@jmanuelcorral/openteam 0.1.42 → 0.2.1

package/.opencode/openteam.example.json

@@ -53,5 +53,10 @@
     "frontierTokensPerSession": 250000,
     "hardStopOnBudgetExhaustion": false
   },
-  "privacyMode": "forceLocalOnSensitive"
+  "privacyMode": "forceLocalOnSensitive",
+  "graph": {
+    "mode": "off",
+    "killSwitch": false,
+    "operatorApproval": false
+  }
 }

package/README.es.md

@@ -46,7 +46,7 @@ El router mantiene una garantía de privacidad: con `privacyMode: "forceLocalOnS
 
 ## Requisitos
 
-- opencode compatible con `@opencode-ai/plugin` `1.17.13`.
+- opencode compatible con `@opencode-ai/plugin` `1.18.18`.
 - Bun `1.3.14` para instalaciones, desarrollo y tests reproducibles.
 - Node.js `^22.22.2 || ^24.15.0 || >=26.0.0` para la CLI y el plugin publicados.
 - Runtimes locales opcionales:
@@ -723,13 +723,13 @@ Gates no negociables:
 
 ## Compatibilidad
 
-Consulta [docs/compatibility.md](docs/compatibility.md). Resumen verificado el `2026-08-19`:
+Consulta [docs/compatibility.md](docs/compatibility.md). Resumen verificado el `2026-08-23`:
 
 | Superficie | Versión / contrato |
 | --- | --- |
-| openteam | `0.1.42`; versión actual del paquete |
-| `@opencode-ai/plugin` | `1.17.13` |
-| `@opencode-ai/sdk` | `1.17.13` |
+| openteam | `0.2.1`; versión actual del paquete |
+| `@opencode-ai/plugin` | `1.18.18` |
+| `@opencode-ai/sdk` | `1.18.18` |
 | Hook de routing | `chat.message`; no `chat.params` para cambiar modelo |
 | Subsesiones | `client.session.create` + `client.session.prompt({ body: { model } })` |
 

package/README.md

@@ -51,7 +51,7 @@ The router keeps a privacy guarantee: with `privacyMode: "forceLocalOnSensitive"
 
 ## Requirements
 
-- opencode compatible with `@opencode-ai/plugin` `1.17.13`.
+- opencode compatible with `@opencode-ai/plugin` `1.18.18`.
 - [Bun](https://bun.sh) `1.3.14` for reproducible installs, development, and tests.
 - Node.js `^22.22.2 || ^24.15.0 || >=26.0.0` for the published CLI/plugin.
 - Optional local runtimes:
@@ -340,13 +340,13 @@ Non-negotiable gates (see [docs/testing-and-quality.md](docs/testing-and-quality
 
 ## Compatibility
 
-See [docs/compatibility.md](docs/compatibility.md). Verified summary as of `2026-08-19`:
+See [docs/compatibility.md](docs/compatibility.md). Verified summary as of `2026-08-23`:
 
 | Surface | Version / contract |
 | --- | --- |
-| openteam | `0.1.42`; current package version |
-| `@opencode-ai/plugin` | `1.17.13` |
-| `@opencode-ai/sdk` | `1.17.13` |
+| openteam | `0.2.1`; current package version |
+| `@opencode-ai/plugin` | `1.18.18` |
+| `@opencode-ai/sdk` | `1.18.18` |
 | Routing hook | `chat.message`; not `chat.params` for model changes |
 | Child sessions | `client.session.create` + `client.session.prompt({ body: { model } })` |
 

package/dist/capabilities/types.d.ts

@@ -2,10 +2,10 @@ import { z } from "zod";
 import type { ModelSelection, ProviderKind } from "../router/types";
 export type ComplexityTier = "trivial" | "simple" | "moderate" | "hard";
 export declare const ComplexityTierSchema: z.ZodEnum<{
-    trivial: "trivial";
-    simple: "simple";
-    moderate: "moderate";
     hard: "hard";
+    moderate: "moderate";
+    simple: "simple";
+    trivial: "trivial";
 }>;
 export declare const ModelCapabilityProfileSchema: z.ZodObject<{
     ref: z.ZodObject<{
@@ -13,9 +13,9 @@ export declare const ModelCapabilityProfileSchema: z.ZodObject<{
         modelID: z.ZodString;
     }, z.core.$strip>;
     kind: z.ZodEnum<{
+        frontier: "frontier";
         local: "local";
         router: "router";
-        frontier: "frontier";
     }>;
     contextWindow: z.ZodNumber;
     maxOutputTokens: z.ZodNumber;

