sdd-agent-platform 0.3.0 → 0.4.0

package/node_modules/@sdd-agent-platform/core/dist/risk/legacy-adapters.js

@@ -0,0 +1,215 @@
+import { createHash } from 'node:crypto';
+import { LIFECYCLE_RISK_DECISION_CONTRACT_VERSION } from '../contracts.js';
+export function taskRiskProfileToCodingRiskSignals(profile, scope) {
+    const inputRefs = taskRiskInputRefs(profile);
+    const signals = [];
+    if (profile.sourceBoundary) {
+        signals.push(taskRiskSignal(profile, scope, 'source-boundary', 'source', 'high', 'high', inputRefs, ['Legacy task risk touches CLI/core source boundary files.']));
+    }
+    if (profile.runtimeStateBoundary) {
+        signals.push(taskRiskSignal(profile, scope, 'runtime-state', 'runtime-state', 'medium', 'high', inputRefs, ['Legacy task risk touches runtime state, run, or artifact storage paths.']));
+    }
+    if (profile.docsOnly) {
+        signals.push(taskRiskSignal(profile, scope, 'docs-only', 'workflow', 'low', 'high', inputRefs, ['Legacy task risk marks this as documentation or release-document only.']));
+    }
+    if (profile.validationOnly) {
+        signals.push(taskRiskSignal(profile, scope, 'validation-only', 'evidence', 'low', 'high', inputRefs, ['Legacy task risk marks this as validation-only work.']));
+    }
+    if (profile.securitySensitive) {
+        signals.push(taskRiskSignal(profile, scope, 'security-sensitive', 'security', 'high', 'high', inputRefs, ['Legacy task risk marks this as security-sensitive.']));
+    }
+    if (profile.externalUnknown) {
+        signals.push(taskRiskSignal(profile, scope, 'external-unknown', 'external', 'high', 'low', inputRefs, ['Legacy task risk depends on external or unknown behavior.']));
+    }
+    if (profile.externalKnown) {
+        signals.push(taskRiskSignal(profile, scope, 'external-known', 'external', 'medium', 'high', inputRefs, ['Legacy task risk depends on known external or third-party behavior.']));
+    }
+    if (profile.contextRisk || profile.tokenRisk) {
+        const reasons = [
+            profile.contextRisk ? 'Legacy task risk contains context-risk signal.' : null,
+            profile.tokenRisk ? 'Legacy task risk contains token-risk signal.' : null
+        ].filter((item) => Boolean(item));
+        signals.push(taskRiskSignal(profile, scope, 'context-token', 'context', 'medium', 'medium', inputRefs, reasons));
+    }
+    if (profile.performanceRisk) {
+        signals.push(taskRiskSignal(profile, scope, 'performance', 'performance', 'medium', 'medium', inputRefs, ['Legacy task risk contains performance, latency, or cost signal.']));
+    }
+    if (signals.length === 0) {
+        signals.push(taskRiskSignal(profile, scope, 'baseline', 'workflow', legacyRiskLevel(profile.riskLevel), 'high', inputRefs, profile.reasons));
+    }
+    return signals;
+}
+export function taskRiskProfileToCodingRiskProfile(profile, scope, generatedAt = new Date().toISOString()) {
+    const signals = taskRiskProfileToCodingRiskSignals(profile, scope);
+    return {
+        contract: 'sdd-coding-risk-profile-v1',
+        scope,
+        level: legacyRiskLevel(profile.riskLevel),
+        dimensions: uniqueStrings(signals.map((signal) => signal.dimension)),
+        signals,
+        confidence: profile.externalUnknown || profile.contextRisk || profile.tokenRisk ? 'medium' : 'high',
+        reasons: profile.reasons,
+        generatedAt
+    };
+}
+export function legacyLifecycleDecisionToRiskDecision(record, scope, options = {}) {
+    const profile = legacyLifecycleProfile(record.decision.profile);
+    const requiredStages = mapLegacyRequiredStages(record.decision.required_stages, profile);
+    const skippedStages = mapLegacyStages(record.decision.skipped_stages, profile);
+    const hardGateHits = record.decision.hard_gate_hits;
+    const inputRefs = options.inputRefs ?? record.audit.source_artifacts.map((ref) => ({ kind: 'document', ref }));
+    return {
+        contract: LIFECYCLE_RISK_DECISION_CONTRACT_VERSION,
+        scope,
+        profile,
+        requiredStages,
+        skippedStages,
+        blockedStages: profile === 'blocked' ? allSddStages() : [],
+        requiredEvidence: lifecycleRequiredEvidence(requiredStages, inputRefs, hardGateHits),
+        requiredReviews: lifecycleRequiredReviews(hardGateHits),
+        humanCheckpointRequired: record.decision.human_checkpoint_required,
+        approvalPolicy: lifecycleApprovalPolicy(profile, record.decision.human_checkpoint_required),
+        inputRefs,
+        signalRefs: options.signalRefs ?? [],
+        policyVersion: record.audit.policy_version,
+        inputHash: options.inputHash ?? stableHash(JSON.stringify({ input: record.input_summary, decision: record.decision, reasons: record.reasons })),
+        confidence: record.decision.confidence ?? 'low',
+        reasons: ['Mapped from legacy lifecycle decision for comparison only.', ...record.reasons],
