psyclaw 0.24.0

package/dist/src/core/evidence-policy.js

@@ -0,0 +1,308 @@
+const LEVEL_RANK = {
+    metadata: 0,
+    abstract: 1,
+    snippet: 2,
+    fulltext: 3,
+    // User-provided material is an input to review, not independently
+    // verified support. Keep it below every policy threshold by default.
+    user: -1,
+};
+const DEFAULT_MINIMUM = {
+    existence: "metadata",
+    definition: "abstract",
+    method: "snippet",
+    result: "fulltext",
+    interpretation: "snippet",
+};
+export function defaultEvidencePolicy(paradigm, claimKind) {
+    return {
+        paradigm,
+        claimKind,
+        minimumLevel: DEFAULT_MINIMUM[claimKind],
+        locatorRequired: claimKind !== "existence",
+        requiresIndependentSource: claimKind === "interpretation" || claimKind === "result",
+        requiresArtifactRun: claimKind === "result",
+    };
+}
+/**
+ * The paradigm profile changes only the evidence thresholds and required
+ * reporting, never the honesty/locator/source baseline. Qualitative and
+ * ethnographic material is coded primary data: a theme does not need a second
+ * independent source or a numeric artifact run, but it still needs a located,
+ * non-user source. Absence of an effect size must not make a qualitative
+ * finding invalid.
+ */
+export function policiesForParadigm(paradigm) {
+    const kinds = ["existence", "definition", "method", "result", "interpretation"];
+    const policies = kinds.map((kind) => defaultEvidencePolicy(paradigm, kind));
+    const policyFor = (kind) => policies.find((item) => item.claimKind === kind);
+    switch (paradigm) {
+        case "qualitative-thematic":
+        case "ethnographic":
+            // Themes are coded primary data: a single located source suffices and no
+            // numeric artifact run exists.
+            policyFor("definition").requiresIndependentSource = false;
+            policyFor("interpretation").requiresIndependentSource = false;
+            policyFor("result").requiresIndependentSource = false;
+            policyFor("result").requiresArtifactRun = false;
+            break;
+        case "historical-documentary":
+        case "policy-legal":
+            // Primary archives / statutes are themselves the source of truth.
+            policyFor("result").requiresIndependentSource = false;
+            policyFor("interpretation").requiresIndependentSource = false;
+            policyFor("result").requiresArtifactRun = false;
+            break;
+        case "survey-observational":
+            // Observational design keeps the interpretation independent-source gate
+            // (overclaiming risk); no relaxation, so the baseline is left untouched.
+            break;
+        case "meta-analysis":
+            // PRISMA-grade screening needs full text, not an abstract, for method
+            // and pooled result claims.
+            policyFor("method").minimumLevel = "fulltext";
+            policyFor("result").minimumLevel = "fulltext";
+            break;
+        case "experimental":
+        case "quasi-experimental":
+        case "longitudinal-panel":
+            // Confirmatory designs keep the strictest baseline: fulltext + two
+            // independent sources + artifact run for results.
+            break;
+        case "mixed-methods":
+            // Triangulation: interpretation already requires an independent source
+            // under the baseline, so nothing is relaxed here.
+            break;
+    }
+    return policies;
+}
+/** Required report sections per paradigm, beyond the universal honesty baseline. */
+export const PARADIGM_REPORT_FIELDS = {
+    "survey-observational": ["效应量与置信区间", "抽样方式与样本量", "缺失值处理", "共同方法偏差说明"],
+    "qualitative-thematic": ["研究者立场与反身性", "编码轨迹与主题", "反例与负例", "主题饱和说明"],
+    experimental: ["随机化与盲法", "主要结局预注册", "效应量与置信区间", "退出与流失", "违反方案说明"],
+    "quasi-experimental": ["识别策略与混淆控制", "平行趋势或均衡性检验", "效应量与置信区间"],
+    "longitudinal-panel": ["随访率与流失", "时变混杂处理", "缺失模式", "效应量与置信区间"],
+    "meta-analysis": ["检索式与纳入排除标准", "PRISMA 流程", "异质性 I²/τ²", "发表偏倚", "效应量与置信区间"],
+    ethnographic: ["田野与研究者立场", "参与者与研究关系", "三角验证", "伦理与匿名化"],
+    "historical-documentary": ["史料来源与真伪", "年代与语境", "解读可复核"],
+    "policy-legal": ["法条或判例出处", "管辖与时效", "解释立场"],
+    "mixed-methods": ["定量与定性整合逻辑", "混合设计类型", "两部分各自的质量标准"],
+};
+function hasLocator(evidence, policy) {
+    if (evidence.level === "snippet") {
+        if (!evidence.quote?.trim())
+            return false;
+        if (!hasPreciseLocator(evidence, new Set(["page", "section", "offset"])))
+            return false;
+        return true;
+    }
+    if (evidence.level === "fulltext") {
+        if (!evidence.sha256 || !/^[a-f0-9]{64}$/i.test(evidence.sha256.trim()))
