@petepetrash/circuit 0.1.0

package/dist/policy/flow-kind-policy.js

@@ -0,0 +1,41 @@
+import { CompiledFlow } from '../schemas/compiled-flow.js';
+import { checkCompiledFlowKindCanonicalPolicyWithTable, } from './flow-kind-policy-core.js';
+function humanizeZodIssueMessage(message) {
+    return message
+        .replace(/, received undefined/g, ' (missing)')
+        .replace(/\breceived undefined\b/g, 'missing');
+}
+/**
+ * Validates that an unknown input is a valid CompiledFlow (Zod safeParse)
+ * AND that its declared flow kind satisfies the canonical stage-set policy.
+ *
+ * Returns ok:false with a human-readable reason string. Callers decide whether
+ * to throw or surface the reason directly.
+ */
+export function validateCompiledFlowKindPolicyWithTable(flow, table) {
+    const parsed = CompiledFlow.safeParse(flow);
+    if (!parsed.success) {
+        const issueSummary = parsed.error.issues
+            .slice(0, 5)
+            .map((i) => `  ${i.path.join('.') || '<root>'}: ${humanizeZodIssueMessage(i.message)}`)
+            .join('\n');
+        const more = parsed.error.issues.length > 5 ? `\n  ... +${parsed.error.issues.length - 5} more` : '';
+        return {
+            ok: false,
+            reason: `CompiledFlow.safeParse failed:\n${issueSummary}${more}`,
+        };
+    }
+    const policyResult = checkCompiledFlowKindCanonicalPolicyWithTable(parsed.data, table);
+    if (policyResult.kind === 'red') {
+        return {
+            ok: false,
+            reason: `flow-kind canonical policy violation: ${policyResult.detail}`,
+        };
+    }
+    return {
+        ok: true,
+        kind: policyResult.kind,
+        detail: policyResult.detail,
+    };
+}
+//# sourceMappingURL=flow-kind-policy.js.map

package/dist/policy/flow-kind-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flow-kind-policy.js","sourceRoot":"","sources":["../../src/policy/flow-kind-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAGL,6CAA6C,GAC9C,MAAM,4BAA4B,CAAC;AAWpC,SAAS,uBAAuB,CAAC,OAAe;IAC9C,OAAO,OAAO;SACX,OAAO,CAAC,uBAAuB,EAAE,YAAY,CAAC;SAC9C,OAAO,CAAC,yBAAyB,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,uCAAuC,CACrD,IAAa,EACb,KAAkC;IAElC,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM;aACrC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,uBAAuB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;aACtF,IAAI,CAAC,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GACR,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,mCAAmC,YAAY,GAAG,IAAI,EAAE;SACjE,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,6CAA6C,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvF,IAAI,YAAY,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QAChC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,yCAAyC,YAAY,CAAC,MAAM,EAAE;SACvE,CAAC;IACJ,CAAC;IACD,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,MAAM,EAAE,YAAY,CAAC,MAAM;KAC5B,CAAC;AACJ,CAAC"}

package/dist/policy/policy-envelope.d.ts

@@ -0,0 +1,28 @@
+import type { Config } from '../schemas/config.js';
+import type { LayeredConfig as LayeredConfigValue } from '../schemas/config.js';
+import { type CustomConnectorDescriptor } from '../schemas/connector.js';
+import { ComposedPolicyHardConstraints, type PolicyEnvelopeProjectionV0 as PolicyEnvelopeProjectionValue, type PolicyEnvelopeV2 as PolicyEnvelopeValue, type PolicyLayerSource, type PolicyLayer as PolicyLayerValue } from '../schemas/policy-envelope.js';
+import type { Ref } from '../schemas/ref.js';
+export { PolicyEnvelopeProjectionV0, PolicyEnvelopeV2 } from '../schemas/policy-envelope.js';
+export declare class PolicyEnvelopeCompositionError extends Error {
+    constructor(message: string);
+}
+interface ProjectConfigV1Input {
+    readonly config: Config;
+    readonly source: PolicyLayerSource;
+}
+export declare const RUNTIME_CONFIG_V1_POLICY_REF: Ref;
+export declare const RUNTIME_POLICY_V2_REF: Ref;
+export declare function trustedPolicyConnectorRegistryFromLayers(layers: readonly PolicyLayerValue[] | undefined): {
+    readonly registry: Record<string, CustomConnectorDescriptor>;
+    readonly projectDeclaredNames: ReadonlySet<string>;
+};
+export declare function composePolicyHardConstraints(envelopes: readonly PolicyEnvelopeValue[]): ComposedPolicyHardConstraints;
+export declare function projectConfigV1ToPolicyEnvelopeV2(input: ProjectConfigV1Input): PolicyEnvelopeProjectionValue;
+export declare function policyRefsForConfigLayers(layers: readonly LayeredConfigValue[] | undefined): readonly Ref[];
+export declare function policyRefsForPolicyLayers(layers: readonly PolicyLayerValue[] | undefined): readonly Ref[];
+export declare function policyRefsForRuntimeInputs(input: {
+    readonly configLayers?: readonly LayeredConfigValue[];
+    readonly policyLayers?: readonly PolicyLayerValue[];
+}): readonly Ref[];
+//# sourceMappingURL=policy-envelope.d.ts.map

