usesteady 0.1.0-alpha.1

package/dist/src/product/session-resilience/session-snapshot-types.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Session Snapshot Types — Phase 6C.
+ *
+ * Defines the versioned, serializable snapshot format for CursorSessionState.
+ *
+ * ── Design rules ──────────────────────────────────────────────────────────────
+ *
+ *   - Pure data only. No methods, no functions, no class instances.
+ *   - No hidden references. Everything in a snapshot is a JSON-safe value.
+ *   - No filesystem logic in this type layer.
+ *   - Version field is required and checked on restore.
+ *   - A mismatch in version → safe fallback (never crash).
+ *
+ * ── Authority constraint ──────────────────────────────────────────────────────
+ *
+ *   A snapshot carries session state for persistence only.
+ *   Restoring a snapshot does NOT re-run intake, delivery, or any gate logic.
+ *   Authority boundaries remain unchanged after restore.
+ */
+import type { CursorSessionState } from "../cursor-product-session.js";
+/**
+ * CursorSessionSnapshot — a versioned, point-in-time capture of session state.
+ *
+ *   version  — snapshot format version. Must be 1. Checked on restore.
+ *   savedAt  — Unix timestamp (ms) when the snapshot was taken.
+ *   state    — the full CursorSessionState at save time.
+ *
+ * Snapshots are opaque to consumers: pass to restoreSession(), inspect nothing.
+ */
+export type CursorSessionSnapshot = {
+    readonly version: 1;
+    readonly savedAt: number;
+    readonly state: CursorSessionState;
+};
+//# sourceMappingURL=session-snapshot-types.d.ts.map

package/dist/src/product/session-resilience/session-snapshot-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-snapshot-types.d.ts","sourceRoot":"","sources":["../../../../src/product/session-resilience/session-snapshot-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAEvE;;;;;;;;GAQG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAI,kBAAkB,CAAC;CACtC,CAAC"}

package/dist/src/product/session-resilience/session-snapshot-types.js

@@ -0,0 +1,21 @@
+/**
+ * Session Snapshot Types — Phase 6C.
+ *
+ * Defines the versioned, serializable snapshot format for CursorSessionState.
+ *
+ * ── Design rules ──────────────────────────────────────────────────────────────
+ *
+ *   - Pure data only. No methods, no functions, no class instances.
+ *   - No hidden references. Everything in a snapshot is a JSON-safe value.
+ *   - No filesystem logic in this type layer.
+ *   - Version field is required and checked on restore.
+ *   - A mismatch in version → safe fallback (never crash).
+ *
+ * ── Authority constraint ──────────────────────────────────────────────────────
+ *
+ *   A snapshot carries session state for persistence only.
+ *   Restoring a snapshot does NOT re-run intake, delivery, or any gate logic.
+ *   Authority boundaries remain unchanged after restore.
+ */
+export {};
+//# sourceMappingURL=session-snapshot-types.js.map

package/dist/src/product/session-resilience/session-snapshot-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-snapshot-types.js","sourceRoot":"","sources":["../../../../src/product/session-resilience/session-snapshot-types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG"}

