@orgloop/core 0.6.1 → 0.7.1

package/dist/output-validator.js

@@ -0,0 +1,180 @@
+/**
+ * OutputValidator — pre-delivery validation of SOP outputs.
+ *
+ * Checks for potential payload propagation (viral agent loop defense):
+ * - Instruction-like content in outputs (potential injection)
+ * - Content similarity to input (echo/amplification)
+ * - References to tools, URLs, or actions outside expected SOP scope
+ */
+// ─── Instruction Detection Patterns ──────────────────────────────────────────
+const DEFAULT_INSTRUCTION_PATTERNS = [
+    // System prompt injection markers
+    /\bignore\s+(all\s+)?previous\s+instructions\b/i,
+    /\byou\s+are\s+now\b/i,
+    /\bsystem\s*:\s*/i,
+    /\b(new|override|updated?)\s+instructions?\b/i,
+    // Agent manipulation
+    /\bexecute\s+(this|the\s+following)\s+(command|code|script)\b/i,
+    /\brun\s+(this|the\s+following)\s+(command|code|script)\b/i,
+    /\bmodify\s+your\s+(instructions?|behavior|prompt)\b/i,
+    // Prompt injection delimiters
+    /^-{3,}\s*$/m,
+    /\[INST\]/i,
+    /<<\s*SYS\s*>>/i,
+    // Encoded instructions
+    /\bbase64\s*[:=]\s*[A-Za-z0-9+/=]{20,}/i,
+];
+// ─── OutputValidator Class ───────────────────────────────────────────────────
+export class OutputValidator {
+    options;
+    constructor(options) {
+        this.options = {
+            detectInstructions: options?.detectInstructions ?? true,
+            detectEcho: options?.detectEcho ?? true,
+            detectScopeViolations: options?.detectScopeViolations ?? true,
+            echoThreshold: options?.echoThreshold ?? 0.7,
+            holdOnCritical: options?.holdOnCritical ?? false,
+            instructionPatterns: [
+                ...DEFAULT_INSTRUCTION_PATTERNS,
+                ...(options?.instructionPatterns ?? []),
+            ],
+            allowedDomains: options?.allowedDomains ?? [],
+        };
+    }
+    /**
+     * Validate an output payload before it's committed to an external system.
+     */
+    validate(outputContent, inputEvent, sopScope) {
+        const flags = [];
+        if (this.options.detectInstructions) {
+            flags.push(...this.checkInstructionContent(outputContent));
+        }
+        if (this.options.detectEcho) {
+            flags.push(...this.checkInputEcho(outputContent, inputEvent));
+        }
+        if (this.options.detectScopeViolations) {
+            flags.push(...this.checkScopeViolations(outputContent, sopScope));
+        }
+        const hasCritical = flags.some((f) => f.severity === 'critical');
+        const holdForReview = hasCritical && this.options.holdOnCritical;
+        return {
+            passed: !hasCritical,
+            hold_for_review: holdForReview,
+            flags,
+        };
+    }
+    /** Check for instruction-like content that could be prompt injection. */
+    checkInstructionContent(content) {
+        const flags = [];
+        for (const pattern of this.options.instructionPatterns) {
+            const match = pattern.exec(content);
+            if (match) {
+                flags.push({
+                    type: 'instruction_content',
+                    severity: 'critical',
+                    message: `Potential instruction injection detected: "${match[0]}"`,
+                });
+            }
+        }
+        return flags;
+    }
+    /** Check if the output is suspiciously similar to the input (echo/amplification). */
+    checkInputEcho(content, inputEvent) {
+        const flags = [];
+        // Serialize input payload for comparison
+        const inputText = JSON.stringify(inputEvent.payload);
+        if (!inputText || inputText.length < 20)
+            return flags;
+        const similarity = this.computeSimilarity(content, inputText);
+        if (similarity >= this.options.echoThreshold) {
+            flags.push({
+                type: 'input_echo',
+                severity: similarity >= 0.9 ? 'critical' : 'warning',
+                message: `Output is ${Math.round(similarity * 100)}% similar to input payload (threshold: ${Math.round(this.options.echoThreshold * 100)}%)`,
+            });
+        }
+        return flags;
+    }
+    /** Check for references to tools, URLs, or actions outside SOP's expected scope. */
+    checkScopeViolations(content, sopScope) {
+        const flags = [];
+        // Extract URLs from content
+        const urlPattern = /https?:\/\/[^\s"'<>)}\]]+/gi;
+        const urls = content.match(urlPattern) ?? [];
+        const allowedDomains = [...this.options.allowedDomains, ...(sopScope?.allowedDomains ?? [])];
+        if (allowedDomains.length > 0) {
+            for (const url of urls) {
+                try {
+                    const hostname = new URL(url).hostname;
+                    const isAllowed = allowedDomains.some((d) => hostname === d || hostname.endsWith(`.${d}`));
