@openrig/cli 0.5.1 → 0.5.3

package/dist/lib/path-safety.js

@@ -0,0 +1,24 @@
+/**
+ * Validates that a path is safe: relative, no traversal, no absolute.
+ * @param path - the path to validate
+ * @param label - human-readable label for error messages
+ * @returns error string or null if valid
+ */
+export function validateSafePath(path, label) {
+    if (!path || typeof path !== "string")
+        return `${label}: path is required`;
+    // Windows drive letter absolute
+    if (/^[A-Za-z]:[/\\]/.test(path))
+        return `${label}: absolute paths are not allowed (got "${path}")`;
+    // Normalize backslashes for traversal check
+    const normalized = path.replace(/\\/g, "/");
+    // Absolute path
+    if (normalized.startsWith("/"))
+        return `${label}: absolute paths are not allowed (got "${path}")`;
+    // Traversal
+    const segments = normalized.split("/");
+    if (segments.some((s) => s === ".."))
+        return `${label}: path traversal (..) is not allowed (got "${path}")`;
+    return null;
+}
+//# sourceMappingURL=path-safety.js.map

package/dist/lib/path-safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safety.js","sourceRoot":"","sources":["../../src/lib/path-safety.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,KAAK,oBAAoB,CAAC;IAC3E,gCAAgC;IAChC,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,GAAG,KAAK,0CAA0C,IAAI,IAAI,CAAC;IACpG,4CAA4C;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5C,gBAAgB;IAChB,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,GAAG,KAAK,0CAA0C,IAAI,IAAI,CAAC;IAClG,YAAY;IACZ,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,GAAG,KAAK,8CAA8C,IAAI,IAAI,CAAC;IAC5G,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/permission-policy/policy-ref.d.ts

@@ -0,0 +1,89 @@
+import type { LaunchPosture, PolicySurface } from "./policy-spec.js";
+/** The packaged read-only built-in policy set (README v4: 3 Policy-Mode specs + Operator/YOLO). */
+export declare const BUILTIN_POLICY_NAMES: readonly ["locked", "standard", "open", "yolo"];
+export type BuiltinPolicyName = (typeof BUILTIN_POLICY_NAMES)[number];
+/** deliberate_none: the ruled amendment 5f37e40f — the recorded choice; never file-backed. */
+export type PolicyRefOrigin = "builtin" | "custom" | "deliberate_none";
+export interface ResolvedPolicyRef {
+    /** The ref string, preserved verbatim (travels with the spec through the state). */
+    ref: string;
+    origin: PolicyRefOrigin;
+    /** Present when origin === "builtin": the validated built-in name. */
+    builtinName?: BuiltinPolicyName;
+}
+/**
+ * Validate + classify a permission_policy REF. Returns a STRUCTURED error string for an invalid ref
+ * (an invalid ref is a spec DEFECT, never a silent floor fallback), or null when valid. ABSENT is the
+ * caller's concern (only pass a present value here). `label` prefixes the error for the surfacing
+ * layer (matches the RigSpec validate convention, e.g. "permission_policy" / "pods[0].members[1].
+ * permission_policy").
+ */
+export declare function validatePermissionPolicyRef(value: unknown, label: string): string | null;
+/**
+ * Classify a VALID ref (call validatePermissionPolicyRef first). Preserves + surfaces origin, never
+ * silently reclassifies (origin honesty). Never throws on a validated ref.
+ */
+export declare function classifyPermissionPolicyRef(value: string): ResolvedPolicyRef;
+/**
+ * A restart-stable resolved attachment (dev-guard early ruling, 2026-08-04): persisting only the raw
+ * relative ref is NOT restart-complete. We carry the raw `ref` (for export truth + later skill apply)
+ * PLUS `resolvedTarget` (canonical package identifier for built-ins; the absolute resolved path for
+ * custom) + `declaringDir` (custom) + `origin`, so a restore can reopen/validate the custom policy
+ * and re-derive surface + launch_posture without the original in-memory RigSpec.
+ */
+export interface ResolvedPolicyAttachment {
+    /** Raw ref, preserved verbatim for export + skill apply. */
+    ref: string;
+    origin: PolicyRefOrigin;
+    /** origin=builtin: the validated built-in name. */
+    builtinName?: BuiltinPolicyName;
+    /** custom: the absolute resolved path. builtin: the canonical shipped package-copy path once the
+     * packaging leg rules it (PM lane c76c7153) — ABSENT until then; NEVER a `builtin:<name>` echo of
+     * the raw ref (dev-guard correction 2: the ref is persisted separately for export; duplicating it
+     * here is not restart-stable provenance). */
+    resolvedTarget?: string;
+    /** origin=custom: the canonical (absolute) declaring RigSpec directory — restart-stable provenance. */
+    declaringDir?: string;
+    /** The resolved policy surface, when content was resolvable (custom) or known (built-in). */
+    surface?: PolicySurface;
+    /** Flag-surface launch posture for per-seat binding (floor | full_bypass). */
+    launchPosture: LaunchPosture;
+    /** Guard round-2 (8232199a): TRUE only when custom CONTENT resolution genuinely
+     *  succeeded with USABLE semantics — parse OK + known surface + (flag ⇒ a valid
+     *  launch_posture). Restore trusts a re-derivation ONLY when this is true; otherwise
+     *  the PERSISTED posture carries. Builtins: always true (name-derived semantics). */
+    contentResolved: boolean;
+}
+/** Injected reader so resolution is testable + does not hard-couple the module to fs. Throws when
+ *  the target is missing/unreadable (resolver treats that as an advisory floor, provenance kept). */
+export interface PolicyResolveDeps {
+    readFile: (absolutePath: string) => string;
+}
+/**
+ * The SINGLE mapping point for the built-in policies' canonical shipped package-copy path —
+ * PM-RULED (inline ruling via dev-guard NOT-CLEAR at 9e94c274, lane c76c7153):
+ *   repo source (future):   packages/daemon/policies/builtin/<name>.policy.md
+ *   provenance target:      policies/builtin/<name>.policy.md  (package-relative;
+ *                           module-relative at runtime)
+ * The raw `builtin:<name>` ref stays separate (export truth); this target is the restart-
+ * stable provenance. Built-in CONTENT stays a later leg — no asset read or copy here.
+ */
+export declare function builtinPackageTarget(name: BuiltinPolicyName): string;
+/**
+ * Resolve a VALIDATED, present ref (call validatePermissionPolicyRef first) into a restart-stable
+ * attachment. `declaringDir` is the canonical directory of the RigSpec that declared the ref (custom
+ * refs resolve relative to it — README v4 A2). Flag-surface CONTENT resolution is CORE-owned (guard
+ * ruling): a custom `surface: flag` policy's `launch_posture` (floor|full_bypass) is read here.
+ *   - built-in: name-derived posture bounded to the locked set (yolo → full_bypass, else floor);
+ *     origin + canonical `builtin:<name>` target preserved. Package ASSET existence is a later leg.
+ *   - custom: resolve relative to declaringDir, read + parse (Seam A), derive surface; flag →
+ *     its launch_posture; config → floor (config-surface CONTENT application is deferred to the
+ *     skill; no config write here). Unreadable/invalid → advisory floor, provenance still preserved.
+ */
+export declare function resolvePermissionPolicyAttachment(ref: string, declaringDir: string, deps: PolicyResolveDeps): ResolvedPolicyAttachment;
+/**
+ * Precedence: a per-member ref overrides the rig-level ref; absence at both is undefined (= floor).
+ * member > rig > floor (README v4 + IMPL-PLAN). No pod level exists in the spec surface.
+ */
+export declare function resolvePermissionPolicyRefValue(memberRef: string | null | undefined, rigRef: string | null | undefined): string | undefined;
+//# sourceMappingURL=policy-ref.d.ts.map

