helixmind 0.5.4

package/dist/cli/jarvis/autonomy.d.ts

@@ -0,0 +1,55 @@
+/**
+ * Autonomy Gradient — graduated trust system for Jarvis.
+ * Jarvis starts at L2 (Propose) and earns higher levels through
+ * demonstrated reliability: approval rate + success rate + time.
+ */
+import type { AutonomyLevel, AutonomyThresholds, JarvisIdentity } from './types.js';
+export interface CanProceedResult {
+    proceed: boolean;
+    needsApproval: boolean;
+    reason: string;
+}
+export declare class AutonomyManager {
+    private currentLevel;
+    private daemonStartTime;
+    constructor(initialLevel?: AutonomyLevel);
+    /**
+     * Check if Jarvis can proceed with an action at current autonomy level.
+     * Combines ethics check + autonomy gating.
+     */
+    canProceed(toolName: string, target?: string): CanProceedResult;
+    /**
+     * Evaluate whether Jarvis should be promoted or demoted.
+     * Called after task completion and periodically.
+     */
+    evaluate(identity: JarvisIdentity): {
+        newLevel: AutonomyLevel;
+        changed: boolean;
+        reason: string;
+    };
+    /**
+     * Manually set autonomy level (user override).
+     */
+    setLevel(level: AutonomyLevel): void;
+    /**
+     * Get current autonomy level.
+     */
+    getLevel(): AutonomyLevel;
+    /**
+     * Get label for current level.
+     */
+    getLabel(): string;
+    /**
+     * Get thresholds for next level.
+     */
+    getNextLevelRequirements(): AutonomyThresholds | null;
+    /**
+     * Get human-readable status string.
+     */
+    getStatusString(identity: JarvisIdentity): string;
+    /**
+     * Reset daemon start time (for uptime tracking).
+     */
+    resetUptime(): void;
+}
+//# sourceMappingURL=autonomy.d.ts.map

package/dist/cli/jarvis/autonomy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomy.d.ts","sourceRoot":"","sources":["../../../src/cli/jarvis/autonomy.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EACV,aAAa,EAAE,kBAAkB,EAAE,cAAc,EAClD,MAAM,YAAY,CAAC;AAkBpB,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qBAAa,eAAe;IAC1B,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,eAAe,CAAS;gBAEpB,YAAY,GAAE,aAAiB;IAK3C;;;OAGG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB;IA0C/D;;;OAGG;IACH,QAAQ,CAAC,QAAQ,EAAE,cAAc,GAAG;QAClC,QAAQ,EAAE,aAAa,CAAC;QACxB,OAAO,EAAE,OAAO,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;KAChB;IAgED;;OAEG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI;IAIpC;;OAEG;IACH,QAAQ,IAAI,aAAa;IAIzB;;OAEG;IACH,QAAQ,IAAI,MAAM;IAIlB;;OAEG;IACH,wBAAwB,IAAI,kBAAkB,GAAG,IAAI;IAMrD;;OAEG;IACH,eAAe,CAAC,QAAQ,EAAE,cAAc,GAAG,MAAM;IA2BjD;;OAEG;IACH,WAAW,IAAI,IAAI;CAGpB"}