+            return false;
+        if (!hasPreciseLocator(evidence, new Set(["page", "section", "row"])))
+            return false;
+        return true;
+    }
+    if (!policy.locatorRequired)
+        return true;
+    if (evidence.locators.length === 0)
+        return false;
+    return true;
+}
+function meetsLevel(evidence, minimum) {
+    // A user-supplied record must not become verified support merely because a
+    // caller asks for a low minimum. A custom policy can still inspect it as an
+    // input and mark the claim uncertain outside this default gate.
+    if (evidence.level === "user" || evidence.source.kind === "user")
+        return false;
+    return evidence.accessStatus === "verified" && LEVEL_RANK[evidence.level] >= LEVEL_RANK[minimum];
+}
+function hasPreciseLocator(evidence, allowed) {
+    return evidence.locators.some((locator) => allowed.has(locator.kind) && locator.value.trim().length > 0);
+}
+function normalizeDoi(value) {
+    let normalized = value.trim().toLowerCase();
+    normalized = normalized.replace(/^(?:https?:\/\/)?(?:dx\.)?doi\.org\//, "");
+    normalized = normalized.replace(/^doi:\s*/, "");
+    normalized = normalized.replace(/[\s]+/g, "");
+    normalized = normalized.replace(/[.,;:)}\]>]+$/, "");
+    return normalized.startsWith("10.") && normalized.includes("/") ? normalized : undefined;
+}
+function sourceIdentityKeys(evidence) {
+    const keys = [];
+    const sha = evidence.sha256?.trim().toLowerCase();
+    if (sha)
+        keys.push(`sha256:${sha}`);
+    const doi = normalizeDoi(evidence.source.locator);
+    if (doi)
+        keys.push(`doi:${doi}`);
+    // A DOI can be embedded in a URL or a source label. This catches common
+    // Crossref/publisher forms without treating arbitrary URLs as DOIs.
+    if (!doi) {
+        const embedded = evidence.source.locator.match(/10\.\d{4,9}\/[^\s"<>]+/i)?.[0];
+        const embeddedDoi = embedded ? normalizeDoi(embedded) : undefined;
+        if (embeddedDoi)
+            keys.push(`doi:${embeddedDoi}`);
+    }
+    if (keys.length === 0) {
+        const locator = evidence.source.locator.trim().replaceAll("\\", "/").toLowerCase();
+        keys.push(`${evidence.source.kind}:${locator}`);
+    }
+    return keys;
+}
+function countIndependentSources(items) {
+    // Union evidence records when *any* stable identity agrees. This means two
+    // PDF paths with the same SHA and two DOI spellings remain one source, even
+    // if their other locators differ.
+    const parent = new Map();
+    const find = (item) => {
+        const current = parent.get(item);
+        if (!current) {
+            parent.set(item, item);
+            return item;
+        }
+        if (current === item)
+            return item;
+        const root = find(current);
+        parent.set(item, root);
+        return root;
+    };
+    const union = (left, right) => {
+        const leftRoot = find(left);
+        const rightRoot = find(right);
+        if (leftRoot !== rightRoot)
+            parent.set(leftRoot, rightRoot);
+    };
+    for (const evidence of items) {
+        const keys = sourceIdentityKeys(evidence);
+        const first = keys[0];
+        if (!first)
+            continue;
+        find(first);
+        for (const key of keys.slice(1))
+            union(first, key);
+    }
+    const roots = new Set();
+    for (const evidence of items) {
+        const first = sourceIdentityKeys(evidence)[0];
+        if (first)
+            roots.add(find(first));
+    }
+    return roots.size;
+}
+export function checkEvidenceSufficiency(ctx) {
+    const evidenceById = new Map(ctx.evidence.map((item) => [item.id, item]));
+    const linksByClaim = new Map();
+    for (const link of ctx.links) {
+        const bucket = linksByClaim.get(link.claimId) ?? [];
+        bucket.push(link);
+        linksByClaim.set(link.claimId, bucket);
+    }
+    const results = [];
+    const claimIds = new Set(ctx.claims.map((claim) => claim.id));
+    const duplicateClaimIds = ctx.claims
+        .map((claim) => claim.id)
+        .filter((id, index, all) => all.indexOf(id) !== index);
+    if (duplicateClaimIds.length > 0) {
+        results.push({
+            gateId: "ledger:duplicate-claim-ids",
+            ok: false,
+            severity: "block",
+            reason: `账本包含重复 Claim ID: ${[...new Set(duplicateClaimIds)].join(", ")}`,
+            claimIds: [...new Set(duplicateClaimIds)],
+        });
+    }
+    for (const claim of ctx.claims) {
+        const resolvedPolicies = ctx.policies ?? policiesForParadigm(ctx.paradigm ?? "survey-observational");