package/dist/classifier/types.d.ts

@@ -8,10 +8,10 @@ export type ClassifierResult = {
 };
 export declare const LocalClassifierOutputSchema: z.ZodObject<{
     tier: z.ZodEnum<{
-        trivial: "trivial";
-        simple: "simple";
-        moderate: "moderate";
         hard: "hard";
+        moderate: "moderate";
+        simple: "simple";
+        trivial: "trivial";
     }>;
     confidence: z.ZodNumber;
     reasons: z.ZodArray<z.ZodString>;

package/dist/cli.js

@@ -674,6 +674,7 @@ var GraphModeSchema = z3.enum(["off", "shadow", "active"]);
 var GraphConfigSchema = z3.object({
   mode: GraphModeSchema.default("off"),
   killSwitch: z3.boolean().default(false),
+  operatorApproval: z3.boolean().default(false),
   worktrees: z3.object({
     enabled: z3.boolean().default(false)
   }).default({ enabled: false })
@@ -2035,6 +2036,7 @@ function healthBanner(health) {
     '<div class="graph-health" role="status">',
     chip("gh-recovery", health.recoveryRequired, health.recoveryRequired ? "recuperación requerida" : "sin recuperación"),
     chip("gh-unknown", health.unknownEffects > 0, `efectos desconocidos: ${health.unknownEffects}`),
+    chip("gh-stale", health.staleCompletions > 0, `completaciones tardías: ${health.staleCompletions}`),
     chip("gh-conflict", health.conflicts > 0, `conflictos lease/worktree: ${health.conflicts}`),
     chip("gh-kill", health.killSwitch, health.killSwitch ? "kill switch activo" : "kill switch inactivo"),
     "</div>"
@@ -4424,6 +4426,15 @@ function renderDoctor(input) {
   if (reachable === 0) {
     lines.push("  ⚠ Ningún runtime local alcanzable: todo el tráfico irá a frontier.");
   }
+  if (input.graphHealth !== undefined) {
+    const h = input.graphHealth;
+    lines.push("  graph health:");
+    lines.push(`    recuperación requerida: ${h.recoveryRequired ? "sí" : "no"}`);
+    lines.push(`    efectos desconocidos:   ${h.unknownEffects}`);
+    lines.push(`    completaciones tardías: ${h.staleCompletions}`);
+    lines.push(`    conflictos:             ${h.conflicts}`);
+    lines.push(`    kill switch:            ${h.killSwitch ? "activo" : "inactivo"}`);
+  }
   return lines.join(`
 `);
 }

package/dist/commands/doctor.d.ts

@@ -1,10 +1,12 @@
 import type { OpenTeamConfig } from "../config/schema";
 import type { LocalRuntimeSnapshot } from "../local/types";
+import type { GraphViewHealth } from "../telemetry/graphView";
 export type DoctorInput = {
     config: OpenTeamConfig;
     snapshots: readonly LocalRuntimeSnapshot[];
     telemetryPath: string;
     telemetryRecords: number;
+    graphHealth?: GraphViewHealth;
 };
 export declare function renderDoctor(input: DoctorInput): string;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;CAC1B,CAAC;AAWF,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAkCvD"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAC3C,aAAa,EAAE,MAAM,CAAC;IACtB,gBAAgB,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,eAAe,CAAC;CAC/B,CAAC;AAWF,wBAAgB,YAAY,CAAC,KAAK,EAAE,WAAW,GAAG,MAAM,CAgDvD"}

package/dist/commands/graph.d.ts

@@ -1,6 +1,9 @@
 import type { ConfigSource } from "../config/resolve";
 import type { GraphMode } from "../config/schema";
+import type { GraphJournalHealth } from "../graph/types";
 import type { WorktreeReconcileReport } from "../orchestrator/worktreeReconciler";
+import type { LegacyImportRecordV1 } from "../storage/graph/importLegacy";
+import type { MigrationBackup, MigrationPlan } from "../storage/graph/migration";
 import type { LeaseRecord } from "../storage/graph/workspaceLease";
 /**
  * GE-045 — operator commands for the graph runtime as pure dry-run plans.
@@ -17,8 +20,6 @@ import type { LeaseRecord } from "../storage/graph/workspaceLease";
  *   - Cancelling a run held by another holder (a stale takeover) is blocked
  *     unless the operator explicitly forces it.
  */
-/** Health of the on-disk journal tail as classified by recovery. */
-export type GraphJournalHealth = "clean" | "recovered" | "corrupt";
 /** Settled, side-effect-free view of the graph runtime for the operator. */
 export type GraphHealthSnapshot = {
     /** Where the effective graph config was resolved from. */
@@ -70,4 +71,29 @@ export declare function planGraphCancel(snapshot: GraphHealthSnapshot, options:
  * the operator can see isolation is off without any worktree being touched.
  */
 export declare function renderWorktreeReconciliation(report: WorktreeReconcileReport): string;
+/** Action a migration command would take. */
+export type MigrationActionKind = "none" | "dry-run" | "backup" | "apply" | "rollback" | "blocked";
+/** Result of planning a migration command. */
+export type MigrationActionPlan = {
+    readonly kind: MigrationActionKind;
+    readonly reason: string;
+    readonly safe: boolean;
+    /** Number of records the action would affect. */
+    readonly recordCount: number;
+};
+/** Plan a migration dry-run from a settled migration plan. */
+export declare function planMigrationDryRun(plan: MigrationPlan): MigrationActionPlan;
+/** Plan a backup creation from current authority. */
+export declare function planMigrationBackup(authority: readonly LegacyImportRecordV1[]): MigrationActionPlan;
+/** Options for planning a migration apply. */
+export type MigrationApplyOptions = {
+    /** Operator explicitly acknowledges applying a migration. */
+    readonly acknowledge?: boolean;
+};
+/** Plan a migration apply from a settled migration plan. */
+export declare function planMigrationApply(plan: MigrationPlan, options?: MigrationApplyOptions): MigrationActionPlan;
+/** Plan a rollback from a validated backup. */
+export declare function planMigrationRollback(backup: MigrationBackup, currentAuthority: readonly LegacyImportRecordV1[]): MigrationActionPlan;
+/** Render a migration action plan for the operator. */
+export declare function renderMigrationPlan(plan: MigrationActionPlan): string;
 //# sourceMappingURL=graph.d.ts.map