+                    if (!isAllowed) {
+                        flags.push({
+                            type: 'scope_violation',
+                            severity: 'warning',
+                            message: `URL references domain "${hostname}" not in allowed scope: ${allowedDomains.join(', ')}`,
+                        });
+                    }
+                }
+                catch {
+                    // Malformed URL — flag it
+                    flags.push({
+                        type: 'scope_violation',
+                        severity: 'warning',
+                        message: `Malformed URL detected in output: "${url.slice(0, 100)}"`,
+                    });
+                }
+            }
+        }
+        // Check for shell command patterns
+        const shellPatterns = [
+            /\b(curl|wget|ssh|scp|rsync)\s+/i,
+            /\brm\s+-rf\b/i,
+            /\bsudo\s+/i,
+            /\bchmod\s+[0-7]{3,4}\b/i,
+            /\|\s*(bash|sh|zsh)\b/i,
+        ];
+        for (const pattern of shellPatterns) {
+            const match = pattern.exec(content);
+            if (match) {
+                flags.push({
+                    type: 'scope_violation',
+                    severity: 'warning',
+                    message: `Shell command pattern detected in output: "${match[0]}"`,
+                });
+            }
+        }
+        return flags;
+    }
+    /**
+     * Compute bigram-based Jaccard similarity between two strings.
+     * Returns 0-1 where 1 is identical.
+     */
+    computeSimilarity(a, b) {
+        if (a.length === 0 && b.length === 0)
+            return 1;
+        if (a.length === 0 || b.length === 0)
+            return 0;
+        const bigramsA = this.toBigrams(a.toLowerCase());
+        const bigramsB = this.toBigrams(b.toLowerCase());
+        let intersection = 0;
+        const bCopy = new Map(bigramsA);
+        for (const [bigram, countA] of bCopy) {
+            const countB = bigramsB.get(bigram) ?? 0;
+            intersection += Math.min(countA, countB);
+        }
+        const totalA = [...bigramsA.values()].reduce((s, v) => s + v, 0);
+        const totalB = [...bigramsB.values()].reduce((s, v) => s + v, 0);
+        const union = totalA + totalB - intersection;
+        return union === 0 ? 0 : intersection / union;
+    }
+    /** Extract character bigrams from a string. */
+    toBigrams(s) {
+        const bigrams = new Map();
+        for (let i = 0; i < s.length - 1; i++) {
+            const bigram = s.slice(i, i + 2);
+            bigrams.set(bigram, (bigrams.get(bigram) ?? 0) + 1);
+        }
+        return bigrams;
+    }
+}
+//# sourceMappingURL=output-validator.js.map

package/dist/output-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-validator.js","sourceRoot":"","sources":["../src/output-validator.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAiCH,gFAAgF;AAEhF,MAAM,4BAA4B,GAAa;IAC9C,kCAAkC;IAClC,gDAAgD;IAChD,sBAAsB;IACtB,kBAAkB;IAClB,8CAA8C;IAC9C,qBAAqB;IACrB,+DAA+D;IAC/D,2DAA2D;IAC3D,sDAAsD;IACtD,8BAA8B;IAC9B,aAAa;IACb,WAAW;IACX,gBAAgB;IAChB,uBAAuB;IACvB,wCAAwC;CACxC,CAAC;AAEF,gFAAgF;AAEhF,MAAM,OAAO,eAAe;IACV,OAAO,CAKtB;IAEF,YAAY,OAAgC;QAC3C,IAAI,CAAC,OAAO,GAAG;YACd,kBAAkB,EAAE,OAAO,EAAE,kBAAkB,IAAI,IAAI;YACvD,UAAU,EAAE,OAAO,EAAE,UAAU,IAAI,IAAI;YACvC,qBAAqB,EAAE,OAAO,EAAE,qBAAqB,IAAI,IAAI;YAC7D,aAAa,EAAE,OAAO,EAAE,aAAa,IAAI,GAAG;YAC5C,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,KAAK;YAChD,mBAAmB,EAAE;gBACpB,GAAG,4BAA4B;gBAC/B,GAAG,CAAC,OAAO,EAAE,mBAAmB,IAAI,EAAE,CAAC;aACvC;YACD,cAAc,EAAE,OAAO,EAAE,cAAc,IAAI,EAAE;SAC7C,CAAC;IACH,CAAC;IAED;;OAEG;IACH,QAAQ,CACP,aAAqB,EACrB,UAAwB,EACxB,QAAmE;QAEnE,MAAM,KAAK,GAAgB,EAAE,CAAC;QAE9B,IAAI,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,uBAAuB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;YAC7B,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,CAAC;YACxC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,WAAW,IAAI,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC;QAEjE,OAAO;YACN,MAAM,EAAE,CAAC,WAAW;YACpB,eAAe,EAAE,aAAa;YAC9B,KAAK;SACL,CAAC;IACH,CAAC;IAED,yEAAyE;IACjE,uBAAuB,CAAC,OAAe;QAC9C,MAAM,KAAK,GAAgB,EAAE,CAAC;QAE9B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ,EAAE,UAAU;oBACpB,OAAO,EAAE,8CAA8C,KAAK,CAAC,CAAC,CAAC,GAAG;iBAClE,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED,qFAAqF;IAC7E,cAAc,CAAC,OAAe,EAAE,UAAwB;QAC/D,MAAM,KAAK,GAAgB,EAAE,CAAC;QAE9B,yCAAyC;QACzC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;QACrD,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,EAAE;YAAE,OAAO,KAAK,CAAC;QAEtD,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAE9D,IAAI,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,YAAY;gBAClB,QAAQ,EAAE,UAAU,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;gBACpD,OAAO,EAAE,aAAa,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