@vauban-org/agent-sdk 0.17.4 → 1.2.0

package/dist/ports/citadel-action.contract.test.js

@@ -0,0 +1,317 @@
+/**
+ * CitadelActionPort contract tests.
+ *
+ * Applied to any CitadelActionPort implementation. Tests tiered access control,
+ * state transitions, and governance claim emission.
+ *
+ * Source: vauban-gouvernance/rules/ai/tiered-gates.md + MASTER-PLAN-v5.md §1.3
+ */
+import { describe, expect, test } from "vitest";
+import { CitadelTierViolationError, CitadelTaskRefNotFoundError, CitadelSprintNotActiveError, CitadelInvalidStateTransitionError, } from "./citadel-action.js";
+function makeActionContext(overrides = {}) {
+    return {
+        agentId: "test-agent-001",
+        agentTier: "T3",
+        runId: crypto.randomUUID(),
+        ...overrides,
+    };
+}
+function makeSprintInput(overrides = {}) {
+    return {
+        name: "Sprint Test",
+        goal: "Test sprint",
+        project_slug: "test-project",
+        start_date: new Date().toISOString(),
+        end_date: new Date(Date.now() + 7 * 24 * 60 * 60 * 1000).toISOString(),
+        ...overrides,
+    };
+}
+function makeTaskRef(overrides = {}) {
+    return {
+        ref: "test-project:sprint-1:task-001",
+        project: "test-project",
+        sprint: "sprint-1",
+        task_id: "task-001",
+        ...overrides,
+    };
+}
+function makeVerificationEvidence(overrides = {}) {
+    return {
+        passed: true,
+        evidence_text: "Verification scenario executed successfully",
+        evidence_hash: "abcd1234efgh5678ijkl9012mnop3456",
+        ...overrides,
+    };
+}
+function makeDecisionInput(overrides = {}) {
+    return {
+        decision: "Adopt new architecture",
+        context: "Performance issues in current stack",
+        options: ["Refactor current", "Migrate to new stack", "Hybrid approach"],
+        chosen: "Hybrid approach",
+        rationale: "Balance performance and migration cost",
+        ...overrides,
+    };
+}
+export const citadelActionPortContract = (factory) => {
+    describe("CitadelActionPort contract", () => {
+        test("createSprint requires T2+ tier", async () => {
+            const port = factory();
+            const input = makeSprintInput();
+            const ctx = makeActionContext({ agentTier: "T1" });
+            await expect(port.createSprint(input, ctx)).rejects.toThrow(CitadelTierViolationError);
+        });
+        test("createSprint succeeds for T2+ agents", async () => {
+            const port = factory();
+            const input = makeSprintInput();
+            const ctx = makeActionContext({ agentTier: "T2" });
+            const sprintRef = await port.createSprint(input, ctx);
+            expect(sprintRef.sprint_id).toBeDefined();
+            expect(sprintRef.project_slug).toBe(input.project_slug);
+            expect(sprintRef.name).toBe(input.name);
+        });
+        test("updateTaskStatus transitions task state", async () => {
+            const port = factory();
+            const taskRef = makeTaskRef();
+            const ctx = makeActionContext({ agentTier: "T2" });
+            // Transition todo → in_progress
+            await port.updateTaskStatus(taskRef, "in_progress", ctx);
+            // No throw = success
+            // Transition in_progress → done
+            await port.updateTaskStatus(taskRef, "done", ctx);
+            // No throw = success
+        });
+        test("updateTaskStatus blocks invalid transitions", async () => {
+            const port = factory();
+            const taskRef = makeTaskRef();
+            const ctx = makeActionContext({ agentTier: "T2" });
+            // Walk valid path: todo → in_progress → done
+            await port.updateTaskStatus(taskRef, "in_progress", ctx);
+            await port.updateTaskStatus(taskRef, "done", ctx);
+            // Now try invalid: done → in_progress (must throw)
+            await expect(port.updateTaskStatus(taskRef, "in_progress", ctx)).rejects.toMatchObject({
+                name: "CitadelInvalidStateTransitionError",
+                current_status: "done",
+                requested_status: "in_progress",
+            });
+        });
+        test("sealSprint requires T3+ tier", async () => {
+            const port = factory();
+            const evidence = makeVerificationEvidence();
+            const ctx = makeActionContext({ agentTier: "T2" });
+            await expect(port.sealSprint("sprint-1", evidence, ctx)).rejects.toThrow(CitadelTierViolationError);
+        });
+        test("sealSprint succeeds for T3+ agents with evidence", async () => {
+            const port = factory();
+            const evidence = makeVerificationEvidence({ passed: true });
+            const ctx = makeActionContext({ agentTier: "T3" });
+            const claim = await port.sealSprint("sprint-1", evidence, ctx);
+            expect(claim.sprint_id).toBe("sprint-1");
+            expect(claim.sealed_at).toBeDefined();
+            expect(claim.sealed_by_agent).toBe(ctx.agentId);
+            expect(claim.verification_evidence_hash).toBe(evidence.evidence_hash);
+        });
+        test("sealSprint fails if sprint not active", async () => {
+            const port = factory();
+            const evidence = makeVerificationEvidence();
+            const ctx = makeActionContext({ agentTier: "T3" });
+            try {
+                // Attempting to seal a sprint that is not in active status
+                await port.sealSprint("sprint-999", evidence, ctx);
+            }
+            catch (err) {
+                if (err instanceof CitadelSprintNotActiveError) {
