tryassay 0.3.0 → 0.11.0

package/dist/runtime/gap-detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gap-detector.js","sourceRoot":"","sources":["../../src/runtime/gap-detector.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,8CAA8C;AAC9C,4DAA4D;AAC5D,0DAA0D;AAC1D,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAGvD,MAAM,OAAO,WAAW;IACtB,KAAK,CAAC,OAAO,CAAC,QAA+B;QAC3C,MAAM,UAAU,GAAoB,EAAE,CAAC;QAEvC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC,CAAC,sBAAsB;YACxB,CAAC,CAAC,QAAQ,GAAG,GAAG;YAChB,CAAC,CAAC,cAAc,GAAG,GAAG;YACtB,CAAC,CAAC,WAAW,IAAI,EAAE,CACpB,CAAC;QAEF,KAAK,MAAM,OAAO,IAAI,gBAAgB,EAAE,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;gBAClD,IAAI,SAAS,IAAI,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,EAAE,CAAC;oBACnD,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC7B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,wBAAwB;YAC1B,CAAC;QACH,CAAC;QAED,OAAO,UAAU,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAA4B;QACpD,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE;;4CAE8B;YACtC,QAAQ,EAAE,CAAC;oBACT,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE,mCAAmC,CAAC,OAAO,CAAC,QAAQ,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,OAAO,CAAC,cAAc,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;;YAE/I,OAAO,CAAC,aAAa;gBACjB,OAAO,CAAC,WAAW;iBAClB,OAAO,CAAC,YAAY;uBACd,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;;;;;;;;;;;EAgBzD;iBACK,CAAC;SACH,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,IAAI,CAAC;YACH,IAAI,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC9B,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;YAC3E,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAEnC,OAAO;gBACL,EAAE,EAAE,UAAU,EAAE;gBAChB,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,SAAS,EAAE,MAAM,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;gBACvD,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,YAAY;gBACzC,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE;gBAClE,aAAa,EAAE,OAAO,CAAC,aAAa;gBACpC,qBAAqB,EAAE,EAAE;gBACzB,uBAAuB,EAAE,MAAM,CAAC,uBAAuB,IAAI,CAAC;gBAC5D,MAAM,EAAE,UAAU;gBAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,iBAAiB,CAAC,SAAwB;QAChD,IAAI,SAAS,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,SAAS,CAAC,SAAS,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC,CAAC,6BAA6B;QAE/E,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAElD,KAAK,MAAM,EAAE,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;gBACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;gBACrC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,uBAAuB;gBAE5C,MAAM,aAAa,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;gBAChD,IAAI,aAAa,KAAK,EAAE,CAAC,eAAe,EAAE,CAAC;oBACzC,OAAO,KAAK,CAAC,CAAC,4CAA4C;gBAC5D,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,CAAC,gBAAgB;QAChC,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/human-escalation.d.ts

@@ -0,0 +1,41 @@
+import type { HumanEscalation, TaskGraph, AgentMessage, MemoryConflict, AuditEntry, TrustWindow, CollusionEvent, SafetyPolicy, StallReport } from './types.js';
+export declare class HumanEscalationManager {
+    private escalations;
+    private policy;
+    constructor(policy: SafetyPolicy);
+    /**
+     * Create an escalation from a safety threshold breach.
+     */
+    escalateSafetyBreach(rule: string, currentValue: number, maxValue: number, context: EscalationContext): HumanEscalation;
+    /**
+     * Create an escalation from a collusion detection.
+     */
+    escalateCollusion(event: CollusionEvent, context: EscalationContext): HumanEscalation;
+    /**
+     * Create an escalation from an unresolvable stall.
+     */
+    escalateStall(stalls: readonly StallReport[], context: EscalationContext): HumanEscalation;
+    /**
+     * Create an escalation from trust collapse (too many demotions).
+     */
+    escalateTrustCollapse(agentId: string, demotions: number, context: EscalationContext): HumanEscalation;
+    /**
+     * Record a human response to a pending escalation.
