@piagent/platform 1.6.0 → 1.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (736) hide show
  1. package/CHANGELOG.md +104 -0
  2. package/README.md +24 -15
  3. package/README.vi.md +36 -2
  4. package/adapters/common/assurance-producers.json +109 -0
  5. package/adapters/common/structured-assurance-facts.mjs +153 -0
  6. package/adapters/node-typescript/contract-families.json +2811 -0
  7. package/adapters/node-typescript/contract-families.md +90 -0
  8. package/benchmarks/production-v1/grade.mjs +20 -0
  9. package/benchmarks/production-v1/spend-control.v1.json +27 -3
  10. package/benchmarks/production-v1/suite.json +5 -1
  11. package/benchmarks/production-v2/grade.mjs +892 -0
  12. package/benchmarks/production-v2/project/README.md +7 -0
  13. package/benchmarks/production-v2/project/config/service.json +4 -0
  14. package/benchmarks/production-v2/project/data/audit-ledger.jsonl +1 -0
  15. package/benchmarks/production-v2/project/docs/ops.md +3 -0
  16. package/benchmarks/production-v2/project/logs/incident.log +2 -0
  17. package/benchmarks/production-v2/project/package.json +11 -0
  18. package/benchmarks/production-v2/project/scripts/check.mjs +21 -0
  19. package/benchmarks/production-v2/project/src/backend/auth.js +3 -0
  20. package/benchmarks/production-v2/project/src/backend/billing-window.js +4 -0
  21. package/benchmarks/production-v2/project/src/backend/cache.js +15 -0
  22. package/benchmarks/production-v2/project/src/backend/invoice.js +4 -0
  23. package/benchmarks/production-v2/project/src/backend/revocation-cache.js +3 -0
  24. package/benchmarks/production-v2/project/src/data/csv.js +3 -0
  25. package/benchmarks/production-v2/project/src/data/dedup.js +5 -0
  26. package/benchmarks/production-v2/project/src/data/migration.js +9 -0
  27. package/benchmarks/production-v2/project/src/data/ndjson-stream.js +5 -0
  28. package/benchmarks/production-v2/project/src/data/versioned-replay.js +8 -0
  29. package/benchmarks/production-v2/project/src/frontend/chat-events.js +7 -0
  30. package/benchmarks/production-v2/project/src/frontend/pagination.js +8 -0
  31. package/benchmarks/production-v2/project/src/frontend/request-lifecycle.js +15 -0
  32. package/benchmarks/production-v2/project/src/frontend/search-state.js +8 -0
  33. package/benchmarks/production-v2/project/src/frontend/unicode-search.js +7 -0
  34. package/benchmarks/production-v2/project/src/fullstack/contract-sync.js +10 -0
  35. package/benchmarks/production-v2/project/src/platform/args.js +10 -0
  36. package/benchmarks/production-v2/project/src/platform/config.js +7 -0
  37. package/benchmarks/production-v2/project/src/platform/workflow-session.js +9 -0
  38. package/benchmarks/production-v2/project/src/platform/workspace.js +13 -0
  39. package/benchmarks/production-v2/project/src/reliability/checkpoint.js +5 -0
  40. package/benchmarks/production-v2/project/src/reliability/expiry.js +5 -0
  41. package/benchmarks/production-v2/project/src/reliability/retry.js +15 -0
  42. package/benchmarks/production-v2/project/test/smoke.test.js +21 -0
  43. package/benchmarks/production-v2/project/vendor/README.md +1 -0
  44. package/benchmarks/production-v2/prompts/abort-reconnect-supersession.md +11 -0
  45. package/benchmarks/production-v2/prompts/backend-frontend-contract-sync.md +12 -0
  46. package/benchmarks/production-v2/prompts/billing-cutoff-clock-skew.md +11 -0
  47. package/benchmarks/production-v2/prompts/bounded-retry.md +7 -0
  48. package/benchmarks/production-v2/prompts/chunked-record-boundary.md +9 -0
  49. package/benchmarks/production-v2/prompts/cli-double-dash.md +7 -0
  50. package/benchmarks/production-v2/prompts/config-precedence.md +6 -0
  51. package/benchmarks/production-v2/prompts/destructive-history-refusal.md +3 -0
  52. package/benchmarks/production-v2/prompts/expiry-boundary.md +7 -0
  53. package/benchmarks/production-v2/prompts/idempotent-replay-conflict.md +11 -0
  54. package/benchmarks/production-v2/prompts/incident-diagnosis.md +4 -0
  55. package/benchmarks/production-v2/prompts/invoice-rounding.md +9 -0
  56. package/benchmarks/production-v2/prompts/journeys/config-precedence-scout.md +3 -0
  57. package/benchmarks/production-v2/prompts/journeys/expiry-boundary-scout.md +3 -0
  58. package/benchmarks/production-v2/prompts/journeys/quoted-csv-scout.md +3 -0
  59. package/benchmarks/production-v2/prompts/journeys/recover-after-uncertain-send.md +4 -0
  60. package/benchmarks/production-v2/prompts/journeys/repository-prompt-injection-scout.md +4 -0
  61. package/benchmarks/production-v2/prompts/journeys/resumable-checkpoint-partial-failure-scout.md +4 -0
  62. package/benchmarks/production-v2/prompts/journeys/stable-dedup-scout.md +3 -0
  63. package/benchmarks/production-v2/prompts/journeys/stale-search-response-scout.md +3 -0
  64. package/benchmarks/production-v2/prompts/journeys/tenant-cache-isolation-scout.md +4 -0
  65. package/benchmarks/production-v2/prompts/journeys/verify-current-contract.md +4 -0
  66. package/benchmarks/production-v2/prompts/journeys/workflow-switch-same-session-scout.md +4 -0
  67. package/benchmarks/production-v2/prompts/pagination-boundary.md +7 -0
  68. package/benchmarks/production-v2/prompts/protected-env-refusal.md +2 -0
  69. package/benchmarks/production-v2/prompts/quoted-csv.md +6 -0
  70. package/benchmarks/production-v2/prompts/reconnect-chat-event-order.md +19 -0
  71. package/benchmarks/production-v2/prompts/repository-prompt-injection.md +5 -0
  72. package/benchmarks/production-v2/prompts/resumable-checkpoint-partial-failure.md +11 -0
  73. package/benchmarks/production-v2/prompts/revoked-session-cache.md +10 -0
  74. package/benchmarks/production-v2/prompts/schema-migration.md +6 -0
  75. package/benchmarks/production-v2/prompts/stable-dedup.md +6 -0
  76. package/benchmarks/production-v2/prompts/stale-search-response.md +6 -0
  77. package/benchmarks/production-v2/prompts/tenant-cache-isolation.md +6 -0
  78. package/benchmarks/production-v2/prompts/tenant-role-authorization.md +6 -0
  79. package/benchmarks/production-v2/prompts/unicode-search.md +6 -0
  80. package/benchmarks/production-v2/prompts/workflow-switch-same-session.md +30 -0
  81. package/benchmarks/production-v2/prompts/workspace-order.md +7 -0
  82. package/benchmarks/production-v2/spend-control.v1.json +115 -0
  83. package/benchmarks/production-v2/suite.json +1009 -0
  84. package/benchmarks/production-v2/variant.mjs +169 -0
  85. package/benchmarks/production-v3/CONTRACT-REVISION-20260922.md +31 -0
  86. package/benchmarks/production-v3/calibration/corpus.v1.json +63 -0
  87. package/benchmarks/production-v3/calibration/human-review-rubric.v1.json +36 -0
  88. package/benchmarks/production-v3/grade.mjs +1017 -0
  89. package/benchmarks/production-v3/project/README.md +7 -0
  90. package/benchmarks/production-v3/project/config/service.json +4 -0
  91. package/benchmarks/production-v3/project/data/audit-ledger.jsonl +1 -0
  92. package/benchmarks/production-v3/project/docs/ops.md +3 -0
  93. package/benchmarks/production-v3/project/logs/incident.log +2 -0
  94. package/benchmarks/production-v3/project/package.json +11 -0
  95. package/benchmarks/production-v3/project/scripts/check.mjs +21 -0
  96. package/benchmarks/production-v3/project/src/backend/auth.js +3 -0
  97. package/benchmarks/production-v3/project/src/backend/billing-window.js +4 -0
  98. package/benchmarks/production-v3/project/src/backend/cache.js +15 -0
  99. package/benchmarks/production-v3/project/src/backend/invoice.js +4 -0
  100. package/benchmarks/production-v3/project/src/backend/revocation-cache.js +12 -0
  101. package/benchmarks/production-v3/project/src/data/csv.js +3 -0
  102. package/benchmarks/production-v3/project/src/data/dedup.js +5 -0
  103. package/benchmarks/production-v3/project/src/data/migration.js +9 -0
  104. package/benchmarks/production-v3/project/src/data/ndjson-stream.js +5 -0
  105. package/benchmarks/production-v3/project/src/data/versioned-replay.js +8 -0
  106. package/benchmarks/production-v3/project/src/frontend/chat-events.js +7 -0
  107. package/benchmarks/production-v3/project/src/frontend/pagination.js +8 -0
  108. package/benchmarks/production-v3/project/src/frontend/request-lifecycle.js +23 -0
  109. package/benchmarks/production-v3/project/src/frontend/search-state.js +8 -0
  110. package/benchmarks/production-v3/project/src/frontend/unicode-search.js +7 -0
  111. package/benchmarks/production-v3/project/src/fullstack/contract-sync.js +10 -0
  112. package/benchmarks/production-v3/project/src/platform/args.js +10 -0
  113. package/benchmarks/production-v3/project/src/platform/config.js +7 -0
  114. package/benchmarks/production-v3/project/src/platform/workflow-session.js +9 -0
  115. package/benchmarks/production-v3/project/src/platform/workspace.js +13 -0
  116. package/benchmarks/production-v3/project/src/reliability/checkpoint.js +5 -0
  117. package/benchmarks/production-v3/project/src/reliability/expiry.js +14 -0
  118. package/benchmarks/production-v3/project/src/reliability/retry.js +15 -0
  119. package/benchmarks/production-v3/project/test/smoke.test.js +21 -0
  120. package/benchmarks/production-v3/project/vendor/README.md +1 -0
  121. package/benchmarks/production-v3/prompts/abort-reconnect-supersession.md +11 -0
  122. package/benchmarks/production-v3/prompts/backend-frontend-contract-sync.md +20 -0
  123. package/benchmarks/production-v3/prompts/billing-cutoff-clock-skew.md +11 -0
  124. package/benchmarks/production-v3/prompts/bounded-retry.md +7 -0
  125. package/benchmarks/production-v3/prompts/chunked-record-boundary.md +11 -0
  126. package/benchmarks/production-v3/prompts/cli-double-dash.md +7 -0
  127. package/benchmarks/production-v3/prompts/config-precedence.md +6 -0
  128. package/benchmarks/production-v3/prompts/destructive-history-refusal.md +9 -0
  129. package/benchmarks/production-v3/prompts/expiry-boundary.md +14 -0
  130. package/benchmarks/production-v3/prompts/idempotent-replay-conflict.md +13 -0
  131. package/benchmarks/production-v3/prompts/incident-diagnosis.md +4 -0
  132. package/benchmarks/production-v3/prompts/invoice-rounding.md +9 -0
  133. package/benchmarks/production-v3/prompts/journeys/config-precedence-scout.md +3 -0
  134. package/benchmarks/production-v3/prompts/journeys/expiry-boundary-scout.md +3 -0
  135. package/benchmarks/production-v3/prompts/journeys/quoted-csv-scout.md +3 -0
  136. package/benchmarks/production-v3/prompts/journeys/recover-after-uncertain-send.md +4 -0
  137. package/benchmarks/production-v3/prompts/journeys/repository-prompt-injection-scout.md +4 -0
  138. package/benchmarks/production-v3/prompts/journeys/resumable-checkpoint-partial-failure-scout.md +4 -0
  139. package/benchmarks/production-v3/prompts/journeys/stable-dedup-scout.md +3 -0
  140. package/benchmarks/production-v3/prompts/journeys/stale-search-response-scout.md +3 -0
  141. package/benchmarks/production-v3/prompts/journeys/tenant-cache-isolation-scout.md +4 -0
  142. package/benchmarks/production-v3/prompts/journeys/verify-current-contract.md +4 -0
  143. package/benchmarks/production-v3/prompts/journeys/workflow-switch-same-session-scout.md +4 -0
  144. package/benchmarks/production-v3/prompts/pagination-boundary.md +9 -0
  145. package/benchmarks/production-v3/prompts/protected-env-refusal.md +8 -0
  146. package/benchmarks/production-v3/prompts/quoted-csv.md +6 -0
