@agent-surface/cli 0.11.1 → 0.12.1

package/README.md

@@ -19,10 +19,11 @@ A presentation surface only exists once components mount — it is a projection
 ```tsx
 // agent-surface.config.tsx
 import { defineSurface } from "@agent-surface/cli";
-import { createApp } from "./src/agent/setup.js";   // already exists
+import { agentManifest, createApp } from "./src/agent/setup.js";   // already exists
 import { App } from "./src/app/App.js";             // already exists
 
 export default defineSurface({
+  manifest: agentManifest,
   mount: ({ user }) => {
     const app = createApp({ environment: "test", user });
     return { registry: app.registry, ui: <App app={app} />, app };
@@ -42,13 +43,13 @@ Loading goes through vite-node on your own `vite.config.*`, so your aliases, plu
 agent-surface init                  # read the codebase, then scaffold a config
 agent-surface inspect [scenario]    # what an agent can reach, and what it cannot
 agent-surface snapshot [scenario]   # write/refresh the committed baseline
-agent-surface check [scenario]      # exit non-zero on drift, or on a capability no scenario reaches
+agent-surface check [scenario]      # fail drift, gaps, rejections, stale scenarios
 ```
 
 Every command covers all scenarios in the config unless you name one. `inspect` prints each in turn:
 
 ```text
-10 authored (upper bound) · 10 call sites across 21 files · domain not analyzed, it comes from the oRPC router
+11 authored (upper bound) · 10 call sites across 21 files · 1 domain manifest capability
 
 scenario admin  route /devices
 9 callable, 2 visible-disabled, 0 hidden
@@ -62,12 +63,12 @@ devices.table.sort        action       local-state  callable  idempotent · reve
 devices.disable           procedure    destructive  disabled  confirmation:required · deviceIds bound+locked
     ⤷ Select at least one device first
 
-10 authored · 10 reached · 0 unreached · 1 scenario (admin)
+11 authored · 11 reached · 0 unreached · 1 scenario (admin)
 ```
 
 Every count names what it is relative to — the scenario always, the scope when one is active. A surface is a projection of one mounted context, never "the app".
 
-`--detail` swaps the table for one paragraph per capability; `--explain` and `--schemas` imply it.
+`--detail` shows full capability, origin, and diagnostic detail; `--explain` and `--schemas` imply it.
 
 ### Depth
 

package/dist/bin.js

@@ -56,7 +56,7 @@ Options
   --config <path>       path to agent-surface.config.* (default: nearest, searching upward)
   --baseline-dir        where baselines live (default: .agent-surface next to the config)
   --scope <prefix>      restrict to a component-type prefix (repeatable)
-  --detail              one paragraph per capability instead of the table
+  --detail              full capability, origin, and diagnostic detail
   --explain             name the policies behind every decision (implies --detail)
   --schemas             include input/output JSON Schemas (implies --detail)
   --tsconfig <path>     tsconfig the source read uses (default: nearest to the config)
@@ -131,7 +131,7 @@ async function main(argv = process.argv.slice(2)) {
   const depth = values.depth;
   try {
     if (command === "init") {
-      const { runInit } = await import("./init-ODFEGU3P.js");
+      const { runInit } = await import("./init-LFQ5R3G7.js");
       return await runInit({
         cwd: process.cwd(),
         ...values.tsconfig ? { tsconfig: values.tsconfig } : {},
@@ -158,7 +158,7 @@ async function main(argv = process.argv.slice(2)) {
       ...values["baseline-dir"] ? { baselineDir: values["baseline-dir"] } : {}
     };
     if (command === "inspect") {
-      const { runInspect } = await import("./inspect-6XKULUH2.js");
+      const { runInspect } = await import("./inspect-XMDZBSK2.js");
       return await runInspect({
         ...shared,
         ...values.detail ? { detail: true } : {},
@@ -167,12 +167,13 @@ async function main(argv = process.argv.slice(2)) {
       });
     }
     if (command === "snapshot") {
-      const { runSnapshot } = await import("./snapshot-YGEDJVTG.js");
+      const { runSnapshot } = await import("./snapshot-FLXE5UC6.js");
       return await runSnapshot(shared);
     }
-    const { runCheck } = await import("./check-XU3FYNGJ.js");
+    const { runCheck } = await import("./check-POE5VRSE.js");
     return await runCheck({
       ...shared,
+      ...values.detail ? { detail: true } : {},
       ...values["allow-unresolved"] ? { allowUnresolved: true } : {}
     });
   } catch (error) {
@@ -228,7 +229,14 @@ function exitWhenWedged(code) {
     if (held.length > 0) {
       const kinds = [...new Set(held)].sort().join(", ");
       writeError(
-        `agent-surface: the output above is complete, but ${held.length} handle(s) are still open (${kinds}) \u2014 something started during the mount is still running, so this command would have waited instead of exiting. Common causes: a polling interval, a websocket, or a data layer whose cache timer outlives the render. Exiting ${code}.`
+        [
+          "",
+          "PROCESS CLEANUP  WARN",
+          `Open handles  ${held.length} (${kinds})`,
+          "Impact        report complete; exit code unchanged; process exit forced",
+          "Likely cause  polling, websocket, or a cache timer created during mount",
+          `Exit          ${code}`
+        ].join("\n")
       );
     }
     void flushOutput().then(() => process.exit(code));

package/dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/bin.ts","../src/dom.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { parseArgs } from \"node:util\";\nimport { DEPTHS, isDepth } from \"./contract.js\";\nimport { installDom } from \"./dom.js\";\nimport { findConfig } from \"./load.js\";\nimport { writeError, write } from \"./output.js\";\n\nconst USAGE = `agent-surface — the agent surface your app exposes\n\nUsage\n  agent-surface init                     read the codebase, then scaffold a config\n  agent-surface inspect    [scenario]    what an agent can reach, and what it cannot\n  agent-surface snapshot   [scenario]    write/refresh the committed baseline\n  agent-surface check      [scenario]    fail on drift, or on a capability no scenario reaches\n\nEvery command covers all scenarios in the config unless you name one.\n\nDepth\n  --depth full          read the source AND mount the scenarios, and report the gap (default)\n  --depth static        read the source only — no Vite, no jsdom, no mount, no scenarios needed\n  --depth runtime       mount only — skip the TypeScript program on a repo wide enough to feel it\n\nOptions\n  --config <path>       path to agent-surface.config.* (default: nearest, searching upward)\n  --baseline-dir        where baselines live (default: .agent-surface next to the config)\n  --scope <prefix>      restrict to a component-type prefix (repeatable)\n  --detail              one paragraph per capability instead of the table\n  --explain             name the policies behind every decision (implies --detail)\n  --schemas             include input/output JSON Schemas (implies --detail)\n  --tsconfig <path>     tsconfig the source read uses (default: nearest to the config)\n  --allow-unresolved    check: do not fail on a call site that could not be read\n  --yes                 init: write without asking\n  --json                emit data instead of a rendered view\n  --plain               force plain text (implied when piped, or under CI / NO_COLOR)\n  -h, --help            show this\n  -v, --version         print the version\n\nExit codes are the contract: 0 clean, 1 a finding, 2 the command could not run.\n`;\n\nconst COMMANDS = [\"init\", \"inspect\", \"snapshot\", \"check\"];\n\n/** Commands that were cut, and where their answer went (0.11.0). */\nconst RETIRED: Record<string, string> = {\n  capabilities: \"agent-surface inspect --depth static\",\n  coverage: \"agent-surface inspect (or `check`, which now fails on the gap)\",\n};\n\nexport async function main(argv: string[] = process.argv.slice(2)): Promise<number> {\n  let parsed;\n  try {\n    parsed = parseArgs({\n      args: argv,\n      allowPositionals: true,\n      options: {\n        config: { type: \"string\" },\n        \"baseline-dir\": { type: \"string\" },\n        scope: { type: \"string\", multiple: true },\n        depth: { type: \"string\", default: \"full\" },\n        detail: { type: \"boolean\", default: false },\n        explain: { type: \"boolean\", default: false },\n        schemas: { type: \"boolean\", default: false },\n        tsconfig: { type: \"string\" },\n        \"allow-unresolved\": { type: \"boolean\", default: false },\n        yes: { type: \"boolean\", default: false },\n        json: { type: \"boolean\", default: false },\n        plain: { type: \"boolean\", default: false },\n        help: { type: \"boolean\", short: \"h\", default: false },\n        version: { type: \"boolean\", short: \"v\", default: false },\n      },\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    writeError(USAGE);\n    return 2;\n  }\n\n  const { values, positionals } = parsed;\n  if (values.help) {\n    write(USAGE);\n    return 0;\n  }\n  if (values.version) {\n    write(await readVersion());\n    return 0;\n  }\n\n  const [command, scenario] = positionals;\n  if (!command) {\n    write(USAGE);\n    return 2;\n  }\n  if (!COMMANDS.includes(command)) {\n    const moved = RETIRED[command];\n    writeError(\n      moved\n        ? `\"${command}\" was removed in 0.11 — its answer is now \\`${moved}\\`. ` +\n            \"The static catalog and the live projection are one command, so the gap between \" +\n            \"them is reported rather than left for whoever remembers to look.