@principles/core 1.73.0

package/dist/runtime-v2/internalization/refiner-rulehost-gate.js

@@ -0,0 +1,151 @@
+const EMPTY_SANDBOX_RESULT = {
+    success: false,
+    failedCases: [],
+    executionTimeMs: 0,
+    forbiddenPatternViolations: [],
+};
+function safeErrorMessage(err) {
+    if (err instanceof Error) {
+        return err.message;
+    }
+    if (err === null) {
+        return 'null';
+    }
+    if (err === undefined) {
+        return 'undefined';
+    }
+    if (typeof err === 'string') {
+        return err;
+    }
+    if (typeof err === 'number' || typeof err === 'boolean' || typeof err === 'bigint') {
+        return String(err);
+    }
+    if (typeof err === 'symbol') {
+        return err.toString();
+    }
+    try {
+        return JSON.stringify(err) ?? String(err);
+    }
+    catch {
+        return '[unserializable]';
+    }
+}
+function sandboxFailureFromThrow(err) {
+    const message = safeErrorMessage(err);
+    const errorType = err instanceof Error ? 'runtime_error' : 'unknown';
+    return {
+        success: false,
+        failedCases: [{ caseId: '__sandbox__', errorType, message }],
+        executionTimeMs: 0,
+        forbiddenPatternViolations: [],
+    };
+}
+function invokeSandboxSafe(deps, args) {
+    try {
+        return { result: deps.evaluateInSandbox(args.code, args.goldenTrace, args.opts), threw: false };
+    }
+    catch (err) {
+        return { result: sandboxFailureFromThrow(err), threw: true };
+    }
+}
+export function evaluateRefinerRuleHostGate(input, deps) {
+    const reasons = [];
+    if (input.requestedMode === 'live') {
+        reasons.push('requestedMode=live is not supported in PRI-173; applicationMode forced to shadow');
+    }
+    if (input.goldenTrace.cases.length === 0) {
+        return {
+            decision: 'rejected_no_cases',
+            applicationMode: 'shadow',
+            sandboxResult: EMPTY_SANDBOX_RESULT,
+            reasons: ['goldenTrace.cases is empty — no test cases to validate against', ...reasons],
+        };
+    }
+    const sandboxOpts = input.softTimeoutMs !== undefined ? { softTimeoutMs: input.softTimeoutMs } : undefined;
+    const sandboxOutcome = invokeSandboxSafe(deps, { code: input.code, goldenTrace: input.goldenTrace, opts: sandboxOpts });
+    if (sandboxOutcome.threw) {
+        return {
+            decision: 'rejected_runtime_error',
+            applicationMode: 'shadow',
+            sandboxResult: sandboxOutcome.result,
+            reasons: ['sandbox adapter failure: evaluateInSandbox threw', ...reasons],
+        };
+    }
+    const sandboxResult = sandboxOutcome.result;
+    if (sandboxResult.forbiddenPatternViolations.length > 0) {
+        return {
+            decision: 'rejected_forbidden_pattern',
+            applicationMode: 'shadow',
+            sandboxResult,
+            reasons: [
+                `forbidden patterns detected: ${sandboxResult.forbiddenPatternViolations.join(', ')}`,
+                ...reasons,
+            ],
+        };
+    }
+    if (sandboxResult.failedCases.length === 0) {
+        if (!sandboxResult.success) {
+            return {
+                decision: 'rejected_runtime_error',
+                applicationMode: 'shadow',
+                sandboxResult,
+                reasons: ['sandbox reported success=false with no failedCases or forbiddenPatternViolations — fail closed', ...reasons],
+            };
+        }
+        return {
+            decision: 'accepted_shadow',
+            applicationMode: 'shadow',
+            sandboxResult,
+            reasons,
+        };
+    }
+    const errorTypes = new Set(sandboxResult.failedCases.map((c) => c.errorType));
+    if (errorTypes.has('timeout')) {
+        const timeoutCases = sandboxResult.failedCases.filter((c) => c.errorType === 'timeout');
+        return {
+            decision: 'rejected_timeout',
+            applicationMode: 'shadow',
+            sandboxResult,
+            reasons: [
+                ...timeoutCases.map((c) => `case ${c.caseId}: timeout — ${c.message}`),
+                ...reasons,
+            ],
+        };
+    }
+    const runtimeErrorTypes = new Set(['runtime_error', 'syntax_error', 'unknown']);
+    const hasRuntimeError = [...errorTypes].some((t) => runtimeErrorTypes.has(t));
+    if (hasRuntimeError) {
+        const runtimeCases = sandboxResult.failedCases.filter((c) => runtimeErrorTypes.has(c.errorType));
+        return {
+            decision: 'rejected_runtime_error',
+            applicationMode: 'shadow',
+            sandboxResult,
+            reasons: [
+                ...runtimeCases.map((c) => `case ${c.caseId}: ${c.errorType} — ${c.message}`),
+                ...reasons,
+            ],
+        };
+    }
+    if (errorTypes.has('validation_failed')) {
+        const validationCases = sandboxResult.failedCases.filter((c) => c.errorType === 'validation_failed');
+        return {
+            decision: 'rejected_validation_failed',
+            applicationMode: 'shadow',
+            sandboxResult,
+            reasons: [
+                ...validationCases.map((c) => `case ${c.caseId}: validation_failed — ${c.message}`),
+                ...reasons,