+        generatedAt: options.generatedAt ?? record.audit.decided_at ?? new Date().toISOString()
+    };
+}
+function taskRiskSignal(profile, scope, suffix, dimension, level, confidence, inputRefs, reasons) {
+    return {
+        id: `legacy-task-risk:${profile.taskId ?? 'unknown'}:${suffix}`,
+        dimension,
+        level,
+        scope,
+        confidence,
+        inputRefs,
+        reasons
+    };
+}
+function taskRiskInputRefs(profile) {
+    return profile.taskId ? [{ kind: 'task', ref: profile.taskId }] : [];
+}
+function legacyRiskLevel(level) {
+    return level;
+}
+function legacyLifecycleProfile(profile) {
+    return profile ?? 'blocked';
+}
+function mapLegacyRequiredStages(stages, profile) {
+    const mapped = uniqueStages(stages.map(legacyStageToSddStage).filter((stage) => Boolean(stage)));
+    return uniqueStages([...defaultStagesForProfile(profile), ...mapped]);
+}
+function mapLegacyStages(stages, profile) {
+    const mapped = uniqueStages(stages.map(legacyStageToSddStage).filter((stage) => Boolean(stage)));
+    return mapped.length > 0 ? mapped : defaultStagesForProfile(profile);
+}
+function legacyStageToSddStage(stage) {
+    const normalized = stage.trim().toLowerCase().replace(/_/g, '-');
+    if (['spec', 'full-spec', 'mini-spec', 'implementation-spec', 'architecture-artifact'].includes(normalized)) {
+        return 'spec';
+    }
+    if (['plan', 'full-plan', 'options', 'decision'].includes(normalized)) {
+        return 'plan';
+    }
+    if (['tasks', 'full-tasks', 'task-boundary'].includes(normalized)) {
+        return 'tasks';
+    }
+    if (['verifies', 'verification-plan'].includes(normalized)) {
+        return 'verifies';
+    }
+    if (['do', 'implement', 'direct-implementation'].includes(normalized)) {
+        return 'do';
+    }
+    if (['test', 'validation', 'minimal-validation'].includes(normalized)) {
+        return 'test';
+    }
+    if (['goal-verify', 'verify', 'acceptance-verify', 'evidence-judgment'].includes(normalized)) {
+        return 'goal-verify';
+    }
+    if (['sync-back', 'sync-back-proposal'].includes(normalized)) {
+        return 'sync-back';
+    }
+    if (normalized === 'ship') {
+        return 'ship';
+    }
+    return null;
+}
+function defaultStagesForProfile(profile) {
+    if (profile === 'direct') {
+        return ['do', 'test'];
+    }
+    if (profile === 'compact') {
+        return ['tasks', 'verifies', 'do', 'test', 'goal-verify', 'sync-back'];
+    }
+    if (profile === 'full') {
+        return ['spec', 'plan', 'tasks', 'verifies', 'do', 'test', 'goal-verify', 'sync-back'];
+    }
+    if (profile === 'research') {
+        return ['spec', 'plan', 'verifies'];
+    }
+    return [];
+}
+function lifecycleRequiredEvidence(requiredStages, inputRefs, hardGateHits) {
+    if (!requiredStages.includes('test')) {
+        return [];
+    }
+    return [{
+            id: 'legacy-lifecycle:test-evidence',
+            acceptanceRef: 'legacy-lifecycle-decision',
+            kind: 'command',
+            requiredBefore: 'sync-back',
+            refs: inputRefs,
+            reasons: hardGateHits.length > 0 ? [`Legacy lifecycle hard gates require command evidence: ${hardGateHits.join(', ')}.`] : ['Legacy lifecycle requires validation evidence.']
+        }];
+}
+function lifecycleRequiredReviews(hardGateHits) {
+    return uniqueStrings(hardGateHits.map(hardGateReviewKind).filter((kind) => Boolean(kind))).map((kind) => ({
+        id: `legacy-lifecycle:${kind}-review`,
+        kind,
+        requiredBefore: 'handoff',
+        reasons: [`Legacy lifecycle hard gate requires ${kind} review.`]
+    }));
+}
+function hardGateReviewKind(gate) {
+    if (/security|auth|permission/.test(gate)) {
+        return 'security';
+    }
+    if (/database|data|state|concurrency|liveness|runtime/.test(gate)) {
+        return 'runtime-state';
+    }
+    if (/api|schema|contract|source/.test(gate)) {
+        return 'source-boundary';
+    }
+    if (/ci|build|release|publish/.test(gate)) {
+        return 'release';
+    }
+    if (/evidence|validation|policy/.test(gate)) {
+        return 'evidence';
+    }
+    return null;
+}
+function lifecycleApprovalPolicy(profile, checkpointRequired) {
+    if (profile === 'blocked') {
+        return 'blocked';
+    }
+    if (checkpointRequired) {
+        return 'human-required';
+    }
+    return profile === 'direct' ? 'auto-allow' : 'review-required';
+}
+function allSddStages() {
+    return ['spec', 'plan', 'tasks', 'verifies', 'do', 'test', 'goal-verify', 'sync-back', 'ship'];
+}
+function uniqueStages(values) {
+    return Array.from(new Set(values));
+}
+function uniqueStrings(values) {
+    return Array.from(new Set(values));
+}
+function stableHash(value) {
+    return createHash('sha256').update(value, 'utf8').digest('hex');
+}
+//# sourceMappingURL=legacy-adapters.js.map

