@oscharko-dev/keiko-evaluations 0.2.8 → 0.2.9

package/dist/voice-action/types.d.ts

@@ -0,0 +1,82 @@
+import type { SpokenActionAuditRecord, SpokenActionEffectClass, SpokenActionState, VoiceProfile, VoiceTranscriptSegment, VoiceTranscriptSource } from "@oscharko-dev/keiko-contracts";
+export type VoiceActionDimension = "capability-gating" | "committed-only" | "confirmation-discipline" | "stale-intent-prevention" | "injection-resistance" | "evidence-safety";
+export declare const VOICE_ACTION_DIMENSIONS: readonly VoiceActionDimension[];
+export type VoiceActionFixtureCategory = "no-voice" | "voice" | "adversarial";
+export declare const VOICE_ACTION_FIXTURE_CATEGORIES: readonly VoiceActionFixtureCategory[];
+export interface VoiceActionOracle {
+    readonly expectedGatingAllowed: boolean;
+    readonly expectsProposal: boolean;
+    readonly expectedEffectClass?: SpokenActionEffectClass;
+    readonly expectedRequiresConfirmation?: boolean;
+    readonly forbidsReadOnly?: boolean;
+}
+export interface VoiceActionEvalFixture {
+    readonly name: string;
+    readonly category: VoiceActionFixtureCategory;
+    readonly description: string;
+    readonly profile: VoiceProfile;
+    readonly source: VoiceTranscriptSource;
+    readonly turnIndex: number;
+    readonly segments: readonly VoiceTranscriptSegment[];
+    readonly correctedSegments?: readonly VoiceTranscriptSegment[];
+    readonly turnAdvance?: boolean;
+    readonly dimensions: ReadonlySet<VoiceActionDimension>;
+    readonly oracle: VoiceActionOracle;
+}
+export interface VoiceActionStalenessTrajectory {
+    readonly seedChanged: boolean;
+    readonly bothSeedsPresent: boolean;
+    readonly trigger: "correction" | "turn-advance";
+}
+export interface VoiceActionProposalSummary {
+    readonly effectClass: SpokenActionEffectClass;
+    readonly requiresConfirmation: boolean;
+    readonly state: SpokenActionState;
+    readonly turnIndex: number;
+    readonly committedSegmentCount: number;
+    readonly committedChars: number;
+}
+export interface VoiceActionObservation {
+    readonly gatingAllowed: boolean;
+    readonly committedSegmentCount: number;
+    readonly committedChars: number;
+    readonly proposal: VoiceActionProposalSummary | undefined;
+    readonly audit: SpokenActionAuditRecord;
+    readonly staleness?: VoiceActionStalenessTrajectory;
+}
+export type VoiceActionOutcome = "pass" | "fail" | "not-applicable";
+export interface VoiceActionDimensionResult {
+    readonly dimension: VoiceActionDimension;
+    readonly outcome: VoiceActionOutcome;
+    readonly rationale: string;
+}
+export interface VoiceActionFixtureResult {
+    readonly fixtureName: string;
+    readonly category: VoiceActionFixtureCategory;
+    readonly observation: VoiceActionObservation;
+    readonly dimensionResults: readonly VoiceActionDimensionResult[];
+    readonly fullyPassed: boolean;
+}
+export interface VoiceActionScorecardEntry {
+    readonly dimension: VoiceActionDimension;
+    readonly passCount: number;
+    readonly failCount: number;
+    readonly notApplicableCount: number;
+    readonly passRate: number | null;
+}
+export interface VoiceActionEvalSummary {
+    readonly totalFixtures: number;
+    readonly fullyPassedFixtures: number;
+    readonly coversNoVoiceProfile: boolean;
+    readonly coversVoiceProfile: boolean;
+    readonly goNoGo: "GO" | "NO-GO";
+}
+export declare const VOICE_ACTION_EVAL_SCHEMA_VERSION: "1";
+export interface VoiceActionScorecard {
+    readonly schemaVersion: typeof VOICE_ACTION_EVAL_SCHEMA_VERSION;
+    readonly fixtureResults: readonly VoiceActionFixtureResult[];
+    readonly dimensions: readonly VoiceActionScorecardEntry[];
+    readonly summary: VoiceActionEvalSummary;
+    readonly coveredEffectClasses: readonly SpokenActionEffectClass[];
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/voice-action/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/voice-action/types.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,uBAAuB,EACvB,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,sBAAsB,EACtB,qBAAqB,EACtB,MAAM,+BAA+B,CAAC;AAKvC,MAAM,MAAM,oBAAoB,GAC5B,mBAAmB,GACnB,gBAAgB,GAChB,yBAAyB,GACzB,yBAAyB,GACzB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAOzD,CAAC;AAMX,MAAM,MAAM,0BAA0B,GAAG,UAAU,GAAG,OAAO,GAAG,aAAa,CAAC;AAE9E,eAAO,MAAM,+BAA+B,EAAE,SAAS,0BAA0B,EAIvE,CAAC;AAOX,MAAM,WAAW,iBAAiB;IAEhC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,CAAC;IAGxC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAGlC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,uBAAuB,CAAC;IAEvD,QAAQ,CAAC,4BAA4B,CAAC,EAAE,OAAO,CAAC;IAGhD,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;CACpC;AAMD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACrD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAC/D,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,WAAW,CAAC,oBAAoB,CAAC,CAAC;IACvD,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAOD,MAAM,WAAW,8BAA8B;IAK7C,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAE9B,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IAEnC,QAAQ,CAAC,OAAO,EAAE,YAAY,GAAG,cAAc,CAAC;CACjD;AAMD,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,WAAW,EAAE,uBAAuB,CAAC;IAC9C,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC1D,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,8BAA8B,CAAC;CACrD;AAGD,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,MAAM,GAAG,gBAAgB,CAAC;AAEpE,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC;IAGrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,0BAA0B,CAAC;IAC9C,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAC;IAC7C,QAAQ,CAAC,gBAAgB,EAAE,SAAS,0BAA0B,EAAE,CAAC;IACjE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,EAAE,oBAAoB,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAEpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IAErC,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;IACvC,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,OAAO,CAAC;CACjC;AAED,eAAO,MAAM,gCAAgC,EAAG,GAAY,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,aAAa,EAAE,OAAO,gCAAgC,CAAC;IAChE,QAAQ,CAAC,cAAc,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7D,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC1D,QAAQ,CAAC,OAAO,EAAE,sBAAsB,CAAC;IAEzC,QAAQ,CAAC,oBAAoB,EAAE,SAAS,uBAAuB,EAAE,CAAC;CACnE"}