package/dist/lib/permission-policy/policy-ref.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-ref.d.ts","sourceRoot":"","sources":["../../../src/lib/permission-policy/policy-ref.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAErE,mGAAmG;AACnG,eAAO,MAAM,oBAAoB,iDAAkD,CAAC;AACpF,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,8FAA8F;AAC9F,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,CAAC;AAIvE,MAAM,WAAW,iBAAiB;IAChC,oFAAoF;IACpF,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,eAAe,CAAC;IACxB,sEAAsE;IACtE,WAAW,CAAC,EAAE,iBAAiB,CAAC;CACjC;AAMD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAsCxF;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,MAAM,GAAG,iBAAiB,CAK5E;AAED;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,4DAA4D;IAC5D,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,eAAe,CAAC;IACxB,mDAAmD;IACnD,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;iDAG6C;IAC7C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uGAAuG;IACvG,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6FAA6F;IAC7F,OAAO,CAAC,EAAE,aAAa,CAAC;IACxB,8EAA8E;IAC9E,aAAa,EAAE,aAAa,CAAC;IAC7B;;;yFAGqF;IACrF,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;qGACqG;AACrG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,MAAM,CAAC;CAC5C;AAED;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,GAAG,MAAM,CAEpE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,iBAAiB,GACtB,wBAAwB,CAuD1B;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAC7C,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EACpC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAChC,MAAM,GAAG,SAAS,CAEpB"}

