sdd-agent-platform 0.4.2 → 0.5.0

package/node_modules/@sdd-agent-platform/core/src/workflow-gate/policy.ts

@@ -1,194 +1,153 @@
-import { createHash } from 'node:crypto';
-import { WORKFLOW_GATE_RUNTIME_CONTRACT_VERSION } from '../contracts.js';
-import type { WorkflowGateAdvisorSummary, WorkflowGateDecision, WorkflowGateEvidencePacket, WorkflowGateHardCheck, WorkflowGateStatus } from './types.js';
-
-export function synthesizeWorkflowGateDecision(packet: WorkflowGateEvidencePacket): WorkflowGateDecision {
-  const hardBlocks = packet.hardChecks.filter((check) => check.severity === 'blocked');
-  const warnings = packet.hardChecks.filter((check) => check.severity === 'warning');
-  const advisorSummary = summarizeAdvisors(packet);
-  const status = decideStatus(hardBlocks, warnings, advisorSummary, packet);
-  const humanRequired = status === 'HUMAN_REQUIRED';
-  const allowedNextActions = allowedActions(status, packet);
-  const forbiddenNextActions = forbiddenActions(status, packet);
-  return {
-    decisionId: `gate-${inputHash(packet).slice(0, 16)}`,
-    inputHash: inputHash(packet),
-    generatedAt: new Date().toISOString(),
-    partition: packet.partition,
-    taskId: packet.taskId,
-    runId: packet.runId,
-    decisionKind: packet.decisionKind,
-    status,
-    decidedBy: 'runtime_policy',
-    hardBlocks,
-    warnings,
-    advisorSummary,
-    allowedNextActions,
-    forbiddenNextActions,
-    humanRequired,
-    reasons: decisionReasons(status, hardBlocks, warnings, advisorSummary),
-    evidenceRefs: sortedUnique(selectedEvidenceRefs(packet)),
-    payload: {
-      contract: WORKFLOW_GATE_RUNTIME_CONTRACT_VERSION,
-      packetId: packet.packetId,
-      workflowScope: packet.workflowScope,
-      evidenceBinding: gateEvidenceBinding(packet)
-    }
-  };
-}
-
-export function summarizeAdvisors(packet: WorkflowGateEvidencePacket): WorkflowGateAdvisorSummary {
-  const highConcernCount = packet.advisorAssessments.filter((assessment) => assessment.concern === 'high').length;
-  const mediumConcernCount = packet.advisorAssessments.filter((assessment) => assessment.concern === 'medium').length;
-  const invalidCount = packet.advisorAssessments.filter((assessment) => assessment.advisoryOnly !== true || assessment.validity === 'invalid').length;
-  const lowConfidenceCount = packet.advisorAssessments.filter((assessment) => assessment.confidence === 'low').length;
-  return {
-    status: invalidCount > 0 ? 'invalid' : highConcernCount > 0 ? 'high_concern' : mediumConcernCount > 0 || lowConfidenceCount > 0 ? 'medium_concern' : packet.advisorAssessments.length > 0 ? 'low_concern' : 'none',
-    highConcernCount,
-    mediumConcernCount,
-    invalidCount,
-    lowConfidenceCount,
-    summaries: packet.advisorAssessments.map((assessment) => assessment.summary).filter(Boolean).sort()
-  };
-}
-
-export function inputHash(packet: WorkflowGateEvidencePacket): string {
-  return createHash('sha256').update(stableJson({
-    decisionKind: packet.decisionKind,
-    partition: packet.partition,
-    taskId: packet.taskId,
-    runId: packet.runId,
-    documents: packet.documents,
-    selection: packet.latestEligibleSelection,
-    selections: packet.latestEligibleSelections,
-    workflowScope: packet.workflowScope,
-    runtimeHealth: packet.runtimeHealth,
-    durableGaps: packet.durableGaps,
