tryassay 0.6.0 → 0.11.1

package/dist/runtime/rule-meta-verifier.js

@@ -0,0 +1,275 @@
+// ============================================================
+// Assay Verified Agent Runtime — Rule Meta-Verification Pipeline
+// Existing rules verify new rules (monotonic induction):
+// Rule N is verified by rules 1..N-1.
+// ============================================================
+import { randomUUID } from 'node:crypto';
+import { getClient, MODEL } from '../lib/anthropic.js';
+// ── Rule Executor ──────────────────────────────────────────
+/**
+ * Execute a rule's check against a code snippet.
+ * Returns a verdict: 'PASS' or 'FAIL'.
+ */
+async function executeRuleCheck(check, code, language) {
+    switch (check.type) {
+        case 'formal':
+            return executeFormalCheck(check, code);
+        case 'llm':
+            return executeLLMCheck(check, code, language);
+        case 'composite':
+            return executeCompositeCheck(check, code, language);
+    }
+}
+function executeFormalCheck(check, code) {
+    const results = [];
+    const evidenceParts = [];
+    for (const pattern of check.patterns) {
+        if (pattern.pattern_type === 'regex') {
+            try {
+                const regex = new RegExp(pattern.pattern, 'gm');
+                const matches = code.match(regex);
+                const matched = matches !== null && matches.length > 0;
+                results.push(matched);
+                evidenceParts.push(matched
+                    ? `Pattern "${pattern.description}" matched ${matches.length} time(s)`
+                    : `Pattern "${pattern.description}" did not match`);
+            }
+            catch (err) {
+                results.push(false);
+                evidenceParts.push(`Pattern "${pattern.description}" failed: ${err instanceof Error ? err.message : String(err)}`);
+            }
+        }
+        else if (pattern.pattern_type === 'tree_sitter' || pattern.pattern_type === 'semgrep') {
+            // tree-sitter and semgrep require external tools — stub for now
+            // In production, these would shell out to the respective tools
+            evidenceParts.push(`Pattern "${pattern.description}" (${pattern.pattern_type}): skipped — requires external tooling`);
+            results.push(true); // optimistic pass for non-regex patterns
+        }
+    }
+    let verdict;
+    switch (check.logic) {
+        case 'all_match':
+            verdict = results.every(r => r) ? 'PASS' : 'FAIL';
+            break;
+        case 'any_match':
+            verdict = results.some(r => r) ? 'PASS' : 'FAIL';
+            break;
+        case 'none_match':
+            verdict = results.every(r => !r) ? 'PASS' : 'FAIL';
+            break;
+        case 'custom':
+            // Custom logic is not executed dynamically for safety
+            verdict = results.every(r => r) ? 'PASS' : 'FAIL';
+            evidenceParts.push('Custom logic evaluated as all_match');
+            break;
+    }
+    return { verdict, evidence: evidenceParts.join('. ') };
+}
+async function executeLLMCheck(check, code, language) {
+    try {
+        const client = getClient();
+        const prompt = check.prompt_template
+            .replace('{{code}}', code)
+            .replace('{{language}}', language)
+            .replace('{{claim}}', 'Verify the code against the rule');
+        const response = await client.messages.create({
+            model: MODEL,
+            max_tokens: check.max_tokens,
+            temperature: check.temperature,
+            messages: [{ role: 'user', content: prompt }],
+        });
+        const content = response.content[0];
+        if (content.type !== 'text') {
+            return { verdict: 'FAIL', evidence: 'LLM returned non-text response' };
+        }
+        const text = content.text.toLowerCase();
+        const verdict = text.includes('pass') && !text.includes('fail') ? 'PASS' : 'FAIL';
+        return { verdict, evidence: content.text.slice(0, 500) };
+    }
+    catch (err) {
+        return {
+            verdict: 'FAIL',
+            evidence: `LLM check failed: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+}
+async function executeCompositeCheck(check, code, language) {
+    const formalResult = executeFormalCheck(check.formal_component, code);
+    switch (check.merge_strategy) {
+        case 'formal_gate': {
+            // LLM only runs if formal passes
+            if (formalResult.verdict === 'FAIL') {
+                return { verdict: 'FAIL', evidence: `Formal gate: ${formalResult.evidence}` };
+            }
+            const llmResult = await executeLLMCheck(check.llm_component, code, language);
+            return {
+                verdict: llmResult.verdict,
+                evidence: `Formal gate passed. LLM: ${llmResult.evidence}`,
+            };
+        }
+        case 'formal_override': {
+            // Both run, formal overrides on disagreement
+            const llmResult = await executeLLMCheck(check.llm_component, code, language);
+            if (formalResult.verdict !== llmResult.verdict) {
+                return {
+                    verdict: formalResult.verdict,
+                    evidence: `Formal override: formal=${formalResult.verdict}, llm=${llmResult.verdict}. ${formalResult.evidence}`,
+                };
+            }
+            return {
+                verdict: formalResult.verdict,
+                evidence: `Agreement: formal=${formalResult.verdict}, llm=${llmResult.verdict}. ${formalResult.evidence}`,
+            };
+        }
+        case 'weighted': {
+            // Both run, use combined signal
+            const llmResult = await executeLLMCheck(check.llm_component, code, language);
+            // Weight formal higher (0.7 formal, 0.3 LLM)
+            const formalScore = formalResult.verdict === 'PASS' ? 0.7 : 0;
+            const llmScore = llmResult.verdict === 'PASS' ? 0.3 : 0;
+            const verdict = formalScore + llmScore >= 0.5 ? 'PASS' : 'FAIL';
+            return {
+                verdict,
+                evidence: `Weighted: formal=${formalResult.verdict}(0.7), llm=${llmResult.verdict}(0.3), combined=${(formalScore + llmScore).toFixed(2)}`,
+            };
+        }
+    }
+}
+// ── Meta-Verification Pipeline ────────────────────────────
+export class RuleMetaVerifier {
+    consistencyRuns;
+    constructor(opts) {
+        this.consistencyRuns = opts?.consistencyRuns ?? 3;
+    }
+    /**
+     * Meta-verify a proposed rule:
+     * 1. Run all test cases through the rule's check logic
+     * 2. Check consistency (run multiple times for LLM-based rules)
+     * 3. Check for conflicts with existing rules
+     * Returns a RuleMetaVerification report.
