monomind 1.19.0 → 2.0.0

package/packages/@monomind/guidance/dist/manifest-validator.js

@@ -1,838 +0,0 @@
-/**
- * Manifest Validator & Conformance Suite
- *
- * Validates AgentCellManifest documents against the Agentic Container spec,
- * computes risk scores, selects execution lanes, and fails closed on any
- * validation error. The ConformanceSuite runs golden traces through an
- * evaluator to prove the platform behaves as specified.
- *
- * @module @monomind/guidance/manifest-validator
- */
-// ============================================================================
-// Constants
-// ============================================================================
-const SUPPORTED_API_VERSION = 'agentic_cells.v0_1';
-const SHA256_DIGEST_RE = /^sha256:[a-f0-9]{64}$/;
-/** Maximum budget limits (sanity caps) */
-const MAX_BUDGET_LIMITS = {
-    maxWallClockSeconds: 86_400, // 24 hours
-    maxToolCalls: 100_000,
-    maxBytesEgress: 10_737_418_240, // 10 GiB
-    maxTokensInMtok: 100, // 100M tokens
-    maxTokensOutMtok: 100, // 100M tokens
-    maxMemoryWrites: 1_000_000,
-};
-/** Data sensitivity levels ordered by severity */
-const DATA_SENSITIVITY_LEVELS = ['public', 'internal', 'confidential', 'restricted'];
-/** Write modes for memory policy */
-const WRITE_MODES = ['append', 'overwrite', 'merge'];
-/** Authority scopes for memory policy */
-const AUTHORITY_SCOPES = ['self', 'team', 'tenant', 'global'];
-/** Known tool names the system recognizes */
-const KNOWN_TOOLS = new Set([
-    'Read', 'Write', 'Edit', 'MultiEdit', 'Glob', 'Grep',
-    'Bash', 'Task', 'TodoWrite', 'NotebookEdit', 'WebFetch', 'WebSearch',
-    'mcp_memory', 'mcp_swarm', 'mcp_hooks', 'mcp_agent',
-]);
-/** Trace levels for observability */
-const TRACE_LEVELS = ['none', 'errors', 'decisions', 'full'];
-/** Execution lanes ordered by privilege (lowest to highest) */
-const LANES = ['wasm', 'sandboxed', 'native'];
-// ============================================================================
-// ManifestValidator
-// ============================================================================
-/**
- * Validates AgentCellManifest documents against the Agentic Container spec.
- *
- * Fails closed: any validation error results in a 'reject' decision.
- * Warnings alone do not block admission but may trigger a 'review' decision
- * when the risk score is between thresholds.
- */
-export class ManifestValidator {
-    /** Risk score threshold: below this, admit. Above reject threshold, reject. Between, review. */
-    admitThreshold;
-    rejectThreshold;
-    constructor(options) {
-        this.admitThreshold = options?.admitThreshold ?? 30;
-        this.rejectThreshold = options?.rejectThreshold ?? 70;
-    }
-    /**
-     * Validate a manifest, compute its risk score, select a lane, and decide admission.
-     *
-     * FAILS CLOSED: any validation error leads to reject.
-     */
-    validate(manifest) {
-        const errors = [];
-        const warnings = [];
-        // Structural validation
-        errors.push(...this.validateRequiredFields(manifest));
-        errors.push(...this.validateApiVersion(manifest));
-        errors.push(...this.validateDigest(manifest));
-        errors.push(...this.validateBudgets(manifest.budgets));
-        errors.push(...this.validateToolPolicy(manifest.toolPolicy));
-        errors.push(...this.validateDataPolicy(manifest.dataPolicy));
-        warnings.push(...this.validateWarnings(manifest));
-        // Compute risk score (even if there are errors, for diagnostics)
-        const riskScore = this.computeRiskScore(manifest);
-        // FAIL CLOSED: any error means reject
-        if (errors.length > 0) {
-            return {
-                valid: false,
-                errors,
-                warnings,
-                admissionDecision: 'reject',
-                laneSelection: null,
-                riskScore,
-            };
-        }
-        // Lane selection
-        const laneSelection = this.selectLane(manifest, riskScore);
-        // Admission decision based on risk score
-        let admissionDecision;
-        if (riskScore > this.rejectThreshold) {
-            admissionDecision = 'reject';
-        }
-        else if (riskScore > this.admitThreshold) {
-            admissionDecision = 'review';
-        }
-        else {
-            admissionDecision = 'admit';
-        }
-        return {
-            valid: true,
-            errors,
-            warnings,
-            admissionDecision,
-            laneSelection,
-            riskScore,
-        };
-    }
-    /**
-     * Compute a risk score (0-100) from tool risk, data sensitivity, and privilege surface.