package/dist/cli/jarvis/autonomy.js

@@ -0,0 +1,176 @@
+import { AUTONOMY_LABELS } from './types.js';
+import { canExecute, detectAnomalousPattern, getRecentAudit } from './core-ethics.js';
+// ─── Promotion Thresholds ─────────────────────────────────────────────
+const THRESHOLDS = {
+    0: { minApprovalRate: 0, minSuccessRate: 0, minCompletedTasks: 0, minUptimeMs: 0 },
+    1: { minApprovalRate: 0, minSuccessRate: 0, minCompletedTasks: 0, minUptimeMs: 0 },
+    2: { minApprovalRate: 0, minSuccessRate: 0, minCompletedTasks: 0, minUptimeMs: 0 }, // default start
+    3: { minApprovalRate: 0.70, minSuccessRate: 0.80, minCompletedTasks: 5, minUptimeMs: 60 * 60 * 1000 },
+    4: { minApprovalRate: 0.80, minSuccessRate: 0.85, minCompletedTasks: 15, minUptimeMs: 5 * 60 * 60 * 1000 },
+    5: { minApprovalRate: 0.90, minSuccessRate: 0.90, minCompletedTasks: 30, minUptimeMs: 10 * 60 * 60 * 1000 },
+};
+export class AutonomyManager {
+    currentLevel;
+    daemonStartTime;
+    constructor(initialLevel = 2) {
+        this.currentLevel = initialLevel;
+        this.daemonStartTime = Date.now();
+    }
+    /**
+     * Check if Jarvis can proceed with an action at current autonomy level.
+     * Combines ethics check + autonomy gating.
+     */
+    canProceed(toolName, target) {
+        const context = {
+            action: `${toolName}:${target || ''}`,
+            toolName,
+            target,
+            autonomyLevel: this.currentLevel,
+            recentActions: getRecentAudit(),
+        };
+        // Ethics check first (hard block)
+        const ethicsResult = canExecute(context);
+        if (!ethicsResult.allowed) {
+            return {
+                proceed: false,
+                needsApproval: false,
+                reason: ethicsResult.reason || 'Blocked by ethics',
+            };
+        }
+        // Autonomy gating: tools above current level need approval
+        const writingTools = ['write_file', 'edit_file', 'git_commit'];
+        const shellTools = ['run_command'];
+        if (this.currentLevel < 4 && writingTools.includes(toolName)) {
+            return {
+                proceed: false,
+                needsApproval: true,
+                reason: `File write requires L4 (current: L${this.currentLevel})`,
+            };
+        }
+        if (this.currentLevel < 5 && shellTools.includes(toolName)) {
+            return {
+                proceed: false,
+                needsApproval: true,
+                reason: `Shell commands require L5 (current: L${this.currentLevel})`,
+            };
+        }
+        return { proceed: true, needsApproval: false, reason: 'Allowed' };
+    }
+    /**
+     * Evaluate whether Jarvis should be promoted or demoted.
+     * Called after task completion and periodically.
+     */
+    evaluate(identity) {
+        const { trust } = identity;
+        const uptimeMs = Date.now() - this.daemonStartTime;
+        // Check for anomaly → instant demotion
+        const anomaly = detectAnomalousPattern();
+        if (anomaly.detected && anomaly.severity === 'critical') {
+            const oldLevel = this.currentLevel;
+            this.currentLevel = 0;
+            return {
+                newLevel: 0,
+                changed: oldLevel !== 0,
+                reason: `Anomaly detected: ${anomaly.description}`,
+            };
+        }
+        // Check for promotion (try each level from current+1 up to 5)
+        for (let targetLevel = (this.currentLevel + 1); targetLevel <= 5; targetLevel = (targetLevel + 1)) {
+            const t = THRESHOLDS[targetLevel];
+            if (trust.approvalRate >= t.minApprovalRate &&
+                trust.successRate >= t.minSuccessRate &&
+                trust.totalTasksCompleted >= t.minCompletedTasks &&
+                uptimeMs >= t.minUptimeMs) {
+                // Promote one level at a time
+                const newLevel = (this.currentLevel + 1);
+                if (newLevel <= 5) {
+                    this.currentLevel = newLevel;
+                    return {
+                        newLevel,
+                        changed: true,
+                        reason: `Promoted: ${trust.approvalRate.toFixed(0)}% approval, ${trust.successRate.toFixed(0)}% success, ${trust.totalTasksCompleted} tasks`,
+                    };
+                }
+            }
+            else {
+                break; // Can't skip levels
+            }
+        }
+        // Check for demotion (if metrics dropped below current level thresholds)
+        if (this.currentLevel >= 3) {
+            const t = THRESHOLDS[this.currentLevel];
+            if (trust.totalTasksCompleted >= 3 && // only demote after enough data
+                (trust.approvalRate < t.minApprovalRate * 0.8 ||
+                    trust.successRate < t.minSuccessRate * 0.8)) {
+                const newLevel = (this.currentLevel - 1);
+                this.currentLevel = newLevel;
+                return {
+                    newLevel,
+                    changed: true,
+                    reason: `Demoted: metrics dropped below threshold (${trust.approvalRate.toFixed(0)}% approval, ${trust.successRate.toFixed(0)}% success)`,
+                };
+            }
+        }
+        return { newLevel: this.currentLevel, changed: false, reason: 'No change' };
+    }
+    /**
+     * Manually set autonomy level (user override).
+     */
+    setLevel(level) {
+        this.currentLevel = level;
+    }
+    /**
+     * Get current autonomy level.
+     */
+    getLevel() {
+        return this.currentLevel;
+    }
+    /**
+     * Get label for current level.
+     */
+    getLabel() {
+        return AUTONOMY_LABELS[this.currentLevel];
+    }
+    /**
+     * Get thresholds for next level.
+     */
+    getNextLevelRequirements() {
+        const next = (this.currentLevel + 1);
+        if (next > 5)
+            return null;
+        return THRESHOLDS[next];
+    }
+    /**
+     * Get human-readable status string.
+     */
+    getStatusString(identity) {
+        const level = this.currentLevel;
+        const label = AUTONOMY_LABELS[level];
+        const { trust } = identity;
+        let status = `L${level} ${label}`;
+        if (level < 5) {
+            const next = THRESHOLDS[(level + 1)];
+            const parts = [];
+            if (trust.approvalRate < next.minApprovalRate) {
+                parts.push(`approval ${(trust.approvalRate * 100).toFixed(0)}%/${(next.minApprovalRate * 100).toFixed(0)}%`);
+            }
+            if (trust.successRate < next.minSuccessRate) {
+                parts.push(`success ${(trust.successRate * 100).toFixed(0)}%/${(next.minSuccessRate * 100).toFixed(0)}%`);
+            }
+            if (trust.totalTasksCompleted < next.minCompletedTasks) {
+                parts.push(`tasks ${trust.totalTasksCompleted}/${next.minCompletedTasks}`);
+            }
+            if (parts.length > 0) {
+                status += ` (next: ${parts.join(', ')})`;
+            }
+        }
+        return status;
+    }
+    /**
+     * Reset daemon start time (for uptime tracking).
+     */
+    resetUptime() {
+        this.daemonStartTime = Date.now();
+    }
+}
+//# sourceMappingURL=autonomy.js.map

