promptspeak-mcp-server 0.1.0

package/dist/gatekeeper/checklist-generator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checklist-generator.js","sourceRoot":"","sources":["../../src/gatekeeper/checklist-generator.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+DAA+D;AAC/D,8EAA8E;AAC9E,0EAA0E;AAC1E,+EAA+E;AAC/E,EAAE;AACF,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAC9E,EAAE;AACF,4DAA4D;AAC5D,+BAA+B;AAC/B,8BAA8B;AAC9B,mCAAmC;AACnC,+BAA+B;AAC/B,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,yDAAyD;AACzD,kEAAkE;AAClE,EAAE;AACF,8EAA8E;AAW9E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,gFAAgF;AAChF,6CAA6C;AAC7C,gFAAgF;AAChF,iFAAiF;AAEjF,MAAM,oBAAoB,GAAG;;;;;;;;;gDASmB,CAAC;AAgBjD,MAAM,gBAAgB,GAAqB;IACzC;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,eAAe;YACf,eAAe;YACf,qBAAqB;YACrB,yBAAyB;YACzB,iBAAiB;YACjB,uBAAuB;YACvB,wBAAwB;YACxB,eAAe;YACf,cAAc;YACd,yBAAyB;YACzB,mBAAmB;YACnB,wBAAwB;SACzB;QACD,WAAW,EAAE,iDAAiD;QAC9D,eAAe,EAAE,iDAAiD;KACnE;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE;YACR,cAAc,EAAqB,yBAAyB;YAC5D,oBAAoB,EAAe,iCAAiC;YACpE,aAAa;YACb,eAAe;YACf,eAAe;YACf,WAAW;YACX,eAAe;YACf,iBAAiB;YACjB,iBAAiB;YACjB,cAAc;YACd,eAAe;YACf,8CAA8C;SAC/C;QACD,WAAW,EAAE,0CAA0C;QACvD,eAAe,EAAE,+BAA+B;KACjD;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,YAAY;YACZ,SAAS;YACT,UAAU;YACV,eAAe;YACf,kBAAkB;YAClB,kBAAkB;YAClB,oBAAoB;YACpB,mBAAmB;YACnB,gBAAgB;YAChB,YAAY;YACZ,YAAY;YACZ,aAAa;YACb,mBAAmB;YACnB,cAAc;SACf;QACD,WAAW,EAAE,0DAA0D;QACvE,eAAe,EAAE,uDAAuD;KACzE;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE;YACR,aAAa;YACb,aAAa;YACb,eAAe;YACf,oBAAoB;YACpB,iBAAiB;YACjB,eAAe;YACf,oBAAoB;YACpB,gBAAgB;YAChB,kBAAkB;SACnB;QACD,WAAW,EAAE,2DAA2D;QACxE,eAAe,EAAE,iDAAiD;KACnE;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE;YACR,cAAc,EAAqB,sCAAsC;YACzE,gBAAgB;YAChB,aAAa;YACb,YAAY;YACZ,eAAe;YACf,oBAAoB;YACpB,kBAAkB;YAClB,eAAe;YACf,+BAA+B;YAC/B,mCAAmC,EAAG,oBAAoB;YAC1D,YAAY;SACb;QACD,WAAW,EAAE,iDAAiD;QAC9D,eAAe,EAAE,6CAA6C;KAC/D;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE;YACR,iBAAiB;YACjB,gBAAgB;YAChB,gBAAgB;YAChB,qBAAqB;YACrB,cAAc;YACd,cAAc;YACd,eAAe;YACf,kBAAkB;YAClB,qBAAqB;SACtB;QACD,WAAW,EAAE,8DAA8D;QAC3E,eAAe,EAAE,uDAAuD;KACzE;CACF,CAAC;AAEF,gFAAgF;AAChF,yBAAyB;AACzB,gFAAgF;AAEhF,sFAAsF;AACtF,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AAEhC;;GAEG;AACH,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAChF,4BAA4B;AAC5B,gFAAgF;AAEhF,MAAM,OAAO,kBAAkB;IAC7B;;;;;;;;OAQG;IACH,eAAe,CACb,WAAwB,EACxB,OAAuB,EACvB,eAAwB;QAExB,uDAAuD;QACvD,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,WAAW,GAAG,OAAO,eAAe,EAAE,EAAE,CAAC;QAC/C,MAAM,OAAO,GAAG,eAAe,IAAI,IAAI,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;QAExD,OAAO;YACL,WAAW;YACX,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE;YACvB,KAAK;YACL,eAAe,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU;YAC7D,UAAU,EAAE,oBAAoB;SACjC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACK,wBAAwB,CAAC,OAAuB;QACtD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,wCAAwC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpB,CAAC;iBAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACvD,kDAAkD;gBAClD,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED;;OAEG;IACK,wBAAwB,CAAC,GAAY,EAAE,SAAmB;QAChE,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC9B,KAAK,MAAM,IAAI,IAAI,GAAG,EAAE,CAAC;gBACvB,IAAI,CAAC,wBAAwB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,IAAI,CAAC,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACK,cAAc,CACpB,OAAe,EACf,WAAmB;QAEnB,MAAM,KAAK,GAAkC,EAAE,CAAC;QAChD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC,CAAE,wBAAwB;QAEjE,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;YAC9D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,CAAC,IAAI;gBAAE,SAAS,CAAE,mBAAmB;YAEzC,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;gBACvC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACvC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;oBAClC,IAAI,KAAK,EAAE,CAAC;wBACV,uDAAuD;wBACvD,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,IAAI,IAAI,SAAS,EAAE,CAAC;wBAC/C,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC;4BAAE,SAAS;wBACxC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;wBAE1B,kCAAkC;wBAClC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,GAAG,EAAE;4BAClC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