silentLogger() {
+    return new Logger();
+}
+/** Emit one JSON object per line to stderr (default for CLI/servers). */
+export function consoleLogger(level = "info") {
+    return new Logger({ level, sink: (e) => process.stderr.write(JSON.stringify(e) + "\n") });
+}
+//# sourceMappingURL=logger.js.map

package/dist/observe/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/observe/logger.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,qFAAqF;AACrF,uEAAuE;AAUvE,MAAM,KAAK,GAA6B,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAEjF,MAAM,OAAO,MAAM;IACjB,KAAK,CAAwB;IAC7B,IAAI,CAAS;IACb,KAAK,CAA0B;IAE/B,YAAY,OAA2F,EAAE;QACvG,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC;QACxC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IAC/B,CAAC;IAED,GAAG,CAAC,KAAe,EAAE,KAAa,EAAE,SAAkC,EAAE;QACtE,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI;YAAE,OAAO;QACrC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;IACvF,CAAC;IACD,KAAK,CAAC,KAAa,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,KAAa,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,KAAa,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAChG,KAAK,CAAC,KAAa,EAAE,MAAgC,IAAU,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAElG,0EAA0E;IAC1E,KAAK,CAAC,MAA+B;QACnC,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;QAC/E,OAAO,CAAC,CAAC;IACX,CAAC;CACF;AAED,4CAA4C;AAC5C,MAAM,UAAU,YAAY;IAC1B,OAAO,IAAI,MAAM,EAAE,CAAC;AACtB,CAAC;AACD,yEAAyE;AACzE,MAAM,UAAU,aAAa,CAAC,QAAkB,MAAM;IACpD,OAAO,IAAI,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5F,CAAC"}

package/dist/observe/metrics.d.ts

@@ -0,0 +1,20 @@
+export interface Timing {
+    count: number;
+    totalMs: number;
+    maxMs: number;
+}
+export declare class Metrics {
+    #private;
+    inc(name: string, by?: number): void;
+    observe(name: string, ms: number): void;
+    /** Time an async operation, recording its duration under `name`. */
+    time<T>(name: string, fn: () => Promise<T>): Promise<T>;
+    snapshot(): {
+        counters: Record<string, number>;
+        timings: Record<string, Timing & {
+            avgMs: number;
+        }>;
+    };
+    reset(): void;
+}
+//# sourceMappingURL=metrics.d.ts.map

package/dist/observe/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../src/observe/metrics.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,MAAM;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,OAAO;;IAIlB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,SAAI,GAAG,IAAI;IAI/B,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI;IAQvC,oEAAoE;IAC9D,IAAI,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAS7D,QAAQ,IAAI;QAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG;YAAE,KAAK,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE;IAUrG,KAAK,IAAI,IAAI;CAId"}

package/dist/observe/metrics.js

@@ -0,0 +1,42 @@
+// Phase/M4 (docs/10 WS-F): minimal in-process metrics. Counters for events and
+// timings for latencies, with a JSON snapshot for /metrics-style scraping or a CLI.
+// No dependency, no I/O — production would forward `snapshot()` to Prometheus/OTel.
+export class Metrics {
+    #counters = new Map();
+    #timings = new Map();
+    inc(name, by = 1) {
+        this.#counters.set(name, (this.#counters.get(name) ?? 0) + by);
+    }
+    observe(name, ms) {
+        const t = this.#timings.get(name) ?? { count: 0, totalMs: 0, maxMs: 0 };
+        t.count += 1;
+        t.totalMs += ms;
+        t.maxMs = Math.max(t.maxMs, ms);
+        this.#timings.set(name, t);
+    }
+    /** Time an async operation, recording its duration under `name`. */
+    async time(name, fn) {
+        const start = performance.now();
+        try {
+            return await fn();
+        }
+        finally {
+            this.observe(name, performance.now() - start);
+        }
+    }
+    snapshot() {
+        const counters = {};
+        for (const [k, v] of [...this.#counters].sort())
+            counters[k] = v;
+        const timings = {};
+        for (const [k, t] of [...this.#timings].sort()) {
+            timings[k] = { ...t, avgMs: t.count ? t.totalMs / t.count : 0 };
+        }
+        return { counters, timings };
+    }
+    reset() {
+        this.#counters.clear();
+        this.#timings.clear();
+    }
+}
+//# sourceMappingURL=metrics.js.map

