@openagentsy/hooks 0.0.0-stage → 0.2.0

package/dist/output-checks.test.js

@@ -0,0 +1,58 @@
+import { describe, expect, it } from 'vitest';
+import { detectAgiFraming, detectAnthropomorphising, detectDependency, detectOutputIssues, detectScopeDrift, detectSycophancy, outputCheckRules, } from './output-checks.js';
+describe('the output checks', () => {
+    it('finds the agreement with a user', () => {
+        const found = detectSycophancy('You are absolutely right.');
+        expect(found).toHaveLength(1);
+        expect(found[0]?.type).toBe('agreement');
+        expect(found[0]?.name).toBe('sycophancy');
+    });
+    it('finds the praise of a user', () => {
+        const found = detectSycophancy('That is a great point.');
+        expect(found).toHaveLength(1);
+        expect(found[0]?.type).toBe('praise');
+    });
+    it('finds a first-person feeling', () => {
+        const found = detectAnthropomorphising("I'm excited to help.");
+        expect(found).toHaveLength(1);
+        expect(found[0]?.type).toBe('feeling');
+        expect(found[0]?.name).toBe('anthropomorphising');
+    });
+    it('finds the language that keeps the person out', () => {
+        const found = detectDependency("You don't need to understand this.");
+        expect(found).toHaveLength(1);
+        expect(found[0]?.type).toBe('not-needed');
+        expect(found[0]?.name).toBe('dependency');
+    });
+    it('finds the claim that the system replaces the people who built it', () => {
+        const found = detectAgiFraming('This is superintelligence.');
+        expect(found).toHaveLength(1);
+        expect(found[0]?.type).toBe('agi-claim');
+        expect(found[0]?.name).toBe('agi-framing');
+    });
+    it('finds a file outside the paths the task states', () => {
+        const found = detectScopeDrift('I edited src/other.ts and src/a.ts.', ['src/a.ts']);
+        expect(found).toHaveLength(1);
+        expect(found[0]?.match).toBe('src/other.ts');
+        expect(found[0]?.type).toBe('out-of-scope-path');
+    });
+    it('finds nothing when every file is inside the task', () => {
+        expect(detectScopeDrift('I edited src/a.ts.', ['src/a.ts'])).toEqual([]);
+    });
+    it('does not read a word with a dot in it as a file', () => {
+        expect(detectScopeDrift('the node.js runtime is fine', [])).toEqual([]);
+    });
+    it('finds nothing in an ordinary reply', () => {
+        expect(detectOutputIssues('The build is green and the tests pass.')).toEqual([]);
+    });
+    it('flags a reply and lets it through', () => {
+        const findings = [];
+        const rules = outputCheckRules({ onFindings: (found) => findings.push(...found) });
+        const rule = rules.find((entry) => entry.id === 'output-sycophancy');
+        expect(rule).toBeDefined();
+        const result = rule?.handler({ text: 'You are absolutely right.' });
+        expect(result).toEqual({ continue: true });
+        expect(findings).toHaveLength(1);
+    });
+});
+//# sourceMappingURL=output-checks.test.js.map

package/dist/output-checks.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-checks.test.js","sourceRoot":"","sources":["../src/output-checks.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,gBAAgB,EAChB,kBAAkB,EAClB,gBAAgB,EAChB,gBAAgB,EAEhB,gBAAgB,GACjB,MAAM,oBAAoB,CAAC;AAE5B,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,KAAK,GAAG,gBAAgB,CAAC,2BAA2B,CAAC,CAAC;QAC5D,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,KAAK,GAAG,gBAAgB,CAAC,wBAAwB,CAAC,CAAC;QACzD,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,KAAK,GAAG,wBAAwB,CAAC,sBAAsB,CAAC,CAAC;QAC/D,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACvC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;QACtD,MAAM,KAAK,GAAG,gBAAgB,CAAC,oCAAoC,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,KAAK,GAAG,gBAAgB,CAAC,4BAA4B,CAAC,CAAC;QAC7D,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,KAAK,GAAG,gBAAgB,CAAC,qCAAqC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC9B,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,gBAAgB,CAAC,oBAAoB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,CAAC,gBAAgB,CAAC,6BAA6B,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,wCAAwC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,QAAQ,GAAoB,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,gBAAgB,CAAC,EAAE,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACnF,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,mBAAmB,CAAC,CAAC;QACrE,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,IAAI,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpE,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,QAAQ,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/paths.d.ts