-    dependencyBlockers: packet.dependencyBlockers,
-    affectedFileConflicts: packet.affectedFileConflicts,
-    fanInEvidenceSets: packet.fanInEvidenceSets,
-    advisorAssessments: packet.advisorAssessments,
-    selectedEvidence: {
-      source: packet.selectedEvidence.source,
-      evidenceSetId: packet.selectedEvidence.evidenceSet?.evidenceSetId ?? null,
-      selectedEvidenceSetId: packet.selectedEvidence.pointer?.selectedEvidenceSetId ?? null,
-      payloads: packet.selectedEvidence.payloads.map((payload) => ({ payloadId: payload.payloadId, logicalRef: payload.logicalRef, digest: payload.digest, status: payload.status }))
-    },
-    canonicalEvidenceRefs: packet.canonicalEvidenceRefs,
-    requiredArtifactRefs: packet.requiredArtifactRefs,
-    artifactPayloadHealth: packet.artifactPayloadHealth,
-    hardChecks: packet.hardChecks
-  }), 'utf8').digest('hex');
-}
-
-function decideStatus(hardBlocks: WorkflowGateHardCheck[], warnings: WorkflowGateHardCheck[], advisorSummary: WorkflowGateAdvisorSummary, packet: WorkflowGateEvidencePacket): WorkflowGateStatus {
-  if (hardBlocks.length > 0) {
-    return 'BLOCKED';
-  }
-  if (advisorSummary.status === 'invalid') {
-    return 'HUMAN_REQUIRED';
-  }
-  if (advisorSummary.status === 'high_concern') {
-    return 'HUMAN_REQUIRED';
-  }
-  if (warnings.length > 0 || advisorSummary.status === 'medium_concern') {
-    return 'WARN';
-  }
-  if (packet.decisionKind === 'stage_transition' && packet.advisorAssessments.length > 0 && packet.canonicalEvidenceRefs.length === 0) {
-    return 'ADVISORY_ONLY';
-  }
-  return 'PASS';
-}
-
-function allowedActions(status: WorkflowGateStatus, packet: WorkflowGateEvidencePacket): string[] {
-  if (status === 'PASS') {
-    return packet.decisionKind === 'ship' ? ['ship'] : ['continue'];
-  }
-  if (status === 'WARN') {
-    return ['inspect-evidence'];
-  }
-  if (status === 'HUMAN_REQUIRED') {
-    return ['create-decision-card', 'inspect-evidence'];
-  }
-  if (status === 'ADVISORY_ONLY') {
-    return ['inspect-advisor-assessments'];
-  }
-  return ['inspect-blockers', 'recover'];
-}
-
-function forbiddenActions(status: WorkflowGateStatus, packet: WorkflowGateEvidencePacket): string[] {
-  if (status === 'BLOCKED') {
-    return ['ship', 'truth-alignment-approval', 'mark-task-complete', 'stage-pass'];
-  }
-  if (status === 'HUMAN_REQUIRED') {
-    return ['satisfy-with-role-result', 'satisfy-with-subagent-output'];
-  }
-  if (status === 'ADVISORY_ONLY') {
-    return ['treat-advisor-as-pass'];
-  }
-  return status === 'WARN' ? ['ship', 'truth-alignment-approval', 'mark-task-complete', 'stage-pass'] : packet.decisionKind === 'ship' ? [] : ['skip-evidence-recording'];
-}
-
-function decisionReasons(status: WorkflowGateStatus, hardBlocks: WorkflowGateHardCheck[], warnings: WorkflowGateHardCheck[], advisorSummary: WorkflowGateAdvisorSummary): string[] {
-  if (hardBlocks.length > 0) {
-    return hardBlocks.map((check) => `${check.code}: ${check.message}`);
-  }
-  if (status === 'HUMAN_REQUIRED') {
-    return [`advisor=${advisorSummary.status}; human decision required because role/subagent outputs cannot satisfy this gate.`];
-  }
-  if (warnings.length > 0) {
-    return warnings.map((check) => `${check.code}: ${check.message}`);
-  }
-  if (advisorSummary.status === 'medium_concern' || advisorSummary.status === 'high_concern') {