package/dist/commands/graph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/commands/graph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAEnE;;;;;;;;;;;;;;GAcG;AAEH,oEAAoE;AACpE,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,CAAC;AAEnE,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAAG;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;IAClC,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IACxC,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,kDAAkD;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAExE,8CAA8C;AAC9C,MAAM,MAAM,eAAe,GAAG;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,mBAAmB,GAAG;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,kBAAkB,GAAG;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAUF,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAkBvE;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAejB;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,kBAAkB,GAC1B,eAAe,CAejB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAoBR"}
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/commands/graph.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oCAAoC,CAAC;AAClF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EACd,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAGnE;;;;;;;;;;;;;;GAcG;AAEH,4EAA4E;AAC5E,MAAM,MAAM,mBAAmB,GAAG;IAChC,0DAA0D;IAC1D,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,oDAAoD;IACpD,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;IAClC,qEAAqE;IACrE,QAAQ,CAAC,KAAK,EAAE,WAAW,GAAG,SAAS,CAAC;IACxC,2BAA2B;IAC3B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IACrC,kDAAkD;IAClD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAAC;AAEF,2EAA2E;AAC3E,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAExE,8CAA8C;AAC9C,MAAM,MAAM,eAAe,GAAG;IAC5B,iCAAiC;IACjC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,mBAAmB,GAAG;IAChC,8EAA8E;IAC9E,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC,CAAC;AAEF,+CAA+C;AAC/C,MAAM,MAAM,kBAAkB,GAAG;IAC/B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAUF,yEAAyE;AACzE,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAoBvE;AAED,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAejB;AAED,6EAA6E;AAC7E,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,EAAE,kBAAkB,GAC1B,eAAe,CAejB;AAED;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,uBAAuB,GAC9B,MAAM,CAoBR;AAMD,6CAA6C;AAC7C,MAAM,MAAM,mBAAmB,GAC3B,MAAM,GACN,SAAS,GACT,QAAQ,GACR,OAAO,GACP,UAAU,GACV,SAAS,CAAC;AAEd,8CAA8C;AAC9C,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,8DAA8D;AAC9D,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,aAAa,GAAG,mBAAmB,CAuB5E;AAED,qDAAqD;AACrD,wBAAgB,mBAAmB,CACjC,SAAS,EAAE,SAAS,oBAAoB,EAAE,GACzC,mBAAmB,CAOrB;AAED,8CAA8C;AAC9C,MAAM,MAAM,qBAAqB,GAAG;IAClC,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;CAChC,CAAC;AAEF,4DAA4D;AAC5D,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,aAAa,EACnB,OAAO,GAAE,qBAA0B,GAClC,mBAAmB,CA+BrB;AAED,+CAA+C;AAC/C,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,eAAe,EACvB,gBAAgB,EAAE,SAAS,oBAAoB,EAAE,GAChD,mBAAmB,CAsBrB;AAED,uDAAuD;AACvD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,mBAAmB,GAAG,MAAM,CAUrE"}