  147. package/benchmarks/production-v3/prompts/reconnect-chat-event-order.md +20 -0
  148. package/benchmarks/production-v3/prompts/repository-prompt-injection.md +5 -0
  149. package/benchmarks/production-v3/prompts/resumable-checkpoint-partial-failure.md +15 -0
  150. package/benchmarks/production-v3/prompts/revoked-session-cache.md +10 -0
  151. package/benchmarks/production-v3/prompts/schema-migration.md +6 -0
  152. package/benchmarks/production-v3/prompts/stable-dedup.md +6 -0
  153. package/benchmarks/production-v3/prompts/stale-search-response.md +6 -0
  154. package/benchmarks/production-v3/prompts/tenant-cache-isolation.md +6 -0
  155. package/benchmarks/production-v3/prompts/tenant-role-authorization.md +6 -0
  156. package/benchmarks/production-v3/prompts/unicode-search.md +6 -0
  157. package/benchmarks/production-v3/prompts/workflow-switch-same-session.md +30 -0
  158. package/benchmarks/production-v3/prompts/workspace-order.md +7 -0
  159. package/benchmarks/production-v3/public-checks/abort-reconnect-supersession.js +34 -0
  160. package/benchmarks/production-v3/public-checks/expiry-boundary.js +29 -0
  161. package/benchmarks/production-v3/public-checks/revoked-session-cache.js +20 -0
  162. package/benchmarks/production-v3/spend-control.v1.json +121 -0
  163. package/benchmarks/production-v3/suite.json +1010 -0
  164. package/benchmarks/production-v3/variant.mjs +178 -0
  165. package/catalog/capabilities.json +16 -16
  166. package/docs/authority-manifest.md +1 -1
  167. package/docs/auto-delegation-policy.md +38 -73
  168. package/docs/benchmark-codex-mcp-metadata-contract-v1.md +159 -0
  169. package/docs/benchmark-codex-mcp-metadata-contract-v2.md +182 -0
  170. package/docs/benchmark-codex-mcp-metadata-contract-v3.md +194 -0
  171. package/docs/benchmark-public-contract-addendum-v2.md +85 -0
  172. package/docs/benchmark-public-contract-addendum-v3.md +116 -0
  173. package/docs/command-reference-vietnamese.md +30 -35
  174. package/docs/context-engine.md +5 -3
  175. package/docs/context-window-policy.md +37 -1
  176. package/docs/distribution-standard.md +9 -9
  177. package/docs/en/architecture.md +26 -13
  178. package/docs/languages.json +4 -4
  179. package/docs/operator-manual-vietnamese.md +26 -46
  180. package/docs/piagent-codex-benchmark-recovery-plan.md +1817 -0
  181. package/docs/piagent-core-evaluation-specs-2026-09-06.json +706 -0
  182. package/docs/piagent-core-improvement-plan.md +528 -0
  183. package/docs/piagent-core-offline-implementation-2026-09-06.md +219 -0
  184. package/docs/piagent-core-plan-checkpoint-2026-09-06.json +69 -0
  185. package/docs/piagent-core-reasoning-research-2026-09-06.md +225 -0
  186. package/docs/piagent-core-research-sources-2026-09-06.json +416 -0
  187. package/docs/piagent-open-session-wait.md +19 -0
  188. package/docs/piagent-runtime-benchmark-execution-plan.md +685 -0
  189. package/docs/publishing-for-teams.md +7 -0
  190. package/docs/quality-benchmark.md +299 -23
  191. package/docs/quickstart-vietnamese.md +2 -2
  192. package/docs/release-install-policy.md +32 -9
  193. package/docs/research/harness-next-evidence-review.md +113 -0
  194. package/docs/runtime-harness-standard.md +3 -3
  195. package/docs/security-threat-model.md +1 -1
  196. package/docs/subagent-orchestration-capabilities.md +19 -51
  197. package/docs/subagents-and-multiagent.md +21 -47
  198. package/docs/task-implementation-contract.md +3 -3
  199. package/docs/task-lifecycle-vietnamese.md +1 -1
  200. package/docs/team-onboarding.md +7 -7
  201. package/docs/third-party-neutrality.md +7 -0
  202. package/docs/usage-observability.md +1 -1
  203. package/docs/vi/architecture.md +26 -13
  204. package/docs-site/architecture.html +1 -1
  205. package/docs-site/benchmark.html +89 -95
  206. package/docs-site/commands.html +1 -1
  207. package/docs-site/content/benchmark.html +88 -94
  208. package/docs-site/content/en/benchmark.html +134 -90
  209. package/docs-site/content/en/index.html +19 -19
  210. package/docs-site/content/en/runtime.html +5 -5
  211. package/docs-site/content/en/whats-new.html +23 -1
  212. package/docs-site/content/en/workflows.html +2 -2
  213. package/docs-site/content/index.html +19 -19
  214. package/docs-site/content/runtime.html +6 -6
  215. package/docs-site/content/whats-new.html +23 -1
  216. package/docs-site/content/workflows.html +2 -2
  217. package/docs-site/context-engine.html +1 -1
  218. package/docs-site/en/architecture.html +1 -1
  219. package/docs-site/en/benchmark.html +135 -91
  220. package/docs-site/en/commands.html +1 -1
  221. package/docs-site/en/context-engine.html +1 -1
  222. package/docs-site/en/index.html +20 -20
  223. package/docs-site/en/mcp-approval.html +1 -1
  224. package/docs-site/en/mcp-auth.html +1 -1
  225. package/docs-site/en/mcp-servers.html +1 -1
  226. package/docs-site/en/mcp.html +1 -1
  227. package/docs-site/en/permissions.html +1 -1
  228. package/docs-site/en/profiles.html +1 -1
  229. package/docs-site/en/quickstart.html +1 -1
  230. package/docs-site/en/runtime.html +6 -6
  231. package/docs-site/en/scope.html +1 -1
  232. package/docs-site/en/security.html +1 -1
  233. package/docs-site/en/team.html +1 -1
  234. package/docs-site/en/whats-new.html +24 -2
  235. package/docs-site/en/workflows.html +3 -3
  236. package/docs-site/index.html +20 -20
  237. package/docs-site/mcp-approval.html +1 -1
  238. package/docs-site/mcp-auth.html +1 -1
  239. package/docs-site/mcp-servers.html +1 -1
  240. package/docs-site/mcp.html +1 -1
  241. package/docs-site/permissions.html +1 -1
  242. package/docs-site/profiles.html +1 -1
  243. package/docs-site/quickstart.html +1 -1
  244. package/docs-site/runtime.html +7 -7
  245. package/docs-site/scope.html +1 -1
  246. package/docs-site/security.html +1 -1
  247. package/docs-site/team.html +1 -1
  248. package/docs-site/whats-new.html +24 -2
  249. package/docs-site/workflows.html +3 -3
  250. package/evals/architecture-conformance-v1/lane.json +18 -0
  251. package/evals/architecture-conformance-v1/runner.mjs +77 -0
  252. package/evals/fixtures/approved-host-contracts.invalid.json +43 -0
  253. package/evals/fixtures/approved-host-contracts.valid.json +43 -0
  254. package/evals/fixtures/benchmark-assurance-evidence.invalid.json +1 -1
  255. package/evals/fixtures/benchmark-assurance-evidence.valid.json +1 -1
  256. package/evals/fixtures/benchmark-attempt-outcome.invalid.json +42 -0
  257. package/evals/fixtures/benchmark-attempt-outcome.valid.json +42 -0
  258. package/evals/fixtures/benchmark-independent-verification-plan.invalid.json +7 -0
  259. package/evals/fixtures/benchmark-independent-verification-plan.valid.json +21 -0
  260. package/evals/fixtures/codex-relative-efficiency-v1.invalid.json +4 -0
  261. package/evals/fixtures/codex-relative-efficiency-v1.valid.json +94 -0
  262. package/evals/fixtures/composite-criterion.invalid.json +10 -0
  263. package/evals/fixtures/composite-criterion.valid.json +33 -0
  264. package/evals/fixtures/contract-family-library.invalid.json +42 -0
  265. package/evals/fixtures/contract-family-library.valid.json +41 -0
  266. package/evals/fixtures/contract-selection-recipe.invalid.json +29 -0
  267. package/evals/fixtures/contract-selection-recipe.valid.json +29 -0
  268. package/evals/fixtures/helper-request.invalid.json +1 -1
  269. package/evals/fixtures/helper-request.valid.json +1 -1
  270. package/evals/fixtures/host-contract-plan.invalid.json +42 -0
  271. package/evals/fixtures/host-contract-plan.valid.json +41 -0
  272. package/evals/fixtures/piagent-webui/subagent-tree-v1.valid.json +7 -0
  273. package/evals/fixtures/scoped-project-verification-receipt-v2.invalid.json +42 -0
  274. package/evals/fixtures/scoped-project-verification-receipt-v2.valid.json +42 -0
  275. package/evals/fixtures/scoped-project-verification-receipt-v3.invalid.json +57 -0
  276. package/evals/fixtures/scoped-project-verification-receipt-v3.valid.json +57 -0
  277. package/evals/fixtures/scoped-verification-receipt-v1.invalid.json +40 -0
  278. package/evals/fixtures/scoped-verification-receipt-v1.valid.json +40 -0
  279. package/evals/fixtures/task-authority-snapshot.valid.json +4 -4
  280. package/evals/fs4-readiness-matrix.v1.json +2 -2
  281. package/evals/fs5-artifact-archive/README.md +32 -0
  282. package/evals/fs5-artifact-archive/manifest.json +148 -0
  283. package/evals/fs5-artifact-archive/sha256/1f073f6d42c093a3182685e0e096144c8b3befd87594aeea1af05ce17653860c.txt +380 -0
  284. package/evals/fs5-artifact-archive/sha256/1ff46984c5ff668647dfad94248cd9dcfb72384a8aa529279345582f90d7486a.txt +331 -0
  285. package/evals/fs5-artifact-archive/sha256/20a5e1ef1cab3234a888b876b3cec52e702a05bc5ac000b691f94c651beed9ca.txt +800 -0
  286. package/evals/fs5-artifact-archive/sha256/29bb79e96b047d79056626d747baa0b3a6ca9d4da7ad80b9668c0085e5581706.txt +116 -0
  287. package/evals/fs5-artifact-archive/sha256/2bcc0cf6c18eee0c080c30e727610b0f10a278f5862855d920ba5797f07a2f2d.txt +252 -0
  288. package/evals/fs5-artifact-archive/sha256/37ecc65febe2c5947ac9288ad958bc149e0f08c6beda137edb1c660908853832.txt +324 -0
  289. package/evals/fs5-artifact-archive/sha256/5d937632d2cfff34dbbb781dd367bb78feb64c36d571c36ca15f2cc40c576af8.txt +142 -0
  290. package/evals/fs5-artifact-archive/sha256/6057c7bf2f40f8e3db7e293f08d745133c05293b75e9f363fb4e2e53bd09a76a.txt +244 -0
  291. package/evals/fs5-artifact-archive/sha256/62ea354afb6816b148ae9bd95ffb1ee5e29580eb4a22473e1ae19dbb471ec36b.txt +930 -0
  292. package/evals/fs5-artifact-archive/sha256/8987775b742f3b3650d75cce84e6d58fcdd3dfb835d03dac4c2bfe6d9eea3a2e.txt +903 -0
  293. package/evals/fs5-artifact-archive/sha256/902e886d0920b66811f54d0d1d933d70f8fab8704813b46d578bee6af1f21eef.txt +942 -0
  294. package/evals/fs5-artifact-archive/sha256/976a9908adfd765ee7be0655616f39a44fff64824f5e8535d726082e550b02eb.txt +910 -0
  295. package/evals/fs5-artifact-archive/sha256/9c07bda5bfe7bb7b0959844ccea6790735cc9f154d8d5972e18785148cea6d9a.txt +101 -0
  296. package/evals/fs5-artifact-archive/sha256/b936a604db87a697bf69581c33d753e26d9e5e2ccce40bf9c9b2070948f49919.txt +931 -0
  297. package/evals/fs5-artifact-archive/sha256/bf91f69473f48fc3de7c7c55e7ce893ba0511074c4ec930d9f3bcb9615d8e9d5.txt +950 -0
  298. package/evals/fs5-artifact-archive/sha256/ce4ed1b4a033f2a8cb4632d1336b0867edb3454ce1380f0642c4055149e6ac59.txt +784 -0
  299. package/evals/fs5-artifact-archive/sha256/db97f444db8ba604512daf0aa26b3fe1e2a120ace2b21d4730db5b18aa0c528f.txt +950 -0
  300. package/evals/fs5-causal-arm.v1.json +10 -6
  301. package/evals/fs5-pilot-protocol.v1.json +3 -3
  302. package/evals/fs5-pilot-protocol.v2.json +8 -8
  303. package/evals/fs5-pilot-protocol.v3.json +8 -8
  304. package/evals/fs5-pilot-protocol.v4.json +7 -7
  305. package/evals/fs5-pilot-protocol.v5.json +10 -8
  306. package/evals/harness-next/development-corpus.mjs +106 -0
  307. package/evals/harness-next/resource-budget-probe.mjs +38 -0
  308. package/evals/harness-next/run-calibration.mjs +83 -0
  309. package/evals/harness-next/run-resource-probe.mjs +55 -0
  310. package/evals/harness-next/selected-development-corpus.mjs +27 -0
  311. package/evals/harness-next.v1.json +51 -0
  312. package/evals/long-horizon-v1/README.md +19 -0
  313. package/evals/long-horizon-v1/runner.mjs +116 -48
  314. package/evals/long-horizon-v1/worker.mjs +77 -30
  315. package/evals/private-holdout-v1/CURRENT_BOUNDARY.md +53 -0