+                    expect(err.sprint_id).toBe("sprint-999");
+                }
+            }
+        });
+        test("sealSprint emits SealedSprintClaim with anchor_id", async () => {
+            const port = factory();
+            const evidence = makeVerificationEvidence();
+            const ctx = makeActionContext({ agentTier: "T3" });
+            const claim = await port.sealSprint("sprint-1", evidence, ctx);
+            // anchor_id is optional (Phase 1+ deferred), but test should verify if present
+            if (claim.anchor_id) {
+                expect(claim.anchor_id.length).toBeGreaterThan(0);
+            }
+        });
+        test("recordDecision requires T2+ tier", async () => {
+            const port = factory();
+            const decision = makeDecisionInput();
+            const ctx = makeActionContext({ agentTier: "T1" });
+            await expect(port.recordDecision(decision, ctx)).rejects.toThrow(CitadelTierViolationError);
+        });
+        test("recordDecision succeeds for T2+ agents", async () => {
+            const port = factory();
+            const decision = makeDecisionInput();
+            const ctx = makeActionContext({ agentTier: "T2" });
+            const claim = await port.recordDecision(decision, ctx);
+            expect(claim.decision_id).toBeDefined();
+            expect(claim.created_at).toBeDefined();
+            expect(claim.archived_to_brain).toBeDefined();
+        });
+        test("recordDecision T3+ triggers cascade hook", async () => {
+            const port = factory();
+            const decision = makeDecisionInput({
+                decision: "ADR-ECO-NNN: Architectural Decision",
+            });
+            const ctx = makeActionContext({ agentTier: "T3" });
+            const claim = await port.recordDecision(decision, ctx);
+            // T3+ should trigger cascade (optional, implementation-specific)
+            // Just verify claim is returned
+            expect(claim.decision_id).toBeDefined();
+        });
+        test("tier violation error includes required and actual tier", async () => {
+            const port = factory();
+            const input = makeSprintInput();
+            const ctx = makeActionContext({ agentTier: "T1" });
+            try {
+                await port.createSprint(input, ctx);
+            }
+            catch (err) {
+                if (err instanceof CitadelTierViolationError) {
+                    expect(err.required_tier).toBe("T2");
+                    expect(err.actual_tier).toBe("T1");
+                    expect(err.operation).toBeDefined();
+                }
+            }
+        });
+        test("task not found error includes task ref", async () => {
+            const port = factory();
+            const taskRef = makeTaskRef({ ref: "nonexistent:sprint-1:task-999" });
+            const ctx = makeActionContext({ agentTier: "T2" });
+            try {
+                await port.updateTaskStatus(taskRef, "done", ctx);
+            }
+            catch (err) {
+                if (err instanceof CitadelTaskRefNotFoundError) {
+                    expect(err.task_ref).toContain("nonexistent");
+                }
+            }
+        });
+        test("sprint not active error includes current status", async () => {
+            const port = factory();
+            const evidence = makeVerificationEvidence();
+            const ctx = makeActionContext({ agentTier: "T3" });
+            try {
+                await port.sealSprint("completed-sprint", evidence, ctx);
+            }
+            catch (err) {
+                if (err instanceof CitadelSprintNotActiveError) {
+                    expect(err.sprint_id).toBe("completed-sprint");
+                    expect(err.current_status).toBeDefined();
+                }
+            }
+        });
+        test("T4 agents can seal sprints", async () => {
+            const port = factory();
+            const evidence = makeVerificationEvidence();
+            const ctx = makeActionContext({ agentTier: "T4" });
+            try {
+                const claim = await port.sealSprint("sprint-1", evidence, ctx);
+                expect(claim.sealed_by_agent).toBe(ctx.agentId);
+            }
+            catch (err) {
+                // May fail for other reasons (sprint not found), but not tier violation
+                if (err instanceof CitadelTierViolationError) {
+                    throw new Error("T4 should not have tier violation");
+                }
+            }
+        });
+    });
+};
+// ─── Mock implementation ──────────────────────────────────────────────────
+class MockCitadelActionPort {
+    sprintStates = new Map();
+    taskStates = new Map();
+    constructor() {
+        // Pre-populate some sprint states
+        this.sprintStates.set("sprint-1", {
+            status: "active",
+            tasks: new Map([
+                ["test-project:sprint-1:task-001", "todo"],
+                ["test-project:sprint-1:task-002", "in_progress"],
+            ]),
+        });
+        this.sprintStates.set("completed-sprint", {
+            status: "completed",
+            tasks: new Map(),
+        });
+    }
+    async createSprint(input, ctx) {
+        // T2+ only
+        if (ctx.agentTier === "T1") {
+            throw new CitadelTierViolationError(`T1 agents cannot create sprints`, "T2", ctx.agentTier, "createSprint");
+        }
+        const sprintId = `sprint-${Math.floor(Math.random() * 10000)}`;
+        this.sprintStates.set(sprintId, {
+            status: "planned",