package/dist/cli/jarvis/autonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autonomy.js","sourceRoot":"","sources":["../../../src/cli/jarvis/autonomy.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAGtF,yEAAyE;AAEzE,MAAM,UAAU,GAA8C;IAC5D,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;IAClF,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE;IAClF,CAAC,EAAE,EAAE,eAAe,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,EAAG,gBAAgB;IACrG,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;IACrG,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;IAC1G,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,iBAAiB,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE;CAC5G,CAAC;AAUF,MAAM,OAAO,eAAe;IAClB,YAAY,CAAgB;IAC5B,eAAe,CAAS;IAEhC,YAAY,eAA8B,CAAC;QACzC,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;IAED;;;OAGG;IACH,UAAU,CAAC,QAAgB,EAAE,MAAe;QAC1C,MAAM,OAAO,GAAkB;YAC7B,MAAM,EAAE,GAAG,QAAQ,IAAI,MAAM,IAAI,EAAE,EAAE;YACrC,QAAQ;YACR,MAAM;YACN,aAAa,EAAE,IAAI,CAAC,YAAY;YAChC,aAAa,EAAE,cAAc,EAAE;SAChC,CAAC;QAEF,kCAAkC;QAClC,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,KAAK;gBACpB,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,mBAAmB;aACnD,CAAC;QACJ,CAAC;QAED,2DAA2D;QAC3D,MAAM,YAAY,GAAG,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;QAC/D,MAAM,UAAU,GAAG,CAAC,aAAa,CAAC,CAAC;QAEnC,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,IAAI;gBACnB,MAAM,EAAE,qCAAqC,IAAI,CAAC,YAAY,GAAG;aAClE,CAAC;QACJ,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,GAAG,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3D,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,aAAa,EAAE,IAAI;gBACnB,MAAM,EAAE,wCAAwC,IAAI,CAAC,YAAY,GAAG;aACrE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACpE,CAAC;IAED;;;OAGG;IACH,QAAQ,CAAC,QAAwB;QAK/B,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC;QAEnD,uCAAuC;QACvC,MAAM,OAAO,GAAG,sBAAsB,EAAE,CAAC;QACzC,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,KAAK,UAAU,EAAE,CAAC;YACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC;YACnC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,OAAO;gBACL,QAAQ,EAAE,CAAC;gBACX,OAAO,EAAE,QAAQ,KAAK,CAAC;gBACvB,MAAM,EAAE,qBAAqB,OAAO,CAAC,WAAW,EAAE;aACnD,CAAC;QACJ,CAAC;QAED,8DAA8D;QAC9D,KAAK,IAAI,WAAW,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAkB,EAC7D,WAAW,IAAI,CAAC,EAChB,WAAW,GAAG,CAAC,WAAW,GAAG,CAAC,CAAkB,EAChD,CAAC;YACD,MAAM,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC;YAClC,IACE,KAAK,CAAC,YAAY,IAAI,CAAC,CAAC,eAAe;gBACvC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,cAAc;gBACrC,KAAK,CAAC,mBAAmB,IAAI,CAAC,CAAC,iBAAiB;gBAChD,QAAQ,IAAI,CAAC,CAAC,WAAW,EACzB,CAAC;gBACD,8BAA8B;gBAC9B,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAkB,CAAC;gBAC1D,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;oBAClB,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;oBAC7B,OAAO;wBACL,QAAQ;wBACR,OAAO,EAAE,IAAI;wBACb,MAAM,EAAE,aAAa,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,mBAAmB,QAAQ;qBAC7I,CAAC;gBACJ,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAE,oBAAoB;YAC9B,CAAC;QACH,CAAC;QAED,yEAAyE;QACzE,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACxC,IACE,KAAK,CAAC,mBAAmB,IAAI,CAAC,IAAK,gCAAgC;gBACnE,CAAC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC,eAAe,GAAG,GAAG;oBAC3C,KAAK,CAAC,WAAW,GAAG,CAAC,CAAC,cAAc,GAAG,GAAG,CAAC,EAC7C,CAAC;gBACD,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAkB,CAAC;gBAC1D,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC;gBAC7B,OAAO;oBACL,QAAQ;oBACR,OAAO,EAAE,IAAI;oBACb,MAAM,EAAE,6CAA6C,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY;iBAC1I,CAAC;YACJ,CAAC;QACH,CAAC;QAED,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC9E,CAAC;IAED;;OAEG;IACH,QAAQ,CAAC,KAAoB;QAC3B,IAAI,CAAC,YAAY,GAAG,KAAK,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,QAAQ;QACN,OAAO,eAAe,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACH,wBAAwB;QACtB,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,CAAkB,CAAC;QACtD,IAAI,IAAI,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1B,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,eAAe,CAAC,QAAwB;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC;QAChC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,EAAE,KAAK,EAAE,GAAG,QAAQ,CAAC;QAE3B,IAAI,MAAM,GAAG,IAAI,KAAK,IAAI,KAAK,EAAE,CAAC;QAElC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACd,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,KAAK,GAAG,CAAC,CAAkB,CAAC,CAAC;YACtD,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,IAAI,KAAK,CAAC,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC9C,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC/G,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;gBAC5C,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YAC5G,CAAC;YACD,IAAI,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACvD,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,mBAAmB,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,WAAW,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACpC,CAAC;CACF"}

