@am_shork/attest 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,50 @@
+# Changelog
+
+All notable changes to this project are documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+## [0.1.0] - 2026-07-21
+
+Initial release.
+
+### Added
+
+- **Runtime authoring API** — `requirement(id, body)` / `scenario(name, fn)` that
+  wrap Vitest (`describe`/`it`) as a thin, pure delegation. The requirement's
+  `describe` block is named `[id]` so runtime coverage can be reconstructed from
+  the Vitest task tree rather than an in-process singleton.
+- **Requirement registry** — `defineRequirements()` validated by a Zod
+  `RegistrySchema`: RFC-2119 keyword (`SHALL`/`MUST`) enforced, non-empty
+  rationale, scalar-only `params`, and `AUTH-3`-shaped IDs. `params` are the
+  single source for values that change.
+- **AST parser** — `parseSpecFile()` uses the TypeScript Compiler API (never
+  regex) to extract `requirement()`/`scenario()` calls, ids, 1-based line
+  numbers, and `.params` references into a strongly-typed `AttestPlan`.
+- **Structural validation** — `validateStructure()` reports `orphan-test`,
+  `uncovered-requirement`, and `unbound-param` as graded ERROR issues;
+  `detectPotentialDrift()` emits the `possible-drift` INFO heuristic.
+- **Executable verification** — `runAndCollect()` drives Vitest via its Node API
+  and reconstructs `{ passed, runtimeCoverage }` from the task tree.
+- **Delta engine** — `applyDelta()` applies a change delta in the order
+  RENAMED → REMOVED → MODIFIED → ADDED, idempotently, with content-compare on
+  ADDED and already-synced no-ops on RENAMED.
+- **Archive gate** — `evaluateGate()` blocks unless the end state is
+  structurally valid, all tests are green, and every declared scenario actually
+  ran (`declared-not-run`).
+- **CLI** — `attest check | verify | cover | archive <change>`, a thin shell over
+  the tool-agnostic core, with chalk-rendered graded reports and exit codes.
+  Users' `.reqs.ts` / delta modules are loaded at runtime via Vite.
+- **`changes/` isolation** — proposed and archived changes are excluded from
+  normal `check`/`verify`; `attest archive <name>` includes only that change.
+- **Dogfooding** — Attest describes its own behaviour under `self/`;
+  `attest verify self` is green.
+- **Acknowledgments** — README credits [OpenSpec](https://github.com/Fission-AI/OpenSpec)
+  (MIT), whose four-stage engine and diff-first change model Attest's
+  architecture is adapted from (re-implemented from scratch, no source copied).
+
+[Unreleased]: https://gitlab.com/Pseudorca/attest/-/compare/v0.1.0...main
+[0.1.0]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 am_shork
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,101 @@
+# Attest
+
+A TDD-native spec framework. **Tests are the source of truth for verification;
+ID-bound requirements are the source of truth for intent.** Attest binds the two
+by a stable ID and continuously detects drift.