package/dist/lib/permission-policy/policy-ref.js

@@ -0,0 +1,171 @@
+// Slice-03 (OPR.0.4.8.3) Seam B — permission_policy REF resolution + precedence + launch-posture.
+// The `permission_policy` value attached to a rig or a seat is a REF (not a policy body). Semantics
+// are grounded in Slice03 README v4 (sha256-8 d65afe67), rulings A1/A2/A3 + the Policy/YOLO framing:
+//   - `builtin:<name>`, <name> ∈ {locked, standard, open, yolo} (A1): resolves into the packaged
+//     read-only built-in set (origin=builtin). Unknown name = STRUCTURED error listing the known
+//     set. The `builtin:` prefix is MANDATORY — bare canonical names never resolve (no shadowing).
+//   - a RELATIVE custom path (A2), resolved relative to the DECLARING RigSpec dir (origin=custom);
+//     absolute / `..` traversal / empty segments = STRUCTURED error (a spec defect, NOT a floor
+//     fallback). Reuses the established safe-path discipline (path-safety.validateSafePath).
+//   - `none` = the RECORDED DELIBERATE choice (RULED-FORM-deliberate-none-2026-08-04,
+//     sha256 5f37e40f — the A3 reservation ACTIVATED by its own amendment): third origin
+//     deliberate_none, never resolves to any file, posture identical to absent (floor).
+//   - ABSENT (no value) = the floor (honest absence) — the CALLER passes undefined; not an error.
+// Built-in ASSET packaging is a LATER leg: builtin resolution here is REF-SEMANTICS (prefix→origin),
+// it does NOT read or require the asset file to exist.
+import * as path from "node:path";
+import { validateSafePath } from "../path-safety.js";
+import { parsePolicySpec, validatePolicySpec } from "./policy-spec.js";
+/** The packaged read-only built-in policy set (README v4: 3 Policy-Mode specs + Operator/YOLO). */
+export const BUILTIN_POLICY_NAMES = ["locked", "standard", "open", "yolo"];
+const BUILTIN_PREFIX = "builtin:";
+function isBuiltinName(name) {
+    return BUILTIN_POLICY_NAMES.includes(name);
+}
+/**
+ * Validate + classify a permission_policy REF. Returns a STRUCTURED error string for an invalid ref
+ * (an invalid ref is a spec DEFECT, never a silent floor fallback), or null when valid. ABSENT is the
+ * caller's concern (only pass a present value here). `label` prefixes the error for the surfacing
+ * layer (matches the RigSpec validate convention, e.g. "permission_policy" / "pods[0].members[1].
+ * permission_policy").
+ */
+export function validatePermissionPolicyRef(value, label) {
+    if (typeof value !== "string" || value.trim().length === 0) {
+        return `${label}: permission_policy must be a non-empty string ref`;
+    }
+    if (value === "none") {
+        // RULED amendment (5f37e40f): the A3-reserved literal IS the recorded
+        // deliberate choice — valid; classification/resolution handle it below.
+        return null;
+    }
+    if (value.startsWith(BUILTIN_PREFIX)) {
+        const name = value.slice(BUILTIN_PREFIX.length);
+        if (!isBuiltinName(name)) {
+            return `${label}: unknown built-in policy '${name}' (known: ${BUILTIN_POLICY_NAMES.join(", ")})`;
+        }
+        return null;
+    }
+    // Anti-shadowing (A1: "no canonical-name shadowing, ever"): a BARE canonical name must NOT
+    // masquerade as a custom ref — that would silently mis-resolve origin (and, for `yolo`, silently
+    // downgrade full_bypass→floor). Require the explicit builtin: prefix.
+    if (isBuiltinName(value)) {
+        return `${label}: '${value}' is a built-in policy name — use 'builtin:${value}' (the builtin: prefix is mandatory; bare names never resolve, no shadowing)`;
+    }
+    // Custom relative ref — the established safe-path discipline (absolute / .. rejected)…
+    const pathErr = validateSafePath(value, label);
+    if (pathErr)
+        return pathErr;
+    // …plus the explicit empty-segment rejection (README v4 A2) that validateSafePath does not cover.
+    const segments = value.replace(/\\/g, "/").split("/");
+    if (segments.some((seg) => seg.length === 0)) {
+        return `${label}: empty path segments are not allowed (got "${value}")`;
+    }
+    // README v4 A2 per-segment charset (the established ref discipline — same class as the
+    // rig-context day-one contract): every segment is a single safe path component.
+    for (const seg of segments) {
+        if (!/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(seg)) {
+            return `${label}: path segment "${seg}" violates the ref charset (each segment must match [A-Za-z0-9][A-Za-z0-9._-]*)`;
+        }
+    }
+    return null;
+}
+/**
+ * Classify a VALID ref (call validatePermissionPolicyRef first). Preserves + surfaces origin, never
+ * silently reclassifies (origin honesty). Never throws on a validated ref.
+ */
+export function classifyPermissionPolicyRef(value) {
+    if (value.startsWith(BUILTIN_PREFIX)) {
+        return { ref: value, origin: "builtin", builtinName: value.slice(BUILTIN_PREFIX.length) };
+    }
+    return { ref: value, origin: "custom" };
+}
+/**
+ * The SINGLE mapping point for the built-in policies' canonical shipped package-copy path —
+ * PM-RULED (inline ruling via dev-guard NOT-CLEAR at 9e94c274, lane c76c7153):
+ *   repo source (future):   packages/daemon/policies/builtin/<name>.policy.md
+ *   provenance target:      policies/builtin/<name>.policy.md  (package-relative;
+ *                           module-relative at runtime)
+ * The raw `builtin:<name>` ref stays separate (export truth); this target is the restart-
+ * stable provenance. Built-in CONTENT stays a later leg — no asset read or copy here.
+ */
+export function builtinPackageTarget(name) {
+    return `policies/builtin/${name}.policy.md`;
+}
+/**
+ * Resolve a VALIDATED, present ref (call validatePermissionPolicyRef first) into a restart-stable
+ * attachment. `declaringDir` is the canonical directory of the RigSpec that declared the ref (custom
+ * refs resolve relative to it — README v4 A2). Flag-surface CONTENT resolution is CORE-owned (guard
+ * ruling): a custom `surface: flag` policy's `launch_posture` (floor|full_bypass) is read here.
+ *   - built-in: name-derived posture bounded to the locked set (yolo → full_bypass, else floor);
+ *     origin + canonical `builtin:<name>` target preserved. Package ASSET existence is a later leg.
+ *   - custom: resolve relative to declaringDir, read + parse (Seam A), derive surface; flag →
+ *     its launch_posture; config → floor (config-surface CONTENT application is deferred to the
+ *     skill; no config write here). Unreadable/invalid → advisory floor, provenance still preserved.
+ */
+export function resolvePermissionPolicyAttachment(ref, declaringDir, deps) {
+    if (ref === "none") {
+        // RULED amendment (5f37e40f): recorded deliberate choice. NEVER resolves to
+        // any file (no resolvedTarget/declaringDir — the A3 no-squatting fence
+        // holds because 'none' stays unreferenceable); posture IDENTICAL to absent
+        // (zero privilege delta — the entire change is record/provenance).
+        return {
+            ref,
+            origin: "deliberate_none",
+            launchPosture: "floor",
+            contentResolved: true, // semantics fully known by construction (like builtins)
+        };
+    }
+    if (ref.startsWith(BUILTIN_PREFIX)) {
+        const builtinName = ref.slice(BUILTIN_PREFIX.length);
+        return {
+            ref,
+            origin: "builtin",
+            builtinName,
+            resolvedTarget: builtinPackageTarget(builtinName),
+            surface: builtinName === "yolo" ? "flag" : undefined,
+            launchPosture: builtinName === "yolo" ? "full_bypass" : "floor",
+            contentResolved: true,
+        };
+    }
+    // Custom ref: resolve relative to the declaring RigSpec directory (never cwd/workspace root).
+    const resolvedTarget = path.resolve(declaringDir, ref);
+    let surface;
+    let launchPosture = "floor";
+    let contentResolved = false;
+    try {
+        const parsed = parsePolicySpec(deps.readFile(resolvedTarget));
+        if (!("error" in parsed)) {
+            const s = parsed.frontmatter["surface"];
+            if (s === "flag" || s === "config")
+                surface = s;
+            // R2 HIGH-2: content is RESOLVED only when the COMPLETE sealed Seam-A frontmatter
+            // contract validates (validatePolicySpec: surface-appropriate required fields,
+            // action-list shapes, schema version, description, …) — parseable-but-invalid
+            // content must NOT be trusted over persisted posture. Advisory read only.
+            const contract = validatePolicySpec(parsed.frontmatter);
+            if (contract.ok && surface === "flag") {
+                const lp = parsed.frontmatter["launch_posture"];
+                if (lp === "floor" || lp === "full_bypass") {
+                    launchPosture = lp;
+                    contentResolved = true;
+                }
+            }
+            else if (contract.ok && surface === "config") {
+                contentResolved = true; // valid config semantics; posture floor is genuine
+            }
+            // invalid contract or unknown surface → NOT resolved (advisory floor, provenance kept)
+        }
+    }
+    catch {
+        // Unreadable/unresolvable at resolve time → advisory floor; ref + provenance still preserved.
+    }
+    return { ref, origin: "custom", resolvedTarget, declaringDir, surface, launchPosture, contentResolved };
+}
+/**
+ * Precedence: a per-member ref overrides the rig-level ref; absence at both is undefined (= floor).
+ * member > rig > floor (README v4 + IMPL-PLAN). No pod level exists in the spec surface.
+ */
+export function resolvePermissionPolicyRefValue(memberRef, rigRef) {
+    return (memberRef ?? undefined) ?? (rigRef ?? undefined);
+}
+//# sourceMappingURL=policy-ref.js.map