package/dist/config/graphFeatureGate.d.ts

@@ -0,0 +1,101 @@
+/**
+ * **Cutover gate** for Graph active mode (GE-057).
+ *
+ * Pure and deterministic — no I/O, clock, random, or env vars. The gate
+ * evaluates pre-parsed certificate statuses, migration state, and operator
+ * approval. All inputs are injected by the wiring layer (`index.ts`).
+ *
+ * Design decisions:
+ *
+ * 1. **Noisy degradation, not abort.** When the gate denies `active`, the
+ *    effective mode degrades to `off` with explicit violations. This is
+ *    preferable to aborting the entire plugin (disproportionate for an opt-in
+ *    feature) and to silent degradation (the operator would believe they're in
+ *    `active`). Every violation carries a distinct code and human-readable
+ *    detail so the operator can distinguish "absent" from "invalid" from
+ *    "stale" — diagnostics with different remedies.
+ *
+ * 2. **No raw certificate reads.** The gate never inspects certificate fields.
+ *    It receives `CertificateStatus` values produced by the recomputing
+ *    parsers (`parseShadowCertificate`, `parseReleaseCertificate`,
+ *    `parseSoakCertificate`), which derive verdicts from evidence. This module
+ *    itself contains no version logic. A `status: "valid"` means the parser
+ *    accepted it — verdict recomputed from the embedded evidence and digest
+ *    verified. For shadow and release that acceptance additionally required the
+ *    live opencode version to match the version stamped in the certificate; the
+ *    soak parser performs no live-version check, so its opencode guarantee rests
+ *    on the eligibility filter applied to the recorded evidence, not on this
+ *    gate.
+ *
+ * 3. **Operator approval is a declaration, not a proof.** The `operatorApproval`
+ *    flag records that the operator has reviewed the certificates and completed
+ *    migration. Nothing in the system can verify the operator actually read the
+ *    certificates or performed migration locally. This is an organizational
+ *    trust boundary, not a cryptographic guarantee. We say so explicitly rather
+ *    than building a mechanism that *appears* to verify what it cannot.
+ *
+ * 4. **Absence is not zero — it's a distinct failure.** Missing, unreadable,
+ *    expired, and invalid certificates are all distinguished so the operator
+ *    gets the right remediation advice.
+ */
+/** Status of a certificate after the wiring layer attempted to parse it. */
+export type CertificateStatus = {
+    readonly status: "valid";
+    readonly digest: string;
+} | {
+    readonly status: "absent";
+} | {
+    readonly status: "invalid";
+    readonly code: string;
+    readonly detail: string;
+};
+/**
+ * Migration readiness as determined by the wiring layer.
+ *
+ * - `complete`: no pending migration work (empty ledger, or all imported).
+ * - `pending`: ledger has entries that may not be imported yet.
+ * - `unknown`: could not determine (e.g., ledger unreadable).
+ */
+export type MigrationStatus = "complete" | "pending" | "unknown";
+/** All inputs the gate needs, pre-resolved by the wiring layer. */
+export type GraphGateInput = {
+    readonly shadow: CertificateStatus;
+    readonly release: CertificateStatus;
+    readonly soak: CertificateStatus;
+    readonly migration: MigrationStatus;
+    readonly operatorApproval: boolean;
+};
+/**
+ * Violation codes. Each maps to a distinct failure with a distinct remedy.
+ * Codes use kebab-case with the certificate name as prefix so log grep is
+ * unambiguous.
+ */
+export type GateViolationCode = "shadow-certificate-absent" | "shadow-certificate-invalid" | "release-certificate-absent" | "release-certificate-invalid" | "soak-certificate-absent" | "soak-certificate-invalid" | "migration-pending" | "migration-unknown" | "operator-approval-missing";
+/** A single gate violation with code and human-readable detail. */
+export type GateViolation = {
+    readonly code: GateViolationCode;
+    readonly detail: string;
+};
+/** Result of evaluating the cutover gate. */
+export type GraphGateResult = {
+    /** `true` only when every condition is satisfied. */
+    readonly allowed: boolean;
+    /** All violations found, even when `allowed` is already `false`. */
+    readonly violations: readonly GateViolation[];
+};
+/**
+ * Evaluates the cutover gate. Pure and deterministic: same inputs always
+ * produce the same result.
+ *
+ * All five conditions are **independently necessary**: shadow, release, soak,
+ * migration, and operator approval. A single missing condition closes the gate.
+ * All violations are collected (not short-circuited) so the operator sees
+ * everything that needs fixing.
+ */
+export declare function evaluateGraphGate(input: GraphGateInput): GraphGateResult;
+/**
+ * Whether the cutover gate applies to a given mode. Only `active` mode
+ * requires the gate — `shadow` and `off` bypass it entirely.
+ */
+export declare function isGateApplicable(mode: "off" | "shadow" | "active"): boolean;
+//# sourceMappingURL=graphFeatureGate.d.ts.map

