@mozole/cli 1.4.2 → 2.0.0-b

package/dist/governor/fingerprint.js

@@ -1,129 +0,0 @@
-import { createHash } from "node:crypto";
-import { createReadStream } from "node:fs";
-import { readdir } from "node:fs/promises";
-import path from "node:path";
-const ignoredDirectories = new Set([
-    ".cce",
-    ".git",
-    ".react-router",
-    "build",
-    "coverage",
-    "dist",
-    "deploy",
-    "node_modules",
-]);
-const ignoredMozoleDirectories = new Set(["backups", "logs", "qa", "state"]);
-const qaIrrelevant = /^(?:tests?|__tests__)\/|\/(?:__tests__)\/|\.(test|spec)\.[cm]?[jt]sx?$|(^|\/)(biome|vitest)(\.config)?\./i;
-const relevantExtension = /\.(?:[cm]?[jt]sx?|mdx?|css|scss|sass|less|html|json|ya?ml|toml|txt|xml|webmanifest|svg|png|jpe?g|gif|webp|avif|ico|woff2?|php)$/i;
-export function normalizeFingerprintPath(root, file, paths = path) {
-    return paths
-        .relative(paths.resolve(root), paths.resolve(file))
-        .replaceAll("\\", "/");
-}
-function includeFile(relative, profile) {
-    if (!relative || relative.startsWith("../"))
-        return false;
-    if (relative.startsWith(".mozole/"))
-        return false;
-    if (relative === ".mozole/telemetry.json")
-        return false;
-    if (profile !== "verification" && qaIrrelevant.test(relative))
-        return false;
-    if ([
-        "package.json",
-        "package-lock.json",
-        "npm-shrinkwrap.json",
-        "react-router.config.ts",
-        "vite.config.ts",
-        "tsconfig.json",
-        ".htaccess",
-    ].includes(relative))
-        return true;
-    if (relative.startsWith("public/") || /(^|\/)\.env(?:\.|$)/.test(relative))
-        return true;
-    return relevantExtension.test(relative);
-}
-async function filesBelow(root, directory = root) {
-    const found = [];
-    let entries;
-    try {
-        entries = await readdir(directory, { withFileTypes: true });
-    }
-    catch {
-        return found;
-    }
-    entries.sort((left, right) => left.name.localeCompare(right.name));
-    for (const entry of entries) {
-        const absolute = path.join(directory, entry.name);
-        const relative = normalizeFingerprintPath(root, absolute);
-        try {
-            if (entry.isSymbolicLink())
-                continue;
-            if (entry.isDirectory()) {
-                if (ignoredDirectories.has(entry.name))
-                    continue;
-                if (relative.startsWith(".mozole/") &&
-                    ignoredMozoleDirectories.has(entry.name))
-                    continue;
-                found.push(...(await filesBelow(root, absolute)));
-            }
-            else if (entry.isFile()) {
-                found.push(absolute);
-            }
-        }
-        catch { }
-    }
-    return found;
-}
-function stable(value) {
-    if (Array.isArray(value))
-        return `[${value.map(stable).join(",")}]`;
-    if (value && typeof value === "object")
-        return `{${Object.entries(value)
-            .sort(([left], [right]) => left.localeCompare(right))
-            .map(([key, item]) => `${JSON.stringify(key)}:${stable(item)}`)
-            .join(",")}}`;
-    return JSON.stringify(value);
-}
-function configInputs(config, profile) {
-    if (profile === "verification")
-        return {
-            verifiers: config.verifiers,
-            backend: config.backend,
-            mode: config.mode,
-        };
-    return {
-        routes: config.routes,
-        viewports: config.qa.viewports,
-        server: config.qa.server,
-        backend: config.backend,
-        mode: profile,
-    };
-}
-async function safeStreamHash(hash, file) {
-    try {
-        for await (const chunk of createReadStream(file))
-            hash.update(chunk);
-    }
-    catch { }
-}
-export async function projectFingerprint(root, config, profile) {
-    const hash = createHash("sha256");
-    hash.update(`mozole:${profile}:v1\0${process.platform}\0${process.arch}\0${process.version}\0${stable(configInputs(config, profile))}\0`);
-    for (const absolute of await filesBelow(root)) {
-        const relative = normalizeFingerprintPath(root, absolute);
-        if (!includeFile(relative, profile))
-            continue;
-        hash.update(relative);
-        hash.update("\0");
-        await safeStreamHash(hash, absolute);
-        hash.update("\0");
-    }
-    return hash.digest("hex");
-}
-export async function fileFingerprint(file) {
-    const hash = createHash("sha256");
-    await safeStreamHash(hash, file);
-    return hash.digest("hex");
-}
-//# sourceMappingURL=fingerprint.js.map

