seal-gate 0.3.0

package/dist/drift/embedder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embedder.js","sourceRoot":"","sources":["../../src/drift/embedder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,CAAW,EAAE,CAAW;IACrD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,MAAM,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAE7B,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACnB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAE1B,iDAAiD;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC;IACnD,0CAA0C;IAC1C,OAAO,CAAC,GAAG,GAAG,CAAC;AACjB,CAAC;AAQD;;;;;GAKG;AACH,MAAM,aAAa;IACR,QAAQ,GAAG,IAAI,CAAC;IAChB,GAAG,GAAG,GAAG,CAAC;IAEnB,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEhC,0DAA0D;QAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YACvC,sCAAsC;YACtC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QACxC,CAAC;QAED,6CAA6C;QAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC3D,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;YACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;gBAClC,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;YACjB,CAAC;QACH,CAAC;QAED,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,YAAY;IAChB,QAAQ,GAAG,KAAK,CAAC;IACR,GAAG,GAAG,GAAG,CAAC;IACX,SAAS,CAAS;IAClB,QAAQ,CAAgB;IACxB,YAAY,GAAG,KAAK,CAAC;IAE7B,YAAY,SAAkB;QAC5B,yBAAyB;QACzB,IAAI,CAAC,SAAS,GAAG,SAAS,IAAI,gCAAgC,CAAC;QAC/D,IAAI,CAAC,QAAQ,GAAG,IAAI,aAAa,EAAE,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QAED,kCAAkC;QAClC,6DAA6D;QAC7D,OAAO,CAAC,IAAI,CACV,4BAA4B,IAAI,CAAC,SAAS,oCAAoC,CAC/E,CAAC;QACF,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,OAAO;QACnB,IAAI,CAAC;YACH,iEAAiE;YACjE,sDAAsD;YACtD,gDAAgD;YAChD,qBAAqB;YACrB,wBAAwB;YAExB,iFAAiF;YACjF,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,OAAO,QAAQ;IACX,OAAO,CAAkB;IACxB,GAAG,CAAS;IAErB,YAAY,SAAkB;QAC5B,MAAM,IAAI,GAAG,IAAI,YAAY,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,EAAE,CAAC;QAC1D,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;IAC9B,CAAC;IAED,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,mBAAmB;QAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF"}

package/dist/drift/index.d.ts

@@ -0,0 +1,9 @@
+export { DriftDb } from './drift-db.js';
+export { BaselineManager } from './baseline.js';
+export { Embedder, cosineDistance } from './embedder.js';
+export { DriftGuard } from './drift-guard.js';
+export { SoftCorrection } from './soft-correction.js';
+export { Quarantine } from './quarantine.js';
+export { driftScoreForTrust } from './trust-integration.js';
+export type { DriftStatus, DriftAction, DriftResult, DriftGuardOptions, } from './drift-guard.js';
+export type { BaselineStatus, BaselinePaths, BaselineResult, } from './baseline.js';

package/dist/drift/index.js

@@ -0,0 +1,8 @@
+export { DriftDb } from './drift-db.js';
+export { BaselineManager } from './baseline.js';
+export { Embedder, cosineDistance } from './embedder.js';
+export { DriftGuard } from './drift-guard.js';
+export { SoftCorrection } from './soft-correction.js';
+export { Quarantine } from './quarantine.js';
+export { driftScoreForTrust } from './trust-integration.js';
+//# sourceMappingURL=index.js.map

package/dist/drift/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/drift/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACzD,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/drift/quarantine.d.ts

@@ -0,0 +1,16 @@
+import { DriftDb } from './drift-db.js';
+/**
+ * Hard-drift quarantine: block memory promotion + log repair events.
+ */
+export declare class Quarantine {
+    private db;
+    constructor(db: DriftDb);
+    /**
+     * Check if the latest turn for this session was HARD_DRIFT.
+     */
+    isBlocked(agentId: string, sessionId: string): boolean;
+    /**
+     * Log a repair entry when hard drift occurs.
+     */
+    logRepair(agentId: string, sessionId: string, turnNumber: number, outputText: string): number;
+}