+            ],
+        };
+    }
+    return {
+        decision: 'rejected_runtime_error',
+        applicationMode: 'shadow',
+        sandboxResult,
+        reasons: [
+            ...sandboxResult.failedCases.map((c) => `case ${c.caseId}: ${c.errorType} — ${c.message}`),
+            ...reasons,
+        ],
+    };
+}
+//# sourceMappingURL=refiner-rulehost-gate.js.map

package/dist/runtime-v2/internalization/refiner-rulehost-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refiner-rulehost-gate.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/refiner-rulehost-gate.ts"],"names":[],"mappings":"AAiCA,MAAM,oBAAoB,GAAyB;IACjD,OAAO,EAAE,KAAK;IACd,WAAW,EAAE,EAAE;IACf,eAAe,EAAE,CAAC;IAClB,0BAA0B,EAAE,EAAE;CAC/B,CAAC;AAEF,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC;IACb,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACnF,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,kBAAkB,CAAC;IAC5B,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAAC,GAAY;IAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,MAAM,SAAS,GAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5G,OAAO;QACL,OAAO,EAAE,KAAK;QACd,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;QAC5D,eAAe,EAAE,CAAC;QAClB,0BAA0B,EAAE,EAAE;KAC/B,CAAC;AACJ,CAAC;AAOD,SAAS,iBAAiB,CACxB,IAA6B,EAC7B,IAA8E;IAE9E,IAAI,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAClG,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,uBAAuB,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,KAA+B,EAC/B,IAA6B;IAE7B,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,IAAI,KAAK,CAAC,aAAa,KAAK,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,kFAAkF,CAAC,CAAC;IACnG,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,QAAQ,EAAE,mBAAmB;YAC7B,eAAe,EAAE,QAAQ;YACzB,aAAa,EAAE,oBAAoB;YACnC,OAAO,EAAE,CAAC,gEAAgE,EAAE,GAAG,OAAO,CAAC;SACxF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GACf,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzF,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACxH,IAAI,cAAc,CAAC,KAAK,EAAE,CAAC;QACzB,OAAO;YACL,QAAQ,EAAE,wBAAwB;YAClC,eAAe,EAAE,QAAQ;YACzB,aAAa,EAAE,cAAc,CAAC,MAAM;YACpC,OAAO,EAAE,CAAC,kDAAkD,EAAE,GAAG,OAAO,CAAC;SAC1E,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC;IAE5C,IAAI,aAAa,CAAC,0BAA0B,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxD,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,eAAe,EAAE,QAAQ;YACzB,aAAa;YACb,OAAO,EAAE;gBACP,gCAAgC,aAAa,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBACrF,GAAG,OAAO;aACX;SACF,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC;YAC3B,OAAO;gBACL,QAAQ,EAAE,wBAAwB;gBAClC,eAAe,EAAE,QAAQ;gBACzB,aAAa;gBACb,OAAO,EAAE,CAAC,gGAAgG,EAAE,GAAG,OAAO,CAAC;aACxH,CAAC;QACJ,CAAC;QACD,OAAO;YACL,QAAQ,EAAE,iBAAiB;YAC3B,eAAe,EAAE,QAAQ;YACzB,aAAa;YACb,OAAO;SACR,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAE9E,IAAI,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;QACxF,OAAO;YACL,QAAQ,EAAE,kBAAkB;YAC5B,eAAe,EAAE,QAAQ;YACzB,aAAa;YACb,OAAO,EAAE;gBACP,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtE,GAAG,OAAO;aACX;SACF,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAwB,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;IACrG,MAAM,eAAe,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,YAAY,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACjG,OAAO;YACL,QAAQ,EAAE,wBAAwB;YAClC,eAAe,EAAE,QAAQ;YACzB,aAAa;YACb,OAAO,EAAE;gBACP,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;gBAC7E,GAAG,OAAO;aACX;SACF,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACxC,MAAM,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,mBAAmB,CAAC,CAAC;QACrG,OAAO;YACL,QAAQ,EAAE,4BAA4B;YACtC,eAAe,EAAE,QAAQ;YACzB,aAAa;YACb,OAAO,EAAE;gBACP,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,yBAAyB,CAAC,CAAC,OAAO,EAAE,CAAC;gBACnF,GAAG,OAAO;aACX;SACF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,wBAAwB;QAClC,eAAe,EAAE,QAAQ;QACzB,aAAa;QACb,OAAO,EAAE;YACP,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,SAAS,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1F,GAAG,OAAO;SACX;KACF,CAAC;AACJ,CAAC"}

package/dist/runtime-v2/internalization/refiner-sandbox-wrapper.d.ts

@@ -0,0 +1,36 @@
+import type { GoldenTrace } from '../golden-trace.js';
+import type { ReplayEvaluateFn } from '../golden-trace-replay-validator.js';
+export type RefinerSandboxErrorType = 'forbidden_pattern' | 'syntax_error' | 'runtime_error' | 'timeout' | 'validation_failed' | 'unknown';
+export interface RefinerSandboxFailedCase {
+    caseId: string;
+    errorType: RefinerSandboxErrorType;
+    message: string;
+    stack?: string;
+}
+export interface RefinerSandboxResult {
+    success: boolean;
+    failedCases: RefinerSandboxFailedCase[];
+    executionTimeMs: number;
+    forbiddenPatternViolations: string[];
+}
+export interface RefinerSandboxOptions {
+    /** Elapsed-time classification threshold (NOT hard cancellation). See evaluateInRefinerSandbox JSDoc. */
+    softTimeoutMs?: number;
+}
+export interface RefinerSandboxDependencies {
+    evaluateCode?: ReplayEvaluateFn;
+}
+export declare const DEFAULT_TIMEOUT_MS = 5000;
+export declare const MAX_TIMEOUT_MS = 30000;
+/**
+ * Evaluate rule code against GoldenTrace cases with structured error reporting.