+        const policy = resolvedPolicies.find((candidate) => candidate.claimKind === claim.kind) ?? defaultEvidencePolicy("survey-observational", claim.kind);
+        const links = linksByClaim.get(claim.id) ?? [];
+        const supporting = links.filter((link) => link.relation === "supports");
+        const contradictory = links.filter((link) => link.relation === "contradicts");
+        const qualifying = supporting.filter((link) => {
+            const evidence = evidenceById.get(link.evidenceId);
+            return Boolean(evidence && meetsLevel(evidence, policy.minimumLevel) && hasLocator(evidence, policy));
+        });
+        const reasons = [];
+        const declaredIds = new Set(claim.evidenceIds);
+        const duplicateEvidenceIds = claim.evidenceIds.filter((id, index, all) => all.indexOf(id) !== index);
+        if (duplicateEvidenceIds.length > 0) {
+            reasons.push(`Claim.evidenceIds 包含重复 ID: ${[...new Set(duplicateEvidenceIds)].join(", ")}`);
+        }
+        const linkedIds = new Set(links.map((link) => link.evidenceId));
+        const unlinkedDeclared = claim.evidenceIds.filter((id) => !linkedIds.has(id));
+        if (unlinkedDeclared.length > 0) {
+            reasons.push(`Claim 声明了未建立关系的 Evidence: ${[...new Set(unlinkedDeclared)].join(", ")}`);
+        }
+        const undeclaredLinked = [...linkedIds].filter((id) => !declaredIds.has(id));
+        if (undeclaredLinked.length > 0) {
+            reasons.push(`关系引用的 Evidence 未在 Claim.evidenceIds 声明: ${undeclaredLinked.join(", ")}`);
+        }
+        const duplicateLinks = links.filter((link, index, all) => {
+            const key = `${link.evidenceId}\u0000${link.relation}`;
+            return all.findIndex((candidate) => `${candidate.evidenceId}\u0000${candidate.relation}` === key) !== index;
+        });
+        if (duplicateLinks.length > 0) {
+            reasons.push("同一 Claim 存在重复 Evidence 关系");
+        }
+        const missingEvidenceIds = [...new Set([
+                ...claim.evidenceIds.filter((id) => !evidenceById.has(id)),
+                ...links.map((link) => link.evidenceId).filter((id) => !evidenceById.has(id)),
+            ])];
+        if (missingEvidenceIds.length > 0) {
+            reasons.push(`关系引用了不存在的 Evidence: ${missingEvidenceIds.join(", ")}`);
+        }
+        if (supporting.some((link) => evidenceById.get(link.evidenceId)?.accessStatus === "unavailable")) {
+            reasons.push("支持关系引用了不可用来源");
+        }
+        if (supporting.some((link) => {
+            const item = evidenceById.get(link.evidenceId);
+            return item && item.accessStatus !== "verified";
+        })) {
+            reasons.push("支持关系引用了尚未核验的来源");
+        }
+        if (supporting.some((link) => {
+            const item = evidenceById.get(link.evidenceId);
+            return item?.level === "user" || item?.source.kind === "user";
+        })) {
+            reasons.push("用户提供的 Evidence 默认不能作为已验证支持");
+        }
+        if (qualifying.length === 0)
+            reasons.push("没有达到当前 Claim 类型所需等级且可定位的支持证据");
+        if (contradictory.length > 0)
+            reasons.push("存在尚未处理的矛盾证据");
+        const qualifyingEvidence = qualifying
+            .map((link) => evidenceById.get(link.evidenceId))
+            .filter((item) => item !== undefined);
+        if (policy.requiresIndependentSource && countIndependentSources(qualifyingEvidence) < 2) {
+            reasons.push("当前策略要求至少两个独立支持来源");
+        }
+        if (policy.requiresArtifactRun && !ctx.artifactRunClaimIds?.has(claim.id)) {
+            reasons.push("结果型 Claim 缺少真实运行产物或结果哈希");
+        }
+        if (claim.status !== "supported" && qualifying.length > 0 && contradictory.length === 0) {
+            reasons.push(`Claim 状态为 ${claim.status}，但已有满足策略的支持证据`);
+        }
+        results.push({
+            gateId: `evidence:${claim.id}`,
+            ok: reasons.length === 0,
+            severity: reasons.length === 0 ? "warn" : "block",
+            reason: reasons.length === 0 ? "证据关系满足当前 profile" : reasons.join("；"),
+            claimIds: [claim.id],
+            evidenceIds: links.map((link) => link.evidenceId),
+        });
+    }
+    const orphanLinks = ctx.links.filter((link) => !claimIds.has(link.claimId));
+    if (orphanLinks.length > 0) {
+        results.push({
+            gateId: "ledger:orphan-links",
+            ok: false,
+            severity: "block",
+            reason: `Evidence 关系引用了不存在的 Claim: ${[...new Set(orphanLinks.map((link) => link.claimId))].join(", ")}`,
+            claimIds: [...new Set(orphanLinks.map((link) => link.claimId))],
+            evidenceIds: [...new Set(orphanLinks.map((link) => link.evidenceId))],
+        });
+    }
+    return results;
+}
+//# sourceMappingURL=evidence-policy.js.map