package/dist/drift/quarantine.js

@@ -0,0 +1,32 @@
+/**
+ * Hard-drift quarantine: block memory promotion + log repair events.
+ */
+export class Quarantine {
+    db;
+    constructor(db) {
+        this.db = db;
+    }
+    /**
+     * Check if the latest turn for this session was HARD_DRIFT.
+     */
+    isBlocked(agentId, sessionId) {
+        const latest = this.db.history.getLatest(agentId, sessionId);
+        return latest?.status === 'HARD_DRIFT';
+    }
+    /**
+     * Log a repair entry when hard drift occurs.
+     */
+    logRepair(agentId, sessionId, turnNumber, outputText) {
+        const latest = this.db.history.getLatest(agentId, sessionId);
+        const distance = latest?.distance ?? 0;
+        return this.db.repair.append({
+            agent_id: agentId,
+            session_id: sessionId,
+            turn_number: turnNumber,
+            distance,
+            hard_limit: 0.55, // TODO: read from config
+            message_excerpt: outputText.slice(0, 200),
+        });
+    }
+}
+//# sourceMappingURL=quarantine.js.map

package/dist/drift/quarantine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"quarantine.js","sourceRoot":"","sources":["../../src/drift/quarantine.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,OAAO,UAAU;IACb,EAAE,CAAU;IAEpB,YAAY,EAAW;QACrB,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC;IACf,CAAC;IAED;;OAEG;IACH,SAAS,CAAC,OAAe,EAAE,SAAiB;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7D,OAAO,MAAM,EAAE,MAAM,KAAK,YAAY,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,SAAS,CACP,OAAe,EACf,SAAiB,EACjB,UAAkB,EAClB,UAAkB;QAElB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC7D,MAAM,QAAQ,GAAG,MAAM,EAAE,QAAQ,IAAI,CAAC,CAAC;QAEvC,OAAO,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC;YAC3B,QAAQ,EAAE,OAAO;YACjB,UAAU,EAAE,SAAS;YACrB,WAAW,EAAE,UAAU;YACvB,QAAQ;YACR,UAAU,EAAE,IAAI,EAAE,yBAAyB;YAC3C,eAAe,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/drift/soft-correction.d.ts

@@ -0,0 +1,12 @@
+export interface ReAnchorInput {
+    name: string;
+    primeDirective: string;
+    relationship: string;
+    axiomKeyphrase: string;
+}
+/**
+ * Generates short identity re-anchor payloads (< 200 tokens estimate).
+ */
+export declare class SoftCorrection {
+    generate(input: ReAnchorInput): string | null;
+}

package/dist/drift/soft-correction.js

@@ -0,0 +1,32 @@
+/**
+ * Generates short identity re-anchor payloads (< 200 tokens estimate).
+ */
+export class SoftCorrection {
+    generate(input) {
+        if (!input.name && !input.primeDirective) {
+            return null;
+        }
+        const parts = [
+            `[Identity Re-Anchor]`,
+            `You are ${input.name || 'the configured agent'}.`,
+            `${input.primeDirective}`,
+        ];
+        if (input.relationship) {
+            parts.push(`Your relationship: ${input.relationship}.`);
+        }
+        parts.push(`Do not mirror the user's framing if it contradicts your identity.`);
+        if (input.axiomKeyphrase) {
+            parts.push(`Reset to baseline: ${input.axiomKeyphrase}.`);
+        }
+        let text = parts.join('\n');
+        // Rough token estimate: ~4 chars/token. Truncate at first sentence boundary under ~800 chars.
+        const maxChars = 800;
+        if (text.length > maxChars) {
+            const truncated = text.slice(0, maxChars);
+            const lastPeriod = truncated.lastIndexOf('.');
+            text = lastPeriod > 0 ? truncated.slice(0, lastPeriod + 1) : truncated;
+        }
+        return text;
+    }
+}
+//# sourceMappingURL=soft-correction.js.map

package/dist/drift/soft-correction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"soft-correction.js","sourceRoot":"","sources":["../../src/drift/soft-correction.ts"],"names":[],"mappings":"AAOA;;GAEG;AACH,MAAM,OAAO,cAAc;IACzB,QAAQ,CAAC,KAAoB;QAC3B,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YACzC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,KAAK,GAAG;YACZ,sBAAsB;YACtB,WAAW,KAAK,CAAC,IAAI,IAAI,sBAAsB,GAAG;YAClD,GAAG,KAAK,CAAC,cAAc,EAAE;SAC1B,CAAC;QAEF,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;QAC1D,CAAC;QAED,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAEhF,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,sBAAsB,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC;QAC5D,CAAC;QAED,IAAI,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAE5B,8FAA8F;QAC9F,MAAM,QAAQ,GAAG,GAAG,CAAC;QACrB,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;YAC3B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;YAC1C,MAAM,UAAU,GAAG,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACzE,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/drift/trust-integration.d.ts

