@ornexus/neocortex 4.60.73 → 4.60.75

package/packages/client/dist/continuity/autonomous-governance.js

@@ -1,285 +1 @@
-/**
- * @license FSL-1.1
- * Copyright (c) 2026 OrNexus AI
- *
- * P199.03 -- public-safe autonomous execution governance envelope.
- */
-import { createHash } from 'node:crypto';
-export const AUTONOMOUS_GOVERNANCE_VERSION = 1;
-export const AUTONOMOUS_GOVERNANCE_EVENT_TYPE = 'autonomous_governance_audit';
-export const AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG = '[P199-EV-GOVERNANCE]';
-export const AUTONOMOUS_GOVERNANCE_REASON_CODES = Object.freeze({
-    OK: 'continuity-ok',
-    BYPASS_BLOCKED: 'headless-directive-rejected',
-});
-const DIRECT_YOLO_PATTERN = /^\*yolo @(?<target>docs\/stories\/(?<storyId>[A-Za-z0-9._-]+)\.story\.md)$/;
-const DIRECT_YOLOOP_PATTERN = /^\*yoloop @(?<target>docs\/epics\/epic-(?<epicId>[A-Za-z0-9._-]+)\.md)$/;
-const DIRECT_YOLOOP_DIRECTORY_PATTERN = /^\*yoloop @(?<target>docs\/epics\/?|docs\/epics)$/;
-const STORY_TARGET_PATTERN = /^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/;
-const EPIC_TARGET_PATTERN = /^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/;
-const EPIC_DIRECTORY_TARGET_PATTERN = /^docs\/epics\/?$/;
-const SAFE_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/;
-const HASH_PATTERN = /^sha256:[a-f0-9]{64}$/;
-const UNSAFE_VALUE_PATTERN = /(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i;
-export function parseAutonomousInvokeIntent(args) {
-    const trimmed = args.trim();
-    const yolo = trimmed.match(DIRECT_YOLO_PATTERN);
-    if (yolo?.groups?.target && yolo.groups.storyId) {
-        return {
-            autonomousKind: 'yolo',
-            source: 'direct-yolo',
-            targetKind: 'story',
-            targetRef: yolo.groups.target,
-            storyId: yolo.groups.storyId,
-            commandHash: hashPublicValue(trimmed),
-        };
-    }
-    const yoloop = trimmed.match(DIRECT_YOLOOP_PATTERN);
-    if (yoloop?.groups?.target && yoloop.groups.epicId) {
-        return {
-            autonomousKind: 'yoloop',
-            source: 'direct-yoloop',
-            targetKind: 'epic',
-            targetRef: yoloop.groups.target,
-            epicId: yoloop.groups.epicId,
-            commandHash: hashPublicValue(trimmed),
-        };
-    }
-    const yoloopDirectory = trimmed.match(DIRECT_YOLOOP_DIRECTORY_PATTERN);
-    if (yoloopDirectory?.groups?.target) {
-        return {
-            autonomousKind: 'yoloop',
-            source: 'direct-yoloop',
-            targetKind: 'epic_directory',
-            targetRef: 'docs/epics/',
-            commandHash: hashPublicValue(trimmed),
-        };
-    }
-    return null;
-}
-export function isAutonomousInvoke(args) {
-    return parseAutonomousInvokeIntent(args) !== null;
-}
-export function buildAutonomousGovernanceEnvelope(input) {
-    const idBase = input.storyId ?? input.epicId ?? input.targetRef;
-    const safeBase = sanitizeIdPart(idBase);
-    const seed = input.operationSeed ?? `${input.autonomousKind}:${input.source}:${input.targetRef}:${input.jobId ?? ''}`;
-    const suffix = stableSuffix(seed);
-    const jobId = input.jobId ?? `job-${sanitizeIdPart(input.autonomousKind)}-${safeBase}`.slice(0, 96);
-    const executionId = `exec-gov-${safeBase}-${suffix}`.slice(0, 120);
-    const auditId = `audit-gov-${safeBase}-${suffix}`.slice(0, 120);
-    const receiptId = `receipt-gov-${safeBase}-${suffix}`.slice(0, 120);
-    const commandHash = input.commandHash ?? hashPublicValue(`${input.autonomousKind}:${input.targetRef}`);
-    return {
-        schemaVersion: 1,