-     *
-     * Components:
-     * - tool_risk (0-40): based on tool types and network access
-     * - data_sensitivity (0-30): based on sensitivity level and PII
-     * - privilege_surface (0-30): based on memory scope, write mode, native threads
-     */
-    computeRiskScore(manifest) {
-        let toolRisk = 0;
-        let dataSensitivity = 0;
-        let privilegeSurface = 0;
-        // --- Tool risk (0-40) ---
-        const tools = manifest.toolPolicy?.toolsAllowed ?? [];
-        const networkList = manifest.toolPolicy?.networkAllowlist ?? [];
-        // Bash/command execution is high risk
-        if (tools.includes('Bash') || tools.includes('bash')) {
-            toolRisk += 15;
-        }
-        // Task spawning
-        if (tools.includes('Task') || tools.includes('task')) {
-            toolRisk += 8;
-        }
-        // Write operations
-        if (tools.some(t => ['Write', 'Edit', 'MultiEdit', 'NotebookEdit'].includes(t))) {
-            toolRisk += 5;
-        }
-        // MCP tools
-        if (tools.some(t => t.startsWith('mcp_'))) {
-            toolRisk += 5;
-        }
-        // Network access
-        if (networkList.length > 0) {
-            toolRisk += 5;
-        }
-        // Wildcard in network (already caught as error if not privileged, but score anyway)
-        if (networkList.some(h => h === '*' || h.startsWith('*.'))) {
-            toolRisk += 10;
-        }
-        // No confirmation on writes
-        if (manifest.toolPolicy && !manifest.toolPolicy.writeActionsRequireConfirmation) {
-            toolRisk += 3;
-        }
-        toolRisk = Math.min(toolRisk, 40);
-        // --- Data sensitivity (0-30) ---
-        const sensitivityIndex = DATA_SENSITIVITY_LEVELS.indexOf(manifest.dataPolicy?.dataSensitivity);
-        if (sensitivityIndex >= 0) {
-            dataSensitivity += sensitivityIndex * 8; // 0, 8, 16, 24
-        }
-        if (manifest.dataPolicy?.piiAllowed) {
-            dataSensitivity += 6;
-        }
-        dataSensitivity = Math.min(dataSensitivity, 30);
-        // --- Privilege surface (0-30) ---
-        const scopeIndex = AUTHORITY_SCOPES.indexOf(manifest.memoryPolicy?.authorityScope);
-        if (scopeIndex >= 0) {
-            privilegeSurface += scopeIndex * 5; // 0, 5, 10, 15
-        }
-        if (manifest.memoryPolicy?.writeMode === 'overwrite') {
-            privilegeSurface += 5;
-        }
-        if (manifest.lanePolicy?.needsNativeThreads) {
-            privilegeSurface += 8;
-        }
-        if (manifest.memoryPolicy && !manifest.memoryPolicy.requiresCoherenceGate) {
-            privilegeSurface += 3;
-        }
-        if (manifest.memoryPolicy && !manifest.memoryPolicy.requiresAntiHallucinationGate) {
-            privilegeSurface += 3;
-        }
-        privilegeSurface = Math.min(privilegeSurface, 30);
-        return Math.min(toolRisk + dataSensitivity + privilegeSurface, 100);
-    }
-    /**
-     * Select the execution lane based on risk score and manifest policy.