package/dist/policy/policy-envelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-envelope.d.ts","sourceRoot":"","sources":["../../src/policy/policy-envelope.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAsB,MAAM,sBAAsB,CAAC;AACvE,OAAO,KAAK,EAAE,aAAa,IAAI,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAChF,OAAO,EAAE,KAAK,yBAAyB,EAAoB,MAAM,yBAAyB,CAAC;AAE3F,OAAO,EACL,6BAA6B,EAG7B,KAAK,0BAA0B,IAAI,6BAA6B,EAEhE,KAAK,gBAAgB,IAAI,mBAAmB,EAC5C,KAAK,iBAAiB,EACtB,KAAK,WAAW,IAAI,gBAAgB,EAGrC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,mBAAmB,CAAC;AAG7C,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAE7F,qBAAa,8BAA+B,SAAQ,KAAK;gBAC3C,OAAO,EAAE,MAAM;CAI5B;AAED,UAAU,oBAAoB;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED,eAAO,MAAM,4BAA4B,EAAE,GAG1C,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAE,GAGnC,CAAC;AAmGF,wBAAgB,wCAAwC,CACtD,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,GAC9C;IACD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;IAC7D,QAAQ,CAAC,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;CACpD,CAiBA;AAED,wBAAgB,4BAA4B,CAC1C,SAAS,EAAE,SAAS,mBAAmB,EAAE,GACxC,6BAA6B,CA0E/B;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,oBAAoB,GAC1B,6BAA6B,CAgG/B;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,GAChD,SAAS,GAAG,EAAE,CAwBhB;AAED,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,SAAS,gBAAgB,EAAE,GAAG,SAAS,GAC9C,SAAS,GAAG,EAAE,CAUhB;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE;IAChD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACrD,GAAG,SAAS,GAAG,EAAE,CASjB"}

package/dist/policy/policy-envelope.js

@@ -0,0 +1,317 @@
+import { EnabledConnector } from '../schemas/connector.js';
+import { sha256OfJson } from '../schemas/hashing.js';
+import { ComposedPolicyHardConstraints, PolicyEnvelopeProjectionV0, PolicyEnvelopeV2, } from '../schemas/policy-envelope.js';
+export { PolicyEnvelopeProjectionV0, PolicyEnvelopeV2 } from '../schemas/policy-envelope.js';
+export class PolicyEnvelopeCompositionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PolicyEnvelopeCompositionError';
+    }
+}
+export const RUNTIME_CONFIG_V1_POLICY_REF = {
+    kind: 'policy',
+    ref: 'policy.runtime.config_v1',
+};
+export const RUNTIME_POLICY_V2_REF = {
+    kind: 'policy',
+    ref: 'policy.runtime.policy_v2',
+};
+const EFFORT_ORDER = [
+    'none',
+    'minimal',
+    'low',
+    'medium',
+    'high',
+    'xhigh',
+    'max',
+];
+function uniqueSorted(values) {
+    return [...new Set(values)].sort((a, b) => a.localeCompare(b));
+}
+function unionInto(target, values) {
+    for (const value of values)
+        target.add(value);
+}
+function intersectConnectorAllow(current, next) {
+    if (next === undefined)
+        return current;
+    const nextSet = new Set(next);
+    if (current === undefined)
+        return nextSet;
+    return new Set([...current].filter((value) => nextSet.has(value)));
+}
+function minNumber(current, next) {
+    if (next === undefined)
+        return current;
+    return current === undefined ? next : Math.min(current, next);
+}
+function minEffort(current, next) {
+    if (next === undefined)
+        return current;
+    if (current === undefined)
+        return next;
+    return EFFORT_ORDER.indexOf(next) < EFFORT_ORDER.indexOf(current) ? next : current;
+}
+function composeAutoApply(current, next) {
+    if (next === undefined)
+        return current;
+    if (next === false || current === false)
+        return false;
+    return true;
+}
+function connectorRefFromDefault(value) {
+    if (value === 'auto')
+        return 'auto';
+    if (EnabledConnector.options.includes(value)) {
+        return { kind: 'builtin', name: value };
+    }
+    return { kind: 'named', name: value };
+}
+function connectorRefFromConfig(ref) {
+    return ref;
+}
+function rejectOldAuthority(path, field, reason) {
+    return { path, field, reason };
+}
+function sha256Json(value) {
+    return sha256OfJson(value);
+}
+function policyLayerSourceForConfigLayer(layer) {
+    if (layer === 'default')
+        return 'built-in';
+    return layer;
+}
+// SECURITY BOUNDARY (twin of C1 in src/connectors/resolver.ts). The
+// PolicyEnvelope schema carries the same custom connector registry the legacy
+// relay schema does, only reached through a different resolution path. Each
+// `policy.rules.connectors.registry` entry is a custom descriptor whose
+// arbitrary `command` the engine spawns with the full inherited environment. A
+// project's committed `.circuit/config.yaml` is untrusted input — cloning a
+// repository and running any flow (even a read-only review) must never let the
+// repository author's config execute a command on the operator's machine. So a
+// custom command connector is honored only from a policy layer the operator
+// controls on their own machine (their user-global config) or supplies at
+// invocation, never from a project-origin layer.
