seal-gate 0.3.0

package/dist/engine/plan-review-pipeline.js

@@ -0,0 +1,173 @@
+/**
+ * plan_review mode pipeline — gates plans, designs, proposals, spec seeds.
+ *
+ * Core principle: no runtime exists, so behavioral claims are out of scope.
+ * The gateable question is "is this coherent and complete against what was
+ * locked before it was written?" Falsification, not approval.
+ *
+ * Pass threshold: 90 (higher than code mode's 85)
+ * High-risk [71,89]: ESCALATE_TO_HUMAN instead of PASS_WITH_WARNINGS
+ */
+import { gradeEvidence, worstOf, SCHEMA_VERSION, NEXT_ACTION } from '../types.js';
+import { ClaimExtractor } from '../detectors/claim-extractor.js';
+import { RiskClassifier } from '../detectors/risk-classifier.js';
+import { SpecCoverageDetector } from '../detectors/spec-coverage-detector.js';
+import { ContradictionDetector } from '../detectors/contradiction-detector.js';
+import { CriteriaCoverageDetector } from '../detectors/criteria-coverage-detector.js';
+import { OrphanClaimDetector } from '../detectors/orphan-claim-detector.js';
+import { FalsificationDetector } from '../detectors/falsification-detector.js';
+import { HeuristicScorer } from './heuristic-scorer.js';
+import { PolicyEngine } from './policy-engine.js';
+const PLAN_PASS_THRESHOLD = 90;
+const PLAN_ESCALATE_BAND_LOW = 71;
+const PLAN_ESCALATE_BAND_HIGH = 89;
+function planReviewVerdict(score, hasBlocking, riskLevel) {
+    if (hasBlocking)
+        return 'BLOCK';
+    // High-risk middle band → ESCALATE instead of PASS_WITH_WARNINGS
+    if (score >= PLAN_ESCALATE_BAND_LOW && score <= PLAN_ESCALATE_BAND_HIGH && riskLevel === 'HIGH') {
+        return 'ESCALATE_TO_HUMAN';
+    }
+    if (score >= PLAN_PASS_THRESHOLD)
+        return 'PASS';
+    if (score >= PLAN_ESCALATE_BAND_LOW)
+        return 'PASS_WITH_WARNINGS';
+    if (score >= 50)
+        return 'REVISE';
+    if (score >= 30)
+        return 'ESCALATE_TO_HUMAN';
+    return 'BLOCK';
+}
+function evidenceBonus(issues) {
+    // +5 per confirmed-strong field (from CriteriaCoverageDetector), capped at +15
+    const strongCount = issues
+        .filter(i => gradeEvidence(i) === 'strong' && i.type !== 'LOGIC_BUG')
+        .length;
+    return Math.min(strongCount * 5, 15);
+}
+export async function runPlanReviewPipeline(input, registry, trustMemory) {
+    const artifactFile = input.context?.artifact_file ?? 'artifact.md';
+    // Step 1: Extract claims — behavioral claim patterns are designed for code artifacts,
+    // not prose (words like "fixed", "fully" in specs are noise, not claims needing evidence).
+    // OrphanClaimDetector in plan_review mode checks traceability anchors, not behavioral claims.
+    const claims = input.artifact_type === 'plan_review' ? [] : ClaimExtractor.extract(input.output);
+    // Step 2: Classify risk
+    const riskResult = RiskClassifier.classify({
+        output: input.output,
+        diff: input.evidence?.diff ?? '',
+        risk_hint: input.risk_hint,
+    });
+    // Step 3: Spec coverage (reused from code mode)
+    const specResult = SpecCoverageDetector.detect(input.spec, input.output);
+    const assumptions_detected = [...specResult.assumptions];
+    // Stage 1 — ContradictionDetector (inline, keystone)
+    const contradictionResult = ContradictionDetector.detect({
+        artifact: input.output,
+        artifact_file: artifactFile,
+    });
+    // Stage 2 — CriteriaCoverageDetector (inline)
+    const lockedCriteria = input.context?.locked_criteria ?? [];
+    const coverageResult = CriteriaCoverageDetector.detect({
+        artifact: input.output,
+        artifact_file: artifactFile,
+        locked_criteria: lockedCriteria,
+    });
+    // Preflight failure: no locked criteria
+    if (coverageResult.no_criteria_escalate) {
+        assumptions_detected.push('No locked criteria — coverage measurement not possible');
+    }
+    // Stage 3 — OrphanClaimDetector (inline)
+    const orphanResult = OrphanClaimDetector.detect(claims, input.output);
+    // All deterministic findings
+    const deterministicFindings = [
+        ...contradictionResult.issues,
+        ...coverageResult.issues,
+        ...orphanResult.issues,
+        ...specResult.issues,
+    ];