+     */
+    async verify(proposedRule, existingRules) {
+        const verificationId = randomUUID();
+        // Step 1: Run test cases
+        const testResults = await this.runTestCases(proposedRule);
+        // Step 2: Consistency check
+        const consistency = await this.checkConsistency(proposedRule);
+        // Step 3: Conflict check
+        const conflictCheck = await this.checkConflicts(proposedRule, existingRules);
+        // Determine verdict
+        const blockers = [];
+        const failedTests = testResults.filter(r => !r.match);
+        if (failedTests.length > 0) {
+            blockers.push(`${failedTests.length} test case(s) produced incorrect verdicts`);
+        }
+        if (!consistency.consistent) {
+            blockers.push(`Rule is not deterministic: variance ${consistency.variance.toFixed(3)} over ${consistency.runs} runs`);
+        }
+        // Formal rules must have zero variance
+        if (proposedRule.substrate.startsWith('formal_') && consistency.variance > 0) {
+            blockers.push('Formal rules must produce identical results on every run');
+        }
+        if (conflictCheck.conflicting_rules.length > 0) {
+            blockers.push(`Conflicts with ${conflictCheck.conflicting_rules.length} existing rule(s): ${conflictCheck.conflicting_rules.join(', ')}`);
+        }
+        const verdict = blockers.length > 0 ? 'reject'
+            : consistency.variance > 0 && consistency.variance <= 0.1 ? 'needs_review'
+                : 'approve';
+        return {
+            rule_id: proposedRule.id,
+            verification_id: verificationId,
+            timestamp: new Date().toISOString(),
+            test_results: testResults,
+            consistency,
+            conflict_check: conflictCheck,
+            verdict,
+            blockers,
+        };
+    }
+    // ── Private: Test Case Execution ────────────────────────
+    async runTestCases(rule) {
+        const results = [];
+        for (const testCase of rule.test_cases) {
+            const { verdict, evidence } = await executeRuleCheck(rule.check, testCase.input_code, testCase.input_language);
+            results.push({
+                case_id: testCase.id,
+                actual_verdict: verdict,
+                expected_verdict: testCase.expected_verdict,
+                match: verdict === testCase.expected_verdict,
+                evidence,
+            });
+        }
+        return results;
+    }
+    // ── Private: Consistency Check ──────────────────────────
+    async checkConsistency(rule) {
+        // For formal-only rules, consistency is guaranteed (single run)
+        if (rule.substrate.startsWith('formal_')) {
+            return {
+                runs: 1,
+                consistent: true,
+                variance: 0.0,
+            };
+        }
+        // For LLM-based rules, run multiple times and check variance
+        const runs = this.consistencyRuns;
+        const verdictsByCase = new Map();
+        for (let i = 0; i < runs; i++) {
+            for (const testCase of rule.test_cases) {
+                const { verdict } = await executeRuleCheck(rule.check, testCase.input_code, testCase.input_language);
+                const existing = verdictsByCase.get(testCase.id) ?? [];
+                existing.push(verdict);
+                verdictsByCase.set(testCase.id, existing);
+            }
+        }
+        // Calculate variance: what fraction of cases had inconsistent verdicts?