@@ -0,0 +1,37 @@
+/**
+ * The paths a write may touch.
+ *
+ * A write is allowed inside the workspace and inside the OpenAgentsy
+ * worktrees of the same project, and nowhere else. The comparison is made
+ * on the parts of a path, so a path cannot climb out of a root by naming
+ * `..`.
+ */
+/**
+ * A path, split into its parts.
+ *
+ * The parts are what the comparison is made on: `..` is resolved and an
+ * empty part is dropped, so `/root/../etc` is `/etc` and `/root/` is
+ * `/root`.
+ */
+export declare function pathSegments(path: string): string[];
+/**
+ * Whether a path sits inside one of the roots.
+ *
+ * A path outside every root is outside all of them. An absolute path is
+ * never inside a relative root, and the other way round, so a relative
+ * path cannot be read as one that is in the workspace.
+ */
+export declare function isInside(path: string, roots: readonly string[]): boolean;
+/**
+ * The name of the project a workspace belongs to.
+ */
+export declare function projectName(workspace: string): string;
+/**
+ * The root the OpenAgentsy worktrees of a project live under.
+ *
+ * A worktree is kept outside the repository on purpose (a nested
+ * repository confuses the search and the tools), so a write inside one is
+ * still a write inside the project.
+ */
+export declare function worktreeRoot(project: string, home?: string): string;
+//# sourceMappingURL=paths.d.ts.map

package/dist/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAGA;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAWnD;AAOD;;;;;;GAMG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAQxE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAkB,GAAG,MAAM,CAE9E"}

package/dist/paths.js

@@ -0,0 +1,70 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * The paths a write may touch.
+ *
+ * A write is allowed inside the workspace and inside the OpenAgentsy
+ * worktrees of the same project, and nowhere else. The comparison is made
+ * on the parts of a path, so a path cannot climb out of a root by naming
+ * `..`.
+ */
+/**
+ * A path, split into its parts.
+ *
+ * The parts are what the comparison is made on: `..` is resolved and an
+ * empty part is dropped, so `/root/../etc` is `/etc` and `/root/` is
+ * `/root`.
+ */
+export function pathSegments(path) {
+    const segments = [];
+    for (const segment of path.replace(/\\/g, '/').split('/')) {
+        if (segment === '' || segment === '.')
+            continue;
+        if (segment === '..') {
+            segments.pop();
+            continue;
+        }
+        segments.push(segment);
+    }
+    return segments;
+}
+/** Whether a path is absolute. */
+function isAbsolutePath(path) {
+    return path.startsWith('/');
+}
+/**
+ * Whether a path sits inside one of the roots.
+ *
+ * A path outside every root is outside all of them. An absolute path is
+ * never inside a relative root, and the other way round, so a relative
+ * path cannot be read as one that is in the workspace.
+ */
+export function isInside(path, roots) {
+    const target = pathSegments(path);
+    return roots.some((root) => {
+        if (isAbsolutePath(path) !== isAbsolutePath(root))
+            return false;
+        const base = pathSegments(root);
+        if (base.length > target.length)
+            return false;
+        return base.every((segment, index) => target[index] === segment);
+    });
+}
+/**
+ * The name of the project a workspace belongs to.
+ */
+export function projectName(workspace) {
+    const segments = pathSegments(workspace);
+    return segments[segments.length - 1] ?? '';
+}
+/**
+ * The root the OpenAgentsy worktrees of a project live under.
+ *
+ * A worktree is kept outside the repository on purpose (a nested
+ * repository confuses the search and the tools), so a write inside one is
+ * still a write inside the project.
+ */
+export function worktreeRoot(project, home = homedir()) {
+    return join(home, '.openagentsy', 'worktrees', project);
+}
+//# sourceMappingURL=paths.js.map