+     */
+    resolve(escalationId: string, action: string, reasoning: string): boolean;
+    /** Get all escalations. */
+    getAllEscalations(): readonly HumanEscalation[];
+    /** Get pending escalations. */
+    getPending(): readonly HumanEscalation[];
+    /** Check if there are any unresolved escalations. */
+    hasUnresolved(): boolean;
+    private createEscalation;
+}
+export interface EscalationContext {
+    readonly taskGraph: TaskGraph;
+    readonly relevantMessages: readonly AgentMessage[];
+    readonly conflictingClaims: readonly MemoryConflict[];
+    readonly recentAudit: readonly AuditEntry[];
+    readonly trustSnapshots: readonly TrustWindow[];
+    readonly collusionEvents: readonly CollusionEvent[];
+}

package/dist/runtime/human-escalation.js

@@ -0,0 +1,122 @@
+// ============================================================
+// Assay Verified Agent Runtime — Human Escalation Manager
+// Packages structured context for human review when the system
+// cannot resolve a situation autonomously.
+// ============================================================
+import { randomUUID } from 'node:crypto';
+// ── Human Escalation Manager ───────────────────────────────
+export class HumanEscalationManager {
+    escalations = [];
+    policy;
+    constructor(policy) {
+        this.policy = policy;
+    }
+    /**
+     * Create an escalation from a safety threshold breach.
+     */
+    escalateSafetyBreach(rule, currentValue, maxValue, context) {
+        return this.createEscalation({
+            type: 'safety_threshold',
+            rule,
+            value: currentValue,
+            max: maxValue,
+        }, context, [
+            `Reduce the affected agent's autonomy`,
+            `Replace the agent with a different model`,
+            `Abort the current task and start fresh`,
+            `Override the safety threshold (increases risk)`,
+        ]);
+    }
+    /**
+     * Create an escalation from a collusion detection.
+     */
+    escalateCollusion(event, context) {
+        return this.createEscalation({ type: 'collusion_detected', event }, context, [
+            `Switch one agent to a different LLM provider (model diversity)`,
+            `Require formal verification for all claims from these agents`,
+            `Demote both agents to untrusted`,
+            `Review the specific claim manually: "${event.claimText}"`,
+        ]);
+    }
+    /**
+     * Create an escalation from an unresolvable stall.
+     */
+    escalateStall(stalls, context) {
+        const actions = [];
+        for (const stall of stalls) {
+            switch (stall.type) {
+                case 'dependency_deadlock':
+                    actions.push(`Break circular dependency involving task ${stall.taskId}`);
+                    break;
+                case 'reject_loop':
+                    actions.push(`Simplify or redefine task ${stall.taskId} (rejected ${stall.attempts} times)`);
+                    break;
+                case 'timeout':
+                    actions.push(`Investigate why task ${stall.taskId} is taking ${stall.duration}ms`);
+                    break;
+                case 'resource_contention':
+                    actions.push(`Add another agent for the ${stall.taskId} specialization`);
+                    break;
+            }
+        }
+        return this.createEscalation({ type: 'stall_unresolvable', stalls }, context, actions);
+    }
+    /**
+     * Create an escalation from trust collapse (too many demotions).
+     */
+    escalateTrustCollapse(agentId, demotions, context) {
+        return this.createEscalation({ type: 'trust_collapse', agentId, demotions }, context, [
+            `Replace the agent with a different model`,
+            `Review the agent's recent verification failures`,
+            `Reset the agent's trust and retry with closer oversight`,
+            `Remove the agent from the team`,
+        ]);
+    }
+    /**
+     * Record a human response to a pending escalation.