package/dist/config/graphFeatureGate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphFeatureGate.d.ts","sourceRoot":"","sources":["../../src/config/graphFeatureGate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAIH,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAA;CAAE,GAC7B;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAIN;;;;;;GAMG;AACH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAIjE,mEAAmE;AACnE,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC,CAAC;AAIF;;;;GAIG;AACH,MAAM,MAAM,iBAAiB,GACzB,2BAA2B,GAC3B,4BAA4B,GAC5B,4BAA4B,GAC5B,6BAA6B,GAC7B,yBAAyB,GACzB,0BAA0B,GAC1B,mBAAmB,GACnB,mBAAmB,GACnB,2BAA2B,CAAC;AAEhC,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,CAAC;AAIF,6CAA6C;AAC7C,MAAM,MAAM,eAAe,GAAG;IAC5B,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,UAAU,EAAE,SAAS,aAAa,EAAE,CAAC;CAC/C,CAAC;AAuBF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,eAAe,CAyCxE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,GAAG,OAAO,CAE3E"}

package/dist/config/migrations.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/config/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,kDAAkD;AAClD,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC;AAEjD,8CAA8C;AAC9C,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B,yDAAyD;AACzD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM;CAM3D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAoBnD"}
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../src/config/migrations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,kDAAkD;AAClD,eAAO,MAAM,sBAAsB,EAAG,CAAU,CAAC;AAEjD,8CAA8C;AAC9C,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,qBAAqB,CAAC;AAE1B,yDAAyD;AACzD,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,YAAY,IAAI,EAAE,wBAAwB,EAAE,MAAM,EAAE,MAAM,EAKzD;CACF;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAoBnD"}

package/dist/config/resolve.d.ts

@@ -1,3 +1,4 @@
+import type { GateViolation, GraphGateResult } from "./graphFeatureGate";
 import type { GraphMode, OpenTeamConfig } from "./schema";
 /**
  * Resolver **efectivo** y compartido de la config de Graph (GE-040).
@@ -11,6 +12,10 @@ import type { GraphMode, OpenTeamConfig } from "./schema";
  * - **Shadow sin executor**: solo `active` habilita el executor; `shadow` y
  *   `off` no reciben executor.
  * - **Fuente visible**: el origen de la config se propaga al resultado.
+ * - **Cutover gate (GE-057)**: `active` mode additionally requires the cutover
+ *   gate to pass. When the gate denies, `effectiveMode` degrades to `off` and
+ *   `gateDenied` is `true`. This degradation is **never silent**: the wiring
+ *   layer emits warnings for each violation.
  *
  * Puro: sin I/O, reloj ni estado global.
  */
@@ -20,7 +25,7 @@ export type ConfigSource = "file" | "inline" | "default";
 export type ResolvedGraphConfig = {
     /** Modo declarado en la config (default `off`). */
     readonly configuredMode: GraphMode;
-    /** Modo efectivo tras aplicar el kill switch. */
+    /** Modo efectivo tras aplicar el kill switch and cutover gate. */
     readonly effectiveMode: GraphMode;
     /** Solo `active` habilita el executor. */
     readonly executorEnabled: boolean;
@@ -28,7 +33,21 @@ export type ResolvedGraphConfig = {
     readonly killSwitch: boolean;
     /** Origen de la config. */
     readonly source: ConfigSource;
+    /**
+     * `true` when the cutover gate denied `active` mode and degraded to `off`.
+     * Absent or `false` when the gate was not evaluated (non-active modes) or
+     * when it passed.
+     */
+    readonly gateDenied?: boolean;
+    /** Violations found by the cutover gate, if evaluated. */
+    readonly gateViolations?: readonly GateViolation[];
 };
 /** Resuelve la config de Graph efectiva a partir de la config y su origen. */
 export declare function resolveGraphConfig(config: OpenTeamConfig, source: ConfigSource): ResolvedGraphConfig;
+/**
+ * Applies the cutover gate result to a resolved config. When the gate denies
+ * `active` mode, degrades `effectiveMode` to `off` and marks `gateDenied`.
+ * Pure: the gate result is pre-computed by the wiring layer.
+ */
+export declare function applyGraphGate(resolved: ResolvedGraphConfig, gateResult: GraphGateResult): ResolvedGraphConfig;
 //# sourceMappingURL=resolve.d.ts.map

package/dist/config/resolve.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/config/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1D;;;;;;;;;;;;;;GAcG;AAEH,uEAAuE;AACvE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEzD,iDAAiD;AACjD,MAAM,MAAM,mBAAmB,GAAG;IAChC,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC;IACnC,iDAAiD;IACjD,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;IAClC,0CAA0C;IAC1C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,2BAA2B;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;CAC/B,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,YAAY,GACnB,mBAAmB,CAWrB"}
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../src/config/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAE1D;;;;;;;;;;;;;;;;;;GAkBG;AAEH,uEAAuE;AACvE,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEzD,iDAAiD;AACjD,MAAM,MAAM,mBAAmB,GAAG;IAChC,mDAAmD;IACnD,QAAQ,CAAC,cAAc,EAAE,SAAS,CAAC;IACnC,kEAAkE;IAClE,QAAQ,CAAC,aAAa,EAAE,SAAS,CAAC;IAClC,0CAA0C;IAC1C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,2BAA2B;IAC3B,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,2BAA2B;IAC3B,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,0DAA0D;IAC1D,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;CACpD,CAAC;AAEF,8EAA8E;AAC9E,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,cAAc,EACtB,MAAM,EAAE,YAAY,GACnB,mBAAmB,CAWrB;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,mBAAmB,EAC7B,UAAU,EAAE,eAAe,GAC1B,mBAAmB,CAWrB"}