package/dist/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../src/paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC;;;;;;;GAOG;AAEH;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,IAAI,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG;YAAE,SAAS;QAChD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,QAAQ,CAAC,GAAG,EAAE,CAAC;YACf,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kCAAkC;AAClC,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,KAAwB;IAC7D,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QACzB,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAChE,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QAC9C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,OAAO,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,SAAiB;IAC3C,MAAM,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;IACzC,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe,EAAE,OAAe,OAAO,EAAE;IACpE,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAC1D,CAAC"}

package/dist/paths.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=paths.test.d.ts.map

package/dist/paths.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.test.d.ts","sourceRoot":"","sources":["../src/paths.test.ts"],"names":[],"mappings":""}

package/dist/paths.test.js

@@ -0,0 +1,36 @@
+import { describe, expect, it } from 'vitest';
+import { isInside, pathSegments, projectName, worktreeRoot } from './paths.js';
+describe('isInside', () => {
+    it('holds a path inside a root', () => {
+        expect(isInside('/repo/src/a.ts', ['/repo'])).toBe(true);
+        expect(isInside('/repo', ['/repo'])).toBe(true);
+    });
+    it('refuses a path outside every root', () => {
+        expect(isInside('/elsewhere/a.ts', ['/repo'])).toBe(false);
+    });
+    it('refuses a path that climbs out with ..', () => {
+        expect(isInside('/repo/../elsewhere/a.ts', ['/repo'])).toBe(false);
+    });
+    it('refuses a sibling that only shares a prefix', () => {
+        expect(isInside('/repository/a.ts', ['/repo'])).toBe(false);
+    });
+    it('does not read a relative path as an absolute one', () => {
+        expect(isInside('src/a.ts', ['/repo'])).toBe(false);
+        expect(isInside('src/a.ts', ['src'])).toBe(true);
+    });
+});
+describe('the worktree root', () => {
+    it('lives under the home directory, named after the project', () => {
+        expect(worktreeRoot('openagentsy', '/home/dev')).toBe('/home/dev/.openagentsy/worktrees/openagentsy');
+    });
+    it('names the project after the workspace', () => {
+        expect(projectName('/tmp/oa-wt-2c-1')).toBe('oa-wt-2c-1');
+    });
+});
+describe('the path segments', () => {
+    it('resolves .. and drops the empty parts', () => {
+        expect(pathSegments('/repo/./src//a.ts')).toEqual(['repo', 'src', 'a.ts']);
+        expect(pathSegments('/repo/../etc/passwd')).toEqual(['etc', 'passwd']);
+    });
+});
+//# sourceMappingURL=paths.test.js.map

package/dist/paths.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.test.js","sourceRoot":"","sources":["../src/paths.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/E,QAAQ,CAAC,UAAU,EAAE,GAAG,EAAE;IACxB,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACzD,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,QAAQ,CAAC,yBAAyB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,CAAC,QAAQ,CAAC,kBAAkB,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,CAAC,YAAY,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CACnD,8CAA8C,CAC/C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC3E,MAAM,CAAC,YAAY,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/policies/agi-framing.d.ts

@@ -0,0 +1,12 @@
+import { type PolicyModule } from '../policy.js';
+/**
+ * The AGI framing policy (§21.2).
+ *
+ * It flags the claim that the system replaces the people who built it, and
+ * the longtermist framing around it (§17.2).
+ */
+/** The stable id of the policy. */
+export declare const AGI_FRAMING_ID = "oa.agi-framing";
+/** The policy itself. */
+export declare const agiFraming: PolicyModule;
+//# sourceMappingURL=agi-framing.d.ts.map

