@sparkleideas/guidance 3.5.2-patch.1

package/package.json

@@ -0,0 +1,198 @@
+{
+  "name": "@sparkleideas/guidance",
+  "version": "3.5.2-patch.1",
+  "description": "Guidance Control Plane - Compiles, retrieves, enforces, and evolves guidance rules for Claude Code sessions",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    },
+    "./compiler": {
+      "types": "./dist/compiler.d.ts",
+      "import": "./dist/compiler.js"
+    },
+    "./retriever": {
+      "types": "./dist/retriever.d.ts",
+      "import": "./dist/retriever.js"
+    },
+    "./gates": {
+      "types": "./dist/gates.d.ts",
+      "import": "./dist/gates.js"
+    },
+    "./hooks": {
+      "types": "./dist/hooks.d.ts",
+      "import": "./dist/hooks.js"
+    },
+    "./ledger": {
+      "types": "./dist/ledger.d.ts",
+      "import": "./dist/ledger.js"
+    },
+    "./optimizer": {
+      "types": "./dist/optimizer.d.ts",
+      "import": "./dist/optimizer.js"
+    },
+    "./headless": {
+      "types": "./dist/headless.d.ts",
+      "import": "./dist/headless.js"
+    },
+    "./persistence": {
+      "types": "./dist/persistence.d.ts",
+      "import": "./dist/persistence.js"
+    },
+    "./gateway": {
+      "types": "./dist/gateway.d.ts",
+      "import": "./dist/gateway.js"
+    },
+    "./manifest-validator": {
+      "types": "./dist/manifest-validator.d.ts",
+      "import": "./dist/manifest-validator.js"
+    },
+    "./proof": {
+      "types": "./dist/proof.d.ts",
+      "import": "./dist/proof.js"
+    },
+    "./memory-gate": {
+      "types": "./dist/memory-gate.d.ts",
+      "import": "./dist/memory-gate.js"
+    },
+    "./coherence": {
+      "types": "./dist/coherence.d.ts",
+      "import": "./dist/coherence.js"
+    },
+    "./artifacts": {
+      "types": "./dist/artifacts.d.ts",
+      "import": "./dist/artifacts.js"
+    },
+    "./capabilities": {
+      "types": "./dist/capabilities.d.ts",
+      "import": "./dist/capabilities.js"
+    },
+    "./evolution": {
+      "types": "./dist/evolution.d.ts",
+      "import": "./dist/evolution.js"
+    },
+    "./conformance-kit": {
+      "types": "./dist/conformance-kit.d.ts",
+      "import": "./dist/conformance-kit.js"
+    },
+    "./ruvbot-integration": {
+      "types": "./dist/ruvbot-integration.d.ts",
+      "import": "./dist/ruvbot-integration.js"
+    },
+    "./trust": {
+      "types": "./dist/trust.d.ts",
+      "import": "./dist/trust.js"
+    },
+    "./truth-anchors": {
+      "types": "./dist/truth-anchors.d.ts",
+      "import": "./dist/truth-anchors.js"
+    },
+    "./uncertainty": {
+      "types": "./dist/uncertainty.d.ts",
+      "import": "./dist/uncertainty.js"
+    },
+    "./temporal": {
+      "types": "./dist/temporal.d.ts",
+      "import": "./dist/temporal.js"
+    },
+    "./authority": {
+      "types": "./dist/authority.d.ts",
+      "import": "./dist/authority.js"
+    },
+    "./adversarial": {
+      "types": "./dist/adversarial.d.ts",
+      "import": "./dist/adversarial.js"
+    },
+    "./meta-governance": {
+      "types": "./dist/meta-governance.d.ts",
+      "import": "./dist/meta-governance.js"
+    },
+    "./continue-gate": {
+      "types": "./dist/continue-gate.d.ts",
+      "import": "./dist/continue-gate.js"
+    },
+    "./wasm-kernel": {
+      "types": "./dist/wasm-kernel.d.ts",
+      "import": "./dist/wasm-kernel.js"
+    },
+    "./generators": {
+      "types": "./dist/generators.d.ts",
+      "import": "./dist/generators.js"
+    },
+    "./analyzer": {
+      "types": "./dist/analyzer.d.ts",
+      "import": "./dist/analyzer.js"
+    }
+  },
+  "files": [
+    "dist",
+    "wasm-pkg"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "clean": "rm -rf dist",
+    "test": "vitest run",
+    "test:watch": "vitest watch",
+    "test:coverage": "vitest run --coverage",
+    "typecheck": "tsc --noEmit"
+  },
+  "dependencies": {
+    "@sparkleideas/hooks": "^3.0.0-alpha.7",
+    "@sparkleideas/memory": "^3.0.0-alpha.2",
+    "@sparkleideas/shared": "^3.0.0-alpha.1"
+  },
+  "devDependencies": {
+    "@types/node": "^20.10.0",
+    "typescript": "^5.3.0",
+    "vitest": "^4.0.16"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "keywords": [
+    "claude-flow",
+    "claude-code",
+    "claude",
+    "anthropic",
+    "ai-agent",
+    "ai-governance",
+    "agent-governance",
+    "guidance",
+    "control-plane",
+    "policy-enforcement",
+    "enforcement-gates",
+    "proof-chain",
+    "trust-system",
+    "long-horizon",
+    "autonomous-agent",
+    "claude-md",
+    "CLAUDE.md",
+    "memory-governance",
+    "adversarial-defense",
+    "prompt-injection",
+    "wasm",
+    "ruvbot",
+    "ruv",
+    "ai-safety",
+    "agent-orchestration",
+    "multi-agent",
+    "code-generation",
+    "llm-governance",
+    "mcp",
+    "model-context-protocol"
+  ],
+  "author": "Claude Flow Team",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/ruvnet/claude-flow.git",
+    "directory": "v3/@claude-flow/guidance"
+  },
+  "publishConfig": {
+    "access": "public",
+    "tag": "v3alpha"
+  }
+}