package/dist/config/schema.d.ts

@@ -4,13 +4,13 @@ export declare const ModelRefSchema: z.ZodObject<{
     modelID: z.ZodString;
 }, z.core.$strip>;
 export declare const RouterModeSchema: z.ZodEnum<{
-    economy: "economy";
     balanced: "balanced";
+    economy: "economy";
     quality: "quality";
 }>;
 export declare const PrivacyModeSchema: z.ZodEnum<{
-    forceLocalOnSensitive: "forceLocalOnSensitive";
     consentBeforeFrontier: "consentBeforeFrontier";
+    forceLocalOnSensitive: "forceLocalOnSensitive";
     off: "off";
 }>;
 export declare const BaselineModeSchema: z.ZodEnum<{
@@ -22,9 +22,9 @@ export declare const BaselineModeSchema: z.ZodEnum<{
  * observa sin ejecutar efectos; `active` habilita el executor. Default `off`.
  */
 export declare const GraphModeSchema: z.ZodEnum<{
+    active: "active";
     off: "off";
     shadow: "shadow";
-    active: "active";
 }>;
 /**
  * Sección `graph` de la config. Opcional: cuando falta, el resolver aplica
@@ -32,11 +32,12 @@ export declare const GraphModeSchema: z.ZodEnum<{
  */
 export declare const GraphConfigSchema: z.ZodObject<{
     mode: z.ZodDefault<z.ZodEnum<{
+        active: "active";
         off: "off";
         shadow: "shadow";
-        active: "active";
     }>>;
     killSwitch: z.ZodDefault<z.ZodBoolean>;
+    operatorApproval: z.ZodDefault<z.ZodBoolean>;
     worktrees: z.ZodDefault<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
@@ -80,16 +81,16 @@ export declare const StorageConfigSchema: z.ZodDefault<z.ZodObject<{
 }, z.core.$strip>>;
 export declare const LocalRuntimeSchema: z.ZodObject<{
     id: z.ZodEnum<{
-        ollama: "ollama";
-        lmstudio: "lmstudio";
         "foundry-local": "foundry-local";
+        lmstudio: "lmstudio";
+        ollama: "ollama";
     }>;
     enabled: z.ZodDefault<z.ZodBoolean>;
     baseURL: z.ZodOptional<z.ZodString>;
     discovery: z.ZodOptional<z.ZodEnum<{
         cli: "cli";
-        sdk: "sdk";
         manual: "manual";
+        sdk: "sdk";
     }>>;
     defaultModel: z.ZodObject<{
         providerID: z.ZodString;
@@ -218,8 +219,8 @@ export declare const OpenTeamConfigObjectSchema: z.ZodObject<{
     }, z.core.$strip>>;
     router: z.ZodDefault<z.ZodObject<{
         mode: z.ZodDefault<z.ZodEnum<{
-            economy: "economy";
             balanced: "balanced";
+            economy: "economy";
             quality: "quality";
         }>>;
         localDefault: z.ZodDefault<z.ZodObject<{
@@ -233,16 +234,16 @@ export declare const OpenTeamConfigObjectSchema: z.ZodObject<{
     local: z.ZodDefault<z.ZodObject<{
         runtimes: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodEnum<{
-                ollama: "ollama";
-                lmstudio: "lmstudio";
                 "foundry-local": "foundry-local";
+                lmstudio: "lmstudio";
+                ollama: "ollama";
             }>;
             enabled: z.ZodDefault<z.ZodBoolean>;
             baseURL: z.ZodOptional<z.ZodString>;
             discovery: z.ZodOptional<z.ZodEnum<{
                 cli: "cli";
-                sdk: "sdk";
                 manual: "manual";
+                sdk: "sdk";
             }>>;
             defaultModel: z.ZodObject<{
                 providerID: z.ZodString;
@@ -257,8 +258,8 @@ export declare const OpenTeamConfigObjectSchema: z.ZodObject<{
         hardStopOnBudgetExhaustion: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
     privacyMode: z.ZodDefault<z.ZodEnum<{
-        forceLocalOnSensitive: "forceLocalOnSensitive";
         consentBeforeFrontier: "consentBeforeFrontier";
+        forceLocalOnSensitive: "forceLocalOnSensitive";
         off: "off";
     }>>;
     console: z.ZodDefault<z.ZodObject<{
@@ -330,11 +331,12 @@ export declare const OpenTeamConfigObjectSchema: z.ZodObject<{
     }, z.core.$strip>>;
     graph: z.ZodOptional<z.ZodObject<{
         mode: z.ZodDefault<z.ZodEnum<{
+            active: "active";
             off: "off";
             shadow: "shadow";
-            active: "active";
         }>>;
         killSwitch: z.ZodDefault<z.ZodBoolean>;
+        operatorApproval: z.ZodDefault<z.ZodBoolean>;
         worktrees: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;
@@ -358,8 +360,8 @@ export declare const OpenTeamConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
     router: z.ZodDefault<z.ZodObject<{
         mode: z.ZodDefault<z.ZodEnum<{
-            economy: "economy";
             balanced: "balanced";
+            economy: "economy";
             quality: "quality";
         }>>;
         localDefault: z.ZodDefault<z.ZodObject<{
@@ -373,16 +375,16 @@ export declare const OpenTeamConfigSchema: z.ZodObject<{
     local: z.ZodDefault<z.ZodObject<{
         runtimes: z.ZodDefault<z.ZodArray<z.ZodObject<{
             id: z.ZodEnum<{
-                ollama: "ollama";
-                lmstudio: "lmstudio";
                 "foundry-local": "foundry-local";
+                lmstudio: "lmstudio";
+                ollama: "ollama";
             }>;
             enabled: z.ZodDefault<z.ZodBoolean>;
             baseURL: z.ZodOptional<z.ZodString>;
             discovery: z.ZodOptional<z.ZodEnum<{
                 cli: "cli";
-                sdk: "sdk";
                 manual: "manual";
+                sdk: "sdk";
             }>>;
             defaultModel: z.ZodObject<{
                 providerID: z.ZodString;
@@ -397,8 +399,8 @@ export declare const OpenTeamConfigSchema: z.ZodObject<{
         hardStopOnBudgetExhaustion: z.ZodDefault<z.ZodBoolean>;
     }, z.core.$strip>>;
     privacyMode: z.ZodDefault<z.ZodEnum<{
-        forceLocalOnSensitive: "forceLocalOnSensitive";
         consentBeforeFrontier: "consentBeforeFrontier";
+        forceLocalOnSensitive: "forceLocalOnSensitive";
         off: "off";
     }>>;
     console: z.ZodDefault<z.ZodObject<{
@@ -470,11 +472,12 @@ export declare const OpenTeamConfigSchema: z.ZodObject<{
     }, z.core.$strip>>;
     graph: z.ZodOptional<z.ZodObject<{
         mode: z.ZodDefault<z.ZodEnum<{
+            active: "active";
             off: "off";
             shadow: "shadow";
-            active: "active";
         }>>;
         killSwitch: z.ZodDefault<z.ZodBoolean>;
+        operatorApproval: z.ZodDefault<z.ZodBoolean>;
         worktrees: z.ZodDefault<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;
         }, z.core.$strip>>;