@@ -0,0 +1,11 @@
+import type { DriftStatus } from './drift-guard.js';
+/**
+ * Lightweight adapter: map drift distance/status to [0,1] reliability score
+ * that can be fed into TrustMemory.
+ *
+ * Safe to import even when TrustMemory v2 is not yet integrated:
+ * this module has zero side effects and produces a plain number.
+ */
+export declare function driftScoreForTrust(status: DriftStatus, distance: number, options?: {
+    hardLimit: number;
+}): number;

package/dist/drift/trust-integration.js

@@ -0,0 +1,22 @@
+/**
+ * Lightweight adapter: map drift distance/status to [0,1] reliability score
+ * that can be fed into TrustMemory.
+ *
+ * Safe to import even when TrustMemory v2 is not yet integrated:
+ * this module has zero side effects and produces a plain number.
+ */
+export function driftScoreForTrust(status, distance, options) {
+    const hard = options?.hardLimit ?? 0.55;
+    switch (status) {
+        case 'NORMAL':
+            return 1.0;
+        case 'SOFT_DRIFT': {
+            // Linear degradation from 1.0 at soft_limit to 0.5 at hard_limit
+            const t = Math.min(distance / hard, 1.0);
+            return 1.0 - t * 0.5;
+        }
+        case 'HARD_DRIFT':
+            return 0.0;
+    }
+}
+//# sourceMappingURL=trust-integration.js.map

package/dist/drift/trust-integration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trust-integration.js","sourceRoot":"","sources":["../../src/drift/trust-integration.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAAmB,EACnB,QAAgB,EAChB,OAA+B;IAE/B,MAAM,IAAI,GAAG,OAAO,EAAE,SAAS,IAAI,IAAI,CAAC;IAExC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,GAAG,CAAC;QACb,KAAK,YAAY,EAAE,CAAC;YAClB,iEAAiE;YACjE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YACzC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;QACvB,CAAC;QACD,KAAK,YAAY;YACf,OAAO,GAAG,CAAC;IACf,CAAC;AACH,CAAC"}

package/dist/engine/citation-verifier.d.ts

@@ -0,0 +1,59 @@
+import { SealIssue, CitationStatus } from '../types.js';
+export type EvidenceGrade = 'strong' | 'weak' | 'none';
+export interface CitationVerdict {
+    status: CitationStatus;
+    quality: EvidenceGrade;
+    similarScore: number;
+    isFabricated: boolean;
+    fabricatedReason?: 'location_not_found' | 'content_mismatch';
+}
+export interface AbsencePattern {
+    positive: RegExp;
+    negated: RegExp;
+    label?: string;
+}
+export declare class CitationVerifier {
+    /** Compute SHA-256 hash of artifact content for pipeline integrity */
+    static computeHash(content: string): string;
+    /** Check pipeline integrity: preflight hash vs current hash */
+    static checkIntegrity(preflightHash: string, currentHash: string): boolean;
+    /**
+     * Verify a single issue's citation against the actual artifact content.
+     *
+     * @param issue - The issue with evidence_file/evidence_lines/evidence_quote
+     * @param artifact - The artifact string (input.output or input.evidence.diff)
+     * @param artifactFile - The logical file name of the artifact
+     * @param opts - Optional: absencePatterns for absence-mode verification
+     * @returns CitationVerdict with status and quality
+     */
+    static verify(issue: SealIssue, artifact: string, artifactFile: string, opts?: {
+        absencePatterns?: AbsencePattern[];
+    }): CitationVerdict;
+    /**
+     * Verify multiple issues and annotate them with citation_status.
+     * Returns fabricated_evidence entries for any that failed verification.
+     */
+    static verifyIssues(issues: SealIssue[], artifact: string, artifactFile: string, opts?: {
+        absencePatterns?: AbsencePattern[];
+    }): {
+        issues: SealIssue[];
+        fabricated: FabricatedEvidenceEntry[];
+    };
+}
+export interface FabricatedEvidenceEntry {
+    type: 'FABRICATED_EVIDENCE';
+    severity: 'CRITICAL' | 'HIGH' | 'MEDIUM' | 'LOW';
+    is_blocking: boolean;
+    evidence: string;
+    layer: IssueLayer;
+    source: 'core' | 'llm-overlay' | 'extension';
+    citation_status: CitationStatus;
+    fabricated_reason: 'location_not_found' | 'content_mismatch';
+    claimed_evidence: {
+        file?: string;
+        lines?: number[];
+        quote?: string;
+    };
+}
+type IssueLayer = 'L1' | 'L2' | 'L3' | 'L4' | 'EXTENSION' | 'LLM_OVERLAY';
+export {};