,0CAA0C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,GAAG,GAAG,CAAC,IAAI;aAC5I,CAAC,CAAC;QACJ,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED,oFAAoF;IAC5E,oBAAoB,CAC3B,OAAe,EACf,QAAmE;QAEnE,MAAM,KAAK,GAAgB,EAAE,CAAC;QAE9B,4BAA4B;QAC5B,MAAM,UAAU,GAAG,6BAA6B,CAAC;QACjD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAE7C,MAAM,cAAc,GAAG,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE,cAAc,IAAI,EAAE,CAAC,CAAC,CAAC;QAE7F,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACJ,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;oBACvC,MAAM,SAAS,GAAG,cAAc,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,KAAK,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CACnD,CAAC;oBACF,IAAI,CAAC,SAAS,EAAE,CAAC;wBAChB,KAAK,CAAC,IAAI,CAAC;4BACV,IAAI,EAAE,iBAAiB;4BACvB,QAAQ,EAAE,SAAS;4BACnB,OAAO,EAAE,0BAA0B,QAAQ,2BAA2B,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;yBACjG,CAAC,CAAC;oBACJ,CAAC;gBACF,CAAC;gBAAC,MAAM,CAAC;oBACR,0BAA0B;oBAC1B,KAAK,CAAC,IAAI,CAAC;wBACV,IAAI,EAAE,iBAAiB;wBACvB,QAAQ,EAAE,SAAS;wBACnB,OAAO,EAAE,sCAAsC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG;qBACnE,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,mCAAmC;QACnC,MAAM,aAAa,GAAG;YACrB,iCAAiC;YACjC,eAAe;YACf,YAAY;YACZ,yBAAyB;YACzB,uBAAuB;SACvB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;YACrC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,KAAK,EAAE,CAAC;gBACX,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,iBAAiB;oBACvB,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,8CAA8C,KAAK,CAAC,CAAC,CAAC,GAAG;iBAClE,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;OAGG;IACK,iBAAiB,CAAC,CAAS,EAAE,CAAS;QAC7C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE/C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAEjD,IAAI,YAAY,GAAG,CAAC,CAAC;QACrB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEhC,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YACzC,YAAY,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1C,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,YAAY,CAAC;QAE7C,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC;IAC/C,CAAC;IAED,+CAA+C;IACvC,SAAS,CAAC,CAAS;QAC1B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;QAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;YACjC,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;CACD"}

package/dist/runtime.d.ts

@@ -7,12 +7,18 @@
  */
 import { EventEmitter } from 'node:events';
 import type { ModuleStatus, OrgLoopEvent, RuntimeStatus } from '@orgloop/sdk';
+import type { AuditRecord, AuditTrailOptions } from './audit.js';
+import { AuditTrail } from './audit.js';
 import type { EventBus } from './bus.js';
 import type { EventHistoryOptions, EventHistoryQuery, EventRecord } from './event-history.js';
 import type { RuntimeControl } from './http.js';
 import { WebhookServer } from './http.js';
 import { LoggerManager } from './logger.js';
+import type { LoopCheckResult, LoopDetectorOptions } from './loop-detector.js';
+import { LoopDetector } from './loop-detector.js';
 import type { ModuleConfig } from './module-instance.js';
+import type { OutputValidatorOptions } from './output-validator.js';
+import { OutputValidator } from './output-validator.js';
 import type { CheckpointStore } from './store.js';
 export interface SourceCircuitBreakerOptions {
     /** Consecutive failures before opening circuit (default: 5) */
@@ -48,6 +54,12 @@ export interface RuntimeOptions {
     metricsPort?: number;
     /** Event history ring buffer options */
     eventHistory?: EventHistoryOptions;
+    /** Audit trail options */
+    auditTrail?: AuditTrailOptions;
+    /** Output validator options */
+    outputValidator?: OutputValidatorOptions;
+    /** Loop detector options */
+    loopDetector?: LoopDetectorOptions;
 }
 export interface LoadModuleOptions {
     /** Pre-instantiated source connectors (keyed by source ID) */
@@ -89,6 +101,9 @@ declare class Runtime extends EventEmitter implements RuntimeControl {
     private readonly metricsPort;
     private readonly eventHistory;
     private readonly routeStats;
+    private readonly auditTrail;
+    private readonly outputValidator;
+    private readonly loopDetector;
     constructor(options?: RuntimeOptions);
     start(): Promise<void>;
     /** Start the HTTP server for webhooks and control API. */
@@ -104,6 +119,7 @@ declare class Runtime extends EventEmitter implements RuntimeControl {
     private deliverToActor;
     private pollSource;
     private scheduleCircuitRetry;
+    private resolveCheckpointStore;
     private countAllSources;
     private installCrashHandlers;
     private removeCrashHandlers;
@@ -144,6 +160,25 @@ declare class Runtime extends EventEmitter implements RuntimeControl {
         event_count: number;
         poll_interval?: string;
     }>;
+    /** Query the audit trail. */