+            tasks: new Map(),
+        });
+        return {
+            sprint_id: sprintId,
+            project_slug: input.project_slug,
+            name: input.name,
+            created_at: new Date(),
+        };
+    }
+    async updateTaskStatus(ref, status, ctx) {
+        // Check if task exists
+        if (!this.taskStates.has(ref.ref) && !ref.ref.startsWith("test-project")) {
+            throw new CitadelTaskRefNotFoundError(ref.ref);
+        }
+        // Get current status
+        const currentStatus = this.taskStates.get(ref.ref) || "todo";
+        // Validate state transitions
+        const validTransitions = {
+            todo: ["in_progress", "blocked", "rejected"],
+            in_progress: ["done", "blocked", "rejected"],
+            done: ["blocked", "rejected"],
+            blocked: ["in_progress", "rejected"],
+            rejected: [],
+        };
+        if (!validTransitions[currentStatus]?.includes(status)) {
+            throw new CitadelInvalidStateTransitionError(currentStatus, status);
+        }
+        this.taskStates.set(ref.ref, status);
+    }
+    async sealSprint(sprintId, evidence, ctx) {
+        // T3+ only
+        if (ctx.agentTier !== "T3" && ctx.agentTier !== "T4") {
+            throw new CitadelTierViolationError(`${ctx.agentTier} agents cannot seal sprints`, "T3", ctx.agentTier, "sealSprint");
+        }
+        // Check if sprint exists and is active
+        const sprintState = this.sprintStates.get(sprintId);
+        if (!sprintState) {
+            throw new CitadelSprintNotActiveError(sprintId, "not_found");
+        }
+        if (sprintState.status !== "active") {
+            throw new CitadelSprintNotActiveError(sprintId, sprintState.status);
+        }
+        // Update sprint status to completed
+        sprintState.status = "completed";
+        return {
+            sprint_id: sprintId,
+            sealed_at: new Date(),
+            verification_evidence_hash: evidence.evidence_hash,
+            sealed_by_agent: ctx.agentId,
+            anchor_id: `anchor-${crypto.randomUUID()}`,
+        };
+    }
+    async recordDecision(decision, ctx) {
+        // T2+ only
+        if (ctx.agentTier === "T1") {
+            throw new CitadelTierViolationError(`T1 agents cannot record decisions`, "T2", ctx.agentTier, "recordDecision");
+        }
+        const cascade = ctx.agentTier === "T3" || ctx.agentTier === "T4";
+        return {
+            decision_id: `decision-${crypto.randomUUID()}`,
+            created_at: new Date(),
+            archived_to_brain: true,
+            cascade_triggered: cascade,
+        };
+    }
+}
+// ─── Default contract application ──────────────────────────────────────────
+citadelActionPortContract(() => new MockCitadelActionPort());
+//# sourceMappingURL=citadel-action.contract.test.js.map

package/dist/ports/citadel-action.contract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"citadel-action.contract.test.js","sourceRoot":"","sources":["../../src/ports/citadel-action.contract.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAC;AAChD,OAAO,EACL,yBAAyB,EACzB,2BAA2B,EAC3B,2BAA2B,EAC3B,kCAAkC,GAOnC,MAAM,qBAAqB,CAAC;AAE7B,SAAS,iBAAiB,CACxB,YAAoC,EAAE;IAEtC,OAAO;QACL,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,IAAI;QACf,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE;QAC1B,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,YAAkC,EAAE;IAC3D,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,IAAI,EAAE,aAAa;QACnB,YAAY,EAAE,cAAc;QAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;QACtE,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,YAA8B,EAAE;IACnD,OAAO;QACL,GAAG,EAAE,gCAAgC;QACrC,OAAO,EAAE,cAAc;QACvB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,UAAU;QACnB,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAC/B,YAA2C,EAAE;IAE7C,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,aAAa,EAAE,6CAA6C;QAC5D,aAAa,EAAE,kCAAkC;QACjD,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,YAAoC,EAAE;IAEtC,OAAO;QACL,QAAQ,EAAE,wBAAwB;QAClC,OAAO,EAAE,qCAAqC;QAC9C,OAAO,EAAE,CAAC,kBAAkB,EAAE,sBAAsB,EAAE,iBAAiB,CAAC;QACxE,MAAM,EAAE,iBAAiB;QACzB,SAAS,EAAE,wCAAwC;QACnD,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,OAAgC,EAAE,EAAE;IAC5E,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,IAAI,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACzD,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;YACtD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtD,MAAM,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1C,MAAM,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxD,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,gCAAgC;YAChC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YACzD,qBAAqB;YAErB,gCAAgC;YAChC,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAClD,qBAAqB;QACvB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;YAC7D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,WAAW,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,6CAA6C;YAC7C,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YAElD,mDAAmD;YACnD,MAAM,MAAM,CACV,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,GAAG,CAAC,CACnD,CAAC,OAAO,CAAC,aAAa,CAAC;gBACtB,IAAI,EAAE,oCAAoC;gBAC1C,cAAc,EAAE,MAAM;gBACtB,gBAAgB,EAAE,aAAa;aAChC,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC9C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CACtE,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;YAClE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,wBAAwB,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5D,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC/D,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACzC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;YACtC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAChD,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACxE,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;YACvD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,IAAI,CAAC;gBACH,2DAA2D;gBAC3D,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;oBAC/C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;YACnE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC/D,+EAA+E;YAC/E,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACpB,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;YACpD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAClD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC9D,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,iBAAiB,EAAE,CAAC;YACrC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACvD,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;YACxC,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YAC1D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,iBAAiB,CAAC;gBACjC,QAAQ,EAAE,qCAAqC;aAChD,CAAC,CAAC;YACH,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACvD,iEAAiE;YACjE,gCAAgC;YAChC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;YACxE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;YAChC,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtC,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACnC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,WAAW,CAAC,EAAE,GAAG,EAAE,+BAA+B,EAAE,CAAC,CAAC;YACtE,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC;YACpD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;oBAC/C,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;gBAChD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YACjE,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,UAAU,CAAC,kBAAkB,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC3D,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,2BAA2B,EAAE,CAAC;oBAC/C,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;oBAC/C,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,wBAAwB,EAAE,CAAC;YAC5C,MAAM,GAAG,GAAG,iBAAiB,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAEnD,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,QAAQ,EAAE,GAAG,CAAC,CAAC;gBAC/D,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,wEAAwE;gBACxE,IAAI,GAAG,YAAY,yBAAyB,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AAEF,6EAA6E;AAE7E,MAAM,qBAAqB;IACjB,YAAY,GAAG,IAAI,GAAG,EAM3B,CAAC;IACI,UAAU,GAAG,IAAI,GAAG,EAAsB,CAAC;IAEnD;QACE,kCAAkC;QAClC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE;YAChC,MAAM,EAAE,QAAQ;YAChB,KAAK,EAAE,IAAI,GAAG,CAAC;gBACb,CAAC,gCAAgC,EAAE,MAAM,CAAC;gBAC1C,CAAC,gCAAgC,EAAE,aAAa,CAAC;aAClD,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,EAAE;YACxC,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,IAAI,GAAG,EAAE;SACjB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,KAAkB,EAClB,GAAkB;QAElB,WAAW;QACX,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CACjC,iCAAiC,EACjC,IAAI,EACJ,GAAG,CAAC,SAAS,EACb,cAAc,CACf,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;QAC/D,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE;YAC9B,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,IAAI,GAAG,EAAE;SACjB,CAAC,CAAC;QAEH,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,UAAU,EAAE,IAAI,IAAI,EAAE;SACvB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,GAAY,EACZ,MAAkB,EAClB,GAAkB;QAElB,uBAAuB;QACvB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,2BAA2B,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjD,CAAC;QAED,qBAAqB;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC;QAE7D,6BAA6B;QAC7B,MAAM,gBAAgB,GAAqC;YACzD,IAAI,EAAE,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC;YAC5C,WAAW,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAAC;YAC5C,IAAI,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC;YAC7B,OAAO,EAAE,CAAC,aAAa,EAAE,UAAU,CAAC;YACpC,QAAQ,EAAE,EAAE;SACb,CAAC;QAEF,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,MAAM,IAAI,kCAAkC,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACtE,CAAC;QAED,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,QAA8B,EAC9B,GAAkB;QAElB,WAAW;QACX,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,IAAI,yBAAyB,CACjC,GAAG,GAAG,CAAC,SAAS,6BAA6B,EAC7C,IAAI,EACJ,GAAG,CAAC,SAAS,EACb,YAAY,CACb,CAAC;QACJ,CAAC;QAED,uCAAuC;QACvC,MAAM,WAAW,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,MAAM,IAAI,2BAA2B,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC/D,CAAC;QAED,IAAI,WAAW,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,IAAI,2BAA2B,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;QACtE,CAAC;QAED,oCAAoC;QACpC,WAAW,CAAC,MAAM,GAAG,WAAW,CAAC;QAEjC,OAAO;YACL,SAAS,EAAE,QAAQ;YACnB,SAAS,EAAE,IAAI,IAAI,EAAE;YACrB,0BAA0B,EAAE,QAAQ,CAAC,aAAa;YAClD,eAAe,EAAE,GAAG,CAAC,OAAO;YAC5B,SAAS,EAAE,UAAU,MAAM,CAAC,UAAU,EAAE,EAAE;SAC3C,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,QAAuB,EACvB,GAAkB;QAElB,WAAW;QACX,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAyB,CACjC,mCAAmC,EACnC,IAAI,EACJ,GAAG,CAAC,SAAS,EACb,gBAAgB,CACjB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC;QAEjE,OAAO;YACL,WAAW,EAAE,YAAY,MAAM,CAAC,UAAU,EAAE,EAAE;YAC9C,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,iBAAiB,EAAE,IAAI;YACvB,iBAAiB,EAAE,OAAO;SAC3B,CAAC;IACJ,CAAC;CACF;AAED,8EAA8E;AAE9E,yBAAyB,CAAC,GAAG,EAAE,CAAC,IAAI,qBAAqB,EAAE,CAAC,CAAC"}

package/dist/ports/citadel-action.d.ts

@@ -0,0 +1,111 @@
+/**
+ * CitadelActionPort — host adapter for Citadel governance operations.