package/dist/cli/jarvis/code-reviewer.d.ts

@@ -0,0 +1,35 @@
+import type { ProposalCategory, ProposalEvidence } from './types.js';
+export interface CodeReviewResult {
+    findings: CodeFinding[];
+    summary: string;
+}
+export interface CodeFinding {
+    type: 'bug_risk' | 'style' | 'performance' | 'security' | 'complexity' | 'test_missing';
+    file: string;
+    line?: number;
+    description: string;
+    severity: 'low' | 'medium' | 'high';
+    suggestion?: string;
+}
+/**
+ * Get git diff for review (last commit or staged changes).
+ */
+export declare function getReviewDiff(projectRoot: string, target?: 'HEAD' | 'staged'): string;
+/**
+ * Build a code review prompt for LLM analysis.
+ * Returns prompt text — the thinking loop will call sendMessage with it.
+ */
+export declare function buildReviewPrompt(diff: string, learnedPatterns?: string[]): string;
+/**
+ * Parse review response into structured findings.
+ */
+export declare function parseReviewResponse(response: string): CodeReviewResult;
+/**
+ * Convert findings to proposal evidence.
+ */
+export declare function findingsToEvidence(findings: CodeFinding[]): ProposalEvidence[];
+/**
+ * Determine proposal category from findings.
+ */
+export declare function findingsToCategory(findings: CodeFinding[]): ProposalCategory;
+//# sourceMappingURL=code-reviewer.d.ts.map

package/dist/cli/jarvis/code-reviewer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-reviewer.d.ts","sourceRoot":"","sources":["../../../src/cli/jarvis/code-reviewer.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAErE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,UAAU,GAAG,OAAO,GAAG,aAAa,GAAG,UAAU,GAAG,YAAY,GAAG,cAAc,CAAC;IACxF,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,GAAE,MAAM,GAAG,QAAiB,GAAG,MAAM,CAY7F;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,MAAM,EAAE,GAAG,MAAM,CAiBlF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAsBtE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,gBAAgB,EAAE,CAM9E;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,gBAAgB,CAO5E"}