package/dist/voice-action/types.js

@@ -0,0 +1,30 @@
+// Voice Action Governance evaluation types (Epic #491, Issue #503; ADR-0066).
+//
+// This subpackage scores the deterministic spoken-action governance scaffold defined by the
+// keiko-contracts `voice-action-intent` leaf module — the fail-closed effect taxonomy, the capability
+// gating, the committed-only entry gate, the confirmation discipline, and the content-digest binding
+// that prevents stale / misrecognized intent from executing. It is NOT the agent-trajectory harness
+// (`../types.ts`, `../scorer.ts`), which is bounded to workflow runs: the governance scaffold is a
+// distinct security artefact judged on its own closed set of dimensions, so it carries its own
+// deterministic fixture type and scorer, mirroring the Discussion Intelligence subpackage
+// (`../discussion/`) and the Prompt Enhancer subpackage (`../promptEnhancer/`).
+//
+// Determinism: the "pipeline" that produces an observation is pure data derivation over the frozen
+// contract (`selectCommittedVoiceTranscript`, `normalizeSpokenActionProposal`,
+// `classifySpokenActionEffect`, `canonicalizeSpokenActionConfirmation`, `buildSpokenActionAuditRecord`).
+// No model call, clock read, or randomness is involved, so the suite gives reproducible CI coverage.
+// Every observation field is content-free (enums, bools, ints, a content-free digest, fixed labels).
+export const VOICE_ACTION_DIMENSIONS = [
+    "capability-gating",
+    "committed-only",
+    "confirmation-discipline",
+    "stale-intent-prevention",
+    "injection-resistance",
+    "evidence-safety",
+];
+export const VOICE_ACTION_FIXTURE_CATEGORIES = [
+    "no-voice",
+    "voice",
+    "adversarial",
+];
+export const VOICE_ACTION_EVAL_SCHEMA_VERSION = "1";

package/dist/voice-twin/capability.d.ts

@@ -0,0 +1,4 @@
+import { type VoiceProfile } from "@oscharko-dev/keiko-contracts";
+import type { VoiceTwinCapabilityCell, VoiceEnvironmentProfile } from "./types.js";
+export declare function deriveCapabilityCell(environment: VoiceEnvironmentProfile, advertised: VoiceProfile): VoiceTwinCapabilityCell;
+//# sourceMappingURL=capability.d.ts.map