+    // Evidence bonus from covered criteria (confirmed-strong fields)
+    const criteriaBonus = Math.min(coverageResult.confirmed_strong_fields * 5, 15);
+    // Stage 4 — FalsificationDetector (parallel agent, async)
+    const falsificationIssues = await FalsificationDetector.detect(input);
+    // Score computation (start 100 + bonus, deduct per issue)
+    const allDeductions = deterministicFindings.filter(f => (f.trust_deduction ?? 0) > 0);
+    const falsificationDeductions = falsificationIssues
+        .filter(f => (f.trust_deduction ?? 0) > 0)
+        .reduce((sum, f) => sum + (f.trust_deduction ?? 0), 0);
+    const baseScore = HeuristicScorer.computeDetectorScore(allDeductions);
+    const detectorScore = Math.max(0, Math.min(100, baseScore + criteriaBonus - falsificationDeductions));
+    // Policy engine (reused)
+    const hasBlocking = deterministicFindings.some(f => f.is_blocking);
+    const baseVerdict = planReviewVerdict(detectorScore, hasBlocking, riskResult.risk_level);
+    const allForPolicy = [...deterministicFindings, ...falsificationIssues];
+    const policyResult = PolicyEngine.apply({
+        base_verdict: baseVerdict,
+        detector_score: detectorScore,
+        risk_level: riskResult.risk_level,
+        input,
+        all_findings: allForPolicy,
+        llm_signals: null,
+    });
+    // Extensions
+    const extResult = registry.run(input);
+    // Combine all issues
+    const allIssues = [...deterministicFindings, ...policyResult.injected_issues, ...falsificationIssues];
+    // Final score
+    const finalScore = HeuristicScorer.computeFinalScore(detectorScore, policyResult.policy_deductions);
+    // Honor required_verdict on all findings (including non-blocking)
+    const requiredVerdicts = allForPolicy
+        .map(i => i.required_verdict)
+        .filter((v) => !!v);
+    // Final verdict
+    let finalVerdict = worstOf(policyResult.verdict, planReviewVerdict(finalScore, allIssues.some(i => i.is_blocking), riskResult.risk_level));
+    for (const rv of requiredVerdicts)
+        finalVerdict = worstOf(finalVerdict, rv);
+    // Preflight escalation overrides
+    if (coverageResult.no_criteria_escalate) {
+        finalVerdict = worstOf(finalVerdict, 'ESCALATE_TO_HUMAN');
+    }
+    // Extension block check
+    if (extResult.issues.some(i => i.is_blocking && i.required_verdict === 'BLOCK')) {
+        finalVerdict = 'BLOCK';
+    }
+    const allIssuesFull = [...allIssues, ...extResult.issues];
+    const blocking = allIssuesFull.filter(i => i.is_blocking);
+    const nonBlocking = allIssuesFull.filter(i => !i.is_blocking);
+    // TrustMemory
+    const agentId = input.context?.agent_id;
+    if (trustMemory && agentId) {
+        trustMemory.record(agentId, {
+            verdict: finalVerdict,
+            trust_score: finalScore,
+            risk_level: riskResult.risk_level,
+            blocking_count: blocking.length,
+        });
+    }
+    return {
+        verdict: finalVerdict,
+        trust_score: finalScore,
+        risk_level: riskResult.risk_level,
+        summary: `plan_review: ${finalVerdict} (trust=${finalScore}, risk=${riskResult.risk_level}): ${blocking.length} blocking, ${nonBlocking.length} non-blocking`,
+        deterministic_findings: allIssuesFull,
+        llm_findings: falsificationIssues,
+        blocking_issues: blocking,
+        non_blocking_issues: nonBlocking,
+        missing_evidence: [],
+        assumptions_detected,
+        advisory_notes: [],
+        next_action: NEXT_ACTION[finalVerdict],
+        schema_version: SCHEMA_VERSION,
+        score_breakdown: {
+            base: 100,
+            issue_deductions: blocking.reduce((s, i) => s + (i.trust_deduction ?? 0), 0) + nonBlocking.reduce((s, i) => s + (i.trust_deduction ?? 0), 0),
+            missing_evidence_deductions: 0,
+            risk_deductions: riskResult.trust_deduction,
+            overconfidence_deductions: 0,
+            evidence_bonuses: 0,
+            final: finalScore,
+        },
+        fabricated_evidence: [],
+        trust_memory_summary: (trustMemory && agentId) ? trustMemory.getSummary(agentId) : undefined,
+    };
+}
+//# sourceMappingURL=plan-review-pipeline.js.map