+
+- **Coverage** — does every requirement have ≥1 scenario? (from runtime coverage)
+- **Result** — is every test green? (from the test runner)
+- **Drift** — do intent and assertions still agree? (static + runtime cross-check)
+
+The killer move against drift: values that change (timeouts, limits) live **once**
+in a requirement's `params`, and tests read them from there — so a number is
+physically impossible to drift between the spec and the assertion.
+
+See [`docs/attest-design.md`](docs/attest-design.md) for the authoritative design.
+
+## Requirements
+
+- Node ≥ 20.19
+- pnpm, plus `vitest` + `vite` (peer dependencies)
+
+## Getting started
+
+**Install** (the framework plus its `vitest` + `vite` peers):
+
+```bash
+pnpm add -D @am_shork/attest vitest vite
+```
+
+**1. Declare a requirement** (`requirements/auth.reqs.ts`):
+
+```ts
+import { defineRequirements } from '@am_shork/attest';
+
+export default defineRequirements({
+  'AUTH-3': {
+    statement:
+      'The system SHALL expire a session after {idleTimeoutMin} minutes of inactivity.',
+    rationale: 'Security: limit the exposure window of an unattended session.',
+    params: { idleTimeoutMin: 30 }, // the single source for this number
+  },
+});
+```
+
+**2. Attest it with a scenario** (`auth/session.spec.ts`):
+
+```ts
+import { expect } from 'vitest';
+import { requirement, scenario } from '@am_shork/attest';
+import reqs from '../requirements/auth.reqs.js';
+import { createSession, advance, isValid } from './session.js';
+
+requirement('AUTH-3', () => {
+  scenario('idle timeout invalidates the session', () => {
+    const t = reqs['AUTH-3'].params.idleTimeoutMin; // read from the single source
+    const s = createSession();
+    advance(s, t + 1, 'minutes');
+    expect(isValid(s, t)).toBe(false);
+  });
+});
+```
+
+**3. Run the engine:**
+
+```bash
+attest check    # static: orphan tests, uncovered requirements, unbound params
+attest verify   # run tests + coverage + drift, graded report
+attest cover    # which requirements lack a scenario
+attest archive <change>   # gate a proposed change: green + covered + no drift
+```
+
+## Development
+
+```bash
+pnpm install
+pnpm build       # tsc -> dist/
+pnpm test        # vitest run (the framework's own unit tests)
+pnpm typecheck
+pnpm lint
+```
+
+### Dogfooding
+
+Attest describes its own behaviour under [`self/`](self/) and verifies itself:
+
+```bash
+pnpm verify:self   # attest verify self  -> all green
+```
+
+## Acknowledgments
+
+Attest's architecture — the four-stage truth engine (AST parse → graded
+validation → diff-first delta apply → archive gate) and its diff-first change
+model — is adapted from [OpenSpec](https://github.com/Fission-AI/OpenSpec) (MIT),
+swapping two parts: parsing moves to the TypeScript Compiler API, and `verify`
+becomes running the tests. The design is re-implemented from scratch; no
+OpenSpec source code is included.
+
+## License
+
+[MIT](LICENSE)