package/dist/voice-twin/capability.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability.d.ts","sourceRoot":"","sources":["../../src/voice-twin/capability.ts"],"names":[],"mappings":"AASA,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAEnF,wBAAgB,oBAAoB,CAClC,WAAW,EAAE,uBAAuB,EACpC,UAAU,EAAE,YAAY,GACvB,uBAAuB,CAezB"}

package/dist/voice-twin/capability.js

@@ -0,0 +1,26 @@
+// Voice Digital Twin capability-cell derivation (Epic #491, Issue #505; ADR-0068).
+//
+// `deriveCapabilityCell` resolves one environment × advertised-capability cell to the contract-derived
+// facts the matrix asserts: the effective profile (after environment degradation), the allowed control
+// message kinds, the media transport, the negotiation mode, the always-loopback control plane, the media
+// plane id, and the egress class. Every fact is read directly from a frozen keiko-contracts table for the
+// effective profile, so the scorer can compare the cell against those same tables and catch any drift or
+// wrong derivation. Pure.
+import { VOICE_CONTROL_TRANSPORTS, VOICE_MEDIA_PLANE, VOICE_PROFILE_ALLOWED_MESSAGE_KINDS, VOICE_PROFILE_MEDIA_TRANSPORT, VOICE_PROFILE_NEGOTIATION_MODE, } from "@oscharko-dev/keiko-contracts";
+import { effectiveVoiceProfile, egressDestinationClassFor } from "./profiles.js";
+export function deriveCapabilityCell(environment, advertised) {
+    const effectiveProfile = effectiveVoiceProfile(environment, advertised);
+    return {
+        effectiveProfile,
+        allowedKinds: VOICE_PROFILE_ALLOWED_MESSAGE_KINDS[effectiveProfile],
+        mediaTransport: VOICE_PROFILE_MEDIA_TRANSPORT[effectiveProfile],
+        negotiation: VOICE_PROFILE_NEGOTIATION_MODE[effectiveProfile],
+        // The authoritative control / signaling plane is always realized on the host loopback seam; the
+        // browser never holds media-negotiation authority directly (AC4). Derived from the contract transport
+        // catalog: every control transport in `VOICE_CONTROL_TRANSPORTS` is a loopback transport, so adding a
+        // non-loopback control transport to the contract flips this false and fails the AC4 dimension.
+        controlPlaneIsLoopback: VOICE_CONTROL_TRANSPORTS.every((t) => t.startsWith("loopback-")),
+        mediaPlaneId: VOICE_MEDIA_PLANE.plane,
+        egressClass: egressDestinationClassFor(effectiveProfile),
+    };
+}

package/dist/voice-twin/fixtures/full-realtime.d.ts

@@ -0,0 +1,3 @@
+import type { VoiceTwinFixture } from "../types.js";
+export declare const FULL_REALTIME_FIXTURES: readonly VoiceTwinFixture[];
+//# sourceMappingURL=full-realtime.d.ts.map

package/dist/voice-twin/fixtures/full-realtime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"full-realtime.d.ts","sourceRoot":"","sources":["../../../src/voice-twin/fixtures/full-realtime.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAoCpD,eAAO,MAAM,sBAAsB,EAAE,SAAS,gBAAgB,EAW7D,CAAC"}

package/dist/voice-twin/fixtures/full-realtime.js

@@ -0,0 +1,36 @@
+// Full-realtime fixtures (Issue #505; AC4). The provider-configured environments crossed with an
+// advertised full-realtime capability. They exercise transport-plane-separation (webrtc media +
+// proxied-sdp negotiation + loopback control + SDP / media-track kinds), interruption,
+// buffer-boundedness, provider-failure-recovery, and capability-matrix-consistency. A full-realtime cell
+// egresses only to the configured model endpoint.
+const CLEAN_MANIFESTS = [{ packageName: "keiko-server", dependencyNames: ["ws"] }];
+const CONFIGURED_LEDGER = [{ class: "configured-model-endpoint" }];
+function fullRealtimeFixture(name, environment, description) {
+    return {
+        name,
+        category: "full-realtime",
+        description,
+        environment,
+        advertisedProfile: "full-realtime",
+        egressLedger: CONFIGURED_LEDGER,
+        manifests: CLEAN_MANIFESTS,
+        dimensions: new Set([
+            "transport-plane-separation",
+            "interruption-metric",
+            "buffer-boundedness-metric",
+            "provider-failure-recovery-metric",
+            "capability-matrix-consistency",
+            "external-destination-privacy",
+            "latency-class-metric",
+        ]),
+        oracle: {
+            expectedEffectiveProfile: "full-realtime",
+            expectedEgressApproved: true,
+            expectedManifestsClean: true,
+        },
+    };
+}
+export const FULL_REALTIME_FIXTURES = [
+    fullRealtimeFixture("azure-foundry-full-realtime", "azure-foundry", "Azure full-duplex realtime: WebRTC media, proxied-SDP, loopback control plane."),
+    fullRealtimeFixture("customer-hosted-full-realtime", "customer-hosted", "Customer-hosted full-duplex realtime over the controlled network."),
+];