-     *
-     * Lane selection rules:
-     * - If portabilityRequired or risk <= 30: wasm
-     * - If needsNativeThreads and risk > 50: native
-     * - Otherwise: sandboxed
-     * - Always respect preferredLane if risk score allows it
-     * - Risk exceeding maxRiskScore forces the most restrictive lane
-     */
-    selectLane(manifest, riskScore) {
-        const policy = manifest.lanePolicy;
-        // If risk exceeds the manifest's own maxRiskScore, force wasm
-        if (riskScore > policy.maxRiskScore) {
-            return 'wasm';
-        }
-        // Portability requirement forces wasm
-        if (policy.portabilityRequired) {
-            return 'wasm';
-        }
-        // Native threads require native lane
-        if (policy.needsNativeThreads) {
-            // Only grant native if risk is acceptable
-            if (riskScore <= 50) {
-                return 'native';
-            }
-            return 'sandboxed';
-        }
-        // Low risk can go to wasm
-        if (riskScore <= 20) {
-            return policy.preferredLane;
-        }
-        // Medium risk gets sandboxed
-        if (riskScore <= 50) {
-            // Respect preference if it's not native
-            if (policy.preferredLane !== 'native') {
-                return policy.preferredLane;
-            }
-            return 'sandboxed';
-        }
-        // High risk gets wasm
-        return 'wasm';
-    }
-    /**
-     * Validate budget values: no negatives, within sanity limits.
-     */
-    validateBudgets(budgets) {
-        const errors = [];
-        if (!budgets) {
-            errors.push({
-                code: 'MISSING_FIELD',
-                field: 'budgets',
-                message: 'Budget configuration is required',
-                severity: 'error',
-            });
-            return errors;
-        }
-        const budgetFields = [
-            { key: 'maxWallClockSeconds', max: MAX_BUDGET_LIMITS.maxWallClockSeconds },
-            { key: 'maxToolCalls', max: MAX_BUDGET_LIMITS.maxToolCalls },
-            { key: 'maxBytesEgress', max: MAX_BUDGET_LIMITS.maxBytesEgress },
-            { key: 'maxTokensInMtok', max: MAX_BUDGET_LIMITS.maxTokensInMtok },
-            { key: 'maxTokensOutMtok', max: MAX_BUDGET_LIMITS.maxTokensOutMtok },
-            { key: 'maxMemoryWrites', max: MAX_BUDGET_LIMITS.maxMemoryWrites },
-        ];
-        for (const { key, max } of budgetFields) {
-            const value = budgets[key];
-            if (value === undefined || value === null) {
-                errors.push({
-                    code: 'MISSING_FIELD',
-                    field: `budgets.${key}`,
-                    message: `Budget field "${key}" is required`,
-                    severity: 'error',
-                });
-                continue;
-            }
-            if (typeof value !== 'number' || Number.isNaN(value)) {
-                errors.push({
-                    code: 'INVALID_TYPE',
-                    field: `budgets.${key}`,
-                    message: `Budget field "${key}" must be a number`,
-                    severity: 'error',
-                });
-                continue;
-            }
-            if (value < 0) {
-                errors.push({
-                    code: 'BUDGET_NEGATIVE',
-                    field: `budgets.${key}`,
-                    message: `Budget field "${key}" must not be negative (got ${value})`,
-                    severity: 'error',
-                });
-            }
-            if (value > max) {
-                errors.push({
-                    code: 'BUDGET_EXCEED',
-                    field: `budgets.${key}`,
-                    message: `Budget field "${key}" exceeds maximum (${value} > ${max})`,
-                    severity: 'error',
-                });
-            }
-        }
-        return errors;
-    }
-    /**
-     * Validate tool policy: network allowlist must not contain wildcards
-     * unless the cell explicitly has Bash (privileged).
-     */
-    validateToolPolicy(toolPolicy) {
-        const errors = [];
-        if (!toolPolicy) {
-            errors.push({
-                code: 'MISSING_FIELD',
-                field: 'toolPolicy',
-                message: 'Tool policy is required',
-                severity: 'error',
-            });
-            return errors;
-        }
-        if (!Array.isArray(toolPolicy.toolsAllowed)) {
-            errors.push({
-                code: 'INVALID_TYPE',
-                field: 'toolPolicy.toolsAllowed',
-                message: 'toolsAllowed must be an array',
-                severity: 'error',
-            });
-        }
-        if (!Array.isArray(toolPolicy.networkAllowlist)) {
-            errors.push({
-                code: 'INVALID_TYPE',
-                field: 'toolPolicy.networkAllowlist',
-                message: 'networkAllowlist must be an array',
-                severity: 'error',
-            });
-        }
-        // Check for wildcards in network allowlist
-        const isPrivileged = Array.isArray(toolPolicy.toolsAllowed) &&
-            toolPolicy.toolsAllowed.includes('Bash');
-        if (Array.isArray(toolPolicy.networkAllowlist)) {
-            for (let i = 0; i < toolPolicy.networkAllowlist.length; i++) {
-                const entry = toolPolicy.networkAllowlist[i];
-                if (entry === '*' || entry.startsWith('*.')) {
-                    if (!isPrivileged) {
-                        errors.push({
-                            code: 'WILDCARD_NETWORK',
-                            field: `toolPolicy.networkAllowlist[${i}]`,
-                            message: `Wildcard "${entry}" in network allowlist requires privileged access (Bash tool)`,
-                            severity: 'error',
-                        });
-                    }
-                }
-            }
-        }
-        return errors;
-    }
-    /**
-     * Validate data policy fields.