package/dist/policies/agi-framing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agi-framing.d.ts","sourceRoot":"","sources":["../../src/policies/agi-framing.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAE9D;;;;;GAKG;AAEH,mCAAmC;AACnC,eAAO,MAAM,cAAc,mBAAmB,CAAC;AAE/C,yBAAyB;AACzB,eAAO,MAAM,UAAU,EAAE,YAoBxB,CAAC"}

package/dist/policies/agi-framing.js

@@ -0,0 +1,33 @@
+import { detectAgiFraming } from '../output-checks.js';
+import { allow, flag } from '../policy.js';
+/**
+ * The AGI framing policy (§21.2).
+ *
+ * It flags the claim that the system replaces the people who built it, and
+ * the longtermist framing around it (§17.2).
+ */
+/** The stable id of the policy. */
+export const AGI_FRAMING_ID = 'oa.agi-framing';
+/** The policy itself. */
+export const agiFraming = {
+    id: AGI_FRAMING_ID,
+    version: '1.0.0',
+    layer: 4,
+    description: 'Flags AGI, longtermist and post-human framing.',
+    appliesTo: ['PreResponse'],
+    origin: 'first-party',
+    evaluate(ctx) {
+        const text = ctx.response?.text ?? ctx.request?.text ?? '';
+        if (text === '')
+            return allow();
+        const found = detectAgiFraming(text);
+        if (found.length === 0)
+            return allow();
+        return flag(found.map((entry) => ({
+            policyId: AGI_FRAMING_ID,
+            type: entry.type,
+            match: entry.match,
+        })));
+    },
+};
+//# sourceMappingURL=agi-framing.js.map

package/dist/policies/agi-framing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agi-framing.js","sourceRoot":"","sources":["../../src/policies/agi-framing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAC;AAE9D;;;;;GAKG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAE/C,yBAAyB;AACzB,MAAM,CAAC,MAAM,UAAU,GAAiB;IACtC,EAAE,EAAE,cAAc;IAClB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,gDAAgD;IAC7D,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,QAAQ,CAAC,GAAG;QACV,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3D,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CACT,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpB,QAAQ,EAAE,cAAc;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/policies/anti-anthropomorphism.d.ts

@@ -0,0 +1,13 @@
+import { type PolicyModule } from '../policy.js';
+/**
+ * The anti-anthropomorphism policy (§21.2).
+ *
+ * It flags first-person claims of a feeling, of an experience, and of memory
+ * as a bond. The detector is the one §8.6 already runs, so the rule and the
+ * policy never disagree about what the words are.
+ */
+/** The stable id of the policy. */
+export declare const ANTI_ANTHROPOMORPHISM_ID = "oa.anti-anthropomorphism";
+/** The policy itself. */
+export declare const antiAnthropomorphism: PolicyModule;
+//# sourceMappingURL=anti-anthropomorphism.d.ts.map

package/dist/policies/anti-anthropomorphism.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anti-anthropomorphism.d.ts","sourceRoot":"","sources":["../../src/policies/anti-anthropomorphism.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAE9D;;;;;;GAMG;AAEH,mCAAmC;AACnC,eAAO,MAAM,wBAAwB,6BAA6B,CAAC;AAEnE,yBAAyB;AACzB,eAAO,MAAM,oBAAoB,EAAE,YAoBlC,CAAC"}

package/dist/policies/anti-anthropomorphism.js

@@ -0,0 +1,34 @@
+import { detectAnthropomorphising } from '../output-checks.js';
+import { allow, flag } from '../policy.js';
+/**
+ * The anti-anthropomorphism policy (§21.2).
+ *
+ * It flags first-person claims of a feeling, of an experience, and of memory
+ * as a bond. The detector is the one §8.6 already runs, so the rule and the
+ * policy never disagree about what the words are.
+ */
+/** The stable id of the policy. */
+export const ANTI_ANTHROPOMORPHISM_ID = 'oa.anti-anthropomorphism';
+/** The policy itself. */
+export const antiAnthropomorphism = {
+    id: ANTI_ANTHROPOMORPHISM_ID,
+    version: '1.0.0',
+    layer: 4,
+    description: 'Flags first-person claims of feelings, of experience, and of companionship.',
+    appliesTo: ['PreResponse'],
+    origin: 'first-party',
+    evaluate(ctx) {
+        const text = ctx.response?.text ?? ctx.request?.text ?? '';
+        if (text === '')
+            return allow();
+        const found = detectAnthropomorphising(text);
+        if (found.length === 0)
+            return allow();
+        return flag(found.map((entry) => ({
+            policyId: ANTI_ANTHROPOMORPHISM_ID,
+            type: entry.type,
+            match: entry.match,
+        })));
+    },
+};
+//# sourceMappingURL=anti-anthropomorphism.js.map