+ *
+ * **Timeout semantics**: `softTimeoutMs` is an elapsed-time classification
+ * threshold, NOT a hard cancellation mechanism. If `evaluateCode` blocks
+ * synchronously (infinite loop, long computation), this wrapper cannot
+ * interrupt it — the timeout is only detected after `evaluateCode` returns.
+ * Hard cancellation requires `node:vm` or `AbortController` at the
+ * plugin/sandbox-adapter layer, which is out of scope for core.
+ */
+export declare function evaluateInRefinerSandbox(code: string, goldenTrace: GoldenTrace, deps: RefinerSandboxDependencies & RefinerSandboxOptions): RefinerSandboxResult;
+//# sourceMappingURL=refiner-sandbox-wrapper.d.ts.map

package/dist/runtime-v2/internalization/refiner-sandbox-wrapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refiner-sandbox-wrapper.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/refiner-sandbox-wrapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAmB,MAAM,oBAAoB,CAAC;AACvE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAQ5E,MAAM,MAAM,uBAAuB,GAC/B,mBAAmB,GACnB,cAAc,GACd,eAAe,GACf,SAAS,GACT,mBAAmB,GACnB,SAAS,CAAC;AAEd,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,uBAAuB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,wBAAwB,EAAE,CAAC;IACxC,eAAe,EAAE,MAAM,CAAC;IACxB,0BAA0B,EAAE,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,yGAAyG;IACzG,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,YAAY,CAAC,EAAE,gBAAgB,CAAC;CACjC;AAED,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC,eAAO,MAAM,cAAc,QAAQ,CAAC;AAmJpC;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,WAAW,EACxB,IAAI,EAAE,0BAA0B,GAAG,qBAAqB,GACvD,oBAAoB,CA8EtB"}

package/dist/runtime-v2/internalization/refiner-sandbox-wrapper.js

@@ -0,0 +1,227 @@
+import { diffParams } from '../golden-trace-replay-validator.js';
+import { checkForbiddenPatterns } from './rule-code-validator.js';
+import { createSyntheticRuleHostInput } from '../golden-trace.js';
+import { validateCorrectionProposal } from './correction-proposal.js';
+export const DEFAULT_TIMEOUT_MS = 5000;
+export const MAX_TIMEOUT_MS = 30000;
+function safeErrorMessage(err) {
+    try {
+        if (typeof err === 'string')
+            return err;
+        if (typeof err === 'number' || typeof err === 'boolean' || typeof err === 'bigint')
+            return String(err);
+        if (err === null)
+            return 'null';
+        if (err === undefined)
+            return 'undefined';
+        return String(err);
+    }
+    catch {
+        try {
+            return Object.prototype.toString.call(err);
+        }
+        catch {
+            return 'Unstringifiable thrown value';
+        }
+    }
+}
+function isSafeRecord(value) {
+    if (typeof value !== 'object' || value === null || Array.isArray(value))
+        return false;
+    try {
+        Object.keys(value);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+function classifyError(err) {
+    if (err instanceof SyntaxError) {
+        return { errorType: 'syntax_error', message: err.message, stack: err.stack };
+    }
+    if (err instanceof Error) {
+        return { errorType: 'runtime_error', message: err.message, stack: err.stack };
+    }
+    return { errorType: 'unknown', message: safeErrorMessage(err) };
+}
+function resolveTimeoutMs(timeoutMs) {
+    if (!Number.isFinite(timeoutMs)) {
+        return DEFAULT_TIMEOUT_MS;
+    }
+    if (timeoutMs > MAX_TIMEOUT_MS) {
+        return MAX_TIMEOUT_MS;
+    }
+    if (timeoutMs <= 0) {
+        return DEFAULT_TIMEOUT_MS;
+    }
+    return timeoutMs;
+}
+function evaluateCaseWithTimeout(evaluateFn, traceCase, timeoutMs) {
+    const input = createSyntheticRuleHostInput({ toolName: traceCase.toolName, params: traceCase.params });
+    const helpers = {
+        isRiskPath: () => input.workspace.isRiskPath,
+        getToolName: () => input.action.toolName,
+        getEstimatedLineChanges: () => input.derived.estimatedLineChanges,
+        getBashRisk: () => input.derived.bashRisk,
+        hasPlanFile: () => input.workspace.hasPlanFile,
+        getPlanStatus: () => input.workspace.planStatus,
+        getEpTier: () => input.evolution.epTier,
+    };
+    const start = Date.now();
+    try {
+        const result = evaluateFn(input, helpers);