\"\n        : `unknown command \"${command}\"`,\n    );\n    if (!moved) writeError(USAGE);\n    return 2;\n  }\n\n  if (!isDepth(values.depth)) {\n    writeError(`--depth must be one of ${DEPTHS.join(\", \")} — got \"${values.depth}\"`);\n    return 2;\n  }\n  const depth = values.depth;\n\n  try {\n    if (command === \"init\") {\n      // Nothing to find and nothing to mount: `init` is the command that runs\n      // before a config exists.\n      const { runInit } = await import(\"./commands/init.js\");\n      return await runInit({\n        cwd: process.cwd(),\n        ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n        ...(values.yes ? { yes: true } : {}),\n        ...(values.plain ? { plain: true } : {}),\n      });\n    }\n\n    const configPath = values.config ?? findConfig();\n    if (!configPath) {\n      writeError(\n        \"no agent-surface.config.* found (searched upward from the working directory).\\n\" +\n          \"Run `agent-surface init`, or see https://agent-surface-docs.vercel.app/20-cli\",\n      );\n      return 2;\n    }\n\n    // A presentation surface needs a DOM to mount into, and react-dom reads\n    // these globals at import time — so this must happen before any app module\n    // loads. It stays installed for the life of the process, on purpose\n    // (see dom.ts).\n    //\n    // `--depth static` is the exception, and deliberately so: it reads the\n    // TypeScript program and mounts nothing, so it must not pay for — or be\n    // able to be affected by — a DOM it never renders into.\n    if (depth !== \"static\") installDom();\n\n    const shared = {\n      configPath,\n      depth,\n      ...(scenario ? { scenario } : {}),\n      ...(values.scope ? { scope: values.scope } : {}),\n      ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n      ...(values.json ? { json: true } : {}),\n      ...(values.plain ? { plain: true } : {}),\n      ...(values[\"baseline-dir\"] ? { baselineDir: values[\"baseline-dir\"] } : {}),\n    };\n\n    if (command === \"inspect\") {\n      const { runInspect } = await import(\"./commands/inspect.js\");\n      return await runInspect({\n        ...shared,\n        ...(values.detail ? { detail: true } : {}),\n        ...(values.explain ? { explain: true } : {}),\n        ...(values.schemas ? { schemas: true } : {}),\n      });\n    }\n    if (command === \"snapshot\") {\n      const { runSnapshot } = await import(\"./commands/snapshot.js\");\n      return await runSnapshot(shared);\n    }\n    const { runCheck } = await import(\"./commands/check.js\");\n    return await runCheck({\n      ...shared,\n      ...(values[\"allow-unresolved\"] ? { allowUnresolved: true } : {}),\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    if (error instanceof Error && error.stack && process.env[\"AGENT_SURFACE_DEBUG\"]) {\n      writeError(error.stack);\n    }\n    // `2` — the command could not run, as opposed to running and finding\n    // something. CI has to tell those apart: a gate that exits 1 both when the\n    // surface changed and when the tool never loaded the app is a gate whose\n    // green is the only signal worth anything, and whose red says nothing.\n    return 2;\n  }\n}\n\nasync function readVersion(): Promise<string> {\n  try {\n    const { readFileSync } = await import(\"node:fs\");\n    const path = fileURLToPath(new URL(\"../package.json\", import.meta.url));\n    return (JSON.parse(readFileSync(path, \"utf8\")) as { version: string }).version;\n  } catch {\n    return \"unknown\";\n  }\n}\n\n/**\n * Self-execute only as a binary; importing this module (tests) must not run it.\n * `argv[1]` is compared through `realpathSync` because package managers install\n * the bin as a symlink — comparing the raw path silently never matches, and the\n * CLI exits 0 having done nothing.\n */\nfunction invokedAsBinary(): boolean {\n  const entry = process.argv[1];\n  if (!entry) return false;\n  try {\n    return fileURLToPath(import.meta.url) === realpathSync(entry);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * How long a finished command is allowed to keep running before it is treated\n * as wedged. Costs a hung run one extra second; costs a healthy run nothing,\n * because a healthy run has already exited by then.\n */\nconst GRACE_MS = 1000;\n\n/**\n * What this process's own stdin/stdout/stderr are called, depending on where\n * they were pointed: a terminal, a `|`, or a `>`. None of the three holds the\n * event loop open — a clean run exits naturally through all of them — so when\n * something *else* has wedged the command they are still in the handle table,\n * and naming them would send the reader after the one thing that is not the\n * cause. Their own leak would be the CLI's bug to fix, not the app's to hear\n * about.\n */\nconst OWN_STDIO = new Set([\"TTYWrap\", \"PipeWrap\", \"FileWrap\"]);\n\n/** Resource types still holding the loop once the command is provably wedged. */\nfunction heldHandles(): string[] {\n  const active = process.getActiveResourcesInfo?.() ?? [];\n  return active.filter((resource) => !OWN_STDIO.has(resource));\n}\n\n/**\n * `process.exit()` discards whatever is still buffered on a pipe, so a\n * redirected run could lose its last lines — and redirected runs are the ones\n * that matter (`--json`, CI logs). Drain both streams first, but never wait\n * indefinitely: a reader that has stopped consuming must not turn a forced exit\n * back into the hang it exists to prevent.\n */\nasync function flushOutput(): Promise<void> {\n  const drained = Promise.all(\n    [process.stdout, process.stderr].map(\n      (stream) =>\n        new Promise<void>((resolve) => {\n          if (stream.writableLength === 0) resolve();\n          else stream.write(\"\", () => resolve());\n        }),\n    ),\n  );\n  const deadline = new Promise<void>((resolve) => {\n    setTimeout(resolve, 2000).unref();\n  });\n  await Promise.race([drained, deadline]);\n}\n\n/**\n * Ends the process, and says why it had to be ended when that is the case.\n *\n * The mount is an arbitrary React tree, not code written for a one-shot\n * process: a polling interval, a websocket, an animation loop or a data layer's\n * cache timer all keep Node's event loop alive long after the surface has been\n * rendered. Setting `process.exitCode` alone means such a command prints its\n * full, correct output and then appears to hang — with a successful exit code\n * already set, and nothing on screen to explain the wait (`AS-CLI-005`).\n *\n * The detector is the timer itself, not a reading of the handle table. An\n * unref'd timer does not hold the loop open, so a command with nothing left to\n * do exits naturally on `process.exitCode` and this never fires. Its firing is\n * therefore the diagnosis — this run *was* about to hang — and whatever it then\n * finds in the handle table is genuinely the cause. Reading the table eagerly\n * instead would blame the app for the CLI's own teardown: vite's dev server is\n * still closing its socket at the moment the last scenario is rendered, so\n * every healthy run would accuse its own app of leaking a `TCPServerWrap`.\n *\n * Naming the handles is the same move the package already makes for\n * capabilities: the invisible thing becomes inspectable. Exiting anyway is what\n * makes the tool usable unattended.\n */\nfunction exitWhenWedged(code: number): void {\n  process.exitCode = code;\n  setTimeout(() => {\n    const held = heldHandles();\n    if (held.length > 0) {\n      const kinds = [...new Set(held)].sort().join(\", \");\n      writeError(\n        `agent-surface: the output above is complete, but ${held.length} handle(s) are still ` +\n          `open (${kinds}) — something started during the mount is still running, so this ` +\n          `command would have waited instead of exiting. Common causes: a polling interval, a ` +\n          `websocket, or a data layer whose cache timer outlives the render. Exiting ${code}.`,\n      );\n    }\n    void flushOutput().then(() => process.exit(code));\n  }, GRACE_MS).unref();\n}\n\nif (invokedAsBinary()) {\n  main().then(\n    (code) => exitWhenWedged(code),\n    (error: unknown) => {\n      writeError(error instanceof Error ? error.message : String(error));\n      exitWhenWedged(1);\n    },\n  );\n}\n","import { JSDOM } from \"jsdom\";\n\n/**\n * A presentation surface only exists once components mount, and mounting needs\n * a DOM. Vitest gets one from its `jsdom` environment; a plain Node process has\n * to install one itself — *before* anything imports `react-dom`, which reads\n * these globals at module scope.\n *\n * Process-wide on purpose, and permanent: the app tree runs inside the\n * vite-node graph, which shares this realm's globals, and there is deliberately\n * no way to take the DOM back down — see the note on teardown below. Returning\n * nothing is the honest signature; an installer that handed back a disposer\n * doing nothing would read, at every call site, as cleanup that happens.\n */\nexport function installDom(url = \"http://localhost/\"): void {\n  const globals = globalThis as Record<string, unknown>;\n  if (typeof globals[\"document\"] !== \"undefined\") return;\n\n  const dom = new JSDOM(\"<!doctype html><html><body></body></html>\", {\n    url,\n    pretendToBeVisual: true,\n  });\n  const { window } = dom;\n\n  // Everything jsdom's window defines that this realm does not already have.