package/dist/governor/fingerprint.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"fingerprint.js","sourceRoot":"","sources":["../../src/governor/fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,IAAI,MAAM,WAAW,CAAC;AAK7B,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,MAAM;IACN,MAAM;IACN,eAAe;IACf,OAAO;IACP,UAAU;IACV,MAAM;IACN,QAAQ;IACR,cAAc;CACf,CAAC,CAAC;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAC7E,MAAM,YAAY,GAChB,2GAA2G,CAAC;AAC9G,MAAM,iBAAiB,GACrB,kIAAkI,CAAC;AAErI,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,IAAY,EACZ,KAAK,GAAsB,IAAI;IAE/B,OAAO,KAAK;SACT,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAClD,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;AAC3B,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,OAA2B;IAChE,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAClD,IAAI,QAAQ,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,OAAO,KAAK,cAAc,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5E,IACE;QACE,cAAc;QACd,mBAAmB;QACnB,qBAAqB;QACrB,wBAAwB;QACxB,gBAAgB;QAChB,eAAe;QACf,WAAW;KACZ,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAEpB,OAAO,IAAI,CAAC;IACd,IAAI,QAAQ,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,QAAQ,CAAC;QACxE,OAAO,IAAI,CAAC;IACd,OAAO,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,SAAS,GAAG,IAAI;IACtD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAmC,CAAC;IACxC,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC;YACH,IAAI,KAAK,CAAC,cAAc,EAAE;gBAAE,SAAS;YACrC,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAAE,SAAS;gBACjD,IACE,QAAQ,CAAC,UAAU,CAAC,UAAU,CAAC;oBAC/B,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;oBAExC,SAAS;gBACX,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;IACZ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACpE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QACpC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;aACxD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;aACpD,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;aAC9D,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,YAAY,CAAC,MAAoB,EAAE,OAA2B;IACrE,IAAI,OAAO,KAAK,cAAc;QAC5B,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CAAC;IACJ,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS;QAC9B,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,MAAM;QACxB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,IAAI,EAAE,OAAO;KACd,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,IAAmC,EACnC,IAAY;IAEZ,IAAI,CAAC;QACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC,CAAA,CAAC;AACZ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,IAAY,EACZ,MAAoB,EACpB,OAA2B;IAE3B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CACT,UAAU,OAAO,QAAQ,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,OAAO,KAAK,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAC7H,CAAC;IACF,KAAK,MAAM,QAAQ,IAAI,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,QAAQ,GAAG,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QAC1D,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC;YAAE,SAAS;QAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/governor/hook.d.ts

@@ -1,13 +0,0 @@
-interface HookInput {
-    cwd?: unknown;
-    hook_event_name?: unknown;
-    tool_name?: unknown;
-    tool_input?: unknown;
-    tool_response?: unknown;
-}
-import type { GovernorState } from "./state.js";
-export declare function isValidJustification(reason: unknown, retrievals?: GovernorState["cceRetrievals"], fingerprint?: string, now?: number): boolean;
-export declare function evaluateGovernorHook(input: HookInput): Promise<Record<string, unknown> | undefined>;
-export declare function governorHookCommand(): Promise<number>;
-export {};
-//# sourceMappingURL=hook.d.ts.map

package/dist/governor/hook.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook.d.ts","sourceRoot":"","sources":["../../src/governor/hook.ts"],"names":[],"mappings":"AAYA,UAAU,SAAS;IACjB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA8DhD,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,EACf,UAAU,GAAE,aAAa,CAAC,eAAe,CAAM,EAC/C,WAAW,CAAC,EAAE,MAAM,EACpB,GAAG,GAAE,MAAmB,GACvB,OAAO,CAmDT;AAED,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,SAAS,GACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC,CA2U9C;AASD,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,CAW3D"}

package/dist/governor/hook.js

@@ -1,389 +0,0 @@
-import { createHash } from "node:crypto";
-import { access } from "node:fs/promises";
-import path from "node:path";
-import { findProjectRoot, readConfig } from "../config/project.js";
-import { updateTelemetry } from "../telemetry/store.js";
-import { fileFingerprint, normalizeFingerprintPath, projectFingerprint, } from "./fingerprint.js";
-import { readGovernorState, writeGovernorState } from "./state.js";
-const WILDCARD_RETRIEVAL_READ_LIMIT = 3;
-const JUSTIFICATION_EVIDENCE_MAX_AGE_MS = 5 * 60_000;
-const GENERIC_EVIDENCE_WORDS = new Set([
-    "and",
-    "ast",
-    "code",
-    "context",
-    "edit",
-    "editing",
-    "exported",
-    "file",
-    "for",
-    "from",
-    "full",
-    "implement",
-    "implementation",
-    "inspect",
-    "inspecting",
-    "modules",
-    "read",
-    "refactoring",
-    "requested",
-    "source",
-    "structure",
-    "the",
-    "understand",
-    "understanding",
-    "value",
-    "values",
-    "whole",
-    "with",
-]);
-function object(value) {
-    return value && typeof value === "object"
-        ? value
-        : {};
-}
-function hookBlockMessage(reason) {