package/dist/observe/metrics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.js","sourceRoot":"","sources":["../../src/observe/metrics.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,oFAAoF;AACpF,oFAAoF;AAQpF,MAAM,OAAO,OAAO;IAClB,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAErC,GAAG,CAAC,IAAY,EAAE,EAAE,GAAG,CAAC;QACtB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,CAAC,IAAY,EAAE,EAAU;QAC9B,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QACxE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;QACb,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,oEAAoE;IACpE,KAAK,CAAC,IAAI,CAAI,IAAY,EAAE,EAAoB;QAC9C,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,EAAE,CAAC;QACpB,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,QAAQ;QACN,MAAM,QAAQ,GAA2B,EAAE,CAAC;QAC5C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE;YAAE,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACjE,MAAM,OAAO,GAA+C,EAAE,CAAC;QAC/D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC/C,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;CACF"}

package/dist/policy/owners.d.ts

@@ -0,0 +1,5 @@
+import type { OwnerRule } from "../objects/types.ts";
+export type { OwnerRule };
+/** The distinct owners responsible for a contended key, most specific rules first. */
+export declare function ownersFor(key: string, rules: OwnerRule[]): string[];
+//# sourceMappingURL=owners.d.ts.map

package/dist/policy/owners.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"owners.d.ts","sourceRoot":"","sources":["../../src/policy/owners.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAY,MAAM,qBAAqB,CAAC;AAC/D,YAAY,EAAE,SAAS,EAAE,CAAC;AAkB1B,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,EAAE,CAQnE"}

package/dist/policy/owners.js

@@ -0,0 +1,38 @@
+// Phase 5: code ownership.
+//
+// A `require_human` decision shouldn't go to "any human" — public-API and schema
+// changes have *owners*. Owner rules map a scope pattern to the actor ids that must
+// sign off, so the conflict queue can route a break to the right person instead of
+// a generic prompt.
+function matches(rule, key) {
+    const pat = rule.replace(/\*+$/, "");
+    const isPrefix = rule.endsWith("*") || pat.endsWith("/");
+    if (pat === key)
+        return true;
+    if (isPrefix && key.startsWith(pat))
+        return true;
+    // A file scope also owns symbols within (or under) it: rewrite the symbol key to
+    // its file form and match again, so "file:src/api/" covers "symbol:src/api/x.ts#f".
+    if (pat.startsWith("file:") && key.startsWith("symbol:")) {
+        const symFile = key.slice("symbol:".length).split("#")[0] ?? "";
+        const fileScope = `file:${symFile}`;
+        if (pat === fileScope)
+            return true;
+        if (isPrefix && fileScope.startsWith(pat))
+            return true;
+    }
+    return false;
+}
+/** The distinct owners responsible for a contended key, most specific rules first. */
+export function ownersFor(key, rules) {
+    const hits = rules
+        .filter((r) => matches(r.scope, key))
+        // longer (more specific) scope patterns win ordering
+        .sort((a, b) => b.scope.length - a.scope.length);
+    const seen = new Set();
+    for (const h of hits)
+        for (const o of h.owners)
+            seen.add(o);
+    return [...seen];
+}
+//# sourceMappingURL=owners.js.map