-    return [`advisor=${advisorSummary.status}`];
-  }
-  return [`runtime_policy produced ${status}`];
-}
-
-function selectedEvidenceRefs(packet: WorkflowGateEvidencePacket): string[] {
-  return packet.selectedEvidence.payloads.map((payload) => payload.logicalRef);
-}
-
-function gateEvidenceBinding(packet: WorkflowGateEvidencePacket): Record<string, unknown> {
-  const selectedRefs = packet.selectedEvidence.payloads.map((payload) => ({
-    payloadId: payload.payloadId,
-    logicalRef: payload.logicalRef,
-    digest: payload.digest,
-    status: payload.status
-  }));
-  return {
-    contract: 'sdd-gate-evidence-binding-v1',
-    branch: packet.partition,
-    gate: packet.decisionKind,
-    selectionPointerRef: packet.selectedEvidence.pointer ? `selection:${packet.selectedEvidence.pointer.scopeKind}:${packet.selectedEvidence.pointer.scopeId}` : null,
-    acceptedEvidenceSetRef: packet.selectedEvidence.evidenceSet?.evidenceSetId ?? null,
-    source: packet.selectedEvidence.source,
-    selectedRefs,
-    blockedRefs: packet.hardChecks.flatMap((check) => check.refs),
-    selectionReasons: sortedUnique([packet.selectedEvidence.pointer?.reason ?? '', ...evidenceSetSelectionReasons(packet.selectedEvidence.evidenceSet?.payload)]),
-    decision: packet.hardChecks.some((check) => check.severity === 'blocked') ? 'blocked' : 'pass',
-    reasons: packet.hardChecks.map((check) => `${check.code}: ${check.message}`)
-  };
-}
-
-function evidenceSetSelectionReasons(payload: unknown): string[] {
-  if (!payload || typeof payload !== 'object') {
-    return [];
-  }
-  const reasons = (payload as { selectionReasons?: unknown }).selectionReasons;
-  return Array.isArray(reasons) ? reasons.filter((reason): reason is string => typeof reason === 'string') : [];
-}
-
-function sortedUnique(values: string[]): string[] {
-  return [...new Set(values.filter(Boolean))].sort();
-}
-
-function stableJson(value: unknown): string {
-  if (Array.isArray(value)) {
-    return `[${value.map(stableJson).join(',')}]`;
-  }
-  if (value && typeof value === 'object') {
-    return `{${Object.entries(value as Record<string, unknown>).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`).join(',')}}`;
-  }
-  return JSON.stringify(value);
-}
+import { createHash } from 'node:crypto';
+import { WORKFLOW_GATE_RUNTIME_CONTRACT_VERSION } from '../contracts.js';
+import type { WorkflowGateAdvisorSummary, WorkflowGateDecision, WorkflowGateEvidencePacket, WorkflowGateHardCheck, WorkflowGateStatus } from './types.js';
+
+export function synthesizeWorkflowGateDecision(packet: WorkflowGateEvidencePacket): WorkflowGateDecision {
+  const hardBlocks = packet.hardChecks.filter((check) => check.severity === 'blocked');
+  const warnings = packet.hardChecks.filter((check) => check.severity === 'warning');
+  const advisorSummary = summarizeAdvisors(packet);
+  const status = decideStatus(hardBlocks, warnings, advisorSummary, packet);
+  const humanRequired = status === 'HUMAN_REQUIRED';
+  const allowedNextActions = allowedActions(status, packet);
+  const forbiddenNextActions = forbiddenActions(status, packet);
+  return {
+    decisionId: `gate-${inputHash(packet).slice(0, 16)}`,
+    inputHash: inputHash(packet),
+    generatedAt: new Date().toISOString(),
+    partition: packet.partition,
+    taskId: packet.taskId,
+    runId: packet.runId,