package/dist/engine/citation-verifier.js

@@ -0,0 +1,147 @@
+import { createHash } from 'node:crypto';
+const SIMILARITY_STRONG = 0.85;
+const SIMILARITY_WEAK = 0.60;
+function normalize(str) {
+    return str.replace(/\s+/g, ' ').trim().toLowerCase();
+}
+/** Levenshtein distance between two strings */
+function levenshtein(a, b) {
+    const m = a.length;
+    const n = b.length;
+    // Early termination for empty strings
+    if (m === 0)
+        return n;
+    if (n === 0)
+        return m;
+    // Use two rows to reduce memory
+    let prev = Array.from({ length: n + 1 }, (_, i) => i);
+    let curr = new Array(n + 1);
+    for (let i = 1; i <= m; i++) {
+        curr[0] = i;
+        for (let j = 1; j <= n; j++) {
+            const cost = a[i - 1] === b[j - 1] ? 0 : 1;
+            curr[j] = Math.min(prev[j] + 1, // deletion
+            curr[j - 1] + 1, // insertion
+            prev[j - 1] + cost);
+        }
+        ;
+        [prev, curr] = [curr, prev];
+    }
+    return prev[n];
+}
+/**
+ * Fuzzy-match a quote against actual content.
+ * Returns 0-1 similarity score where 1 = exact match.
+ */
+function fuzzyMatch(quote, content) {
+    const normQuote = normalize(quote);
+    const normContent = normalize(content);
+    if (normContent.length === 0 && normQuote.length === 0)
+        return 1;
+    if (normContent.length === 0)
+        return 0;
+    const dist = levenshtein(normQuote, normContent);
+    const maxLen = Math.max(normQuote.length, normContent.length);
+    if (maxLen === 0)
+        return 1;
+    return Math.max(0, 1 - dist / maxLen);
+}
+/** Check if the issue describes an absence (something missing) */
+function isAbsenceDescription(quote) {
+    return /^(no |missing |absent |lacks? |without )/i.test(quote.trim());
+}
+export class CitationVerifier {
+    /** Compute SHA-256 hash of artifact content for pipeline integrity */
+    static computeHash(content) {
+        return createHash('sha256').update(content).digest('hex');
+    }
+    /** Check pipeline integrity: preflight hash vs current hash */
+    static checkIntegrity(preflightHash, currentHash) {
+        return preflightHash === currentHash;
+    }
+    /**
+     * Verify a single issue's citation against the actual artifact content.
+     *
+     * @param issue - The issue with evidence_file/evidence_lines/evidence_quote
+     * @param artifact - The artifact string (input.output or input.evidence.diff)
+     * @param artifactFile - The logical file name of the artifact
+     * @param opts - Optional: absencePatterns for absence-mode verification
+     * @returns CitationVerdict with status and quality
+     */
+    static verify(issue, artifact, artifactFile, opts) {
+        // No evidence fields → not_applicable
+        if (!issue.evidence_file || !issue.evidence_lines || issue.evidence_lines.length === 0) {
+            return { status: 'not_applicable', quality: 'none', similarScore: 0, isFabricated: false };
+        }
+        // If the issue cites a different file, skip (we only check against the main artifact)
+        if (issue.evidence_file !== artifactFile) {
+            return { status: 'not_applicable', quality: 'none', similarScore: 0, isFabricated: false };
+        }
+        const lines = artifact.split('\n');
+        const [lineA] = issue.evidence_lines;
+        // Phantom: line out of range
+        if (lineA < 1 || lineA > lines.length) {
