agentfootprint 9.75.0 → 9.76.1

package/dist/core/runbook/runbookAsTool.js

@@ -0,0 +1,381 @@
+"use strict";
+/**
+ * runbookAsTool — turn a written operational procedure into a tool whose
+ * every answer is EVIDENCE: who decided what, against which threshold, on
+ * which rule version, with the recorded walk to check it against.
+ *
+ * The standard bridge from a footprintjs chart to the Agent's tool surface.
+ * Where `flowchartAsTool` returns bare `JSON.stringify(values)`,
+ * runbookAsTool supplies the missing middle — the honesty envelope every
+ * hand-rolled triage tool was building for itself:
+ *
+ *   THE MANDATORY SPINE (every runbook, whatever its shape):
+ *     - `af_coverage` — the three-list ledger, with every INNER tool's own
+ *       ledger folded upward through the run's dispatch, plus the sentence
+ *       naming the rule set and version;
+ *     - `result.af_provenance` — re-emitted FIRST (a carried `LOCAL SEED`
+ *       confession survives composition);
+ *     - `result.rule_version` — the declared rules' version, or the honest
+ *       `'undeclared'`;
+ *     - `result.walk` — the recorded walk's descriptor. The walk itself
+ *       ships as an artifact ticket (kind `recording/chart-walk`), never as
+ *       bytes; when it does not fit, the CONTROL FLOW survives and the
+ *       projection is declared.
+ *
+ *   THE OPTIONAL PROJECTION (selected by `resultKind: 'verdict/*'`):
+ *     verdict rows off the chart's `verdicts` state key, capped with
+ *     truthful counters, a pre-rendered table over the SAME rows, and
+ *     `verdict_meanings` GENERATED from the decider's declared branches +
+ *     the rule labels this run's decide() evidence carried.
+ *
+ *   THREE OUTCOMES, honestly: a clean envelope; an inner ABSENCE passed
+ *   through verbatim (the framework still reads it as an absence); and
+ *   DECLINED rows counted into the ledger as not-checked ground.
+ *
+ * The procedure is a FACTORY invoked per call with the run's own tool
+ * dispatch (`ctx.tools`) — fresh chart every run, stages close over the
+ * dispatch, and every inner tool's honesty ledger folds into this tool's
+ * answer.
+ *
+ * Reserved state keys the bridge reads off the final scope:
+ *   - `verdicts` — the rowset (verdict projection only);
+ *   - `coverage` — chart-declared coverage entries (`{checked?, not_checked?,
+ *     cannot_cover?}`);
+ *   - `report`  — the app's own result fields, spread into `result` verbatim
+ *     BESIDE the spine, never over it: the envelope's own names (the spine
+ *     plus the projection this run assembled) are reserved, and a report
+ *     field spelling one of them is discarded and NAMED in `report_note`.
+ *
+ * Pause: NOT yet bridged. A paused inner chart throws with the checkpoint
+ * attached, exactly like `flowchartAsTool` — the approval-gate integration
+ * is the next phase of the runbook program.
+ *
+ * @example the smallest legal call — still yields the honest spine
+ *   const tool = runbookAsTool({
+ *     name: 'restart_check',
+ *     description: 'Run the restart-safety procedure.',
+ *     procedure: () =>
+ *       flowChart<{ safe: boolean }>('restart-safety', (scope) => {
+ *         scope.safe = true;
+ *       }, 'check').build(),
+ *   });
+ *
+ * @example a triage runbook with rules, verdicts, and an inner tool
+ *   const triage = runbookAsTool({
+ *     name: 'backup_triage',
+ *     description: 'Assess backup protection posture for every subject.',
+ *     resultKind: 'verdict/backup-posture',
+ *     rules: { name: 'health-signal', version: 'v1' },
+ *     verdicts: { decider: 'posture' },
+ *     composedOf: ['backup_inventory'],
+ *     procedure: (tools) =>
+ *       flowChart<TriageState>('backup-triage', async (scope) => {
+ *         const inner = (await tools.call('backup_inventory', {})) as InventoryResult;
+ *         scope.subjects = inner.result.rows;
+ *       }, 'inventory')
+ *         .addDeciderFunction('Posture', postureDecider, 'posture')
+ *           .addFunctionBranch('protected', 'Protected', landProtected)
+ *           .addFunctionBranch('unprotected', 'Unprotected', landUnprotected)
+ *           .end()
+ *         .build(),
+ *   });
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runbookAsTool = void 0;
+const footprintjs_1 = require("footprintjs");
+const trace_1 = require("footprintjs/trace");
+const innerRunRecords_js_1 = require("../../lib/trace-toolpack/innerRunRecords.js");
+const tools_js_1 = require("../tools.js");
+const coverage_js_1 = require("./coverage.js");
+const dispatch_js_1 = require("./dispatch.js");
+const report_js_1 = require("./report.js");
+const verdicts_js_1 = require("./verdicts.js");
+const walk_js_1 = require("./walk.js");
+/** The projection selector: a `resultKind` in the `verdict/` namespace gets
+ *  the rowset projection; every other kind ships the spine plus the chart's
+ *  own `report`. */
+const VERDICT_KIND_PREFIX = 'verdict/';
+function bagOf(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+/** Lift the chart's declared input schema when it is a PLAIN JSON-Schema
+ *  object. A parseable schema (`.safeParse`/`.parse` — zod et al.) validates
+ *  at the executor but cannot be serialized for the model: skipped, default
+ *  applies. */
+function liftInputSchema(chart) {
+    const schema = bagOf(chart.inputSchema);
+    if (schema === undefined)
+        return undefined;
+    const parseable = typeof schema.safeParse === 'function' ||
+        typeof schema.parse === 'function';
+    return parseable ? undefined : schema;
+}
+/**
+ * Wrap a footprintjs procedure as a `Tool` whose every answer carries the
+ * honesty spine. See the module header for the envelope; see
+ * {@link RunbookAsToolOptions} for the full options bag. The smallest legal
+ * call is `{ name, description, procedure }`.