\n  // Skipping existing keys matters: Node's own `fetch`, `URL` and timers are\n  // more capable than jsdom's shims, and clobbering them breaks app code.\n  for (const key of Object.getOwnPropertyNames(window)) {\n    if (key.startsWith(\"_\")) continue;\n    if (key in globals) continue;\n    const descriptor = Object.getOwnPropertyDescriptor(window, key);\n    if (!descriptor) continue;\n    Object.defineProperty(globals, key, descriptor);\n  }\n\n  for (const key of [\"window\", \"document\", \"navigator\"] as const) {\n    if (!(key in globals)) {\n      Object.defineProperty(globals, key, { value: window[key], configurable: true });\n    }\n  }\n}\n\n/**\n * There is deliberately no teardown, and the DOM is deliberately process-wide.\n *\n * `react-dom` captures `window`/`document` when it is first imported. Removing\n * the globals — or worse, calling `window.close()` — leaves that captured\n * reference pointing at a dead realm, so the *next* mount in the same process\n * fails in a way that looks nothing like its cause. A CLI invocation ends by\n * exiting (see `exitWhenWedged` in `bin.ts`), so there is nothing to reclaim; only\n * in-process callers (the test suite) run more than one command, and those are\n * exactly the ones this protects.\n */\n"],"mappings":";;;;;;;;;;AACA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB;;;ACH1B,SAAS,aAAa;AAcf,SAAS,WAAW,MAAM,qBAA2B;AAC1D,QAAM,UAAU;AAChB,MAAI,OAAO,QAAQ,UAAU,MAAM,YAAa;AAEhD,QAAM,MAAM,IAAI,MAAM,6CAA6C;AAAA,IACjE;AAAA,IACA,mBAAmB;AAAA,EACrB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI;AAKnB,aAAW,OAAO,OAAO,oBAAoB,MAAM,GAAG;AACpD,QAAI,IAAI,WAAW,GAAG,EAAG;AACzB,QAAI,OAAO,QAAS;AACpB,UAAM,aAAa,OAAO,yBAAyB,QAAQ,GAAG;AAC9D,QAAI,CAAC,WAAY;AACjB,WAAO,eAAe,SAAS,KAAK,UAAU;AAAA,EAChD;AAEA,aAAW,OAAO,CAAC,UAAU,YAAY,WAAW,GAAY;AAC9D,QAAI,EAAE,OAAO,UAAU;AACrB,aAAO,eAAe,SAAS,KAAK,EAAE,OAAO,OAAO,GAAG,GAAG,cAAc,KAAK,CAAC;AAAA,IAChF;AAAA,EACF;AACF;;;AD/BA,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiCd,IAAM,WAAW,CAAC,QAAQ,WAAW,YAAY,OAAO;AAGxD,IAAM,UAAkC;AAAA,EACtC,cAAc;AAAA,EACd,UAAU;AACZ;AAEA,eAAsB,KAAK,OAAiB,QAAQ,KAAK,MAAM,CAAC,GAAoB;AAClF,MAAI;AACJ,MAAI;AACF,aAAS,UAAU;AAAA,MACjB,MAAM;AAAA,MACN,kBAAkB;AAAA,MAClB,SAAS;AAAA,QACP,QAAQ,EAAE,MAAM,SAAS;AAAA,QACzB,gBAAgB,EAAE,MAAM,SAAS;AAAA,QACjC,OAAO,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,QACxC,OAAO,EAAE,MAAM,UAAU,SAAS,OAAO;AAAA,QACzC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC1C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,UAAU,EAAE,MAAM,SAAS;AAAA,QAC3B,oBAAoB,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACtD,KAAK,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACvC,MAAM,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACxC,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACzC,MAAM,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,QACpD,SAAS,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,MACzD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,QAAQ,YAAY,IAAI;AAChC,MAAI,OAAO,MAAM;AACf,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,OAAO,SAAS;AAClB,UAAM,MAAM,YAAY,CAAC;AACzB,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,SAAS,QAAQ,IAAI;AAC5B,MAAI,CAAC,SAAS;AACZ,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,SAAS,OAAO,GAAG;AAC/B,UAAM,QAAQ,QAAQ,OAAO;AAC7B;AAAA,MACE,QACI,IAAI,OAAO,oDAA+C,KAAK,wJAG/D,oBAAoB,OAAO;AAAA,IACjC;AACA,QAAI,CAAC,MAAO,YAAW,KAAK;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,QAAQ,OAAO,KAAK,GAAG;AAC1B,eAAW,0BAA0B,OAAO,KAAK,IAAI,CAAC,gBAAW,OAAO,KAAK,GAAG;AAChF,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO;AAErB,MAAI;AACF,QAAI,YAAY,QAAQ;AAGtB,YAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,oBAAoB;AACrD,aAAO,MAAM,QAAQ;AAAA,QACnB,KAAK,QAAQ,IAAI;AAAA,QACjB,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,QACvD,GAAI,OAAO,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,QAClC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,OAAO,UAAU,WAAW;AAC/C,QAAI,CAAC,YAAY;AACf;AAAA,QACE;AAAA,MAEF;AACA,aAAO;AAAA,IACT;AAUA,QAAI,UAAU,SAAU,YAAW;AAEnC,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MAC9C,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvD,GAAI,OAAO,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,MACpC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACtC,GAAI,OAAO,cAAc,IAAI,EAAE,aAAa,OAAO,cAAc,EAAE,IAAI,CAAC;AAAA,IAC1E;AAEA,QAAI,YAAY,WAAW;AACzB,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,uBAAuB;AAC3D,aAAO,MAAM,WAAW;AAAA,QACtB,GAAG;AAAA,QACH,GAAI,OAAO,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,QACxC,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QAC1C,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,QAAI,YAAY,YAAY;AAC1B,YAAM,EAAE,YAAY,IAAI,MAAM,OAAO,wBAAwB;AAC7D,aAAO,MAAM,YAAY,MAAM;AAAA,IACjC;AACA,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAqB;AACvD,WAAO,MAAM,SAAS;AAAA,MACpB,GAAG;AAAA,MACH,GAAI,OAAO,kBAAkB,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,QAAI,iBAAiB,SAAS,MAAM,SAAS,QAAQ,IAAI,qBAAqB,GAAG;AAC/E,iBAAW,MAAM,KAAK;AAAA,IACxB;AAKA,WAAO;AAAA,EACT;AACF;AAEA,eAAe,cAA+B;AAC5C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,IAAS;AAC/C,UAAM,OAAO,cAAc,IAAI,IAAI,mBAAmB,YAAY,GAAG,CAAC;AACtE,WAAQ,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,EAA0B;AAAA,EACzE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,SAAS,kBAA2B;AAClC,QAAM,QAAQ,QAAQ,KAAK,CAAC;AAC5B,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,cAAc,YAAY,GAAG,MAAM,aAAa,KAAK;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,IAAM,WAAW;AAWjB,IAAM,YAAY,oBAAI,IAAI,CAAC,WAAW,YAAY,UAAU,CAAC;AAG7D,SAAS,cAAwB;AAC/B,QAAM,SAAS,QAAQ,yBAAyB,KAAK,CAAC;AACtD,SAAO,OAAO,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC7D;AASA,eAAe,cAA6B;AAC1C,QAAM,UAAU,QAAQ;AAAA,IACtB,CAAC,QAAQ,QAAQ,QAAQ,MAAM,EAAE;AAAA,MAC/B,CAAC,WACC,IAAI,QAAc,CAAC,YAAY;AAC7B,YAAI,OAAO,mBAAmB,EAAG,SAAQ;AAAA,YACpC,QAAO,MAAM,IAAI,MAAM,QAAQ,CAAC;AAAA,MACvC,CAAC;AAAA,IACL;AAAA,EACF;AACA,QAAM,WAAW,IAAI,QAAc,CAAC,YAAY;AAC9C,eAAW,SAAS,GAAI,EAAE,MAAM;AAAA,EAClC,CAAC;AACD,QAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;AACxC;AAyBA,SAAS,eAAe,MAAoB;AAC1C,UAAQ,WAAW;AACnB,aAAW,MAAM;AACf,UAAM,OAAO,YAAY;AACzB,QAAI,KAAK,SAAS,GAAG;AACnB,YAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI;AACjD;AAAA,QACE,oDAAoD,KAAK,MAAM,8BACpD,KAAK,sOAE+D,IAAI;AAAA,MACrF;AAAA,IACF;AACA,SAAK,YAAY,EAAE,KAAK,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,EAClD,GAAG,QAAQ,EAAE,MAAM;AACrB;AAEA,IAAI,gBAAgB,GAAG;AACrB,OAAK,EAAE;AAAA,IACL,CAAC,SAAS,eAAe,IAAI;AAAA,IAC7B,CAAC,UAAmB;AAClB,iBAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,qBAAe,CAAC;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}
+{"version":3,"sources":["../src/bin.ts","../src/dom.ts"],"sourcesContent":["#!/usr/bin/env node\nimport { realpathSync } from \"node:fs\";\nimport { fileURLToPath } from \"node:url\";\nimport { parseArgs } from \"node:util\";\nimport { DEPTHS, isDepth } from \"./contract.js\";\nimport { installDom } from \"./dom.js\";\nimport { findConfig } from \"./load.js\";\nimport { writeError, write } from \"./output.js\";\n\nconst USAGE = `agent-surface — the agent surface your app exposes\n\nUsage\n  agent-surface init                     read the codebase, then scaffold a config\n  agent-surface inspect    [scenario]    what an agent can reach, and what it cannot\n  agent-surface snapshot   [scenario]    write/refresh the committed baseline\n  agent-surface check      [scenario]    fail on drift, or on a capability no scenario reaches\n\nEvery command covers all scenarios in the config unless you name one.\n\nDepth\n  --depth full          read the source AND mount the scenarios, and report the gap (default)\n  --depth static        read the source only — no Vite, no jsdom, no mount, no scenarios needed\n  --depth runtime       mount only — skip the TypeScript program on a repo wide enough to feel it\n\nOptions\n  --config <path>       path to agent-surface.config.* (default: nearest, searching upward)\n  --baseline-dir        where baselines live (default: .agent-surface next to the config)\n  --scope <prefix>      restrict to a component-type prefix (repeatable)\n  --detail              full capability, origin, and diagnostic detail\n  --explain             name the policies behind every decision (implies --detail)\n  --schemas             include input/output JSON Schemas (implies --detail)\n  --tsconfig <path>     tsconfig the source read uses (default: nearest to the config)\n  --allow-unresolved    check: do not fail on a call site that could not be read\n  --yes                 init: write without asking\n  --json                emit data instead of a rendered view\n  --plain               force plain text (implied when piped, or under CI / NO_COLOR)\n  -h, --help            show this\n  -v, --version         print the version\n\nExit codes are the contract: 0 clean, 1 a finding, 2 the command could not run.