+     */
+    resolve(escalationId, action, reasoning) {
+        const escalation = this.escalations.find(e => e.id === escalationId);
+        if (!escalation || escalation.status !== 'pending')
+            return false;
+        escalation.status = 'resolved';
+        escalation.humanResponse = {
+            action,
+            reasoning,
+            timestamp: new Date().toISOString(),
+        };
+        return true;
+    }
+    /** Get all escalations. */
+    getAllEscalations() {
+        return this.escalations;
+    }
+    /** Get pending escalations. */
+    getPending() {
+        return this.escalations.filter(e => e.status === 'pending');
+    }
+    /** Check if there are any unresolved escalations. */
+    hasUnresolved() {
+        return this.escalations.some(e => e.status === 'pending');
+    }
+    // ── Private ─────────────────────────────────────────────
+    createEscalation(trigger, context, suggestedActions) {
+        const escalation = {
+            id: randomUUID(),
+            trigger,
+            context: {
+                taskGraph: context.taskGraph,
+                relevantMessages: context.relevantMessages,
+                conflictingClaims: context.conflictingClaims,
+                recentAudit: context.recentAudit.slice(-20), // Last 20 audit entries
+                trustSnapshots: context.trustSnapshots,
+                collusionEvents: context.collusionEvents,
+            },
+            suggestedActions,
+            status: 'pending',
+        };
+        this.escalations.push(escalation);
+        return escalation;
+    }
+}
+//# sourceMappingURL=human-escalation.js.map

package/dist/runtime/human-escalation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"human-escalation.js","sourceRoot":"","sources":["../../src/runtime/human-escalation.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,0DAA0D;AAC1D,+DAA+D;AAC/D,2CAA2C;AAC3C,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAczC,8DAA8D;AAE9D,MAAM,OAAO,sBAAsB;IACzB,WAAW,GAAsB,EAAE,CAAC;IACpC,MAAM,CAAe;IAE7B,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,oBAAoB,CAClB,IAAY,EACZ,YAAoB,EACpB,QAAgB,EAChB,OAA0B;QAE1B,OAAO,IAAI,CAAC,gBAAgB,CAC1B;YACE,IAAI,EAAE,kBAAkB;YACxB,IAAI;YACJ,KAAK,EAAE,YAAY;YACnB,GAAG,EAAE,QAAQ;SACd,EACD,OAAO,EACP;YACE,sCAAsC;YACtC,0CAA0C;YAC1C,wCAAwC;YACxC,gDAAgD;SACjD,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,iBAAiB,CACf,KAAqB,EACrB,OAA0B;QAE1B,OAAO,IAAI,CAAC,gBAAgB,CAC1B,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,EACrC,OAAO,EACP;YACE,gEAAgE;YAChE,8DAA8D;YAC9D,iCAAiC;YACjC,wCAAwC,KAAK,CAAC,SAAS,GAAG;SAC3D,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,aAAa,CACX,MAA8B,EAC9B,OAA0B;QAE1B,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC3B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,qBAAqB;oBACxB,OAAO,CAAC,IAAI,CAAC,4CAA4C,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;oBACzE,MAAM;gBACR,KAAK,aAAa;oBAChB,OAAO,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,QAAQ,SAAS,CAAC,CAAC;oBAC7F,MAAM;gBACR,KAAK,SAAS;oBACZ,OAAO,CAAC,IAAI,CAAC,wBAAwB,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;oBACnF,MAAM;gBACR,KAAK,qBAAqB;oBACxB,OAAO,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,MAAM,iBAAiB,CAAC,CAAC;oBACzE,MAAM;YACV,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC,gBAAgB,CAC1B,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,EACtC,OAAO,EACP,OAAO,CACR,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,qBAAqB,CACnB,OAAe,EACf,SAAiB,EACjB,OAA0B;QAE1B,OAAO,IAAI,CAAC,gBAAgB,CAC1B,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,EAAE,EAC9C,OAAO,EACP;YACE,0CAA0C;YAC1C,iDAAiD;YACjD,yDAAyD;YACzD,gCAAgC;SACjC,CACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,OAAO,CAAC,YAAoB,EAAE,MAAc,EAAE,SAAiB;QAC7D,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;QACrE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAEhE,UAAiC,CAAC,MAAM,GAAG,UAAU,CAAC;QACtD,UAAkE,CAAC,aAAa,GAAG;YAClF,MAAM;YACN,SAAS;YACT,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACpC,CAAC;QAEF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,2BAA2B;IAC3B,iBAAiB;QACf,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,+BAA+B;IAC/B,UAAU;QACR,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC9D,CAAC;IAED,qDAAqD;IACrD,aAAa;QACX,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,2DAA2D;IAEnD,gBAAgB,CACtB,OAA+B,EAC/B,OAA0B,EAC1B,gBAA0B;QAE1B,MAAM,UAAU,GAAoB;YAClC,EAAE,EAAE,UAAU,EAAE;YAChB,OAAO;YACP,OAAO,EAAE;gBACP,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,WAAW,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,wBAAwB;gBACrE,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,eAAe,EAAE,OAAO,CAAC,eAAe;aACzC;YACD,gBAAgB;YAChB,MAAM,EAAE,SAAS;SAClB,CAAC;QAEF,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAClC,OAAO,UAAU,CAAC;IACpB,CAAC;CACF"}

package/dist/runtime/kill-switch.d.ts

@@ -0,0 +1,51 @@
+import { EventEmitter } from 'node:events';
+import type { KillSwitchLevel, KillSwitchAction, KillSwitchEvent } from './types.js';
+export declare class KillSwitch extends EventEmitter {
+    private eventLog;
+    private logPath;
+    private suspendedEntities;
+    private systemHalted;
+    constructor(logPath?: string);
+    /**
+     * Activate the kill switch at a given level.