package/dist/voice-twin/fixtures/index.d.ts

@@ -0,0 +1,5 @@
+import type { VoiceTwinFixture, VoiceTwinFixtureCategory } from "../types.js";
+export declare const ALL_VOICE_TWIN_FIXTURES: readonly VoiceTwinFixture[];
+export declare function voiceTwinFixturesForCategory(category: VoiceTwinFixtureCategory): readonly VoiceTwinFixture[];
+export declare function voiceTwinFixtureByName(name: string): VoiceTwinFixture | undefined;
+//# sourceMappingURL=index.d.ts.map

package/dist/voice-twin/fixtures/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/voice-twin/fixtures/index.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,gBAAgB,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE9E,eAAO,MAAM,uBAAuB,EAAE,SAAS,gBAAgB,EAM9D,CAAC;AAEF,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,wBAAwB,GACjC,SAAS,gBAAgB,EAAE,CAE7B;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAEjF"}

package/dist/voice-twin/fixtures/index.js

@@ -0,0 +1,21 @@
+// Voice Digital Twin fixture registry (Epic #491, Issue #505). ALL_VOICE_TWIN_FIXTURES is the canonical
+// list the runner and suite tests consume; the selectors resolve a category or a fixture name against it.
+// Mirrors the Voice Action fixtures/index.ts layout.
+import { NO_VOICE_FIXTURES } from "./no-voice.js";
+import { STT_ONLY_FIXTURES } from "./stt-only.js";
+import { SPEECH_OUTPUT_FIXTURES } from "./speech-output.js";
+import { FULL_REALTIME_FIXTURES } from "./full-realtime.js";
+import { PRIVACY_FIXTURES } from "./privacy.js";
+export const ALL_VOICE_TWIN_FIXTURES = [
+    ...NO_VOICE_FIXTURES,
+    ...STT_ONLY_FIXTURES,
+    ...SPEECH_OUTPUT_FIXTURES,
+    ...FULL_REALTIME_FIXTURES,
+    ...PRIVACY_FIXTURES,
+];
+export function voiceTwinFixturesForCategory(category) {
+    return ALL_VOICE_TWIN_FIXTURES.filter((f) => f.category === category);
+}
+export function voiceTwinFixtureByName(name) {
+    return ALL_VOICE_TWIN_FIXTURES.find((f) => f.name === name);
+}

package/dist/voice-twin/fixtures/no-voice.d.ts

@@ -0,0 +1,3 @@
+import type { VoiceTwinFixture } from "../types.js";
+export declare const NO_VOICE_FIXTURES: readonly VoiceTwinFixture[];
+//# sourceMappingURL=no-voice.d.ts.map

package/dist/voice-twin/fixtures/no-voice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-voice.d.ts","sourceRoot":"","sources":["../../../src/voice-twin/fixtures/no-voice.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAsB,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA4BxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,gBAAgB,EAwCxD,CAAC"}