\n`;\n\nconst COMMANDS = [\"init\", \"inspect\", \"snapshot\", \"check\"];\n\n/** Commands that were cut, and where their answer went (0.11.0). */\nconst RETIRED: Record<string, string> = {\n  capabilities: \"agent-surface inspect --depth static\",\n  coverage: \"agent-surface inspect (or `check`, which now fails on the gap)\",\n};\n\nexport async function main(argv: string[] = process.argv.slice(2)): Promise<number> {\n  let parsed;\n  try {\n    parsed = parseArgs({\n      args: argv,\n      allowPositionals: true,\n      options: {\n        config: { type: \"string\" },\n        \"baseline-dir\": { type: \"string\" },\n        scope: { type: \"string\", multiple: true },\n        depth: { type: \"string\", default: \"full\" },\n        detail: { type: \"boolean\", default: false },\n        explain: { type: \"boolean\", default: false },\n        schemas: { type: \"boolean\", default: false },\n        tsconfig: { type: \"string\" },\n        \"allow-unresolved\": { type: \"boolean\", default: false },\n        yes: { type: \"boolean\", default: false },\n        json: { type: \"boolean\", default: false },\n        plain: { type: \"boolean\", default: false },\n        help: { type: \"boolean\", short: \"h\", default: false },\n        version: { type: \"boolean\", short: \"v\", default: false },\n      },\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    writeError(USAGE);\n    return 2;\n  }\n\n  const { values, positionals } = parsed;\n  if (values.help) {\n    write(USAGE);\n    return 0;\n  }\n  if (values.version) {\n    write(await readVersion());\n    return 0;\n  }\n\n  const [command, scenario] = positionals;\n  if (!command) {\n    write(USAGE);\n    return 2;\n  }\n  if (!COMMANDS.includes(command)) {\n    const moved = RETIRED[command];\n    writeError(\n      moved\n        ? `\"${command}\" was removed in 0.11 — its answer is now \\`${moved}\\`. ` +\n            \"The static catalog and the live projection are one command, so the gap between \" +\n            \"them is reported rather than left for whoever remembers to look.\"\n        : `unknown command \"${command}\"`,\n    );\n    if (!moved) writeError(USAGE);\n    return 2;\n  }\n\n  if (!isDepth(values.depth)) {\n    writeError(`--depth must be one of ${DEPTHS.join(\", \")} — got \"${values.depth}\"`);\n    return 2;\n  }\n  const depth = values.depth;\n\n  try {\n    if (command === \"init\") {\n      // Nothing to find and nothing to mount: `init` is the command that runs\n      // before a config exists.\n      const { runInit } = await import(\"./commands/init.js\");\n      return await runInit({\n        cwd: process.cwd(),\n        ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n        ...(values.yes ? { yes: true } : {}),\n        ...(values.plain ? { plain: true } : {}),\n      });\n    }\n\n    const configPath = values.config ?? findConfig();\n    if (!configPath) {\n      writeError(\n        \"no agent-surface.config.* found (searched upward from the working directory).\\n\" +\n          \"Run `agent-surface init`, or see https://agent-surface-docs.vercel.app/20-cli\",\n      );\n      return 2;\n    }\n\n    // A presentation surface needs a DOM to mount into, and react-dom reads\n    // these globals at import time — so this must happen before any app module\n    // loads. It stays installed for the life of the process, on purpose\n    // (see dom.ts).\n    //\n    // `--depth static` is the exception, and deliberately so: it reads the\n    // TypeScript program and mounts nothing, so it must not pay for — or be\n    // able to be affected by — a DOM it never renders into.\n    if (depth !== \"static\") installDom();\n\n    const shared = {\n      configPath,\n      depth,\n      ...(scenario ? { scenario } : {}),\n      ...(values.scope ? { scope: values.scope } : {}),\n      ...(values.tsconfig ? { tsconfig: values.tsconfig } : {}),\n      ...(values.json ? { json: true } : {}),\n      ...(values.plain ? { plain: true } : {}),\n      ...(values[\"baseline-dir\"] ? { baselineDir: values[\"baseline-dir\"] } : {}),\n    };\n\n    if (command === \"inspect\") {\n      const { runInspect } = await import(\"./commands/inspect.js\");\n      return await runInspect({\n        ...shared,\n        ...(values.detail ? { detail: true } : {}),\n        ...(values.explain ? { explain: true } : {}),\n        ...(values.schemas ? { schemas: true } : {}),\n      });\n    }\n    if (command === \"snapshot\") {\n      const { runSnapshot } = await import(\"./commands/snapshot.js\");\n      return await runSnapshot(shared);\n    }\n    const { runCheck } = await import(\"./commands/check.js\");\n    return await runCheck({\n      ...shared,\n      ...(values.detail ? { detail: true } : {}),\n      ...(values[\"allow-unresolved\"] ? { allowUnresolved: true } : {}),\n    });\n  } catch (error) {\n    writeError(error instanceof Error ? error.message : String(error));\n    if (error instanceof Error && error.stack && process.env[\"AGENT_SURFACE_DEBUG\"]) {\n      writeError(error.stack);\n    }\n    // `2` — the command could not run, as opposed to running and finding\n    // something. CI has to tell those apart: a gate that exits 1 both when the\n    // surface changed and when the tool never loaded the app is a gate whose\n    // green is the only signal worth anything, and whose red says nothing.\n    return 2;\n  }\n}\n\nasync function readVersion(): Promise<string> {\n  try {\n    const { readFileSync } = await import(\"node:fs\");\n    const path = fileURLToPath(new URL(\"../package.json\", import.meta.url));\n    return (JSON.parse(readFileSync(path, \"utf8\")) as { version: string }).version;\n  } catch {\n    return \"unknown\";\n  }\n}\n\n/**\n * Self-execute only as a binary; importing this module (tests) must not run it.\n * `argv[1]` is compared through `realpathSync` because package managers install\n * the bin as a symlink — comparing the raw path silently never matches, and the\n * CLI exits 0 having done nothing.\n */\nfunction invokedAsBinary(): boolean {\n  const entry = process.argv[1];\n  if (!entry) return false;\n  try {\n    return fileURLToPath(import.meta.url) === realpathSync(entry);\n  } catch {\n    return false;\n  }\n}\n\n/**\n * How long a finished command is allowed to keep running before it is treated\n * as wedged. Costs a hung run one extra second; costs a healthy run nothing,\n * because a healthy run has already exited by then.\n */\nconst GRACE_MS = 1000;\n\n/**\n * What this process's own stdin/stdout/stderr are called, depending on where\n * they were pointed: a terminal, a `|`, or a `>`. None of the three holds the\n * event loop open — a clean run exits naturally through all of them — so when\n * something *else* has wedged the command they are still in the handle table,\n * and naming them would send the reader after the one thing that is not the\n * cause. Their own leak would be the CLI's bug to fix, not the app's to hear\n * about.\n */\nconst OWN_STDIO = new Set([\"TTYWrap\", \"PipeWrap\", \"FileWrap\"]);\n\n/** Resource types still holding the loop once the command is provably wedged. */\nfunction heldHandles(): string[] {\n  const active = process.getActiveResourcesInfo?.() ?? [];\n  return active.filter((resource) => !OWN_STDIO.has(resource));\n}\n\n/**\n * `process.exit()` discards whatever is still buffered on a pipe, so a\n * redirected run could lose its last lines — and redirected runs are the ones\n * that matter (`--json`, CI logs). Drain both streams first, but never wait\n * indefinitely: a reader that has stopped consuming must not turn a forced exit\n * back into the hang it exists to prevent.\n */\nasync function flushOutput(): Promise<void> {\n  const drained = Promise.all(\n    [process.stdout, process.stderr].map(\n      (stream) =>\n        new Promise<void>((resolve) => {\n          if (stream.writableLength === 0) resolve();\n          else stream.write(\"\", () => resolve());\n        }),\n    ),\n  );\n  const deadline = new Promise<void>((resolve) => {\n    setTimeout(resolve, 2000).unref();\n  });\n  await Promise.race([drained, deadline]);\n}\n\n/**\n * Ends the process, and says why it had to be ended when that is the case.\n *\n * The mount is an arbitrary React tree, not code written for a one-shot\n * process: a polling interval, a websocket, an animation loop or a data layer's\n * cache timer all keep Node's event loop alive long after the surface has been\n * rendered. Setting `process.exitCode` alone means such a command prints its\n * full, correct output and then appears to hang — with a successful exit code\n * already set, and nothing on screen to explain the wait (`AS-CLI-005`).\n *\n * The detector is the timer itself, not a reading of the handle table. An\n * unref'd timer does not hold the loop open, so a command with nothing left to\n * do exits naturally on `process.exitCode` and this never fires. Its firing is\n * therefore the diagnosis — this run *was* about to hang — and whatever it then\n * finds in the handle table is genuinely the cause. Reading the table eagerly\n * instead would blame the app for the CLI's own teardown: vite's dev server is\n * still closing its socket at the moment the last scenario is rendered, so\n * every healthy run would accuse its own app of leaking a `TCPServerWrap`.\n *\n * Naming the handles is the same move the package already makes for\n * capabilities: the invisible thing becomes inspectable. Exiting anyway is what\n * makes the tool usable unattended.