-        contractVersion: 'continuity-v1',
-        governanceVersion: AUTONOMOUS_GOVERNANCE_VERSION,
-        envelopeId: `gov-${safeBase}-${suffix}`.slice(0, 120),
-        jobId,
-        executionId,
-        auditId,
-        receiptId,
-        autonomousKind: input.autonomousKind,
-        source: input.source,
-        targetKind: input.targetKind,
-        targetRef: input.targetRef,
-        ...(input.storyId ? { storyId: input.storyId } : {}),
-        ...(input.epicId ? { epicId: input.epicId } : {}),
-        status: input.status ?? 'accepted',
-        reasonCode: input.reasonCode ?? AUTONOMOUS_GOVERNANCE_REASON_CODES.OK,
-        publicSummary: `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Autonomous execution accepted under public continuity governance.`,
-        counts: { targets: 1 },
-        hashes: { command: commandHash },
-        relativePaths: [input.targetRef],
-        publicSafe: true,
-    };
-}
-export function validateAutonomousGovernanceEnvelope(input, expected) {
-    const redactions = [];
-    if (!isRecord(input)) {
-        return rejectedGovernance('autonomousGovernance', redactions);
-    }
-    const envelope = input;
-    if (envelope.schemaVersion !== 1)
-        redactions.push(redaction('schemaVersion', 'unsafe_key', 'value-denied'));
-    if (envelope.contractVersion !== 'continuity-v1')
-        redactions.push(redaction('contractVersion', 'unsafe_key', 'value-denied'));
-    if (envelope.governanceVersion !== AUTONOMOUS_GOVERNANCE_VERSION)
-        redactions.push(redaction('governanceVersion', 'unsafe_key', 'value-denied'));
-    if (envelope.publicSafe !== true)
-        redactions.push(redaction('publicSafe', 'unsafe_key', 'value-denied'));
-    if (envelope.status !== 'accepted')
-        redactions.push(redaction('status', 'unsafe_key', 'value-denied'));
-    for (const field of ['envelopeId', 'jobId', 'executionId', 'auditId', 'receiptId', 'reasonCode']) {
-        if (!safeId(envelope[field]))
-            redactions.push(redaction(field, 'unsafe_key', 'value-denied'));
-    }
-    if (!safeKind(envelope.autonomousKind))
-        redactions.push(redaction('autonomousKind', 'unsafe_key', 'value-denied'));
-    if (!safeSource(envelope.source))
-        redactions.push(redaction('source', 'unsafe_key', 'value-denied'));
-    if (envelope.targetKind !== 'story' && envelope.targetKind !== 'epic' && envelope.targetKind !== 'epic_directory')
-        redactions.push(redaction('targetKind', 'unsafe_key', 'value-denied'));
-    if (typeof envelope.targetRef !== 'string' || !targetMatches(envelope.targetKind, envelope.targetRef))
-        redactions.push(redaction('targetRef', 'prompt_body', 'value-denied'));
-    if (envelope.storyId !== undefined && (!safeId(envelope.storyId) || envelope.targetKind !== 'story'))
-        redactions.push(redaction('storyId', 'prompt_body', 'value-denied'));
-    if (envelope.epicId !== undefined && (!safeId(envelope.epicId) || envelope.targetKind !== 'epic'))
-        redactions.push(redaction('epicId', 'prompt_body', 'value-denied'));
-    if (typeof envelope.publicSummary !== 'string' || envelope.publicSummary.length > 240 || unsafe(envelope.publicSummary))
-        redactions.push(redaction('publicSummary', 'unbounded_text', 'value-denied'));
-    if (!isRecord(envelope.counts) || typeof envelope.counts.targets !== 'number')
-        redactions.push(redaction('counts', 'unsafe_key', 'value-denied'));
-    if (!isRecord(envelope.hashes) || typeof envelope.hashes.command !== 'string' || !HASH_PATTERN.test(envelope.hashes.command))
-        redactions.push(redaction('hashes.command', 'prompt_body', 'value-denied'));