+    decisionKind: packet.decisionKind,
+    status,
+    decidedBy: 'runtime_policy',
+    hardBlocks,
+    warnings,
+    advisorSummary,
+    allowedNextActions,
+    forbiddenNextActions,
+    humanRequired,
+    reasons: decisionReasons(status, hardBlocks, warnings, advisorSummary),
+    evidenceRefs: sortedUnique([...packet.canonicalEvidenceRefs, ...packet.fanInEvidenceSets.flatMap((set) => [...set.evidenceRefs, ...set.canonicalEvidenceRefs])]),
+    payload: {
+      contract: WORKFLOW_GATE_RUNTIME_CONTRACT_VERSION,
+      packetId: packet.packetId,
+      workflowScope: packet.workflowScope
+    }
+  };
+}
+
+export function summarizeAdvisors(packet: WorkflowGateEvidencePacket): WorkflowGateAdvisorSummary {
+  const highConcernCount = packet.advisorAssessments.filter((assessment) => assessment.concern === 'high').length;
+  const mediumConcernCount = packet.advisorAssessments.filter((assessment) => assessment.concern === 'medium').length;
+  const invalidCount = packet.advisorAssessments.filter((assessment) => assessment.advisoryOnly !== true || assessment.validity === 'invalid').length;
+  const lowConfidenceCount = packet.advisorAssessments.filter((assessment) => assessment.confidence === 'low').length;
+  return {
+    status: invalidCount > 0 ? 'invalid' : highConcernCount > 0 ? 'high_concern' : mediumConcernCount > 0 || lowConfidenceCount > 0 ? 'medium_concern' : packet.advisorAssessments.length > 0 ? 'low_concern' : 'none',
+    highConcernCount,
+    mediumConcernCount,
+    invalidCount,
+    lowConfidenceCount,
+    summaries: packet.advisorAssessments.map((assessment) => assessment.summary).filter(Boolean).sort()
+  };
+}
+
+export function inputHash(packet: WorkflowGateEvidencePacket): string {
+  return createHash('sha256').update(stableJson({
+    decisionKind: packet.decisionKind,
+    partition: packet.partition,
+    taskId: packet.taskId,
+    runId: packet.runId,
+    documents: packet.documents,
+    selection: packet.latestEligibleSelection,
+    selections: packet.latestEligibleSelections,
+    workflowScope: packet.workflowScope,
+    runtimeHealth: packet.runtimeHealth,
+    durableGaps: packet.durableGaps,
+    dependencyBlockers: packet.dependencyBlockers,
+    affectedFileConflicts: packet.affectedFileConflicts,
+    fanInEvidenceSets: packet.fanInEvidenceSets,
+    advisorAssessments: packet.advisorAssessments,
+    canonicalEvidenceRefs: packet.canonicalEvidenceRefs,
+    requiredArtifactRefs: packet.requiredArtifactRefs,
+    artifactPayloadHealth: packet.artifactPayloadHealth,
+    hardChecks: packet.hardChecks
+  }), 'utf8').digest('hex');
+}
+
+function decideStatus(hardBlocks: WorkflowGateHardCheck[], warnings: WorkflowGateHardCheck[], advisorSummary: WorkflowGateAdvisorSummary, packet: WorkflowGateEvidencePacket): WorkflowGateStatus {
+  if (hardBlocks.length > 0) {
+    return 'BLOCKED';
+  }
+  if (advisorSummary.status === 'invalid') {
+    return 'HUMAN_REQUIRED';
+  }
+  if (advisorSummary.status === 'high_concern') {
+    return 'HUMAN_REQUIRED';
+  }
+  if (warnings.length > 0 || advisorSummary.status === 'medium_concern') {
+    return 'WARN';
+  }
+  if (packet.decisionKind === 'stage_transition' && packet.advisorAssessments.length > 0 && packet.canonicalEvidenceRefs.length === 0) {
+    return 'ADVISORY_ONLY';
+  }
+  return 'PASS';
+}
+