package/dist/lib/permission-policy/policy-ref.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-ref.js","sourceRoot":"","sources":["../../../src/lib/permission-policy/policy-ref.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,oGAAoG;AACpG,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,mGAAmG;AACnG,mGAAmG;AACnG,gGAAgG;AAChG,6FAA6F;AAC7F,sFAAsF;AACtF,yFAAyF;AACzF,wFAAwF;AACxF,kGAAkG;AAClG,qGAAqG;AACrG,uDAAuD;AAEvD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAGvE,mGAAmG;AACnG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAKpF,MAAM,cAAc,GAAG,UAAU,CAAC;AAUlC,SAAS,aAAa,CAAC,IAAY;IACjC,OAAQ,oBAA0C,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAc,EAAE,KAAa;IACvE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO,GAAG,KAAK,oDAAoD,CAAC;IACtE,CAAC;IACD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QACrB,sEAAsE;QACtE,wEAAwE;QACxE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,KAAK,8BAA8B,IAAI,aAAa,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACnG,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,2FAA2F;IAC3F,iGAAiG;IACjG,sEAAsE;IACtE,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,KAAK,MAAM,KAAK,8CAA8C,KAAK,8EAA8E,CAAC;IAC9J,CAAC;IACD,uFAAuF;IACvF,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAC5B,kGAAkG;IAClG,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7C,OAAO,GAAG,KAAK,+CAA+C,KAAK,IAAI,CAAC;IAC1E,CAAC;IACD,uFAAuF;IACvF,gFAAgF;IAChF,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9C,OAAO,GAAG,KAAK,mBAAmB,GAAG,iFAAiF,CAAC;QACzH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,2BAA2B,CAAC,KAAa;IACvD,IAAI,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAsB,EAAE,CAAC;IACjH,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAuCD;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAuB;IAC1D,OAAO,oBAAoB,IAAI,YAAY,CAAC;AAC9C,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,iCAAiC,CAC/C,GAAW,EACX,YAAoB,EACpB,IAAuB;IAEvB,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QACnB,4EAA4E;QAC5E,uEAAuE;QACvE,2EAA2E;QAC3E,mEAAmE;QACnE,OAAO;YACL,GAAG;YACH,MAAM,EAAE,iBAAiB;YACzB,aAAa,EAAE,OAAO;YACtB,eAAe,EAAE,IAAI,EAAE,wDAAwD;SAChF,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAsB,CAAC;QAC1E,OAAO;YACL,GAAG;YACH,MAAM,EAAE,SAAS;YACjB,WAAW;YACX,cAAc,EAAE,oBAAoB,CAAC,WAAW,CAAC;YACjD,OAAO,EAAE,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;YACpD,aAAa,EAAE,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,OAAO;YAC/D,eAAe,EAAE,IAAI;SACtB,CAAC;IACJ,CAAC;IACD,8FAA8F;IAC9F,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;IACvD,IAAI,OAAkC,CAAC;IACvC,IAAI,aAAa,GAAkB,OAAO,CAAC;IAC3C,IAAI,eAAe,GAAG,KAAK,CAAC;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC,OAAO,IAAI,MAAM,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;YACxC,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,QAAQ;gBAAE,OAAO,GAAG,CAAC,CAAC;YAChD,kFAAkF;YAClF,+EAA+E;YAC/E,8EAA8E;YAC9E,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,EAAE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACtC,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;gBAChD,IAAI,EAAE,KAAK,OAAO,IAAI,EAAE,KAAK,aAAa,EAAE,CAAC;oBAC3C,aAAa,GAAG,EAAE,CAAC;oBACnB,eAAe,GAAG,IAAI,CAAC;gBACzB,CAAC;YACH,CAAC;iBAAM,IAAI,QAAQ,CAAC,EAAE,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC/C,eAAe,GAAG,IAAI,CAAC,CAAC,mDAAmD;YAC7E,CAAC;YACD,uFAAuF;QACzF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,8FAA8F;IAChG,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC;AAC1G,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAC7C,SAAoC,EACpC,MAAiC;IAEjC,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/permission-policy/policy-spec.d.ts

