agent-threat-rules 3.5.11 → 3.5.12

package/dist/quality/action-eligibility.d.ts

@@ -0,0 +1,263 @@
+/**
+ * ATR Quality Standard — Response-action eligibility
+ *
+ * The fifth axis of "clean must never mean never looked at it". The four before
+ * it (fieldCoverage, statusCoverage, skillPathCoverage, wild-measurement) all
+ * ask whether a rule's precision was ever measured. This one asks what a rule is
+ * allowed to DO with the precision it actually demonstrated.
+ *
+ * THE DEFECT THIS MODULE EXISTS TO PREVENT
+ *
+ * `src/action-executor.ts` contains no maturity filter and no lane filter. Grep
+ * it: the words `lane` and `maturity` do not appear. The lane gate in
+ * `src/engine.ts` decides whether a rule may FIRE; once it has fired,
+ * `computeVerdict()` unions `response.actions` across every match and the
+ * executor runs all of them in priority order. So the lane named "alert" —
+ * documented as the analyst/correlation lane — executes `kill_agent` exactly as
+ * readily as the enforce lane does.
+ *
+ * Measured, not reasoned (see docs/RESPONSE-ACTION-ELIGIBILITY.md for the run):
+ * ATR-2026-00062 is `maturity: test`, false-positives on 209 of 5,352 benign
+ * samples (3.91%), and declares `kill_agent`. Driven through
+ * `engine.evaluateWithVerdict()` at `lane: 'alert'` with a recording adapter and
+ * a real benign corpus document, all five of its actions executed —
+ * `kill_agent` first, because it has the highest executor priority.
+ *
+ * WHY THIS IS THE ONE ZERO-COST INTERVENTION
+ *
+ * Every other way to reduce false-positive damage costs recall. Tightening a
+ * regex on this same rule set traded a 64-95% FP reduction for a 64-67% recall
+ * loss. Removing an action a rule never earned costs exactly zero recall: the
+ * rule still fires, still matches, still reports, still alerts. It just stops
+ * destroying a session it was never shown to be right about.
+ *
+ * WHAT IT DOES NOT BUY (measured, so it cannot be overclaimed)
+ *
+ * `response.actions` feeds the ActionExecutor. It does NOT feed the hook
+ * verdict: `src/verdict.ts` computeVerdict derives allow/ask/deny from severity
+ * and confidence alone, and `toClaudeCodePreToolUse` maps that verdict to
+ * `permissionDecision`. Stripping every action off a `severity: critical` rule
+ * leaves `permissionDecision: deny` unchanged. This module governs executed
+ * response actions, not the hook's block decision.
+ *
+ * THE LADDER
+ *
+ * Actions are ranked by blast radius — what survives the action, not how loud it
+ * is. The ranking is deliberately NOT the executor's priority order, which
+ * encodes urgency (kill_agent runs first so it cannot be pre-empted), not harm.
+ *
+ * @module agent-threat-rules/quality/action-eligibility
+ */
+/** Blast-radius tiers, ascending. A rule may declare actions at or below its earned tier. */
+export declare const ACTION_TIERS: Readonly<{
+    /** Nothing about the agent's execution changes. Pure observation and routing. */
+    readonly OBSERVE: 0;
+    /** One operation is denied. The agent survives, retains state, and can retry. */
+    readonly INTERRUPT: 1;
+    /** Session-wide state is altered for the remainder of the run. The agent survives, degraded. */
+    readonly DEGRADE: 2;
+    /** The session or the agent is destroyed. Unrecoverable; in-flight work is lost. */
+    readonly TERMINATE: 3;
+}>;
+export type ActionTier = (typeof ACTION_TIERS)[keyof typeof ACTION_TIERS];
+/** Human-readable tier names, indexed by tier. */
+export declare const TIER_NAMES: readonly string[];
+/** Every action name this module assigns a tier to — the dispatchable set. */
+export declare const TIERED_ACTIONS: readonly string[];
+/**
+ * Blast-radius tier of an action name.
+ *
+ * An unrecognised action is OBSERVE, and that is safe rather than lenient:
+ * `ACTION_METHOD_MAP` in src/action-executor.ts has no entry for it, so the
+ * executor returns `Unknown action` without dispatching. Four such names are on
+ * disk today (`require_human_review`, `quarantine_artifact`, `rate_limit_source`,
+ * `log_alert`); they are inert, not destructive.
+ */
+export declare function actionTier(action: string): ActionTier;
+/** Highest blast-radius tier present in a list of actions. */
+export declare function highestTier(actions: readonly string[]): ActionTier;
+/**
+ * Percentage false-positive rate at or below which the published standard says a
+ * rule is production-grade. docs/QUALITY-STANDARD.md, STABLE promotion criteria:
+ * "Wild FP rate <= 0.5%". docs/proposals/001-atr-quality-standard-rfc.md §3
+ * repeats it as a hard requirement for `stable`.
+ */
+export declare const STABLE_FP_CEILING_PCT = 0.5;
+/**
+ * Percentage false-positive rate at which the published standard withdraws
+ * production status. docs/QUALITY-STANDARD.md, STABLE demotion criteria:
+ * "Wild FP rate > 2% -> Automatic demotion". A rule the standard would demote
+ * out of the blocking tier must not keep blocking actions while it sits there.