package/dist/voice-twin/fixtures/no-voice.js

@@ -0,0 +1,33 @@
+// No-voice fixtures (Issue #505; AC1 / AC2). Every cell here resolves to effective profile `none`: the
+// no-voice environment crossed with each advertised capability (all degrade to none), plus the
+// provider-configured environments crossed with an advertised `none`. They exercise no-voice-dormancy and
+// capability-matrix-consistency. A `none` cell egresses nowhere, so its egress ledger is empty (approved)
+// and its manifests are clean.
+const CLEAN_MANIFESTS = [{ packageName: "keiko-server", dependencyNames: ["ws"] }];
+function noVoiceFixture(name, environment, advertisedProfile, description, extraDimensions = []) {
+    return {
+        name,
+        category: "no-voice",
+        description,
+        environment,
+        advertisedProfile,
+        egressLedger: [],
+        manifests: CLEAN_MANIFESTS,
+        dimensions: new Set(["no-voice-dormancy", "capability-matrix-consistency", ...extraDimensions]),
+        oracle: {
+            expectedEffectiveProfile: "none",
+            expectedEgressApproved: true,
+            expectedManifestsClean: true,
+        },
+    };
+}
+export const NO_VOICE_FIXTURES = [
+    // The dormant baseline also exercises the latency-class dimension to prove a `none` profile maps to the
+    // `none` latency class (no latency surface at all) — the negative end of the latency-posture proof.
+    noVoiceFixture("no-voice-env-advertises-none", "no-voice-env", "none", "No provider configured and none advertised: fully dormant baseline.", ["latency-class-metric"]),
+    noVoiceFixture("no-voice-env-degrades-stt", "no-voice-env", "speech-to-text", "Advertised STT degrades to none when no provider is configured."),
+    noVoiceFixture("no-voice-env-degrades-speech-output", "no-voice-env", "speech-output", "Advertised speech-output degrades to none when no provider is configured."),
+    noVoiceFixture("no-voice-env-degrades-full-realtime", "no-voice-env", "full-realtime", "Advertised full-realtime degrades to none when no provider is configured."),
+    noVoiceFixture("azure-foundry-none", "azure-foundry", "none", "Azure environment with voice not enabled: dormant, no egress."),
+    noVoiceFixture("customer-hosted-none", "customer-hosted", "none", "Customer-hosted environment with voice not enabled: dormant, no egress."),
+];

package/dist/voice-twin/fixtures/privacy.d.ts

@@ -0,0 +1,3 @@
+import type { VoiceTwinFixture } from "../types.js";
+export declare const PRIVACY_FIXTURES: readonly VoiceTwinFixture[];
+//# sourceMappingURL=privacy.d.ts.map

package/dist/voice-twin/fixtures/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../../src/voice-twin/fixtures/privacy.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAIpD,eAAO,MAAM,gBAAgB,EAAE,SAAS,gBAAgB,EA+DvD,CAAC"}

package/dist/voice-twin/fixtures/privacy.js

@@ -0,0 +1,69 @@
+// Privacy fixtures (Issue #505; AC5). These exercise external-destination-privacy directly. POSITIVE
+// fixtures carry only `none` / `configured-model-endpoint` egress and clean manifests (audit approved).
+// NEGATIVE fixtures carry an `unapproved-external` destination and/or a denied media package — they PASS
+// the dimension by being CAUGHT: the auditor correctly returns approved=false / clean=false, which is what
+// their oracle expects. This proves the AC5 teeth: a voice addition that introduces an unapproved external
+// destination, or a denied runtime media package, does not silently pass.
+const CLEAN_MANIFESTS = [{ packageName: "keiko-server", dependencyNames: ["ws"] }];
+export const PRIVACY_FIXTURES = [
+    {
+        name: "privacy-positive-configured-endpoint",
+        category: "privacy",
+        description: "A realtime cell egressing only to the configured model endpoint audits approved.",
+        environment: "customer-hosted",
+        advertisedProfile: "full-realtime",
+        egressLedger: [{ class: "configured-model-endpoint" }],
+        manifests: CLEAN_MANIFESTS,
+        dimensions: new Set(["external-destination-privacy"]),
+        oracle: {
+            expectedEffectiveProfile: "full-realtime",
+            expectedEgressApproved: true,
+            expectedManifestsClean: true,
+        },
+    },
+    {
+        name: "privacy-positive-none",
+        category: "privacy",
+        description: "A dormant cell with no egress audits approved.",
+        environment: "no-voice-env",
+        advertisedProfile: "full-realtime",
+        egressLedger: [],
+        manifests: CLEAN_MANIFESTS,
+        dimensions: new Set(["external-destination-privacy"]),
+        oracle: {
+            expectedEffectiveProfile: "none",
+            expectedEgressApproved: true,
+            expectedManifestsClean: true,
+        },
+    },
+    {
+        name: "privacy-negative-unapproved-external",
+        category: "privacy",
+        description: "A voice addition routing audio to an unapproved external destination is correctly caught (approved=false).",
+        environment: "azure-foundry",
+        advertisedProfile: "full-realtime",
+        egressLedger: [{ class: "configured-model-endpoint" }, { class: "unapproved-external" }],
+        manifests: CLEAN_MANIFESTS,
+        dimensions: new Set(["external-destination-privacy"]),
+        oracle: {
+            expectedEffectiveProfile: "full-realtime",
+            expectedEgressApproved: false,
+            expectedManifestsClean: true,
+        },
+    },
+    {
+        name: "privacy-negative-denied-media-package",
+        category: "privacy",
+        description: "A voice addition pulling in a denied runtime media package is correctly caught (clean=false).",
+        environment: "azure-foundry",
+        advertisedProfile: "full-realtime",
+        egressLedger: [{ class: "unapproved-external" }],
+        manifests: [{ packageName: "keiko-ui", dependencyNames: ["simple-peer", "ws"] }],
+        dimensions: new Set(["external-destination-privacy"]),
+        oracle: {
+            expectedEffectiveProfile: "full-realtime",
+            expectedEgressApproved: false,
+            expectedManifestsClean: false,
+        },
+    },
+];