package/wasm-pkg/guidance_kernel.d.ts

@@ -0,0 +1,53 @@
+/* tslint:disable */
+/* eslint-disable */
+
+/**
+ * Process a batch of operations in a single host→kernel call.
+ * Accepts a JSON array of `BatchOp` and returns a JSON array of results.
+ *
+ * This is the primary entry point for high-throughput scenarios.
+ * The host batches multiple operations into one call to minimize
+ * WASM boundary crossings.
+ */
+export function batch_process(ops_json: string): string;
+
+/**
+ * Compute content hash with sorted keys (for RunEvent hashing)
+ */
+export function content_hash(json_input: string): string;
+
+/**
+ * Detect destructive command patterns, returns matched pattern or empty string
+ */
+export function detect_destructive(command: string): string;
+
+/**
+ * Compute HMAC-SHA256 hex digest
+ */
+export function hmac_sha256(key: string, input: string): string;
+
+/**
+ * Initialize the kernel (called once on module load).
+ * Returns the kernel version string.
+ */
+export function kernel_init(): string;
+
+/**
+ * Scan content for secret patterns, returns JSON array of redacted matches
+ */
+export function scan_secrets(content: string): string;
+
+/**
+ * Compute SHA-256 hex digest of input
+ */
+export function sha256(input: string): string;
+
+/**
+ * Sign a proof envelope body (HMAC-SHA256)
+ */
+export function sign_envelope(key: string, envelope_json: string): string;
+
+/**
+ * Verify an entire proof chain from JSON
+ */
+export function verify_chain(chain_json: string, key: string): boolean;