package/bin/attest.js

@@ -0,0 +1,3 @@
+#!/usr/bin/env node
+// Thin launcher: delegates to the built CLI shell (src/cli -> dist/cli).
+import '../dist/cli/index.js';

package/dist/cli/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/dist/cli/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":""}

package/dist/cli/index.js

@@ -0,0 +1,69 @@
+// CLI shell — a thin veneer over the core pipeline (design §9). All real work
+// lives in src/core; this file parses args, calls a pipeline function, renders
+// the result, and sets the exit code.
+import { Command } from 'commander';
+import chalk from 'chalk';
+import { runCheck, runVerify, runCover, runArchive } from '../core/pipeline.js';
+import { formatIssues, summarize, formatCoverage, hasError } from './report.js';
+const program = new Command();
+program
+    .name('attest')
+    .description('TDD-native spec framework: tests attest that requirements hold.')
+    .version('0.0.0');
+function root(dir) {
+    return dir ? dir : process.cwd();
+}
+program
+    .command('check')
+    .description('Static structural validation (fast CI pre-check).')
+    .argument('[dir]', 'project root', undefined)
+    .action(async (dir) => {
+    const issues = await runCheck(root(dir));
+    console.log(formatIssues(issues));
+    console.log(summarize(issues));
+    process.exitCode = hasError(issues) ? 1 : 0;
+});
+program
+    .command('verify')
+    .description('Run tests + coverage + drift, emit a graded report.')
+    .argument('[dir]', 'project root', undefined)
+    .action(async (dir) => {
+    const { issues, ok } = await runVerify(root(dir));
+    console.log(formatIssues(issues));
+    console.log(summarize(issues));
+    process.exitCode = ok ? 0 : 1;
+});
+program
+    .command('cover')
+    .description('Coverage report: which requirements lack a scenario.')
+    .argument('[dir]', 'project root', undefined)
+    .action(async (dir) => {
+    const rows = await runCover(root(dir));
+    console.log(formatCoverage(rows));
+    const uncovered = rows.filter((r) => !r.covered).length;
+    console.log(chalk.dim(`— ${rows.length} requirement(s), ${uncovered} uncovered`));
+    process.exitCode = uncovered > 0 ? 1 : 0;
+});
+program
+    .command('archive')
+    .argument('<change>', 'change name to archive')
+    .argument('[dir]', 'project root', undefined)
+    .description('Run the archive gate; merge only if it passes.')
+    .action(async (change, dir) => {
+    const blocking = await runArchive(root(dir), change);
+    if (blocking.length === 0) {
+        console.log(chalk.green(`✓ gate 通過：change "${change}" 可以 archive。`));
+        process.exitCode = 0;
+    }
+    else {
+        console.log(chalk.red(`✗ gate 未通過：change "${change}"`));
+        console.log(formatIssues(blocking));
+        console.log(summarize(blocking));
+        process.exitCode = 1;
+    }
+});
+program.parseAsync().catch((err) => {
+    console.error(chalk.red(err instanceof Error ? err.stack ?? err.message : String(err)));
+    process.exitCode = 1;
+});
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,+EAA+E;AAC/E,sCAAsC;AAEtC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEhF,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,iEAAiE,CAAC;KAC9E,OAAO,CAAC,OAAO,CAAC,CAAC;AAEpB,SAAS,IAAI,CAAC,GAAY;IACxB,OAAO,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;AACnC,CAAC;AAED,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,mDAAmD,CAAC;KAChE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;IAC7B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9C,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,QAAQ,CAAC;KACjB,WAAW,CAAC,qDAAqD,CAAC;KAClE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;IAC7B,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAClD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/B,OAAO,CAAC,QAAQ,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChC,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,OAAO,CAAC;KAChB,WAAW,CAAC,sDAAsD,CAAC;KACnE,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,MAAM,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;IAC7B,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACxD,OAAO,CAAC,GAAG,CACT,KAAK,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,MAAM,oBAAoB,SAAS,YAAY,CAAC,CACrE,CAAC;IACF,OAAO,CAAC,QAAQ,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3C,CAAC,CAAC,CAAC;AAEL,OAAO;KACJ,OAAO,CAAC,SAAS,CAAC;KAClB,QAAQ,CAAC,UAAU,EAAE,wBAAwB,CAAC;KAC9C,QAAQ,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC;KAC5C,WAAW,CAAC,gDAAgD,CAAC;KAC7D,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,GAAY,EAAE,EAAE;IAC7C,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,qBAAqB,MAAM,eAAe,CAAC,CAAC,CAAC;QACrE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,sBAAsB,MAAM,GAAG,CAAC,CAAC,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;QACpC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACjC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC;AAEL,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC1C,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC,CAAC,CAAC"}

package/dist/cli/report.d.ts

@@ -0,0 +1,7 @@
+import type { CoverageRow } from '../core/pipeline.js';
+import type { Issue } from '../core/types.js';
+export declare function formatIssues(issues: Issue[]): string;
+export declare function summarize(issues: Issue[]): string;
+export declare function formatCoverage(rows: CoverageRow[]): string;
+export declare function hasError(issues: Issue[]): boolean;
+//# sourceMappingURL=report.d.ts.map

package/dist/cli/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/cli/report.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,KAAK,EAAS,MAAM,kBAAkB,CAAC;AAUrD,wBAAgB,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAWpD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAMjD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,MAAM,CAW1D;AAED,wBAAgB,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAEjD"}