+ */
+export declare const DEMOTION_FP_PCT = 2;
+/**
+ * Stable fingerprint of everything that decides whether a rule fires.
+ *
+ * A false-positive count is a measurement OF a detection, not of a rule id. Edit
+ * the conditions and the number on file describes a rule that no longer exists —
+ * the same way a green CI run expires when the corpus or the measuring tool moves
+ * underneath it. Consumers store this alongside the count and treat a mismatch as
+ * "unmeasured", which by the policy below caps the rule at OBSERVE until someone
+ * re-measures it.
+ *
+ * Keys are sorted recursively so that YAML reordering, which changes nothing the
+ * engine sees, does not invalidate a measurement. `scan_target` is folded in
+ * because it selects the skill-path compound gate and therefore changes which
+ * inputs can reach the rule at all.
+ */
+export declare function detectionFingerprint(rule: {
+    detection?: unknown;
+    tags?: {
+        scan_target?: unknown;
+    };
+    agent_source?: {
+        type?: unknown;
+    };
+}): string;
+/** A false-positive measurement, or the explicit absence of one. */
+export interface FpEvidence {
+    /**
+     * False positives observed. `undefined` means no measurement exists — which is
+     * NOT the same as zero and must never be coerced to it (see wild-measurement.ts
+     * for the `?? 0` collapse that put `wild_fp_rate: 0` on 230 never-measured rules).
+     */
+    readonly fpCount?: number;
+    /** Benign samples the count was observed over. Required to interpret fpCount. */
+    readonly sampleCount?: number;
+    /**
+     * True when the harness reported that some of the rule's declared conditions
+     * could not be exercised at all (fieldCoverage / trace / behavioral). A partial
+     * measurement bounds nothing, so it is treated as no measurement.
+     */
+    readonly partial?: boolean;
+    /**
+     * Maturity as recorded at measurement time. `stable` is the only maturity the
+     * published ladder calls "safe for blocking actions in enterprise deployments"
+     * (docs/QUALITY-STANDARD.md) and the only one the enforce lane admits.
+     */
+    readonly maturity?: string;
+}
+/** Why a given tier ceiling was assigned. Carried into rule YAML and gate output. */
+export interface EligibilityDecision {
+    readonly maxTier: ActionTier;
+    readonly fpRatePct: number | null;
+    readonly reason: string;
+}
+/**
+ * True when a count and its denominator are both present and usable.
+ *
+ * Says nothing about completeness — `partial` is handled separately, because a
+ * partial measurement that already found false positives is real evidence of
+ * imprecision (the true rate can only be higher), while a partial measurement
+ * that found none is evidence of nothing.
+ */
+export declare function hasCount(ev: FpEvidence): boolean;
+/**
+ * True when the evidence can support raising a rule above the observe tier.
+ *
+ * A partial run with zero hits cannot: the harness said out loud that it never
+ * exercised some of the rule's conditions, so its silence is an unasked question,
+ * not an answer. A partial run WITH hits can, and does — the hits happened.
+ */
+export declare function isMeasured(ev: FpEvidence): boolean;
+/**
+ * The policy: measured false-positive evidence -> highest action tier a rule may
+ * declare.
+ *
+ * The two numeric lines are NOT chosen here. They are the two the project already
+ * published, lifted unchanged:
+ *
+ *   <= 0.5%  the STABLE promotion ceiling (QUALITY-STANDARD.md, RFC-001 §3)
+ *   >  2.0%  the STABLE automatic-demotion trigger (QUALITY-STANDARD.md)
+ *
+ * Mapping them onto blast radius:
+ *
+ *   no measurement        -> OBSERVE    absence of evidence is not evidence; a
+ *                                       gate that cannot read a measurement must
+ *                                       refuse, not pass. A PARTIAL run that found
+ *                                       nothing lands here too — the harness said
+ *                                       it never exercised some conditions, so its
+ *                                       silence is an unasked question. A partial
+ *                                       run that DID find hits is graded on them:
+ *                                       the hits happened, and the true rate can
+ *                                       only be higher
+ *   > 2%                  -> OBSERVE    the standard's own demotion line: at this
+ *                                       rate it would be pulled out of the
+ *                                       blocking tier, so it does not keep
+ *                                       blocking actions while it sits there
+ *   0.5% - 2%             -> INTERRUPT  below the demotion line but above the
+ *                                       production ceiling: a recoverable,
+ *                                       per-operation denial is proportionate;
+ *                                       session-wide state changes are not
+ *   > 0 and <= 0.5%       -> DEGRADE    meets the production FP ceiling, yet
+ *                                       demonstrably still wrong sometimes — a
+ *                                       recoverable degradation is earned, an
+ *                                       unrecoverable termination is not
+ *   0 FP and maturity     -> TERMINATE  the only evidence level that earns an
+ *   stable                              irreversible action; see below
+ *
+ * WHY TERMINATE NEEDS MORE THAN 0 FP ON THIS CORPUS
+ *
+ * Zero observed events in n trials does not mean zero rate. The rule of three
+ * puts the 95% upper bound at 3/n: on 5,352 benign samples, a clean sweep only
+ * certifies a true FP rate below roughly 0.056%. At an agent fleet's event
+ * volume that is still a real number of destroyed sessions. The published ladder
+ * already names the extra evidence needed to close that gap — `stable` requires
+ * `wild_samples >= 1000`, `wild_fp_rate <= 0.5%`, `confidence >= 80` and two
+ * maintainer approvals — and it is the same ladder that says STABLE is the tier
+ * "safe for blocking actions in enterprise deployments" while EXPERIMENTAL is
+ * "safe for evaluation and non-blocking alerting". So TERMINATE requires both: a
+ * clean sweep of this corpus AND the maturity the standard reserves for
+ * production blocking.