+ *
+ * Implements tiered access control (T1-T4) per BYOA (Bring Your Own Agent) framework.
+ * Only T3+ agents can seal sprints, T1 is read-only, T4 requires on-chain signing.
+ *
+ * Source: MASTER-PLAN-v5.md §1.3 (CC service layer) + vauban-gouvernance/rules/ai/tiered-gates.md
+ */
+export type AgentTier = "T1" | "T2" | "T3" | "T4";
+export type TaskStatus = "todo" | "in_progress" | "done" | "blocked" | "rejected";
+export interface SprintInput {
+    readonly name: string;
+    readonly goal?: string;
+    readonly start_date?: string;
+    readonly end_date?: string;
+    readonly project_slug: string;
+}
+export interface TaskRef {
+    readonly ref: string;
+    readonly project: string;
+    readonly sprint: string;
+    readonly task_id: string;
+}
+export interface VerificationEvidence {
+    readonly passed: boolean;
+    readonly evidence_text: string;
+    readonly evidence_hash: string;
+}
+export interface DecisionInput {
+    readonly decision: string;
+    readonly context: string;
+    readonly options: readonly string[];
+    readonly chosen: string;
+    readonly rationale: string;
+    readonly tags?: readonly string[];
+}
+export interface ActionContext {
+    readonly agentId: string;
+    readonly agentTier: AgentTier;
+    readonly runId: string;
+    readonly tenantId?: string;
+}
+export interface SprintRef {
+    readonly sprint_id: string;
+    readonly project_slug: string;
+    readonly name: string;
+    readonly created_at: Date;
+}
+export interface SealedSprintClaim {
+    readonly sprint_id: string;
+    readonly sealed_at: Date;
+    readonly verification_evidence_hash: string;
+    readonly sealed_by_agent: string;
+    readonly anchor_id?: string;
+}
+export interface DecisionClaim {
+    readonly decision_id: string;
+    readonly created_at: Date;
+    readonly archived_to_brain: boolean;
+    readonly cascade_triggered?: boolean;
+}
+export interface CitadelActionPort {
+    /**
+     * Create a new sprint in a project.
+     * T2+ only. T1 throws CitadelTierViolationError.
+     */
+    createSprint(input: SprintInput, ctx: ActionContext): Promise<SprintRef>;
+    /**
+     * Update task status within a sprint.
+     * T2+ can transition: todo→in_progress, in_progress→done, *→blocked.
+     * T3+ can seal (→done with verification).
+     */
+    updateTaskStatus(ref: TaskRef, status: TaskStatus, ctx: ActionContext): Promise<void>;
+    /**
+     * Seal a completed sprint with verification evidence.
+     * T3+ only. Emits SealedSprintClaim (anchor to L3 deferred Phase 1+).
+     * Verification evidence hash proves execution of verification_scenario.
+     */
+    sealSprint(sprintId: string, evidence: VerificationEvidence, ctx: ActionContext): Promise<SealedSprintClaim>;
+    /**
+     * Record a decision to governance layer.
+     * T2+ can record. T3+ triggers optional ADR cascade hook.
+     * Returns DecisionClaim with Brain archive status.