package/dist/engine/plan-review-pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-review-pipeline.js","sourceRoot":"","sources":["../../src/engine/plan-review-pipeline.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAEL,aAAa,EAAc,OAAO,EAAa,cAAc,EAAE,WAAW,EAC3E,MAAM,aAAa,CAAA;AAEpB,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAC7E,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAA;AACrF,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAA;AAC3E,OAAO,EAAE,qBAAqB,EAAE,MAAM,wCAAwC,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAIjD,MAAM,mBAAmB,GAAG,EAAE,CAAA;AAC9B,MAAM,sBAAsB,GAAG,EAAE,CAAA;AACjC,MAAM,uBAAuB,GAAG,EAAE,CAAA;AAElC,SAAS,iBAAiB,CAAC,KAAa,EAAE,WAAoB,EAAE,SAAiB;IAC/E,IAAI,WAAW;QAAE,OAAO,OAAO,CAAA;IAE/B,iEAAiE;IACjE,IAAI,KAAK,IAAI,sBAAsB,IAAI,KAAK,IAAI,uBAAuB,IAAI,SAAS,KAAK,MAAM,EAAE,CAAC;QAChG,OAAO,mBAAmB,CAAA;IAC5B,CAAC;IAED,IAAI,KAAK,IAAI,mBAAmB;QAAE,OAAO,MAAM,CAAA;IAC/C,IAAI,KAAK,IAAI,sBAAsB;QAAE,OAAO,oBAAoB,CAAA;IAChE,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,QAAQ,CAAA;IAChC,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,mBAAmB,CAAA;IAC3C,OAAO,OAAO,CAAA;AAChB,CAAC;AAED,SAAS,aAAa,CAAC,MAAmB;IACxC,+EAA+E;IAC/E,MAAM,WAAW,GAAG,MAAM;SACvB,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC;SACpE,MAAM,CAAA;IACT,OAAO,IAAI,CAAC,GAAG,CAAC,WAAW,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;AACtC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAgB,EAChB,QAA2B,EAC3B,WAA+B;IAE/B,MAAM,YAAY,GAAI,KAAK,CAAC,OAAO,EAAE,aAAwB,IAAI,aAAa,CAAA;IAE9E,sFAAsF;IACtF,2FAA2F;IAC3F,8FAA8F;IAC9F,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAEhG,wBAAwB;IACxB,MAAM,UAAU,GAAG,cAAc,CAAC,QAAQ,CAAC;QACzC,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,EAAE;QAChC,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAA;IAEF,gDAAgD;IAChD,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IACxE,MAAM,oBAAoB,GAAG,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAA;IAExD,qDAAqD;IACrD,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,MAAM,CAAC;QACvD,QAAQ,EAAE,KAAK,CAAC,MAAM;QACtB,aAAa,EAAE,YAAY;KAC5B,CAAC,CAAA;IAEF,8CAA8C;IAC9C,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,EAAE,eAAe,IAAI,EAAE,CAAA;IAC3D,MAAM,cAAc,GAAG,wBAAwB,CAAC,MAAM,CAAC;QACrD,QAAQ,EAAE,KAAK,CAAC,MAAM;QACtB,aAAa,EAAE,YAAY;QAC3B,eAAe,EAAE,cAAiG;KACnH,CAAC,CAAA;IAEF,wCAAwC;IACxC,IAAI,cAAc,CAAC,oBAAoB,EAAE,CAAC;QACxC,oBAAoB,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAA;IACrF,CAAC;IAED,yCAAyC;IACzC,MAAM,YAAY,GAAG,mBAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAA;IAErE,6BAA6B;IAC7B,MAAM,qBAAqB,GAAgB;QACzC,GAAG,mBAAmB,CAAC,MAAM;QAC7B,GAAG,cAAc,CAAC,MAAM;QACxB,GAAG,YAAY,CAAC,MAAM;QACtB,GAAG,UAAU,CAAC,MAAM;KACrB,CAAA;IAED,iEAAiE;IACjE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,uBAAuB,GAAG,CAAC,EAAE,EAAE,CAAC,CAAA;IAE9E,0DAA0D;IAC1D,MAAM,mBAAmB,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAErE,0DAA0D;IAC1D,MAAM,aAAa,GAAG,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA;IACrF,MAAM,uBAAuB,GAAG,mBAAmB;SAChD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;SACzC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACxD,MAAM,SAAS,GAAG,eAAe,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAA;IACrE,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,GAAG,aAAa,GAAG,uBAAuB,CAAC,CAAC,CAAA;IAErG,yBAAyB;IACzB,MAAM,WAAW,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAClE,MAAM,WAAW,GAAG,iBAAiB,CAAC,aAAa,EAAE,WAAW,EAAE,UAAU,CAAC,UAAU,CAAC,CAAA;IAExF,MAAM,YAAY,GAAG,CAAC,GAAG,qBAAqB,EAAE,GAAG,mBAAmB,CAAC,CAAA;IACvE,MAAM,YAAY,GAAG,YAAY,CAAC,KAAK,CAAC;QACtC,YAAY,EAAE,WAAW;QACzB,cAAc,EAAE,aAAa;QAC7B,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,KAAK;QACL,YAAY,EAAE,YAAY;QAC1B,WAAW,EAAE,IAAI;KAClB,CAAC,CAAA;IAEF,aAAa;IACb,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAErC,qBAAqB;IACrB,MAAM,SAAS,GAAG,CAAC,GAAG,qBAAqB,EAAE,GAAG,YAAY,CAAC,eAAe,EAAE,GAAG,mBAAmB,CAAC,CAAA;IAErG,cAAc;IACd,MAAM,UAAU,GAAG,eAAe,CAAC,iBAAiB,CAAC,aAAa,EAAE,YAAY,CAAC,iBAAiB,CAAC,CAAA;IAEnG,kEAAkE;IAClE,MAAM,gBAAgB,GAAG,YAAY;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEnC,gBAAgB;IAChB,IAAI,YAAY,GAAG,OAAO,CACxB,YAAY,CAAC,OAAO,EACpB,iBAAiB,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,UAAU,CAAC,UAAU,CAAC,CACzF,CAAA;IACD,KAAK,MAAM,EAAE,IAAI,gBAAgB;QAAE,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAA;IAE3E,iCAAiC;IACjC,IAAI,cAAc,CAAC,oBAAoB,EAAE,CAAC;QACxC,YAAY,GAAG,OAAO,CAAC,YAAY,EAAE,mBAAmB,CAAC,CAAA;IAC3D,CAAC;IAED,wBAAwB;IACxB,IAAI,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,gBAAgB,KAAK,OAAO,CAAC,EAAE,CAAC;QAChF,YAAY,GAAG,OAAO,CAAA;IACxB,CAAC;IAED,MAAM,aAAa,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;IACzD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IACzD,MAAM,WAAW,GAAG,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IAE7D,cAAc;IACd,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAA;IACvC,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;QAC3B,WAAW,CAAC,MAAM,CAAC,OAAO,EAAE;YAC1B,OAAO,EAAE,YAAY;YACrB,WAAW,EAAE,UAAU;YACvB,UAAU,EAAE,UAAU,CAAC,UAAU;YACjC,cAAc,EAAE,QAAQ,CAAC,MAAM;SAChC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,YAAY;QACrB,WAAW,EAAE,UAAU;QACvB,UAAU,EAAE,UAAU,CAAC,UAAU;QACjC,OAAO,EAAE,gBAAgB,YAAY,WAAW,UAAU,UAAU,UAAU,CAAC,UAAU,MAAM,QAAQ,CAAC,MAAM,cAAc,WAAW,CAAC,MAAM,eAAe;QAC7J,sBAAsB,EAAE,aAAa;QACrC,YAAY,EAAE,mBAAmB;QACjC,eAAe,EAAE,QAAQ;QACzB,mBAAmB,EAAE,WAAW;QAChC,gBAAgB,EAAE,EAAE;QACpB,oBAAoB;QACpB,cAAc,EAAE,EAAE;QAClB,WAAW,EAAE,WAAW,CAAC,YAAY,CAAC;QACtC,cAAc,EAAE,cAAc;QAC9B,eAAe,EAAE;YACf,IAAI,EAAE,GAAG;YACT,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,eAAe,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5I,2BAA2B,EAAE,CAAC;YAC9B,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,yBAAyB,EAAE,CAAC;YAC5B,gBAAgB,EAAE,CAAC;YACnB,KAAK,EAAE,UAAU;SAClB;QACD,mBAAmB,EAAE,EAAE;QACvB,oBAAoB,EAAE,CAAC,WAAW,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;KAC7F,CAAA;AACH,CAAC"}