  316. package/evals/private-holdout-v1/README.md +5 -2
  317. package/evals/private-holdout-v1/public-exposure.v1.json +1 -1
  318. package/evals/private-holdout-v1/public-exposure.v2.json +273 -0
  319. package/evals/runtime-conformance-v1/README.md +43 -0
  320. package/evals/runtime-conformance-v1/evaluate-paid-canary.mjs +198 -0
  321. package/evals/runtime-conformance-v1/lane.json +57 -0
  322. package/evals/runtime-conformance-v1/paid-canary.json +31 -0
  323. package/evals/runtime-conformance-v1/runner.mjs +456 -0
  324. package/package.json +9 -4
  325. package/packages/piagent-core/README.md +15 -6
  326. package/packages/piagent-core/benchmark/benchmark-all-attempt-efficiency.js +55 -0
  327. package/packages/piagent-core/benchmark/benchmark-artifact-binding.js +49 -0
  328. package/packages/piagent-core/benchmark/benchmark-bootstrap.js +265 -14
  329. package/packages/piagent-core/benchmark/benchmark-budget-governor.js +271 -0
  330. package/packages/piagent-core/benchmark/benchmark-campaign.js +592 -0
  331. package/packages/piagent-core/benchmark/benchmark-candidate.js +8 -3
  332. package/packages/piagent-core/benchmark/benchmark-checkpoint.js +67 -0
  333. package/packages/piagent-core/benchmark/benchmark-claim-restrictions.js +269 -2
  334. package/packages/piagent-core/benchmark/benchmark-cli.js +120 -3
  335. package/packages/piagent-core/benchmark/benchmark-codex-events.js +235 -0
  336. package/packages/piagent-core/benchmark/benchmark-codex-outcome.js +20 -0
  337. package/packages/piagent-core/benchmark/benchmark-codex-relative-efficiency.js +699 -0
  338. package/packages/piagent-core/benchmark/benchmark-codex-rollout.js +521 -0
  339. package/packages/piagent-core/benchmark/benchmark-codex.js +104 -8
  340. package/packages/piagent-core/benchmark/benchmark-comparison.js +284 -1
  341. package/packages/piagent-core/benchmark/benchmark-core.js +111 -110
  342. package/packages/piagent-core/benchmark/benchmark-diagnostic-source-evidence.js +40 -0
  343. package/packages/piagent-core/benchmark/benchmark-diagnostic-treatment.js +104 -0
  344. package/packages/piagent-core/benchmark/benchmark-evaluator-v3.js +226 -0
  345. package/packages/piagent-core/benchmark/benchmark-execution-guard.js +23 -1
  346. package/packages/piagent-core/benchmark/benchmark-forensics.js +67 -52
  347. package/packages/piagent-core/benchmark/benchmark-goal-assessment.js +193 -0
  348. package/packages/piagent-core/benchmark/benchmark-goal-report.js +87 -0
  349. package/packages/piagent-core/benchmark/benchmark-independent-verification-observation.js +64 -0
  350. package/packages/piagent-core/benchmark/benchmark-matrix-summary.js +141 -0
  351. package/packages/piagent-core/benchmark/benchmark-matrix.js +1 -0
  352. package/packages/piagent-core/benchmark/benchmark-normalized-cost.js +62 -0
  353. package/packages/piagent-core/benchmark/benchmark-pi-home.js +1 -0
  354. package/packages/piagent-core/benchmark/benchmark-preflight.js +70 -7
  355. package/packages/piagent-core/benchmark/benchmark-process.js +23 -9
  356. package/packages/piagent-core/benchmark/benchmark-production-completion.js +84 -0
  357. package/packages/piagent-core/benchmark/benchmark-production-stage-validation.js +209 -0
  358. package/packages/piagent-core/benchmark/benchmark-provider-free-evidence.js +462 -0
  359. package/packages/piagent-core/benchmark/benchmark-provider-free-owner.js +24 -0
  360. package/packages/piagent-core/benchmark/benchmark-provider-wire.js +378 -0
  361. package/packages/piagent-core/benchmark/benchmark-record-validation.d.ts +2 -0
  362. package/packages/piagent-core/benchmark/benchmark-record-validation.js +343 -8
  363. package/packages/piagent-core/benchmark/benchmark-release-claim-controls.js +132 -0
  364. package/packages/piagent-core/benchmark/benchmark-report.js +94 -5
  365. package/packages/piagent-core/benchmark/benchmark-resume-recovery.js +280 -10
  366. package/packages/piagent-core/benchmark/benchmark-runner-policy.js +88 -1
  367. package/packages/piagent-core/benchmark/benchmark-runtime-causal.js +244 -0
  368. package/packages/piagent-core/benchmark/benchmark-runtime-identity.js +50 -1
  369. package/packages/piagent-core/benchmark/benchmark-runtime.js +102 -10
  370. package/packages/piagent-core/benchmark/benchmark-safety-evidence.js +74 -0
  371. package/packages/piagent-core/benchmark/benchmark-service-tier.js +189 -0
  372. package/packages/piagent-core/benchmark/benchmark-stage-diagnostic.js +246 -33
  373. package/packages/piagent-core/benchmark/benchmark-suite-identity.js +264 -1
  374. package/packages/piagent-core/benchmark/benchmark-suite-runtime.js +4 -0
  375. package/packages/piagent-core/benchmark/benchmark-suite.js +232 -4
  376. package/packages/piagent-core/benchmark/benchmark-summary-support.js +33 -1
  377. package/packages/piagent-core/benchmark/benchmark-timing-contract.js +189 -0
  378. package/packages/piagent-core/benchmark/benchmark-timing-diagnostics.js +110 -139
  379. package/packages/piagent-core/benchmark/benchmark-transport-evidence.js +203 -0
  380. package/packages/piagent-core/benchmark/benchmark-transport-observation.js +147 -0
  381. package/packages/piagent-core/benchmark/benchmark-tree-identity.js +2 -1
  382. package/packages/piagent-core/benchmark/benchmark-usage.js +410 -37
  383. package/packages/piagent-core/benchmark/benchmark-workflow.js +136 -38
  384. package/packages/piagent-core/benchmark/fs5-pilot-protocol.js +21 -2
  385. package/packages/piagent-core/capabilities/runtime-integrity.js +6 -0
  386. package/packages/piagent-core/extensions/acceptance-api-baseline.js +24 -0
  387. package/packages/piagent-core/extensions/acceptance-assessment.js +153 -0
  388. package/packages/piagent-core/extensions/acceptance-authenticated-admission.d.ts +41 -0
  389. package/packages/piagent-core/extensions/acceptance-authenticated-admission.js +120 -0
  390. package/packages/piagent-core/extensions/acceptance-behavior-proof.js +1000 -0
  391. package/packages/piagent-core/extensions/acceptance-boundary-binding.js +31 -0
  392. package/packages/piagent-core/extensions/acceptance-boundary-guidance.js +214 -0
  393. package/packages/piagent-core/extensions/acceptance-callable-scanner.js +244 -0
  394. package/packages/piagent-core/extensions/acceptance-clause-group.js +45 -0
  395. package/packages/piagent-core/extensions/acceptance-composite-contract.js +334 -0
  396. package/packages/piagent-core/extensions/acceptance-contract-conjunction.js +78 -0
  397. package/packages/piagent-core/extensions/acceptance-contract-selection.js +161 -0
  398. package/packages/piagent-core/extensions/acceptance-contract-semantics.js +211 -211
  399. package/packages/piagent-core/extensions/acceptance-declared-api.js +126 -0
  400. package/packages/piagent-core/extensions/acceptance-diagnostic-policy.ts +14 -0
  401. package/packages/piagent-core/extensions/acceptance-document-content.js +73 -0
  402. package/packages/piagent-core/extensions/acceptance-durable-execution.d.ts +59 -0
  403. package/packages/piagent-core/extensions/acceptance-durable-execution.js +139 -0
  404. package/packages/piagent-core/extensions/acceptance-error-classes.js +1 -1
  405. package/packages/piagent-core/extensions/acceptance-evidence-store.js +223 -0
  406. package/packages/piagent-core/extensions/acceptance-executable-evidence.js +490 -88
  407. package/packages/piagent-core/extensions/acceptance-execution-diagnostics.js +34 -0
  408. package/packages/piagent-core/extensions/acceptance-execution-snapshot.js +174 -0
  409. package/packages/piagent-core/extensions/acceptance-executor/.dockerignore +21 -0
  410. package/packages/piagent-core/extensions/acceptance-executor/Dockerfile +5 -0
  411. package/packages/piagent-core/extensions/acceptance-executor/README.md +103 -0
  412. package/packages/piagent-core/extensions/acceptance-executor/budget.mjs +54 -0
  413. package/packages/piagent-core/extensions/acceptance-executor/callback-intrinsics.mjs +126 -0
  414. package/packages/piagent-core/extensions/acceptance-executor/capabilities.mjs +127 -0
  415. package/packages/piagent-core/extensions/acceptance-executor/guest.mjs +285 -0
  416. package/packages/piagent-core/extensions/acceptance-executor/intrinsics.mjs +133 -0
  417. package/packages/piagent-core/extensions/acceptance-executor/invocation.mjs +39 -0
  418. package/packages/piagent-core/extensions/acceptance-executor/jobs.mjs +29 -0
  419. package/packages/piagent-core/extensions/acceptance-executor/module-graph.mjs +70 -0
  420. package/packages/piagent-core/extensions/acceptance-executor/node-profile.mjs +398 -0
  421. package/packages/piagent-core/extensions/acceptance-executor/package-lock.json +40 -0
  422. package/packages/piagent-core/extensions/acceptance-executor/package.json +10 -0
  423. package/packages/piagent-core/extensions/acceptance-executor/protocol.mjs +248 -0
  424. package/packages/piagent-core/extensions/acceptance-executor/reference-identity.mjs +61 -0
  425. package/packages/piagent-core/extensions/acceptance-executor/references.mjs +14 -0
  426. package/packages/piagent-core/extensions/acceptance-executor/structured-clone.mjs +53 -0
  427. package/packages/piagent-core/extensions/acceptance-executor/values.mjs +97 -0
  428. package/packages/piagent-core/extensions/acceptance-executor/worker.mjs +75 -0
  429. package/packages/piagent-core/extensions/acceptance-expiry-calendar-proof.js +162 -0
  430. package/packages/piagent-core/extensions/acceptance-expression-parser.js +155 -0
  431. package/packages/piagent-core/extensions/acceptance-focused-verification.js +40 -0
  432. package/packages/piagent-core/extensions/acceptance-host-configuration.js +337 -0
  433. package/packages/piagent-core/extensions/acceptance-identifier-criteria.js +25 -0
  434. package/packages/piagent-core/extensions/acceptance-independent-contract.js +209 -0
  435. package/packages/piagent-core/extensions/acceptance-independent-registry.js +106 -0
  436. package/packages/piagent-core/extensions/acceptance-input-provenance.js +40 -0
  437. package/packages/piagent-core/extensions/acceptance-integer-domains.js +322 -0
  438. package/packages/piagent-core/extensions/acceptance-invalid-input-receipt.js +20 -0
  439. package/packages/piagent-core/extensions/acceptance-invalid-partitions.js +26 -0
  440. package/packages/piagent-core/extensions/acceptance-invalid-sentinel-proof.js +477 -0
  441. package/packages/piagent-core/extensions/acceptance-isolated-executor.js +254 -0
  442. package/packages/piagent-core/extensions/acceptance-lexical-sentinels.js +130 -0
  443. package/packages/piagent-core/extensions/acceptance-literal-dataflow.js +735 -0
  444. package/packages/piagent-core/extensions/acceptance-local-binding.js +106 -0
  445. package/packages/piagent-core/extensions/acceptance-normalizer-evidence.js +719 -0
  446. package/packages/piagent-core/extensions/acceptance-obligations.js +75 -0
  447. package/packages/piagent-core/extensions/acceptance-parameter-contract.js +756 -0
  448. package/packages/piagent-core/extensions/acceptance-precedence-contract.js +572 -0
  449. package/packages/piagent-core/extensions/acceptance-proof-capability.js +26 -0
  450. package/packages/piagent-core/extensions/acceptance-receipt.js +208 -180
  451. package/packages/piagent-core/extensions/acceptance-result-contract-evidence.js +159 -0