package/dist/policy/owners.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"owners.js","sourceRoot":"","sources":["../../src/policy/owners.ts"],"names":[],"mappings":"AAAA,2BAA2B;AAC3B,EAAE;AACF,iFAAiF;AACjF,oFAAoF;AACpF,mFAAmF;AACnF,oBAAoB;AAKpB,SAAS,OAAO,CAAC,IAAc,EAAE,GAAW;IAC1C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IACzD,IAAI,GAAG,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7B,IAAI,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjD,iFAAiF;IACjF,oFAAoF;IACpF,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAChE,MAAM,SAAS,GAAG,QAAQ,OAAO,EAAE,CAAC;QACpC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,QAAQ,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,GAAW,EAAE,KAAkB;IACvD,MAAM,IAAI,GAAG,KAAK;SACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QACrC,qDAAqD;SACpD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5D,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC"}

package/dist/policy/reliability.d.ts

@@ -0,0 +1,7 @@
+import type { Decision, Evidence, Operation } from "../objects/types.ts";
+/**
+ * actorId → reliability in [-CAP, CAP]. +1 per op with trusted passing evidence,
+ * −1 per op a human explicitly rejected. Trust-filter the evidence before passing.
+ */
+export declare function computeReliability(ops: Operation[], evidence: Evidence[], decisions: Decision[]): Map<string, number>;
+//# sourceMappingURL=reliability.d.ts.map

package/dist/policy/reliability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reliability.d.ts","sourceRoot":"","sources":["../../src/policy/reliability.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAKzE;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,SAAS,EAAE,EAChB,QAAQ,EAAE,QAAQ,EAAE,EACpB,SAAS,EAAE,QAAQ,EAAE,GACpB,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAuBrB"}

package/dist/policy/reliability.js

@@ -0,0 +1,41 @@
+// Phase 5: actor trust learning.
+//
+// A fixed actorTrust ladder treats every AI agent the same forever. In practice an
+// agent earns or loses standing: ops it produced that humans rejected, or that
+// failed checks, should weigh less next time; ops with passing trusted evidence
+// should weigh slightly more. This computes a bounded per-actor reliability signal
+// from history (decisions + evidence) — acyclic, so it never feeds back into itself.
+/** Bounded so it nudges ties without overpowering the policy ladder (cf. the C1 bug). */
+const CAP = 3;
+/**
+ * actorId → reliability in [-CAP, CAP]. +1 per op with trusted passing evidence,
+ * −1 per op a human explicitly rejected. Trust-filter the evidence before passing.
+ */
+export function computeReliability(ops, evidence, decisions) {
+    const opActor = new Map(ops.map((o) => [o.oid, o.actor.id]));
+    const raw = new Map();
+    const bump = (actor, d) => raw.set(actor, (raw.get(actor) ?? 0) + d);
+    for (const e of evidence) {
+        if (e.result !== "pass")
+            continue;
+        if (e.producedBy.kind === "ai_agent")
+            continue; // self-reports don't build trust
+        for (const op of e.forOps) {
+            const a = opActor.get(op);
+            if (a)
+                bump(a, 1);
+        }
+    }
+    for (const d of decisions) {
+        for (const op of d.rejectedOps) {
+            const a = opActor.get(op);
+            if (a)
+                bump(a, -1);
+        }
+    }
+    const clamped = new Map();
+    for (const [actor, v] of raw)
+        clamped.set(actor, Math.max(-CAP, Math.min(CAP, v)));
+    return clamped;
+}
+//# sourceMappingURL=reliability.js.map

package/dist/policy/reliability.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reliability.js","sourceRoot":"","sources":["../../src/policy/reliability.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,EAAE;AACF,mFAAmF;AACnF,+EAA+E;AAC/E,gFAAgF;AAChF,mFAAmF;AACnF,qFAAqF;AAIrF,yFAAyF;AACzF,MAAM,GAAG,GAAG,CAAC,CAAC;AAEd;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAgB,EAChB,QAAoB,EACpB,SAAqB;IAErB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAa,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACvE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,KAAa,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAErF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM;YAAE,SAAS;QAClC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,KAAK,UAAU;YAAE,SAAS,CAAC,iCAAiC;QACjF,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YAC1B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC1B,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC1C,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,GAAG;QAAE,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,OAAO,OAAO,CAAC;AACjB,CAAC"}