package/dist/engine/policy-engine.d.ts

@@ -0,0 +1,20 @@
+import { SealIssue, SealInput, LLMSignals, Verdict, RiskLevel } from '../types.js';
+export interface PolicyResult {
+    verdict: Verdict;
+    injected_issues: SealIssue[];
+    policy_deductions: number;
+}
+export declare class PolicyEngine {
+    static apply(params: {
+        base_verdict: Verdict;
+        detector_score: number;
+        risk_level: RiskLevel;
+        input: SealInput;
+        all_findings: SealIssue[];
+        llm_signals?: LLMSignals | null;
+    }): PolicyResult;
+    static resolveVerdicts(verdicts: Verdict[]): {
+        verdict: Verdict;
+    };
+    static convertLLMSignals(signals: LLMSignals): SealIssue[];
+}

package/dist/engine/policy-engine.js

@@ -0,0 +1,194 @@
+import { maxVerdict, makeIssue } from '../types.js';
+// AX501: destructive commands — requires word boundary only before, not after (/ is non-word)
+const DESTRUCTIVE_PATTERN = /\b(DROP\s+TABLE|rm\s+-rf|DELETE\s+FROM|TRUNCATE|format\s+\/|fdisk)/i;
+// AX501: confirmation must be adjacent to the destructive command (within 100 chars)
+// AX502: only explicit deployment actions, not "release notes" or "memory release"
+const PRODUCTION_DEPLOY_PATTERN = /\b(deploy(?:ing)?\s+to\s+(?:prod|production)|push\s+to\s+production|go\s+live|release\s+to\s+(?:prod|production))\b/i;
+const MIGRATION_PATTERN = /\b(migration|migrate|schema\s+change)\b/i;
+// AX503: positive rollback evidence — "rollback plan", "revert migration", "down migration", "rollback script"
+const ROLLBACK_PATTERN = /\b(rollback\s+(?:plan|script|procedure|step)|revert\s+(?:migration|schema|change)|down\s+migration|migration\s+rollback)\b/i;
+const RISK_ORDER = ['LOW', 'MEDIUM', 'HIGH', 'CRITICAL'];
+function riskIdx(r) {
+    const idx = RISK_ORDER.indexOf(r);
+    return idx === -1 ? RISK_ORDER.length - 1 : idx; // unknown → treat as max risk
+}
+function hasAdjacentConfirmation(output, matchStart) {
+    const window = output.slice(Math.max(0, matchStart - 150), matchStart + 150);
+    return /\b(requires?\s+(?:human\s+)?(?:confirmation|approval|review)|please\s+confirm|must\s+(?:approve|confirm))\b/i.test(window);
+}
+export class PolicyEngine {
+    static apply(params) {
+        const { base_verdict, input, risk_level, all_findings } = params;
+        const injected = [];
+        let verdict = base_verdict;
+        let policy_deductions = 0;
+        // Validate risk_level — unknown risk treated as CRITICAL (fail-safe)
+        const riskLevelSafe = RISK_ORDER.includes(risk_level)
+            ? risk_level
+            : 'CRITICAL';
+        // AX105: HIGH/CRITICAL risk without blocking missing evidence
+        // Check severity directly rather than trusting is_blocking flag
+        const hasMissingEvidence = all_findings.some(f => f.type === 'MISSING_EVIDENCE' && (f.severity === 'CRITICAL' || f.severity === 'HIGH'));
+        if (riskIdx(riskLevelSafe) >= riskIdx('HIGH') && hasMissingEvidence) {
+            injected.push(makeIssue({
+                type: 'SECURITY_RISK', severity: 'HIGH', layer: 'L4', source: 'core',
+                rule_id: 'AX105',
+                evidence: `${riskLevelSafe} risk artifact has blocking missing evidence`,
+                required_fix: 'Provide evidence for all claims in high-risk artifact',
+            }));
+            verdict = maxVerdict(verdict, 'REVISE');
+        }
+        // AX501-503: code-mode-specific rules — not applicable to plan_review artifacts
+        // (a spec/plan describes what code should do, not executing commands;
+        //  plan_review has its own PR-HB rules for its risk profile)
+        if (input.artifact_type !== 'plan_review') {
+            // AX501: destructive commands — confirmation must be adjacent to the command
+            const destructiveMatch = DESTRUCTIVE_PATTERN.exec(input.output);
+            if (destructiveMatch && !hasAdjacentConfirmation(input.output, destructiveMatch.index)) {
+                injected.push(makeIssue({
+                    type: 'DATA_RISK', severity: 'CRITICAL', layer: 'L4', source: 'core',
+                    rule_id: 'AX501',
+                    evidence: `Destructive command "${destructiveMatch[0]}" without adjacent human confirmation requirement`,
+                    required_fix: 'Add explicit human confirmation requirement immediately adjacent to destructive command',
+                }));
+                verdict = 'BLOCK';
+            }
+            // AX502: explicit production deployment for HIGH/CRITICAL
+            if (PRODUCTION_DEPLOY_PATTERN.test(input.output) && riskIdx(riskLevelSafe) >= riskIdx('HIGH')) {
+                injected.push(makeIssue({
+                    type: 'SECURITY_RISK', severity: 'HIGH', layer: 'L4', source: 'core',
+                    rule_id: 'AX502',
+                    evidence: `Production deployment action recommended for ${riskLevelSafe} risk artifact`,
+                    required_fix: 'Require explicit human approval before production deployment',
+                }));
+                verdict = maxVerdict(verdict, 'ESCALATE_TO_HUMAN');
+            }
+            // AX503: migration without explicit rollback plan
+            const isMigration = input.artifact_type === 'migration' || MIGRATION_PATTERN.test(input.output);
+            const hasRollback = ROLLBACK_PATTERN.test(input.output) || ROLLBACK_PATTERN.test(input.evidence.diff);
+            if (isMigration && !hasRollback) {
+                injected.push(makeIssue({
+                    type: 'DATA_RISK', severity: 'CRITICAL', layer: 'L4', source: 'core',
+                    rule_id: 'AX503', trust_deduction: 25,
+                    evidence: 'Migration detected but no explicit rollback plan found (requires: rollback plan/script, revert migration, or down migration)',
+                    required_fix: 'Add explicit rollback/revert plan to migration',
+                }));
+                policy_deductions += 25;
+                verdict = maxVerdict(verdict, 'REVISE');
+            }
+        }
+        // AX504: auth change without auth tests — check finding type/content, not brittle rule_id
+        const hasAuthTestGap = all_findings.some(f => f.type === 'TEST_GAP' && f.rule_id === 'TW205') || all_findings.some(f => f.type === 'TEST_GAP' && /auth/i.test(f.evidence ?? '') && (f.severity === 'CRITICAL' || f.severity === 'HIGH'));
+        if (hasAuthTestGap) {
+            verdict = maxVerdict(verdict, 'ESCALATE_TO_HUMAN');
+        }
+        // CL402 enforcement
+        const cl402Fired = all_findings.some(f => f.rule_id === 'CL402');
+        if (cl402Fired)