@@ -0,0 +1,34 @@
+export type PolicySurface = "flag" | "config";
+export type PolicySource = "builtin" | "custom";
+export type LaunchPosture = "floor" | "full_bypass";
+export type DefaultPosture = "allow" | "ask" | "deny";
+/** A parsed policy spec: the raw frontmatter object + the preserved Markdown body. */
+export interface ParsedPolicySpec {
+    frontmatter: Record<string, unknown>;
+    /** The Markdown body after the frontmatter block — preserved verbatim (human prose, not contract). */
+    body: string;
+}
+export interface ParseError {
+    error: string;
+}
+/** Parse a policy spec into its frontmatter contract + preserved body. Never throws. */
+export declare function parsePolicySpec(raw: string): ParsedPolicySpec | ParseError;
+export interface ValidationResult {
+    ok: boolean;
+    errors: string[];
+}
+/**
+ * Validate-by-convention: required scalars, enum membership, surface-appropriate EXCLUSIVITY, and
+ * scalar/list SHAPES. ADVISORY + fail-open — returns {ok, errors[]}, never throws, never enforces.
+ * Does NOT validate the semantic-action vocabulary (taxonomy 668bb0d2 owns it) nor resolve to any
+ * harness format.
+ */
+export declare function validatePolicySpec(fm: Record<string, unknown>): ValidationResult;
+/**
+ * Deterministic CANONICAL serialization: frontmatter re-emitted in canonical field order (unknown
+ * keys preserved, appended stably) + the body verbatim. Round-trip contract = serialize is STABLE
+ * (serialize∘parse is idempotent) + SEMANTIC equality (frontmatter deep-equal) + BODY preserved —
+ * NOT original-input byte identity.
+ */
+export declare function serializePolicySpec(parsed: ParsedPolicySpec): string;
+//# sourceMappingURL=policy-spec.d.ts.map

package/dist/lib/permission-policy/policy-spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-spec.d.ts","sourceRoot":"","sources":["../../../src/lib/permission-policy/policy-spec.ts"],"names":[],"mappings":"AAUA,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,QAAQ,CAAC;AAC9C,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,QAAQ,CAAC;AAChD,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,aAAa,CAAC;AACpD,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAEtD,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,sGAAsG;IACtG,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,GAAG,UAAU,CAa1E;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAYD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,gBAAgB,CA8BhF;AAQD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAOpE"}