+        const elapsed = Date.now() - start;
+        if (elapsed >= timeoutMs) {
+            return { result: null, error: null, timedOut: true, threw: false };
+        }
+        return { result, error: null, timedOut: false, threw: false };
+    }
+    catch (err) {
+        const elapsed = Date.now() - start;
+        if (elapsed >= timeoutMs) {
+            return { result: null, error: null, timedOut: true, threw: false };
+        }
+        return { result: null, error: err, timedOut: false, threw: true };
+    }
+}
+function validateCaseDecision(traceCase, result) {
+    switch (traceCase.expectedDecision) {
+        case 'allow':
+            if (result.decision !== 'allow' && result.matched !== false) {
+                return { passed: false, failureReason: `Expected allow but got ${result.decision}` };
+            }
+            return { passed: true };
+        case 'block':
+            if (result.decision !== 'block' && result.decision !== 'requireApproval') {
+                return { passed: false, failureReason: `Expected block but got ${result.decision}` };
+            }
+            return { passed: true };
+        case 'propose_correction':
+            if (result.decision !== 'auto_correct') {
+                return { passed: false, failureReason: `Expected auto_correct (propose_correction) but got ${result.decision}` };
+            }
+            if (!result.correctionProposal) {
+                return { passed: false, failureReason: 'auto_correct decision missing correctionProposal' };
+            }
+            {
+                const proposalValidation = validateCorrectionProposal(result.correctionProposal);
+                if (!proposalValidation.valid) {
+                    return { passed: false, failureReason: `correctionProposal invalid: ${proposalValidation.errors.join('; ')}` };
+                }
+                const proposal = result.correctionProposal;
+                const reasons = [];
+                if (traceCase.expectedProposedParams !== undefined) {
+                    if (!isSafeRecord(traceCase.expectedProposedParams)) {
+                        reasons.push('expectedProposedParams is not a safe record');
+                    }
+                    else if (!isSafeRecord(proposal.proposedParams)) {
+                        reasons.push('proposedParams is not a safe record');
+                    }
+                    else {
+                        try {
+                            const diffs = diffParams(traceCase.expectedProposedParams, proposal.proposedParams);
+                            if (diffs.length > 0) {
+                                reasons.push(`proposedParams mismatch: ${diffs.join('; ')}`);
+                            }
+                        }
+                        catch (err) {
+                            reasons.push(`proposedParams comparison failed: ${safeErrorMessage(err)}`);
+                        }
+                    }
+                }
+                if (traceCase.expectedApplicationMode !== undefined) {
+                    if (proposal.applicationMode !== traceCase.expectedApplicationMode) {
+                        reasons.push(`applicationMode mismatch: expected ${traceCase.expectedApplicationMode}, got ${proposal.applicationMode}`);
+                    }
+                }
+                if (reasons.length > 0) {
+                    return { passed: false, failureReason: reasons.join('; ') };
+                }
+            }
+            return { passed: true };
+        default:
+            return { passed: false, failureReason: `Unknown expectedDecision: ${String(traceCase.expectedDecision)}` };
+    }
+}
+/**
+ * Evaluate rule code against GoldenTrace cases with structured error reporting.
+ *
+ * **Timeout semantics**: `softTimeoutMs` is an elapsed-time classification
+ * threshold, NOT a hard cancellation mechanism. If `evaluateCode` blocks
+ * synchronously (infinite loop, long computation), this wrapper cannot
+ * interrupt it — the timeout is only detected after `evaluateCode` returns.
+ * Hard cancellation requires `node:vm` or `AbortController` at the
+ * plugin/sandbox-adapter layer, which is out of scope for core.
