@am_shork/attest 0.1.0

package/dist/core/locate.js

@@ -0,0 +1,117 @@
+// Locate layer (design §4, L1): find registry + spec files, load the registry
+// via the TS loader, and parse all spec files into one merged AttestPlan.
+import { readdir, readFile } from 'node:fs/promises';
+import { join, relative } from 'node:path';
+import { parseSpecFile } from './parser.js';
+// Proposed changes and archived changes are excluded from normal scanning:
+// a change's requirements/specs only count once its gate passes and it is
+// merged (design §7, §8). `attest archive <name>` includes them explicitly.
+const SKIP_DIRS = new Set([
+    'node_modules',
+    'dist',
+    '.git',
+    'coverage',
+    'changes',
+    'archive',
+]);
+export const isReqsFile = (name) => name.endsWith('.reqs.ts');
+export const isSpecFile = (name) => name.endsWith('.spec.ts');
+/** Recursively find files under root whose basename matches `match`. */
+export async function findFiles(root, match) {
+    const out = [];
+    const walk = async (dir) => {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const e of entries) {
+            const full = join(dir, e.name);
+            if (e.isDirectory()) {
+                if (!SKIP_DIRS.has(e.name))
+                    await walk(full);
+            }
+            else if (e.isFile() && match(e.name)) {
+                out.push(full);
+            }
+        }
+    };
+    await walk(root);
+    return out.sort();
+}
+/**
+ * Load and merge every `*.reqs.ts` registry under root. A malformed registry
+ * (defineRequirements throws) becomes a registry-invalid ERROR; a duplicate id
+ * across files becomes a duplicate-requirement ERROR.
+ */
+export async function loadRegistry(root, loader) {
+    const files = await findFiles(root, isReqsFile);
+    const registry = {};
+    const issues = [];
+    for (const file of files) {
+        const display = relative(root, file);
+        let mod;
+        try {
+            mod = await loader.load(file);
+        }
+        catch (err) {
+            issues.push({
+                level: 'ERROR',
+                code: 'registry-invalid',
+                file: display,
+                message: `無法載入 registry：${err instanceof Error ? err.message : String(err)}`,
+            });
+            continue;
+        }
+        const reg = mod.default;
+        if (!reg || typeof reg !== 'object') {
+            issues.push({
+                level: 'ERROR',
+                code: 'registry-no-default',
+                file: display,
+                message: 'registry 檔必須 default export defineRequirements(...) 的結果。',
+            });
+            continue;
+        }
+        for (const [id, req] of Object.entries(reg)) {
+            if (id in registry) {
+                issues.push({
+                    level: 'ERROR',
+                    code: 'duplicate-requirement',
+                    file: display,
+                    message: `需求 "${id}" 在多個 registry 檔重複定義。`,
+                });
+            }
+            else {
+                registry[id] = req;
+            }
+        }
+    }
+    return { registry, issues };
+}
+/** Parse every `*.spec.ts` under root into one merged plan (file paths shown relative to root). */
+export async function parseAllSpecFiles(root) {
+    return parseSpecsUnder(root, root);
+}
+/** Parse the spec files belonging to a single proposed change (design §8). */
+export async function parseChangeSpecs(root, changeName) {
+    return parseSpecsUnder(join(root, 'changes', changeName), root);
+}
+/** List the names of proposed changes under `root/changes`. */
+export async function listChangeNames(root) {
+    try {
+        const entries = await readdir(join(root, 'changes'), { withFileTypes: true });
+        return entries.filter((e) => e.isDirectory()).map((e) => e.name).sort();
+    }
+    catch {
+        return [];
+    }
+}
+async function parseSpecsUnder(dir, displayRoot) {
+    const files = await findFiles(dir, isSpecFile);
+    const plan = { scenarios: [], paramRefs: [] };
+    for (const file of files) {
+        const source = await readFile(file, 'utf8');
+        const parsed = parseSpecFile(relative(displayRoot, file), source);
+        plan.scenarios.push(...parsed.scenarios);
+        plan.paramRefs.push(...parsed.paramRefs);
+    }
+    return plan;
+}
+//# sourceMappingURL=locate.js.map