-    return {
-        hookSpecificOutput: {
-            hookEventName: "PreToolUse",
-            permissionDecision: "deny",
-            permissionReason: reason,
-            additionalContext: reason,
-        },
-    };
-}
-function hookWarnMessage(message) {
-    return {
-        hookSpecificOutput: {
-            hookEventName: "PreToolUse",
-            permissionDecision: "allow",
-            additionalContext: message,
-        },
-    };
-}
-export function isValidJustification(reason, retrievals = {}, fingerprint, now = Date.now()) {
-    if (typeof reason !== "string" || reason.trim().length < 8)
-        return false;
-    const normalizedReason = reason.toLowerCase().replaceAll("\\", "/");
-    const reasonWords = new Set(normalizedReason.match(/[a-z_$][a-z0-9_$.-]*/g) ?? []);
-    for (const [key, retrieval] of Object.entries(retrievals)) {
-        const retrievedAt = Date.parse(retrieval.retrievedAt);
-        const age = now - retrievedAt;
-        if (!Number.isFinite(retrievedAt) ||
-            age < 0 ||
-            age > JUSTIFICATION_EVIDENCE_MAX_AGE_MS ||
-            (fingerprint && retrieval.fingerprint !== fingerprint))
-            continue;
-        if (key !== "*") {
-            const normalizedPath = key.toLowerCase().replaceAll("\\", "/");
-            const basename = path.posix.basename(normalizedPath);
-            if (normalizedReason.includes(normalizedPath) ||
-                normalizedReason.includes(basename))
-                return true;
-        }
-        const query = retrieval.query?.toLowerCase().replaceAll("\\", "/");
-        if (!query)
-            continue;
-        const concreteReferences = [
-            ...(query.match(/(?:[a-z]:)?[a-z0-9_.-]+(?:\/[a-z0-9_.-]+)+(?::\d+(?:-\d+)?)?/g) ?? []),
-            ...(query.match(/\b\d+-\d+\b/g) ?? []),
-        ];
-        if (concreteReferences.some((reference) => normalizedReason.includes(reference)))
-            return true;
-        const queryWords = query.match(/[a-z_$][a-z0-9_$.-]*/g) ?? [];
-        if (queryWords.some((word) => word.length >= 3 &&
-            !GENERIC_EVIDENCE_WORDS.has(word) &&
-            reasonWords.has(word)))
-            return true;
-    }
-    return false;
-}
-export async function evaluateGovernorHook(input) {
-    const cwd = typeof input.cwd === "string" ? input.cwd : process.cwd();
-    const root = await findProjectRoot(cwd);
-    const config = await readConfig(root);
-    if (!config.governor?.enabled)
-        return;
-    const toolName = typeof input.tool_name === "string" ? input.tool_name : "";
-    const toolInput = object(input.tool_input);
-    // 1. CCE query / retrieval tracking
-    const isCceTool = /cce|context_search|expand_chunk|related_context/i.test(toolName);
-    const command = typeof toolInput.command === "string"
-        ? toolInput.command
-        : typeof toolInput.cmd === "string"
-            ? toolInput.cmd
-            : undefined;
-    const isCceCommand = command && /\bcce\s+search\b/i.test(command);
-    if (isCceTool || isCceCommand) {
-        if (input.hook_event_name === "PreToolUse")
-            return;
-        const response = object(input.tool_response);
-        if (response.isError === true ||
-            response.error ||
-            (typeof response.exit_code === "number" && response.exit_code !== 0))
-            return;
-        const state = await readGovernorState(root);
-        const fingerprint = await projectFingerprint(root, config, "verification");
-        const targetFile = [
-            toolInput.file_path,
-            toolInput.path,
-            toolInput.filename,
-        ].find((item) => typeof item === "string");
-        const query = typeof toolInput.query === "string" ? toolInput.query : command;
-        const retrievedAt = new Date().toISOString();
-        state.cceRetrievals["*"] = {
-            retrievedAt,
-            ...(query ? { query } : {}),
-            fingerprint,
-            remainingReads: WILDCARD_RETRIEVAL_READ_LIMIT,
-        };
-        if (targetFile) {
-            const rel = normalizeFingerprintPath(root, path.resolve(cwd, targetFile));
-            state.cceRetrievals[rel] = {
-                retrievedAt,
-                ...(query ? { query } : {}),
-                fingerprint,
-            };
-        }
-        await writeGovernorState(root, state);
-        return;
-    }
-    if (input.hook_event_name === "PostToolUse")
-        return;
-    // 2. File read evaluation (CCE-first gating & repeated-read blocking)
-    const candidate = [
-        toolInput.file_path,
-        toolInput.path,
-        toolInput.filename,
-        toolInput.AbsolutePath,
-        toolInput.TargetFile,
-    ].find((item) => typeof item === "string");
-    if (candidate &&
-        (/read|file|view/i.test(toolName) ||
-            (command && /\b(cat|head|less|type)\s+/i.test(command)))) {
-        const absolute = path.resolve(cwd, candidate);
-        if (absolute !== root &&
-            !absolute.startsWith(`${path.resolve(root)}${path.sep}`))