+ */
+function runbookAsTool(opts) {
+    const label = `runbookAsTool(${opts.name || '?'})`;
+    if (!opts.name || opts.name.trim().length === 0) {
+        throw new Error('runbookAsTool: `name` is required and must be non-empty.');
+    }
+    if (!opts.description || opts.description.length === 0) {
+        throw new Error(`${label}: \`description\` is required — a description-less tool is invisible to the model.`);
+    }
+    if (typeof opts.procedure !== 'function') {
+        throw new Error(`${label}: \`procedure\` is required — a factory invoked per call with the run's ` +
+            `tool dispatch, returning a built chart. (Migrating from flowchartAsTool? Wrap ` +
+            `your chart: \`procedure: () => chart\` builds it fresh each run.)`);
+    }
+    if (opts.rules !== undefined) {
+        const { name, version } = opts.rules;
+        if (typeof name !== 'string' ||
+            name.trim() === '' ||
+            typeof version !== 'string' ||
+            version.trim() === '') {
+            throw new Error(`${label}: \`rules\` must carry a non-empty name and version — it is the provenance ` +
+                `stamp every evidence sentence names. Got ${JSON.stringify(opts.rules)}.`);
+        }
+    }
+    if (opts.verdicts !== undefined) {
+        if (typeof opts.verdicts.decider !== 'string' || opts.verdicts.decider.trim() === '') {
+            throw new Error(`${label}: \`verdicts.decider\` must name the decider stage whose branches generate ` +
+                `verdict_meanings. Got ${JSON.stringify(opts.verdicts.decider)}.`);
+        }
+        const maxRows = opts.verdicts.maxRows;
+        if (maxRows !== undefined && (!Number.isInteger(maxRows) || maxRows < 1)) {
+            throw new Error(`${label}: \`verdicts.maxRows\` must be a whole number of rows, at least 1 — got ` +
+                `${String(maxRows)}.`);
+        }
+    }
+    const cap = opts.walk?.cap;
+    if (cap !== undefined && (!Number.isInteger(cap) || cap < 1)) {
+        throw new Error(`${label}: \`walk.cap\` must be a whole number of rows, at least 1 — got ${String(cap)}.`);
+    }
+    if (opts.keepRecordLimit !== undefined) {
+        if (opts.keepRecord !== true) {
+            throw new Error(`${label}: \`keepRecordLimit\` caps records that are never kept — add ` +
+                `\`keepRecord: true\`, or drop the limit.`);
+        }
+        if (!Number.isInteger(opts.keepRecordLimit) || opts.keepRecordLimit < 1) {
+            throw new Error(`${label}: \`keepRecordLimit\` must be a whole number of invocations, at least 1 — ` +
+                `got ${String(opts.keepRecordLimit)}.`);
+        }
+    }
+    // ── Definition-time probe: read the chart's declared contract ─────────
+    let probeChart;
+    try {
+        probeChart = opts.procedure((0, dispatch_js_1.probeDispatch)(opts.name));
+    }
+    catch (err) {
+        throw new Error(`${label}: the procedure factory threw at the definition probe — ` +
+            `${err instanceof Error ? err.message : String(err)}. The factory is invoked once ` +
+            `at definition (stage bodies do not run) to read the chart's declared contract; ` +
+            `it must be side-effect-free at build.`);
+    }
+    if (probeChart === null ||
+        typeof probeChart !== 'object' ||
+        typeof probeChart.stageMap !== 'object') {
+        throw new Error(`${label}: \`procedure\` must return a BUILT chart (call .build() on the builder).`);
+    }
+    const inputSchema = opts.inputSchema ?? liftInputSchema(probeChart);
+    const isVerdictKind = opts.resultKind?.startsWith(VERDICT_KIND_PREFIX) === true;
+    const maxRows = opts.verdicts?.maxRows ?? verdicts_js_1.DEFAULT_MAX_ROWS;
+    const walkCap = opts.walk?.cap ?? walk_js_1.DEFAULT_WALK_CAP;
+    const store = opts.keepRecord === true
+        ? (0, innerRunRecords_js_1.innerRunStore)(opts.keepRecordLimit ?? innerRunRecords_js_1.DEFAULT_INNER_RUN_LIMIT)
+        : undefined;
+    const tool = (0, tools_js_1.defineTool)({
+        name: opts.name,
+        description: opts.description,
+        ...(inputSchema !== undefined && { inputSchema }),
+        // GAP-8 closed: the rail-read declarations forward verbatim.