-    if (!Array.isArray(envelope.relativePaths) || envelope.relativePaths.length !== 1 || envelope.relativePaths[0] !== envelope.targetRef)
-        redactions.push(redaction('relativePaths', 'local_absolute_path', 'value-denied'));
-    if (expected?.autonomousKind && envelope.autonomousKind !== expected.autonomousKind)
-        redactions.push(redaction('autonomousKind', 'unsafe_key', 'operation-denied'));
-    if (expected?.jobId && envelope.jobId !== expected.jobId)
-        redactions.push(redaction('jobId', 'unsafe_key', 'operation-denied'));
-    if (expected?.targetKind && envelope.targetKind !== expected.targetKind)
-        redactions.push(redaction('targetKind', 'prompt_body', 'operation-denied'));
-    if (expected?.targetRef && envelope.targetRef !== expected.targetRef)
-        redactions.push(redaction('targetRef', 'prompt_body', 'operation-denied'));
-    if (redactions.length > 0)
-        return rejectedGovernance('autonomousGovernance', redactions);
-    return { ok: true, envelope: envelope };
-}
-export function readAutonomousGovernanceEnvelopeFromMetadata(metadataJson, expected) {
-    if (!metadataJson)
-        return rejectedGovernance('autonomousGovernance', []);
-    try {
-        const metadata = JSON.parse(metadataJson);
-        if (!isRecord(metadata))
-            return rejectedGovernance('autonomousGovernance', []);
-        return validateAutonomousGovernanceEnvelope(metadata.autonomousGovernance, expected);
-    }
-    catch {
-        return rejectedGovernance('autonomousGovernance', []);
-    }
-}
-export function recordAutonomousGovernance(store, envelope, nowIso, options = {}) {
-    const validation = validateAutonomousGovernanceEnvelope(envelope);
-    if (!validation.ok)
-        return failedRecord(envelope, validation.publicSummary);
-    if (options.requireExistingJob && !store.jobExists(envelope.jobId)) {
-        return failedRecord(envelope, `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Governance bypass blocked before autonomous execution.`);
-    }
-    store.runInTransaction(() => {
-        if (!options.requireExistingJob) {
-            store.recordJob({
-                jobId: envelope.jobId,
-                kind: 'runner',
-                status: 'active',
-                createdAt: nowIso,
-                updatedAt: nowIso,
-                summary: `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Governed autonomous execution job.`,
-                reasonCode: envelope.reasonCode,
-                operationId: `${envelope.executionId}:job`,
-                idempotencyKey: `${envelope.envelopeId}:job`,
-                metadata: { autonomousGovernance: envelope, publicSafe: true },
-            });
-        }
-        store.appendEvent({
-            eventId: envelope.auditId,
-            jobId: envelope.jobId,
-            operationId: `${envelope.executionId}:audit`,
-            idempotencyKey: `${envelope.envelopeId}:audit`,
-            type: AUTONOMOUS_GOVERNANCE_EVENT_TYPE,
-            summary: envelope.publicSummary,
-            reasonCode: envelope.reasonCode,
-            createdAt: nowIso,
-            metadata: { autonomousGovernance: envelope, publicSafe: true },
-        });
-        store.appendReceipt({
-            receiptId: envelope.receiptId,
-            jobId: envelope.jobId,
-            operationId: `${envelope.executionId}:receipt`,
-            idempotencyKey: `${envelope.envelopeId}:receipt`,
-            status: 'accepted',
-            reasonCode: envelope.reasonCode,
-            appliedOperationIds: [envelope.executionId],