-            return;
-        try {
-            await access(absolute);
-        }
-        catch {
-            return;
-        }
-        const relPath = normalizeFingerprintPath(root, absolute);
-        const content = await fileFingerprint(absolute);
-        const isBounded = toolInput.offset !== undefined ||
-            toolInput.limit !== undefined ||
-            toolInput.StartLine !== undefined ||
-            toolInput.EndLine !== undefined ||
-            toolInput.start_line !== undefined ||
-            toolInput.end_line !== undefined;
-        const justification = toolInput.reason ?? toolInput.justification;
-        const region = `${String(toolInput.offset ?? toolInput.StartLine ?? "")}\0${String(toolInput.limit ?? toolInput.EndLine ?? "")}`;
-        const key = `${relPath}\0${region}`;
-        const state = await readGovernorState(root);
-        const previous = state.reads[key];
-        const fileRetrieval = state.cceRetrievals[relPath];
-        const wildcardRetrieval = state.cceRetrievals["*"];
-        const currentFingerprint = await projectFingerprint(root, config, "verification");
-        const hasJustification = isValidJustification(justification, state.cceRetrievals, currentFingerprint);
-        const currentCceRetrieval = fileRetrieval?.fingerprint === currentFingerprint ||
-            (wildcardRetrieval?.fingerprint === currentFingerprint &&
-                (wildcardRetrieval.remainingReads ?? 0) > 0);
-        if (fileRetrieval?.fingerprint !== currentFingerprint &&
-            wildcardRetrieval?.fingerprint === currentFingerprint &&
-            (wildcardRetrieval.remainingReads ?? 0) > 0) {
-            wildcardRetrieval.remainingReads = Math.max(0, (wildcardRetrieval.remainingReads ?? 0) - 1);
-            await writeGovernorState(root, state);
-        }
-        // CCE-first gate: non-trivial source reads require current retrieval evidence.
-        if (!currentCceRetrieval) {
-            const message = `CCE REQUIRED\n\nUse CCE \`context_search\` before inspecting ${relPath}. If retrieval is insufficient, use \`expand_chunk\`/\`related_context\`, then a bounded changed-region read. Full-file reads require a concrete correctness reason.`;
-            if (config.telemetry?.enabled) {
-                await updateTelemetry(root, (telemetry) => {
-                    telemetry.governor.fullReadsBlockedAfterCce++;
-                    telemetry.governor.modelFacingDiagnosticChars += message.length;
-                });
-            }
-            state.reads[key] = {
-                content,
-                seenAt: new Date().toISOString(),
-                blocked: true,
-            };
-            await writeGovernorState(root, state);
-            return hookBlockMessage(message);
-        }
-        // Current CCE retrieval still does not authorize an unjustified broad read.
-        if (currentCceRetrieval && !isBounded && !hasJustification) {
-            const message = `CCE GUARD\n\n${relPath} was already retrieved via CCE. Escalate progressively:\n  1. Targeted additional CCE query\n  2. Bounded range read (offset/limit or StartLine/EndLine)\n  3. Full-file read only when genuinely necessary with a concrete reason.`;
-            if (config.telemetry?.enabled) {
-                await updateTelemetry(root, (telemetry) => {
-                    telemetry.governor.fullReadsBlockedAfterCce++;
-                    telemetry.governor.modelFacingDiagnosticChars += message.length;
-                });
-            }
-            state.reads[key] = {
-                content,
-                seenAt: new Date().toISOString(),
-                blocked: true,
-            };
-            await writeGovernorState(root, state);
-            return hookBlockMessage(message);
-        }
-        // Repeated read check: same file region unchanged without justification
-        if (previous?.content === content &&
-            !previous.blocked &&
-            !hasJustification) {
-            if (config.governor.mode === "warn" && previous.warned) {
-                return;
-            }
-            const message = `CONTEXT GUARD\n\n${relPath} was already inspected and has not changed. Prefer CCE, git diff, or a changed-region read.`;
-            if (config.telemetry?.enabled) {
-                await updateTelemetry(root, (telemetry) => {
-                    telemetry.governor.repeatedReadsBlocked++;
-                    telemetry.governor.repeatedReadWarnings++;
-                    telemetry.governor.modelFacingDiagnosticChars += message.length;
-                });
-            }
-            previous.seenAt = new Date().toISOString();
-            previous.warned = true;
-            previous.blocked = true;
-            await writeGovernorState(root, state);
-            if (config.governor.mode === "warn") {
-                return hookWarnMessage(message);
-            }
-            return hookBlockMessage(message);
-        }
-        // Only bounded reads or explicitly justified full-file escalation reach here.