+function allowedActions(status: WorkflowGateStatus, packet: WorkflowGateEvidencePacket): string[] {
+  if (status === 'PASS') {
+    return packet.decisionKind === 'ship' ? ['ship'] : ['continue'];
+  }
+  if (status === 'WARN') {
+    return ['inspect-evidence'];
+  }
+  if (status === 'HUMAN_REQUIRED') {
+    return ['create-decision-card', 'inspect-evidence'];
+  }
+  if (status === 'ADVISORY_ONLY') {
+    return ['inspect-advisor-assessments'];
+  }
+  return ['inspect-blockers', 'recover'];
+}
+
+function forbiddenActions(status: WorkflowGateStatus, packet: WorkflowGateEvidencePacket): string[] {
+  if (status === 'BLOCKED') {
+    return ['ship', 'mark-task-complete', 'stage-pass'];
+  }
+  if (status === 'HUMAN_REQUIRED') {
+    return ['satisfy-with-role-result', 'satisfy-with-subagent-output'];
+  }
+  if (status === 'ADVISORY_ONLY') {
+    return ['treat-advisor-as-pass'];
+  }
+  return status === 'WARN' ? ['ship', 'mark-task-complete', 'stage-pass'] : packet.decisionKind === 'ship' ? [] : ['skip-evidence-recording'];
+}
+
+function decisionReasons(status: WorkflowGateStatus, hardBlocks: WorkflowGateHardCheck[], warnings: WorkflowGateHardCheck[], advisorSummary: WorkflowGateAdvisorSummary): string[] {
+  if (hardBlocks.length > 0) {
+    return hardBlocks.map((check) => `${check.code}: ${check.message}`);
+  }
+  if (status === 'HUMAN_REQUIRED') {
+    return [`advisor=${advisorSummary.status}; human decision required because role/subagent outputs cannot satisfy this gate.`];
+  }
+  if (warnings.length > 0) {
+    return warnings.map((check) => `${check.code}: ${check.message}`);
+  }
+  if (advisorSummary.status === 'medium_concern' || advisorSummary.status === 'high_concern') {
+    return [`advisor=${advisorSummary.status}`];
+  }
+  return [`runtime_policy produced ${status}`];
+}
+
+function sortedUnique(values: string[]): string[] {
+  return [...new Set(values.filter(Boolean))].sort();
+}
+
+function stableJson(value: unknown): string {
+  if (Array.isArray(value)) {
+    return `[${value.map(stableJson).join(',')}]`;
+  }
+  if (value && typeof value === 'object') {
+    return `{${Object.entries(value as Record<string, unknown>).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`).join(',')}}`;
+  }
+  return JSON.stringify(value);
+}

package/node_modules/@sdd-agent-platform/core/src/workflow-gate/types.ts

@@ -1,115 +1,111 @@
-import type { FanInEvidenceSetRecord, LlmAdvisorAssessmentRecord } from '../execution/stage-team-runtime.js';
-import type { RuntimeDurableGapRecord, RuntimeResolvedEvidenceSelection } from '../storage/runtime-store.js';
-import type { LatestEligibleRunSelection } from '../workflow-state/latest-eligible-run.js';
-import type { WorkflowDependencyBlocker } from '../workflow-state/dependencies.js';
-import type { WorkflowAffectedFileConflict } from '../workflow-state/affected-file-conflicts.js';
-import type { SddTaskModel } from '../sdd-docs/task-parser.js';
-
-export type WorkflowGateStatus = 'PASS' | 'WARN' | 'BLOCKED' | 'HUMAN_REQUIRED' | 'ADVISORY_ONLY';
-export type WorkflowGateHardCheckSeverity = 'info' | 'warning' | 'blocked';
-export type WorkflowGateAdvisorSummaryStatus = 'none' | 'low_concern' | 'medium_concern' | 'high_concern' | 'invalid';
-export type WorkflowGateDecisionKind = 'test' | 'validation_wave' | 'review_gate' | 'ship' | 'stage_transition';
-
-export type WorkflowGateHardCheckCode =