package/dist/src/core/evidence-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-policy.js","sourceRoot":"","sources":["../../../src/core/evidence-policy.ts"],"names":[],"mappings":"AAUA,MAAM,UAAU,GAAkC;IAChD,QAAQ,EAAE,CAAC;IACX,QAAQ,EAAE,CAAC;IACX,OAAO,EAAE,CAAC;IACV,QAAQ,EAAE,CAAC;IACX,kEAAkE;IAClE,qEAAqE;IACrE,IAAI,EAAE,CAAC,CAAC;CACT,CAAC;AAEF,MAAM,eAAe,GAAyC;IAC5D,SAAS,EAAE,UAAU;IACrB,UAAU,EAAE,UAAU;IACtB,MAAM,EAAE,SAAS;IACjB,MAAM,EAAE,UAAU;IAClB,cAAc,EAAE,SAAS;CAC1B,CAAC;AAEF,MAAM,UAAU,qBAAqB,CACnC,QAA0B,EAC1B,SAAwB;IAExB,OAAO;QACL,QAAQ;QACR,SAAS;QACT,YAAY,EAAE,eAAe,CAAC,SAAS,CAAC;QACxC,eAAe,EAAE,SAAS,KAAK,WAAW;QAC1C,yBAAyB,EAAE,SAAS,KAAK,gBAAgB,IAAI,SAAS,KAAK,QAAQ;QACnF,mBAAmB,EAAE,SAAS,KAAK,QAAQ;KAC5C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAA0B;IAC5D,MAAM,KAAK,GAAoB,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;IACjG,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,qBAAqB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5E,MAAM,SAAS,GAAG,CAAC,IAAmB,EAAkB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAE,CAAC;IAE7G,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,sBAAsB,CAAC;QAC5B,KAAK,cAAc;YACjB,yEAAyE;YACzE,+BAA+B;YAC/B,SAAS,CAAC,YAAY,CAAC,CAAC,yBAAyB,GAAG,KAAK,CAAC;YAC1D,SAAS,CAAC,gBAAgB,CAAC,CAAC,yBAAyB,GAAG,KAAK,CAAC;YAC9D,SAAS,CAAC,QAAQ,CAAC,CAAC,yBAAyB,GAAG,KAAK,CAAC;YACtD,SAAS,CAAC,QAAQ,CAAC,CAAC,mBAAmB,GAAG,KAAK,CAAC;YAChD,MAAM;QACR,KAAK,wBAAwB,CAAC;QAC9B,KAAK,cAAc;YACjB,kEAAkE;YAClE,SAAS,CAAC,QAAQ,CAAC,CAAC,yBAAyB,GAAG,KAAK,CAAC;YACtD,SAAS,CAAC,gBAAgB,CAAC,CAAC,yBAAyB,GAAG,KAAK,CAAC;YAC9D,SAAS,CAAC,QAAQ,CAAC,CAAC,mBAAmB,GAAG,KAAK,CAAC;YAChD,MAAM;QACR,KAAK,sBAAsB;YACzB,wEAAwE;YACxE,yEAAyE;YACzE,MAAM;QACR,KAAK,eAAe;YAClB,sEAAsE;YACtE,4BAA4B;YAC5B,SAAS,CAAC,QAAQ,CAAC,CAAC,YAAY,GAAG,UAAU,CAAC;YAC9C,SAAS,CAAC,QAAQ,CAAC,CAAC,YAAY,GAAG,UAAU,CAAC;YAC9C,MAAM;QACR,KAAK,cAAc,CAAC;QACpB,KAAK,oBAAoB,CAAC;QAC1B,KAAK,oBAAoB;YACvB,mEAAmE;YACnE,kDAAkD;YAClD,MAAM;QACR,KAAK,eAAe;YAClB,uEAAuE;YACvE,kDAAkD;YAClD,MAAM;IACV,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,MAAM,sBAAsB,GAAgD;IACjF,sBAAsB,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC;IACrE,sBAAsB,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,CAAC;IACnE,YAAY,EAAE,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC;IAClE,oBAAoB,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,UAAU,CAAC;IAC7D,oBAAoB,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC;IAC9D,eAAe,EAAE,CAAC,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,CAAC;IAC7E,YAAY,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC;IACxD,wBAAwB,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC;IACvD,cAAc,EAAE,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC;IAC5C,eAAe,EAAE,CAAC,WAAW,EAAE,QAAQ,EAAE,YAAY,CAAC;CACvD,CAAC;AAEF,SAAS,UAAU,CAAC,QAAkB,EAAE,MAAsB;IAC5D,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE;YAAE,OAAO,KAAK,CAAC;QAC1C,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACtF,IAAI,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACpF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,UAAU,CAAC,QAAkB,EAAE,OAAsB;IAC5D,2EAA2E;IAC3E,4EAA4E;IAC5E,gEAAgE;IAChE,IAAI,QAAQ,CAAC,KAAK,KAAK,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC/E,OAAO,QAAQ,CAAC,YAAY,KAAK,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC;AACnG,CAAC;AAID,SAAS,iBAAiB,CAAC,QAAkB,EAAE,OAAwC;IACrF,OAAO,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAC3B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,IAA0B,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAChG,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,IAAI,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,sCAAsC,EAAE,EAAE,CAAC,CAAC;IAC5E,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAChD,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC9C,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACrD,OAAO,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3F,CAAC;AAED,SAAS,kBAAkB,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAClD,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC;IAEpC,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;IAEjC,wEAAwE;IACxE,oEAAoE;IACpE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,yBAAyB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC/E,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,IAAI,WAAW;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,WAAW,EAAE,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACnF,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,KAA0B;IACzD,2EAA2E;IAC3E,4EAA4E;IAC5E,kCAAkC;IAClC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,IAAI,GAAG,CAAC,IAAY,EAAU,EAAE;QACpC,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YACvB