+ */
+export function evaluateInRefinerSandbox(code, goldenTrace, deps) {
+    const startTime = Date.now();
+    const timeoutMs = resolveTimeoutMs(deps.softTimeoutMs ?? DEFAULT_TIMEOUT_MS);
+    const forbiddenViolations = checkForbiddenPatterns(code);
+    if (forbiddenViolations.length > 0) {
+        return {
+            success: false,
+            failedCases: [],
+            executionTimeMs: Date.now() - startTime,
+            forbiddenPatternViolations: forbiddenViolations,
+        };
+    }
+    const evaluateFn = deps.evaluateCode;
+    if (!evaluateFn) {
+        return {
+            success: false,
+            failedCases: [{
+                    caseId: '__no_evaluator__',
+                    errorType: 'unknown',
+                    message: 'No evaluateCode provided in dependencies',
+                }],
+            executionTimeMs: Date.now() - startTime,
+            forbiddenPatternViolations: [],
+        };
+    }
+    const failedCases = [];
+    for (const traceCase of goldenTrace.cases) {
+        const { result, error, timedOut, threw } = evaluateCaseWithTimeout(evaluateFn, traceCase, timeoutMs);
+        if (timedOut) {
+            failedCases.push({
+                caseId: traceCase.caseId,
+                errorType: 'timeout',
+                message: `Evaluation timed out after ${timeoutMs}ms`,
+            });
+            continue;
+        }
+        if (threw) {
+            const classified = classifyError(error);
+            failedCases.push({
+                caseId: traceCase.caseId,
+                errorType: classified.errorType,
+                message: classified.message,
+                stack: classified.stack,
+            });
+            continue;
+        }
+        if (!result) {
+            failedCases.push({
+                caseId: traceCase.caseId,
+                errorType: 'validation_failed',
+                message: 'Evaluator returned null/undefined result',
+            });
+            continue;
+        }
+        const validation = validateCaseDecision(traceCase, result);
+        if (!validation.passed) {
+            failedCases.push({
+                caseId: traceCase.caseId,
+                errorType: 'validation_failed',
+                message: validation.failureReason ?? 'Validation failed',
+            });
+        }
+    }
+    return {
+        success: failedCases.length === 0,
+        failedCases,
+        executionTimeMs: Date.now() - startTime,
+        forbiddenPatternViolations: [],
+    };
+}
+//# sourceMappingURL=refiner-sandbox-wrapper.js.map

package/dist/runtime-v2/internalization/refiner-sandbox-wrapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refiner-sandbox-wrapper.js","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/refiner-sandbox-wrapper.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,qCAAqC,CAAC;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EAAE,4BAA4B,EAAE,MAAM,oBAAoB,CAAC;AAGlE,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AAiCtE,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAEpC,SAAS,gBAAgB,CAAC,GAAY;IACpC,IAAI,CAAC;QACH,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,GAAG,CAAC;QACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,OAAO,GAAG,KAAK,SAAS,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;QACvG,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,MAAM,CAAC;QAChC,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,WAAW,CAAC;QAC1C,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,OAAO,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,8BAA8B,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,GAAG,YAAY,WAAW,EAAE,CAAC;QAC/B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;QACzB,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IAChF,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAiB;IACzC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,SAAS,GAAG,cAAc,EAAE,CAAC;QAC/B,OAAO,cAAc,CAAC;IACxB,CAAC;IACD,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACnB,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,uBAAuB,CAC9B,UAA4B,EAC5B,SAA0B,EAC1B,SAAiB;IAEjB,MAAM,KAAK,GAAG,4BAA4B,CACxC,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAC3D,CAAC;IAEF,MAAM,OAAO,GAAoB;QAC/B,UAAU,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU;QAC5C,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ;QACxC,uBAAuB,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,oBAAoB;QACjE,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ;QACzC,WAAW,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,WAAW;QAC9C,aAAa,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU;QAC/C,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM;KACxC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACnC,IAAI,OAAO,IAAI,SAAS,EAAE,CAAC;YACzB,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IACpE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAC3B,SAA0B,EAC1B,MAAsB;IAEtB,QAAQ,SAAS,CAAC,gBAAgB,EAAE,CAAC;QACnC,KAAK,OAAO;YACV,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,EAAE,CAAC;gBAC5D,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,0BAA0B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YACvF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,KAAK,OAAO;YACV,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,iBAAiB,EAAE,CAAC;gBACzE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