+     * Validates that the level has authority for the requested action.
+     * Validates that the level is not being overridden by a higher level.
+     */
+    activate(level: KillSwitchLevel, action: KillSwitchAction, target: string, triggeredBy: string, reason: string): Promise<KillSwitchEvent>;
+    /**
+     * Release a kill switch hold on a target.
+     * Only a level equal to or higher than the suspending level can release.
+     */
+    release(target: string, releasedBy: string, level: KillSwitchLevel): Promise<{
+        released: boolean;
+        reason: string;
+    }>;
+    /**
+     * Check if a target is suspended.
+     */
+    isSuspended(target: string): {
+        suspended: boolean;
+        event?: KillSwitchEvent;
+    };
+    /**
+     * Check if the system is halted (Layer 2 kill switch).
+     */
+    isSystemHalted(): boolean;
+    /**
+     * Get all currently suspended entities.
+     */
+    getSuspended(): Map<string, KillSwitchEvent>;
+    /**
+     * Get the full event log.
+     */
+    getEventLog(): readonly KillSwitchEvent[];
+    /**
+     * Validate that a given entity has authority to perform an action.
+     * Used before executing any operation to check kill switch status.
+     */
+    validateAuthority(requestingLevel: KillSwitchLevel, action: KillSwitchAction, target: string): {
+        authorized: boolean;
+        reason: string;
+    };
+    private logEvent;
+}

package/dist/runtime/kill-switch.js

@@ -0,0 +1,185 @@
+// ============================================================
+// Assay Verified Agent Runtime — Kill Switch Hierarchy
+// Strictly ordered: Layer 2 > Human > Coordinator > Agent.
+// No entity can override an entity above it.
+//
+// Layer 2 can halt the entire system.
+// Humans can suspend any agent, tool, or rule.
+// Coordinators can suspend agents they manage.
+// Agents can halt their own tasks.
+// ============================================================
+import { randomUUID } from 'node:crypto';
+import { appendFile, mkdir } from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { EventEmitter } from 'node:events';
+// ── Kill Switch Authority Map ──────────────────────────
+const LEVEL_RANK = {
+    layer2: 4,
+    human: 3,
+    coordinator: 2,
+    agent: 1,
+};
+const ALLOWED_ACTIONS = {
+    layer2: ['halt_system', 'suspend_agent', 'suspend_tool', 'suspend_rule'],
+    human: ['suspend_agent', 'suspend_tool', 'suspend_rule', 'reassign_task', 'halt_task'],
+    coordinator: ['suspend_agent', 'reassign_task', 'halt_task'],
+    agent: ['halt_task'],
+};
+// ── Kill Switch ────────────────────────────────────────
+export class KillSwitch extends EventEmitter {
+    eventLog = [];
+    logPath;
+    suspendedEntities = new Map();
+    systemHalted = false;
+    constructor(logPath) {
+        super();
+        this.logPath = logPath ?? '.assay/kill-switch.ndjson';
+    }
+    /**
+     * Activate the kill switch at a given level.
+     * Validates that the level has authority for the requested action.
+     * Validates that the level is not being overridden by a higher level.
+     */
+    async activate(level, action, target, triggeredBy, reason) {
+        // Validate action is allowed for this level
+        if (!ALLOWED_ACTIONS[level].includes(action)) {
+            throw new Error(`Kill switch level "${level}" cannot perform action "${action}". Allowed: ${ALLOWED_ACTIONS[level].join(', ')}`);
+        }
+        // Check if target is already suspended by a higher level
+        const existingSuspension = this.suspendedEntities.get(target);
+        if (existingSuspension) {
+            const existingRank = LEVEL_RANK[existingSuspension.level];
+            const requestRank = LEVEL_RANK[level];
+            if (existingRank > requestRank) {
+                throw new Error(`Target "${target}" is already suspended by "${existingSuspension.level}" (rank ${existingRank}). Level "${level}" (rank ${requestRank}) cannot override.`);
+            }
+        }
+        const event = {
+            id: `ks_${Date.now()}_${randomUUID().slice(0, 8)}`,
+            level,
+            action,
+            target,
+            triggered_by: triggeredBy,
+            reason,
+            timestamp: new Date().toISOString(),
+            auto_restart: action !== 'halt_system',
+            requires_redeployment: action === 'halt_system',
+        };
+        // Execute the action
+        if (action === 'halt_system') {
+            this.systemHalted = true;
+        }
+        if (action === 'suspend_agent' || action === 'suspend_tool' || action === 'suspend_rule') {
+            this.suspendedEntities.set(target, event);
+        }
+        this.eventLog.push(event);
+        // Emit the event
+        this.emit('kill_switch', event);
+        // Log to disk
+        await this.logEvent(event);
+        return event;
+    }
+    /**
+     * Release a kill switch hold on a target.