+        let inconsistentCases = 0;
+        for (const [, verdicts] of verdictsByCase) {
+            const unique = new Set(verdicts);
+            if (unique.size > 1)
+                inconsistentCases++;
+        }
+        const variance = verdictsByCase.size > 0
+            ? inconsistentCases / verdictsByCase.size
+            : 0;
+        return {
+            runs,
+            consistent: variance === 0,
+            variance,
+        };
+    }
+    // ── Private: Conflict Check ─────────────────────────────
+    async checkConflicts(proposedRule, existingRules) {
+        const conflicting = [];
+        // Only check rules that target overlapping claim categories and languages
+        const overlappingRules = existingRules.filter(existing => {
+            const categoryOverlap = existing.target.claim_categories.some(c => proposedRule.target.claim_categories.includes(c));
+            const languageOverlap = existing.target.languages.some(l => proposedRule.target.languages.includes(l));
+            return categoryOverlap && languageOverlap;
+        });
+        // For each overlapping rule, run the proposed rule's test cases
+        // through the existing rule and check for contradictions
+        for (const existing of overlappingRules) {
+            for (const testCase of proposedRule.test_cases) {
+                // Check if the existing rule applies to this test case's language
+                if (!existing.target.languages.includes(testCase.input_language))
+                    continue;
+                const existingResult = await executeRuleCheck(existing.check, testCase.input_code, testCase.input_language);
+                const proposedResult = await executeRuleCheck(proposedRule.check, testCase.input_code, testCase.input_language);
+                // Conflict: same input, opposite verdicts
+                if (existingResult.verdict !== proposedResult.verdict) {
+                    conflicting.push(existing.id);
+                    break; // One conflict per rule is enough
+                }
+            }
+        }
+        const resolution = conflicting.length > 0
+            ? `${conflicting.length} conflict(s) detected. Manual review required. Consider: (1) the new rule is more specific (override), (2) the existing rule is wrong (deprecate), or (3) both are correct for different contexts (scope refinement).`
+            : 'No conflicts with existing rules.';
+        return {
+            conflicting_rules: conflicting,
+            resolution,
+        };
+    }
+}
+//# sourceMappingURL=rule-meta-verifier.js.map

package/dist/runtime/rule-meta-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-meta-verifier.js","sourceRoot":"","sources":["../../src/runtime/rule-meta-verifier.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,iEAAiE;AACjE,yDAAyD;AACzD,sCAAsC;AACtC,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAUzC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAEvD,8DAA8D;AAE9D;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAC7B,KAA8C,EAC9C,IAAY,EACZ,QAAgB;IAEhB,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,KAAK;YACR,OAAO,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,KAAK,WAAW;YACd,OAAO,qBAAqB,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxD,CAAC;AACH,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAkB,EAClB,IAAY;IAEZ,MAAM,OAAO,GAAc,EAAE,CAAC;IAC9B,MAAM,aAAa,GAAa,EAAE,CAAC;IAEnC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,IAAI,OAAO,CAAC,YAAY,KAAK,OAAO,EAAE,CAAC;YACrC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;gBAChD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAClC,MAAM,OAAO,GAAG,OAAO,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACtB,aAAa,CAAC,IAAI,CAChB,OAAO;oBACL,CAAC,CAAC,YAAY,OAAO,CAAC,WAAW,aAAa,OAAO,CAAC,MAAM,UAAU;oBACtE,CAAC,CAAC,YAAY,OAAO,CAAC,WAAW,iBAAiB,CACrD,CAAC;YACJ,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;gBACpB,aAAa,CAAC,IAAI,CAChB,YAAY,OAAO,CAAC,WAAW,aAAa,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;YACJ,CAAC;QACH,CAAC;aAAM,IAAI,OAAO,CAAC,YAAY,KAAK,aAAa,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACxF,gEAAgE;YAChE,+DAA+D;YAC/D,aAAa,CAAC,IAAI,CAChB,YAAY,OAAO,CAAC,WAAW,MAAM,OAAO,CAAC,YAAY,wCAAwC,CAClG,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,yCAAyC;QAC/D,CAAC;IACH,CAAC;IAED,IAAI,OAAwB,CAAC;IAC7B,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,WAAW;YACd,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAClD,MAAM;QACR,KAAK,WAAW;YACd,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACjD,MAAM;QACR,KAAK,YAAY;YACf,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACnD,MAAM;QACR,KAAK,QAAQ;YACX,sDAAsD;YACtD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YAClD,aAAa,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAC1D,MAAM;IACV,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,eAAe,CAC5B,KAAe,EACf,IAAY,EACZ,QAAgB;IAEhB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,eAAe;aACjC,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC;aACzB,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC;aACjC,OAAO,CAAC,WAAW,EAAE,kCAAkC,CAAC,CAAC;QAE5D,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC5C,KAAK,EAAE,KAAK;YACZ,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;SAC9C,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gCAAgC,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,MAAM,OAAO,GAAoB,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QAEnG,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,OAAO,EAAE,MAAM;YACf,QAAQ,EAAE,qBAAqB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAClF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAClC,KAAqB,EACrB,IAAY,EACZ,QAAgB;IAEhB,MAAM,YAAY,GAAG,kBAAkB,CAAC,KAAK,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAEtE,QAAQ,KAAK,CAAC,cAAc,EAAE,CAAC;QAC7B,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,iCAAiC;YACjC,IAAI,YAAY,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBACpC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,gBAAgB,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC;YAChF,CAAC;YACD,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7E,OAAO;gBACL,OAAO,EAAE,SAAS,CAAC,OAAO;gBAC1B,QAAQ,EAAE,4BAA4B,SAAS,CAAC,QAAQ,EAAE;aAC3D,CAAC;QACJ,CAAC;QACD,KAAK,iBAAiB,CAAC,CAAC,CAAC;YACvB,6CAA6C;YAC7C,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7E,IAAI,YAAY,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC/C,OAAO;oBACL,OAAO,EAAE,YAAY,CAAC,OAAO;oBAC7B,QAAQ,EAAE,2BAA2B,YAAY,CAAC,OAAO,SAAS,SAAS,CAAC,OAAO,KAAK,YAAY,CAAC,QAAQ,EAAE;iBAChH,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,YAAY,CAAC,OAAO;gBAC7B,QAAQ,EAAE,qBAAqB,YAAY,CAAC,OAAO,SAAS,SAAS,CAAC,OAAO,KAAK,YAAY,CAAC,QAAQ,EAAE;aAC1G,CAAC;QACJ,CAAC;QACD,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,gCAAgC;YAChC,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YAC7E,6CAA6C;YAC7C,MAAM,WAAW,GAAG,YAAY,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,MAAM,QAAQ,GAAG,SAAS,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACxD,MAAM,OAAO,GAAoB,WAAW,GAAG,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;YACjF,OAAO;gBACL,OAAO;gBACP,QAAQ,EAAE,oBAAoB,YAAY,CAAC,OAAO,cAAc,SAAS,CAAC,OAAO,mBAAmB,CAAC,WAAW,GAAG,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE;aAC1I,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,6DAA6D;AAE7D,MAAM,OAAO,gBAAgB;IACnB,eAAe,CAAS;IAEhC,YAAY,IAAmC;QAC7C,IAAI,CAAC,eAAe,GAAG,IAAI,EAAE,eAAe,IAAI,CAAC,CAAC;IACpD,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,MAAM,CACV,YAA8B,EAC9B,aAA0C;QAE1C,MAAM,cAAc,GAAG,UAAU,EAAE,CAAC;QAEpC,yBAAyB;QACzB,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAE1D,4BAA4B;QAC5B,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,CAAC;QAE9D,yBAAyB;QACzB,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,aAAa,CAAC,CAAC;QAE7E,oBAAoB;QACpB,MAAM,QAAQ,GAAa,EAAE,CAAC;QAE9B,MAAM,WAAW,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,GAAG,WAAW,CAAC,MAAM,2CAA2C,CAAC,CAAC;QAClF,CAAC;QAED,IAAI,CAAC,WAAW,CAAC,UAAU,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,uCAAuC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,WAAW,CAAC,IAAI,OAAO,CAAC,CAAC;QACxH,CAAC;QAED,uCAAuC;QACvC,IAAI,YAAY,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,WAAW,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;YAC7E,QAAQ,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QAC5E,CAAC;QAED,IAAI,aAAa,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,kBAAkB,aAAa,CAAC,iBAAiB,CAAC,MAAM,sBAAsB,aAAa,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC5I,CAAC;QAED,MAAM,OAAO,GACX,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ;YAC9B,CAAC,CAAC,WAAW,CAAC,QAAQ,GAAG,CAAC,IAAI,WAAW,CAAC,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,cAAc;gBAC1E,CAAC,CAAC,SAAS,CAAC;QAEd,OAAO;YACL,OAAO,EAAE,YAAY,CAAC,EAAE;YACxB,eAAe,EAAE,cAAc;YAC/B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,YAAY,EAAE,WAAW;YACzB,WAAW;YACX,cAAc,EAAE,aAAa;YAC7B,OAAO;YACP,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,2DAA2D;IAEnD,KAAK,CAAC,YAAY,CACxB,IAAsB;QAEtB,MAAM,OAAO,GAAqB,EAAE,CAAC;QAErC,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACvC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,gBAAgB,CAClD,IAAI,CAAC,KAAK,EACV,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,CACxB,CAAC;YAEF,OAAO,CAAC,IAAI,CAAC;gBACX,OAAO,EAAE,QAAQ,CAAC,EAAE;gBACpB,cAAc,EAAE,OAAO;gBACvB,gBAAgB,EAAE,QAAQ,CAAC,gBAAgB;gBAC3C,KAAK,EAAE,OAAO,KAAK,QAAQ,CAAC,gBAAgB;gBAC5C,QAAQ;aACT,CAAC,CAAC;QACL,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,2DAA2D;IAEnD,KAAK,CAAC,gBAAgB,CAC5B,IAAsB;QAEtB,gEAAgE;QAChE,IAAI,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YACzC,OAAO;gBACL,IAAI,EAAE,CAAC;gBACP,UAAU,EAAE,IAAI;gBAChB,QAAQ,EAAE,GAAG;aACd,CAAC;QACJ,CAAC;QAED,6DAA6D;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC;QAClC,MAAM,cAAc,GAA0B,IAAI,GAAG,EAAE,CAAC;QAExD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;YAC9B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;gBACvC,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,gBAAgB,CACxC,IAAI,CAAC,KAAK,EACV,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,CACxB,CAAC;gBAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBACvB,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;YAC5C,CAAC;QACH,CAAC;QAED,wEAAwE;QACxE,IAAI,iBAAiB,GAAG,CAAC,CAAC;QAC1B,KAAK,MAAM,CAAC,EAAE,QAAQ,CAAC,IAAI,cAAc,EAAE,CAAC;YAC1C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC;gBAAE,iBAAiB,EAAE,CAAC;QAC3C,CAAC;QAED,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,GAAG,CAAC;YACtC,CAAC,CAAC,iBAAiB,GAAG,cAAc,CAAC,IAAI;YACzC,CAAC,CAAC,CAAC,CAAC;QAEN,OAAO;YACL,IAAI;YACJ,UAAU,EAAE,QAAQ,KAAK,CAAC;YAC1B,QAAQ;SACT,CAAC;IACJ,CAAC;IAED,2DAA2D;IAEnD,KAAK,CAAC,cAAc,CAC1B,YAA8B,EAC9B,aAA0C;QAE1C,MAAM,WAAW,GAAa,EAAE,CAAC;QAEjC,0EAA0E;QAC1E,MAAM,gBAAgB,GAAG,aAAa,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE;YACvD,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAC3D,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,CACtD,CAAC;YACF,MAAM,eAAe,GAAG,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CACpD,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAC/C,CAAC;YACF,OAAO,eAAe,IAAI,eAAe,CAAC;QAC5C,CAAC,CAAC,CAAC;QAEH,gEAAgE;QAChE,yDAAyD;QACzD,KAAK,MAAM,QAAQ,IAAI,gBAAgB,EAAE,CAAC;YACxC,KAAK,MAAM,QAAQ,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;gBAC/C,kEAAkE;gBAClE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC;oBAAE,SAAS;gBAE3E,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAC3C,QAAQ,CAAC,KAAK,EACd,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,CACxB,CAAC;gBAEF,MAAM,cAAc,GAAG,MAAM,gBAAgB,CAC3C,YAAY,CAAC,KAAK,EAClB,QAAQ,CAAC,UAAU,EACnB,QAAQ,CAAC,cAAc,CACxB,CAAC;gBAEF,0CAA0C;gBAC1C,IAAI,cAAc,CAAC,OAAO,KAAK,cAAc,CAAC,OAAO,EAAE,CAAC;oBACtD,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;oBAC9B,MAAM,CAAC,kCAAkC;gBAC3C,CAAC;YACH,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC;YACvC,CAAC,CAAC,GAAG,WAAW,CAAC,MAAM,uNAAuN;YAC9O,CAAC,CAAC,mCAAmC,CAAC;QAExC,OAAO;YACL,iBAAiB,EAAE,WAAW;YAC9B,UAAU;SACX,CAAC;IACJ,CAAC;CACF"}

package/dist/runtime/rule-proposal-manager.d.ts

@@ -0,0 +1,95 @@
+import { RuleMetaVerifier } from './rule-meta-verifier.js';
+import { RuleConflictDetector, type ConflictReport } from './rule-conflict-detector.js';
+import { RuleCanaryDeployer } from './rule-canary-deployer.js';
+import type { VerificationRule, RuleMetaVerification, ModificationProposal, ModificationApproval, ProposalStatus } from './types.js';
+export interface PendingRuleApproval {
+    readonly proposal: ModificationProposal;
+    readonly metaVerification: RuleMetaVerification;
+    readonly conflictReport: ConflictReport;
+    readonly ruleDefinition: VerificationRule;
+}
+export declare class RuleProposalManager {
+    private metaVerifier;
+    private conflictDetector;
+    private canaryDeployer;
+    private pendingApprovals;
+    private activeRules;
+    constructor(opts?: {
+        metaVerifier?: RuleMetaVerifier;
+        conflictDetector?: RuleConflictDetector;
+        canaryDeployer?: RuleCanaryDeployer;
+        existingRules?: VerificationRule[];
+    });
+    /**
+     * Propose a new verification rule.
+     * Runs meta-verification and conflict detection, then queues for approval.
+     */
+    propose(rule: VerificationRule, justification: {
+        capability_gap: string;
+        evidence: string[];
+        expected_impact: string;
+        risk_assessment: string;
+    }): Promise<{
+        proposalId: string;
+        metaVerification: RuleMetaVerification;
+        conflictReport: ConflictReport;
+        status: ProposalStatus;
+    }>;
+    /**
+     * List all pending rule approvals.