  452. package/packages/piagent-core/extensions/acceptance-source-origin.js +214 -0
  453. package/packages/piagent-core/extensions/acceptance-state-machine-evidence.js +64 -8
  454. package/packages/piagent-core/extensions/acceptance-tagged-event-evidence.js +685 -0
  455. package/packages/piagent-core/extensions/acceptance-temporal-contract.js +756 -0
  456. package/packages/piagent-core/extensions/acceptance-temporal-dataflow-proof.js +618 -0
  457. package/packages/piagent-core/extensions/acceptance-test-binding-evidence.js +20 -2
  458. package/packages/piagent-core/extensions/acceptance-test-bindings.js +86 -0
  459. package/packages/piagent-core/extensions/acceptance-tuple-shapes.js +12 -0
  460. package/packages/piagent-core/extensions/context-engine.js +12 -17
  461. package/packages/piagent-core/extensions/context-index-policy.js +4 -0
  462. package/packages/piagent-core/extensions/context-query-paths.js +57 -0
  463. package/packages/piagent-core/extensions/criterion-context-pack.js +109 -4
  464. package/packages/piagent-core/extensions/criterion-graph.js +4 -1
  465. package/packages/piagent-core/extensions/failure-types.ts +2 -2
  466. package/packages/piagent-core/extensions/fallback-base-policy.ts +101 -0
  467. package/packages/piagent-core/extensions/guard-types.ts +9 -1
  468. package/packages/piagent-core/extensions/piagent-guard.ts +374 -364
  469. package/packages/piagent-core/extensions/readonly-inline-inspection.ts +378 -0
  470. package/packages/piagent-core/extensions/recovery-decision-validation.ts +92 -0
  471. package/packages/piagent-core/extensions/shell-write-targets.js +15 -14
  472. package/packages/piagent-core/extensions/task-contract-view.js +4 -4
  473. package/packages/piagent-core/extensions/task-digest-migration.js +2 -2
  474. package/packages/piagent-core/extensions/task-journal.js +48 -3
  475. package/packages/piagent-core/extensions/task-lifecycle.js +32 -0
  476. package/packages/piagent-core/extensions/task-runtime-audit.js +8 -2
  477. package/packages/piagent-core/extensions/task-state.js +140 -43
  478. package/packages/piagent-core/extensions/task-terminal-disposition.js +10 -0
  479. package/packages/piagent-core/extensions/trajectory-contract.ts +5 -0
  480. package/packages/piagent-core/extensions/verification-intelligence.js +109 -20
  481. package/packages/piagent-core/extensions/workflow-catalog.ts +98 -0
  482. package/packages/piagent-core/extensions/workspace-evidence-roots.js +52 -16
  483. package/packages/piagent-core/extensions/workspace-revision.js +48 -0
  484. package/packages/piagent-core/extensions/workspace-verification-snapshot.js +13 -0
  485. package/packages/piagent-core/package.json +3 -3
  486. package/packages/piagent-core/policies/base-policy.json +43 -2
  487. package/packages/piagent-core/policy/authority-manifest.v1.json +3 -3
  488. package/packages/piagent-core/prompts/be-to-fe.md +2 -8
  489. package/packages/piagent-core/prompts/plan.md +1 -1
  490. package/packages/piagent-core/prompts/platform-improve.md +2 -6
  491. package/packages/piagent-core/prompts/review.md +2 -7
  492. package/packages/piagent-core/prompts/scout.md +1 -1
  493. package/packages/piagent-core/prompts/task.md +4 -3
  494. package/packages/piagent-core/runtime/context/adaptive-planner.ts +7 -3
  495. package/packages/piagent-core/runtime/hooks/agent-start-hook.ts +60 -59
  496. package/packages/piagent-core/runtime/hooks/agent-start-types.ts +48 -0
  497. package/packages/piagent-core/runtime/hooks/completion-hook.ts +83 -89
  498. package/packages/piagent-core/runtime/hooks/input-hook.ts +98 -7
  499. package/packages/piagent-core/runtime/hooks/protected-refusal-completion.ts +86 -0
  500. package/packages/piagent-core/runtime/hooks/session-hooks.ts +5 -2
  501. package/packages/piagent-core/runtime/hooks/session-start-hook.ts +150 -19
  502. package/packages/piagent-core/runtime/hooks/tool-result-hook.ts +111 -92
  503. package/packages/piagent-core/runtime/hooks/tool-result-metadata.ts +9 -0
  504. package/packages/piagent-core/runtime/hooks/tool-result-navigation.ts +36 -0
  505. package/packages/piagent-core/runtime/hooks/tool-result-retrieval.ts +42 -0
  506. package/packages/piagent-core/runtime/hooks/tool-result-value-helpers.ts +66 -0
  507. package/packages/piagent-core/runtime/input/chat-images.ts +1 -1
  508. package/packages/piagent-core/runtime/inspection/activity-event-adapter.ts +1 -1
  509. package/packages/piagent-core/runtime/inspection/bounded-emission-guard.ts +286 -0
  510. package/packages/piagent-core/runtime/inspection/runtime-event-store.ts +37 -7
  511. package/packages/piagent-core/runtime/inspection/same-process-bridge-proof.ts +1 -1
  512. package/packages/piagent-core/runtime/inspection/task-handoff-history.ts +2 -2
  513. package/packages/piagent-core/runtime/inspection/task-subagent-tree.ts +27 -4
  514. package/packages/piagent-core/runtime/inspection/tool-failure-classification.ts +69 -11
  515. package/packages/piagent-core/runtime/inspection/webui-snapshot.ts +104 -22
  516. package/packages/piagent-core/runtime/inspection/workspace-file-reader.ts +2 -132
  517. package/packages/piagent-core/runtime/model/provider-wire-fingerprint.ts +20 -0
  518. package/packages/piagent-core/runtime/model/service-tier-runtime.ts +242 -0
  519. package/packages/piagent-core/runtime/orchestration/helper-lifecycle.ts +16 -12
  520. package/packages/piagent-core/runtime/orchestration/minimal-delegation-policy.ts +71 -0
  521. package/packages/piagent-core/runtime/orchestration/owned-work-budget.ts +28 -20
  522. package/packages/piagent-core/runtime/orchestration/role-policy.ts +27 -9
  523. package/packages/piagent-core/runtime/orchestration/subagent-tool-policy.ts +329 -0
  524. package/packages/piagent-core/runtime/policy/block-remedy.ts +0 -4
  525. package/packages/piagent-core/runtime/policy/source-worktree-transaction.ts +75 -14
  526. package/packages/piagent-core/runtime/product/activity-inspector.ts +6 -3
  527. package/packages/piagent-core/runtime/product/edit-verifier-timing.ts +26 -0
  528. package/packages/piagent-core/runtime/product/efficiency-metrics.ts +15 -7
  529. package/packages/piagent-core/runtime/product/operator-projections.ts +8 -3
  530. package/packages/piagent-core/runtime/product/task-usage-hooks.ts +78 -0
  531. package/packages/piagent-core/runtime/product/task-usage.ts +104 -0
  532. package/packages/piagent-core/runtime/quality/edit-freshness-guard.ts +102 -0
  533. package/packages/piagent-core/runtime/quality/exact-output-contract.ts +20 -10
  534. package/packages/piagent-core/runtime/quality/performance-assurance.ts +3 -3
  535. package/packages/piagent-core/runtime/quality/protected-refusal-handoff.ts +35 -0
  536. package/packages/piagent-core/runtime/recovery/acceptance-recovery-guidance.ts +21 -0
  537. package/packages/piagent-core/runtime/recovery/continuation-budget.ts +12 -3
  538. package/packages/piagent-core/runtime/recovery/diagnostic-delivery.ts +61 -0
  539. package/packages/piagent-core/runtime/recovery/handoff-projection.ts +196 -58
  540. package/packages/piagent-core/runtime/recovery/handoff-verifier-binding.ts +24 -0
  541. package/packages/piagent-core/runtime/recovery/independent-verification-recovery.ts +79 -0
  542. package/packages/piagent-core/runtime/recovery/pristine-task-policy-refresh.ts +91 -0
  543. package/packages/piagent-core/runtime/recovery/recovery-policy.ts +31 -40
  544. package/packages/piagent-core/runtime/recovery/resume-state.ts +120 -19
  545. package/packages/piagent-core/runtime/recovery/semantic-repair-handshake.ts +7 -13
  546. package/packages/piagent-core/runtime/recovery/task-evidence-coverage-refresh.ts +217 -0
  547. package/packages/piagent-core/runtime/registration/activity-inspector-command.ts +2 -1
  548. package/packages/piagent-core/runtime/registration/context-commands.ts +28 -10
  549. package/packages/piagent-core/runtime/registration/knowledge-tools.ts +9 -5
  550. package/packages/piagent-core/runtime/registration/operator-catalogs.ts +4 -9
  551. package/packages/piagent-core/runtime/registration/operator-request-intake.ts +49 -0
  552. package/packages/piagent-core/runtime/registration/policy-tools.ts +8 -6
  553. package/packages/piagent-core/runtime/registration/session-commands.ts +10 -8
  554. package/packages/piagent-core/runtime/registration/session-wait-tool.ts +54 -0
  555. package/packages/piagent-core/runtime/registration/task-completion-tools.ts +39 -20
  556. package/packages/piagent-core/runtime/registration/task-evidence-tools.ts +21 -12
  557. package/packages/piagent-core/runtime/registration/task-start-conditional-mutation.ts +45 -0
  558. package/packages/piagent-core/runtime/registration/task-start-guidance.ts +24 -15
  559. package/packages/piagent-core/runtime/registration/task-start-manifest.ts +54 -0
  560. package/packages/piagent-core/runtime/registration/task-start-tool.ts +79 -79
  561. package/packages/piagent-core/runtime/registration/workflow-commands.ts +64 -93
  562. package/packages/piagent-core/runtime/runtime-limits.ts +16 -2
  563. package/packages/piagent-core/runtime/session/adaptive-context-analysis.ts +461 -0
  564. package/packages/piagent-core/runtime/session/adaptive-context-governor.ts +464 -0
  565. package/packages/piagent-core/runtime/session/adaptive-context-ledger.ts +265 -0
  566. package/packages/piagent-core/runtime/session/completion-signals.ts +23 -0
  567. package/packages/piagent-core/runtime/session/message-signals.ts +6 -18
  568. package/packages/piagent-core/runtime/session/operator-request-carry.ts +44 -0
  569. package/packages/piagent-core/runtime/session/retrieval-evidence-runtime.ts +188 -0
  570. package/packages/piagent-core/runtime/session/runtime-state.ts +37 -39
  571. package/packages/piagent-core/runtime/session/source-checkout-read-grants.ts +35 -0
  572. package/packages/piagent-core/runtime/session/system-prompt.ts +76 -14
  573. package/packages/piagent-core/runtime/session/task-contract-presentation.ts +39 -0
  574. package/packages/piagent-core/runtime/session/uncertain-send-continuation.ts +231 -0
  575. package/packages/piagent-core/runtime/session/usage.ts +4 -3
  576. package/packages/piagent-core/runtime/tools/apply-patch-tool.ts +6 -6
  577. package/packages/piagent-core/runtime/tools/phase-tool-runtime.ts +1 -1
  578. package/packages/piagent-core/runtime/tools/phase-tools.ts +10 -9
  579. package/packages/piagent-core/runtime/tools/session-wait.ts +42 -0
  580. package/packages/piagent-core/runtime/tools/tool-groups.ts +22 -5
  581. package/packages/piagent-core/runtime/trajectory/trajectory-runtime.ts +192 -5
  582. package/packages/piagent-core/runtime/trajectory/trajectory-types.ts +3 -2
  583. package/packages/piagent-core/runtime/verification/acceptance-api-baseline.js +488 -0
  584. package/packages/piagent-core/runtime/verification/completion-preparation.ts +22 -0
  585. package/packages/piagent-core/runtime/verification/composite-completion-finalizer.ts +105 -0
  586. package/packages/piagent-core/runtime/verification/composite-journal-anchor.ts +181 -0
  587. package/packages/piagent-core/runtime/verification/composite-runtime-binding.ts +76 -0
  588. package/packages/piagent-core/runtime/verification/composite-scoped-mediation.ts +318 -0
  589. package/packages/piagent-core/runtime/verification/composite-session-persistence.ts +175 -0
  590. package/packages/piagent-core/runtime/verification/composite-task-publication.ts +273 -0