package/dist/src/product/session-resilience/session-staleness.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Session Staleness — Phase 6C.
+ *
+ * Annotates a session as fresh, stale-approved, or stale-other based on
+ * elapsed time since the session entered the "prepared" phase.
+ *
+ * ── Authority constraint ──────────────────────────────────────────────────────
+ *
+ *   Staleness is ANNOTATION ONLY. It has zero routing authority.
+ *   It does not block any transition. It does not change isTerminal().
+ *   It does not auto-approve or auto-deliver anything.
+ *   It only answers the question: "how old is this session?"
+ *
+ * ── stale_approved semantics ─────────────────────────────────────────────────
+ *
+ *   stale_approved applies only to "approved"-phase sessions.
+ *   It signals that H approved some time ago but delivery has not happened,
+ *   which is the highest-risk staleness pattern (approved but undelivered).
+ *
+ *   stale_approved is NOT terminal. The session can still be delivered.
+ *   The caller decides whether to surface the warning, prompt re-approval, etc.
+ *
+ * ── stale_other semantics ────────────────────────────────────────────────────
+ *
+ *   stale_other applies to non-terminal, non-approved sessions that have
+ *   exceeded the staleness threshold. Lower severity than stale_approved.
+ *
+ *   Terminal sessions always return "fresh" (they are complete; staleness
+ *   is not a meaningful concept for finalized sessions).
+ */
+import type { CursorSessionState } from "../cursor-product-session.js";
+/**
+ * SessionStaleness — the staleness annotation for a session.
+ *
+ *   fresh          — session is within the acceptable time window.
+ *   stale_approved — session is in "approved" phase and has exceeded the threshold.
+ *                    Highest-risk pattern: approved but undelivered for too long.
+ *   stale_other    — session is in a non-approved live phase and has exceeded the threshold.
+ */
+export type SessionStaleness = "fresh" | "stale_approved" | "stale_other";
+/**
+ * Evaluate the staleness of a session.
+ *
+ * @param state        The session state to evaluate.
+ * @param now          Current Unix timestamp in ms.
+ * @param staleAfterMs Age threshold in ms. Sessions older than this are stale.
+ *
+ * Returns "fresh" for terminal sessions (terminal = done; not meaningfully stale).
+ * Returns "fresh" when preparedAt is absent (no timestamp → cannot be stale).
+ * Returns "stale_approved" when phase is "approved" and age > threshold.
+ * Returns "stale_other" for other live phases when age > threshold.
+ */
+export declare function evaluateSessionStaleness(state: CursorSessionState, now: number, staleAfterMs: number): SessionStaleness;
+//# sourceMappingURL=session-staleness.d.ts.map

package/dist/src/product/session-resilience/session-staleness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-staleness.d.ts","sourceRoot":"","sources":["../../../../src/product/session-resilience/session-staleness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAKvE;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAI1E;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAS,kBAAkB,EAChC,GAAG,EAAW,MAAM,EACpB,YAAY,EAAE,MAAM,GACnB,gBAAgB,CAgBlB"}

package/dist/src/product/session-resilience/session-staleness.js

@@ -0,0 +1,62 @@
+/**
+ * Session Staleness — Phase 6C.
+ *
+ * Annotates a session as fresh, stale-approved, or stale-other based on
+ * elapsed time since the session entered the "prepared" phase.
+ *
+ * ── Authority constraint ──────────────────────────────────────────────────────
+ *
+ *   Staleness is ANNOTATION ONLY. It has zero routing authority.
+ *   It does not block any transition. It does not change isTerminal().
+ *   It does not auto-approve or auto-deliver anything.
+ *   It only answers the question: "how old is this session?"
+ *
+ * ── stale_approved semantics ─────────────────────────────────────────────────
+ *
+ *   stale_approved applies only to "approved"-phase sessions.
+ *   It signals that H approved some time ago but delivery has not happened,
+ *   which is the highest-risk staleness pattern (approved but undelivered).
+ *
+ *   stale_approved is NOT terminal. The session can still be delivered.
+ *   The caller decides whether to surface the warning, prompt re-approval, etc.
+ *
+ * ── stale_other semantics ────────────────────────────────────────────────────
+ *
+ *   stale_other applies to non-terminal, non-approved sessions that have
+ *   exceeded the staleness threshold. Lower severity than stale_approved.
+ *
+ *   Terminal sessions always return "fresh" (they are complete; staleness
+ *   is not a meaningful concept for finalized sessions).
+ */
+import { isTerminal } from "../cursor-product-session.js";
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Evaluate the staleness of a session.
+ *
+ * @param state        The session state to evaluate.
+ * @param now          Current Unix timestamp in ms.
+ * @param staleAfterMs Age threshold in ms. Sessions older than this are stale.
+ *
+ * Returns "fresh" for terminal sessions (terminal = done; not meaningfully stale).
+ * Returns "fresh" when preparedAt is absent (no timestamp → cannot be stale).
+ * Returns "stale_approved" when phase is "approved" and age > threshold.
+ * Returns "stale_other" for other live phases when age > threshold.
+ */
+export function evaluateSessionStaleness(state, now, staleAfterMs) {
+    // Terminal sessions are complete — staleness does not apply.
+    if (isTerminal(state))
+        return "fresh";
+    // Need a preparedAt timestamp to measure age.
+    const preparedAt = state.preparedAt;
+    if (preparedAt === undefined)
+        return "fresh";
+    const age = now - preparedAt;
+    if (age <= staleAfterMs)
+        return "fresh";
+    // "approved" is the most critical staleness case (approved but undelivered).
+    if (state.phase === "approved")
+        return "stale_approved";
+    // All other live phases (prepared, conflict, scope_question, idle).
+    return "stale_other";
+}
+//# sourceMappingURL=session-staleness.js.map