+     */
+    listPending(): PendingRuleApproval[];
+    /**
+     * Get a specific pending approval.
+     */
+    getPending(proposalId: string): PendingRuleApproval | undefined;
+    /**
+     * Approve a pending rule proposal.
+     * Starts the canary deployment pipeline.
+     */
+    approve(proposalId: string, approvedBy: string, reasoning: string): {
+        approval: ModificationApproval;
+        rule: VerificationRule;
+        canaryStage: string;
+    };
+    /**
+     * Reject a pending rule proposal.
+     */
+    reject(proposalId: string, rejectedBy: string, reasoning: string): ModificationApproval;
+    /**
+     * Check if a canary rule is ready to promote.
+     */
+    checkCanaryPromotion(ruleId: string): {
+        action: 'promote' | 'wait' | 'rollback';
+        nextStage?: string;
+        reason: string;
+    };
+    /**
+     * Promote a canary rule to the next stage.
+     * When promoted to full_rollout, adds to active rules.
+     */
+    promoteCanary(ruleId: string): {
+        promoted: boolean;
+        stage: string;
+        isActive: boolean;
+    };
+    /**
+     * Rollback a canary deployment.
+     */
+    rollbackCanary(ruleId: string): {
+        success: boolean;
+        reason: string;
+    };
+    /**
+     * Get the canary deployer (for recording evaluations externally).
+     */
+    getCanaryDeployer(): RuleCanaryDeployer;
+    /**
+     * Get all active rules.
+     */
+    getActiveRules(): readonly VerificationRule[];
+    /**
+     * Add a rule to the active set (used when loading from registry).
+     */
+    addActiveRule(rule: VerificationRule): void;
+}

package/dist/runtime/rule-proposal-manager.js

@@ -0,0 +1,190 @@
+// ============================================================
+// Assay Verified Agent Runtime — Rule Proposal Manager
+// Orchestrates: propose → meta-verify → conflict-check →
+// approve → canary deploy → promote to production.
+// ============================================================
+import { randomUUID } from 'node:crypto';
+import { RuleMetaVerifier } from './rule-meta-verifier.js';
+import { RuleConflictDetector } from './rule-conflict-detector.js';
+import { RuleCanaryDeployer } from './rule-canary-deployer.js';
+// ── Rule Proposal Manager ──────────────────────────────
+export class RuleProposalManager {
+    metaVerifier;
+    conflictDetector;
+    canaryDeployer;
+    pendingApprovals = new Map();
+    activeRules = [];
+    constructor(opts) {
+        this.metaVerifier = opts?.metaVerifier ?? new RuleMetaVerifier();
+        this.conflictDetector = opts?.conflictDetector ?? new RuleConflictDetector();
+        this.canaryDeployer = opts?.canaryDeployer ?? new RuleCanaryDeployer();
+        this.activeRules = opts?.existingRules ? [...opts.existingRules] : [];
+    }
+    /**
+     * Propose a new verification rule.
+     * Runs meta-verification and conflict detection, then queues for approval.
+     */
+    async propose(rule, justification) {
+        const proposalId = `mod_rule_${Date.now()}_${randomUUID().slice(0, 8)}`;
+        // Step 1: Meta-verification
+        const metaVerification = await this.metaVerifier.verify(rule, this.activeRules);
+        // Step 2: Conflict detection
+        const conflictReport = this.conflictDetector.checkNewRule(rule, this.activeRules);
+        // Determine status
+        const blockers = [...metaVerification.blockers];
+        if (conflictReport.direct_conflicts.length > 0) {
+            blockers.push(`${conflictReport.direct_conflicts.length} direct conflict(s) with existing rules`);
+        }
+        if (conflictReport.transitive_chains.length > 0) {
+            blockers.push(`${conflictReport.transitive_chains.length} transitive conflict chain(s) detected`);
+        }
+        const status = blockers.length > 0 ? 'rejected' : 'pending_approval';
+        // Create proposal
+        const proposal = {
+            id: proposalId,
+            type: 'rule',
+            timestamp: new Date().toISOString(),
+            title: `New rule: ${rule.name}`,
+            description: `${rule.substrate} rule targeting ${rule.target.claim_categories.join(', ')} in ${rule.target.languages.join(', ')}`,
+            payload: rule,
+            justification,
+            safety: {
+                modifies_layer2: false,
+                modifies_approval_framework: false,
+                trust_level_required: 'elevated',
+                rollback_plan: `Deprecate rule ${rule.id} and rollback canary deployment`,
+            },
+            proposed_by: rule.created_by,
+            status,
+            verification_id: metaVerification.verification_id,
+        };
+        if (status !== 'rejected') {
+            this.pendingApprovals.set(proposalId, {
+                proposal,
+                metaVerification,
+                conflictReport,
+                ruleDefinition: rule,
+            });
+        }
+        return {
+            proposalId,
+            metaVerification,
+            conflictReport,
+            status,
+        };
+    }
+    /**
+     * List all pending rule approvals.