+        ...(opts.resultKind !== undefined && { resultKind: opts.resultKind }),
+        ...(opts.resultClass !== undefined && { resultClass: opts.resultClass }),
+        ...(opts.owner !== undefined && { owner: opts.owner }),
+        ...(opts.resultCeiling !== undefined && { resultCeiling: opts.resultCeiling }),
+        ...(opts.wants !== undefined && { wants: opts.wants }),
+        ...(opts.argumentsFrom !== undefined && { argumentsFrom: opts.argumentsFrom }),
+        ...(opts.composedOf !== undefined && { composedOf: opts.composedOf }),
+        execute: async (args, ctx) => {
+            const dispatch = (0, dispatch_js_1.recordingDispatch)(ctx.tools, opts.name);
+            const chart = opts.procedure(dispatch.tools);
+            const executor = new footprintjs_1.FlowChartExecutor(chart);
+            if (opts.redact)
+                executor.setRedactionPolicy(opts.redact);
+            for (const recorder of opts.recorders ?? []) {
+                executor.attachCombinedRecorder(recorder);
+            }
+            // Values off: the walk is about the DECISIONS — a per-key value dump
+            // would bury six branch choices under four hundred reads.
+            const walkRecorder = (0, footprintjs_1.narrative)({ includeValues: false });
+            executor.attachCombinedRecorder(walkRecorder);
+            // Meanings harvest — resolve the decider on THIS run's chart (a fresh
+            // chart per call; the static branches are the same, the resolution is
+            // cheap) and collect rule labels as the evidence fires.
+            const identity = opts.verdicts !== undefined ? (0, verdicts_js_1.resolveDecider)(chart, opts.verdicts.decider) : undefined;
+            const harvest = identity !== undefined ? (0, verdicts_js_1.meaningsRecorder)(identity) : undefined;
+            if (harvest !== undefined)
+                executor.attachCombinedRecorder(harvest.recorder);
+            const ctrl = store ? (0, trace_1.controlDepRecorder)() : undefined;
+            if (ctrl)
+                executor.attachCombinedRecorder(ctrl);
+            const keepRecordOf = (outcome, known) => {
+                if (!store)
+                    return;
+                try {
+                    const snapshot = known ?? executor.getSnapshot();
+                    const commitLog = snapshot.commitLog;
+                    const lines = walkRecorder.getEntries()
+                        .map((entry) => entry.text)
+                        .filter((text) => typeof text === 'string' && text.length > 0);
+                    store.keep({
+                        toolCallId: ctx.toolCallId,
+                        toolName: opts.name,
+                        outcome,
+                        steps: Array.isArray(commitLog) ? commitLog.length : 0,
+                        recording: {
+                            snapshot,
+                            structure: chart.buildTimeStructure,
+                        },
+                        ...(ctrl !== undefined && { controlDeps: ctrl.asLookup() }),
+                        ...(lines.length > 0 && { narrative: lines }),
+                    });
+                }
+                catch (e) {
+                    store.keep({
+                        toolCallId: ctx.toolCallId,
+                        toolName: opts.name,
+                        outcome,
+                        steps: 0,
+                        problem: e instanceof Error ? e.message : String(e),
+                    });
+                }
+            };
+            const env = {};
+            if (ctx.signal)
+                env.signal = ctx.signal;
+            try {
+                await executor.run({ input: args, env });
+            }
+            catch (e) {
+                const signal = (0, dispatch_js_1.absenceSignalOf)(e);
+                if (signal !== undefined) {
+                    // ABSENCE PASS-THROUGH: the inner source answered "I looked and
+                    // there is nothing", and the runbook has nothing to add. It goes
+                    // back EXACTLY as it arrived so the framework still reads it as an
+                    // absence. The kept record files as 'error' — the closed outcome
+                    // word nearest "the traversal ended on a thrown signal".
+                    keepRecordOf('error');
+                    return signal.absence;
+                }
+                keepRecordOf('error');
+                throw e;
+            }
+            if (executor.isPaused()) {
+                keepRecordOf('paused');
+                const err = new Error(`${label}: the inner chart paused. Approval-gate integration (typed resume ` +
+                    `through agent.resume) is the runbook program's next phase; until it lands a ` +
+                    `paused procedure cannot be resumed through the tool boundary. The checkpoint ` +
+                    `is on err.checkpoint.`);
+                err.checkpoint = executor.getCheckpoint();
+                throw err;
+            }
+            const raw = executor.getSnapshot();
+            keepRecordOf('ok', raw);
+            const state = raw.sharedState ??
+                raw.values ??