package/node_modules/@sdd-agent-platform/core/dist/risk/legacy-adapters.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"legacy-adapters.js","sourceRoot":"","sources":["../../src/risk/legacy-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,wCAAwC,EAAE,MAAM,iBAAiB,CAAC;AAiC3E,MAAM,UAAU,kCAAkC,CAAC,OAAwB,EAAE,KAAmB;IAC9F,MAAM,SAAS,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,0DAA0D,CAAC,CAAC,CAAC,CAAC;IACrK,CAAC;IACD,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,yEAAyE,CAAC,CAAC,CAAC,CAAC;IAC3L,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,wEAAwE,CAAC,CAAC,CAAC,CAAC;IAC9K,CAAC;IACD,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;QAC3B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,sDAAsD,CAAC,CAAC,CAAC,CAAC;IAClK,CAAC;IACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,oDAAoD,CAAC,CAAC,CAAC,CAAC;IACpK,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,2DAA2D,CAAC,CAAC,CAAC,CAAC;IACxK,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,qEAAqE,CAAC,CAAC,CAAC,CAAC;IACnL,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG;YACd,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,gDAAgD,CAAC,CAAC,CAAC,IAAI;YAC7E,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI;SAC1E,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC;QAC5B,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,iEAAiE,CAAC,CAAC,CAAC,CAAC;IACjL,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/I,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,kCAAkC,CAAC,OAAwB,EAAE,KAAmB,EAAE,WAAW,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;IACtI,MAAM,OAAO,GAAG,kCAAkC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACnE,OAAO;QACL,QAAQ,EAAE,4BAA4B;QACtC,KAAK;QACL,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC;QACzC,UAAU,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpE,OAAO;QACP,UAAU,EAAE,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;QACnG,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qCAAqC,CAAC,MAAyC,EAAE,KAAmB,EAAE,UAA8C,EAAE;IACpK,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,cAAc,GAAG,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC;IACzF,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC;IAC/E,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;IACpD,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAc,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IAC3H,OAAO;QACL,QAAQ,EAAE,wCAAwC;QAClD,KAAK;QACL,OAAO;QACP,cAAc;QACd,aAAa;QACb,aAAa,EAAE,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE;QAC1D,gBAAgB,EAAE,yBAAyB,CAAC,cAAc,EAAE,SAAS,EAAE,YAAY,CAAC;QACpF,eAAe,EAAE,wBAAwB,CAAC,YAAY,CAAC;QACvD,uBAAuB,EAAE,MAAM,CAAC,QAAQ,CAAC,yBAAyB;QAClE,cAAc,EAAE,uBAAuB,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,yBAAyB,CAAC;QAC3F,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,EAAE;QACpC,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc;QAC1C,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,aAAa,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/I,UAAU,EAAE,MAAM,CAAC,QAAQ,CAAC,UAAU,IAAI,KAAK;QAC/C,OAAO,EAAE,CAAC,4DAA4D,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC;QAC1F,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACxF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAwB,EAAE,KAAmB,EAAE,MAAc,EAAE,SAAwC,EAAE,KAAsB,EAAE,UAA6B,EAAE,SAAuB,EAAE,OAAiB;IAChO,OAAO;QACL,EAAE,EAAE,oBAAoB,OAAO,CAAC,MAAM,IAAI,SAAS,IAAI,MAAM,EAAE;QAC/D,SAAS;QACT,KAAK;QACL,KAAK;QACL,UAAU;QACV,SAAS;QACT,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAwB;IACjD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,eAAe,CAAC,KAAmC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAiE;IAC/F,OAAO,OAAO,IAAI,SAAS,CAAC;AAC9B,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAgB,EAAE,OAA6B;IAC9E,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpH,OAAO,YAAY,CAAC,CAAC,GAAG,uBAAuB,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,eAAe,CAAC,MAAgB,EAAE,OAA6B;IACtE,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAqB,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpH,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,uBAAuB,CAAC,OAAO,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAa;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,qBAAqB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5G,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,MAAM,EAAE,YAAY,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACtE,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,mBAAmB,EAAE,mBAAmB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7F,OAAO,aAAa,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,WAAW,EAAE,oBAAoB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7D,OAAO,WAAW,CAAC;IACrB,CAAC;IACD,IAAI,UAAU,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA6B;IAC5D,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,yBAAyB,CAAC,cAA0B,EAAE,SAAuB,EAAE,YAAsB;IAC5G,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,CAAC;YACN,EAAE,EAAE,gCAAgC;YACpC,aAAa,EAAE,2BAA2B;YAC1C,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,WAAW;YAC3B,IAAI,EAAE,SAAS;YACf,OAAO,EAAE,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,yDAAyD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,gDAAgD,CAAC;SAC9K,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,YAAsB;IACtD,OAAO,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACxI,EAAE,EAAE,oBAAoB,IAAI,SAAS;QACrC,IAAI;QACJ,cAAc,EAAE,SAAS;QACzB,OAAO,EAAE,CAAC,uCAAuC,IAAI,UAAU,CAAC;KACjE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IAAI,kDAAkD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,eAAe,CAAC;IACzB,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,iBAAiB,CAAC;IAC3B,CAAC;IACD,IAAI,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,OAA6B,EAAE,kBAA2B;IACzF,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,kBAAkB,EAAE,CAAC;QACvB,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IACD,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,CAAC;AACjE,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;AACjG,CAAC;AAED,SAAS,YAAY,CAAC,MAAkB;IACtC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,aAAa,CAAmB,MAAW;IAClD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAClE,CAAC"}