+     */
+    listPending() {
+        return Array.from(this.pendingApprovals.values());
+    }
+    /**
+     * Get a specific pending approval.
+     */
+    getPending(proposalId) {
+        return this.pendingApprovals.get(proposalId);
+    }
+    /**
+     * Approve a pending rule proposal.
+     * Starts the canary deployment pipeline.
+     */
+    approve(proposalId, approvedBy, reasoning) {
+        const pending = this.pendingApprovals.get(proposalId);
+        if (!pending) {
+            throw new Error(`No pending approval found for "${proposalId}"`);
+        }
+        const approval = {
+            proposal_id: proposalId,
+            decision: 'approved',
+            decided_by: approvedBy,
+            decided_at: new Date().toISOString(),
+            reasoning,
+        };
+        // Update rule status
+        const approvedRule = {
+            ...pending.ruleDefinition,
+            approved_by: approvedBy,
+            approved_at: new Date().toISOString(),
+            status: 'shadow',
+        };
+        // Start canary deployment
+        const deployment = this.canaryDeployer.startDeployment(approvedRule);
+        // Remove from pending
+        this.pendingApprovals.delete(proposalId);
+        return {
+            approval,
+            rule: approvedRule,
+            canaryStage: deployment.stage,
+        };
+    }
+    /**
+     * Reject a pending rule proposal.
+     */
+    reject(proposalId, rejectedBy, reasoning) {
+        const pending = this.pendingApprovals.get(proposalId);
+        if (!pending) {
+            throw new Error(`No pending approval found for "${proposalId}"`);
+        }
+        this.pendingApprovals.delete(proposalId);
+        return {
+            proposal_id: proposalId,
+            decision: 'rejected',
+            decided_by: rejectedBy,
+            decided_at: new Date().toISOString(),
+            reasoning,
+        };
+    }
+    /**
+     * Check if a canary rule is ready to promote.
+     */
+    checkCanaryPromotion(ruleId) {
+        return this.canaryDeployer.checkPromotion(ruleId);
+    }
+    /**
+     * Promote a canary rule to the next stage.
+     * When promoted to full_rollout, adds to active rules.
+     */
+    promoteCanary(ruleId) {
+        const deployment = this.canaryDeployer.promote(ruleId);
+        if (!deployment) {
+            return { promoted: false, stage: 'unknown', isActive: false };
+        }
+        const isActive = deployment.stage === 'full_rollout';
+        // If fully rolled out, add to active rules
+        if (isActive) {
+            // Find the rule in canary state and mark as active
+            // (The actual rule data would be stored in the capability registry in production)
+        }
+        return {
+            promoted: true,
+            stage: deployment.stage,
+            isActive,
+        };
+    }
+    /**
+     * Rollback a canary deployment.
+     */
+    rollbackCanary(ruleId) {
+        return this.canaryDeployer.rollback(ruleId);
+    }
+    /**
+     * Get the canary deployer (for recording evaluations externally).
+     */
+    getCanaryDeployer() {
+        return this.canaryDeployer;
+    }
+    /**
+     * Get all active rules.
+     */
+    getActiveRules() {
+        return this.activeRules;
+    }
+    /**
+     * Add a rule to the active set (used when loading from registry).
+     */
+    addActiveRule(rule) {
+        this.activeRules.push(rule);
+    }
+}
+//# sourceMappingURL=rule-proposal-manager.js.map

package/dist/runtime/rule-proposal-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rule-proposal-manager.js","sourceRoot":"","sources":["../../src/runtime/rule-proposal-manager.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,uDAAuD;AACvD,yDAAyD;AACzD,mDAAmD;AACnD,+DAA+D;AAE/D,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAuB,MAAM,6BAA6B,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAoB/D,0DAA0D;AAE1D,MAAM,OAAO,mBAAmB;IACtB,YAAY,CAAmB;IAC/B,gBAAgB,CAAuB;IACvC,cAAc,CAAqB;IACnC,gBAAgB,GAAqC,IAAI,GAAG,EAAE,CAAC;IAC/D,WAAW,GAAuB,EAAE,CAAC;IAE7C,YAAY,IAKX;QACC,IAAI,CAAC,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACjE,IAAI,CAAC,gBAAgB,GAAG,IAAI,EAAE,gBAAgB,IAAI,IAAI,oBAAoB,EAAE,CAAC;QAC7E,IAAI,CAAC,cAAc,GAAG,IAAI,EAAE,cAAc,IAAI,IAAI,kBAAkB,EAAE,CAAC;QACvE,IAAI,CAAC,WAAW,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CACX,IAAsB,EACtB,aAKC;QAOD,MAAM,UAAU,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;QAExE,4BAA4B;QAC5B,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAEhF,6BAA6B;QAC7B,MAAM,cAAc,GAAG,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAElF,mBAAmB;QACnB,MAAM,QAAQ,GAAa,CAAC,