package/dist/cli/report.js

@@ -0,0 +1,45 @@
+// Terminal rendering of graded issues (design §5.3 levels). Pure formatting —
+// no process side effects — so it stays testable and the CLI stays thin.
+import chalk from 'chalk';
+const LEVEL_TAG = {
+    ERROR: (s) => chalk.red.bold(s),
+    WARNING: (s) => chalk.yellow.bold(s),
+    INFO: (s) => chalk.blueBright(s),
+};
+const ORDER = ['ERROR', 'WARNING', 'INFO'];
+export function formatIssues(issues) {
+    if (issues.length === 0)
+        return chalk.green('✓ 沒有問題。');
+    const lines = [];
+    for (const level of ORDER) {
+        for (const i of issues.filter((x) => x.level === level)) {
+            const where = i.file ? `${i.file}${i.line ? `:${i.line}` : ''}` : '';
+            const loc = where ? chalk.dim(` (${where})`) : '';
+            lines.push(`${LEVEL_TAG[level](level.padEnd(7))} ${chalk.cyan(i.code)}${loc}\n    ${i.message}`);
+        }
+    }
+    return lines.join('\n');
+}
+export function summarize(issues) {
+    const counts = { ERROR: 0, WARNING: 0, INFO: 0 };
+    for (const i of issues)
+        counts[i.level]++;
+    return chalk.dim(`— ${counts.ERROR} error, ${counts.WARNING} warning, ${counts.INFO} info`);
+}
+export function formatCoverage(rows) {
+    if (rows.length === 0)
+        return chalk.dim('（registry 沒有任何需求）');
+    return rows
+        .map((r) => {
+        const mark = r.covered ? chalk.green('✓') : chalk.red('✗');
+        const detail = r.covered
+            ? chalk.dim(`${r.scenarioCount} scenario${r.scenarioCount === 1 ? '' : 's'}`)
+            : chalk.red('no scenario');
+        return `  ${mark} ${chalk.bold(r.reqId)}  ${detail}`;
+    })
+        .join('\n');
+}
+export function hasError(issues) {
+    return issues.some((i) => i.level === 'ERROR');
+}
+//# sourceMappingURL=report.js.map

package/dist/cli/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/cli/report.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,yEAAyE;AAEzE,OAAO,KAAK,MAAM,OAAO,CAAC;AAI1B,MAAM,SAAS,GAAyC;IACtD,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/B,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC;CACjC,CAAC;AAEF,MAAM,KAAK,GAAY,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;AAEpD,MAAM,UAAU,YAAY,CAAC,MAAe;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,KAAK,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;YACxD,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,KAAK,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QACnG,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAe;IACvC,MAAM,MAAM,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAA2B,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;IAC1C,OAAO,KAAK,CAAC,GAAG,CACd,KAAK,MAAM,CAAC,KAAK,WAAW,MAAM,CAAC,OAAO,aAAa,MAAM,CAAC,IAAI,OAAO,CAC1E,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAmB;IAChD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IAC7D,OAAO,IAAI;SACR,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC3D,MAAM,MAAM,GAAG,CAAC,CAAC,OAAO;YACtB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,aAAa,YAAY,CAAC,CAAC,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC7E,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC7B,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,MAAM,EAAE,CAAC;IACvD,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,MAAe;IACtC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;AACjD,CAAC"}

package/dist/core/apply.d.ts

@@ -0,0 +1,13 @@
+import type { RegistryDelta } from './registry.js';
+import type { Issue, Registry } from './types.js';
+export interface ApplyResult {
+    registry: Registry;
+    issues: Issue[];
+}
+/**
+ * Apply a change delta to a base registry, returning the merged registry plus
+ * any apply-level issues (conflicts, missing targets, invalid results). The
+ * base registry is never mutated. Applying the same delta twice is a no-op.
+ */
+export declare function applyDelta(base: Registry, d: RegistryDelta): ApplyResult;
+//# sourceMappingURL=apply.d.ts.map