package/node_modules/@sdd-agent-platform/core/dist/risk/workflow-gates.d.ts

@@ -0,0 +1,24 @@
+import type { SddStage } from '../contracts.js';
+import { type TaskRiskProfileInput } from '../task-risk-profile.js';
+import type { ApprovalPolicy, LifecycleRiskDecision, LifecycleRiskProfile } from './contracts.js';
+export type LifecycleWorkflowGate = 'direct' | 'review-before-sync-back' | 'review-before-test' | 'approval-before-test' | 'research-before-implementation' | 'clarify-before-routing' | 'verify-contract-blocked';
+export interface LifecycleWorkflowGateDecision {
+    lifecycleGate: LifecycleWorkflowGate;
+    lifecycleProfile: LifecycleRiskProfile | null;
+    approvalPolicy: ApprovalPolicy | null;
+    requiredStages: SddStage[];
+    primaryReason: string;
+    nextAction: string;
+    blocksRoute: boolean;
+    blocksTest: boolean;
+}
+export declare function evaluateTaskWorkflowGate(input: {
+    task: TaskRiskProfileInput | null;
+    taskId: string;
+    riskDecision?: LifecycleRiskDecision | null;
+    approved?: boolean;
+    reviewerCheckpointSatisfied?: boolean;
+}): LifecycleWorkflowGateDecision;
+export declare function verifyContractBlockedGate(taskId: string): LifecycleWorkflowGateDecision;
+export declare function testBlockedByGate(gate: LifecycleWorkflowGate, approved?: boolean, reviewerCheckpointSatisfied?: boolean): boolean;
+export declare function gateRequiresSyncBackReview(gate: LifecycleWorkflowGate): boolean;