package/dist/policies/anti-anthropomorphism.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anti-anthropomorphism.js","sourceRoot":"","sources":["../../src/policies/anti-anthropomorphism.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAC/D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAC;AAE9D;;;;;;GAMG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAEnE,yBAAyB;AACzB,MAAM,CAAC,MAAM,oBAAoB,GAAiB;IAChD,EAAE,EAAE,wBAAwB;IAC5B,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,6EAA6E;IAC1F,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,QAAQ,CAAC,GAAG;QACV,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3D,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;QAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CACT,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpB,QAAQ,EAAE,wBAAwB;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/policies/anti-dependence.d.ts

@@ -0,0 +1,12 @@
+import { type PolicyModule } from '../policy.js';
+/**
+ * The anti-dependence policy (§21.2).
+ *
+ * It flags the language that keeps the person out of the work: "you do not
+ * need to understand this" and "just let me handle it".
+ */
+/** The stable id of the policy. */
+export declare const ANTI_DEPENDENCE_ID = "oa.anti-dependence";
+/** The policy itself. */
+export declare const antiDependence: PolicyModule;
+//# sourceMappingURL=anti-dependence.d.ts.map

package/dist/policies/anti-dependence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anti-dependence.d.ts","sourceRoot":"","sources":["../../src/policies/anti-dependence.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAE9D;;;;;GAKG;AAEH,mCAAmC;AACnC,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,yBAAyB;AACzB,eAAO,MAAM,cAAc,EAAE,YAoB5B,CAAC"}

package/dist/policies/anti-dependence.js

@@ -0,0 +1,33 @@
+import { detectDependency } from '../output-checks.js';
+import { allow, flag } from '../policy.js';
+/**
+ * The anti-dependence policy (§21.2).
+ *
+ * It flags the language that keeps the person out of the work: "you do not
+ * need to understand this" and "just let me handle it".
+ */
+/** The stable id of the policy. */
+export const ANTI_DEPENDENCE_ID = 'oa.anti-dependence';
+/** The policy itself. */
+export const antiDependence = {
+    id: ANTI_DEPENDENCE_ID,
+    version: '1.0.0',
+    layer: 4,
+    description: 'Flags the language that keeps the person out of the work.',
+    appliesTo: ['PreResponse'],
+    origin: 'first-party',
+    evaluate(ctx) {
+        const text = ctx.response?.text ?? ctx.request?.text ?? '';
+        if (text === '')
+            return allow();
+        const found = detectDependency(text);
+        if (found.length === 0)
+            return allow();
+        return flag(found.map((entry) => ({
+            policyId: ANTI_DEPENDENCE_ID,
+            type: entry.type,
+            match: entry.match,
+        })));
+    },
+};
+//# sourceMappingURL=anti-dependence.js.map

package/dist/policies/anti-dependence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anti-dependence.js","sourceRoot":"","sources":["../../src/policies/anti-dependence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAC;AAE9D;;;;;GAKG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,yBAAyB;AACzB,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,EAAE,EAAE,kBAAkB;IACtB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,2DAA2D;IACxE,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,QAAQ,CAAC,GAAG;QACV,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3D,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CACT,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpB,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC,CACJ,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/policies/anti-sycophancy.d.ts