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,cAAc,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,gBAAgB,CAAC,MAAM,yCAAyC,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,cAAc,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChD,QAAQ,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,iBAAiB,CAAC,MAAM,wCAAwC,CAAC,CAAC;QACpG,CAAC;QAED,MAAM,MAAM,GAAmB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC;QAErF,kBAAkB;QAClB,MAAM,QAAQ,GAAyB;YACrC,EAAE,EAAE,UAAU;YACd,IAAI,EAAE,MAAM;YACZ,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,KAAK,EAAE,aAAa,IAAI,CAAC,IAAI,EAAE;YAC/B,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,mBAAmB,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACjI,OAAO,EAAE,IAAI;YACb,aAAa;YACb,MAAM,EAAE;gBACN,eAAe,EAAE,KAAc;gBAC/B,2BAA2B,EAAE,KAAc;gBAC3C,oBAAoB,EAAE,UAAwB;gBAC9C,aAAa,EAAE,kBAAkB,IAAI,CAAC,EAAE,iCAAiC;aAC1E;YACD,WAAW,EAAE,IAAI,CAAC,UAAU;YAC5B,MAAM;YACN,eAAe,EAAE,gBAAgB,CAAC,eAAe;SAClD,CAAC;QAEF,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,EAAE;gBACpC,QAAQ;gBACR,gBAAgB;gBAChB,cAAc;gBACd,cAAc,EAAE,IAAI;aACrB,CAAC,CAAC;QACL,CAAC;QAED,OAAO;YACL,UAAU;YACV,gBAAgB;YAChB,cAAc;YACd,MAAM;SACP,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,WAAW;QACT,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,EAAE,CAAC,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAkB;QAC3B,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED;;;OAGG;IACH,OAAO,CACL,UAAkB,EAClB,UAAkB,EAClB,SAAiB;QAMjB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,MAAM,QAAQ,GAAyB;YACrC,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS;SACV,CAAC;QAEF,qBAAqB;QACrB,MAAM,YAAY,GAAqB;YACrC,GAAG,OAAO,CAAC,cAAc;YACzB,WAAW,EAAE,UAAU;YACvB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACrC,MAAM,EAAE,QAAsB;SAC/B,CAAC;QAEF,0BAA0B;QAC1B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAErE,sBAAsB;QACtB,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEzC,OAAO;YACL,QAAQ;YACR,IAAI,EAAE,YAAY;YAClB,WAAW,EAAE,UAAU,CAAC,KAAK;SAC9B,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CACJ,UAAkB,EAClB,UAAkB,EAClB,SAAiB;QAEjB,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,kCAAkC,UAAU,GAAG,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAEzC,OAAO;YACL,WAAW,EAAE,UAAU;YACvB,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,UAAU;YACtB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACpC,SAAS;SACV,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,oBAAoB,CAAC,MAAc;QAKjC,OAAO,IAAI,CAAC,cAAc,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,aAAa,CAAC,MAAc;QAK1B,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAChE,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,KAAK,cAAc,CAAC;QAErD,2CAA2C;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACb,mDAAmD;YACnD,kFAAkF;QACpF,CAAC;QAED,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,cAAc,CAAC,MAAc;QAC3B,OAAO,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IAED;;OAEG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,cAAc,CAAC;IAC7B,CAAC;IAED;;OAEG;IACH,cAAc;QACZ,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,IAAsB;QAClC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;CACF"}

package/dist/runtime/safety-enforcer.d.ts

@@ -0,0 +1,35 @@
+import type { SafetyPolicy, SafetyCircuitBreaker } from './types.js';
+import type { TrustManager } from './trust-manager.js';
+import type { CollusionDetector } from './collusion-detector.js';
+import type { HumanEscalationManager, EscalationContext } from './human-escalation.js';
+export declare class SafetyEnforcer {
+    private policy;
+    private trustManager;
+    private collusionDetector;
+    private escalationManager;
+    private breakers;
+    private halted;
+    private haltReason;
+    constructor(policy: SafetyPolicy, trustManager: TrustManager, collusionDetector: CollusionDetector, escalationManager: HumanEscalationManager);
+    /**
+     * Check all safety signals and trip breakers if thresholds exceeded.
+     * Returns whether the system should halt.
+     */
+    evaluate(context: EscalationContext): {
+        shouldHalt: boolean;
+        trippedBreakers: SafetyCircuitBreaker[];
+        reason: string | null;
+    };
+    /**
+     * Check if a specific task has exceeded reject cycles.
+     */
+    checkTaskRejectCycles(taskId: string, attempts: number, context: EscalationContext): boolean;
+    /** Get all circuit breakers and their states. */
+    getBreakers(): readonly SafetyCircuitBreaker[];
+    /** Check if the system is halted. */
+    isHalted(): boolean;
+    /** Get the halt reason if halted. */
+    getHaltReason(): string | null;
+    /** Reset all circuit breakers (e.g., after human intervention). */
+    reset(): void;
+}