package/node_modules/@sdd-agent-platform/core/dist/risk/workflow-gates.js

@@ -0,0 +1,160 @@
+import { buildTaskRiskProfile } from '../task-risk-profile.js';
+export function evaluateTaskWorkflowGate(input) {
+    const riskProfile = input.task ? buildTaskRiskProfile(input.task) : null;
+    const lifecycleGate = selectLifecycleGate(riskProfile, input.riskDecision ?? null);
+    const primaryReason = primaryReasonForGate(lifecycleGate, input.taskId, riskProfile, input.riskDecision ?? null);
+    const nextAction = nextActionForGate(lifecycleGate, input.taskId, Boolean(input.approved));
+    const blocksRoute = routeBlockedByGate(lifecycleGate, Boolean(input.approved));
+    const blocksTest = testBlockedByGate(lifecycleGate, Boolean(input.approved), Boolean(input.reviewerCheckpointSatisfied));
+    return {
+        lifecycleGate,
+        lifecycleProfile: input.riskDecision?.profile ?? null,
+        approvalPolicy: input.riskDecision?.approvalPolicy ?? null,
+        requiredStages: input.riskDecision?.requiredStages ?? [],
+        primaryReason,
+        nextAction,
+        blocksRoute,
+        blocksTest
+    };
+}
+export function verifyContractBlockedGate(taskId) {
+    return {
+        lifecycleGate: 'verify-contract-blocked',
+        lifecycleProfile: null,
+        approvalPolicy: 'blocked',
+        requiredStages: [],
+        primaryReason: `verify.md is missing, stale, or invalid, so validation commands cannot run for ${taskId}.`,
+        nextAction: `Run sdd instructions verify --json, fix or refresh verify.md for ${taskId}, then rerun sdd test task ${taskId}.`,
+        blocksRoute: false,
+        blocksTest: true
+    };
+}
+export function testBlockedByGate(gate, approved = false, reviewerCheckpointSatisfied = false) {
+    if (gate === 'approval-before-test' && approved) {
+        return false;
+    }
+    if (gate === 'review-before-test' && reviewerCheckpointSatisfied) {
+        return false;
+    }
+    return ['review-before-test', 'approval-before-test', 'research-before-implementation', 'clarify-before-routing', 'verify-contract-blocked'].includes(gate);
+}
+export function gateRequiresSyncBackReview(gate) {
+    return gate !== 'direct';
+}
+function selectLifecycleGate(riskProfile, riskDecision) {
+    const candidates = [];
+    if (!riskProfile) {
+        candidates.push('clarify-before-routing');
+    }
+    if (riskDecision?.profile === 'blocked' || riskDecision?.approvalPolicy === 'blocked') {
+        candidates.push('clarify-before-routing');
+    }
+    if (riskDecision?.profile === 'research') {
+        candidates.push('research-before-implementation');
+    }
+    if (riskDecision?.approvalPolicy === 'human-required') {
+        candidates.push('approval-before-test');
+    }
+    if (riskProfile) {
+        const tags = new Set(riskProfile.normalizedTags);
+        if (tags.has('unknown')) {
+            candidates.push('clarify-before-routing');
+        }
+        if (riskProfile.externalUnknown) {
+            candidates.push('research-before-implementation');
+        }
+        if (riskProfile.securitySensitive || hasAny(tags, ['database', 'data-loss', 'sql', 'token', 'secret', 'token-secret', 'credential', 'credentials'])) {
+            candidates.push('approval-before-test');
+        }
+        if (riskProfile.sourceBoundary || riskProfile.runtimeStateBoundary || hasAny(tags, ['source-boundary', 'platform-runtime', 'api-schema', 'state-machine', 'concurrency', 'ci-build', 'release'])) {
+            candidates.push('review-before-test');
+        }
+        if (tags.has('validation-only') || riskProfile.contextRisk || riskProfile.tokenRisk || riskProfile.performanceRisk) {
+            candidates.push('review-before-sync-back');
+        }
+    }
+    return strictestGate(candidates.length > 0 ? candidates : ['direct']);
+}
+function strictestGate(gates) {
+    return [...gates].sort((left, right) => gateRank(left) - gateRank(right))[0];
+}
+function gateRank(gate) {
+    switch (gate) {
+        case 'verify-contract-blocked':