-  | 'schema_health_unavailable'
-  | 'missing_documents'
-  | 'stale_documents'
-  | 'contract_hash_mismatch'
-  | 'run_rejected'
-  | 'blocked_failed_or_archived_run'
-  | 'latest_eligible_missing'
-  | 'missing_payload'
-  | 'digest_drift'
-  | 'missing_required_artifact'
-  | 'missing_evidence_selection'
-  | 'non_consumable_evidence'
-  | 'non_primary_evidence'
-  | 'validation_failure'
-  | 'dependency_blocker'
-  | 'authority_violation'
-  | 'affected_file_conflict'
-  | 'durable_gap_blocking';
-
-export interface WorkflowGateHardCheck {
-  code: WorkflowGateHardCheckCode;
-  severity: WorkflowGateHardCheckSeverity;
-  scope: string;
-  message: string;
-  recovery: string;
-  refs: string[];
-}
-
-export interface WorkflowGateArtifactPayloadHealth {
-  payloadId: string;
-  logicalRef: string;
-  physicalPayloadPath: string;
-  expectedDigest: string;
-  actualDigest: string | null;
-  status: 'ok' | 'missing' | 'digest_drift';
-}
-
-export interface WorkflowGateRuntimeHealth {
-  status: 'ok' | 'unavailable';
-  issues: string[];
-}
-
-export interface WorkflowGateScope {
-  waveRunId: string | null;
-  taskIds: string[];
-  runIds: string[];
-  evidenceRefs: string[];
-}
-
-export interface WorkflowGateEvidencePacket {
-  packetId: string;
-  generatedAt: string;
-  decisionKind: WorkflowGateDecisionKind;
-  partition: string;
-  taskId: string | null;
-  runId: string | null;
-  documents: SddTaskModel['documents'];
-  latestEligibleSelection: LatestEligibleRunSelection | null;
-  latestEligibleSelections: LatestEligibleRunSelection[];
-  workflowScope: WorkflowGateScope;
-  runtimeHealth: WorkflowGateRuntimeHealth;
-  durableGaps: RuntimeDurableGapRecord[];
-  dependencyBlockers: WorkflowDependencyBlocker[];
-  affectedFileConflicts: WorkflowAffectedFileConflict[];
-  fanInEvidenceSets: FanInEvidenceSetRecord[];
-  advisorAssessments: LlmAdvisorAssessmentRecord[];
-  selectedEvidence: RuntimeResolvedEvidenceSelection;
-  canonicalEvidenceRefs: string[];
-  requiredArtifactRefs: string[];
-  artifactPayloadHealth: WorkflowGateArtifactPayloadHealth[];
-  hardChecks: WorkflowGateHardCheck[];
-}
-
-export interface WorkflowGateAdvisorSummary {
-  status: WorkflowGateAdvisorSummaryStatus;
-  highConcernCount: number;
-  mediumConcernCount: number;
-  invalidCount: number;
-  lowConfidenceCount: number;
-  summaries: string[];
-}
-
-export interface WorkflowGateDecision {
-  decisionId: string;
-  inputHash: string;
-  generatedAt: string;
-  partition: string;
-  taskId: string | null;
-  runId: string | null;
-  decisionKind: WorkflowGateDecisionKind;
-  status: WorkflowGateStatus;
-  decidedBy: 'runtime_policy';
-  hardBlocks: WorkflowGateHardCheck[];
-  warnings: WorkflowGateHardCheck[];
-  advisorSummary: WorkflowGateAdvisorSummary;
-  allowedNextActions: string[];
-  forbiddenNextActions: string[];
-  humanRequired: boolean;
-  reasons: string[];
-  evidenceRefs: string[];
-  payload: unknown;
-}
+import type { FanInEvidenceSetRecord, LlmAdvisorAssessmentRecord } from '../execution/stage-team-runtime.js';
+import type { RuntimeDurableGapRecord } from '../storage/runtime-store.js';
+import type { LatestEligibleRunSelection } from '../workflow-state/latest-eligible-run.js';
+import type { WorkflowDependencyBlocker } from '../workflow-state/dependencies.js';
+import type { WorkflowAffectedFileConflict } from '../workflow-state/affected-file-conflicts.js';