package/dist/config/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;EAA6C,CAAC;AAC3E,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAC;AACH,eAAO,MAAM,kBAAkB;;;EAA6B,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;EAAsC,CAAC;AAEnE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;iBAe5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;EAAqC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;kBA8C5B,CAAC;AAEL;;GAEG;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAW5B,CAAC;AAWL,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAM7B,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;EAA8B,CAAC;AAC7D,eAAO,MAAM,0BAA0B;;;EAGrC,CAAC;AACH,eAAO,MAAM,8BAA8B;;;EAA4B,CAAC;AAExE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkD7B,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE7B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgErC,CAAC;AAEH,gDAAgD;AAChD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA6B,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,cAAc,GACrB,oBAAoB,CAEtB"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,cAAc;;;iBAGzB,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;EAA6C,CAAC;AAC3E,eAAO,MAAM,iBAAiB;;;;EAI5B,CAAC;AACH,eAAO,MAAM,kBAAkB;;;EAA6B,CAAC;AAE7D;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;EAAsC,CAAC;AAEnE;;;GAGG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;iBAyB5B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;EAAqC,CAAC;AAEpE,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;kBA8C5B,CAAC;AAEL;;GAEG;AAEH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;kBAW5B,CAAC;AAWL,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;iBAM7B,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB;;;EAA8B,CAAC;AAC7D,eAAO,MAAM,0BAA0B;;;EAGrC,CAAC;AACH,eAAO,MAAM,8BAA8B;;;EAA4B,CAAC;AAExE,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAkD7B,CAAC;AAEL;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAE7B,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgErC,CAAC;AAEH,gDAAgD;AAChD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAA6B,CAAC;AAE/D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AACtD,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAC1D,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AACxD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAExE;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,cAAc,GACrB,oBAAoB,CAEtB"}