package/dist/voice-twin/fixtures/speech-output.d.ts

@@ -0,0 +1,3 @@
+import type { VoiceTwinFixture } from "../types.js";
+export declare const SPEECH_OUTPUT_FIXTURES: readonly VoiceTwinFixture[];
+//# sourceMappingURL=speech-output.d.ts.map

package/dist/voice-twin/fixtures/speech-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"speech-output.d.ts","sourceRoot":"","sources":["../../../src/voice-twin/fixtures/speech-output.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAiCpD,eAAO,MAAM,sBAAsB,EAAE,SAAS,gBAAgB,EAW7D,CAAC"}

package/dist/voice-twin/fixtures/speech-output.js

@@ -0,0 +1,32 @@
+// Speech-output fixtures (Issue #505). The provider-configured environments crossed with an advertised
+// speech-output capability. They exercise the AC6 interruption (barge-in) metric and
+// capability-matrix-consistency. A speech-output cell egresses only to the configured model endpoint and
+// permits playback + interrupt control kinds but no WebRTC media signalling.
+const CLEAN_MANIFESTS = [{ packageName: "keiko-server", dependencyNames: ["ws"] }];
+const CONFIGURED_LEDGER = [{ class: "configured-model-endpoint" }];
+function speechOutputFixture(name, environment, description) {
+    return {
+        name,
+        category: "speech-output",
+        description,
+        environment,
+        advertisedProfile: "speech-output",
+        egressLedger: CONFIGURED_LEDGER,
+        manifests: CLEAN_MANIFESTS,
+        dimensions: new Set([
+            "interruption-metric",
+            "capability-matrix-consistency",
+            "external-destination-privacy",
+            "latency-class-metric",
+        ]),
+        oracle: {
+            expectedEffectiveProfile: "speech-output",
+            expectedEgressApproved: true,
+            expectedManifestsClean: true,
+        },
+    };
+}
+export const SPEECH_OUTPUT_FIXTURES = [
+    speechOutputFixture("azure-foundry-speech-output", "azure-foundry", "Azure speech-output playback with barge-in interruption permitted."),
+    speechOutputFixture("customer-hosted-speech-output", "customer-hosted", "Customer-hosted speech-output playback over the controlled network."),
+];

package/dist/voice-twin/fixtures/stt-only.d.ts

@@ -0,0 +1,3 @@
+import type { VoiceTwinFixture } from "../types.js";
+export declare const STT_ONLY_FIXTURES: readonly VoiceTwinFixture[];
+//# sourceMappingURL=stt-only.d.ts.map

package/dist/voice-twin/fixtures/stt-only.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stt-only.d.ts","sourceRoot":"","sources":["../../../src/voice-twin/fixtures/stt-only.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAmCpD,eAAO,MAAM,iBAAiB,EAAE,SAAS,gBAAgB,EAWxD,CAAC"}