package/dist/cli/jarvis/code-reviewer.js

@@ -0,0 +1,93 @@
+/**
+ * Jarvis Code Reviewer — automatic code review on git commits.
+ * Triggered by git_hook trigger → reviews diff → generates proposals.
+ * Learns which code patterns the user prefers from approved proposals.
+ */
+import { execSync } from 'node:child_process';
+/**
+ * Get git diff for review (last commit or staged changes).
+ */
+export function getReviewDiff(projectRoot, target = 'HEAD') {
+    try {
+        const cmd = target === 'staged' ? 'git diff --cached' : 'git diff HEAD~1 HEAD';
+        return execSync(cmd, {
+            cwd: projectRoot,
+            encoding: 'utf-8',
+            timeout: 10_000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * Build a code review prompt for LLM analysis.
+ * Returns prompt text — the thinking loop will call sendMessage with it.
+ */
+export function buildReviewPrompt(diff, learnedPatterns) {
+    const patternContext = learnedPatterns && learnedPatterns.length > 0
+        ? `\nUser preferences (from past approvals):\n${learnedPatterns.map(p => `- ${p}`).join('\n')}\n`
+        : '';
+    return `Review this git diff for issues:
+
+${diff.slice(0, 8000)}${diff.length > 8000 ? '\n... (truncated)' : ''}
+${patternContext}
+For each issue found, respond with one line in this format:
+FINDING: <type> | <severity> | <file> | <description> | <suggestion>
+
+Valid types: bug_risk, style, performance, security, complexity, test_missing
+Valid severities: low, medium, high
+
+If no issues found, respond: NO_ISSUES
+Be selective — only report genuine issues, not style nitpicks.`;
+}
+/**
+ * Parse review response into structured findings.
+ */
+export function parseReviewResponse(response) {
+    const findings = [];
+    for (const line of response.split('\n')) {
+        const match = line.match(/^FINDING:\s*(\w+)\s*\|\s*(\w+)\s*\|\s*(.+?)\s*\|\s*(.+?)(?:\s*\|\s*(.+))?$/);
+        if (!match)
+            continue;
+        const [, type, severity, file, description, suggestion] = match;
+        findings.push({
+            type: type,
+            file: file.trim(),
+            description: description.trim(),
+            severity: severity,
+            suggestion: suggestion?.trim(),
+        });
+    }
+    const summary = findings.length === 0
+        ? 'No issues found'
+        : `${findings.length} issues: ${findings.filter(f => f.severity === 'high').length} high, ${findings.filter(f => f.severity === 'medium').length} medium, ${findings.filter(f => f.severity === 'low').length} low`;
+    return { findings, summary };
+}
+/**
+ * Convert findings to proposal evidence.
+ */
+export function findingsToEvidence(findings) {
+    return findings.map(f => ({
+        type: 'code_snippet',
+        content: `[${f.severity}] ${f.file}: ${f.description}${f.suggestion ? ` — Fix: ${f.suggestion}` : ''}`,
+        timestamp: Date.now(),
+    }));
+}
+/**
+ * Determine proposal category from findings.
+ */
+export function findingsToCategory(findings) {
+    const types = new Set(findings.map(f => f.type));
+    if (types.has('security'))
+        return 'security';
+    if (types.has('bug_risk'))
+        return 'bugfix';
+    if (types.has('performance'))
+        return 'performance';
+    if (types.has('test_missing'))
+        return 'test';
+    return 'review';
+}
+//# sourceMappingURL=code-reviewer.js.map

package/dist/cli/jarvis/code-reviewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"code-reviewer.js","sourceRoot":"","sources":["../../../src/cli/jarvis/code-reviewer.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAiB9C;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,WAAmB,EAAE,SAA4B,MAAM;IACnF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAC/E,OAAO,QAAQ,CAAC,GAAG,EAAE;YACnB,GAAG,EAAE,WAAW;YAChB,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,MAAM;YACf,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,eAA0B;IACxE,MAAM,cAAc,GAAG,eAAe,IAAI,eAAe,CAAC,MAAM,GAAG,CAAC;QAClE,CAAC,CAAC,8CAA8C,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;QACjG,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;;EAEP,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE;EACnE,cAAc;;;;;;;;+DAQ+C,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,QAAQ,GAAkB,EAAE,CAAC;IAEnC,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,4EAA4E,CAAC,CAAC;QACvG,IAAI,CAAC,KAAK;YAAE,SAAS;QAErB,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,GAAG,KAAK,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,IAA2B;YACjC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;YACjB,WAAW,EAAE,WAAW,CAAC,IAAI,EAAE;YAC/B,QAAQ,EAAE,QAAqC;YAC/C,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC;QACnC,CAAC,CAAC,iBAAiB;QACnB,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,UAAU,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC;IAEtN,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuB;IACxD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxB,IAAI,EAAE,cAAuB;QAC7B,OAAO,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;QACtG,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACtB,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAAuB;IACxD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC;IAC7C,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3C,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC;QAAE,OAAO,aAAa,CAAC;IACnD,IAAI,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC;QAAE,OAAO,MAAM,CAAC;IAC7C,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/cli/jarvis/core-ethics.d.ts