+     */
+    recordDecision(decision: DecisionInput, ctx: ActionContext): Promise<DecisionClaim>;
+}
+export declare class CitadelTierViolationError extends Error {
+    readonly required_tier: AgentTier;
+    readonly actual_tier: AgentTier;
+    readonly operation: string;
+    readonly cause?: unknown | undefined;
+    constructor(message: string, required_tier: AgentTier, actual_tier: AgentTier, operation: string, cause?: unknown | undefined);
+}
+export declare class CitadelTaskRefNotFoundError extends Error {
+    readonly task_ref: string;
+    readonly cause?: unknown | undefined;
+    constructor(task_ref: string, cause?: unknown | undefined);
+}
+export declare class CitadelSprintNotActiveError extends Error {
+    readonly sprint_id: string;
+    readonly current_status: string;
+    readonly cause?: unknown | undefined;
+    constructor(sprint_id: string, current_status: string, cause?: unknown | undefined);
+}
+export declare class CitadelInvalidStateTransitionError extends Error {
+    readonly current_status: TaskStatus;
+    readonly requested_status: TaskStatus;
+    readonly cause?: unknown | undefined;
+    constructor(current_status: TaskStatus, requested_status: TaskStatus, cause?: unknown | undefined);
+}
+//# sourceMappingURL=citadel-action.d.ts.map

package/dist/ports/citadel-action.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"citadel-action.d.ts","sourceRoot":"","sources":["../../src/ports/citadel-action.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,MAAM,SAAS,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAClD,MAAM,MAAM,UAAU,GAClB,MAAM,GACN,aAAa,GACb,MAAM,GACN,SAAS,GACT,UAAU,CAAC;AAEf,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAID,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;IAC1B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAID,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAEzE;;;;OAIG;IACH,gBAAgB,CACd,GAAG,EAAE,OAAO,EACZ,MAAM,EAAE,UAAU,EAClB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,IAAI,CAAC,CAAC;IAEjB;;;;OAIG;IACH,UAAU,CACR,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,oBAAoB,EAC9B,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAE9B;;;;OAIG;IACH,cAAc,CACZ,QAAQ,EAAE,aAAa,EACvB,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,aAAa,CAAC,CAAC;CAC3B;AAID,qBAAa,yBAA0B,SAAQ,KAAK;aAGhC,aAAa,EAAE,SAAS;aACxB,WAAW,EAAE,SAAS;aACtB,SAAS,EAAE,MAAM;aACjB,KAAK,CAAC,EAAE,OAAO;gBAJ/B,OAAO,EAAE,MAAM,EACC,aAAa,EAAE,SAAS,EACxB,WAAW,EAAE,SAAS,EACtB,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,QAAQ,EAAE,MAAM;aAChB,KAAK,CAAC,EAAE,OAAO;gBADf,QAAQ,EAAE,MAAM,EAChB,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC;AAED,qBAAa,2BAA4B,SAAQ,KAAK;aAElC,SAAS,EAAE,MAAM;aACjB,cAAc,EAAE,MAAM;aACtB,KAAK,CAAC,EAAE,OAAO;gBAFf,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,MAAM,EACtB,KAAK,CAAC,EAAE,OAAO,YAAA;CAQlC;AAED,qBAAa,kCAAmC,SAAQ,KAAK;aAEzC,cAAc,EAAE,UAAU;aAC1B,gBAAgB,EAAE,UAAU;aAC5B,KAAK,CAAC,EAAE,OAAO;gBAFf,cAAc,EAAE,UAAU,EAC1B,gBAAgB,EAAE,UAAU,EAC5B,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC"}

package/dist/ports/citadel-action.js

@@ -0,0 +1,62 @@
+/**
+ * CitadelActionPort — host adapter for Citadel governance operations.
+ *
+ * Implements tiered access control (T1-T4) per BYOA (Bring Your Own Agent) framework.
+ * Only T3+ agents can seal sprints, T1 is read-only, T4 requires on-chain signing.
+ *
+ * Source: MASTER-PLAN-v5.md §1.3 (CC service layer) + vauban-gouvernance/rules/ai/tiered-gates.md
+ */
+// ─── Typed errors ─────────────────────────────────────────────────────────
+export class CitadelTierViolationError extends Error {
+    required_tier;
+    actual_tier;
+    operation;
+    cause;
+    constructor(message, required_tier, actual_tier, operation, cause) {
+        super(message);
+        this.required_tier = required_tier;
+        this.actual_tier = actual_tier;
+        this.operation = operation;
+        this.cause = cause;
+        this.name = "CitadelTierViolationError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class CitadelTaskRefNotFoundError extends Error {
+    task_ref;
+    cause;
+    constructor(task_ref, cause) {
+        super(`Task not found: ${task_ref}`);
+        this.task_ref = task_ref;
+        this.cause = cause;
+        this.name = "CitadelTaskRefNotFoundError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class CitadelSprintNotActiveError extends Error {
+    sprint_id;
+    current_status;
+    cause;
+    constructor(sprint_id, current_status, cause) {
+        super(`Sprint ${sprint_id} is not active (status: ${current_status}). Cannot seal.`);
+        this.sprint_id = sprint_id;
+        this.current_status = current_status;
+        this.cause = cause;
+        this.name = "CitadelSprintNotActiveError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+export class CitadelInvalidStateTransitionError extends Error {
+    current_status;
+    requested_status;
+    cause;
+    constructor(current_status, requested_status, cause) {
+        super(`Invalid state transition: ${current_status} → ${requested_status}`);
+        this.current_status = current_status;