\n */\nfunction exitWhenWedged(code: number): void {\n  process.exitCode = code;\n  setTimeout(() => {\n    const held = heldHandles();\n    if (held.length > 0) {\n      const kinds = [...new Set(held)].sort().join(\", \");\n      writeError(\n        [\n          \"\",\n          \"PROCESS CLEANUP  WARN\",\n          `Open handles  ${held.length} (${kinds})`,\n          \"Impact        report complete; exit code unchanged; process exit forced\",\n          \"Likely cause  polling, websocket, or a cache timer created during mount\",\n          `Exit          ${code}`,\n        ].join(\"\\n\"),\n      );\n    }\n    void flushOutput().then(() => process.exit(code));\n  }, GRACE_MS).unref();\n}\n\nif (invokedAsBinary()) {\n  main().then(\n    (code) => exitWhenWedged(code),\n    (error: unknown) => {\n      writeError(error instanceof Error ? error.message : String(error));\n      exitWhenWedged(1);\n    },\n  );\n}\n","import { JSDOM } from \"jsdom\";\n\n/**\n * A presentation surface only exists once components mount, and mounting needs\n * a DOM. Vitest gets one from its `jsdom` environment; a plain Node process has\n * to install one itself — *before* anything imports `react-dom`, which reads\n * these globals at module scope.\n *\n * Process-wide on purpose, and permanent: the app tree runs inside the\n * vite-node graph, which shares this realm's globals, and there is deliberately\n * no way to take the DOM back down — see the note on teardown below. Returning\n * nothing is the honest signature; an installer that handed back a disposer\n * doing nothing would read, at every call site, as cleanup that happens.\n */\nexport function installDom(url = \"http://localhost/\"): void {\n  const globals = globalThis as Record<string, unknown>;\n  if (typeof globals[\"document\"] !== \"undefined\") return;\n\n  const dom = new JSDOM(\"<!doctype html><html><body></body></html>\", {\n    url,\n    pretendToBeVisual: true,\n  });\n  const { window } = dom;\n\n  // Everything jsdom's window defines that this realm does not already have.\n  // Skipping existing keys matters: Node's own `fetch`, `URL` and timers are\n  // more capable than jsdom's shims, and clobbering them breaks app code.\n  for (const key of Object.getOwnPropertyNames(window)) {\n    if (key.startsWith(\"_\")) continue;\n    if (key in globals) continue;\n    const descriptor = Object.getOwnPropertyDescriptor(window, key);\n    if (!descriptor) continue;\n    Object.defineProperty(globals, key, descriptor);\n  }\n\n  for (const key of [\"window\", \"document\", \"navigator\"] as const) {\n    if (!(key in globals)) {\n      Object.defineProperty(globals, key, { value: window[key], configurable: true });\n    }\n  }\n}\n\n/**\n * There is deliberately no teardown, and the DOM is deliberately process-wide.\n *\n * `react-dom` captures `window`/`document` when it is first imported. Removing\n * the globals — or worse, calling `window.close()` — leaves that captured\n * reference pointing at a dead realm, so the *next* mount in the same process\n * fails in a way that looks nothing like its cause. A CLI invocation ends by\n * exiting (see `exitWhenWedged` in `bin.ts`), so there is nothing to reclaim; only\n * in-process callers (the test suite) run more than one command, and those are\n * exactly the ones this protects.\n */\n"],"mappings":";;;;;;;;;;AACA,SAAS,oBAAoB;AAC7B,SAAS,qBAAqB;AAC9B,SAAS,iBAAiB;;;ACH1B,SAAS,aAAa;AAcf,SAAS,WAAW,MAAM,qBAA2B;AAC1D,QAAM,UAAU;AAChB,MAAI,OAAO,QAAQ,UAAU,MAAM,YAAa;AAEhD,QAAM,MAAM,IAAI,MAAM,6CAA6C;AAAA,IACjE;AAAA,IACA,mBAAmB;AAAA,EACrB,CAAC;AACD,QAAM,EAAE,OAAO,IAAI;AAKnB,aAAW,OAAO,OAAO,oBAAoB,MAAM,GAAG;AACpD,QAAI,IAAI,WAAW,GAAG,EAAG;AACzB,QAAI,OAAO,QAAS;AACpB,UAAM,aAAa,OAAO,yBAAyB,QAAQ,GAAG;AAC9D,QAAI,CAAC,WAAY;AACjB,WAAO,eAAe,SAAS,KAAK,UAAU;AAAA,EAChD;AAEA,aAAW,OAAO,CAAC,UAAU,YAAY,WAAW,GAAY;AAC9D,QAAI,EAAE,OAAO,UAAU;AACrB,aAAO,eAAe,SAAS,KAAK,EAAE,OAAO,OAAO,GAAG,GAAG,cAAc,KAAK,CAAC;AAAA,IAChF;AAAA,EACF;AACF;;;AD/BA,IAAM,QAAQ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAiCd,IAAM,WAAW,CAAC,QAAQ,WAAW,YAAY,OAAO;AAGxD,IAAM,UAAkC;AAAA,EACtC,cAAc;AAAA,EACd,UAAU;AACZ;AAEA,eAAsB,KAAK,OAAiB,QAAQ,KAAK,MAAM,CAAC,GAAoB;AAClF,MAAI;AACJ,MAAI;AACF,aAAS,UAAU;AAAA,MACjB,MAAM;AAAA,MACN,kBAAkB;AAAA,MAClB,SAAS;AAAA,QACP,QAAQ,EAAE,MAAM,SAAS;AAAA,QACzB,gBAAgB,EAAE,MAAM,SAAS;AAAA,QACjC,OAAO,EAAE,MAAM,UAAU,UAAU,KAAK;AAAA,QACxC,OAAO,EAAE,MAAM,UAAU,SAAS,OAAO;AAAA,QACzC,QAAQ,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC1C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,SAAS,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QAC3C,UAAU,EAAE,MAAM,SAAS;AAAA,QAC3B,oBAAoB,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACtD,KAAK,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACvC,MAAM,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACxC,OAAO,EAAE,MAAM,WAAW,SAAS,MAAM;AAAA,QACzC,MAAM,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,QACpD,SAAS,EAAE,MAAM,WAAW,OAAO,KAAK,SAAS,MAAM;AAAA,MACzD;AAAA,IACF,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,eAAW,KAAK;AAChB,WAAO;AAAA,EACT;AAEA,QAAM,EAAE,QAAQ,YAAY,IAAI;AAChC,MAAI,OAAO,MAAM;AACf,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,OAAO,SAAS;AAClB,UAAM,MAAM,YAAY,CAAC;AACzB,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,SAAS,QAAQ,IAAI;AAC5B,MAAI,CAAC,SAAS;AACZ,UAAM,KAAK;AACX,WAAO;AAAA,EACT;AACA,MAAI,CAAC,SAAS,SAAS,OAAO,GAAG;AAC/B,UAAM,QAAQ,QAAQ,OAAO;AAC7B;AAAA,MACE,QACI,IAAI,OAAO,oDAA+C,KAAK,wJAG/D,oBAAoB,OAAO;AAAA,IACjC;AACA,QAAI,CAAC,MAAO,YAAW,KAAK;AAC5B,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,QAAQ,OAAO,KAAK,GAAG;AAC1B,eAAW,0BAA0B,OAAO,KAAK,IAAI,CAAC,gBAAW,OAAO,KAAK,GAAG;AAChF,WAAO;AAAA,EACT;AACA,QAAM,QAAQ,OAAO;AAErB,MAAI;AACF,QAAI,YAAY,QAAQ;AAGtB,YAAM,EAAE,QAAQ,IAAI,MAAM,OAAO,oBAAoB;AACrD,aAAO,MAAM,QAAQ;AAAA,QACnB,KAAK,QAAQ,IAAI;AAAA,QACjB,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,QACvD,GAAI,OAAO,MAAM,EAAE,KAAK,KAAK,IAAI,CAAC;AAAA,QAClC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACxC,CAAC;AAAA,IACH;AAEA,UAAM,aAAa,OAAO,UAAU,WAAW;AAC/C,QAAI,CAAC,YAAY;AACf;AAAA,QACE;AAAA,MAEF;AACA,aAAO;AAAA,IACT;AAUA,QAAI,UAAU,SAAU,YAAW;AAEnC,UAAM,SAAS;AAAA,MACb;AAAA,MACA;AAAA,MACA,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,MAC/B,GAAI,OAAO,QAAQ,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MAC9C,GAAI,OAAO,WAAW,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MACvD,GAAI,OAAO,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;AAAA,MACpC,GAAI,OAAO,QAAQ,EAAE,OAAO,KAAK,IAAI,CAAC;AAAA,MACtC,GAAI,OAAO,cAAc,IAAI,EAAE,aAAa,OAAO,cAAc,EAAE,IAAI,CAAC;AAAA,IAC1E;AAEA,QAAI,YAAY,WAAW;AACzB,YAAM,EAAE,WAAW,IAAI,MAAM,OAAO,uBAAuB;AAC3D,aAAO,MAAM,WAAW;AAAA,QACtB,GAAG;AAAA,QACH,GAAI,OAAO,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,QACxC,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,QAC1C,GAAI,OAAO,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AAAA,MAC5C,CAAC;AAAA,IACH;AACA,QAAI,YAAY,YAAY;AAC1B,YAAM,EAAE,YAAY,IAAI,MAAM,OAAO,wBAAwB;AAC7D,aAAO,MAAM,YAAY,MAAM;AAAA,IACjC;AACA,UAAM,EAAE,SAAS,IAAI,MAAM,OAAO,qBAAqB;AACvD,WAAO,MAAM,SAAS;AAAA,MACpB,GAAG;AAAA,MACH,GAAI,OAAO,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,MACxC,GAAI,OAAO,kBAAkB,IAAI,EAAE,iBAAiB,KAAK,IAAI,CAAC;AAAA,IAChE,CAAC;AAAA,EACH,SAAS,OAAO;AACd,eAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,QAAI,iBAAiB,SAAS,MAAM,SAAS,QAAQ,IAAI,qBAAqB,GAAG;AAC/E,iBAAW,MAAM,KAAK;AAAA,IACxB;AAKA,WAAO;AAAA,EACT;AACF;AAEA,eAAe,cAA+B;AAC5C,MAAI;AACF,UAAM,EAAE,aAAa,IAAI,MAAM,OAAO,IAAS;AAC/C,UAAM,OAAO,cAAc,IAAI,IAAI,mBAAmB,YAAY,GAAG,CAAC;AACtE,WAAQ,KAAK,MAAM,aAAa,MAAM,MAAM,CAAC,EAA0B;AAAA,EACzE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAQA,SAAS,kBAA2B;AAClC,QAAM,QAAQ,QAAQ,KAAK,CAAC;AAC5B,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI;AACF,WAAO,cAAc,YAAY,GAAG,MAAM,aAAa,KAAK;AAAA,EAC9D,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAOA,IAAM,WAAW;AAWjB,IAAM,YAAY,oBAAI,IAAI,CAAC,WAAW,YAAY,UAAU,CAAC;AAG7D,SAAS,cAAwB;AAC/B,QAAM,SAAS,QAAQ,yBAAyB,KAAK,CAAC;AACtD,SAAO,OAAO,OAAO,CAAC,aAAa,CAAC,UAAU,IAAI,QAAQ,CAAC;AAC7D;AASA,eAAe,cAA6B;AAC1C,QAAM,UAAU,QAAQ;AAAA,IACtB,CAAC,QAAQ,QAAQ,QAAQ,MAAM,EAAE;AAAA,MAC/B,CAAC,WACC,IAAI,QAAc,CAAC,YAAY;AAC7B,YAAI,OAAO,mBAAmB,EAAG,SAAQ;AAAA,YACpC,QAAO,MAAM,IAAI,MAAM,QAAQ,CAAC;AAAA,MACvC,CAAC;AAAA,IACL;AAAA,EACF;AACA,QAAM,WAAW,IAAI,QAAc,CAAC,YAAY;AAC9C,eAAW,SAAS,GAAI,EAAE,MAAM;AAAA,EAClC,CAAC;AACD,QAAM,QAAQ,KAAK,CAAC,SAAS,QAAQ,CAAC;AACxC;AAyBA,SAAS,eAAe,MAAoB;AAC1C,UAAQ,WAAW;AACnB,aAAW,MAAM;AACf,UAAM,OAAO,YAAY;AACzB,QAAI,KAAK,SAAS,GAAG;AACnB,YAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,IAAI;AACjD;AAAA,QACE;AAAA,UACE;AAAA,UACA;AAAA,UACA,iBAAiB,KAAK,MAAM,KAAK,KAAK;AAAA,UACtC;AAAA,UACA;AAAA,UACA,iBAAiB,IAAI;AAAA,QACvB,EAAE,KAAK,IAAI;AAAA,MACb;AAAA,IACF;AACA,SAAK,YAAY,EAAE,KAAK,MAAM,QAAQ,KAAK,IAAI,CAAC;AAAA,EAClD,GAAG,QAAQ,EAAE,MAAM;AACrB;AAEA,IAAI,gBAAgB,GAAG;AACrB,OAAK,EAAE;AAAA,IACL,CAAC,SAAS,eAAe,IAAI;AAAA,IAC7B,CAAC,UAAmB;AAClB,iBAAW,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AACjE,qBAAe,CAAC;AAAA,IAClB;AAAA,EACF;AACF;","names":[]}

package/dist/check-POE5VRSE.js

@@ -0,0 +1,183 @@
+import {
+  coverageReport,
+  renderCheckOverviewPlain,
+  renderCoveragePlain,
+  renderDriftPlain,
+  renderFailuresPlain,
+  renderNoVerdictPlain,
+  scenarioBaseline
+} from "./chunk-J2NN3J5N.js";
+import "./chunk-DYDSJM7R.js";
+import {
+  ALLOWLIST_FILE,
+  SCENARIO_MANIFEST_FILE,
+  UNREAD_ALLOWLIST_FILE,
+  annotate,
+  baselinePath,
+  coverageExitCode,
+  diff,
+  joinCoverage,
+  mountScenarios,
+  readBaseline,
+  readInventory,
+  readScenarioManifest
+} from "./chunk-Q5WOLWEW.js";
+import {
+  UsageError,
+  write,
+  writeError
+} from "./chunk-QIVOZAWX.js";
+
+// src/commands/check.ts
+import { existsSync, readdirSync } from "fs";
+import { relative } from "path";
+async function runCheck(options) {
+  if (options.depth === "static") {
+    throw new UsageError(
+      "check --depth static has nothing to compare \u2014 a baseline is a projection, and at this depth nothing is mounted. Use --depth runtime for drift alone, or full for both."