,0BAA0B,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YACvF,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B,KAAK,oBAAoB;YACvB,IAAI,MAAM,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBACvC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,sDAAsD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;YACnH,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC/B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,kDAAkD,EAAE,CAAC;YAC9F,CAAC;YACD,CAAC;gBACC,MAAM,kBAAkB,GAAG,0BAA0B,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;gBACjF,IAAI,CAAC,kBAAkB,CAAC,KAAK,EAAE,CAAC;oBAC9B,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,+BAA+B,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;gBACjH,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,CAAC,kBAAkB,CAAC;gBAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;gBAC7B,IAAI,SAAS,CAAC,sBAAsB,KAAK,SAAS,EAAE,CAAC;oBACnD,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,sBAAsB,CAAC,EAAE,CAAC;wBACpD,OAAO,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;oBAC9D,CAAC;yBAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;wBAClD,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;oBACtD,CAAC;yBAAM,CAAC;wBACN,IAAI,CAAC;4BACH,MAAM,KAAK,GAAG,UAAU,CAAC,SAAS,CAAC,sBAAsB,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC;4BACpF,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gCACrB,OAAO,CAAC,IAAI,CAAC,4BAA4B,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;4BAC/D,CAAC;wBACH,CAAC;wBAAC,OAAO,GAAG,EAAE,CAAC;4BACb,OAAO,CAAC,IAAI,CAAC,qCAAqC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;wBAC7E,CAAC;oBACH,CAAC;gBACH,CAAC;gBACD,IAAI,SAAS,CAAC,uBAAuB,KAAK,SAAS,EAAE,CAAC;oBACpD,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS,CAAC,uBAAuB,EAAE,CAAC;wBACnE,OAAO,CAAC,IAAI,CAAC,sCAAsC,SAAS,CAAC,uBAAuB,SAAS,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC;oBAC3H,CAAC;gBACH,CAAC;gBACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC9D,CAAC;YACH,CAAC;YACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;QAC1B;YACE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,EAAE,6BAA6B,MAAM,CAAC,SAAS,CAAC,gBAAgB,CAAC,EAAE,EAAE,CAAC;IAC/G,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAAY,EACZ,WAAwB,EACxB,IAAwD;IAExD,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,SAAS,GAAG,gBAAgB,CAAC,IAAI,CAAC,aAAa,IAAI,kBAAkB,CAAC,CAAC;IAE7E,MAAM,mBAAmB,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzD,IAAI,mBAAmB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,EAAE;YACf,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACvC,0BAA0B,EAAE,mBAAmB;SAChD,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,YAAY,CAAC;IACrC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO;YACL,OAAO,EAAE,KAAK;YACd,WAAW,EAAE,CAAC;oBACZ,MAAM,EAAE,kBAAkB;oBAC1B,SAAS,EAAE,SAAS;oBACpB,OAAO,EAAE,0CAA0C;iBACpD,CAAC;YACF,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;YACvC,0BAA0B,EAAE,EAAE;SAC/B,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAA+B,EAAE,CAAC;IAEnD,KAAK,MAAM,SAAS,IAAI,WAAW,CAAC,KAAK,EAAE,CAAC;QAC1C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,uBAAuB,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QAErG,IAAI,QAAQ,EAAE,CAAC;YACb,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,8BAA8B,SAAS,IAAI;aACrD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;YACxC,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,SAAS,EAAE,UAAU,CAAC,SAAS;gBAC/B,OAAO,EAAE,UAAU,CAAC,OAAO;gBAC3B,KAAK,EAAE,UAAU,CAAC,KAAK;aACxB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,0CAA0C;aACpD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,WAAW,CAAC,IAAI,CAAC;gBACf,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,SAAS,EAAE,mBAAmB;gBAC9B,OAAO,EAAE,UAAU,CAAC,aAAa,IAAI,mBAAmB;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,MAAM,KAAK,CAAC;QACjC,WAAW;QACX,eAAe,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;QACvC,0BAA0B,EAAE,EAAE;KAC/B,CAAC;AACJ,CAAC"}

package/dist/runtime-v2/internalization/rollout-reviewer-output.d.ts

@@ -0,0 +1,74 @@
+import { type Static } from '@sinclair/typebox';
+export interface RolloutReviewerReview {
+    readonly decision: 'approve_rollout' | 'needs_revision' | 'reject';
+    readonly summary: string;
+    readonly confidence: number;
+    readonly requiredChanges: readonly string[];
+    readonly rolloutRisks: readonly string[];
+    readonly safetyChecks: readonly string[];
+}
+export interface RolloutReviewerSourceTrace {
+    readonly evaluatorArtifactId: string;
+    readonly artificerArtifactId?: string;
+    readonly scribeArtifactId?: string;
+    readonly philosopherArtifactId?: string;
+    readonly dreamerArtifactId?: string;
+}
+export interface RolloutReviewerOutputV1 {
+    readonly taskId: string;
+    readonly sourceEvaluatorArtifactId: string;
+    readonly review: RolloutReviewerReview;
+    readonly sourceTrace: RolloutReviewerSourceTrace;
+    readonly risks: readonly string[];
+    readonly generatedAt: string;
+}
+export declare const ROLLOUT_REVIEWER_DECISIONS: readonly ["approve_rollout", "needs_revision", "reject"];
+export declare const RolloutReviewerReviewSchema: import("@sinclair/typebox").TObject<{
+    decision: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"approve_rollout">, import("@sinclair/typebox").TLiteral<"needs_revision">, import("@sinclair/typebox").TLiteral<"reject">]>;