+                {};
+            // ── The walk ────────────────────────────────────────────────────────
+            const entries = walkRecorder.getEntries();
+            const projected = (0, walk_js_1.projectWalk)(entries, walkCap);
+            const walk = await (0, walk_js_1.mintWalk)(ctx, projected, {
+                toolName: opts.name,
+                toolCallId: ctx.toolCallId,
+                ...(ctx.runId !== undefined && { runId: ctx.runId }),
+                stepsExecuted: walkRecorder.stepCount,
+            });
+            // ── The projection (verdict kinds only) ─────────────────────────────
+            let rows;
+            let shown;
+            let declined;
+            if (isVerdictKind) {
+                rows = (0, verdicts_js_1.verdictRowsOf)(state);
+                shown = rows.slice(0, maxRows);
+                declined = rows.filter((row) => row.verdict === verdicts_js_1.DECLINED_VERDICT).length;
+            }
+            const meanings = identity !== undefined && harvest !== undefined
+                ? (0, verdicts_js_1.composeMeanings)(identity, harvest.observed)
+                : undefined;
+            // ── The ledger ──────────────────────────────────────────────────────
+            // The procedure's display name: the chart's own root name (what the
+            // author called it) — the tool name is the fallback, never the
+            // auto-generated multi-line description.
+            const chartName = chart.buildTimeStructure?.name ?? opts.name;
+            const ledger = (0, coverage_js_1.composeLedger)((0, coverage_js_1.foldInnerCoverage)(dispatch.records), (0, coverage_js_1.chartCoverageOf)(state), {
+                chartName,
+                stepsExecuted: walkRecorder.stepCount,
+                ...(opts.rules !== undefined && { rules: opts.rules }),
+                ...(rows !== undefined && { rowsTotal: rows.length }),
+                ...(declined !== undefined && { declinedRows: declined }),
+            });
+            // ── Provenance — re-emitted FIRST ───────────────────────────────────
+            const af_provenance = {
+                ...(0, coverage_js_1.carriedProvenanceOf)(dispatch.records),
+                tool: opts.name,
+                toolCallId: ctx.toolCallId,
+            };
+            // ── The envelope ────────────────────────────────────────────────────
+            // The spine and the projection are assembled FIRST, and the chart's
+            // `report` is admitted against the names they took: spine keys win, as
+            // the contract says, by explicit precedence rather than by spread order
+            // (which had the report land on top of `af_provenance` and
+            // `rule_version`). A refused field is named in `report_note` — see
+            // report.ts for the law and why the refusal is spoken.
+            const spine = {
+                af_provenance,
+                rule_version: opts.rules?.version ?? 'undeclared',
+                walk,
+            };
+            const projection = shown !== undefined && rows !== undefined
+                ? {
+                    verdicts: shown,
+                    rows_shown: shown.length,
+                    rows_total: rows.length,
+                    rows_complete: shown.length === rows.length,
+                    table: (0, verdicts_js_1.renderVerdictTable)(shown),
+                    render_note: verdicts_js_1.VERDICT_RENDER_NOTE,
+                    ...(meanings !== undefined && { verdict_meanings: meanings }),
+                }
+                : undefined;
+            const report = (0, report_js_1.admitReport)(bagOf(state.report) ?? {}, [
+                ...Object.keys(spine),
+                ...Object.keys(projection ?? {}),
+            ]);
+            const envelope = {
+                af_coverage: ledger,
+                result: {
+                    af_provenance: spine.af_provenance,
+                    rule_version: spine.rule_version,
+                    ...report.fields,
+                    ...(projection ?? {}),
+                    ...(report.refused.length > 0 && {
+                        [report_js_1.REPORT_NOTE_KEY]: (0, report_js_1.shadowedFieldsNote)(report.refused),
+                    }),
+                    walk: spine.walk,
+                },
+            };
+            return envelope;
+        },
+    });
+    if (store === undefined)
+        return tool;
+    const keepsRecords = { ...tool, [innerRunRecords_js_1.INNER_RUN_RECORDS]: store };
+    return keepsRecords;
+}
+exports.runbookAsTool = runbookAsTool;
+//# sourceMappingURL=runbookAsTool.js.map