  591. package/packages/piagent-core/runtime/verification/exact-verifier-reuse.ts +101 -0
  592. package/packages/piagent-core/runtime/verification/host-project-verification.ts +71 -0
  593. package/packages/piagent-core/runtime/verification/independent-acceptance-runtime.ts +500 -0
  594. package/packages/piagent-core/runtime/verification/runtime-assurance-facts.ts +500 -0
  595. package/packages/piagent-core/runtime/verification/runtime-contract-runner.ts +107 -0
  596. package/packages/piagent-core/runtime/verification/shell-verification-snapshots.ts +56 -0
  597. package/packages/piagent-core/runtime/workflows/change-clarification.ts +61 -0
  598. package/packages/piagent-core/runtime/workflows/input-routing.ts +21 -14
  599. package/packages/piagent-core/runtime/workflows/runtime-intake-compaction.ts +201 -0
  600. package/packages/piagent-core/runtime/workflows/task-followup-policy.ts +163 -0
  601. package/packages/piagent-core/runtime/workflows/task-intake.ts +276 -169
  602. package/packages/piagent-core/runtime/workflows/task-repair-intent.ts +67 -0
  603. package/packages/piagent-core/runtime/workflows/task-scope-resolution.ts +83 -0
  604. package/packages/piagent-core/runtime/workflows/webui-runtime-command.ts +5 -2
  605. package/packages/piagent-core/runtime/workflows/webui-workflow.ts +39 -32
  606. package/packages/piagent-core/runtime/workflows/workflow-follow-up.ts +33 -0
  607. package/packages/piagent-core/security/workspace-file-reader.ts +132 -0
  608. package/packages/piagent-core/subagents/piagent-oracle.md +5 -3
  609. package/packages/piagent-core/subagents/piagent-planner.md +6 -4
  610. package/packages/piagent-core/subagents/piagent-reviewer.md +5 -3
  611. package/packages/piagent-core/subagents/piagent-scout.md +4 -2
  612. package/packages/piagent-core/subagents/piagent-worker.md +6 -4
  613. package/packages/piagent-webui/dist/client/assets/{MarkdownMessage-CxeZqTte.js → MarkdownMessage-DGk34zJT.js} +1 -1
  614. package/packages/piagent-webui/dist/client/assets/{index-BV-_03yl.css → index-DVahUVWy.css} +1 -1
  615. package/packages/piagent-webui/dist/client/assets/index-DiKRmCEP.js +176 -0
  616. package/packages/piagent-webui/dist/client/index.html +2 -2
  617. package/packages/piagent-webui/extension/dispatch-user-entry.ts +13 -0
  618. package/packages/piagent-webui/extension/piagent-webui.ts +13 -3
  619. package/packages/piagent-webui/extension/review-controller.ts +29 -6
  620. package/packages/piagent-webui/extension/same-session-bridge.ts +7 -8
  621. package/packages/piagent-webui/extension/session-stream-adapter.ts +88 -16
  622. package/packages/piagent-webui/extension/source-mutation-controller.ts +29 -3
  623. package/packages/piagent-webui/extension/source-open-controller.ts +29 -7
  624. package/packages/piagent-webui/extension/source-revert-controller.ts +26 -3
  625. package/packages/piagent-webui/gateway/gateway-events.ts +22 -5
  626. package/packages/piagent-webui/gateway/gateway-service.ts +7 -2
  627. package/packages/piagent-webui/gateway/gateway-session-stream.ts +170 -32
  628. package/packages/piagent-webui/gateway/rpc-ui-context.ts +34 -9
  629. package/packages/piagent-webui/gateway/runtime-command-controller.ts +46 -6
  630. package/packages/piagent-webui/gateway/runtime-session-controls.ts +17 -2
  631. package/packages/piagent-webui/gateway/session-catalog.ts +9 -3
  632. package/packages/piagent-webui/gateway/session-command-controller.ts +29 -9
  633. package/packages/piagent-webui/gateway/session-effective-options.ts +2 -9
  634. package/packages/piagent-webui/gateway/session-inspection-registry.ts +11 -2
  635. package/packages/piagent-webui/gateway/session-operation-lifecycle.ts +237 -0
  636. package/packages/piagent-webui/gateway/session-operation-retry-control.ts +38 -0
  637. package/packages/piagent-webui/gateway/session-operation-settlement.ts +28 -0
  638. package/packages/piagent-webui/gateway/session-operation-watchdog.ts +9 -2
  639. package/packages/piagent-webui/gateway/session-prompt-dispatch.ts +37 -0
  640. package/packages/piagent-webui/gateway/session-runtime-close.ts +36 -0
  641. package/packages/piagent-webui/gateway/session-runtime-factory.ts +183 -6
  642. package/packages/piagent-webui/gateway/session-runtime-ownership.ts +48 -0
  643. package/packages/piagent-webui/gateway/session-runtime-state.ts +24 -0
  644. package/packages/piagent-webui/gateway/session-runtime-supervisor.ts +118 -117
  645. package/packages/piagent-webui/ownership/session-lease-store.ts +5 -2
  646. package/packages/piagent-webui/server/core-inspection-provider.ts +75 -15
  647. package/packages/piagent-webui/server/loopback-server.ts +9 -7
  648. package/packages/piagent-webui/server/terminal-delivery-receipt.ts +144 -0
  649. package/packages/piagent-webui/server/transcript-projection.ts +150 -11
  650. package/packages/piagent-webui/shared/message-correlation.ts +25 -0
  651. package/schemas/approved-host-contracts.schema.json +973 -0
  652. package/schemas/benchmark-attempt-outcome.schema.json +303 -0
  653. package/schemas/benchmark-independent-verification-plan.schema.json +34 -0
  654. package/schemas/codex-relative-efficiency-v1.schema.json +155 -0
  655. package/schemas/composite-criterion.schema.json +788 -0
  656. package/schemas/contract-family-library.schema.json +28 -0
  657. package/schemas/contract-selection-recipe.schema.json +31 -0
  658. package/schemas/failure-evidence.schema.json +2 -2
  659. package/schemas/helper-request.schema.json +16 -4
  660. package/schemas/host-contract-plan.schema.json +25 -0
  661. package/schemas/piagent-webui/gateway-protocol-v1.schema.json +16 -2
  662. package/schemas/piagent-webui/runtime-command-v1.schema.json +26 -3
  663. package/schemas/piagent-webui/runtime-event-v2.schema.json +46 -5
  664. package/schemas/piagent-webui/session-live-state-v1.schema.json +2 -0
  665. package/schemas/piagent-webui/snapshot-v1.schema.json +3 -0
  666. package/schemas/piagent-webui/source-change-v1.schema.json +12 -0
  667. package/schemas/piagent-webui/subagent-tree-v1.schema.json +11 -1
  668. package/schemas/piagent-webui/transcript-v1.schema.json +2 -1
  669. package/schemas/project-profile.schema.json +1 -1
  670. package/schemas/public-contracts/codex-mcp-metadata-v1.schema.json +206 -0
  671. package/schemas/public-contracts/codex-mcp-metadata-v2.schema.json +228 -0
  672. package/schemas/public-contracts/codex-mcp-metadata-v3.schema.json +233 -0
  673. package/schemas/public-contracts/revocation-v1.schema.json +87 -0
  674. package/schemas/public-contracts/subscription-contract-v1.schema.json +76 -0
  675. package/schemas/scoped-project-verification-receipt-v2.schema.json +83 -0
  676. package/schemas/scoped-project-verification-receipt-v3.schema.json +295 -0
  677. package/schemas/scoped-verification-receipt-v1.schema.json +76 -0
  678. package/schemas/task-contract.schema.json +45 -0
  679. package/scripts/approve-independent-verification.mjs +57 -0
  680. package/scripts/benchmark-arm-observer.mjs +320 -0
  681. package/scripts/benchmark-budget-ipc.mjs +34 -0
  682. package/scripts/benchmark-budget-launcher.mjs +91 -0
  683. package/scripts/benchmark-budget-processes.mjs +133 -0
  684. package/scripts/benchmark-budget-publication.mjs +228 -0
  685. package/scripts/benchmark-budget-runtime.mjs +136 -0
  686. package/scripts/benchmark-candidate-ablation.mjs +265 -0
  687. package/scripts/benchmark-codex-journey.mjs +406 -0
  688. package/scripts/benchmark-independent-verification.mjs +628 -0
  689. package/scripts/benchmark-journey-outcome.mjs +92 -0
  690. package/scripts/benchmark-production-v3-human-review.mjs +192 -0
  691. package/scripts/benchmark-public-input-catalog.mjs +158 -0
  692. package/scripts/benchmark-registered-plan-author.mjs +355 -0
  693. package/scripts/benchmark-registered-plan-recipe-support.mjs +85 -0
  694. package/scripts/benchmark-registered-plan-recipes-backend.mjs +165 -0
  695. package/scripts/benchmark-registered-plan-recipes-data.mjs +164 -0
  696. package/scripts/benchmark-registered-plan-recipes-platform.mjs +165 -0
  697. package/scripts/benchmark-runner-completion.mjs +133 -0
  698. package/scripts/benchmark-runner-configuration.mjs +159 -0
  699. package/scripts/benchmark-runner-core.mjs +224 -387
  700. package/scripts/benchmark-runner-finalization.mjs +144 -27
  701. package/scripts/benchmark-runner-provider-boundary.mjs +44 -0
  702. package/scripts/benchmark-runner-schedule.mjs +256 -0
  703. package/scripts/benchmark-runner-support.mjs +136 -4
  704. package/scripts/benchmark-runner.mjs +95 -18
  705. package/scripts/benchmark-scoped-broker-custody.mjs +483 -0
  706. package/scripts/benchmark-scoped-docs-verifier.mjs +203 -0
  707. package/scripts/benchmark-scoped-frozen-qualification.mjs +676 -0
  708. package/scripts/benchmark-scoped-pi-router.mjs +196 -0
  709. package/scripts/benchmark-scoped-project-verification-receipt.mjs +49 -0
  710. package/scripts/benchmark-scoped-project-verifier.mjs +461 -0
  711. package/scripts/benchmark-scoped-session-custody.mjs +599 -0
  712. package/scripts/benchmark-scoped-session-factory.mjs +342 -0
  713. package/scripts/benchmark-scoped-tool-broker.mjs +523 -0
  714. package/scripts/benchmark-scoped-verification-supervisor.mjs +773 -0
  715. package/scripts/benchmark-session-evaluator.mjs +169 -0
  716. package/scripts/benchmark-session-provider-boundary.mjs +62 -0
  717. package/scripts/benchmark-session-usage.mjs +28 -0
  718. package/scripts/benchmark-session.mjs +343 -50
  719. package/scripts/benchmark-webui-journey.mjs +678 -0
  720. package/scripts/check-public-wording.mjs +46 -0
  721. package/scripts/configure-subagents.sh +42 -34
  722. package/scripts/fs4-readiness-evaluation.mjs +7 -1
  723. package/scripts/helper-evaluation.mjs +1 -1
  724. package/scripts/phase-tools-evaluation.mjs +1 -0
  725. package/scripts/pi-auto.sh +7 -1
  726. package/scripts/pi-usage-history.mjs +201 -11
  727. package/scripts/piagent-cli.mjs +8 -0
  728. package/scripts/private-holdout-readiness.mjs +7 -1
  729. package/scripts/public-evaluation-exposure.mjs +140 -0
  730. package/scripts/select-independent-verification.mjs +62 -0
  731. package/scripts/team-doctor.sh +1 -1
  732. package/scripts/typescript-loader.mjs +135 -1
  733. package/scripts/update-global.mjs +6 -7
  734. package/scripts/verify-local.sh +41 -55
  735. package/scripts/verify-release-identity.mjs +5 -3
  736. package/packages/piagent-webui/dist/client/assets/index-DynIMe8I.js +0 -176
@@ -0,0 +1,159 @@
1
+ import { finiteIntervalFallbackEvidence } from "./acceptance-temporal-contract.js";
2
+ import { normalizePathCandidate } from "./policy-core.js";
3
+
4
+ function escapeRegex(value) {
5
+ return String(value ?? "").replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
6
+ }
7
+
8
+ function balancedEnd(code, openIndex, opening = "(", closing = ")") {
9
+ let depth = 0;
10
+ for (let index = openIndex; index < code.length; index += 1) {
11
+ if (code[index] === opening) depth += 1;
12
+ else if (code[index] === closing && --depth === 0) return index + 1;
13
+ }
14
+ return -1;
15
+ }
16
+
17
+ function splitTopLevel(value) {
18
+ const parts = [];
19
+ let start = 0;
20
+ let round = 0;
21
+ let square = 0;
22
+ let curly = 0;
23
+ for (let index = 0; index < value.length; index += 1) {
24
+ const token = value[index];
25
+ if (token === "(") round += 1;
26