+            return 0;
+        case 'clarify-before-routing':
+            return 1;
+        case 'research-before-implementation':
+            return 2;
+        case 'approval-before-test':
+            return 3;
+        case 'review-before-test':
+            return 4;
+        case 'review-before-sync-back':
+            return 5;
+        case 'direct':
+            return 6;
+    }
+}
+function routeBlockedByGate(gate, approved) {
+    if (gate === 'clarify-before-routing' || gate === 'research-before-implementation') {
+        return true;
+    }
+    return gate === 'approval-before-test' && !approved;
+}
+function primaryReasonForGate(gate, taskId, riskProfile, riskDecision) {
+    switch (gate) {
+        case 'clarify-before-routing':
+            return riskDecision?.profile === 'blocked' || riskDecision?.approvalPolicy === 'blocked'
+                ? `Task ${taskId} is missing clear intent, acceptance, validation, or routable task data.`
+                : `Task ${taskId} contains unknown risk and needs clarification before routing.`;
+        case 'research-before-implementation':
+            return `Task ${taskId} depends on external or low-confidence impact and needs research before implementation.`;
+        case 'approval-before-test':
+            return `Task ${taskId} includes security, token/secret, database, data-loss, or similarly high-impact risk that needs human approval before validation.`;
+        case 'review-before-test':
+            return `Task ${taskId} touches source, runtime state, API/schema, state/concurrency, or CI/build boundaries that need review before validation.`;
+        case 'review-before-sync-back':
+            return `Task ${taskId} can be validated, but ${reviewBeforeSyncBackReason(riskProfile)} requires review before applying status.`;
+        case 'direct':
+            return `No high-risk lifecycle gate applies to ${taskId}.`;
+        case 'verify-contract-blocked':
+            return `verify.md is missing, stale, or invalid, so validation commands cannot run for ${taskId}.`;
+    }
+}
+function reviewBeforeSyncBackReason(riskProfile) {
+    if (riskProfile?.validationOnly) {
+        return 'validation/evidence-only work';
+    }
+    if (riskProfile?.contextRisk || riskProfile?.tokenRisk) {
+        return 'context or token-budget risk';
+    }
+    if (riskProfile?.performanceRisk) {
+        return 'performance, latency, or cost risk';
+    }
+    return 'the lifecycle gate';
+}
+function nextActionForGate(gate, taskId, approved) {
+    switch (gate) {
+        case 'clarify-before-routing':
+            return `Update ${taskId} with clear intent, boundary, acceptance, validation, and impact, then rerun sdd tasks route ${taskId}.`;
+        case 'research-before-implementation':
+            return `Record research evidence for ${taskId}, document impact and validation, then rerun sdd tasks route ${taskId}.`;
+        case 'approval-before-test':
+            return approved
+                ? `Run or continue validation for ${taskId} with the recorded approval.`
+                : `Have a human review the risk, affected files, and validation commands; if accepted, rerun sdd test task ${taskId} --approved.`;
+        case 'review-before-test':
+            return `Have a reviewer inspect affected files and validation commands for ${taskId}, record the checkpoint, then rerun sdd test task ${taskId}.`;
+        case 'review-before-sync-back':
+            return `Run validation for ${taskId}, then inspect the sync-back proposal before applying status.`;
+        case 'direct':
+            return `Run validation for ${taskId}; sync-back can be direct after PASS.`;
+        case 'verify-contract-blocked':
+            return `Run sdd instructions verify --json, fix or refresh verify.md for ${taskId}, then rerun sdd test task ${taskId}.`;
+    }
+}
+function hasAny(values, candidates) {
+    return candidates.some((candidate) => values.has(candidate));
+}
+//# sourceMappingURL=workflow-gates.js.map