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAa,EAAQ,EAAE;QAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,QAAQ,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC9D,CAAC,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,IAAI,CAAC,KAAK,CAAC,CAAC;QACZ,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,QAAQ,IAAI,KAAK,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC;AACpB,CAAC;AAaD,MAAM,UAAU,wBAAwB,CAAC,GAAyB;IAChE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,YAAY,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GAAiB,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,MAAM,iBAAiB,GAAG,GAAG,CAAC,MAAM;SACjC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;SACxB,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC;IACzD,IAAI,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,4BAA4B;YACpC,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,oBAAoB,CAAC,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACxE,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,gBAAgB,GAAG,GAAG,CAAC,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAAQ,IAAI,sBAAsB,CAAC,CAAC;QACrG,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAClC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,CAClD,IAAI,qBAAqB,CAAC,sBAAsB,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC;QACxE,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC;QAC9E,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;YAC5C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACnD,OAAO,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;QACxG,CAAC,CAAC,CAAC;QAEH,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAC/C,MAAM,oBAAoB,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CACnD,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,KAAK,KAAK,CAC9C,CAAC;QACF,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,GAAG,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,MAAM,gBAAgB,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC9E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,gBAAgB,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7E,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,2CAA2C,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,cAAc,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YACvD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,SAAS,IAAI,CAAC,QAAQ,EAAE,CAAC;YACvD,OAAO,GAAG,CAAC,SAAS,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,SAAS,CAAC,UAAU,SAAS,SAAS,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,KAAK,KAAK,CAAC;QAC9G,CAAC,CAAC,CAAC;QACH,IAAI,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC;gBACrC,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC1D,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAC9E,CAAC,CAAC,CAAC;QACJ,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,YAAY,KAAK,aAAa,CAAC,EAAE,CAAC;YACjG,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,OAAO,IAAI,IAAI,IAAI,CAAC,YAAY,KAAK,UAAU,CAAC;QAClD,CAAC,CAAC,EAAE,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACjC,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YAC3B,MAAM,IAAI,GAAG,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC/C,OAAO,IAAI,EAAE,KAAK,KAAK,MAAM,IAAI,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC;QAChE,CAAC,CAAC,EAAE,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC7C,CAAC;QACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,8BAA8B,CAAC,CAAC;QAC1E,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1D,MAAM,kBAAkB,GAAG,UAAU;aAClC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;aAChD,MAAM,CAAC,CAAC,IAAI,EAAoB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC1D,IAAI,MAAM,CAAC,yBAAyB,IAAI,uBAAuB,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACnC,CAAC;QACD,IAAI,MAAM,CAAC,mBAAmB,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxF,OAAO,CAAC,IAAI,CAAC,aAAa,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC;QACzD,CAAC;QAED,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,YAAY,KAAK,CAAC,EAAE,EAAE;YAC9B,EAAE,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC;YACxB,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO;YACjD,MAAM,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC;YACrE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC;SAClD,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5E,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC;YACX,MAAM,EAAE,qBAAqB;YAC7B,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,6BAA6B,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvG,QAAQ,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,WAAW,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;SACtE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/src/core/filekind.d.ts