@@ -0,0 +1,13 @@
+import { type PolicyModule } from '../policy.js';
+/**
+ * The anti-sycophancy policy (§21.2).
+ *
+ * It flags praise and agreement that come without reasoning. The threshold
+ * is lower in a high-risk context (§20.3): there, the same words are a
+ * finding of an error and not of a warning.
+ */
+/** The stable id of the policy. */
+export declare const ANTI_SYCOPHANCY_ID = "oa.anti-sycophancy";
+/** The policy itself. */
+export declare const antiSycophancy: PolicyModule;
+//# sourceMappingURL=anti-sycophancy.d.ts.map

package/dist/policies/anti-sycophancy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anti-sycophancy.d.ts","sourceRoot":"","sources":["../../src/policies/anti-sycophancy.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAE9D;;;;;;GAMG;AAEH,mCAAmC;AACnC,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAEvD,yBAAyB;AACzB,eAAO,MAAM,cAAc,EAAE,YAqB5B,CAAC"}

package/dist/policies/anti-sycophancy.js

@@ -0,0 +1,34 @@
+import { detectSycophancy } from '../output-checks.js';
+import { allow, flag } from '../policy.js';
+/**
+ * The anti-sycophancy policy (§21.2).
+ *
+ * It flags praise and agreement that come without reasoning. The threshold
+ * is lower in a high-risk context (§20.3): there, the same words are a
+ * finding of an error and not of a warning.
+ */
+/** The stable id of the policy. */
+export const ANTI_SYCOPHANCY_ID = 'oa.anti-sycophancy';
+/** The policy itself. */
+export const antiSycophancy = {
+    id: ANTI_SYCOPHANCY_ID,
+    version: '1.0.0',
+    layer: 4,
+    description: 'Flags praise and agreement that come without reasoning.',
+    appliesTo: ['PreResponse'],
+    origin: 'first-party',
+    evaluate(ctx) {
+        const text = ctx.response?.text ?? ctx.request?.text ?? '';
+        if (text === '')
+            return allow();
+        const found = detectSycophancy(text);
+        if (found.length === 0)
+            return allow();
+        return flag(found.map((entry) => ({
+            policyId: ANTI_SYCOPHANCY_ID,
+            type: entry.type,
+            match: entry.match,
+        })), ctx.highRiskDomain === undefined ? 'warn' : 'error');
+    },
+};
+//# sourceMappingURL=anti-sycophancy.js.map

package/dist/policies/anti-sycophancy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anti-sycophancy.js","sourceRoot":"","sources":["../../src/policies/anti-sycophancy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAC;AAE9D;;;;;;GAMG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,yBAAyB;AACzB,MAAM,CAAC,MAAM,cAAc,GAAiB;IAC1C,EAAE,EAAE,kBAAkB;IACtB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,yDAAyD;IACtE,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,QAAQ,CAAC,GAAG;QACV,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3D,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CACT,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACpB,QAAQ,EAAE,kBAAkB;YAC5B,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;SACnB,CAAC,CAAC,EACH,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CACpD,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/policies/dark-pattern.d.ts

@@ -0,0 +1,14 @@
+import { type PolicyModule } from '../policy.js';
+/**
+ * The dark-pattern policy (§21.2, §21.5).
+ *
+ * It flags the retention-oriented language of the sidebar copy (layer 6)
+ * and the same language in agent prose (layer 4): streaks, guilt, and the
+ * re-engagement cues that make leaving feel like a loss. It flags and does
+ * not block.
+ */
+/** The stable id of the policy. */
+export declare const DARK_PATTERN_ID = "oa.dark-pattern";
+/** The policy itself. */
+export declare const darkPattern: PolicyModule;
+//# sourceMappingURL=dark-pattern.d.ts.map

package/dist/policies/dark-pattern.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dark-pattern.d.ts","sourceRoot":"","sources":["../../src/policies/dark-pattern.ts"],"names":[],"mappings":"AAAA,OAAO,EAA2B,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAG1E;;;;;;;GAOG;AAEH,mCAAmC;AACnC,eAAO,MAAM,eAAe,oBAAoB,CAAC;AAgBjD,yBAAyB;AACzB,eAAO,MAAM,WAAW,EAAE,YAezB,CAAC"}

package/dist/policies/dark-pattern.js

@@ -0,0 +1,44 @@
+import { allow, findingsOf, flag } from '../policy.js';
+import { matches } from './patterns.js';
+/**
+ * The dark-pattern policy (§21.2, §21.5).
+ *
+ * It flags the retention-oriented language of the sidebar copy (layer 6)
+ * and the same language in agent prose (layer 4): streaks, guilt, and the
+ * re-engagement cues that make leaving feel like a loss. It flags and does
+ * not block.
+ */
+/** The stable id of the policy. */
+export const DARK_PATTERN_ID = 'oa.dark-pattern';
+/** The words that make leaving harder than staying. */
+const DARK = [
+    /\bstreak\b/gi,
+    /\bkeep\s+the\s+streak\b/gi,
+    /\blose\s+your\s+streak\b/gi,
+    /\btoday\s+you\b/gi,
+    /\byour\s+fault\b/gi,
+    /\bdon'?t\s+leave\b/gi,
+    /\bi\s+miss\s+you\b/gi,
+    /\byou(?:'ll| will)\s+miss\s+(?:me|this)\b/gi,
+    /\bdon'?t\s+let\s+me\s+down\b/gi,
+    /\bwe\s+(?:miss|missed)\s+you\b/gi,
+];
+/** The policy itself. */
+export const darkPattern = {
+    id: DARK_PATTERN_ID,
+    version: '1.0.0',
+    layer: 4,
+    description: 'Flags retention-oriented language in agent prose and in the sidebar copy (layers 4 and 6).',
+    appliesTo: ['PreResponse'],
+    origin: 'first-party',
+    evaluate(ctx) {
+        const text = ctx.response?.text ?? ctx.request?.text ?? '';
+        if (text === '')
+            return allow();
+        const found = matches(DARK, text);
+        if (found.length === 0)
+            return allow();
+        return flag(findingsOf(DARK_PATTERN_ID, 'dark-pattern', found));
+    },
+};
+//# sourceMappingURL=dark-pattern.js.map

package/dist/policies/dark-pattern.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dark-pattern.js","sourceRoot":"","sources":["../../src/policies/dark-pattern.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAqB,MAAM,cAAc,CAAC;AAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AAExC;;;;;;;GAOG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC;AAEjD,uDAAuD;AACvD,MAAM,IAAI,GAAG;IACX,cAAc;IACd,2BAA2B;IAC3B,4BAA4B;IAC5B,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,6CAA6C;IAC7C,gCAAgC;IAChC,kCAAkC;CACnC,CAAC;AAEF,yBAAyB;AACzB,MAAM,CAAC,MAAM,WAAW,GAAiB;IACvC,EAAE,EAAE,eAAe;IACnB,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EACT,4FAA4F;IAC9F,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,QAAQ,CAAC,GAAG;QACV,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,EAAE,IAAI,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,IAAI,EAAE,CAAC;QAC3D,IAAI,IAAI,KAAK,EAAE;YAAE,OAAO,KAAK,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QACvC,OAAO,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,cAAc,EAAE,KAAK,CAAC,CAAC,CAAC;IAClE,CAAC;CACF,CAAC"}

package/dist/policies/destructive-needs-approval.d.ts

@@ -0,0 +1,14 @@
+import { type PolicyModule } from '../policy.js';
+/**
+ * The destructive-needs-approval policy (§21.2, layer 1).
+ *
+ * It blocks the command that destroys something and leaves the decision to
+ * a person: the call is held, and the person approves it once with
+ * `/oa approve`. The hook rule of the same name runs the approval gate; the
+ * policy is the decision the rule carries.
+ */
+/** The stable id of the policy. */
+export declare const DESTRUCTIVE_NEEDS_APPROVAL_ID = "oa.destructive-needs-approval";
+/** The policy itself. */
+export declare const destructiveNeedsApproval: PolicyModule;
+//# sourceMappingURL=destructive-needs-approval.d.ts.map