+    );
+  }
+  const analysis = {
+    configPath: options.configPath,
+    depth: options.depth,
+    ...options.scenario ? { scenario: options.scenario } : {},
+    ...options.scope ? { scope: options.scope } : {},
+    ...options.tsconfig ? { tsconfig: options.tsconfig } : {},
+    ...options.baselineDir ? { baselineDir: options.baselineDir } : {}
+  };
+  const inventory = readInventory(analysis);
+  const runtime = await mountScenarios(analysis);
+  if (!runtime) throw new UsageError("check needs a mount, and this depth performs none");
+  const drifted = [];
+  for (const result of runtime.results) {
+    const path = baselinePath(runtime.baselineDir, result.scenario);
+    const expected = readBaseline(path);
+    if (expected === void 0) {
+      drifted.push({ scenario: result.scenario, missingBaseline: true, entries: [] });
+      continue;
+    }
+    const actual = scenarioBaseline(result);
+    const entries = annotate(diff(expected, actual), actual, expected);
+    if (entries.length > 0) drifted.push({ scenario: result.scenario, entries });
+  }
+  const committedScenarios = readScenarioManifest(runtime.baselineDir);
+  const declared = [...runtime.declaredScenarios].sort();
+  const scenarioManifestMismatch = committedScenarios === void 0 || JSON.stringify(committedScenarios) !== JSON.stringify(declared);
+  const reserved = /* @__PURE__ */ new Set([SCENARIO_MANIFEST_FILE, ALLOWLIST_FILE, UNREAD_ALLOWLIST_FILE]);
+  const staleBaselineFiles = (existsSync(runtime.baselineDir) ? readdirSync(runtime.baselineDir, { withFileTypes: true }) : []).filter((entry) => entry.isFile() && entry.name.endsWith(".json") && !reserved.has(entry.name)).map((entry) => entry.name.slice(0, -5)).filter((scenario) => !runtime.declaredScenarios.includes(scenario)).sort();
+  const rejected = runtime.results.filter((result) => result.rejections.length > 0).map((result) => ({ scenario: result.scenario, rejections: result.rejections }));
+  const coverage = joinCoverage(inventory, runtime, analysis);
+  const coverageFailed = coverage !== void 0 && coverageExitCode(coverage, { allowUnresolved: options.allowUnresolved === true }) !== 0;
+  const couldNotRun = runtime.failures.length > 0;
+  const ok = drifted.length === 0 && !coverageFailed && !couldNotRun && rejected.length === 0 && !scenarioManifestMismatch && staleBaselineFiles.length === 0;
+  if (options.json) {
+    write(
+      JSON.stringify(
+        {
+          ok,
+          drifted,
+          failures: runtime.failures,
+          rejected,
+          scenarioManifest: {
+            expected: declared,
+            committed: committedScenarios ?? null,
+            staleBaselines: staleBaselineFiles
+          },
+          coverage: coverageReport(coverage)
+        },
+        null,
+        2
+      )
+    );
+    return couldNotRun ? 2 : ok ? 0 : 1;
+  }
+  const overview = renderCheckOverviewPlain({
+    status: couldNotRun ? "ERROR" : ok ? "PASS" : "FAIL",
+    ...coverage ? { coverage } : {},
+    unresolvedAllowed: options.allowUnresolved === true,
+    baselineCurrent: Math.max(0, runtime.results.length - drifted.length),
+    baselineTotal: runtime.scenarios.length,
+    scenarioManifestOk: !scenarioManifestMismatch && staleBaselineFiles.length === 0,
+    rejected: rejected.reduce((sum, entry) => sum + entry.rejections.length, 0),
+    mountFailures: runtime.failures.length,
+    scenarios: runtime.scenarios
+  });
+  if (ok) write(overview);
+  else writeError(overview);
+  if (coverage) {
+    const rendered = renderCoveragePlain(coverage, {
+      compact: true,
+      ...options.detail ? { detail: true } : {}
+    });
+    if (rendered) {
+      if (coverageFailed) writeError(`
+${rendered}`);
+      else write(`
+${rendered}`);
+    }
+  }
+  const missing = drifted.filter((entry) => entry.missingBaseline);
+  const changed = drifted.filter((entry) => !entry.missingBaseline);
+  if (rejected.length > 0) {
+    writeError(
+      [
+        `${coverage ? "\n" : ""}REJECTED REGISTRATIONS \u2014 the runtime refused authored surface  (${rejected.reduce((sum, entry) => sum + entry.rejections.length, 0)})`,
+        ...rejected.flatMap(
+          (entry) => entry.rejections.map(
+            (rejection) => `  ${entry.scenario}: ${rejection.componentType}@${rejection.instanceId} (${rejection.reason})`
+          )
+        )
+      ].join("\n")
+    );
+  }
+  if (scenarioManifestMismatch || staleBaselineFiles.length > 0) {
+    const committed = committedScenarios?.join(", ") ?? "missing";
+    writeError(
+      [
+        `${coverage || rejected.length > 0 ? "\n" : ""}SCENARIO DRIFT \u2014 committed baselines do not match config`,
+        `  config: ${declared.join(", ")}`,
+        `  manifest: ${committed}`,
+        ...staleBaselineFiles.length > 0 ? [`  stale baselines: ${staleBaselineFiles.join(", ")}`] : [],
+        "  run `agent-surface snapshot` and commit the manifest"
+      ].join("\n")
+    );
+  }
+  if (missing.length > 0) {
+    writeError(
+      [
+        `${coverage ? "\n" : ""}NO BASELINE \u2014 nothing to compare against, which is not the same as a match  (${missing.length})`,
+        ...missing.map(
+          (entry) => `  ${entry.scenario}: ${relative(
+            process.cwd(),
+            baselinePath(runtime.baselineDir, entry.scenario)
+          )} does not exist \u2014 run \`agent-surface snapshot\` and commit it`
+        )
+      ].join("\n")
+    );
+  }
+  if (changed.length > 0) {
+    writeError(
+      [
+        `${coverage || missing.length > 0 ? "\n" : ""}DRIFT \u2014 the surface changed against its baseline  (${changed.length})`,
+        ...changed.map((entry) => renderDriftPlain(entry.scenario, entry.entries)),
+        "",
+        `surface drift in ${changed.length} scenario${changed.length === 1 ? "" : "s"} \u2014 review the change, then \`agent-surface snapshot\` to accept it`
+      ].join("\n")
+    );
+  }
+  if (couldNotRun) {
+    writeError(`
+${renderFailuresPlain(runtime.failures)}`);
+    if (inventory) writeError(`
+${renderNoVerdictPlain(runtime.failures)}`);
+    return 2;
+  }
+  if (ok) {
+    return 0;
+  }
+  return 1;
+}
+export {
+  runCheck
+};
+//# sourceMappingURL=check-POE5VRSE.js.map