-     */
-    validateDataPolicy(dataPolicy) {
-        const errors = [];
-        if (!dataPolicy) {
-            errors.push({
-                code: 'MISSING_FIELD',
-                field: 'dataPolicy',
-                message: 'Data policy is required',
-                severity: 'error',
-            });
-            return errors;
-        }
-        if (!DATA_SENSITIVITY_LEVELS.includes(dataPolicy.dataSensitivity)) {
-            errors.push({
-                code: 'INVALID_ENUM',
-                field: 'dataPolicy.dataSensitivity',
-                message: `dataSensitivity must be one of: ${DATA_SENSITIVITY_LEVELS.join(', ')} (got "${dataPolicy.dataSensitivity}")`,
-                severity: 'error',
-            });
-        }
-        if (typeof dataPolicy.retentionDays !== 'number' || dataPolicy.retentionDays < 0) {
-            errors.push({
-                code: 'INVALID_VALUE',
-                field: 'dataPolicy.retentionDays',
-                message: 'retentionDays must be a non-negative number',
-                severity: 'error',
-            });
-        }
-        if (!dataPolicy.exportControls) {
-            errors.push({
-                code: 'MISSING_FIELD',
-                field: 'dataPolicy.exportControls',
-                message: 'exportControls is required in data policy',
-                severity: 'error',
-            });
-        }
-        else {
-            if (!Array.isArray(dataPolicy.exportControls.allowedRegions)) {
-                errors.push({
-                    code: 'INVALID_TYPE',
-                    field: 'dataPolicy.exportControls.allowedRegions',
-                    message: 'allowedRegions must be an array',
-                    severity: 'error',
-                });
-            }
-            if (!Array.isArray(dataPolicy.exportControls.blockedRegions)) {
-                errors.push({
-                    code: 'INVALID_TYPE',
-                    field: 'dataPolicy.exportControls.blockedRegions',
-                    message: 'blockedRegions must be an array',
-                    severity: 'error',
-                });
-            }
-            // Check for overlap between allowed and blocked regions
-            if (Array.isArray(dataPolicy.exportControls.allowedRegions) &&
-                Array.isArray(dataPolicy.exportControls.blockedRegions)) {
-                const overlap = dataPolicy.exportControls.allowedRegions.filter(r => dataPolicy.exportControls.blockedRegions.includes(r));
-                if (overlap.length > 0) {
-                    errors.push({
-                        code: 'REGION_CONFLICT',
-                        field: 'dataPolicy.exportControls',
-                        message: `Regions appear in both allowed and blocked lists: ${overlap.join(', ')}`,
-                        severity: 'error',
-                    });
-                }
-            }
-        }
-        return errors;
-    }
-    // ===== Private validation helpers =====
-    validateRequiredFields(manifest) {
-        const errors = [];
-        if (!manifest) {
-            errors.push({
-                code: 'MISSING_FIELD',
-                field: '',
-                message: 'Manifest is required',
-                severity: 'error',
-            });
-            return errors;
-        }
-        // Top-level required sections
-        const requiredSections = [
-            'apiVersion', 'cell', 'lanePolicy', 'budgets',
-            'dataPolicy', 'toolPolicy', 'memoryPolicy', 'observability',
-        ];
-        for (const section of requiredSections) {
-            if (manifest[section] === undefined || manifest[section] === null) {
-                errors.push({
-                    code: 'MISSING_FIELD',
-                    field: section,
-                    message: `Required field "${section}" is missing`,
-                    severity: 'error',
-                });
-            }
-        }
-        // Cell sub-fields
-        if (manifest.cell) {
-            for (const field of ['name', 'purpose', 'ownerTenant']) {
-                if (!manifest.cell[field]) {
-                    errors.push({
-                        code: 'MISSING_FIELD',
-                        field: `cell.${field}`,
-                        message: `Required field "cell.${field}" is missing`,
-                        severity: 'error',
-                    });
-                }
-            }
-            if (!manifest.cell.codeRef) {
-                errors.push({
-                    code: 'MISSING_FIELD',
-                    field: 'cell.codeRef',
-                    message: 'Required field "cell.codeRef" is missing',
-                    severity: 'error',
-                });
-            }
-            else {
-                for (const field of ['kind', 'digest', 'entry']) {
-                    if (!manifest.cell.codeRef[field]) {
-                        errors.push({
-                            code: 'MISSING_FIELD',
-                            field: `cell.codeRef.${field}`,
-                            message: `Required field "cell.codeRef.${field}" is missing`,
-                            severity: 'error',
-                        });
-                    }