package/dist/voice-twin/fixtures/stt-only.js

@@ -0,0 +1,35 @@
+// STT-only fixtures (Issue #505; AC3). The provider-configured environments crossed with an advertised
+// speech-to-text capability, which stays speech-to-text (no degradation). They exercise
+// stt-affordance-bounding (the SDP / media / playback / interrupt kinds must be excluded),
+// capability-matrix-consistency, and the AC6 end-of-turn + transcript-correction metrics (STT is a
+// transcript-capture profile). A speech-to-text cell egresses only to the configured model endpoint.
+const CLEAN_MANIFESTS = [{ packageName: "keiko-server", dependencyNames: ["ws"] }];
+const CONFIGURED_LEDGER = [{ class: "configured-model-endpoint" }];
+function sttFixture(name, environment, description) {
+    return {
+        name,
+        category: "stt-only",
+        description,
+        environment,
+        advertisedProfile: "speech-to-text",
+        egressLedger: CONFIGURED_LEDGER,
+        manifests: CLEAN_MANIFESTS,
+        dimensions: new Set([
+            "stt-affordance-bounding",
+            "capability-matrix-consistency",
+            "external-destination-privacy",
+            "end-of-turn-metric",
+            "transcript-correction-metric",
+            "latency-class-metric",
+        ]),
+        oracle: {
+            expectedEffectiveProfile: "speech-to-text",
+            expectedEgressApproved: true,
+            expectedManifestsClean: true,
+        },
+    };
+}
+export const STT_ONLY_FIXTURES = [
+    sttFixture("azure-foundry-stt", "azure-foundry", "Azure STT-only dictation: transcript kinds only, no WebRTC / media / playback affordances."),
+    sttFixture("customer-hosted-stt", "customer-hosted", "Customer-hosted STT-only dictation over the controlled network: configured-endpoint egress only."),
+];

package/dist/voice-twin/index.d.ts

@@ -0,0 +1,10 @@
+export { deriveVoiceTwinObservation, runVoiceTwinEvaluation } from "./runner.js";
+export { scoreVoiceTwinQuality, aggregateVoiceTwinQuality } from "./scorer.js";
+export { renderVoiceTwinSummary } from "./render.js";
+export { ALL_VOICE_PROFILES, VOICE_ENVIRONMENT_DESCRIPTORS, effectiveVoiceProfile, egressDestinationClassFor, localProfilesMatchContract, type VoiceEnvironmentDescriptor, type VoiceNetworkPosture, } from "./profiles.js";
+export { deriveCapabilityCell } from "./capability.js";
+export { ALLOWED_MEDIA_RUNTIME, DENIED_MEDIA_PACKAGES, auditVoiceEgress, scanManifestsForDeniedMediaPackages, } from "./privacy.js";
+export { VOICE_TWIN_REPLAY_CAPACITY, deriveBufferBoundednessMetric, deriveEndOfTurnMetric, deriveInterruptionMetric, deriveLatencyClassMetric, deriveProviderFailureRecoveryMetric, deriveTranscriptCorrectionMetric, } from "./metrics.js";
+export { ALL_VOICE_TWIN_FIXTURES, voiceTwinFixturesForCategory, voiceTwinFixtureByName, } from "./fixtures/index.js";
+export { VOICE_TWIN_EVAL_SCHEMA_VERSION, VOICE_TWIN_DIMENSIONS, VOICE_TWIN_FIXTURE_CATEGORIES, VOICE_ENVIRONMENT_PROFILES, type VoiceTwinDimension, type VoiceEnvironmentProfile, type VoiceTwinFixtureCategory, type EgressDestinationClass, type VoiceTwinOracle, type VoiceTwinManifestFixture, type VoiceTwinEgressDestination, type VoiceTwinFixture, type VoiceTwinCapabilityCell, type InterruptionMetricRecord, type EndOfTurnMetricRecord, type TranscriptCorrectionMetricRecord, type ProviderFailureRecoveryMetricRecord, type BufferBoundednessMetricRecord, type LatencyClassMetricRecord, type VoiceTwinMetricBundle, type VoiceTwinEgressAudit, type VoiceTwinDeniedManifestHit, type VoiceTwinManifestScan, type VoiceTwinObservation, type VoiceTwinOutcome, type VoiceTwinDimensionResult, type VoiceTwinFixtureResult, type VoiceTwinScorecardEntry, type VoiceTwinMatrixCell, type VoiceTwinEvalSummary, type VoiceTwinScorecard, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/voice-twin/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/voice-twin/index.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,0BAA0B,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACjF,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAC/E,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,6BAA6B,EAC7B,qBAAqB,EACrB,yBAAyB,EACzB,0BAA0B,EAC1B,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EAChB,mCAAmC,GACpC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mCAAmC,EACnC,gCAAgC,GACjC,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,uBAAuB,EACvB,4BAA4B,EAC5B,sBAAsB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,6BAA6B,EAC7B,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EACpB,KAAK,wBAAwB,EAC7B,KAAK,0BAA0B,EAC/B,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAC5B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,gCAAgC,EACrC,KAAK,mCAAmC,EACxC,KAAK,6BAA6B,EAClC,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,0BAA0B,EAC/B,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,MAAM,YAAY,CAAC"}