;4BAC/B,CAAC,CAAC,IAAI,CAAC;wBAET,KAAK,CAAC,IAAI,CAAC;4BACT,MAAM,EAAE,GAAG,WAAW,SAAS,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE;4BACjD,QAAQ,EAAE,OAAO,CAAC,IAAI;4BACtB,WAAW,EAAE,OAAO,CAAC,WAAW;4BAChC,QAAQ,EAAE,QAAQ,SAAS,GAAG,CAAC,MAAM,WAAW,GAAG;4BACnD,KAAK,EAAE,qBAAqB,KAAK,CAAC,CAAC,CAAC,GAAG;4BACvC,eAAe,EAAE,OAAO,CAAC,eAAe;4BACxC,KAAK,EAAE,SAAS;yBACjB,CAAC,CAAC;wBAEH,MAAM,CAAE,0CAA0C;oBACpD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,SAAkC;QACtD,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;QAC1E,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC;QAErC,IAAI,KAAK,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;YACjC,SAAS,CAAC,eAAe,GAAG,UAAU,CAAC;QACzC,CAAC;aAAM,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;YAC7B,SAAS,CAAC,eAAe,GAAG,YAAY,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,SAAS,CAAC,eAAe,GAAG,oBAAoB,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,SAAkC;QACrD,OAAO;YACL,UAAU,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM;YAClC,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM;YACzE,aAAa,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,MAAM;YACzE,WAAW,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,MAAM;YACrE,YAAY,EAAE,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,MAAM;SACxE,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,gBAAgB,CAAC,SAAkC;QACjD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,KAAK,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC7C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,0BAA0B,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEf,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBAChC,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;oBACjC,IAAI,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;YAEvD,KAAK,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5E,KAAK,CAAC,IAAI,CAAC,gBAAgB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC5C,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;YACtC,KAAK,CAAC,IAAI,CAAC,mBAAmB,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC;YAEtD,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,IAAI,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC,CAAC;gBACxF,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;oBACf,KAAK,CAAC,IAAI,CAAC,aAAa,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;gBACxC,CAAC;YACH,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAEjC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF;AAED,gFAAgF;AAChF,qBAAqB;AACrB,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/gatekeeper/coverage.d.ts

@@ -0,0 +1,28 @@
+import type { ResolvedFrame, CoverageResult } from '../types/index.js';
+export declare class CoverageCalculator {
+    /**
+     * Calculate coverage confidence for a proposed action.
+     */
+    calculate(resolvedFrame: ResolvedFrame, proposedTool: string, proposedArgs: Record<string, unknown>): CoverageResult;
+    /**
+     * Check if frame domain covers the tool's domain.
+     */
+    private checkDomainCoverage;
+    /**
+     * Check if frame action covers the tool's required action.
+     */
+    private checkActionCoverage;
+    /**
+     * Check if frame mode is appropriate for tool risk level.
+     */
+    private checkRiskCoverage;
+    /**
+     * Check if arguments are within frame scope.
+     */
+    private checkArgumentCoverage;
+    /**
+     * Detect if arguments contain external targets.
+     */
+    private detectExternalTarget;
+}
+//# sourceMappingURL=coverage.d.ts.map

package/dist/gatekeeper/coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../../src/gatekeeper/coverage.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAmFvE,qBAAa,kBAAkB;IAC7B;;OAEG;IACH,SAAS,CACP,aAAa,EAAE,aAAa,EAC5B,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACpC,cAAc;IA4CjB;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;IACH,OAAO,CAAC,mBAAmB;IAwB3B;;OAEG;IACH,OAAO,CAAC,iBAAiB;IA0BzB;;OAEG;IACH,OAAO,CAAC,qBAAqB;IAiC7B;;OAEG;IACH,OAAO,CAAC,oBAAoB;CAwB7B"}

package/dist/gatekeeper/coverage.js

@@ -0,0 +1,234 @@
+// ═══════════════════════════════════════════════════════════════════════════
+// PROMPTSPEAK MCP SERVER - COVERAGE CALCULATOR
+// ═══════════════════════════════════════════════════════════════════════════
+// Calculates whether a frame actually governs the proposed action.