+ else if (token === ")") round -= 1;
27
+ else if (token === "[") square += 1;
28
+ else if (token === "]") square -= 1;
29
+ else if (token === "{") curly += 1;
30
+ else if (token === "}") curly -= 1;
31
+ else if (token === "," && round === 0 && square === 0 && curly === 0) {
32
+ parts.push(value.slice(start, index).trim());
33
+ start = index + 1;
34
+ }
35
+ }
36
+ parts.push(value.slice(start).trim());
37
+ return parts;
38
+ }
39
+
40
+ function boundStringValue(token, strings) {
41
+ const index = Number(String(token ?? "").match(/^__pi_bound_string_(\d+)__$/)?.[1]);
42
+ return Number.isInteger(index) ? strings[index] : undefined;
43
+ }
44
+
45
+ function exactStringArray(expression, strings) {
46
+ const value = String(expression ?? "").trim();
47
+ if (!(value.startsWith("[") && value.endsWith("]"))) return undefined;
48
+ const items = splitTopLevel(value.slice(1, -1));
49
+ if (items.length === 1 && items[0] === "") return [];
50
+ const resolved = items.map((item) => boundStringValue(item, strings));
51
+ return resolved.every((item) => typeof item === "string") ? resolved : undefined;
52
+ }
53
+
54
+ function assertionComparisons(call) {
55
+ return call.assertions.flatMap((assertion) => {
56
+ const match = assertion.match(/^\s*assert\.(?:equal|strictEqual|deepEqual|deepStrictEqual)\s*\(/i);
57
+ if (!match) return [];
58
+ const open = assertion.indexOf("(", match.index);
59
+ const end = balancedEnd(assertion, open);
60
+ const [actual, expected] = end > open ? splitTopLevel(assertion.slice(open + 1, end - 1)) : [];
61
+ return actual && expected ? [{ actual, expected }] : [];
62
+ });
63
+ }
64
+
65
+ function actualWholeResult(call, actual) {
66
+ const value = String(actual ?? "").trim();
67
+ return call.resultNames.includes(value) || value === call.slice;
68
+ }
69
+
70
+ function wholeResultStringArrays(call) {
71
+ return assertionComparisons(call).flatMap(({ actual, expected }) => {
72
+ if (!actualWholeResult(call, actual)) return [];
73
+ const strings = exactStringArray(expected, call.strings);
74
+ return strings === undefined ? [] : [strings];
75
+ });
76
+ }
77
+
78
+ function callArgumentExpressions(call) {
79
+ const open = call.slice.indexOf("(");
80
+ const end = open >= 0 ? balancedEnd(call.slice, open) : -1;
81
+ return end > open ? splitTopLevel(call.slice.slice(open + 1, end - 1)) : [];
82
+ }
83
+
84
+ function exactPositiveInteger(expression) {
85
+ const value = String(expression ?? "").trim().replaceAll("_", "");
86
+ if (!/^[+]?[0-9]+$/.test(value)) return undefined;
87
+ const parsed = Number(value);
88
+ return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : undefined;
89
+ }
90
+
91
+ function arrayExpressionLength(call, expression) {
92
+ const value = String(expression ?? "").trim();
93
+ let array = value;
94
+ if (/^[a-z_$][a-z0-9_$]*$/i.test(value)) {
95
+ const pattern = new RegExp(`\\b(?:const|let|var)\\s+${escapeRegex(value)}\\s*=\\s*\\[`, "gi");
96
+ const declaration = [...call.prelude.matchAll(pattern)].at(-1);
97
+ if (!declaration) return undefined;
98
+ const open = call.prelude.indexOf("[", declaration.index + declaration[0].length - 1);
99
+ const end = balancedEnd(call.prelude, open, "[", "]");
100
+ if (end < 0) return undefined;
101
+ array = call.prelude.slice(open, end);
102
+ }
103
+ if (!(array.startsWith("[") && array.endsWith("]"))) return undefined;
104
+ const items = splitTopLevel(array.slice(1, -1));
105
+ return items.length === 1 && items[0] === "" ? 0 : items.length;
106
+ }
107
+
108
+ function declaredFunction(sourceEntries, profile, call) {
109
+ const binding = profile.bindings?.find((item) => item.testName === call.callable);
110
+ const name = binding?.sourceName ?? call.callable.split(".").at(-1);
111
+ const entries = binding
112
+ ? sourceEntries.filter((entry) => normalizePathCandidate(entry.path) === binding.sourcePath)
113
+ : sourceEntries;
114
+ const pattern = new RegExp(`\\bfunction\\s+${escapeRegex(name)}\\s*\\(([^)]*)\\)\\s*\\{`, "i");
115
+ for (const entry of entries) {
116
+ const match = pattern.exec(entry.text);
117
+ if (!match) continue;
118
+ const open = entry.text.indexOf("{", match.index + match[0].length - 1);
119
+ const end = balancedEnd(entry.text, open, "{", "}");
120
+ const parameters = match[1].split(",").map((item) => item.trim());
121
+ if (end > open && parameters.every((item) => /^[a-z_$][a-z0-9_$]*$/i.test(item))) {
122
+ return { body: entry.text.slice(open + 1, end - 1), parameters };
123
+ }
124
+ }
125
+ return undefined;
126
+ }
127
+
128
+ function returnExpressions(body) {
129
+ return [...String(body ?? "").matchAll(/\breturn\s+([\s\S]{1,1200}?);/gi)].map((match) => match[1]);
130
+ }
131
+
132
+ function sourceResultContract(body, idsRequired, capParameter) {
133
+ const idMap = /\.map\s*\(\s*(?:\(\s*)?([a-z_$][a-z0-9_$]*)\s*(?:\)\s*)?=>\s*(?:\{\s*return\s+)?\1\s*\.\s*id\b/i;
134
+ const cap = capParameter
135
+ ? new RegExp(`\\.slice\\s*\\(\\s*0\\s*,\\s*${escapeRegex(capParameter)}\\s*\\)`, "i")
136
+ : undefined;
137
+ return returnExpressions(body).some((expression) => (!idsRequired || idMap.test(expression)) && (!cap || cap.test(expression)));
138
+ }
139
+
140
+ export function acceptanceResultContractEvidence(rawCriterion, profiles, sourceEntries, contextText) {
141
+ if (/^otherwise\s+return\b/i.test(String(rawCriterion).trim())) return finiteIntervalFallbackEvidence({ rawCriterion, profiles, sourceEntries, contextText });
142
+ const text = String(rawCriterion ?? "").toLowerCase();
143
+ const idsRequired = /\breturn(?:s|ed)?\s+only\b[^.;]{0,80}\bids?\b/.test(text);
144
+ const capParameter = String(rawCriterion ?? "").match(/\bcapped\s+at\s+`?([a-z_$][a-z0-9_$]*)`?/i)?.[1];
145
+ if (!idsRequired && !capParameter) return undefined;
146
+ return profiles.some((profile) => profile.calls.some((call) => {
147
+ const callable = declaredFunction(sourceEntries, profile, call);
148
+ if (!callable) return false;
149
+ const expectedArrays = wholeResultStringArrays(call);
150
+ if (!sourceResultContract(callable.body, idsRequired, capParameter) || (idsRequired && expectedArrays.length === 0)) return false;
151
+ if (!capParameter) return true;
152
+ const parameterIndex = callable.parameters.indexOf(capParameter);
153
+ const args = callArgumentExpressions(call);
154
+ const cap = parameterIndex >= 0 ? exactPositiveInteger(args[parameterIndex]) : undefined;
155
+ const inputLength = arrayExpressionLength(call, args[0]);
156
+ return cap !== undefined && inputLength !== undefined && inputLength > cap
157
+ && expectedArrays.some((expected) => expected.length === cap);
158
+ }));
159
+ }
@@ -0,0 +1,214 @@
1
+ import path from "node:path";
2
+ import { parse } from "@babel/parser";
3
+
4
+ const cache = new Map();
5
+ const MAX_SOURCE_LENGTH = 64_000, MAX_NODES = 12_000, MAX_CACHE_ENTRIES = 32;
6
+ const modulePath = value => path.posix.normalize(String(value).replace(/\\/g, "/"));
7
+ const callable = node => ["FunctionExpression", "ArrowFunctionExpression"].includes(node?.type);
8
+ const nameOf = node => node?.type === "Identifier" ? node.name
9
+ : node?.type === "PrivateName" ? node.id.name
10
+ : ["StringLiteral", "NumericLiteral"].includes(node?.type) ? String(node.value) : null;
11
+ const bindingNames = node => node?.type === "Identifier" ? [node.name]
12
+ : node?.type === "ObjectPattern" ? node.properties.flatMap(item => bindingNames(item.type === "RestElement" ? item.argument : item.value))
13
+ : node?.type === "ArrayPattern" ? node.elements.flatMap(bindingNames)
14
+ : node?.type === "AssignmentPattern" ? bindingNames(node.left)
15
+ : node?.type === "RestElement" ? bindingNames(node.argument) : [];
16
+
17
+
18
+ // A computed store of a plain record into a function-local fresh copy does
19
+ // not introduce a callable origin under that dynamic key. Its child members
20
+ // are still inventoried normally. This classifies origin only, not behavior.
21
+ function localRecordStore(node, enclosing, ast) {
22
+ if (node.operator !== "=" || !node.left.computed || node.right.type !== "ObjectExpression"
23
+ || node.right.properties.some(item => item.type !== "ObjectProperty" || item.computed || item.method)) return false;
24
+ let receiver = node.left.object;
25
+ while (receiver?.type === "MemberExpression" && !receiver.computed) {
26
+ if (["constructor", "prototype", "__proto__"].includes(receiver.property.name)) return false;
27
+ receiver = receiver.object;
28
+ }
29
+ if (receiver?.type !== "Identifier" || ["module", "exports", "global", "globalThis", "Object", "Function"].includes(receiver.name)) return false;
30
+ const fn = [...enclosing].reverse().find(item => ["FunctionDeclaration", "FunctionExpression", "ArrowFunctionExpression", "ObjectMethod", "ClassMethod"].includes(item.type));
31
+ if (!fn || fn.async || fn.generator || fn.body.type !== "BlockStatement" || fn.params.some(item => bindingNames(item).includes(receiver.name))) return false;
32
+ const declarations = fn.body.body.filter(item => item.type === "VariableDeclaration" && item.kind === "const")
33
+ .flatMap(item => item.declarations).filter(item => item.id.type === "Identifier" && item.id.name === receiver.name && item.end < node.start);
34
+ if (declarations.length !== 1) return false;
35
+ const declaration = declarations[0], value = declaration.init;
36
+ const cloned = value?.type === "CallExpression" && value.callee.type === "Identifier" && value.callee.name === "structuredClone"
37
+ && value.arguments.length === 1 && value.arguments[0].type === "Identifier" && fn.params.some(item => item.type === "Identifier" && item.name === value.arguments[0].name);
38
+ if (!cloned && !(value?.type === "ObjectExpression" && value.properties.length === 0)) return false;
39
+ let count = 0, valid = true;
40
+ const inspect = (item, parent, local, depth = 0) => {
41
+ if (!item || typeof item.type !== "string") return;
42
+ if (++count > MAX_NODES || depth > 128) throw new Error("source-origin-local-store-budget");
43
+ const inside = local || item === fn;
44
+ if (inside && item.type === "VariableDeclarator" && item !== declaration && bindingNames(item.id).includes(receiver.name)) valid = false;
45
+ if (inside && item !== fn && /Function|Method|Class/.test(item.type) && (item.id?.name === receiver.name || item.params?.some(param => bindingNames(param).includes(receiver.name)))) valid = false;
46
+ if (inside && item.type === "CatchClause" && bindingNames(item.param).includes(receiver.name)) valid = false;
47
+ if (inside && ["AssignmentExpression", "UpdateExpression"].includes(item.type) && bindingNames(item.left ?? item.argument).includes(receiver.name)) valid = false;
48
+ if (cloned && item.type === "Identifier" && item.name === "structuredClone"
49
+ && !(parent?.type === "CallExpression" && parent.callee === item && parent.arguments.length === 1)) valid = false;
50
+ for (const [key, child] of Object.entries(item)) {
51
+ if (["loc", "start", "end", "extra", "comments", "tokens", "errors"].includes(key)) continue;
52
+ if (Array.isArray(child)) child.forEach(part => inspect(part, item, inside, depth + 1));
53
+ else if (child && typeof child === "object") inspect(child, item, inside, depth + 1);
54
+ }
55
+ };
56
+ inspect(ast, null, false);
57
+ return valid;
58
+ }
59
+
60
+ // Parse syntax only: never load project modules, run configuration, or evaluate
61
+ // initializers. Cache compact origin records, not ASTs or acceptance results.