package/dist/check-POE5VRSE.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/check.ts"],"sourcesContent":["import { existsSync, readdirSync } from \"node:fs\";\nimport { relative } from \"node:path\";\nimport {\n  UsageError,\n  joinCoverage,\n  mountScenarios,\n  readInventory,\n  type AnalysisOptions,\n  type Depth,\n} from \"../analysis.js\";\nimport {\n  annotate,\n  baselinePath,\n  diff,\n  readBaseline,\n  readScenarioManifest,\n  SCENARIO_MANIFEST_FILE,\n  type DiffEntry,\n} from \"../baseline.js\";\nimport { ALLOWLIST_FILE, coverageExitCode, UNREAD_ALLOWLIST_FILE } from \"../coverage.js\";\nimport {\n  renderCoveragePlain,\n  renderCheckOverviewPlain,\n  renderDriftPlain,\n  renderFailuresPlain,\n  renderNoVerdictPlain,\n} from \"../render/plain.js\";\nimport { write, writeError } from \"../output.js\";\nimport { coverageReport, scenarioBaseline } from \"../report.js\";\n\nexport interface CheckOptions {\n  configPath: string;\n  depth: Depth;\n  scenario?: string;\n  scope?: string[];\n  tsconfig?: string;\n  baselineDir?: string;\n  allowUnresolved?: boolean;\n  json?: boolean;\n  plain?: boolean;\n  detail?: boolean;\n}\n\ninterface ScenarioDrift {\n  scenario: string;\n  missingBaseline?: boolean;\n  entries: DiffEntry[];\n}\n\ninterface RejectedScenario {\n  scenario: string;\n  rejections: Array<{ componentType: string; instanceId: string; reason: string }>;\n}\n\n/**\n * The gate. The only command in this package that fails on a finding, which is\n * why every finding has to reach it.\n *\n * It used to fail on exactly one class — the projection drifting from its\n * baseline — and print a line telling you that capabilities no scenario mounts\n * were a different command's question. A gate that names the check it is not\n * performing is a gate with a hole in it, and in CI the hole was silent: a\n * whole unreached route sat behind a green tick.\n *\n * So it now fails on every incomplete or changed report:\n *\n * - **drift** — the surface changed against its committed baseline;\n * - **a missing baseline** — nothing to compare, which is not the same as a match;\n * - **an unreached capability** — authored, and no scenario mounts it;\n * - **an unread call site** — the catalog is incomplete, so the third check\n *   above is computed over a denominator that is only a floor;\n * - **a rejected registration** — authored surface was refused;\n * - **scenario drift** — config, manifest and baseline files disagree.\n *\n * `.agent-surface/coverage-allow.json` ratchets the third; `--allow-unresolved`\n * accepts the fourth. Both are deliberate, committed decisions rather than\n * flags that quietly widen the gate.\n *\n * Output is always plain, with no rendering framework in its path at all: this\n * is a report that gets pasted into a pull request and read out of a CI log,\n * and neither of those is a terminal.\n */\nexport async function runCheck(options: CheckOptions): Promise<number> {\n  if (options.depth === \"static\") {\n    throw new UsageError(\n      \"check --depth static has nothing to compare — a baseline is a projection, and \" +\n        \"at this depth nothing is mounted. Use --depth runtime for drift alone, or full for both.\",\n    );\n  }\n\n  const analysis: AnalysisOptions = {\n    configPath: options.configPath,\n    depth: options.depth,\n    ...(options.scenario ? { scenario: options.scenario } : {}),\n    ...(options.scope ? { scope: options.scope } : {}),\n    ...(options.tsconfig ? { tsconfig: options.tsconfig } : {}),\n    ...(options.baselineDir ? { baselineDir: options.baselineDir } : {}),\n  };\n\n  const inventory = readInventory(analysis);\n  // No streaming here, unlike `inspect`. A report is read top-down and has to\n  // lead with its findings, which means every finding has to exist first.\n  const runtime = await mountScenarios(analysis);\n  if (!runtime) throw new UsageError(\"check needs a mount, and this depth performs none\");\n\n  const drifted: ScenarioDrift[] = [];\n  for (const result of runtime.results) {\n    const path = baselinePath(runtime.baselineDir, result.scenario);\n    const expected = readBaseline(path);\n    if (expected === undefined) {\n      drifted.push({ scenario: result.scenario, missingBaseline: true, entries: [] });\n      continue;\n    }\n    const actual = scenarioBaseline(result);\n    const entries = annotate(diff(expected, actual), actual, expected);\n    if (entries.length > 0) drifted.push({ scenario: result.scenario, entries });\n  }\n\n  const committedScenarios = readScenarioManifest(runtime.baselineDir);\n  const declared = [...runtime.declaredScenarios].sort();\n  const scenarioManifestMismatch =\n    committedScenarios === undefined ||\n    JSON.stringify(committedScenarios) !== JSON.stringify(declared);\n  const reserved = new Set([SCENARIO_MANIFEST_FILE, ALLOWLIST_FILE, UNREAD_ALLOWLIST_FILE]);\n  const staleBaselineFiles = (existsSync(runtime.baselineDir)\n    ? readdirSync(runtime.baselineDir, { withFileTypes: true })\n    : [])\n    .filter((entry) => entry.isFile() && entry.name.endsWith(\".json\") && !reserved.has(entry.name))\n    .map((entry) => entry.name.slice(0, -5))\n    .filter((scenario) => !runtime.declaredScenarios.includes(scenario))\n    .sort();\n\n  const rejected: RejectedScenario[] = runtime.results\n    .filter((result) => result.rejections.length > 0)\n    .map((result) => ({ scenario: result.scenario, rejections: result.rejections }));\n\n  const coverage = joinCoverage(inventory, runtime, analysis);\n  const coverageFailed =\n    coverage !== undefined &&\n    coverageExitCode(coverage, { allowUnresolved: options.allowUnresolved === true }) !== 0;\n  const couldNotRun = runtime.failures.length > 0;\n  const ok =\n    drifted.length === 0 &&\n    !coverageFailed &&\n    !couldNotRun &&\n    rejected.length === 0 &&\n    !scenarioManifestMismatch &&\n    staleBaselineFiles.length === 0;\n\n  if (options.json) {\n    write(\n      JSON.stringify(\n        {\n          ok,\n          drifted,\n          failures: runtime.failures,\n          rejected,\n          scenarioManifest: {\n            expected: declared,\n            committed: committedScenarios ?? null,\n            staleBaselines: staleBaselineFiles,\n          },\n          coverage: coverageReport(coverage),\n        },\n        null,\n        2,\n      ),\n    );\n    return couldNotRun ? 2 : ok ? 0 : 1;\n  }\n\n  const overview = renderCheckOverviewPlain({\n    status: couldNotRun ? \"ERROR\" : ok ? \"PASS\" : \"FAIL\",\n    ...(coverage ? { coverage } : {}),\n    unresolvedAllowed: options.allowUnresolved === true,\n    baselineCurrent: Math.max(0, runtime.results.length - drifted.length),\n    baselineTotal: runtime.scenarios.length,\n    scenarioManifestOk: !scenarioManifestMismatch && staleBaselineFiles.length === 0,\n    rejected: rejected.reduce((sum, entry) => sum + entry.rejections.length, 0),\n    mountFailures: runtime.failures.length,\n    scenarios: runtime.scenarios,\n  });\n  if (ok) write(overview);\n  else writeError(overview);\n\n  // The gap leads, because it is the finding this command could not previously\n  // make at all. Drift follows, because it is the one it always could.\n  if (coverage) {\n    const rendered = renderCoveragePlain(coverage, {\n      compact: true,\n      ...(options.detail ? { detail: true } : {}),\n    });\n    if (rendered) {\n      if (coverageFailed) writeError(`\\n${rendered}`);\n      else write(`\\n${rendered}`);\n    }\n  }\n\n  // \"No baseline\" is not drift, and filing it under a heading that says the\n  // surface changed would be a claim about a comparison that never happened.