@@ -0,0 +1,15 @@
+export type FileKind = "pdf" | "docx" | "html" | "json" | "text" | "binary" | "empty" | "unknown";
+/**
+ * Classify content by its leading bytes, never by its filename extension.
+ * This is the deterministic basis for the `fake-pdf-html` hard fail: an HTML
+ * login or captcha page must not be accepted as trusted full-text just
+ * because its name ends in `.pdf`.
+ */
+export declare function sniffKindFromBuffer(buffer: Uint8Array): FileKind;
+export declare function sniffFileKind(path: string): Promise<FileKind>;
+/**
+ * Gate a local evidence import. `fulltext` imports must be a recognizable
+ * document; an HTML page or an empty/binary blob is rejected rather than
+ * silently recorded as trusted full-text.
+ */
+export declare function assertEvidenceImportable(path: string, level: string): Promise<void>;

package/dist/src/core/filekind.js

@@ -0,0 +1,82 @@
+import { open } from "node:fs/promises";
+const SAMPLE_BYTES = 16_384;
+function asciiPrefix(buffer, prefix) {
+    for (let index = 0; index < prefix.length; index += 1) {
+        if (buffer[index] !== prefix.charCodeAt(index))
+            return false;
+    }
+    return true;
+}
+function isZip(buffer) {
+    // PK\x03\x04 local file header
+    return buffer.length >= 4 && buffer[0] === 0x50 && buffer[1] === 0x4b && buffer[2] === 0x03 && buffer[3] === 0x04;
+}
+function latin1(buffer) {
+    let output = "";
+    for (const byte of buffer)
+        output += String.fromCharCode(byte);
+    return output;
+}
+/**
+ * Classify content by its leading bytes, never by its filename extension.
+ * This is the deterministic basis for the `fake-pdf-html` hard fail: an HTML
+ * login or captcha page must not be accepted as trusted full-text just
+ * because its name ends in `.pdf`.
+ */
+export function sniffKindFromBuffer(buffer) {
+    if (buffer.length === 0)
+        return "empty";
+    if (buffer.length >= 5 && asciiPrefix(buffer, "%PDF-"))
+        return "pdf";
+    if (isZip(buffer)) {
+        // A Word .docx is a ZIP whose entries live under word/ (word/document.xml).
+        // Other ZIPs (xlsx/pptx/plain archives) are not treated as Word evidence.
+        return latin1(buffer).toLowerCase().includes("word/") ? "docx" : "binary";
+    }
+    const sample = latin1(buffer.subarray(0, Math.min(buffer.length, SAMPLE_BYTES)))
+        .trimStart()
+        .toLowerCase();
+    if (sample.startsWith("<") || sample.startsWith("<!doctype") || sample.includes("<html")) {
+        return "html";
+    }
+    if (sample.startsWith("{") || sample.startsWith("["))
+        return "json";
+    for (const byte of buffer.subarray(0, Math.min(buffer.length, SAMPLE_BYTES))) {
+        if (byte === 0)
+            return "binary";
+    }
+    return "text";
+}
+export async function sniffFileKind(path) {
+    const handle = await open(path, "r");
+    try {
+        const buffer = new Uint8Array(SAMPLE_BYTES);
+        const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0);
+        return sniffKindFromBuffer(buffer.subarray(0, bytesRead));
+    }
+    finally {
+        await handle.close();
+    }
+}
+/**
+ * Gate a local evidence import. `fulltext` imports must be a recognizable
+ * document; an HTML page or an empty/binary blob is rejected rather than
+ * silently recorded as trusted full-text.
+ */
+export async function assertEvidenceImportable(path, level) {
+    if (level !== "fulltext")
+        return;
+    const kind = await sniffFileKind(path);
+    if (kind === "html") {
+        throw new Error("Refusing to import HTML as full-text evidence (possible login/captcha page)");
+    }
+    if (kind === "binary" || kind === "unknown") {
+        throw new Error("Refusing to import unrecognized binary content as full-text evidence");
+    }
+    if (kind === "empty") {
+        throw new Error("Refusing to import an empty file as full-text evidence");
+    }
+    // `docx` is accepted: it is a real document, converted to text/Markdown via
+    // `docxToText` / `docxToMarkdown` before any claim-evidence reading.
+}
+//# sourceMappingURL=filekind.js.map

package/dist/src/core/filekind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"filekind.js","sourceRoot":"","sources":["../../../src/core/filekind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAIxC,MAAM,YAAY,GAAG,MAAM,CAAC;AAE5B,SAAS,WAAW,CAAC,MAAkB,EAAE,MAAc;IACrD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACtD,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,KAAK,CAAC,MAAkB;IAC/B,+BAA+B;IAC/B,OAAO,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;AACpH,CAAC;AAED,SAAS,MAAM,CAAC,MAAkB;IAChC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,MAAM;QAAE,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAkB;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,4EAA4E;QAC5E,0EAA0E;QAC1E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;SAC7E,SAAS,EAAE;SACX,WAAW,EAAE,CAAC;IACjB,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACpE,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC;QAC7E,IAAI,IAAI,KAAK,CAAC;YAAE,OAAO,QAAQ,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,YAAY,CAAC,CAAC;QAC5C,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACrE,OAAO,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;IAC5D,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,KAAa;IACxE,IAAI,KAAK,KAAK,UAAU;QAAE,OAAO;IACjC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,4EAA4E;IAC5E,qEAAqE;AACvE,CAAC"}

package/dist/src/core/hash.d.ts

@@ -0,0 +1,2 @@
+export declare function sha256Text(value: string): string;
+export declare function sha256File(path: string): Promise<string>;

package/dist/src/core/hash.js

@@ -0,0 +1,17 @@
+import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
+export function sha256Text(value) {
+    return createHash("sha256").update(value, "utf8").digest("hex");
+}
+export async function sha256File(path) {
+    return new Promise((resolve, reject) => {
+        const hash = createHash("sha256");
+        const stream = createReadStream(path);
+        stream.on("data", (chunk) => {
+            hash.update(chunk);
+        });
+        stream.on("error", reject);
+        stream.on("end", () => resolve(hash.digest("hex")));
+    });
+}
+//# sourceMappingURL=hash.js.map

package/dist/src/core/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/core/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY;IAC3C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAsB,EAAE,EAAE;YAC3C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/src/core/pricing.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Per-1M-token pricing used to (a) estimate cost from token usage and (b)
+ * give Pi a real `cost` field so it records actual usage cost.
+ *
+ * USD values are approximate list prices for common providers; local
+ * providers (ollama) cost 0. For display, Chinese providers also carry
+ * official RMB (元) list prices; non-listed providers fall back to a fixed
+ * USD→CNY rate so the panel can always show 人民币.
+ */
+export interface UsdPricing {
+    input: number;
+    output: number;
+    cacheRead: number;
+    cacheWrite: number;
+}
+export declare const DEFAULT_PRICING: UsdPricing;
+/** Exact match by provider id (lowercased). */
+export declare const PROVIDER_PRICING: Record<string, UsdPricing>;
+/** Resolve pricing for a provider id (exact) or a provider/model string (family match). */
+export declare function pricingFor(provider: string, model: string): UsdPricing;
+/** Fixed USD→CNY fallback for providers without official RMB list prices. */
+export declare const USD_CNY_RATE = 7.2;
+/** CNY pricing for a provider, or null when the provider has no official RMB price. */
+export declare function pricingCnyFor(provider: string, _model: string): UsdPricing | null;
+/** Estimated cost in USD for one usage record. */
+export declare function estimateUsageCost(usage: {
+    input?: unknown;
+    output?: unknown;
+    cacheRead?: unknown;
+    cacheWrite?: unknown;
+}, provider: string, model: string): number;
+/** Estimated cost in 人民币 (CNY) for one usage record: official RMB list price where available, else USD×rate. */
+export declare function estimateUsageCostCny(usage: {
+    input?: unknown;
+    output?: unknown;
+    cacheRead?: unknown;
+    cacheWrite?: unknown;
+}, provider: string, model: string): number;