+//
+// Built-in connector names are reserved out of the registry by the schema, so
+// this partition only ever governs arbitrary-command descriptors; built-ins
+// resolve through their own path and stay selectable from any origin.
+//
+// This mirrors `customConnectorRegistryFromLayers` in the connectors module for
+// policy layers. The two enforce the same rule but consume different layer
+// shapes (`LayeredConfig` vs `PolicyLayer`), so the partition is expressed twice
+// rather than behind one generic helper that would obscure both security-
+// critical call sites. Later trusted layers override earlier ones, matching the
+// config-layer merge order.
+export function trustedPolicyConnectorRegistryFromLayers(layers) {
+    const registry = {};
+    const projectDeclaredNames = new Set();
+    for (const layer of layers ?? []) {
+        const layerRegistry = layer.envelope.policy.rules.connectors.registry;
+        if (layer.source === 'project') {
+            // Record the names a project layer tried to register (so a selection that
+            // points at one can raise a clear security refusal instead of a
+            // misleading "not declared" error) but never adopt the command.
+            for (const name of Object.keys(layerRegistry)) {
+                projectDeclaredNames.add(name);
+            }
+            continue;
+        }
+        Object.assign(registry, layerRegistry);
+    }
+    return { registry, projectDeclaredNames };
+}
+export function composePolicyHardConstraints(envelopes) {
+    let allow;
+    const deny = new Set();
+    const denyForWrite = new Set();
+    const denyProviders = new Set();
+    const requireProviderForConnector = {};
+    let autoApply;
+    const checkpointGlobs = new Set();
+    const deniedSkills = new Set();
+    const independentReviewFor = new Set();
+    let maxAttempts;
+    let maxWallClockMs;
+    let maxEffortCap;
+    let maxTournamentN;
+    for (const envelope of envelopes) {
+        const parsed = PolicyEnvelopeV2.parse(envelope);
+        const { rules, limits } = parsed.policy;
+        allow = intersectConnectorAllow(allow, rules.connectors.allow);
+        unionInto(deny, rules.connectors.deny);
+        unionInto(denyForWrite, rules.connectors.deny_for_write);
+        unionInto(denyProviders, rules.models.deny_providers);
+        for (const [connector, provider] of Object.entries(rules.models.require_provider_for_connector)) {
+            const previous = requireProviderForConnector[connector];
+            if (previous !== undefined && previous !== provider) {
+                throw new PolicyEnvelopeCompositionError(`conflicting provider requirements for connector '${connector}': '${previous}' and '${provider}'`);
+            }
+            requireProviderForConnector[connector] = provider;
+        }
+        autoApply = composeAutoApply(autoApply, rules.writes.auto_apply);
+        unionInto(checkpointGlobs, rules.writes.require_checkpoint_globs);
+        unionInto(deniedSkills, rules.skills.deny);
+        unionInto(independentReviewFor, rules.proof.require_independent_review_for);
+        maxAttempts = minNumber(maxAttempts, limits.max_attempts_per_step);
+        maxWallClockMs = minNumber(maxWallClockMs, limits.max_wall_clock_ms);
+        maxEffortCap = minEffort(maxEffortCap, limits.max_effort);
+        maxTournamentN = minNumber(maxTournamentN, limits.max_tournament_n);
+    }
+    return ComposedPolicyHardConstraints.parse({
+        connectors: {
+            ...(allow !== undefined ? { allow: uniqueSorted(allow) } : {}),
+            deny: uniqueSorted(deny),
+            deny_for_write: uniqueSorted(denyForWrite),
+        },
+        models: {
+            deny_providers: uniqueSorted(denyProviders),
+            require_provider_for_connector: Object.fromEntries(Object.entries(requireProviderForConnector).sort(([a], [b]) => a.localeCompare(b))),
+        },
+        writes: {
+            ...(autoApply !== undefined ? { auto_apply: autoApply } : {}),
+            require_checkpoint_globs: uniqueSorted(checkpointGlobs),
+        },
+        skills: {
+            deny: uniqueSorted(deniedSkills),
+        },
+        proof: {
+            require_independent_review_for: uniqueSorted(independentReviewFor),
+        },
+        limits: {
+            ...(maxAttempts !== undefined ? { max_attempts_per_step: maxAttempts } : {}),
+            ...(maxWallClockMs !== undefined ? { max_wall_clock_ms: maxWallClockMs } : {}),