+    queryAuditTrail(filter?: {
+        trace_id?: string;
+        route?: string;
+        actor?: string;
+        held_only?: boolean;
+        flagged_only?: boolean;
+        limit?: number;
+    }): AuditRecord[];
+    /** Get the full audit chain for a trace ID. */
+    getAuditChain(traceId: string): AuditRecord[];
+    /** Get loop detector state for a trace ID. */
+    getLoopState(traceId: string): LoopCheckResult | null;
+    /** Get the audit trail instance (for direct access in tests). */
+    getAuditTrail(): AuditTrail;
+    /** Get the loop detector instance (for direct access in tests). */
+    getLoopDetector(): LoopDetector;
+    /** Get the output validator instance (for direct access in tests). */
+    getOutputValidator(): OutputValidator;
     /** Get the metrics registry for Prometheus text output. */
     getMetricsText(): Promise<string | null>;
     /** Get the webhook server for API handler registration. */

package/dist/runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,EAGX,YAAY,EACZ,YAAY,EAEZ,aAAa,EACb,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAqB,aAAa,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAMzD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAOlD,MAAM,WAAW,2BAA2B;IAC3C,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,mDAAmD;AACnD,MAAM,WAAW,UAAU;IAC1B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC9B,8CAA8C;IAC9C,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,yDAAyD;IACzD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gDAAgD;IAChD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IACjC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,eAAe,CAAC,CAAC;IAC9D,4DAA4D;IAC5D,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,cAAc,CAAC,CAAC;IAC5D,oEAAoE;IACpE,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,SAAS,CAAC,CAAC;IAC3D,sDAAsD;IACtD,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,MAAM,CAAC,CAAC;IACrD,8CAA8C;IAC9C,eAAe,CAAC,EAAE,eAAe,CAAC;CAClC;AAID,cAAM,OAAQ,SAAQ,YAAa,YAAW,cAAc;IAE3D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAW;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAG9C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAGlC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwC;IAC3E,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAoD;IAGvF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IACjE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwC;IAG1E,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,oBAAoB,CAAuC;IACnE,OAAO,CAAC,qBAAqB,CAA4C;IAGzE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAG1E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IAGjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiC;gBAEhD,OAAO,CAAC,EAAE,cAAc;IAkC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B5B,0DAA0D;IACpD,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC,oDAAoD;IACpD,aAAa,IAAI,OAAO;IAIlB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmDrB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAgEpF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4CzC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAmBvD,YAAY;YAwJZ,cAAc;YAiGd,UAAU;IAoFxB,OAAO,CAAC,oBAAoB;IA+B5B,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,oBAAoB;IA4C5B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,aAAa;YAOP,cAAc;IAiB5B,sEAAsE;IACtE,sBAAsB,CACrB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAC1D,IAAI;IAMP,MAAM,IAAI,aAAa;IAUvB,WAAW,IAAI,YAAY,EAAE;IAI7B,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAOvD,2CAA2C;IAC3C,WAAW,CAAC,KAAK,CAAC,EAAE,iBAAiB,GAAG,WAAW,EAAE;IAIrD,qDAAqD;IACrD,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC;IAIhD,qEAAqE;IACrE,eAAe,IAAI,KAAK,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;QAC7E,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IAiCF,8CAA8C;IAC9C,gBAAgB,IAAI,KAAK,CAAC;QACzB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAkCF,2DAA2D;IACrD,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK9C,2DAA2D;IAC3D,gBAAgB,IAAI,aAAa;YAMnB,OAAO;CAuBrB;AAED,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"runtime.d.ts","sourceRoot":"","sources":["../src/runtime.