package/dist/src/core/pricing.js

@@ -0,0 +1,110 @@
+/**
+ * Per-1M-token pricing used to (a) estimate cost from token usage and (b)
+ * give Pi a real `cost` field so it records actual usage cost.
+ *
+ * USD values are approximate list prices for common providers; local
+ * providers (ollama) cost 0. For display, Chinese providers also carry
+ * official RMB (元) list prices; non-listed providers fall back to a fixed
+ * USD→CNY rate so the panel can always show 人民币.
+ */
+export const DEFAULT_PRICING = { input: 1, output: 3, cacheRead: 0.1, cacheWrite: 1 };
+const DEEPSEEK = { input: 0.27, output: 1.1, cacheRead: 0.07, cacheWrite: 0.27 };
+const OPENAI = { input: 1.25, output: 10, cacheRead: 0.125, cacheWrite: 1.25 };
+const ANTHROPIC = { input: 3, output: 15, cacheRead: 0.3, cacheWrite: 3.75 };
+const QWEN = { input: 0.5, output: 2, cacheRead: 0.05, cacheWrite: 0.5 };
+const GLM = { input: 0.5, output: 2, cacheRead: 0.05, cacheWrite: 0.5 };
+const MOONSHOT = { input: 0.3, output: 0.6, cacheRead: 0.03, cacheWrite: 0.3 };
+const GOOGLE = { input: 1.25, output: 5, cacheRead: 0.125, cacheWrite: 1.25 };
+const LOCAL = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
+/** Exact match by provider id (lowercased). */
+export const PROVIDER_PRICING = {
+    deepseek: DEEPSEEK,
+    openai: OPENAI,
+    anthropic: ANTHROPIC,
+    qwen: QWEN,
+    dashscope: QWEN,
+    zhipu: GLM,
+    glm: GLM,
+    moonshot: MOONSHOT,
+    kimi: MOONSHOT,
+    google: GOOGLE,
+    gemini: GOOGLE,
+    ollama: LOCAL,
+    local: LOCAL,
+};
+/** Family keys that match by substring (for model ids like "gpt-5.5"). */
+const FAMILY_KEYS = [
+    [["deepseek"], DEEPSEEK],
+    [["gpt", "openai"], OPENAI],
+    [["claude", "anthropic"], ANTHROPIC],
+    [["qwen", "dashscope"], QWEN],
+    [["glm", "zhipu"], GLM],
+    [["moonshot", "kimi"], MOONSHOT],
+    [["gemini", "google"], GOOGLE],
+    [["ollama", "local"], LOCAL],
+];
+/** Resolve pricing for a provider id (exact) or a provider/model string (family match). */
+export function pricingFor(provider, model) {
+    const normalized = provider.trim().toLowerCase();
+    const exact = PROVIDER_PRICING[normalized];
+    if (exact !== undefined)
+        return exact;
+    const haystack = `${normalized} ${model.toLowerCase()}`;
+    for (const [keys, pricing] of FAMILY_KEYS) {
+        if (keys.some((key) => haystack.includes(key)))
+            return pricing;
+    }
+    return DEFAULT_PRICING;
+}
+/** Fixed USD→CNY fallback for providers without official RMB list prices. */
+export const USD_CNY_RATE = 7.2;
+/** Official RMB (元) list prices per 1M tokens for Chinese providers. */
+const CNY_PRICING = {
+    deepseek: { input: 2, output: 8, cacheRead: 0.5, cacheWrite: 2 },
+    qwen: { input: 1.6, output: 6.4, cacheRead: 0.16, cacheWrite: 1.6 },
+    dashscope: { input: 1.6, output: 6.4, cacheRead: 0.16, cacheWrite: 1.6 },
+    zhipu: { input: 5, output: 5, cacheRead: 0.5, cacheWrite: 5 },
+    glm: { input: 5, output: 5, cacheRead: 0.5, cacheWrite: 5 },
+    moonshot: { input: 12, output: 12, cacheRead: 1.2, cacheWrite: 12 },
+    kimi: { input: 12, output: 12, cacheRead: 1.2, cacheWrite: 12 },
+    ollama: LOCAL,
+    local: LOCAL,
+};
+/** CNY pricing for a provider, or null when the provider has no official RMB price. */
+export function pricingCnyFor(provider, _model) {
+    const normalized = provider.trim().toLowerCase();
+    const exact = CNY_PRICING[normalized];
+    if (exact !== undefined)
+        return exact;
+    // Family fallback for Chinese providers matched by model string.
+    const haystack = `${normalized} ${_model.toLowerCase()}`;
+    const families = [
+        [["deepseek"], CNY_PRICING.deepseek],
+        [["qwen", "dashscope"], CNY_PRICING.qwen],
+        [["glm", "zhipu"], CNY_PRICING.zhipu],
+        [["moonshot", "kimi"], CNY_PRICING.moonshot],
+        [["ollama", "local"], LOCAL],
+    ];
+    for (const [keys, pricing] of families) {
+        if (keys.some((key) => haystack.includes(key)))
+            return pricing;
+    }
+    return null;
+}
+function estimateWith(usage, pricing) {
+    const num = (value) => (typeof value === "number" && Number.isFinite(value) ? value : 0);
+    return (num(usage.input) * pricing.input +
+        num(usage.output) * pricing.output +
+        num(usage.cacheRead) * pricing.cacheRead +
+        num(usage.cacheWrite) * pricing.cacheWrite) / 1e6;
+}
+/** Estimated cost in USD for one usage record. */
+export function estimateUsageCost(usage, provider, model) {
+    return estimateWith(usage, pricingFor(provider, model));
+}
+/** Estimated cost in 人民币 (CNY) for one usage record: official RMB list price where available, else USD×rate. */
+export function estimateUsageCostCny(usage, provider, model) {
+    const cny = pricingCnyFor(provider, model);
+    return cny !== null ? estimateWith(usage, cny) : estimateUsageCost(usage, provider, model) * USD_CNY_RATE;
+}
+//# sourceMappingURL=pricing.js.map