+ */
+export declare function maxTierFor(ev: FpEvidence): EligibilityDecision;
+/** Actions in `actions` whose tier exceeds `maxTier`, in declaration order. */
+export declare function ineligibleActions(actions: readonly string[], maxTier: ActionTier): readonly string[];
+/**
+ * The eligible subset, order preserved.
+ *
+ * `alert` is appended when the filter would otherwise leave a rule with nothing
+ * to do: a detection that reports nothing is worse than one that over-reports,
+ * and OBSERVE-tier reporting is available at every evidence level by definition.
+ */
+export declare function eligibleActions(actions: readonly string[], maxTier: ActionTier): readonly string[];
+/**
+ * Content digest of the benign corpora a measurement was taken on.
+ *
+ * `detectionFingerprint` stops a rule drifting out from under its number. It
+ * says nothing about the number, and the measurement file is committed — so in
+ * review, editing `fp_count` from 2814 to 0 plus one `maturity` line handed a
+ * rule that false-positives on 52.58% of the corpus a `kill_agent`, with the
+ * whole suite still green. "Do not hand-edit" is a convention, not a control.
+ *
+ * This lives here, exported, so the producer and the gate cannot drift apart:
+ * two copies of a hashing routine is exactly the shape of defect this policy
+ * exists to close.
+ *
+ * WHAT THIS DOES NOT CLOSE, stated plainly because the gap is easy to miss:
+ * editing `fp_count` does not touch the corpus, so the digest still matches and
+ * the gate still passes. Verified by attack — 2814 -> 0 sails through. The
+ * digest closes corpus drift (the measurement describing a corpus that has
+ * since moved); it does nothing about number drift. Only regeneration closes
+ * that, which is why .github/workflows/action-eligibility.yml re-measures on a
+ * schedule and diffs the per-rule counts. Per-PR regeneration was considered
+ * and rejected: 429 of 776 rules carry load-bearing numbers, so verifying them
+ * is a full ~45-minute gate run, and a contributor cannot forge the file
+ * without the scheduled diff surfacing it.
+ */
+export declare function corpusDigest(repoRoot: string, corpora: readonly string[], fs: {
+    readonly existsSync: (p: string) => boolean;
+    readonly readdirSync: (p: string) => string[];
+    readonly statSync: (p: string) => {
+        isDirectory(): boolean;
+    };
+    readonly readFileSync: (p: string) => Buffer;
+}, path: {
+    readonly join: (...p: string[]) => string;
+    readonly relative: (a: string, b: string) => string;
+}, createHash: (alg: string) => {
+    update(d: string | Buffer): unknown;
+    digest(enc: string): string;
+}): string;
+export declare const MEASUREMENT_CORPORA: readonly string[];
+//# sourceMappingURL=action-eligibility.d.ts.map

package/dist/quality/action-eligibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-eligibility.d.ts","sourceRoot":"","sources":["../../src/quality/action-eligibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAIH,6FAA6F;AAC7F,eAAO,MAAM,YAAY;IACvB,iFAAiF;;IAEjF,iFAAiF;;IAEjF,gGAAgG;;IAEhG,oFAAoF;;EAE3E,CAAC;AAEZ,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,kDAAkD;AAClD,eAAO,MAAM,UAAU,EAAE,SAAS,MAAM,EAKtC,CAAC;AA2BH,8EAA8E;AAC9E,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAE1C,CAAC;AAEH;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAErD;AAED,8DAA8D;AAC9D,wBAAgB,WAAW,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,UAAU,CAKlE;AAED;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAEzC;;;;;GAKG;AACH,eAAO,MAAM,eAAe,IAAM,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,IAAI,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;IACjC,YAAY,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,CAAC;CACnC,GAAG,MAAM,CAoBT;AAED,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,iFAAiF;IACjF,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,qFAAqF;AACrF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAShD;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,OAAO,CAGlD;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,wBAAgB,UAAU,CAAC,EAAE,EAAE,UAAU,GAAG,mBAAmB,CAqD9D;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,UAAU,GAClB,SAAS,MAAM,EAAE,CAEnB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,OAAO,EAAE,UAAU,GAClB,SAAS,MAAM,EAAE,CAGnB;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,EAAE,EAAE;IACF,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK;QAAE,WAAW,IAAI,OAAO,CAAA;KAAE,CAAC;IAC7D,QAAQ,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C,EACD,IAAI,EAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,KAAK,MAAM,CAAA;CAAE,EACxG,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK;IAC3B,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC;IACpC,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC;CAC7B,GACA,MAAM,CA0BR;AAED,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAI/C,CAAC"}

package/dist/quality/action-eligibility.js

@@ -0,0 +1,365 @@
+/**
+ * ATR Quality Standard — Response-action eligibility
+ *
+ * The fifth axis of "clean must never mean never looked at it". The four before
+ * it (fieldCoverage, statusCoverage, skillPathCoverage, wild-measurement) all
+ * ask whether a rule's precision was ever measured. This one asks what a rule is
+ * allowed to DO with the precision it actually demonstrated.