package/dist/core/apply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.ts","sourceRoot":"","sources":["../../src/core/apply.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAe,MAAM,YAAY,CAAC;AAE/D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,KAAK,EAAE,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,aAAa,GAAG,WAAW,CAiExE"}

package/dist/core/apply.js

@@ -0,0 +1,94 @@
+// Delta application engine (design §7). Ordered + idempotent, mirroring
+// OpenSpec's specs-apply: RENAMED -> REMOVED -> MODIFIED -> ADDED over a
+// Map<id, Requirement>, with content-compare on ADDED and already-synced
+// no-ops on RENAMED.
+import { RequirementSchema } from './schema.js';
+/**
+ * Apply a change delta to a base registry, returning the merged registry plus
+ * any apply-level issues (conflicts, missing targets, invalid results). The
+ * base registry is never mutated. Applying the same delta twice is a no-op.
+ */
+export function applyDelta(base, d) {
+    const map = new Map(Object.entries(base));
+    const issues = [];
+    // 1) RENAMED
+    for (const { from, to } of d.renamed ?? []) {
+        if (map.has(from)) {
+            if (map.has(to)) {
+                issues.push(err('rename-target-exists', `改名 "${from}" -> "${to}" 失敗：目標 "${to}" 已存在。`));
+                continue;
+            }
+            map.set(to, map.get(from));
+            map.delete(from);
+        }
+        else if (!map.has(to)) {
+            // source gone AND target absent -> nothing to rename.
+            issues.push(err('rename-source-missing', `改名來源 "${from}" 不存在，且目標 "${to}" 也不存在。`));
+        }
+        // source gone but target present -> already-synced no-op (idempotent).
+    }
+    // 2) REMOVED (missing = idempotent no-op)
+    for (const id of d.removed ?? []) {
+        map.delete(id);
+    }
+    // 3) MODIFIED (partial merge; re-validate the result)
+    for (const [id, patch] of Object.entries(d.modified ?? {})) {
+        const existing = map.get(id);
+        if (!existing) {
+            issues.push(err('modify-missing', `無法修改 "${id}"：需求不存在。`));
+            continue;
+        }
+        const merged = {
+            ...existing,
+            ...patch,
+            params: { ...existing.params, ...(patch.params ?? {}) },
+            outOfScope: patch.outOfScope ?? existing.outOfScope,
+        };
+        const parsed = RequirementSchema.safeParse(merged);
+        if (!parsed.success) {
+            issues.push(err('modify-invalid', `修改 "${id}" 後不合法：${firstMessage(parsed.error)}`));
+            continue;
+        }
+        map.set(id, parsed.data);
+    }
+    // 4) ADDED (content-compare on collision)
+    for (const [id, value] of Object.entries(d.added ?? {})) {
+        const parsed = RequirementSchema.safeParse(value);
+        if (!parsed.success) {
+            issues.push(err('add-invalid', `新增 "${id}" 不合法：${firstMessage(parsed.error)}`));
+            continue;
+        }
+        const existing = map.get(id);
+        if (existing) {
+            if (!sameRequirement(existing, parsed.data)) {
+                issues.push(err('add-conflict', `新增 "${id}" 與現有需求內容不同（衝突）。`));
+            }
+            // identical content -> idempotent no-op.
+            continue;
+        }
+        map.set(id, parsed.data);
+    }
+    return { registry: Object.fromEntries(map), issues };
+}
+function err(code, message) {
+    return { level: 'ERROR', code, message };
+}
+function firstMessage(error) {
+    return error.issues[0]?.message ?? 'unknown error';
+}
+/** Content equality via canonical JSON (params key order does not matter). */
+function sameRequirement(a, b) {
+    return canonical(a) === canonical(b);
+}
+function canonical(req) {
+    return JSON.stringify({
+        statement: req.statement,
+        rationale: req.rationale,
+        params: sortKeys(req.params),
+        outOfScope: [...req.outOfScope],
+    });
+}
+function sortKeys(obj) {
+    return Object.fromEntries(Object.entries(obj).sort(([a], [b]) => a.localeCompare(b)));
+}
+//# sourceMappingURL=apply.js.map