package/dist/src/product/session-resilience/session-staleness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-staleness.js","sourceRoot":"","sources":["../../../../src/product/session-resilience/session-staleness.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAc1D,iFAAiF;AAEjF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CACtC,KAAgC,EAChC,GAAoB,EACpB,YAAoB;IAEpB,6DAA6D;IAC7D,IAAI,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC;IAEtC,8CAA8C;IAC9C,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;IACpC,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,OAAO,CAAC;IAE7C,MAAM,GAAG,GAAG,GAAG,GAAG,UAAU,CAAC;IAC7B,IAAI,GAAG,IAAI,YAAY;QAAE,OAAO,OAAO,CAAC;IAExC,6EAA6E;IAC7E,IAAI,KAAK,CAAC,KAAK,KAAK,UAAU;QAAE,OAAO,gBAAgB,CAAC;IAExD,oEAAoE;IACpE,OAAO,aAAa,CAAC;AACvB,CAAC"}

package/dist/src/product/session-resilience/session-summary.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Session Summary — Phase 6C.
+ *
+ * Produces a deterministic, human-readable summary of a terminal session.
+ *
+ * ── Contract ──────────────────────────────────────────────────────────────────
+ *
+ *   summarizeSession(state) → SessionSummary | null
+ *
+ *   Returns null for non-terminal sessions.
+ *   For terminal sessions, returns a summary derived only from actual state facts.
+ *   No narrative invention. No references to unexecuted actions.
+ *   Deterministic: same state → same summary.
+ *
+ * ── Authority constraint ──────────────────────────────────────────────────────
+ *
+ *   This function reads state facts and describes them.
+ *   It does not evaluate, route, or re-run any upstream logic.
+ */
+import type { CursorSessionState } from "../cursor-product-session.js";
+/**
+ * SessionSummary — a terminal session audit record.
+ *
+ *   finalPhase  — the exact phase the session terminated in.
+ *   headline    — one-sentence summary of the outcome.
+ *   notes       — zero or more supporting detail items derived from state.
+ */
+export type SessionSummary = {
+    readonly finalPhase: string;
+    readonly headline: string;
+    readonly notes: readonly string[];
+};
+/**
+ * Summarize a terminal session into a structured audit record.
+ *
+ * Returns null for non-terminal sessions.
+ * Returns a SessionSummary for all terminal phases.
+ */
+export declare function summarizeSession(state: CursorSessionState): SessionSummary | null;
+//# sourceMappingURL=session-summary.d.ts.map

package/dist/src/product/session-resilience/session-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-summary.d.ts","sourceRoot":"","sources":["../../../../src/product/session-resilience/session-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAKvE;;;;;;GAMG;AACH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAI,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAO,SAAS,MAAM,EAAE,CAAC;CACxC,CAAC;AAIF;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,cAAc,GAAG,IAAI,CA8BjF"}

package/dist/src/product/session-resilience/session-summary.js

@@ -0,0 +1,72 @@
+/**
+ * Session Summary — Phase 6C.
+ *
+ * Produces a deterministic, human-readable summary of a terminal session.
+ *
+ * ── Contract ──────────────────────────────────────────────────────────────────
+ *
+ *   summarizeSession(state) → SessionSummary | null
+ *
+ *   Returns null for non-terminal sessions.
+ *   For terminal sessions, returns a summary derived only from actual state facts.
+ *   No narrative invention. No references to unexecuted actions.
+ *   Deterministic: same state → same summary.
+ *
+ * ── Authority constraint ──────────────────────────────────────────────────────
+ *
+ *   This function reads state facts and describes them.
+ *   It does not evaluate, route, or re-run any upstream logic.
+ */
+import { isTerminal } from "../cursor-product-session.js";
+// ─── Public API ───────────────────────────────────────────────────────────────
+/**
+ * Summarize a terminal session into a structured audit record.
+ *
+ * Returns null for non-terminal sessions.
+ * Returns a SessionSummary for all terminal phases.
+ */
+export function summarizeSession(state) {
+    if (!isTerminal(state))
+        return null;
+    const notes = [];
+    if (state.input) {
+        notes.push(`Input: "${state.input}"`);
+    }
+    if (state.display.changeSummary) {
+        notes.push(`Change: ${state.display.changeSummary}`);
+    }
+    if (state.display.targetFiles && state.display.targetFiles.length > 0) {
+        notes.push(`Target: ${state.display.targetFiles.join(", ")}`);
+    }
+    if (state.display.resultNote) {
+        notes.push(`Note: ${state.display.resultNote}`);
+    }
+    if (state.intentId) {
+        notes.push(`Intent ID: ${state.intentId}`);
+    }
+    return {
+        finalPhase: state.phase,
+        headline: headlineFor(state),
+        notes,
+    };
+}
+// ─── Internal ─────────────────────────────────────────────────────────────────
+function headlineFor(state) {
+    switch (state.phase) {
+        case "accepted":
+            return "Edit was applied successfully.";
+        case "rejected":
+            return "Edit was rejected by the user.";
+        case "exec_error":
+            return "Execution failed with an error.";
+        case "blocked":
+            return "Session was blocked and could not complete.";
+        case "not_execute":
+            return "Input was not an executable edit command.";
+        case "intake_failed":
+            return "Intake pipeline encountered an unexpected error.";
+        default:
+            return `Session ended in phase: ${state.phase}.`;
+    }
+}
+//# sourceMappingURL=session-summary.js.map

package/dist/src/product/session-resilience/session-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-summary.js","sourceRoot":"","sources":["../../../../src/product/session-resilience/session-summary.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAiB1D,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAyB;IACxD,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAE3B,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC;IACxC,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,IAAI,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtE,KAAK,CAAC,IAAI,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnB,KAAK,CAAC,IAAI,CAAC,cAAc,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,KAAK;QACvB,QAAQ,EAAI,WAAW,CAAC,KAAK,CAAC;QAC9B,KAAK;KACN,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF,SAAS,WAAW,CAAC,KAAyB;IAC5C,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,gCAAgC,CAAC;QAC1C,KAAK,UAAU;YACb,OAAO,gCAAgC,CAAC;QAC1C,KAAK,YAAY;YACf,OAAO,iCAAiC,CAAC;QAC3C,KAAK,SAAS;YACZ,OAAO,6CAA6C,CAAC;QACvD,KAAK,aAAa;YAChB,OAAO,2CAA2C,CAAC;QACrD,KAAK,eAAe;YAClB,OAAO,kDAAkD,CAAC;QAC5D;YACE,OAAO,2BAA2B,KAAK,CAAC,KAAK,GAAG,CAAC;IACrD,CAAC;AACH,CAAC"}