+            ...(maxEffortCap !== undefined ? { max_effort: maxEffortCap } : {}),
+            ...(maxTournamentN !== undefined ? { max_tournament_n: maxTournamentN } : {}),
+        },
+    });
+}
+export function projectConfigV1ToPolicyEnvelopeV2(input) {
+    const { config, source } = input;
+    const rejectedOldAuthority = [];
+    const flowConnectorHints = Object.entries(config.relay.flows).map(([flowId, ref]) => {
+        rejectedOldAuthority.push(rejectOldAuthority(`relay.flows.${flowId}`, 'relay.flows', 'flow-id connector routing is old authority; migrate it only as a guidance preference'));
+        return {
+            flow_id: flowId,
+            prefer_connector: connectorRefFromConfig(ref),
+        };
+    });
+    const flowSelectionHints = [];
+    const flowSlotBindings = [];
+    const variantModelHints = [];
+    for (const [flowId, override] of Object.entries(config.flows)) {
+        if (override.selection !== undefined) {
+            flowSelectionHints.push({
+                flow_id: flowId,
+                selection: override.selection,
+            });
+        }
+        if (Object.keys(override.skill_bindings).length > 0) {
+            flowSlotBindings.push({
+                flow_id: flowId,
+                bindings: override.skill_bindings,
+            });
+        }
+        if (override.variant_models !== undefined) {
+            rejectedOldAuthority.push(rejectOldAuthority(`flows.${flowId}.variant_models`, `flows.${flowId}.variant_models`, 'variant model matrices are branch-choice inputs only; they cannot directly choose relay execution'));
+            for (const variant of override.variant_models) {
+                variantModelHints.push({
+                    flow_id: flowId,
+                    id: variant.id,
+                    label: variant.label,
+                    ...(variant.connector !== undefined
+                        ? { connector: connectorRefFromConfig(variant.connector) }
+                        : {}),
+                    selection: variant.selection,
+                });
+            }
+        }
+    }
+    return PolicyEnvelopeProjectionV0.parse({
+        schema_version: 0,
+        source,
+        policy_envelope: {
+            schema_version: 2,
+            policy: {
+                rules: {
+                    connectors: {
+                        registry: config.relay.connectors,
+                    },
+                },
+                preferences: {
+                    relay: {
+                        roles: Object.fromEntries(Object.entries(config.relay.roles)
+                            .filter((entry) => entry[1] !== undefined)
+                            .map(([role, ref]) => [role, { prefer_connector: connectorRefFromConfig(ref) }])),
+                        flow_connector_hints: flowConnectorHints,
+                    },
+                    selection: {
+                        flow_hints: flowSelectionHints,
+                    },
+                    skills: {
+                        slot_bindings: config.skills.bindings,
+                        flow_slot_bindings: flowSlotBindings,
+                    },
+                    prototype: {
+                        variant_model_hints: variantModelHints,
+                    },
+                },
+                defaults: {
+                    connector: connectorRefFromDefault(config.relay.default),
+                    ...(config.defaults.selection !== undefined
+                        ? { selection: config.defaults.selection }
+                        : {}),
+                },
+            },
+        },
+        rejected_old_authority: rejectedOldAuthority,
+    });
+}
+export function policyRefsForConfigLayers(layers) {
+    const refs = [RUNTIME_CONFIG_V1_POLICY_REF];
+    for (const [index, layer] of (layers ?? []).entries()) {
+        const ref = layer.source_path ?? `policy.config_v1.${layer.layer}.${index}`;
+        let sha256;
+        try {
+            const projection = projectConfigV1ToPolicyEnvelopeV2({
+                config: layer.config,
+                source: policyLayerSourceForConfigLayer(layer.layer),
+            });
+            sha256 = sha256Json(projection.policy_envelope);
+        }
+        catch {
+            // Runtime guidance is provenance-only in the v1 transition. A valid v1
+            // config must not start failing just because its migration projection is
+            // stricter than current runtime behavior.