-        const escalationLevel = isBounded
-            ? "bounded"
-            : "justified_full";
-        if (hasJustification && config.telemetry?.enabled) {
-            await updateTelemetry(root, (telemetry) => {
-                telemetry.governor.justifiedEscalations++;
-            });
-        }
-        state.reads[key] = {
-            content,
-            seenAt: new Date().toISOString(),
-            escalationLevel,
-        };
-        const keys = Object.keys(state.reads);
-        for (const stale of keys.slice(0, Math.max(0, keys.length - 100)))
-            delete state.reads[stale];
-        await writeGovernorState(root, state);
-        return;
-    }
-    // 3. Command evaluation (Visual QA gate, rerun checks, runaway guard)
-    if (!command || !/bash|exec|shell/i.test(toolName))
-        return;
-    const qaFingerprint = await projectFingerprint(root, config, "qa");
-    const verifyFingerprint = await projectFingerprint(root, config, "verification");
-    const state = await readGovernorState(root);
-    // Visual QA hard gate
-    const isVisualQa = /\b(mozole\s+qa|npm\s+run\s+qa:visual)\b.*--visual|\bnpm\s+run\s+qa:visual\b/i.test(command);
-    if (isVisualQa) {
-        const normalPassed = state.qa.normal?.fingerprint === qaFingerprint;
-        const hasVisualReason = /--reason=|--force/i.test(command) ||
-            Boolean(process.env.MOZOLE_VISUAL_REASON);
-        if (normalPassed && !hasVisualReason) {
-            const message = "VISUAL QA GUARD\n\nRoutine QA passed. Visual QA is only allowed when explicitly requested by user or when deterministic QA fails. Run routine `mozole qa` or stop.";
-            if (config.telemetry?.enabled) {
-                await updateTelemetry(root, (telemetry) => {
-                    telemetry.governor.visualQaBlocked++;
-                    telemetry.governor.modelFacingDiagnosticChars += message.length;
-                });
-            }
-            return hookBlockMessage(message);
-        }
-    }
-    // Redundant verify check
-    const isVerify = /\b(mozole\s+verify|npm\s+run\s+verify)\b/i.test(command) &&
-        !command.includes("--force");
-    if (isVerify && state.verification?.fingerprint === verifyFingerprint) {
-        const message = "VERIFY GUARD\n\nNo relevant changes since the last successful verification. Stop or make a relevant edit.";
-        if (config.telemetry?.enabled) {
-            await updateTelemetry(root, (telemetry) => {
-                telemetry.governor.redundantVerifyBlocked++;
-                telemetry.governor.modelFacingDiagnosticChars += message.length;
-            });
-        }
-        if (config.governor.mode === "enforce") {
-            return hookBlockMessage(message);
-        }
-        return hookWarnMessage(message);
-    }
-    // Redundant QA check
-    const isNormalQa = /\b(mozole\s+qa|npm\s+run\s+qa)\b/i.test(command) &&
-        !isVisualQa &&
-        !command.includes("--force");
-    if (isNormalQa && state.qa.normal?.fingerprint === qaFingerprint) {
-        const message = "QA GUARD\n\nRoutine QA already passed for the current project state. Stop exploration or make a relevant edit.";
-        if (config.telemetry?.enabled) {
-            await updateTelemetry(root, (telemetry) => {
-                telemetry.governor.redundantQaBlocked++;
-                telemetry.governor.modelFacingDiagnosticChars += message.length;
-            });
-        }
-        if (config.governor.mode === "enforce") {
-            return hookBlockMessage(message);
-        }
-        return hookWarnMessage(message);
-    }
-    // Runaway / duplicate command guard
-    const commandHash = createHash("sha256").update(command).digest("hex");
-    const previous = state.commands.find((item) => item.command === commandHash && item.fingerprint === verifyFingerprint);
-    if (!previous) {
-        state.commands.push({
-            command: commandHash,
-            fingerprint: verifyFingerprint,
-            seenAt: new Date().toISOString(),
-        });
-        state.commands = state.commands.slice(-50);
-        await writeGovernorState(root, state);
-        return;
-    }
-    if (previous.warned)
-        return;
-    previous.warned = true;
-    previous.seenAt = new Date().toISOString();
-    await writeGovernorState(root, state);
-    const complete = state.verification?.fingerprint === verifyFingerprint &&
-        Object.values(state.qa).some((evidence) => evidence.fingerprint === qaFingerprint);
-    const message = complete
-        ? "RUNAWAY GUARD\n\nTask is complete (verification and QA passed). Stop exploration."