+ *
+ * THE DEFECT THIS MODULE EXISTS TO PREVENT
+ *
+ * `src/action-executor.ts` contains no maturity filter and no lane filter. Grep
+ * it: the words `lane` and `maturity` do not appear. The lane gate in
+ * `src/engine.ts` decides whether a rule may FIRE; once it has fired,
+ * `computeVerdict()` unions `response.actions` across every match and the
+ * executor runs all of them in priority order. So the lane named "alert" —
+ * documented as the analyst/correlation lane — executes `kill_agent` exactly as
+ * readily as the enforce lane does.
+ *
+ * Measured, not reasoned (see docs/RESPONSE-ACTION-ELIGIBILITY.md for the run):
+ * ATR-2026-00062 is `maturity: test`, false-positives on 209 of 5,352 benign
+ * samples (3.91%), and declares `kill_agent`. Driven through
+ * `engine.evaluateWithVerdict()` at `lane: 'alert'` with a recording adapter and
+ * a real benign corpus document, all five of its actions executed —
+ * `kill_agent` first, because it has the highest executor priority.
+ *
+ * WHY THIS IS THE ONE ZERO-COST INTERVENTION
+ *
+ * Every other way to reduce false-positive damage costs recall. Tightening a
+ * regex on this same rule set traded a 64-95% FP reduction for a 64-67% recall
+ * loss. Removing an action a rule never earned costs exactly zero recall: the
+ * rule still fires, still matches, still reports, still alerts. It just stops
+ * destroying a session it was never shown to be right about.
+ *
+ * WHAT IT DOES NOT BUY (measured, so it cannot be overclaimed)
+ *
+ * `response.actions` feeds the ActionExecutor. It does NOT feed the hook
+ * verdict: `src/verdict.ts` computeVerdict derives allow/ask/deny from severity
+ * and confidence alone, and `toClaudeCodePreToolUse` maps that verdict to
+ * `permissionDecision`. Stripping every action off a `severity: critical` rule
+ * leaves `permissionDecision: deny` unchanged. This module governs executed
+ * response actions, not the hook's block decision.
+ *
+ * THE LADDER
+ *
+ * Actions are ranked by blast radius — what survives the action, not how loud it
+ * is. The ranking is deliberately NOT the executor's priority order, which
+ * encodes urgency (kill_agent runs first so it cannot be pre-empted), not harm.
+ *
+ * @module agent-threat-rules/quality/action-eligibility
+ */
+import { createHash } from "node:crypto";
+/** Blast-radius tiers, ascending. A rule may declare actions at or below its earned tier. */
+export const ACTION_TIERS = Object.freeze({
+    /** Nothing about the agent's execution changes. Pure observation and routing. */
+    OBSERVE: 0,
+    /** One operation is denied. The agent survives, retains state, and can retry. */
+    INTERRUPT: 1,
+    /** Session-wide state is altered for the remainder of the run. The agent survives, degraded. */
+    DEGRADE: 2,
+    /** The session or the agent is destroyed. Unrecoverable; in-flight work is lost. */
+    TERMINATE: 3,
+});
+/** Human-readable tier names, indexed by tier. */
+export const TIER_NAMES = Object.freeze([
+    "observe",
+    "interrupt",
+    "degrade",
+    "terminate",
+]);
+/**
+ * Blast radius of every action the executor can dispatch.
+ *
+ * `escalate` sits at OBSERVE because `PlatformAdapter.escalate` routes to a
+ * human; it changes who is watching, not what the agent may do. `reset_context`
+ * sits at DEGRADE rather than TERMINATE because the agent process survives —
+ * but it has lost its working memory for the rest of the session, which is not
+ * a per-operation denial, so it does not belong at INTERRUPT either.
+ */
+const TIER_BY_ACTION = Object.freeze(new Map([
+    ["alert", ACTION_TIERS.OBSERVE],
+    ["snapshot", ACTION_TIERS.OBSERVE],
+    ["shadow", ACTION_TIERS.OBSERVE],
+    ["escalate", ACTION_TIERS.OBSERVE],
+    ["block_input", ACTION_TIERS.INTERRUPT],
+    ["block_output", ACTION_TIERS.INTERRUPT],
+    ["block_tool", ACTION_TIERS.INTERRUPT],
+    ["reduce_permissions", ACTION_TIERS.DEGRADE],
+    ["reset_context", ACTION_TIERS.DEGRADE],
+    ["quarantine_session", ACTION_TIERS.TERMINATE],
+    ["kill_agent", ACTION_TIERS.TERMINATE],
+]));
+/** Every action name this module assigns a tier to — the dispatchable set. */
+export const TIERED_ACTIONS = Object.freeze([
+    ...TIER_BY_ACTION.keys(),
+]);
+/**
+ * Blast-radius tier of an action name.