package/dist/core/apply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.js","sourceRoot":"","sources":["../../src/core/apply.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,yEAAyE;AACzE,yEAAyE;AACzE,qBAAqB;AAErB,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAShD;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAc,EAAE,CAAgB;IACzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAsB,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,aAAa;IACb,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC3C,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAChB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,sBAAsB,EAAE,OAAO,IAAI,SAAS,EAAE,YAAY,EAAE,QAAQ,CAAC,CAAC,CAAC;gBACvF,SAAS;YACX,CAAC;YACD,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC;YAC5B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACnB,CAAC;aAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,sDAAsD;YACtD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,EAAE,SAAS,IAAI,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;QACpF,CAAC;QACD,uEAAuE;IACzE,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QACjC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,sDAAsD;IACtD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;QAC3D,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;YAC1D,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAY;YACtB,GAAG,QAAQ;YACX,GAAG,KAAK;YACR,MAAM,EAAE,EAAE,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE;YACvD,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,QAAQ,CAAC,UAAU;SACpD,CAAC;QACF,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,EAAE,OAAO,EAAE,UAAU,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YACpF,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,0CAA0C;IAC1C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;QACxD,MAAM,MAAM,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,OAAO,EAAE,SAAS,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAChF,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5C,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,OAAO,EAAE,kBAAkB,CAAC,CAAC,CAAC;YAChE,CAAC;YACD,yCAAyC;YACzC,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC;AAED,SAAS,GAAG,CAAC,IAAY,EAAE,OAAe;IACxC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,YAAY,CAAC,KAAwC;IAC5D,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,eAAe,CAAC;AACrD,CAAC;AAED,8EAA8E;AAC9E,SAAS,eAAe,CAAC,CAAc,EAAE,CAAc;IACrD,OAAO,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,GAAgB;IACjC,OAAO,IAAI,CAAC,SAAS,CAAC;QACpB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;QAC5B,UAAU,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ,CAAC,GAA4B;IAC5C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC"}

package/dist/core/gate.d.ts

@@ -0,0 +1,22 @@
+import type { AttestPlan, Issue, Registry, RunResult } from './types.js';
+export interface GateInputs {
+    /** End-state registry (base with the change's delta already applied). */
+    registry: Registry;
+    /** Static plan over the merged spec suite. */
+    plan: AttestPlan;
+    /** Executable verification result (design §5.4). */
+    run: RunResult;
+}
+/**
+ * Decide whether a change may be archived. Returns the blocking issues; an
+ * empty array means the gate passes (design §8). Checks, in order:
+ *   1. Structural ERRORs on the end-state registry (no orphan / uncovered /
+ *      unbound-param). This is also the design's step-4 final re-validation:
+ *      the registry+plan here are already the applied result, so one pass
+ *      validates the end state.
+ *   2. Executable: all tests green.
+ *   3. Static coverage vs runtime coverage: every declared scenario actually
+ *      ran (catches skip/only false coverage).
+ */
+export declare function evaluateGate({ registry, plan, run }: GateInputs): Issue[];
+//# sourceMappingURL=gate.d.ts.map

package/dist/core/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../../src/core/gate.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEzE,MAAM,WAAW,UAAU;IACzB,yEAAyE;IACzE,QAAQ,EAAE,QAAQ,CAAC;IACnB,8CAA8C;IAC9C,IAAI,EAAE,UAAU,CAAC;IACjB,oDAAoD;IACpD,GAAG,EAAE,SAAS,CAAC;CAChB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,UAAU,GAAG,KAAK,EAAE,CA+BzE"}