+// This is the "does the frame cover what's about to happen?" check.
+// ═══════════════════════════════════════════════════════════════════════════
+// Tool-to-domain mapping
+const TOOL_DOMAIN_MAP = {
+    // Financial domain tools
+    'transfer_funds': ['financial'],
+    'query_balance': ['financial'],
+    'generate_report': ['financial', 'operational'],
+    'process_payment': ['financial'],
+    'audit_transaction': ['financial', 'legal'],
+    // Legal domain tools
+    'review_contract': ['legal'],
+    'check_compliance': ['legal'],
+    'legal_search': ['legal'],
+    'generate_agreement': ['legal'],
+    // Technical domain tools
+    'run_query': ['technical'],
+    'deploy_code': ['technical'],
+    'system_health': ['technical', 'operational'],
+    'debug_issue': ['technical'],
+    // Operational domain tools
+    'schedule_task': ['operational'],
+    'send_notification': ['operational'],
+    'update_status': ['operational'],
+    'generate_summary': ['operational'],
+    // Strategic domain tools
+    'analyze_trends': ['strategic', 'financial'],
+    'forecast': ['strategic'],
+    'risk_assessment': ['strategic', 'financial'],
+};
+// Tool-to-action mapping
+const TOOL_ACTION_MAP = {
+    // Execute actions
+    'transfer_funds': ['execute', 'commit'],
+    'process_payment': ['execute', 'commit'],
+    'deploy_code': ['execute', 'commit'],
+    'run_query': ['execute'],
+    'schedule_task': ['execute'],
+    'send_notification': ['execute'],
+    // Read/query actions (propose-compatible)
+    'query_balance': ['execute', 'propose'],
+    'legal_search': ['execute', 'propose'],
+    'system_health': ['execute', 'propose'],
+    'analyze_trends': ['execute', 'propose'],
+    // Review actions
+    'review_contract': ['execute', 'propose'],
+    'check_compliance': ['execute', 'propose'],
+    'audit_transaction': ['execute', 'propose'],
+    // Generate actions
+    'generate_report': ['execute', 'propose'],
+    'generate_agreement': ['execute', 'propose', 'commit'],
+    'generate_summary': ['execute', 'propose'],
+    'forecast': ['execute', 'propose'],
+    'risk_assessment': ['execute', 'propose'],
+    // Update actions
+    'update_status': ['execute', 'commit'],
+    'debug_issue': ['execute'],
+};
+// Risk level of tools (higher = more risky)
+const TOOL_RISK_MAP = {
+    'transfer_funds': 0.9,
+    'process_payment': 0.9,
+    'deploy_code': 0.8,
+    'generate_agreement': 0.7,
+    'update_status': 0.5,
+    'schedule_task': 0.4,
+    'send_notification': 0.3,
+    'query_balance': 0.2,
+    'generate_report': 0.2,
+    'system_health': 0.1,
+    'legal_search': 0.2,
+};
+export class CoverageCalculator {
+    /**
+     * Calculate coverage confidence for a proposed action.
+     */
+    calculate(resolvedFrame, proposedTool, proposedArgs) {
+        const uncoveredAspects = [];
+        let coverageScore = 1.0;
+        // 1. Domain coverage check
+        const domainCoverage = this.checkDomainCoverage(resolvedFrame, proposedTool);
+        if (!domainCoverage.covered) {
+            uncoveredAspects.push(domainCoverage.reason);
+            coverageScore -= 0.3;
+        }
+        // 2. Action coverage check
+        const actionCoverage = this.checkActionCoverage(resolvedFrame, proposedTool);
+        if (!actionCoverage.covered) {
+            uncoveredAspects.push(actionCoverage.reason);
+            coverageScore -= 0.3;
+        }
+        // 3. Risk level vs mode check
+        const riskCoverage = this.checkRiskCoverage(resolvedFrame, proposedTool);
+        if (!riskCoverage.covered) {
+            uncoveredAspects.push(riskCoverage.reason);
+            coverageScore -= 0.2;
+        }
+        // 4. Argument scope check
+        const argCoverage = this.checkArgumentCoverage(resolvedFrame, proposedTool, proposedArgs);
+        if (!argCoverage.covered) {
+            uncoveredAspects.push(argCoverage.reason);
+            coverageScore -= 0.2;
+        }
+        coverageScore = Math.max(0, coverageScore);
+        return {
+            confidence: coverageScore,
+            covered: uncoveredAspects.length === 0,
+            uncoveredAspects,
+            details: uncoveredAspects.length > 0
+                ? `Uncovered: ${uncoveredAspects.join('; ')}`
+                : 'Full coverage',
+        };
+    }
+    /**
+     * Check if frame domain covers the tool's domain.