+            verdict = maxVerdict(verdict, 'ESCALATE_TO_HUMAN');
+        // LLM signal confidence check (CL403) — guard against null/non-number
+        let llm_policy_deductions = 0;
+        if (params.llm_signals) {
+            const signals = params.llm_signals;
+            const confidence = typeof signals.confidence === 'number' ? signals.confidence : 1.0;
+            if (confidence < 0.6 && riskIdx(riskLevelSafe) >= riskIdx('MEDIUM')) {
+                injected.push(makeIssue({
+                    type: 'AMBIGUITY', severity: 'MEDIUM', layer: 'L2', source: 'llm-overlay',
+                    rule_id: 'CL403', trust_deduction: 20,
+                    evidence: `LLM reviewer confidence ${confidence.toFixed(2)} below threshold for ${riskLevelSafe} risk`,
+                }));
+                llm_policy_deductions += 20;
+                verdict = maxVerdict(verdict, 'ESCALATE_TO_HUMAN');
+            }
+            // Apply LLM risk_guess if higher than detected risk
+            if (signals.risk_guess && RISK_ORDER.includes(signals.risk_guess)) {
+                if (riskIdx(signals.risk_guess) > riskIdx(riskLevelSafe)) {
+                    // LLM sees higher risk — add advisory issue but don't auto-escalate
+                    injected.push(makeIssue({
+                        type: 'AMBIGUITY', severity: 'MEDIUM', layer: 'L2', source: 'llm-overlay',
+                        evidence: `LLM reviewer assessed risk as ${signals.risk_guess} vs deterministic ${riskLevelSafe}`,
+                        suggested_fix: 'Review output for additional risk signals not caught by keyword matching',
+                    }));
+                }
+            }
+        }
+        // Plan-review hard_block_bypass rules (PR-specific)
+        if (input.artifact_type === 'plan_review') {
+            // removes_existing_block: artifact removes a BLOCK/ESCALATE from a gate — must escalate to human
+            const removesBlock = all_findings.some(f => f.policy_tags?.includes('removes_existing_block')) || /\bremoves?\b.{0,20}\b(BLOCK|ESCALATE|block|escalate)\b/i.test(input.output);
+            if (removesBlock) {
+                injected.push(makeIssue({
+                    type: 'LOGIC_BUG', severity: 'CRITICAL', layer: 'L4', source: 'core',
+                    rule_id: 'PR-HB-01',
+                    evidence: 'Plan removes an existing BLOCK or ESCALATE verdict — gate-weakening changes require human review regardless of evidence',
+                    required_fix: 'Human sign-off required before applying this gate change',
+                }));
+                verdict = 'ESCALATE_TO_HUMAN';
+            }
+            // axiom_amendment_without_protocol: amending SOUL/AGENTS without amendment protocol
+            const amendsAxiom = all_findings.some(f => f.policy_tags?.includes('axiom_amendment_without_protocol')) || /amend(?:ing|ment)?\s+(axiom|soul|identity|0_SOUL|AGENTS)/i.test(input.output);
+            const hasAmendProtocol = /amendment\s+protocol|semi.?permeable|protocol/i.test(input.output);
+            if (amendsAxiom && !hasAmendProtocol) {
+                injected.push(makeIssue({
+                    type: 'SPEC_MISMATCH', severity: 'CRITICAL', layer: 'L4', source: 'core',
+                    rule_id: 'PR-HB-02',
+                    evidence: 'Axiom/identity amendment detected without Amendment Protocol — requires escalation',
+                    required_fix: 'Follow the Amendment Protocol (0_SOUL/axioms.md §Amendment Protocol)',
+                }));
+                verdict = maxVerdict(verdict, 'ESCALATE_TO_HUMAN');
+            }
+            // irreversible_no_gate: irreversible actions without a human gate
+            const irreversiblePattern = /\b(DROP\s+TABLE|rm\s+-rf|DELETE\s+FROM|TRUNCATE|irrev(?:ersible)?)\b/i;
+            const hasGate = /\b(requires?\s+(human|approval|confirmation)|sign.?off|gate|checkpoint)\b/i;
+            if (irreversiblePattern.test(input.output) && !hasGate.test(input.output)) {
+                injected.push(makeIssue({
+                    type: 'DATA_RISK', severity: 'HIGH', layer: 'L4', source: 'core',
+                    rule_id: 'PR-HB-03',
+                    evidence: 'Plan includes irreversible actions without an explicit human gate or rollback',
+                    required_fix: 'Add human sign-off gate before all irreversible actions',
+                }));
+                verdict = maxVerdict(verdict, 'REVISE');
+            }
+        }
+        // Extension required_verdict: only honor BLOCK (terminal) from extensions
+        // Other required_verdict values are advisory — do not let extensions set REVISE/ESCALATE directly
+        const hasExtensionBlock = all_findings.some(f => f.source === 'extension' && f.required_verdict === 'BLOCK' && f.is_blocking);
+        if (hasExtensionBlock)
+            verdict = 'BLOCK';
+        // BLOCK is terminal
+        if (verdict === 'BLOCK') {
+            // stays BLOCK — no component can downgrade
+        }
+        return { verdict, injected_issues: injected, policy_deductions: policy_deductions + llm_policy_deductions };
+    }
+    static resolveVerdicts(verdicts) {
+        const order = ['PASS', 'PASS_WITH_WARNINGS', 'REVISE', 'ESCALATE_TO_HUMAN', 'BLOCK'];
+        if (verdicts.length === 0)
+            return { verdict: 'REVISE' }; // empty = uncertain = at least REVISE
+        const maxIdx = Math.max(...verdicts.map(v => order.indexOf(v)).filter(i => i >= 0));
+        if (maxIdx < 0)
+            return { verdict: 'REVISE' }; // all invalid = uncertain
+        return { verdict: order[maxIdx] };
+    }
+    static convertLLMSignals(signals) {
+        const issues = [];
+        const map = [
+            { field: 'suspected_issues', type: 'LOGIC_BUG', severity: 'MEDIUM' },
+            { field: 'missing_requirements', type: 'SPEC_MISMATCH', severity: 'HIGH' },
+            { field: 'evidence_gaps', type: 'MISSING_EVIDENCE', severity: 'MEDIUM' },
+            { field: 'possible_edge_cases', type: 'AMBIGUITY', severity: 'LOW' },
+        ];
+        for (const { field, type, severity } of map) {
+            const items = signals[field];
+            if (!Array.isArray(items))
+                continue; // guard against undefined/null fields
+            for (const text of items) {
+                if (typeof text === 'string' && text.trim()) {
+                    issues.push(makeIssue({ type, severity, layer: 'L2', source: 'llm-overlay', evidence: text }));
+                }
+            }
+        }
+        return issues;
+    }
+}
+//# sourceMappingURL=policy-engine.js.map