package/dist/core/runbook/runbookAsTool.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runbookAsTool.js","sourceRoot":"","sources":["../../../src/core/runbook/runbookAsTool.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgFG;;;AAEH,6CAAkF;AAClF,6CAAuD;AAEvD,oFAOqD;AACrD,0CAA+E;AAC/E,+CAKuB;AACvB,+CAAkF;AAClF,2CAA+E;AAE/E,+CASuB;AACvB,uCAA6F;AAE7F;;oBAEoB;AACpB,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAEvC,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED;;;eAGe;AACf,SAAS,eAAe,CAAC,KAExB;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,SAAS,GACb,OAAQ,MAAkC,CAAC,SAAS,KAAK,UAAU;QACnE,OAAQ,MAA8B,CAAC,KAAK,KAAK,UAAU,CAAC;IAC9D,OAAO,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,MAA4C,CAAC;AAC/E,CAAC;AAED;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,IAA0B;IACtD,MAAM,KAAK,GAAG,iBAAiB,IAAI,CAAC,IAAI,IAAI,GAAG,GAAG,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,oFAAoF,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0EAA0E;YAChF,gFAAgF;YAChF,mEAAmE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QACrC,IACE,OAAO,IAAI,KAAK,QAAQ;YACxB,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAClB,OAAO,OAAO,KAAK,QAAQ;YAC3B,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EACrB,CAAC;YACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,6EAA6E;gBACnF,4CAA4C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAC5E,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrF,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,6EAA6E;gBACnF,yBAAyB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CACpE,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACtC,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0EAA0E;gBAChF,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CACxB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC;IAC3B,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,mEAAmE,MAAM,CAAC,GAAG,CAAC,GAAG,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,+DAA+D;gBACrE,0CAA0C,CAC7C,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,eAAe,GAAG,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,4EAA4E;gBAClF,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CACzC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,IAAI,UAA6C,CAAC;IAClD,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAA,2BAAa,EAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,0DAA0D;YAChE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,gCAAgC;YACnF,iFAAiF;YACjF,uCAAuC,CAC1C,CAAC;IACJ,CAAC;IACD,IACE,UAAU,KAAK,IAAI;QACnB,OAAO,UAAU,KAAK,QAAQ;QAC9B,OAAQ,UAAqC,CAAC,QAAQ,KAAK,QAAQ,EACnE,CAAC;QACD,MAAM,IAAI,KAAK,CACb,GAAG,KAAK,2EAA2E,CACpF,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,eAAe,CAAC,UAAU,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,mBAAmB,CAAC,KAAK,IAAI,CAAC;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,IAAI,8BAAgB,CAAC;IAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,0BAAgB,CAAC;IAEnD,MAAM,KAAK,GACT,IAAI,CAAC,UAAU,KAAK,IAAI;QACtB,CAAC,CAAC,IAAA,kCAAa,EAAC,IAAI,CAAC,eAAe,IAAI,4CAAuB,CAAC;QAChE,CAAC,CAAC,SAAS,CAAC;IAEhB,MAAM,IAAI,GAAG,IAAA,qBAAU,EAAmC;QACxD,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;QACjD,6DAA6D;QAC7D,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACrE,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,IAAI,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;QACrE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,GAAyB,EAAE,EAAE;YACjD,MAAM,QAAQ,GAAG,IAAA,+BAAiB,EAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,+BAAiB,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,IAAI,CAAC,MAAM;gBAAE,QAAQ,CAAC,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,IAAI,EAAE,EAAE,CAAC;gBAC5C,QAAQ,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC;YAC5C,CAAC;YACD,qEAAqE;YACrE,0DAA0D;YAC1D,MAAM,YAAY,GAAG,IAAA,uBAAS,EAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YACzD,QAAQ,CAAC,sBAAsB,CAAC,YAA2C,CAAC,CAAC;YAC7E,sEAAsE;YACtE,sEAAsE;YACtE,wDAAwD;YACxD,MAAM,QAAQ,GACZ,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,4BAAc,EAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACzF,MAAM,OAAO,GAAG,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,IAAA,8BAAgB,EAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,IAAI,OAAO,KAAK,SAAS;gBAAE,QAAQ,CAAC,sBAAsB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAA,0BAAkB,GAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,IAAI,IAAI;gBAAE,QAAQ,CAAC,sBAAsB,CAAC,IAAmC,CAAC,CAAC;YAE/E,MAAM,YAAY,GAAG,CAAC,OAAwB,EAAE,KAAe,EAAQ,EAAE;gBACvE,IAAI,CAAC,KAAK;oBAAE,OAAO;gBACnB,IAAI,CAAC;oBACH,MAAM,QAAQ,GAAG,KAAK,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;oBACjD,MAAM,SAAS,GAAI,QAA+C,CAAC,SAAS,CAAC;oBAC7E,MAAM,KAAK,GAAI,YAAY,CAAC,UAAU,EAAsC;yBACzE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;yBAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;oBACjE,KAAK,CAAC,IAAI,CAAC;wBACT,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,OAAO;wBACP,KAAK,EAAE,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;wBACtD,SAAS,EAAE;4BACT,QAAQ;4BACR,SAAS,EAAG,KAA0C,CAAC,kBAAkB;yBAC1E;wBACD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC;wBAC3D,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;qBAC9C,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,KAAK,CAAC,IAAI,CAAC;wBACT,UAAU,EAAE,GAAG,CAAC,UAAU;wBAC1B,QAAQ,EAAE,IAAI,CAAC,IAAI;wBACnB,OAAO;wBACP,KAAK,EAAE,CAAC;wBACR,OAAO,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;qBACpD,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,GAAG,GAA6B,EAAE,CAAC;YACzC,IAAI,GAAG,CAAC,MAAM;gBAAE,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YACxC,IAAI,CAAC;gBACH,MAAM,QAAQ,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;YAC3C,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,MAAM,GAAG,IAAA,6BAAe,EAAC,CAAC,CAAC,CAAC;gBAClC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,gEAAgE;