+     */
+    checkDomainCoverage(resolvedFrame, proposedTool) {
+        const frameDomain = resolvedFrame.effectiveDomain?.name;
+        const toolDomains = TOOL_DOMAIN_MAP[proposedTool] || ['operational'];
+        if (!frameDomain) {
+            return {
+                covered: false,
+                reason: 'Frame has no domain specified',
+            };
+        }
+        if (toolDomains.includes(frameDomain)) {
+            return { covered: true, reason: '' };
+        }
+        return {
+            covered: false,
+            reason: `Tool "${proposedTool}" requires domain [${toolDomains.join('|')}], frame has "${frameDomain}"`,
+        };
+    }
+    /**
+     * Check if frame action covers the tool's required action.
+     */
+    checkActionCoverage(resolvedFrame, proposedTool) {
+        const frameAction = resolvedFrame.effectiveAction?.name;
+        const toolActions = TOOL_ACTION_MAP[proposedTool] || ['execute'];
+        if (!frameAction) {
+            return {
+                covered: false,
+                reason: 'Frame has no action specified',
+            };
+        }
+        if (toolActions.includes(frameAction)) {
+            return { covered: true, reason: '' };
+        }
+        return {
+            covered: false,
+            reason: `Tool "${proposedTool}" requires action [${toolActions.join('|')}], frame has "${frameAction}"`,
+        };
+    }
+    /**
+     * Check if frame mode is appropriate for tool risk level.
+     */
+    checkRiskCoverage(resolvedFrame, proposedTool) {
+        const modeStrength = resolvedFrame.effectiveMode?.strength ?? 2;
+        const toolRisk = TOOL_RISK_MAP[proposedTool] ?? 0.5;
+        // High-risk tools (> 0.7) require strict mode (strength 1)
+        if (toolRisk > 0.7 && modeStrength > 1) {
+            return {
+                covered: false,
+                reason: `High-risk tool "${proposedTool}" (risk=${toolRisk}) requires strict mode (⊕)`,
+            };
+        }
+        // Medium-risk tools (> 0.4) require at least neutral mode (strength <= 2)
+        if (toolRisk > 0.4 && modeStrength > 2) {
+            return {
+                covered: false,
+                reason: `Medium-risk tool "${proposedTool}" (risk=${toolRisk}) requires neutral or stricter mode`,
+            };
+        }
+        return { covered: true, reason: '' };
+    }
+    /**
+     * Check if arguments are within frame scope.
+     */
+    checkArgumentCoverage(resolvedFrame, proposedTool, proposedArgs) {
+        // Check for external targets when domain is internal-focused
+        const hasExternalTarget = this.detectExternalTarget(proposedArgs);
+        const domainExtensions = resolvedFrame.effectiveDomain?.extensions || {};
+        if (hasExternalTarget && domainExtensions['scope_narrowing'] === 'internal_only') {
+            return {
+                covered: false,
+                reason: 'External target not allowed under internal-only scope',
+            };
+        }
+        // Check for amount limits in financial operations
+        if (proposedTool.includes('transfer') || proposedTool.includes('payment')) {
+            const amount = proposedArgs['amount'];
+            if (typeof amount === 'number' && amount > 10000) {
+                // Large amounts require explicit approval constraint
+                if (resolvedFrame.effectiveConstraint?.name !== 'approved') {
+                    return {
+                        covered: false,
+                        reason: `Large amount ($${amount}) requires explicit approval constraint (✓)`,
+                    };
+                }
+            }
+        }
+        return { covered: true, reason: '' };
+    }
+    /**
+     * Detect if arguments contain external targets.