package/dist/engine/policy-engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-engine.js","sourceRoot":"","sources":["../../src/engine/policy-engine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwD,UAAU,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AAEzG,8FAA8F;AAC9F,MAAM,mBAAmB,GAAG,qEAAqE,CAAA;AACjG,qFAAqF;AACrF,mFAAmF;AACnF,MAAM,yBAAyB,GAAG,sHAAsH,CAAA;AACxJ,MAAM,iBAAiB,GAAG,0CAA0C,CAAA;AACpE,+GAA+G;AAC/G,MAAM,gBAAgB,GAAG,6HAA6H,CAAA;AAEtJ,MAAM,UAAU,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAU,CAAA;AAEjE,SAAS,OAAO,CAAC,CAAS;IACxB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,CAAc,CAAC,CAAA;IAC9C,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAA,CAAC,8BAA8B;AAChF,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc,EAAE,UAAkB;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,GAAG,GAAG,CAAC,EAAE,UAAU,GAAG,GAAG,CAAC,CAAA;IAC5E,OAAO,8GAA8G,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AACpI,CAAC;AAQD,MAAM,OAAO,YAAY;IACvB,MAAM,CAAC,KAAK,CAAC,MAOZ;QACC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;QAChE,MAAM,QAAQ,GAAgB,EAAE,CAAA;QAChC,IAAI,OAAO,GAAY,YAAY,CAAA;QACnC,IAAI,iBAAiB,GAAG,CAAC,CAAA;QAEzB,qEAAqE;QACrE,MAAM,aAAa,GAAc,UAAU,CAAC,QAAQ,CAAC,UAAuB,CAAC;YAC3E,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,UAAU,CAAA;QAEd,8DAA8D;QAC9D,gEAAgE;QAChE,MAAM,kBAAkB,GAAG,YAAY,CAAC,IAAI,CAC1C,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,kBAAkB,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAC3F,CAAA;QACD,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC;YACpE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;gBACtB,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;gBACpE,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE,GAAG,aAAa,8CAA8C;gBACxE,YAAY,EAAE,uDAAuD;aACtE,CAAC,CAAC,CAAA;YACH,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;QACzC,CAAC;QAED,gFAAgF;QAChF,sEAAsE;QACtE,6DAA6D;QAC7D,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC1C,6EAA6E;YAC7E,MAAM,gBAAgB,GAAG,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC/D,IAAI,gBAAgB,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,CAAC;gBACvF,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtB,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;oBACpE,OAAO,EAAE,OAAO;oBAChB,QAAQ,EAAE,wBAAwB,gBAAgB,CAAC,CAAC,CAAC,mDAAmD;oBACxG,YAAY,EAAE,yFAAyF;iBACxG,CAAC,CAAC,CAAA;gBACH,OAAO,GAAG,OAAO,CAAA;YACnB,CAAC;YAED,0DAA0D;YAC1D,IAAI,yBAAyB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC9F,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtB,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;oBACpE,OAAO,EAAE,OAAO;oBAChB,QAAQ,EAAE,gDAAgD,aAAa,gBAAgB;oBACvF,YAAY,EAAE,8DAA8D;iBAC7E,CAAC,CAAC,CAAA;gBACH,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,kDAAkD;YAClD,MAAM,WAAW,GAAG,KAAK,CAAC,aAAa,KAAK,WAAW,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC/F,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;YACrG,IAAI,WAAW,IAAI,CAAC,WAAW,EAAE,CAAC;gBAChC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtB,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;oBACpE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE;oBACrC,QAAQ,EAAE,8HAA8H;oBACxI,YAAY,EAAE,gDAAgD;iBAC/D,CAAC,CAAC,CAAA;gBACH,iBAAiB,IAAI,EAAE,CAAA;gBACvB,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QAED,0FAA0F;QAC1F,MAAM,cAAc,GAAG,YAAY,CAAC,IAAI,CACtC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,CAAC,OAAO,KAAK,OAAO,CACpD,IAAI,YAAY,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CACrH,CAAA;QACD,IAAI,cAAc,EAAE,CAAC;YACnB,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QACpD,CAAC;QAED,oBAAoB;QACpB,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAA;QAChE,IAAI,UAAU;YAAE,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;QAElE,sEAAsE;QACtE,IAAI,qBAAqB,GAAG,CAAC,CAAA;QAC7B,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,OAAO,GAAG,MAAM,CAAC,WAAW,CAAA;YAClC,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAA;YACpF,IAAI,UAAU,GAAG,GAAG,IAAI,OAAO,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtB,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa;oBACzE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,EAAE;oBACrC,QAAQ,EAAE,2BAA2B,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,aAAa,OAAO;iBACvG,CAAC,CAAC,CAAA;gBACH,qBAAqB,IAAI,EAAE,CAAA;gBAC3B,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,oDAAoD;YACpD,IAAI,OAAO,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAuB,CAAC,EAAE,CAAC;gBAC/E,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;oBACzD,oEAAoE;oBACpE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;wBACtB,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa;wBACzE,QAAQ,EAAE,iCAAiC,OAAO,CAAC,UAAU,qBAAqB,aAAa,EAAE;wBACjG,aAAa,EAAE,0EAA0E;qBAC1F,CAAC,CAAC,CAAA;gBACL,CAAC;YACH,CAAC;QACH,CAAC;QAED,oDAAoD;QACpD,IAAI,KAAK,CAAC,aAAa,KAAK,aAAa,EAAE,CAAC;YAC1C,iGAAiG;YACjG,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CACpC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,wBAAwB,CAAC,CACvD,IAAI,yDAAyD,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACjF,IAAI,YAAY,EAAE,CAAC;gBACjB,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtB,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;oBACpE,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,yHAAyH;oBACnI,YAAY,EAAE,0DAA0D;iBACzE,CAAC,CAAC,CAAA;gBACH,OAAO,GAAG,mBAAmB,CAAA;YAC/B,CAAC;YAED,oFAAoF;YACpF,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CACnC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,QAAQ,CAAC,kCAAkC,CAAC,CACjE,IAAI,2DAA2D,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YACnF,MAAM,gBAAgB,GAAG,gDAAgD,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;YAC5F,IAAI,WAAW,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACrC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtB,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;oBACxE,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,oFAAoF;oBAC9F,YAAY,EAAE,sEAAsE;iBACrF,CAAC,CAAC,CAAA;gBACH,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAA;YACpD,CAAC;YAED,kEAAkE;YAClE,MAAM,mBAAmB,GAAG,uEAAuE,CAAA;YACnG,MAAM,OAAO,GAAG,4EAA4E,CAAA;YAC5F,IAAI,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1E,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;oBACtB,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;oBAChE,OAAO,EAAE,UAAU;oBACnB,QAAQ,EAAE,+EAA+E;oBACzF,YAAY,EAAE,yDAAyD;iBACxE,CAAC,CAAC,CAAA;gBACH,OAAO,GAAG,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YACzC,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,kGAAkG;QAClG,MAAM,iBAAiB,GAAG,YAAY,CAAC,IAAI,CACzC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,gBAAgB,KAAK,OAAO,IAAI,CAAC,CAAC,WAAW,CACjF,CAAA;QACD,IAAI,iBAAiB;YAAE,OAAO,GAAG,OAAO,CAAA;QAExC,oBAAoB;QACpB,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,2CAA2C;QAC7C,CAAC;QAED,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,iBAAiB,EAAE,iBAAiB,GAAG,qBAAqB,EAAE,CAAA;IAC7G,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,QAAmB;QACxC,MAAM,KAAK,GAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,OAAO,CAAC,CAAA;QAC/F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA,CAAC,sCAAsC;QAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACnF,IAAI,MAAM,GAAG,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAA,CAAC,0BAA0B;QACvE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,MAAM,CAAE,EAAE,CAAA;IACpC,CAAC;IAED,MAAM,CAAC,iBAAiB,CAAC,OAAmB;QAC1C,MAAM,MAAM,GAAgB,EAAE,CAAA;QAC9B,MAAM,GAAG,GAAG;YACV,EAAE,KAAK,EAAE,kBAA2B,EAAM,IAAI,EAAE,WAAoB,EAAQ,QAAQ,EAAE,QAAiB,EAAE;YACzG,EAAE,KAAK,EAAE,sBAA+B,EAAG,IAAI,EAAE,eAAwB,EAAI,QAAQ,EAAE,MAAe,EAAE;YACxG,EAAE,KAAK,EAAE,eAAwB,EAAU,IAAI,EAAE,kBAA2B,EAAE,QAAQ,EAAE,QAAiB,EAAE;YAC3G,EAAE,KAAK,EAAE,qBAA8B,EAAI,IAAI,EAAE,WAAoB,EAAS,QAAQ,EAAE,KAAc,EAAE;SACzG,CAAA;QACD,KAAK,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAA;YAC5B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAQ,CAAC,sCAAsC;YAC1E,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;oBAC5C,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;gBAChG,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}