-            createdAt: nowIso,
-            metadata: { autonomousGovernance: envelope, publicSafe: true },
-        });
-    });
-    return {
-        ok: true,
-        envelope,
-        reasonCode: envelope.reasonCode,
-        publicSummary: envelope.publicSummary,
-        publicSafe: true,
-    };
-}
-export function autonomousGovernanceMetadata(envelope, base) {
-    return {
-        ...(base ?? {}),
-        autonomousGovernance: envelope,
-        governanceVersion: AUTONOMOUS_GOVERNANCE_VERSION,
-        governanceEvidence: AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG,
-        publicSafe: true,
-    };
-}
-function rejectedGovernance(field, redactions) {
-    return {
-        ok: false,
-        reasonCode: AUTONOMOUS_GOVERNANCE_REASON_CODES.BYPASS_BLOCKED,
-        publicSummary: `${AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG} Governance envelope missing or invalid before autonomous execution.`,
-        redactionSummary: redactions.length > 0 ? redactions : [redaction(field, 'unsafe_key', 'operation-denied')],
-    };
-}
-function failedRecord(envelope, publicSummary) {
-    return {
-        ok: false,
-        envelope,
-        reasonCode: AUTONOMOUS_GOVERNANCE_REASON_CODES.BYPASS_BLOCKED,
-        publicSummary,
-        publicSafe: true,
-    };
-}
-function hashPublicValue(value) {
-    return `sha256:${createHash('sha256').update(value).digest('hex')}`;
-}
-function stableSuffix(value) {
-    return createHash('sha256').update(value).digest('hex').slice(0, 12);
-}
-function sanitizeIdPart(value) {
-    const normalized = value
-        .replace(/^docs\/stories\//, '')
-        .replace(/^docs\/epics\/epic-/, '')
-        .replace(/\.story\.md$/, '')
-        .replace(/\.md$/, '')
-        .replace(/[^A-Za-z0-9._-]+/g, '-')
-        .replace(/^-+|-+$/g, '');
-    return (normalized || 'autonomous').slice(0, 60);
-}
-function safeId(value) {
-    return typeof value === 'string' && SAFE_ID_PATTERN.test(value) && !unsafe(value);
-}
-function safeKind(value) {
-    return value === 'yolo' || value === 'yoloop' || value === 'run_yolo' || value === 'run_yoloop';
-}
-function safeSource(value) {
-    return value === 'direct-yolo' || value === 'direct-yoloop' || value === 'headless-run-yolo' || value === 'headless-run-yoloop' || value === 'delegated-subagent';
-}
-function targetMatches(kind, targetRef) {
-    if (unsafe(targetRef))
-        return false;
-    if (kind === 'story')
-        return STORY_TARGET_PATTERN.test(targetRef);
-    if (kind === 'epic')
-        return EPIC_TARGET_PATTERN.test(targetRef);
-    if (kind === 'epic_directory')
-        return EPIC_DIRECTORY_TARGET_PATTERN.test(targetRef);
-    return false;
-}
-function unsafe(value) {
-    return UNSAFE_VALUE_PATTERN.test(value) || /[;&|`$<>\n\r\0]/.test(value);
-}
-function isRecord(value) {
-    return typeof value === 'object' && value !== null && !Array.isArray(value);
-}
-function redaction(field, reason, evidence) {
-    return { field, reason, evidence, publicSafe: true };
-}
+import{createHash as y}from"node:crypto";const c=1,R="autonomous_governance_audit",s="[P199-EV-GOVERNANCE]",p=Object.freeze({OK:"continuity-ok",BYPASS_BLOCKED:"headless-directive-rejected"}),S=/^\*yolo @(?<target>docs\/stories\/(?<storyId>[A-Za-z0-9._-]+)\.story\.md)$/,T=/^\*yoloop @(?<target>docs\/epics\/epic-(?<epicId>[A-Za-z0-9._-]+)\.md)$/,O=/^\*yoloop @(?<target>docs\/epics\/?|docs\/epics)$/,K=/^docs\/stories\/[A-Za-z0-9._-]+\.story\.md$/,v=/^docs\/epics\/epic-[A-Za-z0-9._-]+\.md$/,$=/^docs\/epics\/?