package/dist/src/core/pricing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pricing.js","sourceRoot":"","sources":["../../../src/core/pricing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,MAAM,CAAC,MAAM,eAAe,GAAe,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAElG,MAAM,QAAQ,GAAe,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC7F,MAAM,MAAM,GAAe,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC3F,MAAM,SAAS,GAAe,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACzF,MAAM,IAAI,GAAe,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACrF,MAAM,GAAG,GAAe,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACpF,MAAM,QAAQ,GAAe,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AAC3F,MAAM,MAAM,GAAe,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC1F,MAAM,KAAK,GAAe,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AAE/E,+CAA+C;AAC/C,MAAM,CAAC,MAAM,gBAAgB,GAA+B;IAC1D,QAAQ,EAAE,QAAQ;IAClB,MAAM,EAAE,MAAM;IACd,SAAS,EAAE,SAAS;IACpB,IAAI,EAAE,IAAI;IACV,SAAS,EAAE,IAAI;IACf,KAAK,EAAE,GAAG;IACV,GAAG,EAAE,GAAG;IACR,QAAQ,EAAE,QAAQ;IAClB,IAAI,EAAE,QAAQ;IACd,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;CACb,CAAC;AAEF,0EAA0E;AAC1E,MAAM,WAAW,GAAkC;IACjD,CAAC,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC;IACxB,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC;IACpC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC;IAC7B,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC;IACvB,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,QAAQ,CAAC;IAChC,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC9B,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC;CAC7B,CAAC;AAEF,2FAA2F;AAC3F,MAAM,UAAU,UAAU,CAAC,QAAgB,EAAE,KAAa;IACxD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,WAAW,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC;IACjE,CAAC;IACD,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,wEAAwE;AACxE,MAAM,WAAW,GAA+B;IAC9C,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE;IAChE,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE;IACnE,SAAS,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE;IACxE,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE;IAC7D,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,CAAC,EAAE;IAC3D,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;IACnE,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/D,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;CACb,CAAC;AAEF,uFAAuF;AACvF,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,MAAc;IAC5D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACjD,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,iEAAiE;IACjE,MAAM,QAAQ,GAAG,GAAG,UAAU,IAAI,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;IACzD,MAAM,QAAQ,GAAkC;QAC9C,CAAC,CAAC,UAAU,CAAC,EAAE,WAAW,CAAC,QAAS,CAAC;QACrC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,CAAC,IAAK,CAAC;QAC1C,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,WAAW,CAAC,KAAM,CAAC;QACtC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,QAAS,CAAC;QAC7C,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC;KAC7B,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,QAAQ,EAAE,CAAC;QACvC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,OAAO,OAAO,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,YAAY,CAAC,KAAuF,EAAE,OAAmB;IAChI,MAAM,GAAG,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1G,OAAO,CACL,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK;QAChC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,MAAM;QAClC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC,SAAS;QACxC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,UAAU,CAC3C,GAAG,GAAG,CAAC;AACV,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,iBAAiB,CAC/B,KAAuF,EACvF,QAAgB,EAChB,KAAa;IAEb,OAAO,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,oBAAoB,CAClC,KAAuF,EACvF,QAAgB,EAChB,KAAa;IAEb,MAAM,GAAG,GAAG,aAAa,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAC3C,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,GAAG,YAAY,CAAC;AAC5G,CAAC"}

package/dist/src/core/redact.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Deterministic secret redaction for log and projection surfaces.
+ *
+ * psyclaw never treats raw material or credentials as content to log. As
+ * defense-in-depth, any free-form text that reaches an event log is scrubbed
+ * of high-signal credential shapes before it is persisted. This is a
+ * heuristic, not an OS boundary: callers must still avoid putting secrets in
+ * log payloads in the first place.
+ */
+export declare function redactSecrets(input: string): string;
+/** Return the distinct secret kinds detected in a string. */
+export declare function findSecrets(input: string): string[];