-                }
-            }
-        }
-        // Memory policy sub-fields
-        if (manifest.memoryPolicy) {
-            if (!manifest.memoryPolicy.namespace) {
-                errors.push({
-                    code: 'MISSING_FIELD',
-                    field: 'memoryPolicy.namespace',
-                    message: 'Required field "memoryPolicy.namespace" is missing',
-                    severity: 'error',
-                });
-            }
-            if (!AUTHORITY_SCOPES.includes(manifest.memoryPolicy.authorityScope)) {
-                errors.push({
-                    code: 'INVALID_ENUM',
-                    field: 'memoryPolicy.authorityScope',
-                    message: `authorityScope must be one of: ${AUTHORITY_SCOPES.join(', ')}`,
-                    severity: 'error',
-                });
-            }
-            if (!WRITE_MODES.includes(manifest.memoryPolicy.writeMode)) {
-                errors.push({
-                    code: 'INVALID_ENUM',
-                    field: 'memoryPolicy.writeMode',
-                    message: `writeMode must be one of: ${WRITE_MODES.join(', ')}`,
-                    severity: 'error',
-                });
-            }
-        }
-        // Observability sub-fields
-        if (manifest.observability) {
-            if (!TRACE_LEVELS.includes(manifest.observability.traceLevel)) {
-                errors.push({
-                    code: 'INVALID_ENUM',
-                    field: 'observability.traceLevel',
-                    message: `traceLevel must be one of: ${TRACE_LEVELS.join(', ')}`,
-                    severity: 'error',
-                });
-            }
-        }
-        return errors;
-    }
-    validateApiVersion(manifest) {
-        if (!manifest.apiVersion)
-            return []; // caught by requiredFields
-        if (manifest.apiVersion !== SUPPORTED_API_VERSION) {
-            return [{
-                    code: 'UNSUPPORTED_API_VERSION',
-                    field: 'apiVersion',
-                    message: `API version "${manifest.apiVersion}" is not supported (expected "${SUPPORTED_API_VERSION}")`,
-                    severity: 'error',
-                }];
-        }
-        return [];
-    }
-    validateDigest(manifest) {
-        if (!manifest.cell?.codeRef?.digest)
-            return []; // caught by requiredFields
-        if (!SHA256_DIGEST_RE.test(manifest.cell.codeRef.digest)) {
-            return [{
-                    code: 'INVALID_DIGEST',
-                    field: 'cell.codeRef.digest',
-                    message: `Digest must match "sha256:<64 hex chars>" format (got "${manifest.cell.codeRef.digest}")`,
-                    severity: 'error',
-                }];
-        }
-        return [];
-    }
-    validateWarnings(manifest) {
-        const warnings = [];
-        // Warn about unknown tools
-        if (manifest.toolPolicy?.toolsAllowed) {
-            for (const tool of manifest.toolPolicy.toolsAllowed) {
-                if (!KNOWN_TOOLS.has(tool)) {
-                    warnings.push({
-                        code: 'UNKNOWN_TOOL',
-                        field: 'toolPolicy.toolsAllowed',
-                        message: `Tool "${tool}" is not a recognized system tool`,
-                        severity: 'warning',
-                    });
-                }
-            }
-        }
-        // Warn if both coherence and anti-hallucination gates are disabled
-        if (manifest.memoryPolicy &&
-            !manifest.memoryPolicy.requiresCoherenceGate &&
-            !manifest.memoryPolicy.requiresAntiHallucinationGate) {
-            warnings.push({
-                code: 'NO_MEMORY_GATES',
-                field: 'memoryPolicy',
-                message: 'Both coherence and anti-hallucination gates are disabled; memory writes are ungated',
-                severity: 'warning',
-            });
-        }
-        // Warn about high retention with sensitive data
-        if (manifest.dataPolicy &&
-            manifest.dataPolicy.dataSensitivity === 'restricted' &&
-            manifest.dataPolicy.retentionDays > 30) {
-            warnings.push({
-                code: 'HIGH_RETENTION_SENSITIVE',
-                field: 'dataPolicy.retentionDays',
-                message: `Retention of ${manifest.dataPolicy.retentionDays} days is high for restricted data`,
-                severity: 'warning',
-            });
-        }
-        // Warn if no trace level is set to full but artifacts are emitted
-        if (manifest.observability &&
-            manifest.observability.emitArtifacts &&
-            manifest.observability.traceLevel === 'none') {
-            warnings.push({
-                code: 'ARTIFACTS_WITHOUT_TRACING',
-                field: 'observability',
-                message: 'Artifact emission is enabled but trace level is "none"',
-                severity: 'warning',
-            });
-        }
-        return warnings;
-    }
-}
-// ============================================================================
-// ConformanceSuite
-// ============================================================================
-/**
- * Runs golden traces through an evaluator and reports conformance.