oBAChE,iEAAiE;oBACjE,mEAAmE;oBACnE,iEAAiE;oBACjE,yDAAyD;oBACzD,YAAY,CAAC,OAAO,CAAC,CAAC;oBACtB,OAAO,MAAM,CAAC,OAAO,CAAC;gBACxB,CAAC;gBACD,YAAY,CAAC,OAAO,CAAC,CAAC;gBACtB,MAAM,CAAC,CAAC;YACV,CAAC;YACD,IAAI,QAAQ,CAAC,QAAQ,EAAE,EAAE,CAAC;gBACxB,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvB,MAAM,GAAG,GAAG,IAAI,KAAK,CACnB,GAAG,KAAK,oEAAoE;oBAC1E,8EAA8E;oBAC9E,+EAA+E;oBAC/E,uBAAuB,CAC1B,CAAC;gBACD,GAAwC,CAAC,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAChF,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,MAAM,GAAG,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;YACnC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACxB,MAAM,KAAK,GACR,GAA2D,CAAC,WAAW;gBACvE,GAAsD,CAAC,MAAM;gBAC9D,EAAE,CAAC;YAEL,uEAAuE;YACvE,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,EAAqC,CAAC;YAC7E,MAAM,SAAS,GAAG,IAAA,qBAAW,EAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAChD,MAAM,IAAI,GAAG,MAAM,IAAA,kBAAQ,EAAC,GAAG,EAAE,SAAS,EAAE;gBAC1C,QAAQ,EAAE,IAAI,CAAC,IAAI;gBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;gBACpD,aAAa,EAAE,YAAY,CAAC,SAAS;aACtC,CAAC,CAAC;YAEH,uEAAuE;YACvE,IAAI,IAA8B,CAAC;YACnC,IAAI,KAA+B,CAAC;YACpC,IAAI,QAA4B,CAAC;YACjC,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,GAAG,IAAA,2BAAa,EAAC,KAAK,CAAC,CAAC;gBAC5B,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;gBAC/B,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,8BAAgB,CAAC,CAAC,MAAM,CAAC;YAC3E,CAAC;YACD,MAAM,QAAQ,GACZ,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;gBAC7C,CAAC,CAAC,IAAA,6BAAe,EAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC;gBAC7C,CAAC,CAAC,SAAS,CAAC;YAEhB,uEAAuE;YACvE,oEAAoE;YACpE,+DAA+D;YAC/D,yCAAyC;YACzC,MAAM,SAAS,GACZ,KAAK,CAAC,kBAAoD,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;YACjF,MAAM,MAAM,GAAG,IAAA,2BAAa,EAAC,IAAA,+BAAiB,EAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,IAAA,6BAAe,EAAC,KAAK,CAAC,EAAE;gBACxF,SAAS;gBACT,aAAa,EAAE,YAAY,CAAC,SAAS;gBACrC,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;gBACtD,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACrD,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC;aAC1D,CAAC,CAAC;YAEH,uEAAuE;YACvE,MAAM,aAAa,GAAG;gBACpB,GAAG,IAAA,iCAAmB,EAAC,QAAQ,CAAC,OAAO,CAAC;gBACxC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,UAAU,EAAE,GAAG,CAAC,UAAU;aAC3B,CAAC;YAEF,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,wEAAwE;YACxE,2DAA2D;YAC3D,mEAAmE;YACnE,uDAAuD;YACvD,MAAM,KAAK,GAAG;gBACZ,aAAa;gBACb,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,IAAI,YAAY;gBACjD,IAAI;aACL,CAAC;YACF,MAAM,UAAU,GACd,KAAK,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS;gBACvC,CAAC,CAAC;oBACE,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,KAAK,CAAC,MAAM;oBACxB,UAAU,EAAE,IAAI,CAAC,MAAM;oBACvB,aAAa,EAAE,KAAK,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAC3C,KAAK,EAAE,IAAA,gCAAkB,EAAC,KAAK,CAAC;oBAChC,WAAW,EAAE,iCAAmB;oBAChC,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC;iBAC9D;gBACH,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GAAG,IAAA,uBAAW,EAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE;gBACpD,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;gBACrB,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,EAAE,CAAC;aACjC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAoB;gBAChC,WAAW,EAAE,MAAM;gBACnB,MAAM,EAAE;oBACN,aAAa,EAAE,KAAK,CAAC,aAAa;oBAClC,YAAY,EAAE,KAAK,CAAC,YAAY;oBAChC,GAAG,MAAM,CAAC,MAAM;oBAChB,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;oBACrB,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI;wBAC/B,CAAC,2BAAe,CAAC,EAAE,IAAA,8BAAkB,EAAC,MAAM,CAAC,OAAO,CAAC;qBACtD,CAAC;oBACF,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB;aACF,CAAC;YACF,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,YAAY,GAA0B,EAAE,GAAG,IAAI,EAAE,CAAC,sCAAiB,CAAC,EAAE,KAAK,EAAE,CAAC;IACpF,OAAO,YAAY,CAAC;AACtB,CAAC;AAtSD,sCAsSC"}

package/dist/core/runbook/types.js

@@ -0,0 +1,22 @@
+"use strict";
+/**
+ * runbook/types — the vocabulary of the runbook bridge.
+ *
+ * Pattern: one options bag, four concerns (declarations, procedure, evidence
+ *          policy, walk policy) + one envelope type split into a MANDATORY
+ *          SPINE and an OPTIONAL projection. Pure data, no behavior.
+ * Role:    core/ layer. `runbookAsTool.ts` consumes; consumers read the
+ *          envelope types when they assert on results.
+ * Emits:   N/A.
+ *
+ * The SPINE / PROJECTION split is load-bearing honesty, not taste: the spine
+ * (coverage, provenance, rule version, the recorded walk) is what EVERY
+ * runbook ships whatever its shape, so an answer can never arrive without its
+ * boundary; the verdict/rowset projection is one shape of answer (a triage),
+ * selected by `resultKind: 'verdict/*'` — an action-taking runbook ships the
+ * spine plus its own `report` payload and no rowset. The spine's wire shape
+ * is explicitly PROVISIONAL until a second, differently-shaped consumer has
+ * shipped through it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/core/runbook/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/runbook/types.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/core/runbook/verdicts.js

@@ -0,0 +1,156 @@
+"use strict";
+/**
+ * runbook/verdicts — the OPTIONAL verdict/rowset projection.