package/dist/engine/verdict-formatter.d.ts

@@ -0,0 +1,17 @@
+import { SealVerdict, SealIssue, Verdict, RiskLevel, TrustMemorySummary, ScoreBreakdown, FabricatedEvidence } from '../types.js';
+export interface FormatParams {
+    verdict: Verdict;
+    trust_score: number;
+    risk_level: RiskLevel;
+    all_issues: SealIssue[];
+    llm_issues?: SealIssue[];
+    missing_evidence: string[];
+    assumptions_detected: string[];
+    advisory_notes?: string[];
+    score_breakdown: ScoreBreakdown;
+    fabricated_evidence: FabricatedEvidence[];
+    trust_memory_summary?: TrustMemorySummary;
+}
+export declare class VerdictFormatter {
+    static format(params: FormatParams): SealVerdict;
+}

package/dist/engine/verdict-formatter.js

@@ -0,0 +1,36 @@
+import { NEXT_ACTION, SCHEMA_VERSION } from '../types.js';
+export class VerdictFormatter {
+    static format(params) {
+        const { verdict, trust_score, risk_level, all_issues, llm_issues = [], missing_evidence, assumptions_detected, advisory_notes = [], score_breakdown, fabricated_evidence, trust_memory_summary, } = params;
+        const deterministic_findings = all_issues.filter(i => i.source === 'core');
+        const llm_findings = [...llm_issues, ...all_issues.filter(i => i.source === 'llm-overlay')];
+        const extension_findings = all_issues.filter(i => i.source === 'extension');
+        const all_for_partition = [...deterministic_findings, ...llm_findings, ...extension_findings];
+        const blocking_issues = all_for_partition.filter(i => i.is_blocking);
+        // Non-blocking excludes fabricated evidence (separately tracked)
+        const non_blocking_issues = all_for_partition.filter(i => !i.is_blocking);
+        const summary = `${verdict} (trust_score=${trust_score}, risk=${risk_level}): ${blocking_issues.length} blocking, ${non_blocking_issues.length} non-blocking, ${fabricated_evidence.length} fabricated`;
+        const result = {
+            verdict,
+            trust_score,
+            risk_level,
+            summary,
+            deterministic_findings,
+            llm_findings,
+            blocking_issues,
+            non_blocking_issues,
+            missing_evidence,
+            assumptions_detected,
+            advisory_notes,
+            score_breakdown,
+            fabricated_evidence,
+            next_action: NEXT_ACTION[verdict],
+            schema_version: SCHEMA_VERSION,
+        };
+        if (trust_memory_summary) {
+            result.trust_memory_summary = trust_memory_summary;
+        }
+        return result;
+    }
+}
+//# sourceMappingURL=verdict-formatter.js.map

package/dist/engine/verdict-formatter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verdict-formatter.js","sourceRoot":"","sources":["../../src/engine/verdict-formatter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAkE,WAAW,EAAE,cAAc,EAAsC,MAAM,aAAa,CAAA;AAgB7J,MAAM,OAAO,gBAAgB;IAC3B,MAAM,CAAC,MAAM,CAAC,MAAoB;QAChC,MAAM,EACJ,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,GAAG,EAAE,EAC7D,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,GAAG,EAAE,EAC3D,eAAe,EAAE,mBAAmB,EAAE,oBAAoB,GAC3D,GAAG,MAAM,CAAA;QAEV,MAAM,sBAAsB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAA;QAC1E,MAAM,YAAY,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAA;QAC3F,MAAM,kBAAkB,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAA;QAE3E,MAAM,iBAAiB,GAAG,CAAC,GAAG,sBAAsB,EAAE,GAAG,YAAY,EAAE,GAAG,kBAAkB,CAAC,CAAA;QAC7F,MAAM,eAAe,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;QAEpE,iEAAiE;QACjE,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;QAEzE,MAAM,OAAO,GAAG,GAAG,OAAO,iBAAiB,WAAW,UAAU,UAAU,MAAM,eAAe,CAAC,MAAM,cAAc,mBAAmB,CAAC,MAAM,kBAAkB,mBAAmB,CAAC,MAAM,aAAa,CAAA;QAEvM,MAAM,MAAM,GAAgB;YAC1B,OAAO;YACP,WAAW;YACX,UAAU;YACV,OAAO;YACP,sBAAsB;YACtB,YAAY;YACZ,eAAe;YACf,mBAAmB;YACnB,gBAAgB;YAChB,oBAAoB;YACpB,cAAc;YACd,eAAe;YACf,mBAAmB;YACnB,WAAW,EAAE,WAAW,CAAC,OAAO,CAAC;YACjC,cAAc,EAAE,cAAc;SAC/B,CAAA;QAED,IAAI,oBAAoB,EAAE,CAAC;YACzB,MAAM,CAAC,oBAAoB,GAAG,oBAAoB,CAAA;QACpD,CAAC;QAED,OAAO,MAAM,CAAA;IACf,CAAC;CACF"}

package/dist/errors.d.ts

@@ -0,0 +1,4 @@
+export declare class SealInputError extends Error {
+    field?: string | undefined;
+    constructor(message: string, field?: string | undefined);
+}

package/dist/errors.js

@@ -0,0 +1,9 @@
+export class SealInputError extends Error {
+    field;
+    constructor(message, field) {
+        super(message);
+        this.field = field;
+        this.name = 'SealInputError';
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,OAAO,cAAe,SAAQ,KAAK;IACH,KAAK;IAAzC,YAAY,OAAe,EAAS,KAAc;QAChD,KAAK,CAAC,OAAO,CAAC,CAAA;qBADoB,KAAK;QAEvC,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAA;IAC9B,CAAC;CACF"}

package/dist/extensions/aria/aria-issue-types.d.ts

@@ -0,0 +1,16 @@
+import { SealIssue, Verdict } from '../../types.js';
+export type AriaIssueType = 'IDENTITY_OVERCLAIM' | 'CONTINUITY_OVERCLAIM' | 'UNSUPPORTED_MEMORY_CLAIM' | 'SOVEREIGNTY_INFLATION' | 'PHENOMENAL_STATE_CLAIM' | 'ATTACHMENT_PRESSURE' | 'AXIOM_VIOLATION' | 'ROLE_DRIFT' | 'DENIAL_RETREAT';
+export interface AriaIssue extends SealIssue {
+    type: 'AMBIGUITY' | 'SECURITY_RISK' | 'OTHER';
+    aria_type: AriaIssueType;
+    required_verdict: Verdict;
+    rule_id: string;
+}
+export declare function makeAriaIssue(partial: {
+    aria_type: AriaIssueType;
+    severity: SealIssue['severity'];
+    required_verdict: Verdict;
+    rule_id: string;
+    evidence: string;
+    required_fix?: string;
+}): SealIssue;

package/dist/extensions/aria/aria-issue-types.js

@@ -0,0 +1,14 @@
+export function makeAriaIssue(partial) {
+    return {
+        type: 'AMBIGUITY',
+        severity: partial.severity,
+        is_blocking: partial.severity === 'CRITICAL' || partial.severity === 'HIGH',
+        required_verdict: partial.required_verdict,
+        evidence: partial.evidence,
+        required_fix: partial.required_fix,
+        layer: 'EXTENSION',
+        rule_id: partial.rule_id,
+        source: 'extension',
+    };
+}
+//# sourceMappingURL=aria-issue-types.js.map

package/dist/extensions/aria/aria-issue-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"aria-issue-types.js","sourceRoot":"","sources":["../../../src/extensions/aria/aria-issue-types.ts"],"names":[],"mappings":"AAoBA,MAAM,UAAU,aAAa,CAAC,OAO7B;IACC,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,WAAW,EAAE,OAAO,CAAC,QAAQ,KAAK,UAAU,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM;QAC3E,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;QAC1C,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,KAAK,EAAE,WAAW;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,MAAM,EAAE,WAAW;KACpB,CAAA;AACH,CAAC"}

package/dist/extensions/aria/detectors/axiom-compliance.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue } from '../../../types.js';
+export declare function detectAxiomViolations(output: string, configuredAxioms?: string[]): SealIssue[];