+ *
+ * An unrecognised action is OBSERVE, and that is safe rather than lenient:
+ * `ACTION_METHOD_MAP` in src/action-executor.ts has no entry for it, so the
+ * executor returns `Unknown action` without dispatching. Four such names are on
+ * disk today (`require_human_review`, `quarantine_artifact`, `rate_limit_source`,
+ * `log_alert`); they are inert, not destructive.
+ */
+export function actionTier(action) {
+    return TIER_BY_ACTION.get(action) ?? ACTION_TIERS.OBSERVE;
+}
+/** Highest blast-radius tier present in a list of actions. */
+export function highestTier(actions) {
+    return actions.reduce((max, a) => (actionTier(a) > max ? actionTier(a) : max), ACTION_TIERS.OBSERVE);
+}
+/**
+ * Percentage false-positive rate at or below which the published standard says a
+ * rule is production-grade. docs/QUALITY-STANDARD.md, STABLE promotion criteria:
+ * "Wild FP rate <= 0.5%". docs/proposals/001-atr-quality-standard-rfc.md §3
+ * repeats it as a hard requirement for `stable`.
+ */
+export const STABLE_FP_CEILING_PCT = 0.5;
+/**
+ * Percentage false-positive rate at which the published standard withdraws
+ * production status. docs/QUALITY-STANDARD.md, STABLE demotion criteria:
+ * "Wild FP rate > 2% -> Automatic demotion". A rule the standard would demote
+ * out of the blocking tier must not keep blocking actions while it sits there.
+ */
+export const DEMOTION_FP_PCT = 2.0;
+/**
+ * Stable fingerprint of everything that decides whether a rule fires.
+ *
+ * A false-positive count is a measurement OF a detection, not of a rule id. Edit
+ * the conditions and the number on file describes a rule that no longer exists —
+ * the same way a green CI run expires when the corpus or the measuring tool moves
+ * underneath it. Consumers store this alongside the count and treat a mismatch as
+ * "unmeasured", which by the policy below caps the rule at OBSERVE until someone
+ * re-measures it.
+ *
+ * Keys are sorted recursively so that YAML reordering, which changes nothing the
+ * engine sees, does not invalidate a measurement. `scan_target` is folded in
+ * because it selects the skill-path compound gate and therefore changes which
+ * inputs can reach the rule at all.
+ */
+export function detectionFingerprint(rule) {
+    const canonical = (v) => {
+        if (Array.isArray(v))
+            return v.map(canonical);
+        if (v !== null && typeof v === "object") {
+            const src = v;
+            const out = {};
+            for (const k of Object.keys(src).sort())
+                out[k] = canonical(src[k]);
+            return out;
+        }
+        return v;
+    };
+    const payload = canonical({
+        detection: rule.detection ?? null,
+        scan_target: rule.tags?.scan_target ?? null,
+        source_type: rule.agent_source?.type ?? null,
+    });
+    return createHash("sha256")
+        .update(JSON.stringify(payload))
+        .digest("hex")
+        .slice(0, 16);
+}
+/**
+ * True when a count and its denominator are both present and usable.
+ *
+ * Says nothing about completeness — `partial` is handled separately, because a
+ * partial measurement that already found false positives is real evidence of
+ * imprecision (the true rate can only be higher), while a partial measurement
+ * that found none is evidence of nothing.
+ */
+export function hasCount(ev) {
+    return (typeof ev.fpCount === "number" &&
+        Number.isFinite(ev.fpCount) &&
+        ev.fpCount >= 0 &&
+        typeof ev.sampleCount === "number" &&
+        Number.isFinite(ev.sampleCount) &&
+        ev.sampleCount > 0);
+}
+/**
+ * True when the evidence can support raising a rule above the observe tier.
+ *
+ * A partial run with zero hits cannot: the harness said out loud that it never
+ * exercised some of the rule's conditions, so its silence is an unasked question,
+ * not an answer. A partial run WITH hits can, and does — the hits happened.
+ */
+export function isMeasured(ev) {
+    if (!hasCount(ev))
+        return false;
+    return ev.partial !== true || ev.fpCount > 0;
+}
+/**
+ * The policy: measured false-positive evidence -> highest action tier a rule may
+ * declare.