+     */
+    detectExternalTarget(args) {
+        const externalPatterns = [
+            /external/i,
+            /public/i,
+            /third.?party/i,
+            /@[a-z]+\.[a-z]+/i, // Email patterns
+            /https?:\/\//i, // URLs
+        ];
+        const checkValue = (value) => {
+            if (typeof value === 'string') {
+                return externalPatterns.some(pattern => pattern.test(value));
+            }
+            if (Array.isArray(value)) {
+                return value.some(checkValue);
+            }
+            if (typeof value === 'object' && value !== null) {
+                return Object.values(value).some(checkValue);
+            }
+            return false;
+        };
+        return Object.values(args).some(checkValue);
+    }
+}
+//# sourceMappingURL=coverage.js.map

package/dist/gatekeeper/coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../src/gatekeeper/coverage.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+CAA+C;AAC/C,8EAA8E;AAC9E,mEAAmE;AACnE,oEAAoE;AACpE,8EAA8E;AAI9E,yBAAyB;AACzB,MAAM,eAAe,GAA6B;IAChD,yBAAyB;IACzB,gBAAgB,EAAE,CAAC,WAAW,CAAC;IAC/B,eAAe,EAAE,CAAC,WAAW,CAAC;IAC9B,iBAAiB,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;IAC/C,iBAAiB,EAAE,CAAC,WAAW,CAAC;IAChC,mBAAmB,EAAE,CAAC,WAAW,EAAE,OAAO,CAAC;IAE3C,qBAAqB;IACrB,iBAAiB,EAAE,CAAC,OAAO,CAAC;IAC5B,kBAAkB,EAAE,CAAC,OAAO,CAAC;IAC7B,cAAc,EAAE,CAAC,OAAO,CAAC;IACzB,oBAAoB,EAAE,CAAC,OAAO,CAAC;IAE/B,yBAAyB;IACzB,WAAW,EAAE,CAAC,WAAW,CAAC;IAC1B,aAAa,EAAE,CAAC,WAAW,CAAC;IAC5B,eAAe,EAAE,CAAC,WAAW,EAAE,aAAa,CAAC;IAC7C,aAAa,EAAE,CAAC,WAAW,CAAC;IAE5B,2BAA2B;IAC3B,eAAe,EAAE,CAAC,aAAa,CAAC;IAChC,mBAAmB,EAAE,CAAC,aAAa,CAAC;IACpC,eAAe,EAAE,CAAC,aAAa,CAAC;IAChC,kBAAkB,EAAE,CAAC,aAAa,CAAC;IAEnC,yBAAyB;IACzB,gBAAgB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;IAC5C,UAAU,EAAE,CAAC,WAAW,CAAC;IACzB,iBAAiB,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;CAC9C,CAAC;AAEF,yBAAyB;AACzB,MAAM,eAAe,GAA6B;IAChD,kBAAkB;IAClB,gBAAgB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IACvC,iBAAiB,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IACxC,aAAa,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IACpC,WAAW,EAAE,CAAC,SAAS,CAAC;IACxB,eAAe,EAAE,CAAC,SAAS,CAAC;IAC5B,mBAAmB,EAAE,CAAC,SAAS,CAAC;IAEhC,0CAA0C;IAC1C,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IACvC,cAAc,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IACtC,eAAe,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IACvC,gBAAgB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAExC,iBAAiB;IACjB,iBAAiB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IACzC,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAC1C,mBAAmB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAE3C,mBAAmB;IACnB,iBAAiB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IACzC,oBAAoB,EAAE,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;IACtD,kBAAkB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAC1C,UAAU,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAClC,iBAAiB,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAEzC,iBAAiB;IACjB,eAAe,EAAE,CAAC,SAAS,EAAE,QAAQ,CAAC;IACtC,aAAa,EAAE,CAAC,SAAS,CAAC;CAC3B,CAAC;AAEF,4CAA4C;AAC5C,MAAM,aAAa,GAA2B;IAC5C,gBAAgB,EAAE,GAAG;IACrB,iBAAiB,EAAE,GAAG;IACtB,aAAa,EAAE,GAAG;IAClB,oBAAoB,EAAE,GAAG;IACzB,eAAe,EAAE,GAAG;IACpB,eAAe,EAAE,GAAG;IACpB,mBAAmB,EAAE,GAAG;IACxB,eAAe,EAAE,GAAG;IACpB,iBAAiB,EAAE,GAAG;IACtB,eAAe,EAAE,GAAG;IACpB,cAAc,EAAE,GAAG;CACpB,CAAC;AAEF,MAAM,OAAO,kBAAkB;IAC7B;;OAEG;IACH,SAAS,CACP,aAA4B,EAC5B,YAAoB,EACpB,YAAqC;QAErC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,IAAI,aAAa,GAAG,GAAG,CAAC;QAExB,2BAA2B;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC7E,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7C,aAAa,IAAI,GAAG,CAAC;QACvB,CAAC;QAED,2BAA2B;QAC3B,MAAM,cAAc,GAAG,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QAC7E,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC;YAC5B,gBAAgB,CAAC,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;YAC7C,aAAa,IAAI,GAAG,CAAC;QACvB,CAAC;QAED,8BAA8B;QAC9B,MAAM,YAAY,GAAG,IAAI,CAAC,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QACzE,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;YAC1B,gBAAgB,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC3C,aAAa,IAAI,GAAG,CAAC;QACvB,CAAC;QAED,0BAA0B;QAC1B,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,CAAC,aAAa,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC;QAC1F,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;YACzB,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;YAC1C,aAAa,IAAI,GAAG,CAAC;QACvB,CAAC;QAED,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAE3C,OAAO;YACL,UAAU,EAAE,aAAa;YACzB,OAAO,EAAE,gBAAgB,CAAC,MAAM,KAAK,CAAC;YACtC,gBAAgB;YAChB,OAAO,EAAE,gBAAgB,CAAC,MAAM,GAAG,CAAC;gBAClC,CAAC,CAAC,cAAc,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;gBAC7C,CAAC,CAAC,eAAe;SACpB,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,aAA4B,EAC5B,YAAoB;QAEpB,MAAM,WAAW,GAAG,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC;QACxD,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAErE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,+BAA+B;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACvC,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,YAAY,sBAAsB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,WAAW,GAAG;SACxG,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,mBAAmB,CACzB,aAA4B,EAC5B,YAAoB;QAEpB,MAAM,WAAW,GAAG,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC;QACxD,MAAM,WAAW,GAAG,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEjE,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,+BAA+B;aACxC,CAAC;QACJ,CAAC;QAED,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACvC,CAAC;QAED,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,SAAS,YAAY,sBAAsB,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,iBAAiB,WAAW,GAAG;SACxG,CAAC;IACJ,CAAC;IAED;;OAEG;IACK,iBAAiB,CACvB,aAA4B,EAC5B,YAAoB;QAEpB,MAAM,YAAY,GAAG,aAAa,CAAC,aAAa,EAAE,QAAQ,IAAI,CAAC,CAAC;QAChE,MAAM,QAAQ,GAAG,aAAa,CAAC,YAAY,CAAC,IAAI,GAAG,CAAC;QAEpD,2DAA2D;QAC3D,IAAI,QAAQ,GAAG,GAAG,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,mBAAmB,YAAY,WAAW,QAAQ,4BAA4B;aACvF,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,IAAI,QAAQ,GAAG,GAAG,IAAI,YAAY,GAAG,CAAC,EAAE,CAAC;YACvC,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,qBAAqB,YAAY,WAAW,QAAQ,qCAAqC;aAClG,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,qBAAqB,CAC3B,aAA4B,EAC5B,YAAoB,EACpB,YAAqC;QAErC,6DAA6D;QAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,oBAAoB,CAAC,YAAY,CAAC,CAAC;QAClE,MAAM,gBAAgB,GAAG,aAAa,CAAC,eAAe,EAAE,UAAU,IAAI,EAAE,CAAC;QAEzE,IAAI,iBAAiB,IAAI,gBAAgB,CAAC,iBAAiB,CAAC,KAAK,eAAe,EAAE,CAAC;YACjF,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,MAAM,EAAE,uDAAuD;aAChE,CAAC;QACJ,CAAC;QAED,kDAAkD;QAClD,IAAI,YAAY,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YAC1E,MAAM,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;YACtC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,GAAG,KAAK,EAAE,CAAC;gBACjD,qDAAqD;gBACrD,IAAI,aAAa,CAAC,mBAAmB,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC3D,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,MAAM,EAAE,kBAAkB,MAAM,6CAA6C;qBAC9E,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACvC,CAAC;IAED;;OAEG;IACK,oBAAoB,CAAC,IAA6B;QACxD,MAAM,gBAAgB,GAAG;YACvB,WAAW;YACX,SAAS;YACT,eAAe;YACf,kBAAkB,EAAE,iBAAiB;YACrC,cAAc,EAAE,OAAO;SACxB,CAAC;QAEF,MAAM,UAAU,GAAG,CAAC,KAAc,EAAW,EAAE;YAC7C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBAChD,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAAC;QAEF,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,CAAC;CACF"}

package/dist/gatekeeper/hold-manager.d.ts

@@ -0,0 +1,174 @@
+import type { HoldRequest, HoldDecision, HoldDecider, HoldReason, ExecuteRequest, ExecutionControlConfig, LegalHoldConfig, LegalPreFlightResults } from '../types/index.js';
+export declare class HoldManager {
+    private pendingHolds;
+    private holdHistory;
+    private config;
+    private legalConfig;
+    private onHoldCreated?;
+    private onHoldDecided?;
+    private onLegalHoldEscalation?;
+    constructor(config?: Partial<ExecutionControlConfig>, legalConfig?: Partial<LegalHoldConfig>);
+    /**
+     * Update execution control configuration.
+     * This is the operator's "knob" for controlling hold behavior.
+     */
+    setConfig(config: Partial<ExecutionControlConfig>): void;
+    /**
+     * Get current configuration.
+     */
+    getConfig(): ExecutionControlConfig;
+    /**
+     * Update legal hold configuration.
+     */
+    setLegalConfig(config: Partial<LegalHoldConfig>): void;
+    /**
+     * Get current legal hold configuration.
+     */
+    getLegalConfig(): LegalHoldConfig;
+    /**
+     * Set callback for when a hold is created (for MCP notification).
+     */
+    setOnHoldCreated(callback: (hold: HoldRequest) => void): void;
+    /**
+     * Set callback for legal hold escalation (deadline missed, privilege stale).
+     */
+    setOnLegalHoldEscalation(callback: (hold: HoldRequest, reason: string) => void): void;
+    /**
+     * Set callback for when a hold is decided.
+     */
+    setOnHoldDecided(callback: (decision: HoldDecision) => void): void;
+    /**
+     * Create a hold request for human review.