+            sha256 = sha256Json({ schema_version: 1, config: layer.config });
+        }
+        refs.push({
+            kind: 'policy',
+            ref,
+            sha256,
+        });
+    }
+    return refs;
+}
+export function policyRefsForPolicyLayers(layers) {
+    const refs = [];
+    for (const [index, layer] of (layers ?? []).entries()) {
+        refs.push({
+            kind: 'policy',
+            ref: layer.source_path ?? `policy.policy_v2.${layer.source}.${index}`,
+            sha256: sha256Json(layer.envelope),
+        });
+    }
+    return refs;
+}
+export function policyRefsForRuntimeInputs(input) {
+    const refs = [];
+    if ((input.configLayers?.length ?? 0) > 0 || (input.policyLayers?.length ?? 0) === 0) {
+        refs.push(...policyRefsForConfigLayers(input.configLayers));
+    }
+    if ((input.policyLayers?.length ?? 0) > 0) {
+        refs.push(RUNTIME_POLICY_V2_REF, ...policyRefsForPolicyLayers(input.policyLayers));
+    }
+    return refs;
+}
+//# sourceMappingURL=policy-envelope.js.map

package/dist/policy/policy-envelope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-envelope.js","sourceRoot":"","sources":["../../src/policy/policy-envelope.ts"],"names":[],"mappings":"AAEA,OAAO,EAAkC,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,EACL,6BAA6B,EAE7B,0BAA0B,EAE1B,gBAAgB,GAMjB,MAAM,+BAA+B,CAAC;AAIvC,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAE7F,MAAM,OAAO,8BAA+B,SAAQ,KAAK;IACvD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gCAAgC,CAAC;IAC/C,CAAC;CACF;AAOD,MAAM,CAAC,MAAM,4BAA4B,GAAQ;IAC/C,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,0BAA0B;CAChC,CAAC;AAEF,MAAM,CAAC,MAAM,qBAAqB,GAAQ;IACxC,IAAI,EAAE,QAAQ;IACd,GAAG,EAAE,0BAA0B;CAChC,CAAC;AAEF,MAAM,YAAY,GAAsB;IACtC,MAAM;IACN,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,KAAK;CACN,CAAC;AAEF,SAAS,YAAY,CAAmB,MAAmB;IACzD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,SAAS,SAAS,CAAmB,MAAc,EAAE,MAAoB;IACvE,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAgC,EAChC,IAAmC;IAEnC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACvC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAC1C,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,OAA2B,EAAE,IAAwB;IACtE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACvC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,SAAS,CAAC,OAA2B,EAAE,IAAwB;IACtE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvC,OAAO,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;AACrF,CAAC;AAED,SAAS,gBAAgB,CACvB,OAA4B,EAC5B,IAAyB;IAEzB,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IACvC,IAAI,IAAI,KAAK,KAAK,IAAI,OAAO,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACtD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAiC;IAEjC,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IACpC,IAAI,gBAAgB,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAc,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAkD,EAAE,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,sBAAsB,CAAC,GAAuB;IACrD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAa,EAAE,MAAc;IACrE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,SAAS,+BAA+B,CAAC,KAAkC;IACzE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC3C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,8EAA8E;AAC9E,4EAA4E;AAC5E,wEAAwE;AACxE,+EAA+E;AAC/E,4EAA4E;AAC5E,+EAA+E;AAC/E,+EAA+E;AAC/E,4EAA4E;AAC5E,0EAA0E;AAC1E,iDAAiD;AACjD,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,sEAAsE;AACtE,EAAE;AACF,gFAAgF;AAChF,2EAA2E;AAC3E,iFAAiF;AACjF,0EAA0E;AAC1E,gFAAgF;AAChF,4BAA4B;AAC5B,MAAM,UAAU,wCAAwC,CACtD,MAA+C;IAK/C,MAAM,QAAQ,GAA8C,EAAE,CAAC;IAC/D,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QACjC,MAAM,aAAa,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,CAAC;QACtE,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAC/B,0EAA0E;YAC1E,gEAAgE;YAChE,gEAAgE;YAChE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC9C,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,oBAAoB,EAAE,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,SAAyC;IAEzC,IAAI,KAA8B,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,aAAa,GAAG,IAAI,GAAG,EAAY,CAAC;IAC1C,MAAM,2BAA2B,GAA6B,EAAE,CAAC;IACjE,IAAI,SAA8B,CAAC;IACnC,MAAM,eAAe,GAAG,IAAI,GAAG,