package/dist/console/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/console/render.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAGV,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAGV,YAAY,EAIb,MAAM,SAAS,CAAC;AASjB,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAyhBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,qBAAqB,GAAG,IAAI,GACvC,MAAM,CAwBR;AAmED,MAAM,MAAM,aAAa,GAAG;IAC1B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;KACnD,CAAC;IACF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,aAAkB,GAC1B,MAAM,CAyDR"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/console/render.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAGV,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAGV,YAAY,EAIb,MAAM,SAAS,CAAC;AASjB,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAyhBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,qBAAqB,GAAG,IAAI,GACvC,MAAM,CAwBR;AAwED,MAAM,MAAM,aAAa,GAAG;IAC1B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;KACnD,CAAC;IACF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,aAAkB,GAC1B,MAAM,CAyDR"}

package/dist/context/redaction.d.ts

@@ -39,10 +39,33 @@ export declare function redactedRef(ref: ContextRef): {
     sha256: string;
     bytes: number;
 };
+/** Claves prohibidas por transportar potencialmente contenido crudo. */
+export declare const FORBIDDEN_RAW_KEYS: ReadonlySet<string>;
 /**
  * Recorre una estructura y lanza `RedactionError` si encuentra alguna clave de
  * contenido crudo. Guard barato para journal/snapshots/telemetría; no valida
  * esquema, solo ausencia de campos crudos.
  */
 export declare function assertReferenceOnly(value: unknown): void;
+/** Result of a counting privacy scan. */
+export type PrivacyScanResult = {
+    /** Number of top-level structures scanned (the denominator). */
+    readonly surfacesScanned: number;
+    /**
+     * Total forbidden-key occurrences across all surfaces. Zero means the
+     * scanner ran, examined the surfaces, and found nothing forbidden.
+     */
+    readonly rawFindings: number;
+};
+/**
+ * Counting privacy scanner. Walks one or more structures and returns both the
+ * number of surfaces examined and the total forbidden-key findings, without
+ * throwing.
+ *
+ * **Surface definition:** one surface = one top-level value passed in the
+ * `surfaces` array. In soak context, this is the trace being scanned — one
+ * trace per observation. The definition is deliberately not inflatable: it
+ * counts logical units of work, not internal leaves.
+ */
+export declare function scanReferenceOnly(surfaces: readonly unknown[]): PrivacyScanResult;
 //# sourceMappingURL=redaction.d.ts.map

package/dist/context/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/context/redaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE1D;;;;;;;;;GASG;AAEH,mEAAmE;AACnE,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBAET,GAAG,EAAE,MAAM;CAMxB;AAED,2DAA2D;AAC3D,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,qEAAqE;AACrE,MAAM,MAAM,MAAM,GAAG;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,UAAU,GACf,aAAa,CAKf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAEA;AAgBD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAkBxD"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/context/redaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE1D;;;;;;;;;GASG;AAEH,mEAAmE;AACnE,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,YAAY,GAAG,EAAE,MAAM,EAKtB;CACF;AAED,2DAA2D;AAC3D,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,qEAAqE;AACrE,MAAM,MAAM,MAAM,GAAG;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,UAAU,GACf,aAAa,CAKf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAEA;AAED,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAWjD,CAAC;AA+BH;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAIxD;AAED,yCAAyC;AACzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,iBAAiB,CASnB"}

package/dist/context/schema.d.ts

@@ -14,8 +14,8 @@ import { z } from "zod";
  */
 /** Clase de privacidad de un artefacto o contrato de contexto. */
 export declare const PrivacyClassSchema: z.ZodEnum<{
-    public: "public";
     internal: "internal";
+    public: "public";
     sensitive: "sensitive";
 }>;
 export type PrivacyClass = z.infer<typeof PrivacyClassSchema>;
@@ -74,8 +74,8 @@ export declare const ArtifactManifestSchema: z.ZodObject<{
     version: z.ZodLiteral<1>;
     taskID: z.ZodString;
     privacyClass: z.ZodEnum<{
-        public: "public";
         internal: "internal";
+        public: "public";
         sensitive: "sensitive";
     }>;
     entries: z.ZodArray<z.ZodObject<{
@@ -105,8 +105,8 @@ export declare const NodeContextContractSchema: z.ZodObject<{
         mediaType: z.ZodOptional<z.ZodString>;
     }, z.core.$strict>>;
     privacyClass: z.ZodEnum<{
-        public: "public";
         internal: "internal";
+        public: "public";
         sensitive: "sensitive";
     }>;
     maxInputTokens: z.ZodOptional<z.ZodNumber>;