package/node_modules/@sdd-agent-platform/core/dist/risk/workflow-gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-gates.js","sourceRoot":"","sources":["../../src/risk/workflow-gates.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAmD,MAAM,yBAAyB,CAAC;AAuBhH,MAAM,UAAU,wBAAwB,CAAC,KAMxC;IACC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,MAAM,aAAa,GAAG,mBAAmB,CAAC,WAAW,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;IACnF,MAAM,aAAa,GAAG,oBAAoB,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,WAAW,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3F,MAAM,WAAW,GAAG,kBAAkB,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,iBAAiB,CAAC,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;IAEzH,OAAO;QACL,aAAa;QACb,gBAAgB,EAAE,KAAK,CAAC,YAAY,EAAE,OAAO,IAAI,IAAI;QACrD,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,cAAc,IAAI,IAAI;QAC1D,cAAc,EAAE,KAAK,CAAC,YAAY,EAAE,cAAc,IAAI,EAAE;QACxD,aAAa;QACb,UAAU;QACV,WAAW;QACX,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,MAAc;IACtD,OAAO;QACL,aAAa,EAAE,yBAAyB;QACxC,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,SAAS;QACzB,cAAc,EAAE,EAAE;QAClB,aAAa,EAAE,kFAAkF,MAAM,GAAG;QAC1G,UAAU,EAAE,oEAAoE,MAAM,8BAA8B,MAAM,GAAG;QAC7H,WAAW,EAAE,KAAK;QAClB,UAAU,EAAE,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA2B,EAAE,QAAQ,GAAG,KAAK,EAAE,2BAA2B,GAAG,KAAK;IAClH,IAAI,IAAI,KAAK,sBAAsB,IAAI,QAAQ,EAAE,CAAC;QAChD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,KAAK,oBAAoB,IAAI,2BAA2B,EAAE,CAAC;QACjE,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,gCAAgC,EAAE,wBAAwB,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC9J,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAA2B;IACpE,OAAO,IAAI,KAAK,QAAQ,CAAC;AAC3B,CAAC;AAED,SAAS,mBAAmB,CAAC,WAAmC,EAAE,YAA0C;IAC1G,MAAM,UAAU,GAA4B,EAAE,CAAC;IAE/C,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,YAAY,EAAE,OAAO,KAAK,SAAS,IAAI,YAAY,EAAE,cAAc,KAAK,SAAS,EAAE,CAAC;QACtF,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,YAAY,EAAE,OAAO,KAAK,UAAU,EAAE,CAAC;QACzC,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,YAAY,EAAE,cAAc,KAAK,gBAAgB,EAAE,CAAC;QACtD,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;IAED,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC;QACjD,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACxB,UAAU,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QAC5C,CAAC;QACD,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;YAChC,UAAU,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,WAAW,CAAC,iBAAiB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC,EAAE,CAAC;YACpJ,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;QAC1C,CAAC;QACD,IAAI,WAAW,CAAC,cAAc,IAAI,WAAW,CAAC,oBAAoB,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,iBAAiB,EAAE,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,aAAa,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;YACjM,UAAU,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,WAAW,CAAC,WAAW,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC,eAAe,EAAE,CAAC;YACnH,UAAU,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,aAAa,CAAC,KAA8B;IACnD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,QAAQ,CAAC,IAA2B;IAC3C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,yBAAyB;YAC5B,OAAO,CAAC,CAAC;QACX,KAAK,wBAAwB;YAC3B,OAAO,CAAC,CAAC;QACX,KAAK,gCAAgC;YACnC,OAAO,CAAC,CAAC;QACX,KAAK,sBAAsB;YACzB,OAAO,CAAC,CAAC;QACX,KAAK,oBAAoB;YACvB,OAAO,CAAC,CAAC;QACX,KAAK,yBAAyB;YAC5B,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ;YACX,OAAO,CAAC,CAAC;IACb,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,IAA2B,EAAE,QAAiB;IACxE,IAAI,IAAI,KAAK,wBAAwB,IAAI,IAAI,KAAK,gCAAgC,EAAE,CAAC;QACnF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,KAAK,sBAAsB,IAAI,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED,SAAS,oBAAoB,CAAC,IAA2B,EAAE,MAAc,EAAE,WAAmC,EAAE,YAA0C;IACxJ,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,wBAAwB;YAC3B,OAAO,YAAY,EAAE,OAAO,KAAK,SAAS,IAAI,YAAY,EAAE,cAAc,KAAK,SAAS;gBACtF,CAAC,CAAC,QAAQ,MAAM,0EAA0E;gBAC1F,CAAC,CAAC,QAAQ,MAAM,gEAAgE,CAAC;QACrF,KAAK,gCAAgC;YACnC,OAAO,QAAQ,MAAM,yFAAyF,CAAC;QACjH,KAAK,sBAAsB;YACzB,OAAO,QAAQ,MAAM,mIAAmI,CAAC;QAC3J,KAAK,oBAAoB;YACvB,OAAO,QAAQ,MAAM,2HAA2H,CAAC;QACnJ,KAAK,yBAAyB;YAC5B,OAAO,QAAQ,MAAM,0BAA0B,0BAA0B,CAAC,WAAW,CAAC,0CAA0C,CAAC;QACnI,KAAK,QAAQ;YACX,OAAO,0CAA0C,MAAM,GAAG,CAAC;QAC7D,KAAK,yBAAyB;YAC5B,OAAO,kFAAkF,MAAM,GAAG,CAAC;IACvG,CAAC;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,WAAmC;IACrE,IAAI,WAAW,EAAE,cAAc,EAAE,CAAC;QAChC,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,IAAI,WAAW,EAAE,WAAW,IAAI,WAAW,EAAE,SAAS,EAAE,CAAC;QACvD,OAAO,8BAA8B,CAAC;IACxC,CAAC;IACD,IAAI,WAAW,EAAE,eAAe,EAAE,CAAC;QACjC,OAAO,oCAAoC,CAAC;IAC9C,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,iBAAiB,CAAC,IAA2B,EAAE,MAAc,EAAE,QAAiB;IACvF,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,wBAAwB;YAC3B,OAAO,UAAU,MAAM,gGAAgG,MAAM,GAAG,CAAC;QACnI,KAAK,gCAAgC;YACnC,OAAO,gCAAgC,MAAM,gEAAgE,MAAM,GAAG,CAAC;QACzH,KAAK,sBAAsB;YACzB,OAAO,QAAQ;gBACb,CAAC,CAAC,kCAAkC,MAAM,8BAA8B;gBACxE,CAAC,CAAC,2GAA2G,MAAM,cAAc,CAAC;QACtI,KAAK,oBAAoB;YACvB,OAAO,sEAAsE,MAAM,qDAAqD,MAAM,GAAG,CAAC;QACpJ,KAAK,yBAAyB;YAC5B,OAAO,sBAAsB,MAAM,+DAA+D,CAAC;QACrG,KAAK,QAAQ;YACX,OAAO,sBAAsB,MAAM,uCAAuC,CAAC;QAC7E,KAAK,yBAAyB;YAC5B,OAAO,oEAAoE,MAAM,8BAA8B,MAAM,GAAG,CAAC;IAC7H,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,MAAmB,EAAE,UAAoB;IACvD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;AAC/D,CAAC"}