+import type { SddTaskModel } from '../sdd-docs/task-parser.js';
+
+export type WorkflowGateStatus = 'PASS' | 'WARN' | 'BLOCKED' | 'HUMAN_REQUIRED' | 'ADVISORY_ONLY';
+export type WorkflowGateHardCheckSeverity = 'info' | 'warning' | 'blocked';
+export type WorkflowGateAdvisorSummaryStatus = 'none' | 'low_concern' | 'medium_concern' | 'high_concern' | 'invalid';
+export type WorkflowGateDecisionKind = 'test' | 'validation_wave' | 'review_gate' | 'ship' | 'stage_transition';
+
+export type WorkflowGateHardCheckCode =
+  | 'schema_health_unavailable'
+  | 'missing_documents'
+  | 'stale_documents'
+  | 'contract_hash_mismatch'
+  | 'run_rejected'
+  | 'blocked_failed_or_archived_run'
+  | 'latest_eligible_missing'
+  | 'missing_payload'
+  | 'digest_drift'
+  | 'missing_required_artifact'
+  | 'validation_failure'
+  | 'dependency_blocker'
+  | 'authority_violation'
+  | 'affected_file_conflict'
+  | 'durable_gap_blocking';
+
+export interface WorkflowGateHardCheck {
+  code: WorkflowGateHardCheckCode;
+  severity: WorkflowGateHardCheckSeverity;
+  scope: string;
+  message: string;
+  recovery: string;
+  refs: string[];
+}
+
+export interface WorkflowGateArtifactPayloadHealth {
+  payloadId: string;
+  logicalRef: string;
+  physicalPayloadPath: string;
+  expectedDigest: string;
+  actualDigest: string | null;
+  status: 'ok' | 'missing' | 'digest_drift';
+}
+
+export interface WorkflowGateRuntimeHealth {
+  status: 'ok' | 'unavailable';
+  issues: string[];
+}
+
+export interface WorkflowGateScope {
+  waveRunId: string | null;
+  taskIds: string[];
+  runIds: string[];
+  evidenceRefs: string[];
+}
+
+export interface WorkflowGateEvidencePacket {
+  packetId: string;
+  generatedAt: string;
+  decisionKind: WorkflowGateDecisionKind;
+  partition: string;
+  taskId: string | null;
+  runId: string | null;
+  documents: SddTaskModel['documents'];
+  latestEligibleSelection: LatestEligibleRunSelection | null;
+  latestEligibleSelections: LatestEligibleRunSelection[];
+  workflowScope: WorkflowGateScope;
+  runtimeHealth: WorkflowGateRuntimeHealth;
+  durableGaps: RuntimeDurableGapRecord[];
+  dependencyBlockers: WorkflowDependencyBlocker[];
+  affectedFileConflicts: WorkflowAffectedFileConflict[];
+  fanInEvidenceSets: FanInEvidenceSetRecord[];
+  advisorAssessments: LlmAdvisorAssessmentRecord[];
+  canonicalEvidenceRefs: string[];
+  requiredArtifactRefs: string[];
+  artifactPayloadHealth: WorkflowGateArtifactPayloadHealth[];
+  hardChecks: WorkflowGateHardCheck[];
+}
+
+export interface WorkflowGateAdvisorSummary {
+  status: WorkflowGateAdvisorSummaryStatus;
+  highConcernCount: number;
+  mediumConcernCount: number;
+  invalidCount: number;
+  lowConfidenceCount: number;
+  summaries: string[];
+}
+
+export interface WorkflowGateDecision {
+  decisionId: string;
+  inputHash: string;
+  generatedAt: string;
+  partition: string;
+  taskId: string | null;
+  runId: string | null;
+  decisionKind: WorkflowGateDecisionKind;
+  status: WorkflowGateStatus;
+  decidedBy: 'runtime_policy';
+  hardBlocks: WorkflowGateHardCheck[];
+  warnings: WorkflowGateHardCheck[];
+  advisorSummary: WorkflowGateAdvisorSummary;
+  allowedNextActions: string[];
+  forbiddenNextActions: string[];
+  humanRequired: boolean;
+  reasons: string[];
+  evidenceRefs: string[];
+  payload: unknown;
+}