+ *
+ * Pattern: pure selection + rendering over the run's final state, plus one
+ *          tiny recorder that harvests decide() evidence for generated
+ *          meanings. Selected by `resultKind: 'verdict/*'`; a runbook of any
+ *          other kind never sees this module.
+ * Role:    core/runbook.
+ * Emits:   N/A.
+ *
+ * THE ONE-NUMBER LAW: the rendered table and the structured `verdicts` list
+ * show the SAME rows under the SAME cap. A rendered table beside a longer
+ * structured list is an invitation that gets accepted — rows come back
+ * retyped with subtly wrong identifiers.
+ *
+ * GENERATED MEANINGS, never hand-restated: `verdict_meanings` is composed
+ * from (a) the named decider's declared branches in the chart's own structure
+ * (branch description, falling back to branch name), overlaid by (b) the rule
+ * LABELS this run's decide() evidence carried — the rule speaking for itself.
+ * A decider inside a dynamically generated fan-out branch is invisible to (a)
+ * by construction (the branch chart does not exist at build time); (b) still
+ * covers every verdict an executed rule produced.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.composeMeanings = exports.meaningsRecorder = exports.resolveDecider = exports.renderVerdictTable = exports.verdictRowsOf = exports.DECLINED_VERDICT = exports.VERDICT_RENDER_NOTE = exports.DEFAULT_MAX_ROWS = void 0;
+/** Default cap on `verdicts` rows and the rendered table. */
+exports.DEFAULT_MAX_ROWS = 50;
+/** The render law, stated to the model beside every table. */
+exports.VERDICT_RENDER_NOTE = 'table is PRE-RENDERED over the same rows as `verdicts` — output it VERBATIM. Never ' +
+    'retype an identifier from `verdicts`; a transcribed name that looks right and matches ' +
+    'nothing is the failure this note exists to stop.';
+/** The reserved verdict word for "no classification was reached" — rows
+ *  carrying it are counted into the coverage ledger as not-checked ground
+ *  (the three-outcome honesty: reached, reached-and-clear, DECLINED). */
+exports.DECLINED_VERDICT = 'declined';
+/** Read the rowset off the final state's `verdicts` key — an array of bags
+ *  each carrying a string `verdict`. Anything else reads as "no rowset". */
+function verdictRowsOf(state) {
+    const raw = state.verdicts;
+    if (!Array.isArray(raw))
+        return [];
+    return raw.filter((row) => row !== null &&
+        typeof row === 'object' &&
+        !Array.isArray(row) &&
+        typeof row.verdict === 'string');
+}
+exports.verdictRowsOf = verdictRowsOf;
+/** The one place a `—` is written for a value the source did not report — a
+ *  blank cell reads as a zero; a dash reads as "not reported". */
+function cell(value) {
+    if (value === null || value === undefined || value === '')
+        return '—';
+    if (value === true)
+        return 'yes';
+    if (value === false)
+        return 'no';
+    return String(value).replace(/\|/g, '\\|').replace(/\n/g, ' ');
+}
+/**
+ * Render the shown rows as one markdown table. Columns are the FIRST row's
+ * own keys in declaration order — the chart writes its rows, so the chart
+ * owns the column vocabulary; the bridge only renders it.
+ */
+function renderVerdictTable(rows) {
+    if (rows.length === 0)
+        return 'No rows in the projected set.';
+    // eslint-disable-next-line @typescript-eslint/no-non-null-assertion
+    const columns = Object.keys(rows[0]);
+    const head = `| ${columns.join(' | ')} |\n|${columns.map(() => '---').join('|')}|\n`;
+    return (head +
+        rows.map((row) => `| ${columns.map((column) => cell(row[column])).join(' | ')} |`).join('\n'));
+}
+exports.renderVerdictTable = renderVerdictTable;
+/**
+ * Find the named decider in the chart's static structure (root graph plus
+ * statically declared subflows) and read its branches. Loop-ref stubs are
+ * skipped FIRST — they deliberately violate node-id uniqueness.
+ */
+function resolveDecider(chart, decider) {
+    const spellings = new Set([decider]);
+    const declared = new Map();
+    const visited = new Set();
+    const walk = (node) => {
+        if (node === undefined || node.isLoopRef === true || visited.has(node))
+            return;
+        visited.add(node);
+        if ((node.id === decider || node.name === decider) && (node.children?.length ?? 0) > 0) {
+            if (node.id !== undefined)
+                spellings.add(node.id);
+            if (node.name !== undefined)
+                spellings.add(node.name);
+            for (const child of node.children ?? []) {
+                const branch = child.branchId ?? child.id;
+                if (branch === undefined)
+                    continue;
+                const meaning = child.description ?? child.name;
+                if (meaning !== undefined && !declared.has(branch))
+                    declared.set(branch, meaning);
+            }
+        }
+        for (const child of node.children ?? [])
+            walk(child);
+        walk(node.next);
+    };
+    walk(chart.root);
+    for (const subflow of Object.values(chart.subflows ?? {})) {
+        walk(subflow.root);
+    }
+    return { spellings, declared };
+}
+exports.resolveDecider = resolveDecider;
+/**
+ * A tiny flow recorder capturing the named decider's decide() evidence as it
+ * fires — collected DURING the traversal, never reconstructed after. Rule
+ * labels are harvested for every rule the evidence lists (matched or not):
+ * a rule that was evaluated has spoken its label, whichever branch won.