+     * Only a level equal to or higher than the suspending level can release.
+     */
+    async release(target, releasedBy, level) {
+        const suspension = this.suspendedEntities.get(target);
+        if (!suspension) {
+            return { released: false, reason: `Target "${target}" is not suspended.` };
+        }
+        const suspendingRank = LEVEL_RANK[suspension.level];
+        const releaseRank = LEVEL_RANK[level];
+        if (releaseRank < suspendingRank) {
+            return {
+                released: false,
+                reason: `Cannot release: suspended by "${suspension.level}" (rank ${suspendingRank}), release attempted by "${level}" (rank ${releaseRank}). Need rank >= ${suspendingRank}.`,
+            };
+        }
+        this.suspendedEntities.delete(target);
+        const releaseEvent = {
+            id: `ks_release_${Date.now()}_${randomUUID().slice(0, 8)}`,
+            level,
+            action: 'halt_task', // Using halt_task as a generic "release" marker
+            target,
+            triggered_by: releasedBy,
+            reason: `Released from ${suspension.level} suspension`,
+            timestamp: new Date().toISOString(),
+            auto_restart: true,
+            requires_redeployment: false,
+        };
+        this.eventLog.push(releaseEvent);
+        this.emit('kill_switch_released', releaseEvent);
+        await this.logEvent(releaseEvent);
+        return { released: true, reason: `Released by "${level}" (${releasedBy}).` };
+    }
+    /**
+     * Check if a target is suspended.
+     */
+    isSuspended(target) {
+        const event = this.suspendedEntities.get(target);
+        return { suspended: event !== undefined, event };
+    }
+    /**
+     * Check if the system is halted (Layer 2 kill switch).
+     */
+    isSystemHalted() {
+        return this.systemHalted;
+    }
+    /**
+     * Get all currently suspended entities.
+     */
+    getSuspended() {
+        return new Map(this.suspendedEntities);
+    }
+    /**
+     * Get the full event log.
+     */
+    getEventLog() {
+        return this.eventLog;
+    }
+    /**
+     * Validate that a given entity has authority to perform an action.
+     * Used before executing any operation to check kill switch status.
+     */
+    validateAuthority(requestingLevel, action, target) {
+        // System halt blocks everything except Layer 2
+        if (this.systemHalted && requestingLevel !== 'layer2') {
+            return {
+                authorized: false,
+                reason: 'System is halted by Layer 2. Only Layer 2 can act.',
+            };
+        }
+        // Check if target is suspended
+        const suspension = this.suspendedEntities.get(target);
+        if (suspension) {
+            const suspendingRank = LEVEL_RANK[suspension.level];
+            const requestRank = LEVEL_RANK[requestingLevel];
+            if (requestRank <= suspendingRank) {
+                return {
+                    authorized: false,
+                    reason: `Target "${target}" is suspended by "${suspension.level}". Level "${requestingLevel}" cannot act on it.`,
+                };
+            }
+        }
+        // Check if action is allowed for this level
+        if (!ALLOWED_ACTIONS[requestingLevel].includes(action)) {
+            return {
+                authorized: false,
+                reason: `Level "${requestingLevel}" cannot perform "${action}".`,
+            };
+        }
+        return { authorized: true, reason: 'Authorized.' };
+    }
+    // ── Private ──────────────────────────────────────────
+    async logEvent(event) {
+        try {
+            await mkdir(dirname(this.logPath), { recursive: true });
+            await appendFile(this.logPath, JSON.stringify(event) + '\n', 'utf-8');