+        this.requested_status = requested_status;
+        this.cause = cause;
+        this.name = "CitadelInvalidStateTransitionError";
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+//# sourceMappingURL=citadel-action.js.map

package/dist/ports/citadel-action.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"citadel-action.js","sourceRoot":"","sources":["../../src/ports/citadel-action.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAmHH,6EAA6E;AAE7E,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAGhC;IACA;IACA;IACA;IALlB,YACE,OAAe,EACC,aAAwB,EACxB,WAAsB,EACtB,SAAiB,EACjB,KAAe;QAE/B,KAAK,CAAC,OAAO,CAAC,CAAC;QALC,kBAAa,GAAb,aAAa,CAAW;QACxB,gBAAW,GAAX,WAAW,CAAW;QACtB,cAAS,GAAT,SAAS,CAAQ;QACjB,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAElC;IACA;IAFlB,YACkB,QAAgB,EAChB,KAAe;QAE/B,KAAK,CAAC,mBAAmB,QAAQ,EAAE,CAAC,CAAC;QAHrB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAElC;IACA;IACA;IAHlB,YACkB,SAAiB,EACjB,cAAsB,EACtB,KAAe;QAE/B,KAAK,CACH,UAAU,SAAS,2BAA2B,cAAc,iBAAiB,CAC9E,CAAC;QANc,cAAS,GAAT,SAAS,CAAQ;QACjB,mBAAc,GAAd,cAAc,CAAQ;QACtB,UAAK,GAAL,KAAK,CAAU;QAK/B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,MAAM,OAAO,kCAAmC,SAAQ,KAAK;IAEzC;IACA;IACA;IAHlB,YACkB,cAA0B,EAC1B,gBAA4B,EAC5B,KAAe;QAE/B,KAAK,CAAC,6BAA6B,cAAc,MAAM,gBAAgB,EAAE,CAAC,CAAC;QAJ3D,mBAAc,GAAd,cAAc,CAAY;QAC1B,qBAAgB,GAAhB,gBAAgB,CAAY;QAC5B,UAAK,GAAL,KAAK,CAAU;QAG/B,IAAI,CAAC,IAAI,GAAG,oCAAoC,CAAC;QACjD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF"}

package/dist/ports/compliance-contract.d.ts

@@ -0,0 +1,123 @@
+/**
+ * ComplianceContractPort — runtime compliance gate for the Vauban Integration Spine.
+ *
+ * Implements the G-2 Cedar pivot from S5 spec:
+ * - pre-step: block or warn before capability invocation
+ * - post-step: audit trail after invocation
+ * - validateManifest: conflict detection at registration
+ *
+ * Cedar policy bundles: eu.gdpr / eu.mica / eu.tfr (V0 scope per S5 Q5.1).
+ */
+export type Jurisdiction = "FR.v1" | "EU.v1" | "CH.v1" | "UK.v1" | "SG.v1";
+export declare const SUPPORTED_JURISDICTIONS_V0: Jurisdiction[];
+export type LegalBasisRef = "gdpr.art6_1_a" | "gdpr.art6_1_b" | "gdpr.art6_1_c" | "gdpr.art6_1_f" | "mica.art14" | "tfr.art4" | "cjeu.c520_21";
+export type LegalBasisDomain = "processing" | "retention" | "transfer" | "consent";
+export interface LegalBasisDecl {
+    domain: LegalBasisDomain;
+    basis: LegalBasisRef;
+    scope?: Jurisdiction[];
+}
+export type DataClass = "public" | "internal" | "confidential" | "secret";
+export type EnforcementLevel = "block" | "warn" | "log";
+export type RuleSource = "declared" | "normative";
+export interface ComplianceRule {
+    readonly id: string;
+    readonly source: RuleSource;
+    readonly jurisdiction: Jurisdiction;
+    readonly legal_ref: LegalBasisRef;
+    readonly enforcement: EnforcementLevel;
+    readonly rationale: string;
+    readonly authority?: string;
+}
+export type ComplianceMode = "strict" | "audit_only";
+export interface ComplianceContract {
+    readonly jurisdictions: Jurisdiction[];
+    readonly legal_bases: LegalBasisDecl[];
+    readonly data_class: DataClass;
+    readonly mode: ComplianceMode;
+    readonly tier: string;
+    readonly rules: ComplianceRule[];
+    readonly retention: string;
+    readonly audit_format?: "json" | "pdf";
+}
+export interface CapabilityInvocation {
+    readonly action: string;
+    readonly tenantId: string;
+    readonly dataClass: DataClass;
+    readonly legalBasis?: LegalBasisRef;
+    readonly jurisdiction?: Jurisdiction;
+    readonly requiresConsent?: boolean;
+    readonly requiresVerifiedHuman?: boolean;
+    readonly stepIndex?: number;
+    readonly workflowRunId?: string;
+}
+export interface TenantContext {
+    readonly tenantId: string;
+    readonly glacisMode: "verified" | "degraded_verified" | "unverified";
+    readonly verifiedHuman: boolean;
+    readonly jurisdictions: Jurisdiction[];
+}
+export interface ComplianceViolation {
+    readonly ruleId: string;
+    readonly articleRef: string;
+    readonly description: string;
+    readonly severity: "block" | "warn";
+    readonly remediationHint?: string;
+}
+export type ComplianceGate = {
+    readonly decision: "proceed";
+    readonly warnings: ComplianceViolation[];
+} | {
+    readonly decision: "block";
+    readonly violation: ComplianceViolation;
+};
+export interface ComplianceAuditResult {
+    readonly decision: "proceed" | "block" | "warn";
+    readonly violations: ComplianceViolation[];
+    readonly auditClaimEmitted: boolean;
+    readonly evaluatedRules: number;
+}
+export interface PolicyConflict {
+    readonly rule1Id: string;
+    readonly rule2Id: string;
+    readonly description: string;
+    readonly status: "CONFLICT" | "CONFLICT_UNDETERMINED";
+}
+export interface ManifestValidationResult {
+    readonly valid: boolean;
+    readonly conflicts: PolicyConflict[];
+    readonly missingLegalBases: string[];
+    readonly jurisdictionWarnings: string[];
+    readonly evaluationTimeMs: number;
+}
+export interface ComplianceContractPort {
+    /**
+     * Pre-step gate — called before any capability invocation.