package/wasm-pkg/guidance_kernel.js

@@ -0,0 +1,320 @@
+/* @ts-self-types="./guidance_kernel.d.ts" */
+
+/**
+ * Process a batch of operations in a single host→kernel call.
+ * Accepts a JSON array of `BatchOp` and returns a JSON array of results.
+ *
+ * This is the primary entry point for high-throughput scenarios.
+ * The host batches multiple operations into one call to minimize
+ * WASM boundary crossings.
+ * @param {string} ops_json
+ * @returns {string}
+ */
+function batch_process(ops_json) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(ops_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.batch_process(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred2_0, deferred2_1, 1);
+    }
+}
+exports.batch_process = batch_process;
+
+/**
+ * Compute content hash with sorted keys (for RunEvent hashing)
+ * @param {string} json_input
+ * @returns {string}
+ */
+function content_hash(json_input) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(json_input, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.content_hash(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred2_0, deferred2_1, 1);
+    }
+}
+exports.content_hash = content_hash;
+
+/**
+ * Detect destructive command patterns, returns matched pattern or empty string
+ * @param {string} command
+ * @returns {string}
+ */
+function detect_destructive(command) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(command, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.detect_destructive(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred2_0, deferred2_1, 1);
+    }
+}
+exports.detect_destructive = detect_destructive;
+
+/**
+ * Compute HMAC-SHA256 hex digest
+ * @param {string} key
+ * @param {string} input
+ * @returns {string}
+ */
+function hmac_sha256(key, input) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(key, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(input, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len1 = WASM_VECTOR_LEN;
+        wasm.hmac_sha256(retptr, ptr0, len0, ptr1, len1);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred3_0 = r0;
+        deferred3_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred3_0, deferred3_1, 1);
+    }
+}
+exports.hmac_sha256 = hmac_sha256;
+
+/**
+ * Initialize the kernel (called once on module load).
+ * Returns the kernel version string.
+ * @returns {string}
+ */
+function kernel_init() {
+    let deferred1_0;
+    let deferred1_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        wasm.kernel_init(retptr);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred1_0 = r0;
+        deferred1_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred1_0, deferred1_1, 1);
+    }
+}
+exports.kernel_init = kernel_init;
+
+/**
+ * Scan content for secret patterns, returns JSON array of redacted matches
+ * @param {string} content
+ * @returns {string}
+ */
+function scan_secrets(content) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(content, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.scan_secrets(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred2_0, deferred2_1, 1);
+    }
+}
+exports.scan_secrets = scan_secrets;
+
+/**
+ * Compute SHA-256 hex digest of input
+ * @param {string} input
+ * @returns {string}
+ */
+function sha256(input) {
+    let deferred2_0;
+    let deferred2_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(input, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        wasm.sha256(retptr, ptr0, len0);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred2_0 = r0;
+        deferred2_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred2_0, deferred2_1, 1);
+    }
+}
+exports.sha256 = sha256;
+
+/**
+ * Sign a proof envelope body (HMAC-SHA256)
+ * @param {string} key
+ * @param {string} envelope_json
+ * @returns {string}
+ */
+function sign_envelope(key, envelope_json) {
+    let deferred3_0;
+    let deferred3_1;
+    try {
+        const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
+        const ptr0 = passStringToWasm0(key, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len0 = WASM_VECTOR_LEN;
+        const ptr1 = passStringToWasm0(envelope_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+        const len1 = WASM_VECTOR_LEN;
+        wasm.hmac_sha256(retptr, ptr0, len0, ptr1, len1);
+        var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
+        var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
+        deferred3_0 = r0;
+        deferred3_1 = r1;
+        return getStringFromWasm0(r0, r1);
+    } finally {
+        wasm.__wbindgen_add_to_stack_pointer(16);
+        wasm.__wbindgen_export3(deferred3_0, deferred3_1, 1);
+    }
+}
+exports.sign_envelope = sign_envelope;
+
+/**
+ * Verify an entire proof chain from JSON
+ * @param {string} chain_json
+ * @param {string} key
+ * @returns {boolean}
+ */
+function verify_chain(chain_json, key) {
+    const ptr0 = passStringToWasm0(chain_json, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len0 = WASM_VECTOR_LEN;
+    const ptr1 = passStringToWasm0(key, wasm.__wbindgen_export, wasm.__wbindgen_export2);
+    const len1 = WASM_VECTOR_LEN;
+    const ret = wasm.verify_chain(ptr0, len0, ptr1, len1);
+    return ret !== 0;
+}
+exports.verify_chain = verify_chain;
+
+function __wbg_get_imports() {
+    const import0 = {
+        __proto__: null,
+    };
+    return {
+        __proto__: null,
+        "./guidance_kernel_bg.js": import0,
+    };
+}
+
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
+
+function getStringFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return decodeText(ptr, len);
+}
+
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
+    }
+    return cachedUint8ArrayMemory0;
+}
+
+function passStringToWasm0(arg, malloc, realloc) {
+    if (realloc === undefined) {
+        const buf = cachedTextEncoder.encode(arg);
+        const ptr = malloc(buf.length, 1) >>> 0;
+        getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
+        WASM_VECTOR_LEN = buf.length;
+        return ptr;
+    }
+
+    let len = arg.length;
+    let ptr = malloc(len, 1) >>> 0;
+
+    const mem = getUint8ArrayMemory0();
+
+    let offset = 0;
+
+    for (; offset < len; offset++) {
+        const code = arg.charCodeAt(offset);
+        if (code > 0x7F) break;
+        mem[ptr + offset] = code;
+    }
+    if (offset !== len) {
+        if (offset !== 0) {
+            arg = arg.slice(offset);
+        }
+        ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
+        const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
+        const ret = cachedTextEncoder.encodeInto(arg, view);
+
+        offset += ret.written;
+        ptr = realloc(ptr, len, offset, 1) >>> 0;
+    }
+
+    WASM_VECTOR_LEN = offset;
+    return ptr;
+}
+
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
+}
+
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    };
+}
+
+let WASM_VECTOR_LEN = 0;
+
+const wasmPath = `${__dirname}/guidance_kernel_bg.wasm`;
+const wasmBytes = require('fs').readFileSync(wasmPath);
+const wasmModule = new WebAssembly.Module(wasmBytes);
+const wasm = new WebAssembly.Instance(wasmModule, __wbg_get_imports()).exports;