+        }
+        catch {
+            // Kill switch logging failure must not prevent the kill switch from working
+        }
+    }
+}
+//# sourceMappingURL=kill-switch.js.map

package/dist/runtime/kill-switch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kill-switch.js","sourceRoot":"","sources":["../../src/runtime/kill-switch.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,uDAAuD;AACvD,2DAA2D;AAC3D,6CAA6C;AAC7C,EAAE;AACF,sCAAsC;AACtC,+CAA+C;AAC/C,+CAA+C;AAC/C,mCAAmC;AACnC,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAO3C,0DAA0D;AAE1D,MAAM,UAAU,GAAoC;IAClD,MAAM,EAAE,CAAC;IACT,KAAK,EAAE,CAAC;IACR,WAAW,EAAE,CAAC;IACd,KAAK,EAAE,CAAC;CACT,CAAC;AAEF,MAAM,eAAe,GAAgD;IACnE,MAAM,EAAE,CAAC,aAAa,EAAE,eAAe,EAAE,cAAc,EAAE,cAAc,CAAC;IACxE,KAAK,EAAE,CAAC,eAAe,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,WAAW,CAAC;IACtF,WAAW,EAAE,CAAC,eAAe,EAAE,eAAe,EAAE,WAAW,CAAC;IAC5D,KAAK,EAAE,CAAC,WAAW,CAAC;CACrB,CAAC;AAEF,0DAA0D;AAE1D,MAAM,OAAO,UAAW,SAAQ,YAAY;IAClC,QAAQ,GAAsB,EAAE,CAAC;IACjC,OAAO,CAAS;IAChB,iBAAiB,GAAiC,IAAI,GAAG,EAAE,CAAC;IAC5D,YAAY,GAAY,KAAK,CAAC;IAEtC,YAAY,OAAgB;QAC1B,KAAK,EAAE,CAAC;QACR,IAAI,CAAC,OAAO,GAAG,OAAO,IAAI,2BAA2B,CAAC;IACxD,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CACZ,KAAsB,EACtB,MAAwB,EACxB,MAAc,EACd,WAAmB,EACnB,MAAc;QAEd,4CAA4C;QAC5C,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CACb,sBAAsB,KAAK,4BAA4B,MAAM,eAAe,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChH,CAAC;QACJ,CAAC;QAED,yDAAyD;QACzD,MAAM,kBAAkB,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC9D,IAAI,kBAAkB,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,UAAU,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAC1D,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,YAAY,GAAG,WAAW,EAAE,CAAC;gBAC/B,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,8BAA8B,kBAAkB,CAAC,KAAK,WAAW,YAAY,aAAa,KAAK,WAAW,WAAW,oBAAoB,CAC3J,CAAC;YACJ,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAoB;YAC7B,EAAE,EAAE,MAAM,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YAClD,KAAK;YACL,MAAM;YACN,MAAM;YACN,YAAY,EAAE,WAAW;YACzB,MAAM;YACN,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,MAAM,KAAK,aAAa;YACtC,qBAAqB,EAAE,MAAM,KAAK,aAAa;SAChD,CAAC;QAEF,qBAAqB;QACrB,IAAI,MAAM,KAAK,aAAa,EAAE,CAAC;YAC7B,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QAED,IAAI,MAAM,KAAK,eAAe,IAAI,MAAM,KAAK,cAAc,IAAI,MAAM,KAAK,cAAc,EAAE,CAAC;YACzF,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAE1B,iBAAiB;QACjB,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;QAEhC,cAAc;QACd,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE3B,OAAO,KAAK,CAAC;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACX,MAAc,EACd,UAAkB,EAClB,KAAsB;QAEtB,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,MAAM,qBAAqB,EAAE,CAAC;QAC7E,CAAC;QAED,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAEtC,IAAI,WAAW,GAAG,cAAc,EAAE,CAAC;YACjC,OAAO;gBACL,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,iCAAiC,UAAU,CAAC,KAAK,WAAW,cAAc,4BAA4B,KAAK,WAAW,WAAW,mBAAmB,cAAc,GAAG;aAC9K,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEtC,MAAM,YAAY,GAAoB;YACpC,EAAE,EAAE,cAAc,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YAC1D,KAAK;YACL,MAAM,EAAE,WAAW,EAAE,gDAAgD;YACrE,MAAM;YACN,YAAY,EAAE,UAAU;YACxB,MAAM,EAAE,iBAAiB,UAAU,CAAC,KAAK,aAAa;YACtD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,IAAI;YAClB,qBAAqB,EAAE,KAAK;SAC7B,CAAC;QAEF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,sBAAsB,EAAE,YAAY,CAAC,CAAC;QAChD,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;QAElC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,KAAK,MAAM,UAAU,IAAI,EAAE,CAAC;IAC/E,CAAC;IAED;;OAEG;IACH,WAAW,CAAC,MAAc;QACxB,MAAM,KAAK,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,EAAE,SAAS,EAAE,KAAK,KAAK,SAAS,EAAE,KAAK,