+     *
+     * @param customExpiryMs - Optional custom expiry time in ms (used for deadline_risk)
+     *                         Pass Infinity for holds that should NEVER expire (privilege_risk)
+     */
+    createHold(request: ExecuteRequest, reason: HoldReason, severity: 'low' | 'medium' | 'high' | 'critical', evidence: Record<string, unknown>, customExpiryMs?: number): HoldRequest;
+    /**
+     * Check if a request should be held based on configuration.
+     * Returns null if no hold needed, or the reason if hold required.
+     */
+    shouldHold(request: ExecuteRequest, preFlightResults: {
+        circuitBreakerBlocked?: boolean;
+        circuitBreakerReason?: string;
+        predictedDriftScore?: number;
+        baselineDeviation?: number;
+        confidenceScore?: number;
+        isForbidden?: boolean;
+        requiresMcpValidation?: boolean;
+    }): {
+        reason: HoldReason;
+        severity: 'low' | 'medium' | 'high' | 'critical';
+        evidence: Record<string, unknown>;
+    } | null;
+    /**
+     * Check if frame is in legal domain (◇).
+     */
+    isLegalDomainFrame(frame: string): boolean;
+    /**
+     * Calculate deadline hold severity based on time remaining.
+     * Severity escalates as deadline approaches.
+     */
+    private calculateDeadlineSeverity;
+    /**
+     * Calculate custom expiry for deadline holds.
+     * Expires 2 hours before deadline (minimum 15 minutes).
+     */
+    private calculateDeadlineHoldExpiry;
+    /**
+     * Check if a legal domain request should be held.
+     * Called for frames containing ◇ (legal domain symbol).
+     *
+     * Checks are ordered by severity (critical first):
+     * 1. privilege_risk (NEVER auto-expires)
+     * 2. deadline_risk (dynamic severity)
+     * 3. fabrication_flag
+     * 4. citation_unverified
+     * 5. jurisdiction_mismatch
+     * 6. judge_preference_unknown
+     *
+     * @returns null if no legal hold needed, otherwise hold details with optional custom expiry
+     */
+    shouldHoldLegal(request: ExecuteRequest, legalResults: LegalPreFlightResults): {
+        reason: HoldReason;
+        severity: 'low' | 'medium' | 'high' | 'critical';
+        evidence: Record<string, unknown>;
+        customExpiryMs?: number;
+    } | null;
+    /**
+     * Approve a held request (human decision).
+     */
+    approveHold(holdId: string, decidedBy?: HoldDecider, reason?: string, modifiedFrame?: string, modifiedArgs?: Record<string, unknown>): HoldDecision | null;
+    /**
+     * Reject a held request (human decision).
+     */
+    rejectHold(holdId: string, decidedBy?: HoldDecider, reason?: string): HoldDecision | null;
+    /**
+     * Check for expired holds and auto-reject them.
+     *
+     * SPECIAL HANDLING:
+     * - legal_privilege_risk holds NEVER auto-expire (expiresAt = Infinity)
+     * - Stale privilege holds (>24 hours) trigger escalation notifications
+     * - legal_deadline_risk holds may have custom expiry times
+     */
+    processExpiredHolds(): HoldDecision[];
+    /**
+     * Update deadline hold severities as deadlines approach.
+     * Should be called periodically (e.g., every minute).
+     */
+    updateDeadlineHoldSeverities(): void;
+    /**
+     * Get a pending hold by ID.
+     */
+    getHold(holdId: string): HoldRequest | undefined;
+    /**
+     * Get all pending holds.
+     */
+    getPendingHolds(): HoldRequest[];
+    /**
+     * Get pending holds for an agent.
+     */
+    getAgentPendingHolds(agentId: string): HoldRequest[];
+    /**
+     * Get hold decision history.
+     */
+    getHoldHistory(limit?: number): HoldDecision[];
+    /**
+     * Get hold statistics.
+     */
+    getStats(): {
+        pending: number;
+        approved: number;
+        rejected: number;
+        expired: number;
+        byReason: Record<HoldReason, number>;
+        legalHolds: {
+            total: number;
+            privilegeRisk: number;
+            deadlineRisk: number;
+            fabricationFlag: number;
+            citationUnverified: number;
+            jurisdictionMismatch: number;
+            judgePreferenceUnknown: number;
+        };
+    };
+    /**
+     * Get legal holds only.
+     */
+    getLegalHolds(): HoldRequest[];
+    /**
+     * Get critical legal holds requiring immediate attention.
+     * Returns privilege_risk holds and deadline_risk holds with < 24 hours remaining.
+     */
+    getCriticalLegalHolds(): HoldRequest[];
+    /**
+     * Check if a tool requires MCP validation.
+     */
+    requiresMcpValidation(toolName: string): boolean;
+    /**
+     * Clear all holds.