EAAU,CAAC;IAC1C,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IACvC,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/C,IAAI,WAA+B,CAAC;IACpC,IAAI,cAAkC,CAAC;IACvC,IAAI,YAAgC,CAAC;IACrC,IAAI,cAAkC,CAAC;IAEvC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAChD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC;QAExC,KAAK,GAAG,uBAAuB,CAAC,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QAC/D,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;QACzD,SAAS,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAChD,KAAK,CAAC,MAAM,CAAC,8BAA8B,CAC5C,EAAE,CAAC;YACF,MAAM,QAAQ,GAAG,2BAA2B,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBACpD,MAAM,IAAI,8BAA8B,CACtC,oDAAoD,SAAS,OAAO,QAAQ,UAAU,QAAQ,GAAG,CAClG,CAAC;YACJ,CAAC;YACD,2BAA2B,CAAC,SAAS,CAAC,GAAG,QAAQ,CAAC;QACpD,CAAC;QACD,SAAS,GAAG,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACjE,SAAS,CAAC,eAAe,EAAE,KAAK,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAClE,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3C,SAAS,CAAC,oBAAoB,EAAE,KAAK,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC;QAE5E,WAAW,GAAG,SAAS,CAAC,WAAW,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;QACnE,cAAc,GAAG,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC;QACrE,YAAY,GAAG,SAAS,CAAC,YAAY,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC1D,cAAc,GAAG,SAAS,CAAC,cAAc,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC;IACtE,CAAC;IAED,OAAO,6BAA6B,CAAC,KAAK,CAAC;QACzC,UAAU,EAAE;YACV,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9D,IAAI,EAAE,YAAY,CAAC,IAAI,CAAC;YACxB,cAAc,EAAE,YAAY,CAAC,YAAY,CAAC;SAC3C;QACD,MAAM,EAAE;YACN,cAAc,EAAE,YAAY,CAAC,aAAa,CAAC;YAC3C,8BAA8B,EAAE,MAAM,CAAC,WAAW,CAChD,MAAM,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CACnF;SACF;QACD,MAAM,EAAE;YACN,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,wBAAwB,EAAE,YAAY,CAAC,eAAe,CAAC;SACxD;QACD,MAAM,EAAE;YACN,IAAI,EAAE,YAAY,CAAC,YAAY,CAAC;SACjC;QACD,KAAK,EAAE;YACL,8BAA8B,EAAE,YAAY,CAAC,oBAAoB,CAAC;SACnE;QACD,MAAM,EAAE;YACN,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9E;KACF,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,KAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,oBAAoB,GAA8B,EAAE,CAAC;IAC3D,MAAM,kBAAkB,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE;QAClF,oBAAoB,CAAC,IAAI,CACvB,kBAAkB,CAChB,eAAe,MAAM,EAAE,EACvB,aAAa,EACb,sFAAsF,CACvF,CACF,CAAC;QACF,OAAO;YACL,OAAO,EAAE,MAAM;YACf,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,CAAC;SAC9C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,kBAAkB,GAAG,EAAE,CAAC;IAC9B,MAAM,gBAAgB,GAAG,EAAE,CAAC;IAC5B,MAAM,iBAAiB,GAAG,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9D,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACrC,kBAAkB,CAAC,IAAI,CAAC;gBACtB,OAAO,EAAE,MAAM;gBACf,SAAS,EAAE,QAAQ,CAAC,SAAS;aAC9B,CAAC,CAAC;QACL,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpD,gBAAgB,CAAC,IAAI,CAAC;gBACpB,OAAO,EAAE,MAAM;gBACf,QAAQ,EAAE,QAAQ,CAAC,cAAc;aAClC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,QAAQ,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAC1C,oBAAoB,CAAC,IAAI,CACvB,kBAAkB,CAChB,SAAS,MAAM,iBAAiB,EAChC,SAAS,MAAM,iBAAiB,EAChC,mGAAmG,CACpG,CACF,CAAC;YACF,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,CAAC;gBAC9C,iBAAiB,CAAC,IAAI,CAAC;oBACrB,OAAO,EAAE,MAAM;oBACf,EAAE,EAAE,OAAO,CAAC,EAAE;oBACd,KAAK,EAAE,OAAO,CAAC,KAAK;oBACpB,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;wBACjC,CAAC,CAAC,EAAE,SAAS,EAAE,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;wBAC1D,CAAC,CAAC,EAAE,CAAC;oBACP,SAAS,EAAE,OAAO,CAAC,SAAS;iBAC7B,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,0BAA0B,CAAC,KAAK,CAAC;QACtC,cAAc,EAAE,CAAC;QACjB,MAAM;QACN,eAAe,EAAE;YACf,cAAc,EAAE,CAAC;YACjB,MAAM,EAAE;gBACN,KAAK,EAAE;oBACL,UAAU,EAAE;wBACV,QAAQ,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU;qBAClC;iBACF;gBACD,WAAW,EAAE;oBACX,KAAK,EAAE;wBACL,KAAK,EAAE,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;6BAC/B,MAAM,CAAC,CAAC,KAAK,EAAyC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;6BAChF,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,gBAAgB,EAAE,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CACnF;wBACD,oBAAoB,EAAE,kBAAkB;qBACzC;oBACD,SAAS,EAAE;wBACT,UAAU,EAAE,kBAAkB;qBAC/B;oBACD,MAAM,EAAE;wBACN,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;wBACrC,kBAAkB,EAAE,gBAAgB;qBACrC;oBACD,SAAS,EAAE;wBACT,mBAAmB,EAAE,iBAAiB;qBACvC;iBACF;gBACD,QAAQ,EAAE;oBACR,SAAS,EAAE,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC;oBACxD,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,KAAK,SAAS;wBACzC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,SAAS,EAAE;wBAC1C,CAAC,CAAC,EAAE,CAAC;iBACR;aACF;SACF;QACD,sBAAsB,EAAE,oBAAoB;KAC7C,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAAiD;IAEjD,MAAM,IAAI,GAAU,CAAC,4BAA4B,CAAC,CAAC;IACnD,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,KAAK,CAAC,WAAW,IAAI,oBAAoB,KAAK,CAAC,KAAK,IAAI,KAAK,EAAE,CAAC;QAC5E,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,iCAAiC,CAAC;gBACnD,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,MAAM,EAAE,+BAA+B,CAAC,KAAK,CAAC,KAAK,CAAC;aACrD,CAAC,CAAC;YACH,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAClD,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;YACvE,yEAAyE;YACzE,0CAA0C;YAC1C,MAAM,GAAG,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,QAAQ;YACd,GAAG;YACH,MAAM;SACP,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,MAA+C;IAE/C,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,QAAQ;YACd,GAAG,EAAE,KAAK,CAAC,WAAW,IAAI,oBAAoB,KAAK,CAAC,MAAM,IAAI,KAAK,EAAE;YACrE,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;SACnC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAG1C;IACC,MAAM,IAAI,GAAU,EAAE,CAAC;IACvB,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC,GAAG,yBAAyB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,qBAAqB,EAAE,GAAG,yBAAyB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/policy/recovery-route-policy.d.ts

@@ -0,0 +1,165 @@
+import { type RecoveryAttemptBudget, type RecoveryFailureCause, type RecoveryOperatorAuthority, type RecoveryRequiredRefKind, type RecoveryRouteKind } from '../schemas/recovery-route-kind.js';
+export declare const NORMAL_ROUTE_IDS: Set<string>;
+export declare const RECOVERY_ROUTE_PROJECTION_POLICY: {
+    retry_same_step_with_feedback: {
+        selectors: {
+            routeId: string;
+            target: "same_step";
+        }[];
+        contract: {
+            allowedFailureCauses: ("failed_check" | "failed_acceptance_criteria" | "relay_result_invalid")[];
+            defaultRequiredRefs: ("failed_check" | "acceptance_feedback" | "budget_state")[];
+            rejectsUnknownFailure: true;
+        };
+        operatorAuthority: "not_required";
+        attemptBudget: {
+            consumesStepAttempt: true;
+            retryTarget: "same_step";
+        };
+    };
+    narrow_scope: {
+        selectors: ({
+            routeId: string;
+            target?: never;
+        } | {
+            routeId: string;
+            target: "different_step";
+        })[];
+        contract: {
+            allowedFailureCauses: ("weak_proof" | "failed_check" | "unproved_claim" | "scope_drift")[];
+            defaultRequiredRefs: ("proof_assessment" | "runtime_diff")[];
+        };
+        operatorAuthority: "not_required";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+    run_verification: {
+        selectors: never[];
+        contract: {
+            allowedFailureCauses: ("weak_proof" | "generated_surface_drift" | "failed_check" | "unproved_claim")[];
+            defaultRequiredRefs: ("proof_assessment" | "generated_surface_evidence")[];
+            rejectsUnknownFailure: true;
+        };
+        operatorAuthority: "not_required";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+    run_independent_review: {
+        selectors: {
+            routeId: string;
+        }[];
+        contract: {
+            allowedFailureCauses: ("weak_proof" | "contradicted_evidence" | "scope_drift")[];
+            defaultRequiredRefs: ("report" | "proof_assessment")[];
+            rejectsUnknownFailure: true;
+        };
+        operatorAuthority: "not_required";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+    checkpoint_authority: {
+        selectors: {
+            routeId: string;
+        }[];
+        contract: {
+            allowedFailureCauses: ("budget_exceeded" | "protected_file_touched" | "checkpoint_boundary" | "unknown_failure")[];