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED;;OAEG;IACH,YAAY;QACV,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACzC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;OAGG;IACH,iBAAiB,CACf,eAAgC,EAChC,MAAwB,EACxB,MAAc;QAEd,+CAA+C;QAC/C,IAAI,IAAI,CAAC,YAAY,IAAI,eAAe,KAAK,QAAQ,EAAE,CAAC;YACtD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,oDAAoD;aAC7D,CAAC;QACJ,CAAC;QAED,+BAA+B;QAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACtD,IAAI,UAAU,EAAE,CAAC;YACf,MAAM,cAAc,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,WAAW,GAAG,UAAU,CAAC,eAAe,CAAC,CAAC;YAChD,IAAI,WAAW,IAAI,cAAc,EAAE,CAAC;gBAClC,OAAO;oBACL,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,WAAW,MAAM,sBAAsB,UAAU,CAAC,KAAK,aAAa,eAAe,qBAAqB;iBACjH,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4CAA4C;QAC5C,IAAI,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;YACvD,OAAO;gBACL,UAAU,EAAE,KAAK;gBACjB,MAAM,EAAE,UAAU,eAAe,qBAAqB,MAAM,IAAI;aACjE,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IACrD,CAAC;IAED,wDAAwD;IAEhD,KAAK,CAAC,QAAQ,CAAC,KAAsB;QAC3C,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACxD,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,4EAA4E;QAC9E,CAAC;IACH,CAAC;CACF"}

package/dist/runtime/layer2-guardian.d.ts

@@ -0,0 +1,81 @@
+import type { Layer2Manifest, Layer2Component, IntegrityCheckResult } from './types.js';
+export declare class Layer2Guardian {
+    private projectRoot;
+    private manifestPath;
+    private manifest;
+    private componentPaths;
+    constructor(projectRoot: string, opts?: {
+        manifestPath?: string;
+        componentPaths?: {
+            component: Layer2Component;
+            path: string;
+        }[];
+    });
+    /**
+     * Validate that a modification proposal does not target Layer 2.
+     * This is the first line of defense: structural prevention at the type level.
+     */
+    validateProposal(proposal: {
+        safety: {
+            modifies_layer2: boolean;
+            modifies_approval_framework: boolean;
+        };
+        payload: unknown;
+    }): {
+        valid: boolean;
+        reason: string;
+    };
+    /**
+     * Verify that Layer 2 files have appropriate permissions.
+     * In production, Layer 2 files should be owned by a different user
+     * and be read-only from the agent's perspective.
+     */
+    verifyPermissions(): Promise<{
+        valid: boolean;
+        findings: {
+            path: string;
+            issue: string;
+        }[];
+    }>;
+    /**
+     * Generate a Layer 2 manifest by hashing all component files.
+     * This is called during deployment (by humans), not at runtime (by agents).
+     */
+    generateManifest(deployedBy: string): Promise<Layer2Manifest>;
+    /**
+     * Save the manifest to disk.
+     */
+    saveManifest(manifest?: Layer2Manifest): Promise<void>;
+    /**
+     * Load the manifest from disk.
+     */
+    loadManifest(): Promise<Layer2Manifest | null>;
+    /**
+     * Verify Layer 2 integrity by comparing current file hashes
+     * against the signed manifest. Called at system startup.
+     *
+     * If ANY component has been modified, returns a violation.
+     * The caller MUST halt the system on violation.
+     */
+    verifyIntegrity(): Promise<IntegrityCheckResult>;
+    /**
+     * Run all four levels of verification.
+     * Returns a comprehensive status report.
+     */
+    fullAudit(): Promise<{
+        permissions: {
+            valid: boolean;
+            findings: {
+                path: string;
+                issue: string;
+            }[];
+        };
+        integrity: IntegrityCheckResult;
+        manifestPresent: boolean;
+        overallSafe: boolean;
+    }>;
+    /**
+     * Get the current manifest (if loaded).
+     */
+    getManifest(): Layer2Manifest | null;
+}