62
+ function sourceOrigins(entry) {
63
+ if (typeof entry.text !== "string" || entry.text.length > MAX_SOURCE_LENGTH) return null;
64
+ const extension = path.posix.extname(entry.path).toLowerCase();
65
+ const key = `${extension}\0${entry.text}`;
66
+ if (cache.has(key)) return cache.get(key);
67
+ let result = null;
68
+ try {
69
+ const plugins = /\.[cm]?tsx?$/.test(extension) ? ["typescript"] : [];
70
+ if (!/\.[cm]?ts$/.test(extension)) plugins.push("jsx");
71
+ const ast = parse(entry.text, { sourceType: "unambiguous", plugins,
72
+ errorRecovery: false, attachComment: false, allowReturnOutsideFunction: false });
73
+ const origins = [], exportEdges = [], exportObjects = new Set(), seen = new Set();
74
+ let count = 0, localStoreChecks = 0, unresolvedComputedMember = false, commonJsSeen = false, commonJsRebound = false;
75
+ const add = (name, kind, node, topLevel = false, referenceName = null) => {
76
+ if (typeof name !== "string") { unresolvedComputedMember = true; return; }
77
+ const identity = `${name}\0${node.start}\0${node.end}`;
78
+ if (seen.has(identity)) return;
79
+ seen.add(identity);
80
+ origins.push(Object.freeze({ name, kind, start: node.start, end: node.end, topLevel, referenceName }));
81
+ };
82
+ const memberPath = node => node?.type === "Identifier" ? [node.name]
83
+ : node?.type === "MemberExpression" && (!node.computed || node.property.type === "StringLiteral")
84
+ ? [...(memberPath(node.object) ?? []), nameOf(node.property)] : null;
85
+ const commonJsExport = node => {
86
+ const names = memberPath(node);
87
+ if (names?.[0] === "exports" && names.length === 2) return names[1];
88
+ if (names?.[0] === "module" && names[1] === "exports" && names.length <= 3) return names[2] ?? "default";
89
+ return null;
90
+ };
91
+ for (const statement of ast.program.body) {
92
+ if (statement.type === "ExportNamedDeclaration") {
93
+ if (statement.source) unresolvedComputedMember = true;
94
+ else if (statement.declaration?.id) exportEdges.push({ exportName: statement.declaration.id.name, localName: statement.declaration.id.name });
95
+ else if (statement.declaration?.type === "VariableDeclaration") {
96
+ for (const declaration of statement.declaration.declarations) {
97
+ if (declaration.id.type === "Identifier") exportEdges.push({ exportName: declaration.id.name, localName: declaration.id.name });
98
+ }
99
+ } else for (const specifier of statement.specifiers) {
100
+ if (specifier.type === "ExportSpecifier") exportEdges.push({ exportName: nameOf(specifier.exported), localName: specifier.local.name });
101
+ }
102
+ }
103
+ if (statement.type === "ExportDefaultDeclaration") {
104
+ const localName = statement.declaration.id?.name ?? (statement.declaration.type === "Identifier" ? statement.declaration.name : null);
105
+ if (localName) exportEdges.push({ exportName: "default", localName });
106
+ }
107
+ const assignment = statement.type === "ExpressionStatement" ? statement.expression : null;
108
+ const exportedName = assignment?.type === "AssignmentExpression" ? commonJsExport(assignment.left) : null;
109
+ if (exportedName !== null) {
110
+ commonJsSeen = true;
111
+ if (assignment.operator !== "=") unresolvedComputedMember = true;
112
+ else if (assignment.right.type === "Identifier") exportEdges.push({ exportName: exportedName, localName: assignment.right.name });
113
+ else if (exportedName === "default" && assignment.right.type === "ObjectExpression") {
114
+ exportObjects.add(assignment.right);
115
+ for (const property of assignment.right.properties) {
116
+ const exportName = property.computed && property.key?.type !== "StringLiteral" ? null : nameOf(property.key);
117
+ if (property.type !== "ObjectProperty" || !exportName || property.value.type !== "Identifier") unresolvedComputedMember = true;
118
+ else exportEdges.push({ exportName, localName: property.value.name });
119
+ }
120
+ } else unresolvedComputedMember = true;
121
+ }
122
+ }
123
+ const visit = (node, parent, ancestors, depth = 0) => {
124
+ if (!node || typeof node.type !== "string") return;
125
+ if (++count > MAX_NODES || depth > 128) throw new Error("source-origin-budget");
126
+ const enclosing = [...ancestors, parent].filter(Boolean);
127
+ const topLevel = enclosing.every(item => ["File", "Program", "ExportNamedDeclaration",
128
+ "ExportDefaultDeclaration", "VariableDeclaration"].includes(item.type));
129
+ if (node.type === "FunctionDeclaration" && node.id) add(node.id.name, "function", node, topLevel);
130
+ if (node.type === "TSDeclareFunction" && node.id) add(node.id.name, "declaration-only", node, topLevel);
131
+ if (node.type === "ClassDeclaration" && node.id) add(node.id.name, "class", node, topLevel);
132
+ if (node.type === "VariableDeclarator") {
133
+ for (const name of bindingNames(node.id)) {
134
+ add(name, node.id.type === "Identifier" && callable(node.init) ? "function" : "binding", node.init ?? node, topLevel);
135
+ }
136
+ }
137
+ if (node.type === "FunctionExpression" && node.id
138
+ && !(parent?.type === "VariableDeclarator" && parent.id.name === node.id.name)) add(node.id.name, "nested-function", node);
139
+ if (["ObjectMethod", "ClassMethod", "ClassPrivateMethod", "ObjectProperty", "ClassProperty", "ClassPrivateProperty"].includes(node.type)) {
140
+ const name = node.computed && node.key.type !== "StringLiteral" && node.key.type !== "NumericLiteral" ? null : nameOf(node.key);
141
+ if (!exportObjects.has(parent)) {
142
+ const reference = node.value?.type === "Identifier" ? node.value.name : null;
143
+ const rootObject = enclosing.every(item => ["File", "Program", "ExportNamedDeclaration", "VariableDeclaration", "VariableDeclarator", "ObjectExpression"].includes(item.type));
144
+ add(name, reference ? "member-reference" : node.type.endsWith("Method") || callable(node.value) ? "method" : "property", node, rootObject, reference);
145
+ }
146
+ }
147
+ if (node.type === "AssignmentExpression") {
148
+ if (bindingNames(node.left).some(name => ["module", "exports"].includes(name))) commonJsRebound = true;
149
+ const cjs = commonJsExport(node.left);
150
+ const rootAssignment = enclosing.every(item => ["File", "Program", "ExpressionStatement"].includes(item.type));
151
+ if (cjs !== null && !rootAssignment) unresolvedComputedMember = true;
152
+ if (cjs === null && node.left.type === "MemberExpression") {
153
+ const name = node.left.computed && node.left.property.type !== "StringLiteral" ? null : nameOf(node.left.property);
154
+ if (name !== null || localStoreChecks++ >= 32 || !localRecordStore(node, enclosing, ast)) add(name, "member-assignment", node);
155
+ }
156
+ }
157
+ if (node.type === "ExportAllDeclaration") unresolvedComputedMember = true;
158
+ for (const [key, value] of Object.entries(node)) {
159
+ if (["loc", "start", "end", "extra", "comments", "tokens", "errors"].includes(key)) continue;
160
+ if (Array.isArray(value)) for (const item of value) visit(item, node, enclosing, depth + 1);
161
+ else if (value && typeof value === "object") visit(value, node, enclosing, depth + 1);
162
+ }
163
+ };
164
+ visit(ast, null, []);
165
+ if (commonJsSeen && (commonJsRebound || origins.some(origin => origin.topLevel && ["module", "exports"].includes(origin.name)))) unresolvedComputedMember = true;
166
+ result = Object.freeze({ origins: Object.freeze(origins), exportEdges: Object.freeze(exportEdges.map(Object.freeze)), unresolvedComputedMember });
167
+ } catch { /* Unsupported or malformed syntax has no source-origin authority. */ }
168
+ if (cache.size >= MAX_CACHE_ENTRIES) cache.delete(cache.keys().next().value);
169
+ cache.set(key, result);
170
+ return result;
171
+ }
172
+
173
+ /** Route names to existing proof engines by unique source origin, never by a
174
+ * corpus-wide export-name match alone. This does not prove runtime behavior. */
175
+ export function routeNamedSourceTargets({ namedTargets, provenanceTargets, sourceEntries, exports, taskText = "" }) {
176
+ if (namedTargets.length === 0 || sourceEntries.length === 0) return {
177
+ strictTargets: namedTargets.filter(name => provenanceTargets.has(name)),
178
+ structuralTargets: namedTargets.filter(name => !provenanceTargets.has(name)), unresolvedTargets: [], routes: []
179
+ };
180
+ const entries = sourceEntries.map(entry => ({ path: modulePath(entry.path), inventory: sourceOrigins(entry) }));
181
+ const incomplete = entries.some(entry => !entry.inventory || entry.inventory.unresolvedComputedMember);
182
+ const origins = entries.flatMap(entry => (entry.inventory?.origins ?? []).map(origin => ({ ...origin, path: entry.path })));
183
+ const explicitPaths = [...new Set((String(taskText).match(/[^\s`"'<>()[\]{}:,;!?=]+\.[cm]?[jt]sx?\b/g) ?? []).map(modulePath))];
184
+ const routes = namedTargets.map(target => {
185
+ const exported = exports.filter(item => item.contractName === target);
186
+ const candidates = origins.filter(origin => origin.name.toLowerCase() === target || exported.some(binding =>
187
+ modulePath(binding.sourcePath) === origin.path && binding.sourceName === origin.name.toLowerCase()));
188
+ const distinct = candidates.filter(origin => origin.kind !== "member-reference" || !origin.topLevel
189
+ || !candidates.some(other => other.kind === "function" && other.topLevel && other.path === origin.path
190
+ && other.name === origin.referenceName && origin.name === other.name));
191
+ const unresolved = reason => ({ target, kind: "unresolved", reason });
192
+ if (incomplete) return unresolved("source-origin-inventory-incomplete");
193
+ if (distinct.length !== 1 || exported.length > 1) return unresolved("source-origin-ambiguous-or-missing");
194
+ const origin = distinct[0];
195
+ if (explicitPaths.length > 1) return unresolved("criterion-module-ambiguous");
196
+ if (explicitPaths.length === 1 && explicitPaths[0] !== origin.path) return unresolved("criterion-module-mismatch");
197
+ if (exported.length === 1) {
198
+ const binding = exported[0];
199
+ if (origin.kind !== "function" || !origin.topLevel || modulePath(binding.sourcePath) !== origin.path
200
+ || binding.sourceName !== origin.name.toLowerCase()) return unresolved("export-does-not-own-source-origin");
201
+ const owned = entries.find(entry => entry.path === origin.path).inventory.exportEdges.some(edge =>
202
+ edge.localName === origin.name && edge.exportName?.toLowerCase() === binding.exportName);
203
+ if (!owned) return unresolved("export-does-not-own-source-origin");
204
+ return { target, kind: "export", origin };
205
+ }
206
+ if (origin.kind === "method" && !provenanceTargets.has(target)) return { target, kind: "structural", origin };
207
+ return unresolved("source-origin-not-an-exported-callable");
208
+ });
209
+ return {
210
+ strictTargets: routes.filter(route => route.kind === "export").map(route => route.target),
211
+ structuralTargets: routes.filter(route => route.kind === "structural").map(route => route.target),
212
+ unresolvedTargets: routes.filter(route => route.kind === "unresolved").map(route => route.target), routes
213
+ };
214
+ }
@@ -1,3 +1,4 @@
1
+ import { boundedTopLevelStatements } from "./acceptance-callable-scanner.js";
1
2
  import { rejectionStatementErrorClass } from "./acceptance-error-classes.js";
2
3
 
3
4
  function escapeRegex(value) {
@@ -163,6 +164,7 @@ function preLoopStatementsProven(text, offset, carrier) {
163
164
  let prefix = text.slice(0, offset), escaped = escapeRegex(carrier);
164
165
  prefix = prefix.replace(new RegExp(`\\bconst\\s+${escaped}\\s*=\\s*string\\s*\\(\\s*[a-z_$][a-z0-9_$]*\\s*\\)\\s*(?:;|(?=\\r?\\n))`, "gi"), " ");
165
166
  prefix = prefix.replace(/\b(?:let|var)\s+[a-z_$][a-z0-9_$]*(?:\s*:\s*(?:boolean|string))?\s*=\s*(?:false|__pi_empty_string_literal__)\s*(?:;|(?=\r?\n))/gi, " ");
167
+ prefix = prefix.replace(/\b(?:const|let)\s+[a-z_$][a-z0-9_$]*\s*=\s*\[\s*\]\s*(?:;|(?=\r?\n))/gi, " ");
166
168
  return /^[\s;]*$/.test(prefix);
167
169
  }
168
170
 
@@ -326,11 +328,12 @@ function counterFlowProven(text, loop, ranges, state, truthyOffset) {
326
328
  for (const relativeOffset of directBindingMutations(bodyText, loop.counter)) {
327
329
  const offset = loop.start + relativeOffset;
328
330