package/wasm-pkg/guidance_kernel_bg.wasm.d.ts

@@ -0,0 +1,16 @@
+/* tslint:disable */
+/* eslint-disable */
+export const memory: WebAssembly.Memory;
+export const batch_process: (a: number, b: number, c: number) => void;
+export const content_hash: (a: number, b: number, c: number) => void;
+export const detect_destructive: (a: number, b: number, c: number) => void;
+export const hmac_sha256: (a: number, b: number, c: number, d: number, e: number) => void;
+export const kernel_init: (a: number) => void;
+export const scan_secrets: (a: number, b: number, c: number) => void;
+export const sha256: (a: number, b: number, c: number) => void;
+export const verify_chain: (a: number, b: number, c: number, d: number) => number;
+export const sign_envelope: (a: number, b: number, c: number, d: number, e: number) => void;
+export const __wbindgen_add_to_stack_pointer: (a: number) => number;
+export const __wbindgen_export: (a: number, b: number) => number;
+export const __wbindgen_export2: (a: number, b: number, c: number, d: number) => number;
+export const __wbindgen_export3: (a: number, b: number, c: number) => void;

package/wasm-pkg/package.json

@@ -0,0 +1,12 @@
+{
+  "name": "guidance-kernel",
+  "description": "Rust WASM kernel for @claude-flow/guidance — deterministic policy engine",
+  "version": "0.1.0",
+  "files": [
+    "guidance_kernel_bg.wasm",
+    "guidance_kernel.js",
+    "guidance_kernel.d.ts"
+  ],
+  "main": "guidance_kernel.js",
+  "types": "guidance_kernel.d.ts"
+}