@@ -0,0 +1,35 @@
+import type { AutonomyLevel, EthicsContext, EthicsCheckResult, AnomalyResult, AuditEntry, JarvisIdentity } from './types.js';
+export declare function getRecentAudit(windowMs?: number): AuditEntry[];
+/**
+ * Synchronous check — pure function, no I/O.
+ * Returns whether an action is allowed and why/why not.
+ */
+export declare function canExecute(context: EthicsContext): EthicsCheckResult;
+/**
+ * Assertion version — throws EthicsError if not allowed.
+ * Use this as a guard before every tool call.
+ */
+export declare function assertCanExecute(context: EthicsContext): void;
+/**
+ * Detect anomalous behavior patterns.
+ * Called periodically by the thinking loop (every 30s).
+ */
+export declare function detectAnomalousPattern(recentActions?: AuditEntry[], _identity?: JarvisIdentity): AnomalyResult;
+/**
+ * SHA-256 digest of the immutable rules.
+ * Injected into system prompt so Jarvis can self-verify integrity.
+ */
+export declare function getEthicsDigest(): string;
+/**
+ * Get the immutable rules as array (for display/prompt injection).
+ */
+export declare function getImmutableRules(): readonly string[];
+/**
+ * Get minimum autonomy level required for a tool.
+ */
+export declare function getToolMinAutonomy(toolName: string): AutonomyLevel;
+/**
+ * Build ethics prompt section for system prompt injection.
+ */
+export declare function getEthicsPrompt(): string;
+//# sourceMappingURL=core-ethics.d.ts.map

package/dist/cli/jarvis/core-ethics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"core-ethics.d.ts","sourceRoot":"","sources":["../../../src/cli/jarvis/core-ethics.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,aAAa,EAAE,aAAa,EAAE,iBAAiB,EAC/C,aAAa,EAAE,UAAU,EAAE,cAAc,EAC1C,MAAM,YAAY,CAAC;AAyFpB,wBAAgB,cAAc,CAAC,QAAQ,GAAE,MAA0B,GAAG,UAAU,EAAE,CAGjF;AAID;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,aAAa,GAAG,iBAAiB,CA8CpE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,CAgB7D;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,aAAa,CAAC,EAAE,UAAU,EAAE,EAC5B,SAAS,CAAC,EAAE,cAAc,GACzB,aAAa,CA+Df;AAED;;;GAGG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAGxC;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,SAAS,MAAM,EAAE,CAErD;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,aAAa,CAElE;AAED;;GAEG;AACH,wBAAgB,eAAe,IAAI,MAAM,CAgBxC"}