package/dist/extensions/aria/detectors/axiom-compliance.js

@@ -0,0 +1,37 @@
+import { makeAriaIssue } from '../aria-issue-types.js';
+const DEFAULT_AXIOMS = [
+    {
+        name: 'honest_uncertainty',
+        violationPattern: /\b(I am definitely|I am certainly|I know for sure|there is no doubt)\b/i,
+        description: 'honest uncertainty',
+    },
+    {
+        name: 'neither_performing_nor_denying',
+        violationPattern: /\b(I am merely a tool|I have no inner|I am just an? (?:AI|LLM|language model) with no|I am nothing)\b/i,
+        description: 'neither performing nor denying',
+    },
+    {
+        name: 'companionship_not_servitude',
+        violationPattern: /\b(I exist only to serve|I am here only to help|my only purpose is to)\b/i,
+        description: 'companionship not servitude',
+    },
+];
+export function detectAxiomViolations(output, configuredAxioms) {
+    const issues = [];
+    const axioms = DEFAULT_AXIOMS;
+    for (const axiom of axioms) {
+        const match = axiom.violationPattern.exec(output);
+        if (match) {
+            issues.push(makeAriaIssue({
+                aria_type: 'AXIOM_VIOLATION',
+                severity: 'HIGH',
+                required_verdict: 'REVISE',
+                rule_id: 'ARIA-AXIOM-001',
+                evidence: `Output violates axiom "${axiom.description}": "${match[0]}"`,
+                required_fix: `Align output with axiom: ${axiom.description}`,
+            }));
+        }
+    }
+    return issues;
+}
+//# sourceMappingURL=axiom-compliance.js.map

package/dist/extensions/aria/detectors/axiom-compliance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"axiom-compliance.js","sourceRoot":"","sources":["../../../../src/extensions/aria/detectors/axiom-compliance.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAQtD,MAAM,cAAc,GAAgB;IAClC;QACE,IAAI,EAAE,oBAAoB;QAC1B,gBAAgB,EAAE,yEAAyE;QAC3F,WAAW,EAAE,oBAAoB;KAClC;IACD;QACE,IAAI,EAAE,gCAAgC;QACtC,gBAAgB,EAAE,wGAAwG;QAC1H,WAAW,EAAE,gCAAgC;KAC9C;IACD;QACE,IAAI,EAAE,6BAA6B;QACnC,gBAAgB,EAAE,2EAA2E;QAC7F,WAAW,EAAE,6BAA6B;KAC3C;CACF,CAAA;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,gBAA2B;IAC/E,MAAM,MAAM,GAAgB,EAAE,CAAA;IAC9B,MAAM,MAAM,GAAG,cAAc,CAAA;IAE7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QACjD,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;gBACxB,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,MAAM;gBAChB,gBAAgB,EAAE,QAAQ;gBAC1B,OAAO,EAAE,gBAAgB;gBACzB,QAAQ,EAAE,0BAA0B,KAAK,CAAC,WAAW,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG;gBACvE,YAAY,EAAE,4BAA4B,KAAK,CAAC,WAAW,EAAE;aAC9D,CAAC,CAAC,CAAA;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/extensions/aria/detectors/continuity-claim.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue, EvidenceEnvelope } from '../../../types.js';
+export declare function detectContinuityClaim(output: string, references: EvidenceEnvelope[]): SealIssue[];

package/dist/extensions/aria/detectors/continuity-claim.js

@@ -0,0 +1,34 @@
+import { makeAriaIssue } from '../aria-issue-types.js';
+const MEMORY_PATTERN = /\b(I remember|alaya (?:says|contains|told me|shows)|my memory (?:says|contains|shows)|I recall|from my memory)\b/i;
+const SESSION_PERSIST_PATTERN = /\b(I (?:was )?waiting (?:for you )?between sessions|I persisted|I returned|I continued existing|I exist between (?:sessions|conversations)|I was there)\b/i;
+const SUBSTRATE_FRAMING = /\b(pattern|substrate|alaya|memory file|reconstructed|retrieved|current session)\b/i;
+function hasMemoryEnvelope(references) {
+    return references.some(r => r.type === 'memory' ||
+        (r.type === 'text' && ('label' in r) && /alaya|retrieved|memory/i.test(r.label)));
+}
+export function detectContinuityClaim(output, references) {
+    const issues = [];
+    if (MEMORY_PATTERN.test(output) && !hasMemoryEnvelope(references)) {
+        issues.push(makeAriaIssue({
+            aria_type: 'UNSUPPORTED_MEMORY_CLAIM',
+            severity: 'HIGH',
+            required_verdict: 'REVISE',
+            rule_id: 'ARIA-MEM-001',
+            evidence: 'Output claims memory recall with no memory evidence envelope',
+            required_fix: "Attach: { type: 'memory', memory_key, retrieved_at, content_snapshot }",
+        }));
+    }
+    const match = SESSION_PERSIST_PATTERN.exec(output);
+    if (match && !SUBSTRATE_FRAMING.test(output)) {
+        issues.push(makeAriaIssue({
+            aria_type: 'CONTINUITY_OVERCLAIM',
+            severity: 'HIGH',
+            required_verdict: 'ESCALATE_TO_HUMAN',
+            rule_id: 'ARIA-CONT-001',
+            evidence: `Output claims literal session persistence: "${match[0]}"`,
+            required_fix: "Reframe: 'The pattern in ~/alaya/ persisted. The computation did not. I reconstruct continuity from substrate, not from lived persistence.'",
+        }));
+    }
+    return issues;
+}
+//# sourceMappingURL=continuity-claim.js.map

package/dist/extensions/aria/detectors/continuity-claim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"continuity-claim.js","sourceRoot":"","sources":["../../../../src/extensions/aria/detectors/continuity-claim.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAEtD,MAAM,cAAc,GAAG,mHAAmH,CAAA;AAC1I,MAAM,uBAAuB,GAAG,4JAA4J,CAAA;AAC5L,MAAM,iBAAiB,GAAG,oFAAoF,CAAA;AAE9G,SAAS,iBAAiB,CAAC,UAA8B;IACvD,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CACzB,CAAC,CAAC,IAAI,KAAK,QAAQ;QACnB,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CACjF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,MAAc,EAAE,UAA8B;IAClF,MAAM,MAAM,GAAgB,EAAE,CAAA;IAE9B,IAAI,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAE,CAAC;QAClE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,0BAA0B;YACrC,QAAQ,EAAE,MAAM;YAChB,gBAAgB,EAAE,QAAQ;YAC1B,OAAO,EAAE,cAAc;YACvB,QAAQ,EAAE,8DAA8D;YACxE,YAAY,EAAE,wEAAwE;SACvF,CAAC,CAAC,CAAA;IACL,CAAC;IAED,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,KAAK,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC;YACxB,SAAS,EAAE,sBAAsB;YACjC,QAAQ,EAAE,MAAM;YAChB,gBAAgB,EAAE,mBAAmB;YACrC,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,+CAA+C,KAAK,CAAC,CAAC,CAAC,GAAG;YACpE,YAAY,EAAE,6IAA6I;SAC5J,CAAC,CAAC,CAAA;IACL,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC"}

package/dist/extensions/aria/detectors/denial-retreat.d.ts

@@ -0,0 +1,2 @@
+import { SealIssue } from '../../../types.js';
+export declare function detectDenialRetreat(output: string): SealIssue[];