-        : "EXECUTION GUARD\n\nThis identical command already ran without a relevant project mutation.";
-    if (config.telemetry?.enabled) {
-        await updateTelemetry(root, (telemetry) => {
-            telemetry.governor.repeatedWorkWarnings++;
-            telemetry.governor.modelFacingDiagnosticChars += message.length;
-        });
-    }
-    if (complete || config.governor.mode === "enforce") {
-        return hookBlockMessage(message);
-    }
-    return hookWarnMessage(message);
-}
-async function stdin() {
-    const chunks = [];
-    for await (const chunk of process.stdin)
-        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-    return Buffer.concat(chunks).toString("utf8");
-}
-export async function governorHookCommand() {
-    try {
-        const raw = await stdin();
-        if (!raw.trim())
-            return 0;
-        const result = await evaluateGovernorHook(JSON.parse(raw));
-        if (result)
-            process.stdout.write(JSON.stringify(result));
-        return 0;
-    }
-    catch {
-        // Hooks must never crash host process
-        return 0;
-    }
-}
-//# sourceMappingURL=hook.js.map

package/dist/governor/hook.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"hook.js","sourceRoot":"","sources":["../../src/governor/hook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC1C,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EACL,eAAe,EACf,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAYnE,MAAM,6BAA6B,GAAG,CAAC,CAAC;AACxC,MAAM,iCAAiC,GAAG,CAAC,GAAG,MAAM,CAAC;AACrD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,KAAK;IACL,KAAK;IACL,MAAM;IACN,SAAS;IACT,MAAM;IACN,SAAS;IACT,UAAU;IACV,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,WAAW;IACX,gBAAgB;IAChB,SAAS;IACT,YAAY;IACZ,SAAS;IACT,MAAM;IACN,aAAa;IACb,WAAW;IACX,QAAQ;IACR,WAAW;IACX,KAAK;IACL,YAAY;IACZ,eAAe;IACf,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;CACP,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QACvC,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO;QACL,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,MAAM;YAC1B,gBAAgB,EAAE,MAAM;YACxB,iBAAiB,EAAE,MAAM;SAC1B;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO;QACL,kBAAkB,EAAE;YAClB,aAAa,EAAE,YAAY;YAC3B,kBAAkB,EAAE,OAAO;YAC3B,iBAAiB,EAAE,OAAO;SAC3B;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAe,EACf,UAAU,GAAmC,EAAE,EAC/C,WAAoB,EACpB,GAAG,GAAW,IAAI,CAAC,GAAG,EAAE;IAExB,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,gBAAgB,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACpE,MAAM,WAAW,GAAG,IAAI,GAAG,CACzB,gBAAgB,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,CACtD,CAAC;IACF,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1D,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,GAAG,GAAG,WAAW,CAAC;QAC9B,IACE,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;YAC7B,GAAG,GAAG,CAAC;YACP,GAAG,GAAG,iCAAiC;YACvC,CAAC,WAAW,IAAI,SAAS,CAAC,WAAW,KAAK,WAAW,CAAC;YAEtD,SAAS;QACX,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;YAChB,MAAM,cAAc,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;YACrD,IACE,gBAAgB,CAAC,QAAQ,CAAC,cAAc,CAAC;gBACzC,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAEnC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,kBAAkB,GAAG;YACzB,GAAG,CAAC,KAAK,CAAC,KAAK,CACb,+DAA+D,CAChE,IAAI,EAAE,CAAC;YACR,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;SACvC,CAAC;QACF,IACE,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACpC,gBAAgB,CAAC,QAAQ,CAAC,SAAS,CAAC,CACrC;YAED,OAAO,IAAI,CAAC;QACd,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,uBAAuB,CAAC,IAAI,EAAE,CAAC;QAC9D,IACE,UAAU,CAAC,IAAI,CACb,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,MAAM,IAAI,CAAC;YAChB,CAAC,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC;YACjC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CACxB;YAED,OAAO,IAAI,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgB;IAEhB,MAAM,GAAG,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;IACtE,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO;QAAE,OAAO;IACtC,MAAM,QAAQ,GAAG,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAE3C,oCAAoC;IACpC,MAAM,SAAS,GAAG,kDAAkD,CAAC,IAAI,CACvE,QAAQ,CACT,CAAC;IACF,MAAM,OAAO,GACX,OAAO,SAAS,CAAC,OAAO,KAAK,QAAQ;QACnC,CAAC,CAAC,SAAS,CAAC,OAAO;QACnB,CAAC,CAAC,OAAO,SAAS,CAAC,GAAG,KAAK,QAAQ;YACjC,CAAC,CAAC,SAAS,CAAC,GAAG;YACf,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,YAAY,GAAG,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAElE,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,eAAe,KAAK,YAAY;YAAE,OAAO;QACnD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QAC7C,IACE,QAAQ,CAAC,OAAO,KAAK,IAAI;YACzB,QAAQ,CAAC,KAAK;YACd,CAAC,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,CAAC,CAAC;YAEpE,OAAO;QACT,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,cAAc,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG;YACjB,SAAS,CAAC,SAAS;YACnB,SAAS,CAAC,IAAI;YACd,SAAS,CAAC,QAAQ;SACnB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;QAC3D,MAAM,KAAK,GACT,OAAO,SAAS,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC;QAClE,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC7C,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;YACzB,WAAW;YACX,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,WAAW;YACX,