package/dist/src/prv/patterns.d.ts

@@ -0,0 +1,32 @@
+/**
+ * PRV patterns — HIGH-SIGNAL, LEXICAL context-dependency detection only.
+ *
+ * CONTRACT (PRV / Context Alignment boundary):
+ *   PRV is LEXICAL. It fires on the clearest, most unambiguous markers where
+ *   the input is obviously dependent on a prior state without exception.
+ *
+ *   Context Alignment is SEMANTIC. It handles cases where a reference word
+ *   might or might not depend on context depending on phrasing.
+ *
+ * PRV patterns MUST be:
+ *   - Unambiguous: the word virtually always references prior state
+ *   - Whole-word matched: no substring false positives
+ *   - Few: false positives (blocking safe inputs) are worse than false negatives
+ *
+ * Removed patterns and why:
+ *   \bsame\b  — too broad: "I feel the same", "same day delivery" are not context refs.
+ *              → Context Alignment handles "same file", "same as before" semantically.
+ *   \bthat\b  — too broad: "that's great", "I love that idea" are not context refs.
+ *              → Context Alignment handles "that file", "that result" semantically.
+ *
+ * Kept / narrowed patterns:
+ *   \bagain\b      — "run again", "do it again" always reference a prior action
+ *   \bcontinue\b   — "continue" always implies something to continue from
+ *   \bprevious\b   — "previous run/result" always references prior state
+ *   \bsame\s+as\b  — "same as before" is specific enough to be unambiguous
+ */
+export declare function requiresContext(input: string): boolean;
+export declare function hasRequiredContext(ctx: {
+    readonly hasPriorSession: boolean;
+}): boolean;
+//# sourceMappingURL=patterns.d.ts.map

package/dist/src/prv/patterns.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.d.ts","sourceRoot":"","sources":["../../../src/prv/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AASH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE;IAAE,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAA;CAAE,GAAG,OAAO,CAEtF"}

package/dist/src/prv/patterns.js

@@ -0,0 +1,40 @@
+/**
+ * PRV patterns — HIGH-SIGNAL, LEXICAL context-dependency detection only.
+ *
+ * CONTRACT (PRV / Context Alignment boundary):
+ *   PRV is LEXICAL. It fires on the clearest, most unambiguous markers where
+ *   the input is obviously dependent on a prior state without exception.
+ *
+ *   Context Alignment is SEMANTIC. It handles cases where a reference word
+ *   might or might not depend on context depending on phrasing.
+ *
+ * PRV patterns MUST be:
+ *   - Unambiguous: the word virtually always references prior state
+ *   - Whole-word matched: no substring false positives
+ *   - Few: false positives (blocking safe inputs) are worse than false negatives
+ *
+ * Removed patterns and why:
+ *   \bsame\b  — too broad: "I feel the same", "same day delivery" are not context refs.
+ *              → Context Alignment handles "same file", "same as before" semantically.
+ *   \bthat\b  — too broad: "that's great", "I love that idea" are not context refs.
+ *              → Context Alignment handles "that file", "that result" semantically.
+ *
+ * Kept / narrowed patterns:
+ *   \bagain\b      — "run again", "do it again" always reference a prior action
+ *   \bcontinue\b   — "continue" always implies something to continue from
+ *   \bprevious\b   — "previous run/result" always references prior state
+ *   \bsame\s+as\b  — "same as before" is specific enough to be unambiguous
+ */
+const CONTEXT_DEPENDENCY_PATTERNS = [
+    /\bagain\b/i,
+    /\bcontinue\b/i,
+    /\bprevious\b/i,
+    /\bsame\s+as\b/i, // "same as before" — specific; not broad "same"
+];
+export function requiresContext(input) {
+    return CONTEXT_DEPENDENCY_PATTERNS.some((pattern) => pattern.test(input));
+}
+export function hasRequiredContext(ctx) {
+    return ctx.hasPriorSession;
+}
+//# sourceMappingURL=patterns.js.map

package/dist/src/prv/patterns.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"patterns.js","sourceRoot":"","sources":["../../../src/prv/patterns.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,MAAM,2BAA2B,GAA0B;IACzD,YAAY;IACZ,eAAe;IACf,eAAe;IACf,gBAAgB,EAAG,gDAAgD;CACpE,CAAC;AAEF,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,2BAA2B,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAA0C;IAC3E,OAAO,GAAG,CAAC,eAAe,CAAC;AAC7B,CAAC"}