$/,C=/^[A-Za-z0-9][A-Za-z0-9._:-]{0,159}$/,N=/^sha256:[a-f0-9]{64}$/,P=/(https?:\/\/\S+|(?:^|\s)(?:\/(?:home|Users|media|mnt|tmp|var|etc|private)\/\S+|[A-Za-z]:\\\S+)|ghp_[A-Za-z0-9_]+|sk-[A-Za-z0-9_-]+|-----BEGIN [A-Z ]*PRIVATE KEY-----|authorization\s*:|password\s*=|token\s*=|api[_-]?key\s*=|license[_-]?key\s*=|raw[_-]?(?:logs?)\s*[:=]|transcript|stack\s*trace|stderr:|stdout:|system prompt|workflow body|step body|PROTECTED_|PRIVATE_INTERNALS|CUSTOMER_PII|\bPII\b|VENDOR_CORPUS)/i;function G(e){const o=e.trim(),r=o.match(S);if(r?.groups?.target&&r.groups.storyId)return{autonomousKind:"yolo",source:"direct-yolo",targetKind:"story",targetRef:r.groups.target,storyId:r.groups.storyId,commandHash:u(o)};const t=o.match(T);return t?.groups?.target&&t.groups.epicId?{autonomousKind:"yoloop",source:"direct-yoloop",targetKind:"epic",targetRef:t.groups.target,epicId:t.groups.epicId,commandHash:u(o)}:o.match(O)?.groups?.target?{autonomousKind:"yoloop",source:"direct-yoloop",targetKind:"epic_directory",targetRef:"docs/epics/",commandHash:u(o)}:null}function D(e){return G(e)!==null}function U(e){const o=e.storyId??e.epicId??e.targetRef,r=g(o),t=e.operationSeed??`${e.autonomousKind}:${e.source}:${e.targetRef}:${e.jobId??""}`,a=k(t),_=e.jobId??`job-${g(e.autonomousKind)}-${r}`.slice(0,96),h=`exec-gov-${r}-${a}`.slice(0,120),b=`audit-gov-${r}-${a}`.slice(0,120),E=`receipt-gov-${r}-${a}`.slice(0,120),A=e.commandHash??u(`${e.autonomousKind}:${e.targetRef}`);return{schemaVersion:1,contractVersion:"continuity-v1",governanceVersion:c,envelopeId:`gov-${r}-${a}`.slice(0,120),jobId:_,executionId:h,auditId:b,receiptId:E,autonomousKind:e.autonomousKind,source:e.source,targetKind:e.targetKind,targetRef:e.targetRef,...e.storyId?{storyId:e.storyId}:{},...e.epicId?{epicId:e.epicId}:{},status:e.status??"accepted",reasonCode:e.reasonCode??p.OK,publicSummary:`${s} Autonomous execution accepted under public continuity governance.`,counts:{targets:1},hashes:{command:A},relativePaths:[e.targetRef],publicSafe:!0}}function l(e,o){const r=[];if(!d(e))return i("autonomousGovernance",r);const t=e;t.schemaVersion!==1&&r.push(n("schemaVersion","unsafe_key","value-denied")),t.contractVersion!=="continuity-v1"&&r.push(n("contractVersion","unsafe_key","value-denied")),t.governanceVersion!==c&&r.push(n("governanceVersion","unsafe_key","value-denied")),t.publicSafe!==!0&&r.push(n("publicSafe","unsafe_key","value-denied")),t.status!=="accepted"&&r.push(n("status","unsafe_key","value-denied"));for(const a of["envelopeId","jobId","executionId","auditId","receiptId","reasonCode"])f(t[a])||r.push(n(a,"unsafe_key","value-denied"));return j(t.autonomousKind)||r.push(n("autonomousKind","unsafe_key","value-denied")),V(t.source)||r.push(n("source","unsafe_key","value-denied")),t.targetKind!=="story"&&t.targetKind!=="epic"&&t.targetKind!=="epic_directory"&&r.push(n("targetKind","unsafe_key","value-denied")),(typeof t.targetRef!="string"||!x(t.targetKind,t.targetRef))&&r.push(n("targetRef","prompt_body","value-denied")),t.storyId!==void 0&&(!f(t.storyId)||t.targetKind!=="story")&&r.push(n("storyId","prompt_body","value-denied")),t.epicId!==void 0&&(!f(t.epicId)||t.targetKind!=="epic")&&r.push(n("epicId","prompt_body","value-denied")),(typeof t.publicSummary!="string"||t.publicSummary.length>240||m(t.publicSummary))&&r.push(n("publicSummary","unbounded_text","value-denied")),(!d(t.counts)||typeof t.counts.targets!="number")&&r.push(n("counts","unsafe_key","value-denied")),(!d(t.hashes)||typeof t.hashes.command!="string"||!N.test(t.hashes.command))&&r.push(n("hashes.command","prompt_body","value-denied")),(!Array.isArray(t.relativePaths)||t.relativePaths.length!==1||t.relativePaths[0]!