+    summary: import("@sinclair/typebox").TString;
+    confidence: import("@sinclair/typebox").TNumber;
+    requiredChanges: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    rolloutRisks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    safetyChecks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+}>;
+export declare const RolloutReviewerSourceTraceSchema: import("@sinclair/typebox").TObject<{
+    evaluatorArtifactId: import("@sinclair/typebox").TString;
+    artificerArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    scribeArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    philosopherArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    dreamerArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+}>;
+export declare const RolloutReviewerOutputV1Schema: import("@sinclair/typebox").TObject<{
+    taskId: import("@sinclair/typebox").TString;
+    sourceEvaluatorArtifactId: import("@sinclair/typebox").TString;
+    review: import("@sinclair/typebox").TObject<{
+        decision: import("@sinclair/typebox").TUnion<[import("@sinclair/typebox").TLiteral<"approve_rollout">, import("@sinclair/typebox").TLiteral<"needs_revision">, import("@sinclair/typebox").TLiteral<"reject">]>;
+        summary: import("@sinclair/typebox").TString;
+        confidence: import("@sinclair/typebox").TNumber;
+        requiredChanges: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        rolloutRisks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+        safetyChecks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    }>;
+    sourceTrace: import("@sinclair/typebox").TObject<{
+        evaluatorArtifactId: import("@sinclair/typebox").TString;
+        artificerArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        scribeArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        philosopherArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+        dreamerArtifactId: import("@sinclair/typebox").TOptional<import("@sinclair/typebox").TString>;
+    }>;
+    risks: import("@sinclair/typebox").TArray<import("@sinclair/typebox").TString>;
+    generatedAt: import("@sinclair/typebox").TString;
+}>;
+export type RolloutReviewerOutputV1TB = Static<typeof RolloutReviewerOutputV1Schema>;
+export interface RolloutReviewerValidationResult {
+    readonly valid: boolean;
+    readonly errors: readonly string[];
+    readonly errorCategory?: string;
+}
+export interface RolloutReviewerValidator {
+    validate(output: RolloutReviewerOutputV1, taskId: string, expectedSourceEvaluatorArtifactId?: string): Promise<RolloutReviewerValidationResult>;
+}
+export declare class DefaultRolloutReviewerValidator implements RolloutReviewerValidator {
+    validate(output: RolloutReviewerOutputV1, taskId: string, expectedSourceEvaluatorArtifactId?: string): Promise<RolloutReviewerValidationResult>;
+}
+//# sourceMappingURL=rollout-reviewer-output.d.ts.map

package/dist/runtime-v2/internalization/rollout-reviewer-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rollout-reviewer-output.d.ts","sourceRoot":"","sources":["../../../src/runtime-v2/internalization/rollout-reviewer-output.ts"],"names":[],"mappings":"AAAA,OAAO,EAAQ,KAAK,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAEtD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,GAAG,gBAAgB,GAAG,QAAQ,CAAC;IACnE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,yBAAyB,EAAE,MAAM,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,0BAA0B,0DAA2D,CAAC;AAEnG,eAAO,MAAM,2BAA2B;;;;;;;EAWtC,CAAC;AAEH,eAAO,MAAM,gCAAgC;;;;;;EAM3C,CAAC;AAEH,eAAO,MAAM,6BAA6B;;;;;;;;;;;;;;;;;;;;EAOxC,CAAC;AAEH,MAAM,MAAM,yBAAyB,GAAG,MAAM,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAErF,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;CACjJ;AAED,qBAAa,+BAAgC,YAAW,wBAAwB;IAExE,QAAQ,CAAC,MAAM,EAAE,uBAAuB,EAAE,MAAM,EAAE,MAAM,EAAE,iCAAiC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,+BAA+B,CAAC;CA+EtJ"}

package/dist/runtime-v2/internalization/rollout-reviewer-output.js

@@ -0,0 +1,117 @@
+import { Type } from '@sinclair/typebox';
+export const ROLLOUT_REVIEWER_DECISIONS = ['approve_rollout', 'needs_revision', 'reject'];
+export const RolloutReviewerReviewSchema = Type.Object({
+    decision: Type.Union([
+        Type.Literal('approve_rollout'),
+        Type.Literal('needs_revision'),
+        Type.Literal('reject'),
+    ]),
+    summary: Type.String({ minLength: 1 }),
+    confidence: Type.Number({ minimum: 0, maximum: 1 }),
+    requiredChanges: Type.Array(Type.String()),
+    rolloutRisks: Type.Array(Type.String()),
+    safetyChecks: Type.Array(Type.String()),
+});
+export const RolloutReviewerSourceTraceSchema = Type.Object({
+    evaluatorArtifactId: Type.String({ minLength: 1 }),
+    artificerArtifactId: Type.Optional(Type.String()),
+    scribeArtifactId: Type.Optional(Type.String()),
+    philosopherArtifactId: Type.Optional(Type.String()),
+    dreamerArtifactId: Type.Optional(Type.String()),
+});
+export const RolloutReviewerOutputV1Schema = Type.Object({
+    taskId: Type.String({ minLength: 1 }),
+    sourceEvaluatorArtifactId: Type.String({ minLength: 1 }),
+    review: RolloutReviewerReviewSchema,
+    sourceTrace: RolloutReviewerSourceTraceSchema,
+    risks: Type.Array(Type.String()),
+    generatedAt: Type.String({ minLength: 1 }),
+});
+export class DefaultRolloutReviewerValidator {