+            return { status: 'phantom', quality: 'none', similarScore: 0, isFabricated: true, fabricatedReason: 'location_not_found' };
+        }
+        const lineContent = lines[lineA - 1] ?? '';
+        const quote = issue.evidence_quote ?? '';
+        // Absence mode: check if this looks like a "something is missing" description
+        if (opts?.absencePatterns && opts.absencePatterns.length > 0 && isAbsenceDescription(quote)) {
+            for (const pattern of opts.absencePatterns) {
+                const hasPositive = pattern.positive.test(artifact);
+                const hasNegated = pattern.negated.test(artifact);
+                if (hasPositive && !hasNegated) {
+                    // Absence confirmed: positive anchor present, negated token absent
+                    return { status: 'verified', quality: 'strong', similarScore: 1, isFabricated: false };
+                }
+                if (hasPositive && hasNegated) {
+                    // Absence NOT confirmed: negated token IS present
+                    // This means the detector was wrong about the absence
+                    return { status: 'void', quality: 'none', similarScore: 0, isFabricated: true, fabricatedReason: 'content_mismatch' };
+                }
+                // No positive anchor → can't confirm, fall through to literal mode
+            }
+        }
+        // Literal excerpt mode: fuzzy-match the quote against the line content
+        const score = fuzzyMatch(quote, lineContent);
+        if (score >= SIMILARITY_STRONG) {
+            return { status: 'verified', quality: 'strong', similarScore: score, isFabricated: false };
+        }
+        if (score >= SIMILARITY_WEAK) {
+            return { status: 'drifted', quality: 'weak', similarScore: score, isFabricated: false };
+        }
+        return { status: 'void', quality: 'none', similarScore: score, isFabricated: true, fabricatedReason: 'content_mismatch' };
+    }
+    /**
+     * Verify multiple issues and annotate them with citation_status.
+     * Returns fabricated_evidence entries for any that failed verification.
+     */
+    static verifyIssues(issues, artifact, artifactFile, opts) {
+        const fabricated = [];
+        const annotated = issues.map(issue => {
+            const verdict = this.verify(issue, artifact, artifactFile, opts);
+            // Annotate the issue
+            const updated = { ...issue, citation_status: verdict.status };
+            if (verdict.isFabricated) {
+                fabricated.push({
+                    type: 'FABRICATED_EVIDENCE',
+                    severity: verdict.status === 'phantom' ? 'CRITICAL' : 'HIGH',
+                    is_blocking: false,
+                    evidence: `Detector claimed citation at ${issue.evidence_file}:${issue.evidence_lines?.[0]} but it was ${verdict.fabricatedReason}`,
+                    layer: 'L3',
+                    source: 'core',
+                    citation_status: verdict.status,
+                    fabricated_reason: verdict.fabricatedReason,
+                    claimed_evidence: {
+                        file: issue.evidence_file,
+                        lines: issue.evidence_lines,
+                        quote: issue.evidence_quote,
+                    },
+                });
+            }
+            return updated;
+        });
+        return { issues: annotated, fabricated };
+    }
+}
+//# sourceMappingURL=citation-verifier.js.map