+ *
+ * A decider inside a subflow (including a generated fan-out branch) reports
+ * itself PATH-PREFIXED (`per-subject~0/Protection posture`), so the match is
+ * on the LAST `/`-segment — the same last-delimiter reading every upstream
+ * parser of these paths uses, which is what keeps the generated-branch
+ * marker opaque here.
+ */
+function meaningsRecorder(identity) {
+    const observed = new Map();
+    const lastSegment = (path) => path.slice(path.lastIndexOf('/') + 1);
+    const recorder = {
+        id: 'runbook-verdict-meanings',
+        onDecision(event) {
+            if (!identity.spellings.has(lastSegment(event.decider)))
+                return;
+            const evidence = event.evidence;
+            for (const rule of evidence?.rules ?? []) {
+                if (typeof rule.branch === 'string' && typeof rule.label === 'string') {
+                    observed.set(rule.branch, rule.label);
+                }
+            }
+        },
+    };
+    return { recorder, observed };
+}
+exports.meaningsRecorder = meaningsRecorder;
+/** Compose the final meanings: declared branches first, observed rule labels
+ *  winning where both speak (the rule is the sharper sentence). Undefined
+ *  when neither source produced anything — absent, never `{}`. */
+function composeMeanings(identity, observed) {
+    const meanings = {};
+    for (const [branch, meaning] of identity.declared)
+        meanings[branch] = meaning;
+    for (const [branch, label] of observed)
+        meanings[branch] = label;
+    return Object.keys(meanings).length > 0 ? meanings : undefined;
+}
+exports.composeMeanings = composeMeanings;
+//# sourceMappingURL=verdicts.js.map

package/dist/core/runbook/verdicts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdicts.js","sourceRoot":"","sources":["../../../src/core/runbook/verdicts.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;;;AAMH,6DAA6D;AAChD,QAAA,gBAAgB,GAAG,EAAE,CAAC;AAEnC,8DAA8D;AACjD,QAAA,mBAAmB,GAC9B,qFAAqF;IACrF,wFAAwF;IACxF,kDAAkD,CAAC;AAErD;;yEAEyE;AAC5D,QAAA,gBAAgB,GAAG,UAAU,CAAC;AAE3C;4EAC4E;AAC5E,SAAgB,aAAa,CAAC,KAAwC;IACpE,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,OAAO,GAAG,CAAC,MAAM,CACf,CAAC,GAAG,EAAqB,EAAE,CACzB,GAAG,KAAK,IAAI;QACZ,OAAO,GAAG,KAAK,QAAQ;QACvB,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QACnB,OAAQ,GAA6B,CAAC,OAAO,KAAK,QAAQ,CAC7D,CAAC;AACJ,CAAC;AAVD,sCAUC;AAED;kEACkE;AAClE,SAAS,IAAI,CAAC,KAAc;IAC1B,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IACtE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACjC,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACjC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAA2B;IAC5D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,+BAA+B,CAAC;IAC9D,oEAAoE;IACpE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,KAAK,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;IACrF,OAAO,CACL,IAAI;QACJ,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9F,CAAC;AACJ,CAAC;AATD,gDASC;AAwBD;;;;GAIG;AACH,SAAgB,cAAc,CAAC,KAAgB,EAAE,OAAe;IAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,GAAG,EAAY,CAAC;IACpC,MAAM,IAAI,GAAG,CAAC,IAA0B,EAAQ,EAAE;QAChD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO;QAC/E,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YACvF,IAAI,IAAI,CAAC,EAAE,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBACxC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC;gBAC1C,IAAI,MAAM,KAAK,SAAS;oBAAE,SAAS;gBACnC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC;gBAChD,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACpF,CAAC;QACH,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,IAAI,EAAE;YAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,IAAgB,CAAC,CAAC;IAC7B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,OAAO,CAAC,IAAgB,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAzBD,wCAyBC;AAQD;;;;;;;;;;;GAWG;AACH,SAAgB,gBAAgB,CAAC,QAAyB;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,MAAM,QAAQ,GAAG;QACf,EAAE,EAAE,0BAA0B;QAC9B,UAAU,CAAC,KAAwB;YACjC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBAAE,OAAO;YAChE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAEV,CAAC;YACd,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;gBACzC,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;oBACtE,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;QACH,CAAC;KAC6B,CAAC;IACjC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAChC,CAAC;AAlBD,4CAkBC;AAED;;kEAEkE;AAClE,SAAgB,eAAe,CAC7B,QAAyB,EACzB,QAAqC;IAErC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ;QAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC;IAC9E,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,QAAQ;QAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC;IACjE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AARD,0CAQC"}