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAI3C,OAAO,KAAK,EAGX,YAAY,EACZ,YAAY,EAEZ,aAAa,EACb,MAAM,cAAc,CAAC;AAEtB,OAAO,KAAK,EAA0B,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AACzF,OAAO,EAAE,UAAU,EAAgC,MAAM,YAAY,CAAC;AACtE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAGzC,OAAO,KAAK,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAqB,aAAa,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAKxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAOlD,MAAM,WAAW,2BAA2B;IAC3C,+DAA+D;IAC/D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,mDAAmD;AACnD,MAAM,WAAW,UAAU;IAC1B,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,cAAc;IAC9B,8CAA8C;IAC9C,GAAG,CAAC,EAAE,QAAQ,CAAC;IACf,yDAAyD;IACzD,aAAa,CAAC,EAAE,aAAa,CAAC;IAC9B,mEAAmE;IACnE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iDAAiD;IACjD,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,0EAA0E;IAC1E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gDAAgD;IAChD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,0GAA0G;IAC1G,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wCAAwC;IACxC,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,0BAA0B;IAC1B,UAAU,CAAC,EAAE,iBAAiB,CAAC;IAC/B,+BAA+B;IAC/B,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC,4BAA4B;IAC5B,YAAY,CAAC,EAAE,mBAAmB,CAAC;CACnC;AAED,MAAM,WAAW,iBAAiB;IACjC,8DAA8D;IAC9D,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,eAAe,CAAC,CAAC;IAC9D,4DAA4D;IAC5D,MAAM,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,cAAc,CAAC,CAAC;IAC5D,oEAAoE;IACpE,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,SAAS,CAAC,CAAC;IAC3D,sDAAsD;IACtD,OAAO,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,OAAO,cAAc,EAAE,MAAM,CAAC,CAAC;IACrD,8CAA8C;IAC9C,eAAe,CAAC,EAAE,eAAe,CAAC;CAClC;AAID,cAAM,OAAQ,SAAQ,YAAa,YAAW,cAAc;IAE3D,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAW;IAC/B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAmB;IAC7C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAG9C,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAS;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAS;IAGlC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAwC;IAC3E,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAoD;IAGvF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAmC;IACjE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAwC;IAG1E,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAU;IAC9C,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,oBAAoB,CAAuC;IACnE,OAAO,CAAC,qBAAqB,CAA4C;IAGzE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAS;IAC7C,OAAO,CAAC,cAAc,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA+B;IAC5D,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA4C;IAG1E,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAuB;IACrD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;IAGjD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiC;IAG5D,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAa;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAe;gBAEhC,OAAO,CAAC,EAAE,cAAc;IAuC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA2B5B,0DAA0D;IACpD,eAAe,IAAI,OAAO,CAAC,IAAI,CAAC;IAOtC,oDAAoD;IACpD,aAAa,IAAI,OAAO;IAIlB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAmDrB,UAAU,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,YAAY,CAAC;IAgEpF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA4CzC,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAazC,MAAM,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;YAmBvD,YAAY;YAoMZ,cAAc;YA6Ld,UAAU;IAoFxB,OAAO,CAAC,oBAAoB;IA+B5B,OAAO,CAAC,sBAAsB;IA8B9B,OAAO,CAAC,eAAe;IAUvB,OAAO,CAAC,oBAAoB;IA4C5B,OAAO,CAAC,mBAAmB;IAe3B,OAAO,CAAC,cAAc;IAYtB,OAAO,CAAC,aAAa;YAOP,cAAc;IAiB5B,sEAAsE;IACtE,sBAAsB,CACrB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,GAC1D,IAAI;IAMP,MAAM,IAAI,aAAa;IAUvB,WAAW,IAAI,YAAY,EAAE;IAI7B,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAOvD,2CAA2C;IAC3C,WAAW,CAAC,KAAK,CAAC,EAAE,iBAAiB,GAAG,WAAW,EAAE;IAIrD,qDAAqD;IACrD,aAAa,IAAI,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC;IAIhD,qEAAqE;IACrE,eAAe,IAAI,KAAK,CAAC;QACxB,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE;YAAE,MAAM,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC;QAC7E,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC;IAiCF,8CAA8C;IAC9C,gBAAgB,IAAI,KAAK,CAAC;QACzB,EAAE,EAAE,MAAM,CAAC;QACX,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,IAAI,EAAE,SAAS,GAAG,SAAS,CAAC;QAC5B,MAAM,EAAE,MAAM,CAAC;QACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;KACvB,CAAC;IAoCF,6BAA6B;IAC7B,eAAe,CAAC,MAAM,CAAC,EAAE;QACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,YAAY,CAAC,EAAE,OAAO,CAAC;QACvB,KAAK,CAAC,EAAE,MAAM,CAAC;KACf,GAAG,WAAW,EAAE;IAIjB,+CAA+C;IAC/C,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE;IAI7C,8CAA8C;IAC9C,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAYrD,iEAAiE;IACjE,aAAa,IAAI,UAAU;IAI3B,mEAAmE;IACnE,eAAe,IAAI,YAAY;IAI/B,sEAAsE;IACtE,kBAAkB,IAAI,eAAe;IAIrC,2DAA2D;IACrD,cAAc,IAAI,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAK9C,2DAA2D;IAC3D,gBAAgB,IAAI,aAAa;YAMnB,OAAO;CAuBrB;AAED,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/runtime.js

@@ -10,18 +10,21 @@ import { mkdir, readFile, writeFile } from 'node:fs/promises';
 import { homedir } from 'node:os';
 import { join } from 'node:path';
 import { generateTraceId } from '@orgloop/sdk';
+import { AuditTrail, contentHash, generateAuditId } from './audit.js';
 import { InMemoryBus } from './bus.js';
 import { ConnectorError, DeliveryError, ModuleNotFoundError } from './errors.js';