+     * In 'strict' mode: block on first violation.
+     * In 'audit_only' mode: never block, accumulate warnings.
+     */
+    preStep(invocation: CapabilityInvocation, contract: ComplianceContract, ctx: TenantContext): Promise<ComplianceGate>;
+    /**
+     * Post-step audit — called after capability invocation to emit audit claims.
+     * Always runs regardless of pre-step outcome.
+     */
+    postStep(invocation: CapabilityInvocation, contract: ComplianceContract, ctx: TenantContext): Promise<ComplianceAuditResult>;
+    /**
+     * Manifest validation — called at registration, before any workflow runs.
+     * Cedar conflict detection per G-3. Timeout → CONFLICT_UNDETERMINED (not fail).
+     */
+    validateManifest(contract: ComplianceContract, opts?: {
+        timeoutMs?: number;
+    }): Promise<ManifestValidationResult>;
+}
+export declare class CompliancePolicyError extends Error {
+    readonly ruleId: string;
+    readonly cause?: unknown | undefined;
+    constructor(message: string, ruleId: string, cause?: unknown | undefined);
+}
+export declare class ComplianceEvaluationTimeoutError extends Error {
+    readonly timeoutMs: number;
+    readonly cause?: unknown | undefined;
+    constructor(timeoutMs: number, cause?: unknown | undefined);
+}
+//# sourceMappingURL=compliance-contract.d.ts.map

package/dist/ports/compliance-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-contract.d.ts","sourceRoot":"","sources":["../../src/ports/compliance-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAIH,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;AAE3E,eAAO,MAAM,0BAA0B,EAAE,YAAY,EAAuB,CAAC;AAI7E,MAAM,MAAM,aAAa,GACrB,eAAe,GACf,eAAe,GACf,eAAe,GACf,eAAe,GACf,YAAY,GACZ,UAAU,GACV,cAAc,CAAC;AAEnB,MAAM,MAAM,gBAAgB,GACxB,YAAY,GACZ,WAAW,GACX,UAAU,GACV,SAAS,CAAC;AAEd,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;CACxB;AAID,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,UAAU,GAAG,cAAc,GAAG,QAAQ,CAAC;AAI1E,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AACxD,MAAM,MAAM,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;AAElD,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAID,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,YAAY,CAAC;AAErD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,cAAc,EAAE,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,cAAc,EAAE,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;CACxC;AAID,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;IACpC,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAC;IACrC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,UAAU,GAAG,mBAAmB,GAAG,YAAY,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,YAAY,EAAE,CAAC;CACxC;AAID,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,EAAE,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAE5E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,GAAG,OAAO,GAAG,MAAM,CAAC;IAChD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAC3C,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAID,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,uBAAuB,CAAC;CACvD;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC;IACrC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAID,MAAM,WAAW,sBAAsB;IACrC;;;;OAIG;IACH,OAAO,CACL,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,cAAc,CAAC,CAAC;IAE3B;;;OAGG;IACH,QAAQ,CACN,UAAU,EAAE,oBAAoB,EAChC,QAAQ,EAAE,kBAAkB,EAC5B,GAAG,EAAE,aAAa,GACjB,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAElC;;;OAGG;IACH,gBAAgB,CACd,QAAQ,EAAE,kBAAkB,EAC5B,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAC5B,OAAO,CAAC,wBAAwB,CAAC,CAAC;CACtC;AAID,qBAAa,qBAAsB,SAAQ,KAAK;aAG5B,MAAM,EAAE,MAAM;aACd,KAAK,CAAC,EAAE,OAAO;gBAF/B,OAAO,EAAE,MAAM,EACC,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC;AAED,qBAAa,gCAAiC,SAAQ,KAAK;aAEvC,SAAS,EAAE,MAAM;aACjB,KAAK,CAAC,EAAE,OAAO;gBADf,SAAS,EAAE,MAAM,EACjB,KAAK,CAAC,EAAE,OAAO,YAAA;CAMlC"}