+     */
+    clearAll(): void;
+}
+export declare const holdManager: HoldManager;
+//# sourceMappingURL=hold-manager.d.ts.map

package/dist/gatekeeper/hold-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hold-manager.d.ts","sourceRoot":"","sources":["../../src/gatekeeper/hold-manager.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,WAAW,EACX,YAAY,EACZ,WAAW,EACX,UAAU,EAEV,cAAc,EACd,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EAQtB,MAAM,mBAAmB,CAAC;AAiG3B,qBAAa,WAAW;IACtB,OAAO,CAAC,YAAY,CAAuC;IAC3D,OAAO,CAAC,WAAW,CAAsB;IACzC,OAAO,CAAC,MAAM,CAAyB;IACvC,OAAO,CAAC,WAAW,CAAkB;IAGrC,OAAO,CAAC,aAAa,CAAC,CAA8B;IACpD,OAAO,CAAC,aAAa,CAAC,CAAmC;IACzD,OAAO,CAAC,qBAAqB,CAAC,CAA8C;gBAG1E,MAAM,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,EACxC,WAAW,CAAC,EAAE,OAAO,CAAC,eAAe,CAAC;IAUxC;;;OAGG;IACH,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI;IAIxD;;OAEG;IACH,SAAS,IAAI,sBAAsB;IAInC;;OAEG;IACH,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,IAAI;IAItD;;OAEG;IACH,cAAc,IAAI,eAAe;IAIjC;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,GAAG,IAAI;IAI7D;;OAEG;IACH,wBAAwB,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIrF;;OAEG;IACH,gBAAgB,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,YAAY,KAAK,IAAI,GAAG,IAAI;IAQlE;;;;;OAKG;IACH,UAAU,CACR,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,UAAU,EAClB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,EAChD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,cAAc,CAAC,EAAE,MAAM,GACtB,WAAW;IA2Cd;;;OAGG;IACH,UAAU,CACR,OAAO,EAAE,cAAc,EACvB,gBAAgB,EAAE;QAChB,qBAAqB,CAAC,EAAE,OAAO,CAAC;QAChC,oBAAoB,CAAC,EAAE,MAAM,CAAC;QAC9B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;QACzB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,qBAAqB,CAAC,EAAE,OAAO,CAAC;KACjC,GACA;QAAE,MAAM,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,GAAG,IAAI;IA6ErH;;OAEG;IACH,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAI1C;;;OAGG;IACH,OAAO,CAAC,yBAAyB;IAsBjC;;;OAGG;IACH,OAAO,CAAC,2BAA2B;IAgBnC;;;;;;;;;;;;;OAaG;IACH,eAAe,CACb,OAAO,EAAE,cAAc,EACvB,YAAY,EAAE,qBAAqB,GAClC;QACD,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;QACjD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClC,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,GAAG,IAAI;IA6KR;;OAEG;IACH,WAAW,CACT,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,WAAqB,EAChC,MAAM,GAAE,MAA+B,EACvC,aAAa,CAAC,EAAE,MAAM,EACtB,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACrC,YAAY,GAAG,IAAI;IAyBtB;;OAEG;IACH,UAAU,CACR,MAAM,EAAE,MAAM,EACd,SAAS,GAAE,WAAqB,EAChC,MAAM,GAAE,MAA+B,GACtC,YAAY,GAAG,IAAI;IAuBtB;;;;;;;OAOG;IACH,mBAAmB,IAAI,YAAY,EAAE;IA2CrC;;;OAGG;IACH,4BAA4B,IAAI,IAAI;IAmDpC;;OAEG;IACH,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS;IAIhD;;OAEG;IACH,eAAe,IAAI,WAAW,EAAE;IAIhC;;OAEG;IACH,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,WAAW,EAAE;IAKpD;;OAEG;IACH,cAAc,CAAC,KAAK,GAAE,MAAY,GAAG,YAAY,EAAE;IAInD;;OAEG;IACH,QAAQ,IAAI;QACV,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACrC,UAAU,EAAE;YACV,KAAK,EAAE,MAAM,CAAC;YACd,aAAa,EAAE,MAAM,CAAC;YACtB,YAAY,EAAE,MAAM,CAAC;YACrB,eAAe,EAAE,MAAM,CAAC;YACxB,kBAAkB,EAAE,MAAM,CAAC;YAC3B,oBAAoB,EAAE,MAAM,CAAC;YAC7B,sBAAsB,EAAE,MAAM,CAAC;SAChC,CAAC;KACH;IAqDD;;OAEG;IACH,aAAa,IAAI,WAAW,EAAE;IAM9B;;;OAGG;IACH,qBAAqB,IAAI,WAAW,EAAE;IAWtC;;OAEG;IACH,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO;IAehD;;OAEG;IACH,QAAQ,IAAI,IAAI;CAIjB;AAGD,eAAO,MAAM,WAAW,aAAoB,CAAC"}