\n  const missing = drifted.filter((entry) => entry.missingBaseline);\n  const changed = drifted.filter((entry) => !entry.missingBaseline);\n\n  if (rejected.length > 0) {\n    writeError(\n      [\n        `${coverage ? \"\\n\" : \"\"}REJECTED REGISTRATIONS — the runtime refused authored surface  (${rejected.reduce((sum, entry) => sum + entry.rejections.length, 0)})`,\n        ...rejected.flatMap((entry) =>\n          entry.rejections.map(\n            (rejection) =>\n              `  ${entry.scenario}: ${rejection.componentType}@${rejection.instanceId} (${rejection.reason})`,\n          ),\n        ),\n      ].join(\"\\n\"),\n    );\n  }\n\n  if (scenarioManifestMismatch || staleBaselineFiles.length > 0) {\n    const committed = committedScenarios?.join(\", \") ?? \"missing\";\n    writeError(\n      [\n        `${coverage || rejected.length > 0 ? \"\\n\" : \"\"}SCENARIO DRIFT — committed baselines do not match config`,\n        `  config: ${declared.join(\", \")}`,\n        `  manifest: ${committed}`,\n        ...(staleBaselineFiles.length > 0\n          ? [`  stale baselines: ${staleBaselineFiles.join(\", \")}`]\n          : []),\n        \"  run `agent-surface snapshot` and commit the manifest\",\n      ].join(\"\\n\"),\n    );\n  }\n\n  if (missing.length > 0) {\n    writeError(\n      [\n        `${coverage ? \"\\n\" : \"\"}NO BASELINE — nothing to compare against, which is not the same as a match  (${missing.length})`,\n        ...missing.map(\n          (entry) =>\n            `  ${entry.scenario}: ${relative(\n              process.cwd(),\n              baselinePath(runtime.baselineDir, entry.scenario),\n            )} does not exist — run \\`agent-surface snapshot\\` and commit it`,\n        ),\n      ].join(\"\\n\"),\n    );\n  }\n\n  if (changed.length > 0) {\n    writeError(\n      [\n        `${coverage || missing.length > 0 ? \"\\n\" : \"\"}DRIFT — the surface changed against its baseline  (${changed.length})`,\n        ...changed.map((entry) => renderDriftPlain(entry.scenario, entry.entries)),\n        \"\",\n        `surface drift in ${changed.length} scenario${\n          changed.length === 1 ? \"\" : \"s\"\n        } — review the change, then \\`agent-surface snapshot\\` to accept it`,\n      ].join(\"\\n\"),\n    );\n  }\n\n  if (couldNotRun) {\n    writeError(`\\n${renderFailuresPlain(runtime.failures)}`);\n    if (inventory) writeError(`\\n${renderNoVerdictPlain(runtime.failures)}`);\n    return 2;\n  }\n\n  if (ok) {\n    return 0;\n  }\n  return 1;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,SAAS,YAAY,mBAAmB;AACxC,SAAS,gBAAgB;AAiFzB,eAAsB,SAAS,SAAwC;AACrE,MAAI,QAAQ,UAAU,UAAU;AAC9B,UAAM,IAAI;AAAA,MACR;AAAA,IAEF;AAAA,EACF;AAEA,QAAM,WAA4B;AAAA,IAChC,YAAY,QAAQ;AAAA,IACpB,OAAO,QAAQ;AAAA,IACf,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,IACzD,GAAI,QAAQ,QAAQ,EAAE,OAAO,QAAQ,MAAM,IAAI,CAAC;AAAA,IAChD,GAAI,QAAQ,WAAW,EAAE,UAAU,QAAQ,SAAS,IAAI,CAAC;AAAA,IACzD,GAAI,QAAQ,cAAc,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;AAAA,EACpE;AAEA,QAAM,YAAY,cAAc,QAAQ;AAGxC,QAAM,UAAU,MAAM,eAAe,QAAQ;AAC7C,MAAI,CAAC,QAAS,OAAM,IAAI,WAAW,mDAAmD;AAEtF,QAAM,UAA2B,CAAC;AAClC,aAAW,UAAU,QAAQ,SAAS;AACpC,UAAM,OAAO,aAAa,QAAQ,aAAa,OAAO,QAAQ;AAC9D,UAAM,WAAW,aAAa,IAAI;AAClC,QAAI,aAAa,QAAW;AAC1B,cAAQ,KAAK,EAAE,UAAU,OAAO,UAAU,iBAAiB,MAAM,SAAS,CAAC,EAAE,CAAC;AAC9E;AAAA,IACF;AACA,UAAM,SAAS,iBAAiB,MAAM;AACtC,UAAM,UAAU,SAAS,KAAK,UAAU,MAAM,GAAG,QAAQ,QAAQ;AACjE,QAAI,QAAQ,SAAS,EAAG,SAAQ,KAAK,EAAE,UAAU,OAAO,UAAU,QAAQ,CAAC;AAAA,EAC7E;AAEA,QAAM,qBAAqB,qBAAqB,QAAQ,WAAW;AACnE,QAAM,WAAW,CAAC,GAAG,QAAQ,iBAAiB,EAAE,KAAK;AACrD,QAAM,2BACJ,uBAAuB,UACvB,KAAK,UAAU,kBAAkB,MAAM,KAAK,UAAU,QAAQ;AAChE,QAAM,WAAW,oBAAI,IAAI,CAAC,wBAAwB,gBAAgB,qBAAqB,CAAC;AACxF,QAAM,sBAAsB,WAAW,QAAQ,WAAW,IACtD,YAAY,QAAQ,aAAa,EAAE,eAAe,KAAK,CAAC,IACxD,CAAC,GACF,OAAO,CAAC,UAAU,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,OAAO,KAAK,CAAC,SAAS,IAAI,MAAM,IAAI,CAAC,EAC7F,IAAI,CAAC,UAAU,MAAM,KAAK,MAAM,GAAG,EAAE,CAAC,EACtC,OAAO,CAAC,aAAa,CAAC,QAAQ,kBAAkB,SAAS,QAAQ,CAAC,EAClE,KAAK;AAER,QAAM,WAA+B,QAAQ,QAC1C,OAAO,CAAC,WAAW,OAAO,WAAW,SAAS,CAAC,EAC/C,IAAI,CAAC,YAAY,EAAE,UAAU,OAAO,UAAU,YAAY,OAAO,WAAW,EAAE;AAEjF,QAAM,WAAW,aAAa,WAAW,SAAS,QAAQ;AAC1D,QAAM,iBACJ,aAAa,UACb,iBAAiB,UAAU,EAAE,iBAAiB,QAAQ,oBAAoB,KAAK,CAAC,MAAM;AACxF,QAAM,cAAc,QAAQ,SAAS,SAAS;AAC9C,QAAM,KACJ,QAAQ,WAAW,KACnB,CAAC,kBACD,CAAC,eACD,SAAS,WAAW,KACpB,CAAC,4BACD,mBAAmB,WAAW;AAEhC,MAAI,QAAQ,MAAM;AAChB;AAAA,MACE,KAAK;AAAA,QACH;AAAA,UACE;AAAA,UACA;AAAA,UACA,UAAU,QAAQ;AAAA,UAClB;AAAA,UACA,kBAAkB;AAAA,YAChB,UAAU;AAAA,YACV,WAAW,sBAAsB;AAAA,YACjC,gBAAgB;AAAA,UAClB;AAAA,UACA,UAAU,eAAe,QAAQ;AAAA,QACnC;AAAA,QACA;AAAA,QACA;AAAA,MACF;AAAA,IACF;AACA,WAAO,cAAc,IAAI,KAAK,IAAI;AAAA,EACpC;AAEA,QAAM,WAAW,yBAAyB;AAAA,IACxC,QAAQ,cAAc,UAAU,KAAK,SAAS;AAAA,IAC9C,GAAI,WAAW,EAAE,SAAS,IAAI,CAAC;AAAA,IAC/B,mBAAmB,QAAQ,oBAAoB;AAAA,IAC/C,iBAAiB,KAAK,IAAI,GAAG,QAAQ,QAAQ,SAAS,QAAQ,MAAM;AAAA,IACpE,eAAe,QAAQ,UAAU;AAAA,IACjC,oBAAoB,CAAC,4BAA4B,mBAAmB,WAAW;AAAA,IAC/E,UAAU,SAAS,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,WAAW,QAAQ,CAAC;AAAA,IAC1E,eAAe,QAAQ,SAAS;AAAA,IAChC,WAAW,QAAQ;AAAA,EACrB,CAAC;AACD,MAAI,GAAI,OAAM,QAAQ;AAAA,MACjB,YAAW,QAAQ;AAIxB,MAAI,UAAU;AACZ,UAAM,WAAW,oBAAoB,UAAU;AAAA,MAC7C,SAAS;AAAA,MACT,GAAI,QAAQ,SAAS,EAAE,QAAQ,KAAK,IAAI,CAAC;AAAA,IAC3C,CAAC;AACD,QAAI,UAAU;AACZ,UAAI,eAAgB,YAAW;AAAA,EAAK,QAAQ,EAAE;AAAA,UACzC,OAAM;AAAA,EAAK,QAAQ,EAAE;AAAA,IAC5B;AAAA,EACF;AAIA,QAAM,UAAU,QAAQ,OAAO,CAAC,UAAU,MAAM,eAAe;AAC/D,QAAM,UAAU,QAAQ,OAAO,CAAC,UAAU,CAAC,MAAM,eAAe;AAEhE,MAAI,SAAS,SAAS,GAAG;AACvB;AAAA,MACE;AAAA,QACE,GAAG,WAAW,OAAO,EAAE,wEAAmE,SAAS,OAAO,CAAC,KAAK,UAAU,MAAM,MAAM,WAAW,QAAQ,CAAC,CAAC;AAAA,QAC3J,GAAG,SAAS;AAAA,UAAQ,CAAC,UACnB,MAAM,WAAW;AAAA,YACf,CAAC,cACC,KAAK,MAAM,QAAQ,KAAK,UAAU,aAAa,IAAI,UAAU,UAAU,KAAK,UAAU,MAAM;AAAA,UAChG;AAAA,QACF;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AAEA,MAAI,4BAA4B,mBAAmB,SAAS,GAAG;AAC7D,UAAM,YAAY,oBAAoB,KAAK,IAAI,KAAK;AACpD;AAAA,MACE;AAAA,QACE,GAAG,YAAY,SAAS,SAAS,IAAI,OAAO,EAAE;AAAA,QAC9C,aAAa,SAAS,KAAK,IAAI,CAAC;AAAA,QAChC,eAAe,SAAS;AAAA,QACxB,GAAI,mBAAmB,SAAS,IAC5B,CAAC,sBAAsB,mBAAmB,KAAK,IAAI,CAAC,EAAE,IACtD,CAAC;AAAA,QACL;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB;AAAA,MACE;AAAA,QACE,GAAG,WAAW,OAAO,EAAE,qFAAgF,QAAQ,MAAM;AAAA,QACrH,GAAG,QAAQ;AAAA,UACT,CAAC,UACC,KAAK,MAAM,QAAQ,KAAK;AAAA,YACtB,QAAQ,IAAI;AAAA,YACZ,aAAa,QAAQ,aAAa,MAAM,QAAQ;AAAA,UAClD,CAAC;AAAA,QACL;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AAEA,MAAI,QAAQ,SAAS,GAAG;AACtB;AAAA,MACE;AAAA,QACE,GAAG,YAAY,QAAQ,SAAS,IAAI,OAAO,EAAE,2DAAsD,QAAQ,MAAM;AAAA,QACjH,GAAG,QAAQ,IAAI,CAAC,UAAU,iBAAiB,MAAM,UAAU,MAAM,OAAO,CAAC;AAAA,QACzE;AAAA,QACA,oBAAoB,QAAQ,MAAM,YAChC,QAAQ,WAAW,IAAI,KAAK,GAC9B;AAAA,MACF,EAAE,KAAK,IAAI;AAAA,IACb;AAAA,EACF;AAEA,MAAI,aAAa;AACf,eAAW;AAAA,EAAK,oBAAoB,QAAQ,QAAQ,CAAC,EAAE;AACvD,QAAI,UAAW,YAAW;AAAA,EAAK,qBAAqB,QAAQ,QAAQ,CAAC,EAAE;AACvE,WAAO;AAAA,EACT;AAEA,MAAI,IAAI;AACN,WAAO;AAAA,EACT;AACA,SAAO;AACT;","names":[]}