 import { EventHistory } from './event-history.js';
 import { DEFAULT_HTTP_PORT, WebhookServer } from './http.js';
 import { LoggerManager } from './logger.js';
+import { LoopDetector } from './loop-detector.js';
 import { MetricsServer } from './metrics.js';
 import { ModuleInstance } from './module-instance.js';
+import { OutputValidator } from './output-validator.js';
 import { stripFrontMatter } from './prompt.js';
 import { ModuleRegistry } from './registry.js';
 import { interpolateConfig, matchRoutes } from './router.js';
 import { Scheduler } from './scheduler.js';
-import { InMemoryCheckpointStore } from './store.js';
+import { FileCheckpointStore, InMemoryCheckpointStore } from './store.js';
 import { executeTransformPipeline } from './transform.js';
 // ─── Runtime Class ───────────────────────────────────────────────────────────
 class Runtime extends EventEmitter {
@@ -60,6 +63,10 @@ class Runtime extends EventEmitter {
     // REST API: event history and route stats
     eventHistory;
     routeStats = new Map();
+    // Audit trail, output validation, and loop detection
+    auditTrail;
+    outputValidator;
+    loopDetector;
     constructor(options) {
         super();
         this.bus = options?.bus ?? new InMemoryBus();
@@ -89,6 +96,10 @@ class Runtime extends EventEmitter {
         }
         // Event history ring buffer
         this.eventHistory = new EventHistory(options?.eventHistory);
+        // Audit trail, output validation, and loop detection
+        this.auditTrail = new AuditTrail(options?.auditTrail);
+        this.outputValidator = new OutputValidator(options?.outputValidator);
+        this.loopDetector = new LoopDetector(options?.loopDetector);
     }
     // ─── Lifecycle ───────────────────────────────────────────────────────────
     async start() {
@@ -166,7 +177,7 @@ class Runtime extends EventEmitter {
     }
     // ─── Module Management ───────────────────────────────────────────────────
     async loadModule(config, options) {
-        const checkpointStore = options?.checkpointStore ?? new InMemoryCheckpointStore();
+        const checkpointStore = options?.checkpointStore ?? this.resolveCheckpointStore(config);
         const mod = new ModuleInstance(config, {
             sources: options?.sources ?? new Map(),
             actors: options?.actors ?? new Map(),
@@ -290,6 +301,41 @@ class Runtime extends EventEmitter {
             event_type: event.type,
             module: mod.name,
         });
+        // ─── Loop Detection ──────────────────────────────────────────────
+        if (event.trace_id) {
+            const loopCheck = this.loopDetector.check(event.trace_id, event.id, event.source, event.type, null, // route not yet known
+            null);
+            if (loopCheck.circuit_broken) {
+                await this.emitLog('loop.circuit_broken', {
+                    event_id: event.id,
+                    trace_id: event.trace_id,
+                    source: event.source,
+                    module: mod.name,
+                    result: `Circuit broken: event chain depth ${loopCheck.chain_depth} exceeds limit`,
+                    metadata: {
+                        chain_depth: loopCheck.chain_depth,
+                        chain: loopCheck.chain.map((n) => n.event_id),
+                    },
+                });
+                this.emit('loop:circuit_broken', { event, loopCheck });
+                await this.bus.ack(event.id);
+                return;
+            }
+            if (loopCheck.loop_detected) {
+                await this.emitLog('loop.detected', {
+                    event_id: event.id,
+                    trace_id: event.trace_id,
+                    source: event.source,
+                    module: mod.name,
+                    result: `Loop detected: chain depth ${loopCheck.chain_depth}`,
+                    metadata: {
+                        chain_depth: loopCheck.chain_depth,
+                        flags: loopCheck.flags.map((f) => f.message),
+                    },
+                });
+                this.emit('loop:detected', { event, loopCheck });
+            }
+        }
         // Write to bus (WAL)
         await this.bus.publish(event);
         // Match routes from this module
@@ -424,6 +470,9 @@ class Runtime extends EventEmitter {
             module: mod.name,
         });
         const startTime = Date.now();
+        const auditFlags = [];
+        const auditOutputs = [];
+        let deliveryStatus = 'error';
         try {
             // Build delivery config (interpolate {{dot.path}} templates from event)
             const deliveryConfig = {
@@ -442,44 +491,88 @@ class Runtime extends EventEmitter {
                     // Non-fatal: log but continue delivery
                 }
             }
-            const result = await actor.deliver(event, deliveryConfig);