==t.targetRef)&&r.push(n("relativePaths","local_absolute_path","value-denied")),o?.autonomousKind&&t.autonomousKind!==o.autonomousKind&&r.push(n("autonomousKind","unsafe_key","operation-denied")),o?.jobId&&t.jobId!==o.jobId&&r.push(n("jobId","unsafe_key","operation-denied")),o?.targetKind&&t.targetKind!==o.targetKind&&r.push(n("targetKind","prompt_body","operation-denied")),o?.targetRef&&t.targetRef!==o.targetRef&&r.push(n("targetRef","prompt_body","operation-denied")),r.length>0?i("autonomousGovernance",r):{ok:!0,envelope:t}}function Y(e,o){if(!e)return i("autonomousGovernance",[]);try{const r=JSON.parse(e);return d(r)?l(r.autonomousGovernance,o):i("autonomousGovernance",[])}catch{return i("autonomousGovernance",[])}}function Z(e,o,r,t={}){const a=l(o);return a.ok?t.requireExistingJob&&!e.jobExists(o.jobId)?I(o,`${s} Governance bypass blocked before autonomous execution.`):(e.runInTransaction(()=>{t.requireExistingJob||e.recordJob({jobId:o.jobId,kind:"runner",status:"active",createdAt:r,updatedAt:r,summary:`${s} Governed autonomous execution job.`,reasonCode:o.reasonCode,operationId:`${o.executionId}:job`,idempotencyKey:`${o.envelopeId}:job`,metadata:{autonomousGovernance:o,publicSafe:!0}}),e.appendEvent({eventId:o.auditId,jobId:o.jobId,operationId:`${o.executionId}:audit`,idempotencyKey:`${o.envelopeId}:audit`,type:R,summary:o.publicSummary,reasonCode:o.reasonCode,createdAt:r,metadata:{autonomousGovernance:o,publicSafe:!0}}),e.appendReceipt({receiptId:o.receiptId,jobId:o.jobId,operationId:`${o.executionId}:receipt`,idempotencyKey:`${o.envelopeId}:receipt`,status:"accepted",reasonCode:o.reasonCode,appliedOperationIds:[o.executionId],createdAt:r,metadata:{autonomousGovernance:o,publicSafe:!0}})}),{ok:!0,envelope:o,reasonCode:o.reasonCode,publicSummary:o.publicSummary,publicSafe:!0}):I(o,a.publicSummary)}function B(e,o){return{...o??{},autonomousGovernance:e,governanceVersion:c,governanceEvidence:s,publicSafe:!0}}function i(e,o){return{ok:!1,reasonCode:p.BYPASS_BLOCKED,publicSummary:`${s} Governance envelope missing or invalid before autonomous execution.`,redactionSummary:o.length>0?o:[n(e,"unsafe_key","operation-denied")]}}function I(e,o){return{ok:!1,envelope:e,reasonCode:p.BYPASS_BLOCKED,publicSummary:o,publicSafe:!0}}function u(e){return`sha256:${y("sha256").update(e).digest("hex")}`}function k(e){return y("sha256").update(e).digest("hex").slice(0,12)}function g(e){return(e.replace(/^docs\/stories\//,"").replace(/^docs\/epics\/epic-/,"").replace(/\.story\.md$/,"").replace(/\.md$/,"").replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^-+|-+$/g,"")||"autonomous").slice(0,60)}function f(e){return typeof e=="string"&&C.test(e)&&!m(e)}function j(e){return e==="yolo"||e==="yoloop"||e==="run_yolo"||e==="run_yoloop"}function V(e){return e==="direct-yolo"||e==="direct-yoloop"||e==="headless-run-yolo"||e==="headless-run-yoloop"||e==="delegated-subagent"}function x(e,o){return m(o)?!1:e==="story"?K.test(o):e==="epic"?v.test(o):e==="epic_directory"?$.test(o):!1}function m(e){return P.test(e)||/[;&|`$<>\n\r\0]/.test(e)}function d(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}function n(e,o,r){return{field:e,reason:o,evidence:r,publicSafe:!0}}export{R as AUTONOMOUS_GOVERNANCE_EVENT_TYPE,s as AUTONOMOUS_GOVERNANCE_EVIDENCE_TAG,p as AUTONOMOUS_GOVERNANCE_REASON_CODES,c as AUTONOMOUS_GOVERNANCE_VERSION,B as autonomousGovernanceMetadata,U as buildAutonomousGovernanceEnvelope,D as isAutonomousInvoke,G as parseAutonomousInvokeIntent,Y as readAutonomousGovernanceEnvelopeFromMetadata,Z as recordAutonomousGovernance,l as validateAutonomousGovernanceEnvelope};