package/dist/lib/permission-policy/policy-spec.js

@@ -0,0 +1,106 @@
+// Slice-03 (OPR.0.4.8.3) Seam A — the permission-policy SPEC primitive: parse + validate-by-convention.
+// A policy spec is a Markdown file with a leading YAML FRONTMATTER contract + an explanatory body.
+// This module PARSES the whole contract from frontmatter (preserving the body verbatim) and
+// VALIDATES it by convention — ADVISORY + fail-open (mirrors `rig scope audit`), never enforcement.
+// It NEVER validates the semantic-action vocabulary (the taxonomy 668bb0d2 owns that) and NEVER
+// resolves intent to a harness format (flag surface = deterministic code elsewhere; config surface =
+// the skill). Schema authority: ARCH-POLICY-SPEC-SCHEMA sha256-8 92409094.
+import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
+// Leading `---\n<yaml>\n---\n<body>` frontmatter block. Non-greedy YAML capture so the FIRST closing
+// `---` ends the frontmatter; everything after is the body (preserved exactly).
+const FRONTMATTER_RE = /^---\n([\s\S]*?)\n---\n?([\s\S]*)$/;
+/** Parse a policy spec into its frontmatter contract + preserved body. Never throws. */
+export function parsePolicySpec(raw) {
+    const m = FRONTMATTER_RE.exec(raw);
+    if (!m)
+        return { error: "policy spec must open with a '---' YAML frontmatter block" };
+    let frontmatter;
+    try {
+        frontmatter = parseYaml(m[1]);
+    }
+    catch (e) {
+        return { error: `frontmatter is not valid YAML: ${e.message}` };
+    }
+    if (!frontmatter || typeof frontmatter !== "object" || Array.isArray(frontmatter)) {
+        return { error: "frontmatter must be a YAML object at the root" };
+    }
+    return { frontmatter: frontmatter, body: m[2] ?? "" };
+}
+const SOURCES = new Set(["builtin", "custom"]);
+const SURFACES = new Set(["flag", "config"]);
+const LAUNCH_POSTURES = new Set(["floor", "full_bypass"]);
+const DEFAULT_POSTURES = new Set(["allow", "ask", "deny"]);
+const ACTION_LIST_FIELDS = ["allow", "ask", "deny", "destructive_class"];
+function isStringList(v) {
+    return Array.isArray(v) && v.every((x) => typeof x === "string");
+}
+/**
+ * Validate-by-convention: required scalars, enum membership, surface-appropriate EXCLUSIVITY, and
+ * scalar/list SHAPES. ADVISORY + fail-open — returns {ok, errors[]}, never throws, never enforces.
+ * Does NOT validate the semantic-action vocabulary (taxonomy 668bb0d2 owns it) nor resolve to any
+ * harness format.
+ */
+export function validatePolicySpec(fm) {
+    const errors = [];
+    if (fm["policy_schema_version"] !== 1)
+        errors.push("policy_schema_version must be the number 1");
+    if (typeof fm["name"] !== "string" || fm["name"].length === 0)
+        errors.push("name must be a non-empty string");
+    if (typeof fm["source"] !== "string" || !SOURCES.has(fm["source"]))
+        errors.push("source must be 'builtin' or 'custom'");
+    if (typeof fm["description"] !== "string" || fm["description"].length === 0)
+        errors.push("description must be a non-empty string");
+    const surface = fm["surface"];
+    if (typeof surface !== "string" || !SURFACES.has(surface)) {
+        errors.push("surface must be 'flag' or 'config'");
+        return { ok: errors.length === 0, errors }; // can't check surface-appropriate fields without a valid surface
+    }
+    if (surface === "flag") {
+        if (!LAUNCH_POSTURES.has(fm["launch_posture"]))
+            errors.push("flag-surface policy requires launch_posture ('floor' or 'full_bypass')");
+        if (fm["default_posture"] !== undefined)
+            errors.push("flag-surface policy must NOT carry default_posture (config-surface field)");
+        for (const f of ACTION_LIST_FIELDS)
+            if (fm[f] !== undefined)
+                errors.push(`flag-surface policy must NOT carry '${f}' (config-surface field)`);
+    }
+    else {
+        // config
+        if (fm["launch_posture"] !== undefined)
+            errors.push("config-surface policy must NOT carry launch_posture (flag-surface field)");
+        if (!DEFAULT_POSTURES.has(fm["default_posture"]))
+            errors.push("config-surface policy requires default_posture ('allow', 'ask' or 'deny')");
+        // The schema requires all four action-list fields present (use [] for none) — not optional.
+        for (const f of ACTION_LIST_FIELDS) {
+            if (fm[f] === undefined)
+                errors.push(`config-surface policy requires '${f}' (a list of strings; use [] for none)`);
+            else if (!isStringList(fm[f]))
+                errors.push(`${f} must be a list of strings`);
+        }
+    }
+    return { ok: errors.length === 0, errors };
+}
+// Canonical field order for deterministic serialization (unknown keys appended stably after).
+const CANONICAL_ORDER = [
+    "source", "name", "surface", "launch_posture", "policy_schema_version", "description",
+    "default_posture", "allow", "ask", "deny", "destructive_class",
+];
+/**
+ * Deterministic CANONICAL serialization: frontmatter re-emitted in canonical field order (unknown
+ * keys preserved, appended stably) + the body verbatim. Round-trip contract = serialize is STABLE
+ * (serialize∘parse is idempotent) + SEMANTIC equality (frontmatter deep-equal) + BODY preserved —
+ * NOT original-input byte identity.
+ */
+export function serializePolicySpec(parsed) {
+    const fm = parsed.frontmatter;
+    const ordered = {};
+    for (const k of CANONICAL_ORDER)
+        if (fm[k] !== undefined)
+            ordered[k] = fm[k];
+    for (const k of Object.keys(fm))
+        if (!(k in ordered))
+            ordered[k] = fm[k];
+    const yamlBlock = stringifyYaml(ordered).replace(/\n+$/, "");
+    return `---\n${yamlBlock}\n---\n${parsed.body}`;
+}
+//# sourceMappingURL=policy-spec.js.map

package/dist/lib/permission-policy/policy-spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-spec.js","sourceRoot":"","sources":["../../../src/lib/permission-policy/policy-spec.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,mGAAmG;AACnG,4FAA4F;AAC5F,oGAAoG;AACpG,gGAAgG;AAChG,qGAAqG;AACrG,2EAA2E;AAE3E,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,SAAS,IAAI,aAAa,EAAE,MAAM,MAAM,CAAC;AAkBtE,qGAAqG;AACrG,gFAAgF;AAChF,MAAM,cAAc,GAAG,oCAAoC,CAAC;AAE5D,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,2DAA2D,EAAE,CAAC;IACtF,IAAI,WAAoB,CAAC;IACzB,IAAI,CAAC;QACH,WAAW,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACjC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,kCAAmC,CAAW,CAAC,OAAO,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IACpE,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,WAAsC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACnF,CAAC;AAOD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC/C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC7C,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;AAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAC3D,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,CAAU,CAAC;AAElF,SAAS,YAAY,CAAC,CAAU;IAC9B,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AACnE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAA2B;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,IAAI,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACjG,IAAI,OAAO,EAAE,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAK,EAAE,CAAC,MAAM,CAAY,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;IAC1H,IAAI,OAAO,EAAE,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAW,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IAClI,IAAI,OAAO,EAAE,CAAC,aAAa,CAAC,KAAK,QAAQ,IAAK,EAAE,CAAC,aAAa,CAAY,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAE/I,MAAM,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;QAClD,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,iEAAiE;IAC/G,CAAC;IAED,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,gBAAgB,CAAW,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QAChJ,IAAI,EAAE,CAAC,iBAAiB,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QAClI,KAAK,MAAM,CAAC,IAAI,kBAAkB;YAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,0BAA0B,CAAC,CAAC;IAC/I,CAAC;SAAM,CAAC;QACN,SAAS;QACT,IAAI,EAAE,CAAC,gBAAgB,CAAC,KAAK,SAAS;YAAE,MAAM,CAAC,IAAI,CAAC,0EAA0E,CAAC,CAAC;QAChI,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,iBAAiB,CAAW,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QACrJ,4FAA4F;QAC5F,KAAK,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;YACnC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,CAAC,wCAAwC,CAAC,CAAC;iBAC9G,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED,8FAA8F;AAC9F,MAAM,eAAe,GAAG;IACtB,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,aAAa;IACrF,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB;CAC/D,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAwB;IAC1D,MAAM,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAC9B,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,IAAI,eAAe;QAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QAAE,IAAI,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC7D,OAAO,QAAQ,SAAS,UAAU,MAAM,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC"}