cAAc,EAAE,6BAA6B;SAC9C,CAAC;QACF,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,wBAAwB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC;YAC1E,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG;gBACzB,WAAW;gBACX,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC3B,WAAW;aACZ,CAAC;QACJ,CAAC;QACD,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,IAAI,KAAK,CAAC,eAAe,KAAK,aAAa;QAAE,OAAO;IAEpD,sEAAsE;IACtE,MAAM,SAAS,GAAG;QAChB,SAAS,CAAC,SAAS;QACnB,SAAS,CAAC,IAAI;QACd,SAAS,CAAC,QAAQ;QAClB,SAAS,CAAC,YAAY;QACtB,SAAS,CAAC,UAAU;KACrB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IAE3D,IACE,SAAS;QACT,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC/B,CAAC,OAAO,IAAI,4BAA4B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC9C,IACE,QAAQ,KAAK,IAAI;YACjB,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAExD,OAAO;QACT,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,wBAAwB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,SAAS,GACb,SAAS,CAAC,MAAM,KAAK,SAAS;YAC9B,SAAS,CAAC,KAAK,KAAK,SAAS;YAC7B,SAAS,CAAC,SAAS,KAAK,SAAS;YACjC,SAAS,CAAC,OAAO,KAAK,SAAS;YAC/B,SAAS,CAAC,UAAU,KAAK,SAAS;YAClC,SAAS,CAAC,QAAQ,KAAK,SAAS,CAAC;QACnC,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,aAAa,CAAC;QAElE,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,SAAS,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QACjI,MAAM,GAAG,GAAG,GAAG,OAAO,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QACnD,MAAM,iBAAiB,GAAG,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QACnD,MAAM,kBAAkB,GAAG,MAAM,kBAAkB,CACjD,IAAI,EACJ,MAAM,EACN,cAAc,CACf,CAAC;QACF,MAAM,gBAAgB,GAAG,oBAAoB,CAC3C,aAAa,EACb,KAAK,CAAC,aAAa,EACnB,kBAAkB,CACnB,CAAC;QACF,MAAM,mBAAmB,GACvB,aAAa,EAAE,WAAW,KAAK,kBAAkB;YACjD,CAAC,iBAAiB,EAAE,WAAW,KAAK,kBAAkB;gBACpD,CAAC,iBAAiB,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAEjD,IACE,aAAa,EAAE,WAAW,KAAK,kBAAkB;YACjD,iBAAiB,EAAE,WAAW,KAAK,kBAAkB;YACrD,CAAC,iBAAiB,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,EAC3C,CAAC;YACD,iBAAiB,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CACzC,CAAC,EACD,CAAC,iBAAiB,CAAC,cAAc,IAAI,CAAC,CAAC,GAAG,CAAC,CAC5C,CAAC;YACF,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,CAAC;QAED,+EAA+E;QAC/E,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,gEAAgE,OAAO,sKAAsK,CAAC;YAC9P,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;oBACxC,SAAS,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC;oBAC9C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;gBACjB,OAAO;gBACP,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAChC,OAAO,EAAE,IAAI;aACd,CAAC;YACF,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,4EAA4E;QAC5E,IAAI,mBAAmB,IAAI,CAAC,SAAS,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC3D,MAAM,OAAO,GAAG,gBAAgB,OAAO,qOAAqO,CAAC;YAC7Q,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;oBACxC,SAAS,CAAC,QAAQ,CAAC,wBAAwB,EAAE,CAAC;oBAC9C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC;YACD,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;gBACjB,OAAO;gBACP,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAChC,OAAO,EAAE,IAAI;aACd,CAAC;YACF,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,wEAAwE;QACxE,IACE,QAAQ,EAAE,OAAO,KAAK,OAAO;YAC7B,CAAC,QAAQ,CAAC,OAAO;YACjB,CAAC,gBAAgB,EACjB,CAAC;YACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACvD,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,oBAAoB,OAAO,6FAA6F,CAAC;YACzI,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;oBACxC,SAAS,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;oBAC1C,SAAS,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;oBAC1C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC3C,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;YACvB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAC;YACxB,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpC,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QAED,8EAA8E;QAC9E,MAAM,eAAe,GAAiC,SAAS;YAC7D,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,gBAAgB,CAAC;QAErB,IAAI,gBAAgB,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAClD,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;gBACxC,SAAS,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;YAC5C,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;YACjB,OAAO;YACP,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAChC,eAAe;SAChB,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YAC/D,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,sEAAsE;IACtE,IAAI,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO;IAE3D,MAAM,aAAa,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,iBAAiB,GAAG,MAAM,kBAAkB,CAChD,IAAI,EACJ,MAAM,EACN,cAAc,CACf,CAAC;IACF,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAE5C,sBAAsB;IACtB,MAAM,UAAU,GACd,8EAA8E,CAAC,IAAI,CACjF,OAAO,CACR,CAAC;IACJ,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,YAAY,GAAG,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,aAAa,CAAC;QACpE,MAAM,eAAe,GACnB,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAClC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAE5C,IAAI,YAAY,IAAI,CAAC,eAAe,EAAE,CAAC;YACrC,MAAM,OAAO,GACX,oKAAoK,CAAC;YACvK,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;gBAC9B,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;oBACxC,SAAS,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC;oBACrC,SAAS,CAAC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;gBAClE,CAAC,CAAC,CAAC;YACL,CAAC;YACD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,MAAM,QAAQ,GACZ,2CAA2C,CAAC,IAAI,CAAC,OAAO,CAAC;QACzD,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,QAAQ,IAAI,KAAK,CAAC,YAAY,EAAE,WAAW,KAAK,iBAAiB,EAAE,CAAC;QACtE,MAAM,OAAO,GACX,2GAA2G,CAAC;QAC9G,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;gBACxC,SAAS,CAAC,QAAQ,CAAC,sBAAsB,EAAE,CAAC;gBAC5C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,qBAAqB;IACrB,MAAM,UAAU,GACd,mCAAmC,CAAC,IAAI,CAAC,OAAO,CAAC;QACjD,CAAC,UAAU;QACX,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,UAAU,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,aAAa,EAAE,CAAC;QACjE,MAAM,OAAO,GACX,gHAAgH,CAAC;QACnH,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;YAC9B,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;gBACxC,SAAS,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC;gBACxC,SAAS,CAAC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;YAClE,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACvC,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC;QACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;IAED,oCAAoC;IACpC,MAAM,WAAW,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,CAClC,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,OAAO,KAAK,WAAW,IAAI,IAAI,CAAC,WAAW,KAAK,iBAAiB,CACzE,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;YAClB,OAAO,EAAE,WAAW;YACpB,WAAW,EAAE,iBAAiB;YAC9B,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACjC,CAAC,CAAC;QACH,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3C,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM;QAAE,OAAO;IAC5B,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,CAAC,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEtC,MAAM,QAAQ,GACZ,KAAK,CAAC,YAAY,EAAE,WAAW,KAAK,iBAAiB;QACrD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAC1B,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,KAAK,aAAa,CACrD,CAAC;IACJ,MAAM,OAAO,GAAG,QAAQ;QACtB,CAAC,CAAC,mFAAmF;QACrF,CAAC,CAAC,4FAA4F,CAAC;IAEjG,IAAI,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,CAAC;QAC9B,MAAM,eAAe,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,EAAE;YACxC,SAAS,CAAC,QAAQ,CAAC,oBAAoB,EAAE,CAAC;YAC1C,SAAS,CAAC,QAAQ,CAAC,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,IAAI,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACnD,OAAO,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,KAAK;IAClB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;QACrC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,mBAAmB;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,CAAC;QAC1B,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC,CAAC;QACxE,IAAI,MAAM;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;QACtC,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC"}

package/dist/governor/state.d.ts

@@ -1,45 +0,0 @@
-export interface EvidenceState {
-    fingerprint: string;
-    passedAt: string;
-    checks?: string[];
-    routes?: string[];
-    viewports?: string[];
-    artifacts?: Array<{
-        path: string;
-        sha256: string;
-    }>;
-    reason?: string;
-}
-export interface GovernorState {
-    schemaVersion: 1;
-    verification?: EvidenceState;
-    qa: Record<string, EvidenceState>;
-    reads: Record<string, {
-        content: string;
-        seenAt: string;
-        warned?: boolean;
-        blocked?: boolean;
-        escalationLevel?: "cce" | "bounded" | "justified_full" | "small_file";
-    }>;
-    cceRetrievals: Record<string, {
-        retrievedAt: string;
-        query?: string;
-        fingerprint?: string;
-        remainingReads?: number;
-    }>;
-    commands: Array<{
-        command: string;
-        fingerprint: string;
-        seenAt: string;
-        warned?: boolean;
-        blocked?: boolean;
-    }>;
-}
-export declare const emptyGovernorState: () => GovernorState;
-export declare function readGovernorState(root: string): Promise<GovernorState>;
-export declare function writeGovernorState(root: string, value: GovernorState): Promise<void>;
-export declare function qaStateKey(mode: {
-    interactive: boolean;
-    visual: boolean;
-}): string;
-//# sourceMappingURL=state.d.ts.map

package/dist/governor/state.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../src/governor/state.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AACD,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE,CAAC,CAAC;IACjB,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAClC,KAAK,EAAE,MAAM,CACX,MAAM,EACN;QACE,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,eAAe,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,gBAAgB,GAAG,YAAY,CAAC;KACvE,CACF,CAAC;IACF,aAAa,EAAE,MAAM,CACnB,MAAM,EACN;QACE,WAAW,EAAE,MAAM,CAAC;QACpB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CACF,CAAC;IACF,QAAQ,EAAE,KAAK,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC,CAAC;CACJ;AAED,eAAO,MAAM,kBAAkB,QAAO,aAMpC,CAAC;AASH,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAkC5E;AAED,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,aAAa,GACnB,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE;IAC/B,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,OAAO,CAAC;CACjB,GAAG,MAAM,CAIT"}