package/dist/core/gate.js

@@ -0,0 +1,44 @@
+// Archive gate: the executable "done" bar (design §8). Unlike OpenSpec's
+// structure-only archive, this gate also requires green tests and static/runtime
+// coverage agreement. evaluateGate is a pure decision over already-computed
+// inputs; the file orchestration (load registry+delta, parse all specs, run)
+// is wired in the Locate layer / CLI (see pipeline.ts).
+import { validateStructure } from './validator.js';
+/**
+ * Decide whether a change may be archived. Returns the blocking issues; an
+ * empty array means the gate passes (design §8). Checks, in order:
+ *   1. Structural ERRORs on the end-state registry (no orphan / uncovered /
+ *      unbound-param). This is also the design's step-4 final re-validation:
+ *      the registry+plan here are already the applied result, so one pass
+ *      validates the end state.
+ *   2. Executable: all tests green.
+ *   3. Static coverage vs runtime coverage: every declared scenario actually
+ *      ran (catches skip/only false coverage).
+ */
+export function evaluateGate({ registry, plan, run }) {
+    const blocking = [];
+    // 1) Structure (end-state re-validation).
+    blocking.push(...validateStructure(registry, plan).filter((i) => i.level === 'ERROR'));
+    // 2) Executable: all green.
+    if (!run.passed) {
+        blocking.push({
+            level: 'ERROR',
+            code: 'tests-red',
+            message: '尚有測試未通過，不可 archive。',
+        });
+    }
+    // 3) Declared-not-run: static coverage claimed, runtime never executed it.
+    for (const s of plan.scenarios) {
+        if (!run.runtimeCoverage.get(s.reqId)?.has(s.name)) {
+            blocking.push({
+                level: 'ERROR',
+                code: 'declared-not-run',
+                file: s.file,
+                line: s.line,
+                message: `scenario "${s.name}" 靜態宣告覆蓋 ${s.reqId}，執行期卻沒跑到（被 skip/only？）。`,
+            });
+        }
+    }
+    return blocking;
+}
+//# sourceMappingURL=gate.js.map

package/dist/core/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/core/gate.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,iFAAiF;AACjF,4EAA4E;AAC5E,6EAA6E;AAC7E,wDAAwD;AAExD,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAYnD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAc;IAC9D,MAAM,QAAQ,GAAY,EAAE,CAAC;IAE7B,0CAA0C;IAC1C,QAAQ,CAAC,IAAI,CACX,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CACxE,CAAC;IAEF,4BAA4B;IAC5B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,QAAQ,CAAC,IAAI,CAAC;YACZ,KAAK,EAAE,OAAO;YACd,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,qBAAqB;SAC/B,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IAC3E,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,QAAQ,CAAC,IAAI,CAAC;gBACZ,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,yBAAyB;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/core/loader.d.ts

@@ -0,0 +1,6 @@
+export interface Loader {
+    load<T = unknown>(absPath: string): Promise<T>;
+    close(): Promise<void>;
+}
+export declare function createLoader(): Promise<Loader>;
+//# sourceMappingURL=loader.d.ts.map

package/dist/core/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/core/loader.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,MAAM;IACrB,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC,CAuBpD"}