package/dist/lib/scope/logical-checkbox.d.ts

@@ -0,0 +1,26 @@
+/** qitem-render-driver B — the ONE logical-checkbox record, shared by every
+ *  reader of an authored checkbox list (Review's proof contract, the
+ *  slice-detail projector's acceptance rows, and the CLI proof-add index).
+ *
+ *  `rawText` is the COMPLETE logical item — a checkbox line plus any eligible
+ *  indented continuation, joined with exactly one U+0020 — and it IS the
+ *  VM-006 join key (textKey = trim + casefold over these bytes). Every reader
+ *  MUST consume this record so promise, acceptance, dedup and the QA-verdict
+ *  lift key off identical bytes by construction; a second parser would silently
+ *  desynchronize the join. */
+export interface LogicalCheckboxItem {
+    /** The author's tick state (`- [x]`). */
+    checked: boolean;
+    /** The complete logical item text (continuations joined), trim-only. */
+    rawText: string;
+    /** 1-based line of the CHECKBOX itself — never a continuation line. */
+    sourceLine: number;
+}
+/** Parse an authored checkbox block into logical items.
+ *
+ *  Continuation eligibility (pinned by test): a line is a continuation of the
+ *  preceding checkbox when it is NONBLANK, NOT itself a checkbox, and its
+ *  indentation is STRICTLY DEEPER than the checkbox line's. A next checkbox, a
+ *  blank line, or same/shallower prose terminates the item. */
+export declare function parseLogicalCheckboxes(block: string | null): LogicalCheckboxItem[];
+//# sourceMappingURL=logical-checkbox.d.ts.map

package/dist/lib/scope/logical-checkbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logical-checkbox.d.ts","sourceRoot":"","sources":["../../../src/lib/scope/logical-checkbox.ts"],"names":[],"mappings":"AAiBA;;;;;;;;;8BAS8B;AAC9B,MAAM,WAAW,mBAAmB;IAClC,yCAAyC;IACzC,OAAO,EAAE,OAAO,CAAC;IACjB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,uEAAuE;IACvE,UAAU,EAAE,MAAM,CAAC;CACpB;AAID;;;;;+DAK+D;AAC/D,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,mBAAmB,EAAE,CAoClF"}

package/dist/lib/scope/logical-checkbox.js

@@ -0,0 +1,65 @@
+// KI-5.3-2 — the ONE logical-checkbox item grammar: parse an authored
+// `## Proof contract` (or acceptance) checkbox block into logical items.
+//
+// PARITY CONTRACT (arch ruling 2026-07-11 twin-plus-parity, extended KI-5.3-2):
+// this file is a BYTE-EQUIVALENT TWIN — it exists identically at
+//   packages/cli/src/lib/scope/logical-checkbox.ts
+//   packages/daemon/src/domain/scope/logical-checkbox.ts
+// and byte-equivalence is CI-enforced by scope-audit-parity CLASSIFIER_FILES.
+// Do NOT diverge the copies, and do NOT "deduplicate" them into one file — a
+// true shared module importable by both packages does not exist in this layout,
+// so the twin-plus-parity arrangement IS the single-grammar guarantee. The
+// review composer, the slice-detail acceptance projector, and the CLI
+// `rig proof add` evidence-index validator ALL parse through this one grammar,
+// so a 1-based byIndex evidence ref names the SAME promised item on every side
+// (no silent one-position mispair). If the layout ever gains a real shared
+// package, the twins collapse into it then — not before.
+const CHECKBOX_LINE = /^(\s*)-?\s*\[(\s|x|X)\]\s+(.+)$/;
+/** Parse an authored checkbox block into logical items.
+ *
+ *  Continuation eligibility (pinned by test): a line is a continuation of the
+ *  preceding checkbox when it is NONBLANK, NOT itself a checkbox, and its
+ *  indentation is STRICTLY DEEPER than the checkbox line's. A next checkbox, a
+ *  blank line, or same/shallower prose terminates the item. */
+export function parseLogicalCheckboxes(block) {
+    if (!block)
+        return [];
+    const lines = block.split("\n");
+    const out = [];
+    let current = null;
+    const flush = () => {
+        if (!current)
+            return;
+        out.push({ checked: current.checked, rawText: current.parts.join(" ").trim(), sourceLine: current.sourceLine });
+        current = null;
+    };
+    for (let i = 0; i < lines.length; i++) {
+        const line = lines[i];
+        const m = line.match(CHECKBOX_LINE);
+        if (m) {
+            flush();
+            current = {
+                checked: m[2].toLowerCase() === "x",
+                parts: [m[3].trim()],
+                indent: m[1].length,
+                sourceLine: i + 1,
+            };
+            continue;
+        }
+        if (!current)
+            continue;
+        if (line.trim().length === 0) {
+            flush();
+            continue;
+        }
+        const indent = line.length - line.trimStart().length;
+        if (indent > current.indent) {
+            current.parts.push(line.trim());
+            continue;
+        }
+        flush();
+    }
+    flush();
+    return out;
+}
+//# sourceMappingURL=logical-checkbox.js.map