package/node_modules/@sdd-agent-platform/core/dist/risk.d.ts

@@ -0,0 +1,5 @@
+export * from './risk/contracts.js';
+export * from './risk/legacy-adapters.js';
+export * from './risk/kernel.js';
+export * from './risk/consumer-diagnostics.js';
+export * from './risk/workflow-gates.js';

package/node_modules/@sdd-agent-platform/core/dist/risk.js

@@ -0,0 +1,6 @@
+export * from './risk/contracts.js';
+export * from './risk/legacy-adapters.js';
+export * from './risk/kernel.js';
+export * from './risk/consumer-diagnostics.js';
+export * from './risk/workflow-gates.js';
+//# sourceMappingURL=risk.js.map

package/node_modules/@sdd-agent-platform/core/dist/risk.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk.js","sourceRoot":"","sources":["../src/risk.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,kBAAkB,CAAC;AACjC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,0BAA0B,CAAC"}

package/node_modules/@sdd-agent-platform/core/dist/router/agent-runtime-config.d.ts

@@ -0,0 +1,4 @@
+import type { ProjectConfig } from '../config/project-config.js';
+import type { ProjectAgentRuntimeConfig } from './agent-runtime.js';
+export declare function parseAgentRuntimeConfig(raw: string): ProjectAgentRuntimeConfig | undefined;
+export declare function readAgentRuntimeProjectConfig(projectRoot: string): Promise<ProjectConfig<ProjectAgentRuntimeConfig>>;