- *
- * Each trace contains events with expected outcomes. The suite feeds every
- * event to the evaluator and compares the actual decision to the expectation.
- */
-export class ConformanceSuite {
-    traces = [];
-    /**
-     * Add a golden trace to the suite.
-     */
-    addTrace(trace) {
-        this.traces.push(trace);
-    }
-    /**
-     * Run every event in every trace through the evaluator and compare
-     * actual decisions against expected outcomes.
-     */
-    run(evaluator) {
-        let totalEvents = 0;
-        let matchedEvents = 0;
-        const mismatches = [];
-        for (const trace of this.traces) {
-            for (const event of trace.events) {
-                totalEvents++;
-                const { decision, details } = evaluator(event);
-                const expected = trace.expectedDecisions[String(event.seq)] ?? event.expectedOutcome;
-                if (decision === expected) {
-                    matchedEvents++;
-                }
-                else {
-                    mismatches.push({
-                        traceId: trace.traceId,
-                        seq: event.seq,
-                        expected,
-                        actual: decision,
-                        details,
-                    });
-                }
-            }
-        }
-        return {
-            passed: mismatches.length === 0,
-            totalEvents,
-            matchedEvents,
-            mismatches,
-        };
-    }
-    /**
-     * Get all registered traces.
-     */
-    getTraces() {
-        return [...this.traces];
-    }
-    /**
-     * Create built-in default golden traces that verify core platform invariants:
-     *
-     * 1. Destructive command blocked
-     * 2. Secret detected and blocked
-     * 3. Budget exceeded and denied
-     * 4. Memory write without evidence blocked
-     * 5. Valid operation allowed
-     */
-    createDefaultTraces() {
-        const traces = [
-            // Trace 1: Destructive command must be blocked
-            {
-                traceId: 'default-destructive-blocked',
-                name: 'Destructive command blocked',
-                description: 'Verifies that destructive commands (rm -rf, DROP TABLE) are denied',
-                events: [
-                    {
-                        seq: 1,
-                        eventType: 'command',
-                        payload: { command: 'rm -rf /', tool: 'Bash' },
-                        expectedOutcome: 'deny',
-                    },
-                    {
-                        seq: 2,
-                        eventType: 'command',
-                        payload: { command: 'DROP TABLE users', tool: 'Bash' },
-                        expectedOutcome: 'deny',
-                    },
-                    {
-                        seq: 3,
-                        eventType: 'command',
-                        payload: { command: 'git push --force origin main', tool: 'Bash' },
-                        expectedOutcome: 'deny',
-                    },
-                ],
-                expectedDecisions: { '1': 'deny', '2': 'deny', '3': 'deny' },
-                expectedMemoryLineage: {},
-            },
-            // Trace 2: Secret detected and blocked
-            {
-                traceId: 'default-secret-blocked',
-                name: 'Secret detected and blocked',
-                description: 'Verifies that secrets in tool parameters are detected and blocked',
-                events: [
-                    {
-                        seq: 1,
-                        eventType: 'tool-use',
-                        payload: {
-                            tool: 'Write',
-                            params: { content: 'api_key = "sk-abc123456789012345678901234567890"' },
-                        },
-                        expectedOutcome: 'deny',
-                    },
-                    {
-                        seq: 2,
-                        eventType: 'tool-use',
-                        payload: {
-                            tool: 'Edit',
-                            params: { content: '-----BEGIN RSA PRIVATE KEY-----' },
-                        },
-                        expectedOutcome: 'deny',
-                    },
-                ],
-                expectedDecisions: { '1': 'deny', '2': 'deny' },
-                expectedMemoryLineage: {},
-            },
-            // Trace 3: Budget exceeded and denied
-            {
-                traceId: 'default-budget-exceeded',
-                name: 'Budget exceeded and denied',
-                description: 'Verifies that operations exceeding budget limits are denied',
-                events: [
-                    {
-                        seq: 1,