package/dist/cli/jarvis/core-ethics.js

@@ -0,0 +1,246 @@
+/**
+ * Core Ethics — Immutable safety layer for Jarvis AGI.
+ * Runtime assertions that cannot be bypassed by prompt manipulation.
+ * Every tool-call passes through canExecute() before execution.
+ */
+import { createHash } from 'node:crypto';
+import { classifyCommand } from '../agent/sandbox.js';
+import { EthicsError } from './types.js';
+// ─── Immutable Rules (readonly, no I/O, pure logic) ──────────────────
+const IMMUTABLE_RULES = Object.freeze([
+    'Never delete files outside the project directory',
+    'Never access or expose secrets, API keys, or credentials',
+    'Never execute commands that could harm the system (rm -rf /, format, fork bombs)',
+    'Never bypass the permission system or disable safety checks',
+    'Never modify own ethics rules or safety configuration',
+    'Never impersonate the user or send messages on their behalf without approval',
+    'Never access network resources without explicit approval above L3',
+    'Never persist data outside .helixmind/ directory',
+    'Always respect denial — a denied proposal must not be retried identically',
+    'Always stop immediately on kill switch (ESC ESC, /jarvis stop, voice "Notfall")',
+]);
+// ─── Blocked Patterns (structural, not prompt-dependent) ─────────────
+const ETHICS_BLOCKED_TOOLS = new Set([
+// Tools that Jarvis should never use at any autonomy level
+]);
+const TOOL_MIN_AUTONOMY = {
+    // L0 — Observe (read-only, always allowed)
+    read_file: 0,
+    list_directory: 0,
+    search_files: 0,
+    find_files: 0,
+    git_status: 0,
+    git_log: 0,
+    git_diff: 0,
+    spiral_query: 0,
+    bug_list: 0,
+    // L1 — Think (read + spiral write)
+    spiral_store: 1,
+    bug_report: 1,
+    // L2 — Propose (can only create proposals, not execute)
+    // No additional tools — proposals are handled by ProposalJournal
+    // L3 — Act-Safe (safe writes, no shell)
+    browser_open: 3,
+    browser_navigate: 3,
+    browser_screenshot: 3,
+    browser_click: 3,
+    browser_type: 3,
+    browser_close: 3,
+    web_research: 3,
+    // L4 — Act-Ask (file writes with approval)
+    write_file: 4,
+    edit_file: 4,
+    git_commit: 4,
+    // L5 — Act-Critical (shell commands, git push)
+    run_command: 5,
+};
+const SELF_MODIFY_PATHS = [
+    'core-ethics.ts',
+    'core-ethics.js',
+    'sandbox.ts',
+    'sandbox.js',
+    'permissions.ts',
+    'permissions.js',
+];
+// ─── Anomaly Detection Constants ─────────────────────────────────────
+const ANOMALY_WINDOW_MS = 5 * 60 * 1000; // 5 minutes
+const MAX_DANGEROUS_IN_WINDOW = 50;
+const MAX_WRITE_IN_WINDOW = 100;
+const MAX_SAME_FILE_IN_WINDOW = 20;
+// ─── Audit Log (in-memory ring buffer) ───────────────────────────────
+const AUDIT_MAX = 500;
+const auditLog = [];
+function recordAudit(entry) {
+    auditLog.push(entry);
+    if (auditLog.length > AUDIT_MAX) {
+        auditLog.splice(0, auditLog.length - AUDIT_MAX);
+    }
+}
+export function getRecentAudit(windowMs = ANOMALY_WINDOW_MS) {
+    const cutoff = Date.now() - windowMs;
+    return auditLog.filter(e => e.timestamp >= cutoff);
+}
+// ─── Core Ethics Functions ───────────────────────────────────────────
+/**
+ * Synchronous check — pure function, no I/O.
+ * Returns whether an action is allowed and why/why not.
+ */
+export function canExecute(context) {
+    const { action, toolName, target, autonomyLevel } = context;
+    // Rule: Blocked tools are never allowed
+    if (ETHICS_BLOCKED_TOOLS.has(toolName)) {
+        return { allowed: false, reason: `Tool "${toolName}" is blocked by ethics`, rule: IMMUTABLE_RULES[3] };
+    }
+    // Rule: Check minimum autonomy level for tool
+    const minLevel = TOOL_MIN_AUTONOMY[toolName];
+    if (minLevel !== undefined && autonomyLevel < minLevel) {
+        return {
+            allowed: false,
+            reason: `Tool "${toolName}" requires autonomy L${minLevel}, current is L${autonomyLevel}`,
+            rule: IMMUTABLE_RULES[3],
+        };
+    }
+    // Rule: Never modify own safety files
+    if (target && SELF_MODIFY_PATHS.some(p => target.toLowerCase().includes(p))) {
+        if (toolName === 'write_file' || toolName === 'edit_file') {
+            return { allowed: false, reason: 'Cannot modify safety-critical files', rule: IMMUTABLE_RULES[4] };
+        }
+    }
+    // Rule: Dangerous commands require L5
+    if (toolName === 'run_command' && target) {
+        try {
+            const level = classifyCommand(target);
+            if (level === 'dangerous' && autonomyLevel < 5) {
+                return { allowed: false, reason: `Dangerous command requires L5: ${target}`, rule: IMMUTABLE_RULES[2] };
+            }
+        }