+    // eslint-disable-next-line @typescript-eslint/class-methods-use-this
+    async validate(output, taskId, expectedSourceEvaluatorArtifactId) {
+        const errors = [];
+        if (typeof output !== 'object' || output === null) {
+            return { valid: false, errors: ['Output is not an object'], errorCategory: 'output_invalid' };
+        }
+        if (output.taskId !== taskId) {
+            errors.push(`taskId mismatch: expected ${taskId}, got ${String(output.taskId)}`);
+        }
+        if (typeof output.sourceEvaluatorArtifactId !== 'string' || output.sourceEvaluatorArtifactId.trim() === '') {
+            errors.push('sourceEvaluatorArtifactId must be non-empty string');
+        }
+        else if (expectedSourceEvaluatorArtifactId && output.sourceEvaluatorArtifactId !== expectedSourceEvaluatorArtifactId) {
+            errors.push(`sourceEvaluatorArtifactId mismatch: expected ${expectedSourceEvaluatorArtifactId}, got ${output.sourceEvaluatorArtifactId}`);
+        }
+        if (typeof output.review !== 'object' || output.review === null) {
+            errors.push('review must be an object');
+        }
+        else {
+            const rv = output.review;
+            if (!ROLLOUT_REVIEWER_DECISIONS.includes(rv.decision)) {
+                errors.push(`review.decision must be one of ${ROLLOUT_REVIEWER_DECISIONS.join('/')}, got ${String(rv.decision)}`);
+            }
+            if (typeof rv.summary !== 'string' || (rv.summary).trim() === '')
+                errors.push('review.summary must be non-empty string');
+            if (typeof rv.confidence !== 'number' || !Number.isFinite(rv.confidence))
+                errors.push('review.confidence must be number');
+            else if (rv.confidence < 0 || rv.confidence > 1)
+                errors.push('review.confidence must be in [0, 1]');
+            if (!Array.isArray(rv.requiredChanges))
+                errors.push('review.requiredChanges must be an array');
+            else if (!rv.requiredChanges.every(e => typeof e === 'string'))
+                errors.push('review.requiredChanges must be an array of strings');
+            if (!Array.isArray(rv.rolloutRisks))
+                errors.push('review.rolloutRisks must be an array');
+            else if (!rv.rolloutRisks.every(e => typeof e === 'string'))
+                errors.push('review.rolloutRisks must be an array of strings');
+            if (!Array.isArray(rv.safetyChecks))
+                errors.push('review.safetyChecks must be an array');
+            else if (!rv.safetyChecks.every(e => typeof e === 'string'))
+                errors.push('review.safetyChecks must be an array of strings');
+        }
+        if (typeof output.sourceTrace !== 'object' || output.sourceTrace === null) {
+            errors.push('sourceTrace must be an object');
+        }
+        else {
+            const st = output.sourceTrace;
+            if (typeof st.evaluatorArtifactId !== 'string' || (st.evaluatorArtifactId).trim() === '') {
+                errors.push('sourceTrace.evaluatorArtifactId must be non-empty string');
+            }
+            else if (expectedSourceEvaluatorArtifactId && st.evaluatorArtifactId !== expectedSourceEvaluatorArtifactId) {
+                errors.push(`sourceTrace.evaluatorArtifactId mismatch: expected ${expectedSourceEvaluatorArtifactId}, got ${st.evaluatorArtifactId}`);
+            }
+            if (st.artificerArtifactId !== undefined && typeof st.artificerArtifactId !== 'string') {
+                errors.push('sourceTrace.artificerArtifactId must be string if present');
+            }
+            if (st.scribeArtifactId !== undefined && typeof st.scribeArtifactId !== 'string') {
+                errors.push('sourceTrace.scribeArtifactId must be string if present');
+            }
+            if (st.philosopherArtifactId !== undefined && typeof st.philosopherArtifactId !== 'string') {
+                errors.push('sourceTrace.philosopherArtifactId must be string if present');
+            }
+            if (st.dreamerArtifactId !== undefined && typeof st.dreamerArtifactId !== 'string') {
+                errors.push('sourceTrace.dreamerArtifactId must be string if present');
+            }
+        }
+        if (!Array.isArray(output.risks)) {
+            errors.push('risks must be an array');
+        }
+        else if (!output.risks.every(e => typeof e === 'string')) {
+            errors.push('risks must be an array of strings');
+        }
+        if (typeof output.sourceEvaluatorArtifactId === 'string' && output.sourceEvaluatorArtifactId.trim() !== ''
+            && typeof output.sourceTrace === 'object' && output.sourceTrace !== null
+            && typeof output.sourceTrace.evaluatorArtifactId === 'string'
+            && output.sourceEvaluatorArtifactId !== output.sourceTrace.evaluatorArtifactId) {
+            errors.push('sourceEvaluatorArtifactId and sourceTrace.evaluatorArtifactId must match');
+        }
+        if (typeof output.generatedAt !== 'string' || output.generatedAt.trim() === '') {
+            errors.push('generatedAt must be non-empty string');
+        }
+        return errors.length > 0
+            ? { valid: false, errors, errorCategory: 'output_invalid' }
+            : { valid: true, errors: [] };
+    }
+}
+//# sourceMappingURL=rollout-reviewer-output.js.map