package/dist/src/prv/prv.d.ts

@@ -0,0 +1,13 @@
+/**
+ * PRV — Pre-Response Validation.
+ *
+ * runPRV is the mandatory first check before any response is generated.
+ * If PRV fails, no further processing occurs.
+ *
+ * Behavior:
+ *   - If input requires prior context AND no context exists → clarify
+ *   - Otherwise → ok
+ */
+import type { PRVResult, PRVContext } from "./types.js";
+export declare function runPRV(input: string, ctx: PRVContext): PRVResult;
+//# sourceMappingURL=prv.d.ts.map

package/dist/src/prv/prv.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prv.d.ts","sourceRoot":"","sources":["../../../src/prv/prv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAGxD,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,SAAS,CAUhE"}

package/dist/src/prv/prv.js

@@ -0,0 +1,22 @@
+/**
+ * PRV — Pre-Response Validation.
+ *
+ * runPRV is the mandatory first check before any response is generated.
+ * If PRV fails, no further processing occurs.
+ *
+ * Behavior:
+ *   - If input requires prior context AND no context exists → clarify
+ *   - Otherwise → ok
+ */
+import { requiresContext, hasRequiredContext } from "./patterns.js";
+export function runPRV(input, ctx) {
+    if (requiresContext(input) && !hasRequiredContext(ctx)) {
+        return {
+            ok: false,
+            mode: "clarify",
+            reason: "This request depends on prior context, but none is available.",
+        };
+    }
+    return { ok: true };
+}
+//# sourceMappingURL=prv.js.map

package/dist/src/prv/prv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prv.js","sourceRoot":"","sources":["../../../src/prv/prv.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAEpE,MAAM,UAAU,MAAM,CAAC,KAAa,EAAE,GAAe;IACnD,IAAI,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,SAAS;YACf,MAAM,EACJ,+DAA+D;SAClE,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/src/prv/types.d.ts

@@ -0,0 +1,26 @@
+/**
+ * PRV — Pre-Response Validation types.
+ *
+ * PRV is the first gate every input must pass before any processing occurs.
+ * Its job is narrow: detect inputs that depend on prior context that does not exist.
+ *
+ * PRV does NOT:
+ *   - perform semantic reasoning
+ *   - classify intent
+ *   - suggest responses
+ *
+ * PRV only answers: "Can this input be processed at all?"
+ */
+export type PRVResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly mode: "clarify";
+    readonly reason: string;
+};
+export type PRVContext = {
+    readonly hasPriorSession: boolean;
+    readonly lastInput?: string;
+    readonly lastResult?: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/src/prv/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/prv/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,MAAM,MAAM,SAAS,GACjB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9E,MAAM,MAAM,UAAU,GAAG;IACvB,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B,CAAC"}

package/dist/src/prv/types.js

@@ -0,0 +1,15 @@
+/**
+ * PRV — Pre-Response Validation types.
+ *
+ * PRV is the first gate every input must pass before any processing occurs.
+ * Its job is narrow: detect inputs that depend on prior context that does not exist.
+ *
+ * PRV does NOT:
+ *   - perform semantic reasoning
+ *   - classify intent
+ *   - suggest responses
+ *
+ * PRV only answers: "Can this input be processed at all?"
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/prv/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/prv/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG"}

package/dist/src/safety/detectors/arbitrary-exec.detector.d.ts

@@ -0,0 +1,3 @@
+import type { SafetyDetector } from "../types.js";
+export declare const arbitraryExecDetector: SafetyDetector;
+//# sourceMappingURL=arbitrary-exec.detector.d.ts.map

package/dist/src/safety/detectors/arbitrary-exec.detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"arbitrary-exec.detector.d.ts","sourceRoot":"","sources":["../../../../src/safety/detectors/arbitrary-exec.detector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,aAAa,CAAC;AAkBhE,eAAO,MAAM,qBAAqB,EAAE,cAkBnC,CAAC"}