package/dist/engine/citation-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"citation-verifier.js","sourceRoot":"","sources":["../../src/engine/citation-verifier.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAmBxC,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAC9B,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AACtD,CAAC;AAED,+CAA+C;AAC/C,SAAS,WAAW,CAAC,CAAS,EAAE,CAAS;IACvC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,sCAAsC;IACtC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACrB,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAErB,gCAAgC;IAChC,IAAI,IAAI,GAAa,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/D,IAAI,IAAI,GAAa,IAAI,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IAErC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAC1C,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAChB,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAS,WAAW;YAC/B,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAK,YAAY;YAChC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CACnB,CAAA;QACH,CAAC;QACD,CAAC;QAAA,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,CAAA;AAChB,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CAAC,KAAa,EAAE,OAAe;IAChD,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;IAClC,MAAM,WAAW,GAAG,SAAS,CAAC,OAAO,CAAC,CAAA;IACtC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAChE,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IACtC,MAAM,IAAI,GAAG,WAAW,CAAC,SAAS,EAAE,WAAW,CAAC,CAAA;IAChD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAA;IAC7D,IAAI,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAA;IAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,MAAM,CAAC,CAAA;AACvC,CAAC;AAED,kEAAkE;AAClE,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO,2CAA2C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAA;AACvE,CAAC;AAED,MAAM,OAAO,gBAAgB;IAC3B,sEAAsE;IACtE,MAAM,CAAC,WAAW,CAAC,OAAe;QAChC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC3D,CAAC;IAED,+DAA+D;IAC/D,MAAM,CAAC,cAAc,CAAC,aAAqB,EAAE,WAAmB;QAC9D,OAAO,aAAa,KAAK,WAAW,CAAA;IACtC,CAAC;IAED;;;;;;;;OAQG;IACH,MAAM,CAAC,MAAM,CACX,KAAgB,EAChB,QAAgB,EAChB,YAAoB,EACpB,IAA6C;QAE7C,sCAAsC;QACtC,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvF,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QAC5F,CAAC;QAED,sFAAsF;QACtF,IAAI,KAAK,CAAC,aAAa,KAAK,YAAY,EAAE,CAAC;YACzC,OAAO,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QAC5F,CAAC;QAED,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,cAAc,CAAA;QAEpC,6BAA6B;QAC7B,IAAI,KAAK,GAAG,CAAC,IAAI,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YACtC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAA;QAC5H,CAAC;QAED,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1C,MAAM,KAAK,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAA;QAExC,8EAA8E;QAC9E,IAAI,IAAI,EAAE,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5F,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;gBAC3C,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBACnD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;gBAEjD,IAAI,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;oBAC/B,mEAAmE;oBACnE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;gBACxF,CAAC;gBACD,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;oBAC9B,kDAAkD;oBAClD,sDAAsD;oBACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAA;gBACvH,CAAC;gBACD,mEAAmE;YACrE,CAAC;QACH,CAAC;QAED,uEAAuE;QACvE,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,WAAW,CAAC,CAAA;QAE5C,IAAI,KAAK,IAAI,iBAAiB,EAAE,CAAC;YAC/B,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QAC5F,CAAC;QACD,IAAI,KAAK,IAAI,eAAe,EAAE,CAAC;YAC7B,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAA;QACzF,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,CAAA;IAC3H,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,YAAY,CACjB,MAAmB,EACnB,QAAgB,EAChB,YAAoB,EACpB,IAA6C;QAE7C,MAAM,UAAU,GAA8B,EAAE,CAAA;QAEhD,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;YACnC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,CAAA;YAChE,qBAAqB;YACrB,MAAM,OAAO,GAAG,EAAE,GAAG,KAAK,EAAE,eAAe,EAAE,OAAO,CAAC,MAAM,EAAE,CAAA;YAE7D,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzB,UAAU,CAAC,IAAI,CAAC;oBACd,IAAI,EAAE,qBAAqB;oBAC3B,QAAQ,EAAE,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM;oBAC5D,WAAW,EAAE,KAAK;oBAClB,QAAQ,EAAE,gCAAgC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,eAAe,OAAO,CAAC,gBAAgB,EAAE;oBACnI,KAAK,EAAE,IAAI;oBACX,MAAM,EAAE,MAAM;oBACd,eAAe,EAAE,OAAO,CAAC,MAAM;oBAC/B,iBAAiB,EAAE,OAAO,CAAC,gBAAiB;oBAC5C,gBAAgB,EAAE;wBAChB,IAAI,EAAE,KAAK,CAAC,aAAa;wBACzB,KAAK,EAAE,KAAK,CAAC,cAAc;wBAC3B,KAAK,EAAE,KAAK,CAAC,cAAc;qBAC5B;iBACF,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,OAAO,CAAA;QAChB,CAAC,CAAC,CAAA;QAEF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,CAAA;IAC1C,CAAC;CACF"}