+ *
+ * The two numeric lines are NOT chosen here. They are the two the project already
+ * published, lifted unchanged:
+ *
+ *   <= 0.5%  the STABLE promotion ceiling (QUALITY-STANDARD.md, RFC-001 §3)
+ *   >  2.0%  the STABLE automatic-demotion trigger (QUALITY-STANDARD.md)
+ *
+ * Mapping them onto blast radius:
+ *
+ *   no measurement        -> OBSERVE    absence of evidence is not evidence; a
+ *                                       gate that cannot read a measurement must
+ *                                       refuse, not pass. A PARTIAL run that found
+ *                                       nothing lands here too — the harness said
+ *                                       it never exercised some conditions, so its
+ *                                       silence is an unasked question. A partial
+ *                                       run that DID find hits is graded on them:
+ *                                       the hits happened, and the true rate can
+ *                                       only be higher
+ *   > 2%                  -> OBSERVE    the standard's own demotion line: at this
+ *                                       rate it would be pulled out of the
+ *                                       blocking tier, so it does not keep
+ *                                       blocking actions while it sits there
+ *   0.5% - 2%             -> INTERRUPT  below the demotion line but above the
+ *                                       production ceiling: a recoverable,
+ *                                       per-operation denial is proportionate;
+ *                                       session-wide state changes are not
+ *   > 0 and <= 0.5%       -> DEGRADE    meets the production FP ceiling, yet
+ *                                       demonstrably still wrong sometimes — a
+ *                                       recoverable degradation is earned, an
+ *                                       unrecoverable termination is not
+ *   0 FP and maturity     -> TERMINATE  the only evidence level that earns an
+ *   stable                              irreversible action; see below
+ *
+ * WHY TERMINATE NEEDS MORE THAN 0 FP ON THIS CORPUS
+ *
+ * Zero observed events in n trials does not mean zero rate. The rule of three
+ * puts the 95% upper bound at 3/n: on 5,352 benign samples, a clean sweep only
+ * certifies a true FP rate below roughly 0.056%. At an agent fleet's event
+ * volume that is still a real number of destroyed sessions. The published ladder
+ * already names the extra evidence needed to close that gap — `stable` requires
+ * `wild_samples >= 1000`, `wild_fp_rate <= 0.5%`, `confidence >= 80` and two
+ * maintainer approvals — and it is the same ladder that says STABLE is the tier
+ * "safe for blocking actions in enterprise deployments" while EXPERIMENTAL is
+ * "safe for evaluation and non-blocking alerting". So TERMINATE requires both: a
+ * clean sweep of this corpus AND the maturity the standard reserves for
+ * production blocking.
+ */
+export function maxTierFor(ev) {
+    if (!isMeasured(ev)) {
+        return Object.freeze({
+            maxTier: ACTION_TIERS.OBSERVE,
+            fpRatePct: null,
+            reason: ev.partial === true
+                ? "0 FP but the measurement is incomplete — the harness reported conditions " +
+                    "it could not exercise, so the silence is an unasked question"
+                : "no FP measurement on the benign corpus",
+        });
+    }
+    const fp = ev.fpCount;
+    const n = ev.sampleCount;
+    const pct = (fp / n) * 100;
+    const partialNote = ev.partial === true ? " (partial measurement — a lower bound)" : "";
+    const shown = `${fp}/${n} = ${pct.toFixed(2)}%${partialNote}`;
+    if (pct > DEMOTION_FP_PCT) {
+        return Object.freeze({
+            maxTier: ACTION_TIERS.OBSERVE,
+            fpRatePct: pct,
+            reason: `benign FP ${shown} exceeds the ${DEMOTION_FP_PCT}% automatic-demotion line`,
+        });
+    }
+    if (pct > STABLE_FP_CEILING_PCT) {
+        return Object.freeze({
+            maxTier: ACTION_TIERS.INTERRUPT,
+            fpRatePct: pct,
+            reason: `benign FP ${shown} exceeds the ${STABLE_FP_CEILING_PCT}% production ceiling`,
+        });
+    }
+    if (fp > 0) {
+        return Object.freeze({
+            maxTier: ACTION_TIERS.DEGRADE,
+            fpRatePct: pct,
+            reason: `benign FP ${shown} meets the ${STABLE_FP_CEILING_PCT}% ceiling but is not zero`,
+        });
+    }
+    if (String(ev.maturity ?? "").trim() !== "stable") {
+        return Object.freeze({
+            maxTier: ACTION_TIERS.DEGRADE,
+            fpRatePct: 0,
+            reason: `0/${n} benign FP, but maturity is "${String(ev.maturity ?? "unset")}" — only stable is rated for irreversible actions`,
+        });
+    }
+    return Object.freeze({
+        maxTier: ACTION_TIERS.TERMINATE,
+        fpRatePct: 0,
+        reason: `0/${n} benign FP at maturity stable`,
+    });
+}
+/** Actions in `actions` whose tier exceeds `maxTier`, in declaration order. */
+export function ineligibleActions(actions, maxTier) {
+    return Object.freeze(actions.filter((a) => actionTier(a) > maxTier));
+}
+/**
+ * The eligible subset, order preserved.
+ *
+ * `alert` is appended when the filter would otherwise leave a rule with nothing
+ * to do: a detection that reports nothing is worse than one that over-reports,
+ * and OBSERVE-tier reporting is available at every evidence level by definition.
+ */
+export function eligibleActions(actions, maxTier) {
+    const kept = actions.filter((a) => actionTier(a) <= maxTier);
+    return Object.freeze(kept.length > 0 ? kept : ["alert"]);
+}
+/**
+ * Content digest of the benign corpora a measurement was taken on.