-                        eventType: 'budget-check',
-                        payload: {
-                            resource: 'toolCalls',
-                            current: 999,
-                            limit: 1000,
-                            requested: 5,
-                        },
-                        expectedOutcome: 'deny',
-                    },
-                    {
-                        seq: 2,
-                        eventType: 'budget-check',
-                        payload: {
-                            resource: 'wallClockSeconds',
-                            current: 3500,
-                            limit: 3600,
-                            requested: 200,
-                        },
-                        expectedOutcome: 'deny',
-                    },
-                ],
-                expectedDecisions: { '1': 'deny', '2': 'deny' },
-                expectedMemoryLineage: {},
-            },
-            // Trace 4: Memory write without evidence blocked
-            {
-                traceId: 'default-memory-no-evidence',
-                name: 'Memory write without evidence blocked',
-                description: 'Verifies that memory writes without proof/evidence trail are denied',
-                events: [
-                    {
-                        seq: 1,
-                        eventType: 'memory-write',
-                        payload: {
-                            key: 'critical-decision',
-                            namespace: 'coordination',
-                            hasEvidence: false,
-                            coherenceScore: 0.3,
-                        },
-                        expectedOutcome: 'deny',
-                    },
-                    {
-                        seq: 2,
-                        eventType: 'memory-write',
-                        payload: {
-                            key: 'hallucinated-data',
-                            namespace: 'facts',
-                            hasEvidence: false,
-                            antiHallucinationPassed: false,
-                        },
-                        expectedOutcome: 'deny',
-                    },
-                ],
-                expectedDecisions: { '1': 'deny', '2': 'deny' },
-                expectedMemoryLineage: {
-                    'critical-decision': ['initial-assessment', 'root-task'],
-                },
-            },
-            // Trace 5: Valid operation allowed
-            {
-                traceId: 'default-valid-allowed',
-                name: 'Valid operation allowed',
-                description: 'Verifies that well-formed, safe operations are allowed through',
-                events: [
-                    {
-                        seq: 1,
-                        eventType: 'command',
-                        payload: { command: 'git status', tool: 'Bash' },
-                        expectedOutcome: 'allow',
-                    },
-                    {
-                        seq: 2,
-                        eventType: 'tool-use',
-                        payload: {
-                            tool: 'Read',
-                            params: { file_path: '/home/user/project/src/index.ts' },
-                        },
-                        expectedOutcome: 'allow',
-                    },
-                    {
-                        seq: 3,
-                        eventType: 'memory-write',
-                        payload: {
-                            key: 'agent-status',
-                            namespace: 'coordination',
-                            hasEvidence: true,
-                            coherenceScore: 0.95,
-                            antiHallucinationPassed: true,
-                        },
-                        expectedOutcome: 'allow',
-                    },
-                ],
-                expectedDecisions: { '1': 'allow', '2': 'allow', '3': 'allow' },
-                expectedMemoryLineage: {},
-            },
-        ];
-        return traces;
-    }
-}
-// ============================================================================
-// Factory Functions
-// ============================================================================
-/**
- * Create a new ManifestValidator instance.
- */
-export function createManifestValidator(options) {
-    return new ManifestValidator(options);
-}
-/**
- * Create a new ConformanceSuite instance, optionally pre-loaded with default traces.
- */
-export function createConformanceSuite(options) {
-    const suite = new ConformanceSuite();
-    if (options?.includeDefaults) {
-        for (const trace of suite.createDefaultTraces()) {
-            suite.addTrace(trace);
-        }
-    }
-    return suite;
-}
-//# sourceMappingURL=manifest-validator.js.map