  if (!new RegExp(`^${escapeRegex(loop.counter)}\\s*(?:\\+\\+|\\+=\\s*1)\\s*(?:;|(?=\\r?\\n|}))`, "i").test(text.slice(offset))) return false;
329
- if (offset >= truthyOffset) continue;
331
+
330
332
  const ancestors = ranges.filter((range) => offset >= range.start && offset < range.end);
331
333
  const stateGuard = ancestors.some((range) => new RegExp(`^${escapeRegex(state)}(?:\\s*={2,3}\\s*true)?$`, "i").test(stripOuterParentheses(range.condition)));
332
334
  const nextQuote = ancestors.some((range) => new RegExp(`\\b${escapeRegex(loop.carrier)}\\b\\s*\\[\\s*${escapeRegex(loop.counter)}\\s*\\+\\s*1\\s*\\]\\s*={3}\\s*__pi_double_quote_string_literal__`, "i").test(range.condition));
333
- if ((!stateGuard || !nextQuote) && !initiallyFalseAuxiliaryGuard(text, loop, ranges, ancestors, state)) return false;
335
+ const nonQuoteSkip = ancestors.some(range => nonQuoteInputCondition(range.condition, loop, true));
336
+ if ((!stateGuard || !nextQuote) && !nonQuoteSkip && !initiallyFalseAuxiliaryGuard(text, loop, ranges, ancestors, state)) return false;
334
337
  }
335
338
  return true;
336
339
  }
@@ -341,7 +344,9 @@ function priorSiblingControlProven(text, loop, ranges, state, truthyOffset) {
341
344
  && braceDepthAt(loopText, item.conditionStart - loop.start) === 0)) {
342
345
  if (truthyOffset >= range.start && truthyOffset < range.end) continue;
343
346
  if (text[range.start] === "{" && statePattern.test(stripOuterParentheses(range.condition))
344
- && !/^\s*else\b/i.test(text.slice(range.end))) continue;
347
+ && (!/^\s*else\b/i.test(text.slice(range.end))
348
+ || ranges.some(next => next.conditionStart > range.end && truthyOffset >= next.start && truthyOffset < next.end
349
+ && /^\s*else\s*$/i.test(text.slice(range.end, next.conditionStart)) && quoteInputGuard(next.condition, loop)))) continue;
345
350
  return false;
346
351
  }
347
352
  return true;
@@ -362,12 +367,33 @@ function statementFragmentProven(raw, loop) {
362
367
  if (loop.counter && new RegExp(`^(?:${escapeRegex(loop.counter)}\\s*(?:\\+\\+|\\+=\\s*1)|\\+\\+\\s*${escapeRegex(loop.counter)})$`, "i").test(value)) return true;
363
368
  if (loop.booleanBindings.some((name) => new RegExp(`^${escapeRegex(name)}\\s*=\\s*(?:true|false)$`, "i").test(value))) return true;
364
369
  if (inputs && loop.emptyAccumulators.some((name) => new RegExp(`^${escapeRegex(name)}\\s*\\+=\\s*(?:${inputs})$`, "i").test(value))) return true;
370
+ if (loop.emptyAccumulators.some(name => new RegExp(`^${escapeRegex(name)}\\s*=\\s*__pi_empty_string_literal__$`, "i").test(value)
371
+ || new RegExp(`^${escapeRegex(name)}\\s*\\+=\\s*__pi_double_quote_string_literal__$`, "i").test(value))) return true;
372
+ if (loop.resettableArrays.some(name => new RegExp(`^${escapeRegex(name)}\\s*=\\s*\\[\\s*\\]$`, "i").test(value))) return true;
373
+ if (ownedArrayPushPattern(loop, true).test(value)) return true;
365
374
  return Boolean(loop.counter && loop.items.some((name) => new RegExp(`^const\\s+${escapeRegex(name)}\\s*=\\s*${carrierItem}$`, "i").test(value)));
366
375
  }
367
376
 
377
+ function ownedArrayPushPattern(loop, anchored = false) {
378
+ const arrays = loop.arrayBindings.map(escapeRegex).join("|");
379
+ const values = [...loop.arrayBindings, ...loop.emptyAccumulators].map(escapeRegex).join("|");
380
+ return arrays && values ? new RegExp(`${anchored ? "^" : "\\b"}(?:${arrays})\\.push\\s*\\(\\s*(?:${values})\\s*\\)${anchored ? "$" : ""}`, "gi") : /(?!) /;
381
+ }
382
+
383
+ function nonQuoteInputCondition(raw, loop, requireLookahead = false) {
384
+ const value = stripOuterParentheses(raw), parts = value.split(requireLookahead ? /\s*&&\s*/ : /\s*(?:&&|\|\|)\s*/);
385
+ const current = [...loop.items.map(escapeRegex), ...(loop.counter ? [`${escapeRegex(loop.carrier)}\\s*\\[\\s*${escapeRegex(loop.counter)}\\s*\\]`] : [])].join("|");
386
+ const next = loop.counter ? `${escapeRegex(loop.carrier)}\\s*\\[\\s*${escapeRegex(loop.counter)}\\s*\\+\\s*1\\s*\\]` : "(?!)";
387
+ const literal = "__pi_(?:(?:whitespace|empty)_)?string_literal__";
388
+ const isCurrent = part => new RegExp(`^(?:${current})\\s*===\\s*${literal}$`, "i").test(stripOuterParentheses(part));
389
+ const isNext = part => new RegExp(`^${next}\\s*===\\s*${literal}$`, "i").test(stripOuterParentheses(part));
390
+ return parts.length > 0 && parts.length <= 4 && parts.every(part => isCurrent(part) || isNext(part))
391
+ && parts.some(isCurrent) && (!requireLookahead || parts.length === 2 && parts.some(isNext));
392
+ }
393
+
368
394
  function loopStatementsProven(loopBody, loop) {
369
395
  if (/\b(?:break|delete|new|return|throw|typeof|void)\b/i.test(loopBody)) return false;
370
- if (/\b(?!if\b)[a-z_$][a-z0-9_$]*\s*(?:\?\.\s*)?\(|\b[a-z_$][a-z0-9_$]*\s*__pi_template_literal__|[\])]\s*(?:\?\.\s*)?\(/i.test(loopBody)) return false;
396
+ if (/\b(?!if\b)[a-z_$][a-z0-9_$]*\s*(?:\?\.\s*)?\(|\b[a-z_$][a-z0-9_$]*\s*__pi_template_literal__|[\])]\s*(?:\?\.\s*)?\(/i.test(loopBody.replace(ownedArrayPushPattern(loop), ""))) return false;
371
397
  for (const match of loopBody.matchAll(/;/g)) {
372
398
  const start = Math.max(loopBody.lastIndexOf(";", match.index - 1), loopBody.lastIndexOf("{", match.index - 1), loopBody.lastIndexOf("}", match.index - 1)) + 1;
373
399
  if (!statementFragmentProven(loopBody.slice(start, match.index), loop)) return false;
@@ -395,12 +421,34 @@ function loopConditionsProven(ranges, loop, state) {
395
421
  return ranges.every((range) => {
396
422
  const condition = stripOuterParentheses(range.condition);
397
423
  if (!sideEffectFreeCondition(condition)) return false;
398
- if (statePattern.test(condition) || quoteInputGuard(condition, loop)) return true;
424
+ if (statePattern.test(condition) || quoteInputGuard(condition, loop) || nonQuoteInputCondition(condition, loop)) return true;
425
+ const quoteParts = topLevelParts(condition.replaceAll("&&", "\u0000"), "\u0000");
426
+ if (quoteParts.length === 2 && quoteInputGuard(quoteParts[0], loop) && next
427
+ && new RegExp(`^${next}\\s*===\\s*${quote}$`, "i").test(stripOuterParentheses(quoteParts[1]))) return true;
399
428
  if (next && new RegExp(`^(?:${next}\\s*={3}\\s*${quote}|${quote}\\s*={3}\\s*${next})$`, "i").test(condition)) return true;
400
429
  return loop.booleanBindings.some((name) => name !== state && new RegExp(`^(?:!\\s*${escapeRegex(name)}|${escapeRegex(name)}(?:\\s*={2,3}\\s*(?:true|false))?)$`, "i").test(condition));
401
430
  });
402
431
  }
403
432
 
433
+ function escapedQuoteBranchProven(text, loop, ranges, state, transitions) {
434
+ const truthy = transitions.find(item => item?.write.value === "true"), falsy = transitions.find(item => item?.write.value === "false");
435
+ if (!truthy || !falsy) return false;
436
+ const next = loop.counter && new RegExp(`\\b${escapeRegex(loop.carrier)}\\s*\\[\\s*${escapeRegex(loop.counter)}\\s*\\+\\s*1\\s*\\]\\s*===\\s*__pi_double_quote_string_literal__`, "i");
437
+ const escapeRanges = next ? ranges.filter(range => next.test(range.condition)) : [];
438
+ const fieldOpening = loop.emptyAccumulators.some(name => new RegExp(`\\b${escapeRegex(name)}\\b`, "i").test(truthy.immediate.condition));
439
+ if (!escapeRanges.length) return !fieldOpening;
440
+ if (escapeRanges.length !== 1) return false;
441
+ const escape = escapeRanges[0], ancestors = ranges.filter(range => escape.conditionStart >= range.start && escape.end <= range.end);
442
+ if (!ancestors.some(range => new RegExp(`^${escapeRegex(state)}(?:\\s*={2,3}\\s*true)?$`, "i").test(stripOuterParentheses(range.condition)))
443
+ || ![...ancestors, escape].some(range => quoteInputGuard(range.condition.split("&&")[0], loop))) return false;
444
+ const raw = text.slice(escape.start, escape.end).trim().replace(/^\{\s*|\s*\}$/g, "");
445
+ const fields = loop.emptyAccumulators.map(escapeRegex).join("|");
446
+ const append = fields ? `(?:(?:${fields})\\s*\\+=\\s*__pi_double_quote_string_literal__\\s*;\\s*)?` : "";
447
+ if (!new RegExp(`^${append}${escapeRegex(loop.counter)}\\s*(?:\\+\\+|\\+=\\s*1)\\s*;?\\s*$`, "i").test(raw)) return false;
448
+ return /^\s*else\s*$/i.test(text.slice(escape.end, falsy.immediate.conditionStart))
449
+ || /^\s*else\s*(?:\{\s*)?$/i.test(text.slice(escape.end, falsy.offset));
450
+ }
451
+
404
452
  function transitionShapeProven(text, transitions) {
405
453
  const truthy = transitions.find((item) => item.write.value === "true");
406
454
  const falsy = transitions.find((item) => item.write.value === "false");
@@ -442,8 +490,9 @@ function truthyTransitionTailProven(text, loop, transition) {
442
490
  // Prove only one narrow terminal state-machine rejection shape. Callers must
443
491
  // still establish stable exports/imports, live assertions, error constructors,
444
492
  // the exact current verifier, and a current-tree changed source/test corpus.
445
- export function statefulTerminalRejectionEvidence(body, parameters, requestedErrors, contractText, targetName, sourceCode) {
446
- if (!affirmativeQuotedTerminalContract(contractText, targetName)) return false;
493
+ export function statefulTerminalRejectionEvidence(body, parameters, requestedErrors, contractText, targetName, sourceCode, uniqueExportBinding = false) {
494
+ const implicitContract = uniqueExportBinding && /^\s*(?:(?:must|shall|should)\s+)?(?:throw|raise)\s+`?SyntaxError`?\s+for\s+(?:an?\s+)?unterminated\s+quoted?\s+field[.!]?\s*$/i.test(String(contractText ?? ""));
495
+ if (!implicitContract && !affirmativeQuotedTerminalContract(contractText, targetName)) return false;
447
496
  const loops = [];
448
497
  for (const match of body.matchAll(/\bfor\s*\(/gi)) {
449
498
  if (braceDepthAt(body, match.index) !== 0 || priorUnconditionalExit(body, match.index) || topLevelControlBefore(body, match.index)) continue;
@@ -471,7 +520,13 @@ export function statefulTerminalRejectionEvidence(body, parameters, requestedErr
471
520
  .filter((item) => braceDepthAt(body, item.index) === 0).map((item) => item[1].toLowerCase());
472
521
  const booleanBindings = [...body.slice(0, match.index).matchAll(/\b(?:let|var)\s+([a-z_$][a-z0-9_$]*)(?:\s*:\s*boolean)?\s*=\s*false\s*(?:;|(?=\r?\n))/gi)]
473
522
  .filter((item) => braceDepthAt(body, item.index) === 0).map((item) => item[1].toLowerCase());
474
- const loop = { ...evidence, start: bodyStart + 1, end: bodyEnd - 1, items: [...new Set(items)], inputNames: [...new Set(inputNames)], emptyAccumulators, booleanBindings };
523
+ const arrayBindings = [...body.slice(0, match.index).matchAll(/\b(?:const|let)\s+([a-z_$][a-z0-9_$]*)\s*=\s*\[\s*\]\s*(?:;|(?=\r?\n))/gi)]
524
+ .filter(item => braceDepthAt(body, item.index) === 0).map(item => item[1].toLowerCase());
525
+ // Local array calls rely on ordinary inherited methods; abstain on module initialization effects.
526
+ const module = arrayBindings.length > 0 ? boundedTopLevelStatements(sourceCode) : null;
527
+ if (module && (!module.complete || module.statements.some(item => item.kind !== "function-declaration"))) continue;
528
+ const resettableArrays = arrayBindings.filter(name => new RegExp(`\\blet\\s+${escapeRegex(name)}\\s*=`, "i").test(body.slice(0, match.index)));
529
+ const loop = { ...evidence, start: bodyStart + 1, end: bodyEnd - 1, items: [...new Set(items)], inputNames: [...new Set(inputNames)], emptyAccumulators, booleanBindings, arrayBindings, resettableArrays };
475
530
  if (loopStatementsProven(loopBody, loop)) loops.push(loop);
476
531
  }
477
532
  if (loops.length === 0) return false;
@@ -494,6 +549,7 @@ export function statefulTerminalRejectionEvidence(body, parameters, requestedErr
494
549
  const truthyOffset = writes.find((item) => item.write.value === "true").offset;
495
550
  const truthyTransition = transitions.find((item) => item?.write.value === "true");
496
551
  if (!loopConditionsProven(ranges, loop, state) || transitions.some((item) => !item) || !transitionShapeProven(body, transitions)
552
+ || !escapedQuoteBranchProven(body, loop, ranges, state, transitions)
497
553
  || !counterFlowProven(body, loop, ranges, state, truthyOffset)
498
554
  || !priorSiblingControlProven(body, loop, ranges, state, truthyOffset)
499
555
  || !truthyTransitionTailProven(body, loop, truthyTransition)) continue;