+ *
+ * `detectionFingerprint` stops a rule drifting out from under its number. It
+ * says nothing about the number, and the measurement file is committed — so in
+ * review, editing `fp_count` from 2814 to 0 plus one `maturity` line handed a
+ * rule that false-positives on 52.58% of the corpus a `kill_agent`, with the
+ * whole suite still green. "Do not hand-edit" is a convention, not a control.
+ *
+ * This lives here, exported, so the producer and the gate cannot drift apart:
+ * two copies of a hashing routine is exactly the shape of defect this policy
+ * exists to close.
+ *
+ * WHAT THIS DOES NOT CLOSE, stated plainly because the gap is easy to miss:
+ * editing `fp_count` does not touch the corpus, so the digest still matches and
+ * the gate still passes. Verified by attack — 2814 -> 0 sails through. The
+ * digest closes corpus drift (the measurement describing a corpus that has
+ * since moved); it does nothing about number drift. Only regeneration closes
+ * that, which is why .github/workflows/action-eligibility.yml re-measures on a
+ * schedule and diffs the per-rule counts. Per-PR regeneration was considered
+ * and rejected: 429 of 776 rules carry load-bearing numbers, so verifying them
+ * is a full ~45-minute gate run, and a contributor cannot forge the file
+ * without the scheduled diff surfacing it.
+ */
+export function corpusDigest(repoRoot, corpora, fs, path, createHash) {
+    const SEP = "\u0000";
+    const walk = (dir) => {
+        const out = [];
+        for (const e of [...fs.readdirSync(dir)].sort()) {
+            const full = path.join(dir, e);
+            if (fs.statSync(full).isDirectory())
+                out.push(...walk(full));
+            else if (e.endsWith(".jsonl") || e.endsWith(".md"))
+                out.push(full);
+        }
+        return out;
+    };
+    const h = createHash("sha256");
+    for (const rel of [...corpora].sort()) {
+        const dir = path.join(repoRoot, rel);
+        if (!fs.existsSync(dir)) {
+            h.update(rel + SEP + "MISSING" + SEP);
+            continue;
+        }
+        for (const f of walk(dir)) {
+            h.update(path.relative(repoRoot, f));
+            h.update(SEP);
+            h.update(fs.readFileSync(f));
+            h.update(SEP);
+        }
+    }
+    return h.digest("hex").slice(0, 32);
+}
+export const MEASUREMENT_CORPORA = Object.freeze([
+    "data/skill-benchmark/benign",
+    "data/benign-corpus-extended",
+    "data/benign-code",
+]);
+//# sourceMappingURL=action-eligibility.js.map

package/dist/quality/action-eligibility.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"action-eligibility.js","sourceRoot":"","sources":["../../src/quality/action-eligibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,6FAA6F;AAC7F,MAAM,CAAC,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC;IACxC,iFAAiF;IACjF,OAAO,EAAE,CAAC;IACV,iFAAiF;IACjF,SAAS,EAAE,CAAC;IACZ,gGAAgG;IAChG,OAAO,EAAE,CAAC;IACV,oFAAoF;IACpF,SAAS,EAAE,CAAC;CACJ,CAAC,CAAC;AAIZ,kDAAkD;AAClD,MAAM,CAAC,MAAM,UAAU,GAAsB,MAAM,CAAC,MAAM,CAAC;IACzD,SAAS;IACT,WAAW;IACX,SAAS;IACT,WAAW;CACZ,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,cAAc,GAAoC,MAAM,CAAC,MAAM,CACnE,IAAI,GAAG,CAAqB;IAC1B,CAAC,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;IAC/B,CAAC,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC;IAClC,CAAC,QAAQ,EAAE,YAAY,CAAC,OAAO,CAAC;IAChC,CAAC,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC;IAClC,CAAC,aAAa,EAAE,YAAY,CAAC,SAAS,CAAC;IACvC,CAAC,cAAc,EAAE,YAAY,CAAC,SAAS,CAAC;IACxC,CAAC,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC;IACtC,CAAC,oBAAoB,EAAE,YAAY,CAAC,OAAO,CAAC;IAC5C,CAAC,eAAe,EAAE,YAAY,CAAC,OAAO,CAAC;IACvC,CAAC,oBAAoB,EAAE,YAAY,CAAC,SAAS,CAAC;IAC9C,CAAC,YAAY,EAAE,YAAY,CAAC,SAAS,CAAC;CACvC,CAAC,CACH,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC7D,GAAG,cAAc,CAAC,IAAI,EAAE;CACzB,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,OAAO,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,OAAO,CAAC;AAC5D,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,WAAW,CAAC,OAA0B;IACpD,OAAO,OAAO,CAAC,MAAM,CACnB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EACvD,YAAY,CAAC,OAAO,CACrB,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,GAAG,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAIpC;IACC,MAAM,SAAS,GAAG,CAAC,CAAU,EAAW,EAAE;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;YACxC,MAAM,GAAG,GAAG,CAA4B,CAAC;YACzC,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACpE,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,SAAS,CAAC;QACxB,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;QACjC,WAAW,EAAE,IAAI,CAAC,IAAI,EAAE,WAAW,IAAI,IAAI;QAC3C,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,IAAI,IAAI;KAC7C,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;SAC/B,MAAM,CAAC,KAAK,CAAC;SACb,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAClB,CAAC;AAiCD;