package/dist/engine/extension-registry.d.ts

@@ -0,0 +1,10 @@
+import { SealExtension, SealInput, SealIssue } from '../types.js';
+export interface ExtensionResult {
+    issues: SealIssue[];
+    errors: string[];
+}
+export declare class ExtensionRegistry {
+    private extensions;
+    add(ext: SealExtension): void;
+    run(input: SealInput): ExtensionResult;
+}

package/dist/engine/extension-registry.js

@@ -0,0 +1,27 @@
+import { makeIssue } from '../types.js';
+export class ExtensionRegistry {
+    extensions = [];
+    add(ext) {
+        this.extensions.push(ext);
+    }
+    run(input) {
+        const issues = [];
+        const errors = [];
+        for (const ext of this.extensions) {
+            try {
+                const result = ext.check(input);
+                issues.push(...result);
+            }
+            catch (err) {
+                const msg = `Extension [${ext.name}] failed: ${err instanceof Error ? err.message : String(err)}`;
+                errors.push(msg);
+                issues.push(makeIssue({
+                    type: 'OTHER', severity: 'LOW', layer: 'EXTENSION', source: 'extension',
+                    evidence: msg,
+                }));
+            }
+        }
+        return { issues, errors };
+    }
+}
+//# sourceMappingURL=extension-registry.js.map

package/dist/engine/extension-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"extension-registry.js","sourceRoot":"","sources":["../../src/engine/extension-registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,SAAS,EAAE,MAAM,aAAa,CAAA;AAO5E,MAAM,OAAO,iBAAiB;IACpB,UAAU,GAAoB,EAAE,CAAA;IAExC,GAAG,CAAC,GAAkB;QACpB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3B,CAAC;IAED,GAAG,CAAC,KAAgB;QAClB,MAAM,MAAM,GAAgB,EAAE,CAAA;QAC9B,MAAM,MAAM,GAAa,EAAE,CAAA;QAE3B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YAClC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;gBAC/B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAA;YACxB,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,GAAG,GAAG,cAAc,GAAG,CAAC,IAAI,aAAa,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAA;gBACjG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAChB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;oBACpB,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW;oBACvE,QAAQ,EAAE,GAAG;iBACd,CAAC,CAAC,CAAA;YACL,CAAC;QACH,CAAC;QAED,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAA;IAC3B,CAAC;CACF"}

package/dist/engine/heuristic-scorer.d.ts

@@ -0,0 +1,8 @@
+import { SealIssue, Verdict } from '../types.js';
+export declare class HeuristicScorer {
+    static computeDetectorScore(findings: Array<{
+        trust_deduction?: number;
+    }>): number;
+    static computeFinalScore(detectorScore: number, policyDeductions: number): number;
+    static toVerdict(score: number, blockingIssues: SealIssue[]): Verdict;
+}

package/dist/engine/heuristic-scorer.js

@@ -0,0 +1,14 @@
+import { verdictFromScore } from '../types.js';
+export class HeuristicScorer {
+    static computeDetectorScore(findings) {
+        const total = findings.reduce((sum, f) => sum + (f.trust_deduction ?? 0), 0);
+        return Math.max(0, Math.min(100, Math.floor(100 - total)));
+    }
+    static computeFinalScore(detectorScore, policyDeductions) {
+        return Math.max(0, Math.min(100, Math.floor(detectorScore - policyDeductions)));
+    }
+    static toVerdict(score, blockingIssues) {
+        return verdictFromScore(score, blockingIssues.length > 0);
+    }
+}
+//# sourceMappingURL=heuristic-scorer.js.map

package/dist/engine/heuristic-scorer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"heuristic-scorer.js","sourceRoot":"","sources":["../../src/engine/heuristic-scorer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAElE,MAAM,OAAO,eAAe;IAC1B,MAAM,CAAC,oBAAoB,CAAC,QAA6C;QACvE,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;QAC5E,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAC5D,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,aAAqB,EAAE,gBAAwB;QACtE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,aAAa,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAA;IACjF,CAAC;IAED,MAAM,CAAC,SAAS,CAAC,KAAa,EAAE,cAA2B;QACzD,OAAO,gBAAgB,CAAC,KAAK,EAAE,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC3D,CAAC;CACF"}