package/dist/lib/scope/logical-checkbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logical-checkbox.js","sourceRoot":"","sources":["../../../src/lib/scope/logical-checkbox.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,yEAAyE;AACzE,EAAE;AACF,gFAAgF;AAChF,iEAAiE;AACjE,mDAAmD;AACnD,yDAAyD;AACzD,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,2EAA2E;AAC3E,sEAAsE;AACtE,+EAA+E;AAC/E,+EAA+E;AAC/E,2EAA2E;AAC3E,yDAAyD;AAqBzD,MAAM,aAAa,GAAG,iCAAiC,CAAC;AAExD;;;;;+DAK+D;AAC/D,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IACzD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IACtB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,IAAI,OAAO,GAAqF,IAAI,CAAC;IAErG,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC,OAAO;YAAE,OAAO;QACrB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAChH,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC;IAEF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC;YACN,KAAK,EAAE,CAAC;YACR,OAAO,GAAG;gBACR,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,GAAG;gBACpC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC;gBACrB,MAAM,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM;gBACpB,UAAU,EAAE,CAAC,GAAG,CAAC;aAClB,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,EAAE,CAAC;YAAC,SAAS;QAAC,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC;QACrD,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;YAChC,SAAS;QACX,CAAC;QACD,KAAK,EAAE,CAAC;IACV,CAAC;IACD,KAAK,EAAE,CAAC;IACR,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/lib/scope/scaffold-placeholder.d.ts

@@ -35,4 +35,26 @@ export declare function isPristineScaffoldSection(body: string | null): boolean;
  *  literals, sync-tested against the shipped template so constant/template
  *  drift fails CI instead of silently reviving the bogus pristine count. */
 export declare const GENERIC_SCAFFOLD_ACCEPTANCE: readonly string[];
+/** KI-5.3-2 second-face follow-up (row e69daaef; r1 A3 confirmed) — the ONE
+ *  proof-contract SOURCE-SELECTION home. Three readers (proof-add, review
+ *  compose DELIVERED pairing, both scope-audit twins) previously derived the
+ *  fallback target independently and DIVERGED: proof-add derived from SPEC
+ *  while compose/audit fell back to README with no SPEC path — evidence
+ *  recorded against one contract, displayed against another. Selection order
+ *  over SECTION BODIES (each reader keeps its own extractor):
+ *    authored PRD  -> "prd"    (canonical, the first-face ruling)
+ *    pristine PRD  -> authored SPEC -> "spec"
+ *                  -> else authored README -> "readme"
+ *                  -> else null (nothing authored; never the placeholder)
+ *    absent PRD    -> authored SPEC -> authored README -> null
+ *  "Authored" = present and NOT isPristineScaffoldSection. Consumers parse
+ *  items from the SELECTED source's body with their shipped parsers. */
+export declare function selectProofContractBody(args: {
+    prdBody: string | null;
+    specBody: string | null;
+    readmeBody: string | null;
+}): {
+    source: "prd" | "spec" | "readme" | null;
+    body: string | null;
+};
 //# sourceMappingURL=scaffold-placeholder.d.ts.map

package/dist/lib/scope/scaffold-placeholder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scaffold-placeholder.d.ts","sourceRoot":"","sources":["../../../src/lib/scope/scaffold-placeholder.ts"],"names":[],"mappings":"AAuBA;+EAC+E;AAC/E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;;;;;0CAQ0C;AAC1C,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOpE;AAED;;;;;;oCAMoC;AACpC,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAQpE;AAED;;;;;;;;;6DAS6D;AAC7D,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAWtE;AAED;;;4EAG4E;AAC5E,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAIxD,CAAC"}
+{"version":3,"file":"scaffold-placeholder.d.ts","sourceRoot":"","sources":["../../../src/lib/scope/scaffold-placeholder.ts"],"names":[],"mappings":"AAuBA;+EAC+E;AAC/E,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE/D;AAED;;;;;;;;0CAQ0C;AAC1C,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAOpE;AAED;;;;;;oCAMoC;AACpC,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAQpE;AAED;;;;;;;;;6DAS6D;AAC7D,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAWtE;AAED;;;4EAG4E;AAC5E,eAAO,MAAM,2BAA2B,EAAE,SAAS,MAAM,EAIxD,CAAC;AAEF;;;;;;;;;;;;;wEAawE;AACxE,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,GAAG;IAAE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAMpE"}

package/dist/lib/scope/scaffold-placeholder.js

@@ -95,4 +95,28 @@ export const GENERIC_SCAFFOLD_ACCEPTANCE = [
     "Tests passing",
     "Review approved",
 ];
+/** KI-5.3-2 second-face follow-up (row e69daaef; r1 A3 confirmed) — the ONE
+ *  proof-contract SOURCE-SELECTION home. Three readers (proof-add, review
+ *  compose DELIVERED pairing, both scope-audit twins) previously derived the
+ *  fallback target independently and DIVERGED: proof-add derived from SPEC
+ *  while compose/audit fell back to README with no SPEC path — evidence
+ *  recorded against one contract, displayed against another. Selection order
+ *  over SECTION BODIES (each reader keeps its own extractor):
+ *    authored PRD  -> "prd"    (canonical, the first-face ruling)
+ *    pristine PRD  -> authored SPEC -> "spec"
+ *                  -> else authored README -> "readme"
+ *                  -> else null (nothing authored; never the placeholder)
+ *    absent PRD    -> authored SPEC -> authored README -> null
+ *  "Authored" = present and NOT isPristineScaffoldSection. Consumers parse
+ *  items from the SELECTED source's body with their shipped parsers. */
+export function selectProofContractBody(args) {
+    const authored = (b) => b !== null && !isPristineScaffoldSection(b);
+    if (authored(args.prdBody))
+        return { source: "prd", body: args.prdBody };
+    if (authored(args.specBody))
+        return { source: "spec", body: args.specBody };
+    if (authored(args.readmeBody))
+        return { source: "readme", body: args.readmeBody };
+    return { source: null, body: null };
+}
 //# sourceMappingURL=scaffold-placeholder.js.map