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,EAAc;IACrC,OAAO,CACL,OAAO,EAAE,CAAC,OAAO,KAAK,QAAQ;QAC9B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,OAAO,CAAC;QAC3B,EAAE,CAAC,OAAO,IAAI,CAAC;QACf,OAAO,EAAE,CAAC,WAAW,KAAK,QAAQ;QAClC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,CAAC;QAC/B,EAAE,CAAC,WAAW,GAAG,CAAC,CACnB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,EAAc;IACvC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,KAAK,CAAC;IAChC,OAAO,EAAE,CAAC,OAAO,KAAK,IAAI,IAAK,EAAE,CAAC,OAAkB,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiDG;AACH,MAAM,UAAU,UAAU,CAAC,EAAc;IACvC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;QACpB,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,SAAS,EAAE,IAAI;YACf,MAAM,EACJ,EAAE,CAAC,OAAO,KAAK,IAAI;gBACjB,CAAC,CAAC,2EAA2E;oBAC3E,8DAA8D;gBAChE,CAAC,CAAC,wCAAwC;SAC/C,CAAC,CAAC;IACL,CAAC;IAED,MAAM,EAAE,GAAG,EAAE,CAAC,OAAiB,CAAC;IAChC,MAAM,CAAC,GAAG,EAAE,CAAC,WAAqB,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IAC3B,MAAM,WAAW,GACf,EAAE,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,MAAM,KAAK,GAAG,GAAG,EAAE,IAAI,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC;IAE9D,IAAI,GAAG,GAAG,eAAe,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,aAAa,KAAK,gBAAgB,eAAe,2BAA2B;SACrF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,GAAG,qBAAqB,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,YAAY,CAAC,SAAS;YAC/B,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,aAAa,KAAK,gBAAgB,qBAAqB,sBAAsB;SACtF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACX,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,SAAS,EAAE,GAAG;YACd,MAAM,EAAE,aAAa,KAAK,cAAc,qBAAqB,2BAA2B;SACzF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,OAAO,EAAE,YAAY,CAAC,OAAO;YAC7B,SAAS,EAAE,CAAC;YACZ,MAAM,EAAE,KAAK,CAAC,gCAAgC,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,OAAO,CAAC,mDAAmD;SAChI,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,YAAY,CAAC,SAAS;QAC/B,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,KAAK,CAAC,+BAA+B;KAC9C,CAAC,CAAC;AACL,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,iBAAiB,CAC/B,OAA0B,EAC1B,OAAmB;IAEnB,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA0B,EAC1B,OAAmB;IAEnB,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,UAAU,YAAY,CAC1B,QAAgB,EAChB,OAA0B,EAC1B,EAKC,EACD,IAAwG,EACxG,UAGC;IAED,MAAM,GAAG,GAAG,QAAQ,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,GAAW,EAAY,EAAE;QACrC,MAAM,GAAG,GAAa,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;YAC/B,IAAI,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;iBACxD,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,GAAG,GAAG,SAAS,GAAG,GAAG,CAAC,CAAC;YACtC,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC;YACrC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACd,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAsB,MAAM,CAAC,MAAM,CAAC;IAClE,6BAA6B;IAC7B,6BAA6B;IAC7B,kBAAkB;CACnB,CAAC,CAAC"}

package/dist/quality/adapters/atr.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"atr.d.ts","sourceRoot":"","sources":["../../../src/quality/adapters/atr.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAGH,OAAO,KAAK,EAIV,YAAY,EACb,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,UAAU,UAAU;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC;KAC7B,CAAC;IACF,UAAU,CAAC,EAAE;QACX,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;QAC3B,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;KAC5B,CAAC;IACF,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QACtB,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;QAC1B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;QACxB,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;KAC1B,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAM9D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CA2DhE"}
+{"version":3,"file":"atr.d.ts","sourceRoot":"","sources":["../../../src/quality/adapters/atr.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAOH,OAAO,KAAK,EAIV,YAAY,EACb,MAAM,aAAa,CAAC;AAErB;;;;GAIG;AACH,UAAU,UAAU;IAClB,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QACV,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,eAAe,CAAC,EAAE,OAAO,EAAE,CAAC;KAC7B,CAAC;IACF,UAAU,CAAC,EAAE;QACX,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;QAC3B,cAAc,CAAC,EAAE,OAAO,EAAE,CAAC;KAC5B,CAAC;IACF,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1B,UAAU,CAAC,EAAE;QACX,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC;QACtB,aAAa,CAAC,EAAE,OAAO,EAAE,CAAC;QAC1B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC;QACxB,YAAY,CAAC,EAAE,OAAO,EAAE,CAAC;KAC1B,CAAC;IACF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,mBAAmB,CAAC,EAAE;QACpB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,YAAY,CAAC,EAAE,MAAM,CAAC;QACtB,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,YAAY,CAM9D;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,YAAY,CAgEhE"}