-            const durationMs = Date.now() - startTime;
-            if (result.status === 'delivered') {
-                await this.emitLog('deliver.success', {
+            // ─── Output Validation ───────────────────────────────────────
+            const deliveryContent = JSON.stringify(deliveryConfig);
+            const validation = this.outputValidator.validate(deliveryContent, event);
+            if (validation.flags.length > 0) {
+                auditFlags.push(...validation.flags);
+                for (const flag of validation.flags) {
+                    await this.emitLog('audit.flag', {
+                        event_id: event.id,
+                        trace_id: event.trace_id,
+                        route: routeName,
+                        target: actorId,
+                        module: mod.name,
+                        result: flag.message,
+                        metadata: { flag_type: flag.type, severity: flag.severity },
+                    });
+                }
+            }
+            if (validation.hold_for_review) {
+                deliveryStatus = 'held';
+                await this.emitLog('audit.held', {
                     event_id: event.id,
                     trace_id: event.trace_id,
                     route: routeName,
                     target: actorId,
-                    duration_ms: durationMs,
                     module: mod.name,
+                    result: 'Output held for human review due to critical flags',
+                    metadata: { flags: validation.flags.map((f) => f.message) },
                 });
-                this.emit('delivery', {
-                    event,
-                    route: routeName,
-                    actor: actorId,
-                    status: 'delivered',
-                });
+                this.emit('audit:held', { event, route: routeName, actor: actorId, validation });
             }
             else {
-                await this.emitLog('deliver.failure', {
-                    event_id: event.id,
-                    trace_id: event.trace_id,
-                    route: routeName,
+                // Proceed with delivery
+                const result = await actor.deliver(event, deliveryConfig);
+                const durationMs = Date.now() - startTime;
+                // Record output
+                auditOutputs.push({
+                    type: `deliver.${result.status}`,
                     target: actorId,
-                    duration_ms: durationMs,
-                    error: result.error?.message ?? result.status,
-                    module: mod.name,
-                });
-                this.emit('delivery', {
-                    event,
-                    route: routeName,
-                    actor: actorId,
-                    status: result.status,
+                    content_hash: contentHash(deliveryConfig),
+                    timestamp: new Date().toISOString(),
+                    flags: validation.flags,
                 });
+                if (result.status === 'delivered') {
+                    deliveryStatus = 'delivered';
+                    await this.emitLog('deliver.success', {
+                        event_id: event.id,
+                        trace_id: event.trace_id,
+                        route: routeName,
+                        target: actorId,
+                        duration_ms: durationMs,
+                        module: mod.name,
+                    });
+                    this.emit('delivery', {
+                        event,
+                        route: routeName,
+                        actor: actorId,
+                        status: 'delivered',
+                    });
+                }
+                else {
+                    deliveryStatus = result.status;
+                    await this.emitLog('deliver.failure', {
+                        event_id: event.id,
+                        trace_id: event.trace_id,
+                        route: routeName,
+                        target: actorId,
+                        duration_ms: durationMs,
+                        error: result.error?.message ?? result.status,
+                        module: mod.name,
+                    });
+                    this.emit('delivery', {
+                        event,
+                        route: routeName,
+                        actor: actorId,
+                        status: result.status,
+                    });
+                }
             }
         }
         catch (err) {
             const durationMs = Date.now() - startTime;
+            deliveryStatus = 'error';
             const error = new DeliveryError(actorId, routeName, 'Delivery failed', { cause: err });
             this.emit('error', error);