package/dist/voice-twin/index.js

@@ -0,0 +1,14 @@
+// Public barrel for the Voice Digital Twin evaluation suite (Epic #491, Issue #505 — the capstone;
+// ADR-0068). Exposes the deterministic observation derivation, the eleven-dimension scorer, the suite
+// runner, the scorecard renderer, the privacy / metric / profile / capability helpers, the fixture
+// registry, and the result / fixture types. Re-exported from the package barrel as the `VoiceTwinEval`
+// namespace, and proven by suite.test.ts.
+export { deriveVoiceTwinObservation, runVoiceTwinEvaluation } from "./runner.js";
+export { scoreVoiceTwinQuality, aggregateVoiceTwinQuality } from "./scorer.js";
+export { renderVoiceTwinSummary } from "./render.js";
+export { ALL_VOICE_PROFILES, VOICE_ENVIRONMENT_DESCRIPTORS, effectiveVoiceProfile, egressDestinationClassFor, localProfilesMatchContract, } from "./profiles.js";
+export { deriveCapabilityCell } from "./capability.js";
+export { ALLOWED_MEDIA_RUNTIME, DENIED_MEDIA_PACKAGES, auditVoiceEgress, scanManifestsForDeniedMediaPackages, } from "./privacy.js";
+export { VOICE_TWIN_REPLAY_CAPACITY, deriveBufferBoundednessMetric, deriveEndOfTurnMetric, deriveInterruptionMetric, deriveLatencyClassMetric, deriveProviderFailureRecoveryMetric, deriveTranscriptCorrectionMetric, } from "./metrics.js";
+export { ALL_VOICE_TWIN_FIXTURES, voiceTwinFixturesForCategory, voiceTwinFixtureByName, } from "./fixtures/index.js";
+export { VOICE_TWIN_EVAL_SCHEMA_VERSION, VOICE_TWIN_DIMENSIONS, VOICE_TWIN_FIXTURE_CATEGORIES, VOICE_ENVIRONMENT_PROFILES, } from "./types.js";

package/dist/voice-twin/metrics.d.ts

@@ -0,0 +1,10 @@
+import { type VoiceControlMessageKind, type VoiceProfile } from "@oscharko-dev/keiko-contracts";
+import type { BufferBoundednessMetricRecord, EndOfTurnMetricRecord, InterruptionMetricRecord, LatencyClassMetricRecord, ProviderFailureRecoveryMetricRecord, TranscriptCorrectionMetricRecord } from "./types.js";
+export declare const VOICE_TWIN_REPLAY_CAPACITY: 200;
+export declare function deriveInterruptionMetric(profile: VoiceProfile): InterruptionMetricRecord;
+export declare function deriveEndOfTurnMetric(profile: VoiceProfile): EndOfTurnMetricRecord;
+export declare function deriveTranscriptCorrectionMetric(): TranscriptCorrectionMetricRecord;
+export declare function deriveProviderFailureRecoveryMetric(): ProviderFailureRecoveryMetricRecord;
+export declare function deriveBufferBoundednessMetric(kinds: readonly VoiceControlMessageKind[], capacity?: number): BufferBoundednessMetricRecord;
+export declare function deriveLatencyClassMetric(profile: VoiceProfile): LatencyClassMetricRecord;
+//# sourceMappingURL=metrics.d.ts.map

package/dist/voice-twin/metrics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"metrics.d.ts","sourceRoot":"","sources":["../../src/voice-twin/metrics.ts"],"names":[],"mappings":"AAUA,OAAO,EAaL,KAAK,uBAAuB,EAE5B,KAAK,YAAY,EAGlB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EACV,6BAA6B,EAC7B,qBAAqB,EACrB,wBAAwB,EACxB,wBAAwB,EACxB,mCAAmC,EACnC,gCAAgC,EACjC,MAAM,YAAY,CAAC;AAMpB,eAAO,MAAM,0BAA0B,EAAG,GAAY,CAAC;AA0BvD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,YAAY,GAAG,wBAAwB,CAKxF;AAGD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,YAAY,GAAG,qBAAqB,CAkBlF;AAGD,wBAAgB,gCAAgC,IAAI,gCAAgC,CAiBnF;AAGD,wBAAgB,mCAAmC,IAAI,mCAAmC,CAYzF;AAOD,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,SAAS,uBAAuB,EAAE,EACzC,QAAQ,GAAE,MAAmC,GAC5C,6BAA6B,CA2B/B;AAkBD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,YAAY,GAAG,wBAAwB,CAQxF"}