+            defaultRequiredRefs: ("runtime_diff" | "checkpoint_request" | "budget_state")[];
+            causeRequiredRefs: {
+                protected_file_touched: {
+                    anyOf: ("change_packet" | "runtime_diff")[];
+                    message: string;
+                };
+            };
+        };
+        operatorAuthority: "required_before_route";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+    safe_apply_reject: {
+        selectors: never[];
+        contract: {
+            allowedFailureCauses: ("base_mismatch" | "apply_conflict" | "protected_file_touched" | "generated_surface_drift")[];
+            defaultRequiredRefs: ("runtime_diff" | "safe_apply_result" | "generated_surface_evidence")[];
+            requiredRefs: {
+                anyOf: ("change_packet" | "runtime_diff" | "safe_apply_result")[];
+                message: string;
+            };
+            causeRequiredRefs: {
+                protected_file_touched: {
+                    anyOf: ("change_packet" | "runtime_diff")[];
+                    message: string;
+                };
+            };
+        };
+        operatorAuthority: "not_required";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+    stop_unsafe: {
+        selectors: {
+            routeId: string;
+        }[];
+        contract: {
+            allowedFailureCauses: ("budget_exceeded" | "failed_check" | "contradicted_evidence" | "scope_drift" | "unknown_failure")[];
+            defaultRequiredRefs: ("trace" | "failed_check")[];
+        };
+        operatorAuthority: "not_required";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+    escalate: {
+        selectors: {
+            routeId: string;
+        }[];
+        contract: {
+            allowedFailureCauses: ("budget_exceeded" | "relay_connector_failed" | "unknown_failure")[];
+            defaultRequiredRefs: ("relay_result" | "trace")[];
+        };
+        operatorAuthority: "not_required";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+    handoff: {
+        selectors: {
+            routeId: string;
+        }[];
+        contract: {
+            allowedFailureCauses: ("budget_exceeded" | "checkpoint_boundary" | "unknown_failure")[];
+            defaultRequiredRefs: ("report" | "trace")[];
+        };
+        operatorAuthority: "required_to_continue_after_route";
+        attemptBudget: {
+            consumesStepAttempt: false;
+            retryTarget: "declared_step";
+        };
+    };
+};
+export declare function recoveryKindForRoute(input: {
+    readonly routeId: string;
+    readonly routeTarget: string;
+    readonly stepId: string;
+}): RecoveryRouteKind | undefined;
+export declare function isGenericallyLegitRoute(input: {
+    readonly routeId: string;
+    readonly routeTarget: string;
+    readonly stepId: string;
+}): boolean;
+export declare function recoveryAllowedFailureCausesForKind(kind: RecoveryRouteKind): RecoveryFailureCause[];
+export declare function recoveryRequiredRefsForKind(kind: RecoveryRouteKind): RecoveryRequiredRefKind[];
+export declare function recoveryOperatorAuthorityForKind(kind: RecoveryRouteKind): RecoveryOperatorAuthority;
+export declare function recoveryAttemptBudgetForKind(kind: RecoveryRouteKind): RecoveryAttemptBudget;
+//# sourceMappingURL=recovery-route-policy.d.ts.map

package/dist/policy/recovery-route-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recovery-route-policy.d.ts","sourceRoot":"","sources":["../../src/policy/recovery-route-policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,oBAAoB,EACzB,KAAK,yBAAyB,EAC9B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACvB,MAAM,mCAAmC,CAAC;AAK3C,eAAO,MAAM,gBAAgB,aAAgE,CAAC;AAmB9F,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuDuB,CAAC;AAcrE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,iBAAiB,GAAG,SAAS,CAkBhC;AAWD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAEV;AAED,wBAAgB,mCAAmC,CACjD,IAAI,EAAE,iBAAiB,GACtB,oBAAoB,EAAE,CAExB;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,iBAAiB,GAAG,uBAAuB,EAAE,CAE9F;AAED,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,iBAAiB,GACtB,yBAAyB,CAE3B;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,iBAAiB,GAAG,qBAAqB,CAO3F"}