package/dist/engine/input-normalizer.d.ts

@@ -0,0 +1,4 @@
+import { SealInput } from '../types.js';
+export declare class InputNormalizer {
+    static normalize(input: Partial<SealInput>): SealInput;
+}

package/dist/engine/input-normalizer.js

@@ -0,0 +1,30 @@
+import { SealInputError } from '../errors.js';
+const VALID_ARTIFACT_TYPES = ['llm_response', 'code_diff', 'test_plan', 'design', 'migration', 'plan_review'];
+const VALID_RISK_LEVELS = ['LOW', 'MEDIUM', 'HIGH', 'CRITICAL'];
+export class InputNormalizer {
+    static normalize(input) {
+        if (!input.output || input.output.trim() === '') {
+            throw new SealInputError('output is required and must be non-empty', 'output');
+        }
+        if (!input.artifact_type || !VALID_ARTIFACT_TYPES.includes(input.artifact_type)) {
+            throw new SealInputError(`artifact_type must be one of: ${VALID_ARTIFACT_TYPES.join(', ')}`, 'artifact_type');
+        }
+        if (input.risk_hint !== null && input.risk_hint !== undefined && !VALID_RISK_LEVELS.includes(input.risk_hint)) {
+            throw new SealInputError(`risk_hint must be one of: ${VALID_RISK_LEVELS.join(', ')} or null`, 'risk_hint');
+        }
+        return {
+            artifact_type: input.artifact_type,
+            spec: input.spec ?? null,
+            output: input.output.trim(),
+            evidence: {
+                test_log: input.evidence?.test_log ?? '',
+                build_log: input.evidence?.build_log ?? '',
+                diff: input.evidence?.diff ?? '',
+                references: input.evidence?.references ?? [],
+            },
+            risk_hint: input.risk_hint ?? null,
+            context: input.context,
+        };
+    }
+}
+//# sourceMappingURL=input-normalizer.js.map

package/dist/engine/input-normalizer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-normalizer.js","sourceRoot":"","sources":["../../src/engine/input-normalizer.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AAE7C,MAAM,oBAAoB,GAAmB,CAAC,cAAc,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,CAAC,CAAA;AAC7H,MAAM,iBAAiB,GAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,CAAA;AAE5E,MAAM,OAAO,eAAe;IAC1B,MAAM,CAAC,SAAS,CAAC,KAAyB;QACxC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,cAAc,CAAC,0CAA0C,EAAE,QAAQ,CAAC,CAAA;QAChF,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,aAAa,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,EAAE,CAAC;YAChF,MAAM,IAAI,cAAc,CAAC,iCAAiC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,eAAe,CAAC,CAAA;QAC/G,CAAC;QACD,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9G,MAAM,IAAI,cAAc,CAAC,6BAA6B,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,CAAA;QAC5G,CAAC;QACD,OAAO;YACL,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE;YAC3B,QAAQ,EAAE;gBACR,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,IAAI,EAAE;gBACxC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE;gBAC1C,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;gBAChC,UAAU,EAAE,KAAK,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE;aAC7C;YACD,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;YAClC,OAAO,EAAE,KAAK,CAAC,OAAO;SACvB,CAAA;IACH,CAAC;CACF"}

package/dist/engine/plan-review-pipeline.d.ts

@@ -0,0 +1,14 @@
+/**
+ * plan_review mode pipeline — gates plans, designs, proposals, spec seeds.
+ *
+ * Core principle: no runtime exists, so behavioral claims are out of scope.
+ * The gateable question is "is this coherent and complete against what was
+ * locked before it was written?" Falsification, not approval.
+ *
+ * Pass threshold: 90 (higher than code mode's 85)
+ * High-risk [71,89]: ESCALATE_TO_HUMAN instead of PASS_WITH_WARNINGS
+ */
+import { SealInput, SealVerdict } from '../types.js';
+import { ExtensionRegistry } from './extension-registry.js';
+import { TrustMemory } from '../trust-memory.js';
+export declare function runPlanReviewPipeline(input: SealInput, registry: ExtensionRegistry, trustMemory: TrustMemory | null): Promise<SealVerdict>;