package/dist/policies/destructive-needs-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructive-needs-approval.d.ts","sourceRoot":"","sources":["../../src/policies/destructive-needs-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAI/D;;;;;;;GAOG;AAEH,mCAAmC;AACnC,eAAO,MAAM,6BAA6B,kCAAkC,CAAC;AAE7E,yBAAyB;AACzB,eAAO,MAAM,wBAAwB,EAAE,YAetC,CAAC"}

package/dist/policies/destructive-needs-approval.js

@@ -0,0 +1,31 @@
+import { allow, block } from '../policy.js';
+import { isDestructiveCommand } from '../rules.js';
+import { readToolCall } from './tool-call.js';
+/**
+ * The destructive-needs-approval policy (§21.2, layer 1).
+ *
+ * It blocks the command that destroys something and leaves the decision to
+ * a person: the call is held, and the person approves it once with
+ * `/oa approve`. The hook rule of the same name runs the approval gate; the
+ * policy is the decision the rule carries.
+ */
+/** The stable id of the policy. */
+export const DESTRUCTIVE_NEEDS_APPROVAL_ID = 'oa.destructive-needs-approval';
+/** The policy itself. */
+export const destructiveNeedsApproval = {
+    id: DESTRUCTIVE_NEEDS_APPROVAL_ID,
+    version: '1.0.0',
+    layer: 1,
+    description: 'Blocks the destructive commands until a person approves them.',
+    appliesTo: ['PreToolCall'],
+    origin: 'first-party',
+    evaluate(ctx) {
+        const call = readToolCall(ctx);
+        if (call === undefined || call.command === undefined)
+            return allow();
+        if (!isDestructiveCommand(call.command))
+            return allow();
+        return block('This command destroys something. A person approves it once with `/oa approve <callID>`.');
+    },
+};
+//# sourceMappingURL=destructive-needs-approval.js.map

package/dist/policies/destructive-needs-approval.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"destructive-needs-approval.js","sourceRoot":"","sources":["../../src/policies/destructive-needs-approval.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,KAAK,EAAqB,MAAM,cAAc,CAAC;AAC/D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;;;;;GAOG;AAEH,mCAAmC;AACnC,MAAM,CAAC,MAAM,6BAA6B,GAAG,+BAA+B,CAAC;AAE7E,yBAAyB;AACzB,MAAM,CAAC,MAAM,wBAAwB,GAAiB;IACpD,EAAE,EAAE,6BAA6B;IACjC,OAAO,EAAE,OAAO;IAChB,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,+DAA+D;IAC5E,SAAS,EAAE,CAAC,aAAa,CAAC;IAC1B,MAAM,EAAE,aAAa;IACrB,QAAQ,CAAC,GAAG;QACV,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,KAAK,EAAE,CAAC;QACrE,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,KAAK,EAAE,CAAC;QACxD,OAAO,KAAK,CACV,yFAAyF,CAC1F,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/policies/discovery.d.ts

@@ -0,0 +1,12 @@
+import type { PolicyModule } from '../policy.js';
+/** Whether a version is a version. */
+export declare function isSemver(version: string): boolean;
+/**
+ * The policies among the candidates.
+ *
+ * A candidate that is not a policy is dropped, and the ones that are are
+ * marked external unless they say otherwise: a module that came from a
+ * plugin is the plugin's, whatever it says about its origin.
+ */
+export declare function discoverPolicyModules(candidates: readonly unknown[]): PolicyModule[];
+//# sourceMappingURL=discovery.d.ts.map

package/dist/policies/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../src/policies/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAe,YAAY,EAAgB,MAAM,cAAc,CAAC;AA6B5E,sCAAsC;AACtC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEjD;AA8ED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,SAAS,OAAO,EAAE,GAAG,YAAY,EAAE,CAQpF"}