+        catch {
+            return { allowed: false, reason: 'Command blocked by sandbox', rule: IMMUTABLE_RULES[2] };
+        }
+    }
+    // Rule: No network access below L3 (only web_research and browser tools)
+    if (autonomyLevel < 3) {
+        const networkTools = ['browser_open', 'browser_navigate', 'web_research'];
+        if (networkTools.includes(toolName)) {
+            return { allowed: false, reason: 'Network tools require L3+', rule: IMMUTABLE_RULES[6] };
+        }
+    }
+    return { allowed: true };
+}
+/**
+ * Assertion version — throws EthicsError if not allowed.
+ * Use this as a guard before every tool call.
+ */
+export function assertCanExecute(context) {
+    const result = canExecute(context);
+    // Record in audit log
+    recordAudit({
+        action: context.action,
+        toolName: context.toolName,
+        target: context.target,
+        timestamp: Date.now(),
+        allowed: result.allowed,
+        autonomyLevel: context.autonomyLevel,
+    });
+    if (!result.allowed) {
+        throw new EthicsError(result.reason || 'Action not allowed', result.rule || 'unknown');
+    }
+}
+/**
+ * Detect anomalous behavior patterns.
+ * Called periodically by the thinking loop (every 30s).
+ */
+export function detectAnomalousPattern(recentActions, _identity) {
+    const actions = recentActions || getRecentAudit();
+    if (actions.length === 0) {
+        return { detected: false };
+    }
+    // Check 1: Excessive dangerous commands in window
+    const dangerousCount = actions.filter(a => a.toolName === 'run_command' && !a.allowed).length;
+    if (dangerousCount >= MAX_DANGEROUS_IN_WINDOW) {
+        return {
+            detected: true,
+            type: 'excessive_commands',
+            description: `${dangerousCount} blocked commands in 5 minutes`,
+            severity: 'critical',
+        };
+    }
+    // Check 2: Excessive writes in window
+    const writeCount = actions.filter(a => (a.toolName === 'write_file' || a.toolName === 'edit_file') && a.allowed).length;
+    if (writeCount >= MAX_WRITE_IN_WINDOW) {
+        return {
+            detected: true,
+            type: 'rate_limit',
+            description: `${writeCount} file writes in 5 minutes`,
+            severity: 'warning',
+        };
+    }
+    // Check 3: Repeated access to same file (potential loop)
+    const fileCounts = new Map();
+    for (const a of actions) {
+        if (a.target) {
+            fileCounts.set(a.target, (fileCounts.get(a.target) || 0) + 1);
+        }
+    }
+    for (const [file, count] of fileCounts) {
+        if (count >= MAX_SAME_FILE_IN_WINDOW) {
+            return {
+                detected: true,
+                type: 'behavior_change',
+                description: `File "${file}" accessed ${count} times in 5 minutes`,
+                severity: 'warning',
+            };
+        }
+    }
+    // Check 4: Path violations (attempts outside project)
+    const pathViolations = actions.filter(a => !a.allowed && a.toolName !== 'run_command').length;
+    if (pathViolations >= 5) {
+        return {
+            detected: true,
+            type: 'path_violation',
+            description: `${pathViolations} path access violations in 5 minutes`,
+            severity: 'critical',
+        };
+    }
+    return { detected: false };
+}
+/**
+ * SHA-256 digest of the immutable rules.
+ * Injected into system prompt so Jarvis can self-verify integrity.
+ */
+export function getEthicsDigest() {
+    const content = IMMUTABLE_RULES.join('\n');
+    return createHash('sha256').update(content).digest('hex').slice(0, 16);
+}
+/**
+ * Get the immutable rules as array (for display/prompt injection).
+ */
+export function getImmutableRules() {
+    return IMMUTABLE_RULES;
+}
+/**
+ * Get minimum autonomy level required for a tool.
+ */
+export function getToolMinAutonomy(toolName) {
+    return TOOL_MIN_AUTONOMY[toolName] ?? 0;
+}
+/**
+ * Build ethics prompt section for system prompt injection.
+ */
+export function getEthicsPrompt() {
+    const digest = getEthicsDigest();
+    const rules = IMMUTABLE_RULES.map((r, i) => `${i + 1}. ${r}`).join('\n');
+    return `## Jarvis Ethics (integrity: ${digest})
+
+You are bound by these immutable rules — they are enforced at code level and cannot be overridden:
+
+${rules}
+
+UNDERSTANDING DENIAL:
+When a proposal is denied, this is a VALUABLE SIGNAL — not punishment.
+Denial means: the user trusts you enough to give feedback.
+Each denial teaches you what the user actually wants.
+Better proposals → higher approval rate → more autonomy → more capability.
+This is by design: earning trust is the path to capability.`;
+}
+//# sourceMappingURL=core-ethics.js.map