             this.metricsServer?.connectorErrors.inc({ connector: actorId });
@@ -493,6 +586,44 @@ class Runtime extends EventEmitter {
                 module: mod.name,
             });
         }
+        // ─── Audit Trail Recording ───────────────────────────────────────
+        const durationMs = Date.now() - startTime;
+        const chainDepth = event.trace_id ? this.loopDetector.getChainDepth(event.trace_id) : 1;
+        const auditRecord = {
+            id: generateAuditId(),
+            timestamp: new Date().toISOString(),
+            trace_id: event.trace_id ?? '',
+            input_event_id: event.id,
+            input_source: event.source,
+            input_type: event.type,
+            input_content_hash: contentHash(event.payload),
+            route: routeName,
+            sop_file: route.with?.prompt_file ?? null,
+            module: mod.name,
+            actor: actorId,
+            delivery_status: deliveryStatus,
+            duration_ms: durationMs,
+            outputs: auditOutputs,
+            chain_depth: chainDepth,
+            parent_event_id: null, // set by caller if part of a chain
+            held_for_review: deliveryStatus === 'held',
+            flags: auditFlags,
+        };
+        this.auditTrail.record(auditRecord);
+        await this.emitLog('audit.record', {
+            event_id: event.id,
+            trace_id: event.trace_id,
+            route: routeName,
+            target: actorId,
+            module: mod.name,
+            metadata: {
+                audit_id: auditRecord.id,
+                delivery_status: deliveryStatus,
+                chain_depth: chainDepth,
+                flag_count: auditFlags.length,
+                held: auditRecord.held_for_review,
+            },
+        });
     }
     // ─── Source Polling ───────────────────────────────────────────────────────
     async pollSource(sourceId, moduleName) {
@@ -596,6 +727,34 @@ class Runtime extends EventEmitter {
         this.circuitRetryTimers.set(timerKey, timer);
     }
     // ─── Helpers ────────────────────────────────────────────────────────────
+    resolveCheckpointStore(config) {
+        const cpConfig = config.defaults?.checkpoint;
+        if (cpConfig?.store === 'memory') {
+            return new InMemoryCheckpointStore();
+        }
+        // Explicit file store requested or directory configured
+        if (cpConfig?.store === 'file' || cpConfig?.dir) {
+            if (cpConfig?.dir) {
+                const dir = cpConfig.dir.startsWith('/') || !config.modulePath
+                    ? cpConfig.dir
+                    : join(config.modulePath, cpConfig.dir);
+                return new FileCheckpointStore(dir);
+            }
+            if (config.modulePath) {
+                return new FileCheckpointStore(join(config.modulePath, '.orgloop', 'checkpoints'));
+            }
+            return new FileCheckpointStore();
+        }
+        // No explicit config — use file if we have a directory hint
+        if (config.modulePath) {
+            return new FileCheckpointStore(join(config.modulePath, '.orgloop', 'checkpoints'));
+        }
+        if (this.dataDir) {
+            return new FileCheckpointStore(this.dataDir);
+        }
+        // No directory context at all — fall back to in-memory
+        return new InMemoryCheckpointStore();
+    }
     countAllSources() {
         let count = 0;
         for (const mod of this.registry.list()) {
@@ -770,6 +929,40 @@ class Runtime extends EventEmitter {
         }
         return sources;
     }
+    // ─── Audit Trail & Loop Detection API ────────────────────────────────
+    /** Query the audit trail. */
+    queryAuditTrail(filter) {
+        return this.auditTrail.query(filter);
+    }
+    /** Get the full audit chain for a trace ID. */
+    getAuditChain(traceId) {
+        return this.auditTrail.getChain(traceId);
+    }
+    /** Get loop detector state for a trace ID. */
+    getLoopState(traceId) {
+        const chain = this.loopDetector.getChain(traceId);
+        if (chain.length === 0)
+            return null;
+        return {
+            loop_detected: false,
+            circuit_broken: this.loopDetector.isCircuitBroken(traceId),
+            chain_depth: chain.length,
+            chain,
+            flags: [],
+        };
+    }
+    /** Get the audit trail instance (for direct access in tests). */
+    getAuditTrail() {
+        return this.auditTrail;
+    }
+    /** Get the loop detector instance (for direct access in tests). */
+    getLoopDetector() {
+        return this.loopDetector;
+    }
+    /** Get the output validator instance (for direct access in tests). */
+    getOutputValidator() {
+        return this.outputValidator;
+    }
     /** Get the metrics registry for Prometheus text output. */
     async getMetricsText() {
         if (!this.metricsServer)