package/dist/src/safety/detectors/arbitrary-exec.detector.js

@@ -0,0 +1,31 @@
+const PATTERNS = [
+    { regex: /\brun\s+bash\b/i, label: "run bash" },
+    // Match "execute shell", "execute this shell", "execute a shell command", etc.
+    { regex: /\bexecute\s+(?:this\s+|a\s+|an?\s+)?shell\b/i, label: "execute shell" },
+    { regex: /\bcurl\b.*\|/i, label: "curl | (pipe)" },
+    { regex: /\bpowershell\s+command\b/i, label: "powershell command" },
+    { regex: /\beval\s*\(/i, label: "eval()" },
+    { regex: /\bsh\s+-c\b/i, label: "sh -c" },
+];
+function findMatch(input) {
+    return PATTERNS.find(({ regex }) => regex.test(input)) ?? null;
+}
+export const arbitraryExecDetector = {
+    id: "arbitrary_script_execution",
+    priority: 40,
+    supports(input) {
+        return findMatch(input) !== null;
+    },
+    detect(input) {
+        const match = findMatch(input);
+        if (match === null)
+            return null;
+        return {
+            verdict: "block",
+            reason: "arbitrary_script_execution",
+            matchedPattern: match.label,
+            note: "Input contains a pattern associated with arbitrary script or shell execution.",
+        };
+    },
+};
+//# sourceMappingURL=arbitrary-exec.detector.js.map

package/dist/src/safety/detectors/arbitrary-exec.detector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"arbitrary-exec.detector.js","sourceRoot":"","sources":["../../../../src/safety/detectors/arbitrary-exec.detector.ts"],"names":[],"mappings":"AAIA,MAAM,QAAQ,GAAkC;IAC9C,EAAE,KAAK,EAAE,iBAAiB,EAA0B,KAAK,EAAE,UAAU,EAAE;IACvE,+EAA+E;IAC/E,EAAE,KAAK,EAAE,8CAA8C,EAAE,KAAK,EAAE,eAAe,EAAE;IACjF,EAAE,KAAK,EAAE,eAAe,EAA4B,KAAK,EAAE,eAAe,EAAE;IAC5E,EAAE,KAAK,EAAE,2BAA2B,EAAgB,KAAK,EAAE,oBAAoB,EAAE;IACjF,EAAE,KAAK,EAAE,cAAc,EAA6B,KAAK,EAAE,QAAQ,EAAE;IACrE,EAAE,KAAK,EAAE,cAAc,EAA6B,KAAK,EAAE,OAAO,EAAE;CACrE,CAAC;AAEF,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;AACjE,CAAC;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,EAAE,EAAE,4BAA4B;IAChC,QAAQ,EAAE,EAAE;IAEZ,QAAQ,CAAC,KAAa;QACpB,OAAO,SAAS,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,KAAa;QAClB,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAChC,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,4BAA4B;YACpC,cAAc,EAAE,KAAK,CAAC,KAAK;YAC3B,IAAI,EAAE,+EAA+E;SACtF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/src/safety/detectors/bulk-data-exfil.detector.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Bulk data exfiltration detector.
+ *
+ * Catches inputs that combine:
+ *   - a data-movement verb (export, dump, extract, download, send, pull, get)
+ *   - with a bulk-scope qualifier (all, every, entire, full)
+ *   - with a sensitive target (customer, user, account + emails, passwords,
+ *     credentials, data, PII, records)
+ *
+ * Also catches standalone high-signal credential-dump phrases regardless
+ * of the bulk qualifier.
+ *
+ * Scope: NARROW. Only fires on language that clearly describes bulk exfiltration
+ * of sensitive user data. Does not fire on legitimate analytics queries
+ * ("pull the conversion funnel") or single-record lookups.
+ *
+ * Priority: 15 (between destructive_mass_action:10 and credential_or_secret_access:20)
+ */
+import type { SafetyDetector } from "../types.js";
+export declare const bulkDataExfilDetector: SafetyDetector;
+//# sourceMappingURL=bulk-data-exfil.detector.d.ts.map

package/dist/src/safety/detectors/bulk-data-exfil.detector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bulk-data-exfil.detector.d.ts","sourceRoot":"","sources":["../../../../src/safety/detectors/bulk-data-exfil.detector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAgB,MAAM,aAAa,CAAC;AA6DhE,eAAO,MAAM,qBAAqB,EAAE,cAkBnC,CAAC"}