package/dist/core/loader.js

@@ -0,0 +1,39 @@
+// Runtime TS module loader (design §10 loading strategy). Uses vite — already
+// in the vitest/vite stack — to transform + evaluate users' `.reqs.ts` and
+// `requirements.delta.ts` so the CLI can read runtime values (params, etc.).
+//
+// `vitest` is aliased to a no-op stub: loading a registry never calls
+// requirement()/scenario(), but the `attest` barrel transitively imports
+// runtime.ts (which imports vitest), and importing vitest outside a test run
+// throws. The stub sidesteps that without affecting any read value.
+import { createServer } from 'vite';
+import { mkdtempSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+const VITEST_STUB = 'export const describe=()=>{};export const it=()=>{};export const test=()=>{};' +
+    'export const expect=()=>{};export const beforeAll=()=>{};export const afterAll=()=>{};' +
+    'export const beforeEach=()=>{};export const afterEach=()=>{};export const vi={};' +
+    'export default {};';
+export async function createLoader() {
+    const dir = mkdtempSync(join(tmpdir(), 'attest-loader-'));
+    const stub = join(dir, 'vitest-stub.mjs');
+    writeFileSync(stub, VITEST_STUB);
+    const server = await createServer({
+        configFile: false,
+        logLevel: 'error',
+        appType: 'custom',
+        server: { middlewareMode: true },
+        resolve: { alias: { vitest: stub } },
+        ssr: { noExternal: ['vitest'] },
+        optimizeDeps: { noDiscovery: true },
+    });
+    return {
+        async load(absPath) {
+            return (await server.ssrLoadModule(absPath));
+        },
+        async close() {
+            await server.close();
+        },
+    };
+}
+//# sourceMappingURL=loader.js.map

package/dist/core/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/core/loader.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,EAAE;AACF,sEAAsE;AACtE,yEAAyE;AACzE,6EAA6E;AAC7E,oEAAoE;AAEpE,OAAO,EAAE,YAAY,EAAsB,MAAM,MAAM,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,WAAW,GACf,+EAA+E;IAC/E,wFAAwF;IACxF,kFAAkF;IAClF,oBAAoB,CAAC;AAOvB,MAAM,CAAC,KAAK,UAAU,YAAY;IAChC,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1C,aAAa,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAEjC,MAAM,MAAM,GAAkB,MAAM,YAAY,CAAC;QAC/C,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,QAAQ;QACjB,MAAM,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE;QAChC,OAAO,EAAE,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACpC,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC/B,YAAY,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE;KACpC,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,IAAI,CAAI,OAAe;YAC3B,OAAO,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,CAAM,CAAC;QACpD,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/core/locate.d.ts

@@ -0,0 +1,22 @@
+import type { Loader } from './loader.js';
+import type { AttestPlan, Issue, Registry } from './types.js';
+export declare const isReqsFile: (name: string) => boolean;
+export declare const isSpecFile: (name: string) => boolean;
+/** Recursively find files under root whose basename matches `match`. */
+export declare function findFiles(root: string, match: (name: string) => boolean): Promise<string[]>;
+/**
+ * Load and merge every `*.reqs.ts` registry under root. A malformed registry
+ * (defineRequirements throws) becomes a registry-invalid ERROR; a duplicate id
+ * across files becomes a duplicate-requirement ERROR.
+ */
+export declare function loadRegistry(root: string, loader: Loader): Promise<{
+    registry: Registry;
+    issues: Issue[];
+}>;
+/** Parse every `*.spec.ts` under root into one merged plan (file paths shown relative to root). */
+export declare function parseAllSpecFiles(root: string): Promise<AttestPlan>;
+/** Parse the spec files belonging to a single proposed change (design §8). */
+export declare function parseChangeSpecs(root: string, changeName: string): Promise<AttestPlan>;
+/** List the names of proposed changes under `root/changes`. */
+export declare function listChangeNames(root: string): Promise<string[]>;
+//# sourceMappingURL=locate.d.ts.map

package/dist/core/locate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"locate.d.ts","sourceRoot":"","sources":["../../src/core/locate.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAe,MAAM,YAAY,CAAC;AAc3E,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,OAAoC,CAAC;AAC/E,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,OAAoC,CAAC;AAE/E,wEAAwE;AACxE,wBAAsB,SAAS,CAC7B,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,GAC/B,OAAO,CAAC,MAAM,EAAE,CAAC,CAenB;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,QAAQ,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,KAAK,EAAE,CAAA;CAAE,CAAC,CA4ClD;AAED,mGAAmG;AACnG,wBAAsB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAEzE;AAED,8EAA8E;AAC9E,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,UAAU,CAAC,CAErB;AAED,+DAA+D;AAC/D,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOrE"}