package/dist/core/locate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"locate.js","sourceRoot":"","sources":["../../src/core/locate.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,0EAA0E;AAE1E,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAI5C,2EAA2E;AAC3E,0EAA0E;AAC1E,4EAA4E;AAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AAE/E,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAY,EACZ,KAAgC;IAEhC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,IAAI,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QAChD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAC/B,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;oBAAE,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,MAAc;IAEd,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,IAAI,GAA2B,CAAC;QAChC,IAAI,CAAC;YACH,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAyB,IAAI,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,iBAAiB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;aAC7E,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC;QACxB,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,qBAAqB;gBAC3B,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,0DAA0D;aACpE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAA4B,EAAE,CAAC;YACvE,IAAI,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,uBAAuB;oBAC7B,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,OAAO,EAAE,uBAAuB;iBAC1C,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,QAAQ,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC;YACrB,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,OAAO,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAY,EACZ,UAAkB;IAElB,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,+DAA+D;AAC/D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAAY;IAChD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9E,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,WAAmB;IAC7D,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAe,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC1D,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,aAAa,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAClE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/core/parser.d.ts

@@ -0,0 +1,3 @@
+import type { AttestPlan } from './types.js';
+export declare function parseSpecFile(file: string, source: string): AttestPlan;
+//# sourceMappingURL=parser.d.ts.map

package/dist/core/parser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.d.ts","sourceRoot":"","sources":["../../src/core/parser.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,UAAU,EAA4B,MAAM,YAAY,CAAC;AAEvE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,UAAU,CA0DtE"}

package/dist/core/parser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parser.js","sourceRoot":"","sources":["../../src/core/parser.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,0EAA0E;AAC1E,6EAA6E;AAC7E,8EAA8E;AAE9E,OAAO,EAAE,MAAM,YAAY,CAAC;AAG5B,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc;IACxD,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAC5B,IAAI,EACJ,MAAM,EACN,EAAE,CAAC,YAAY,CAAC,MAAM;IACtB,oBAAoB,CAAC,IAAI,CAC1B,CAAC;IACF,MAAM,SAAS,GAAqB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC,CAAC,wCAAwC;IAC5E,IAAI,YAAY,GAAkB,IAAI,CAAC;IACvC,IAAI,eAAe,GAAkB,IAAI,CAAC;IAE1C,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;QACpC,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAClE,MAAM,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,OAAO,GACX,QAAQ,IAAI,EAAE,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAE3E,IAAI,EAAE,KAAK,aAAa,IAAI,OAAO,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,YAAY,CAAC;gBAC1B,YAAY,GAAG,OAAO,CAAC;gBACvB,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,sCAAsC;gBACpE,YAAY,GAAG,IAAI,CAAC;gBACpB,OAAO;YACT,CAAC;YACD,IAAI,EAAE,KAAK,UAAU,IAAI,OAAO,IAAI,YAAY,EAAE,CAAC;gBACjD,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,6BAA6B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrE,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;gBAC7E,MAAM,IAAI,GAAG,eAAe,CAAC;gBAC7B,eAAe,GAAG,OAAO,CAAC;gBAC1B,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,qCAAqC;gBACnE,eAAe,GAAG,IAAI,CAAC;gBACvB,OAAO;YACT,CAAC;QACH,CAAC;QAED,4EAA4E;QAC5E,8EAA8E;QAC9E,IACE,YAAY;YACZ,eAAe;YACf,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAC3B,CAAC;YACD,MAAM,GAAG,GAAG,GAAG,YAAY,IAAI,eAAe,EAAE,CAAC;YACjD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvB,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClB,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;QAED,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,KAAK,CAAC,EAAE,CAAC,CAAC;IACV,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC;AAClC,CAAC"}

package/dist/core/pipeline.d.ts

@@ -0,0 +1,22 @@
+import type { Issue } from './types.js';
+/** Static structural check (design §9: `attest check`). */
+export declare function runCheck(root: string): Promise<Issue[]>;
+export interface VerifyResult {
+    issues: Issue[];
+    passed: boolean;
+    ok: boolean;
+}
+/** Executable verification (design §9: `attest verify`). */
+export declare function runVerify(root: string): Promise<VerifyResult>;
+export interface CoverageRow {
+    reqId: string;
+    covered: boolean;
+    scenarioCount: number;
+}
+/** Coverage-only report (design §9: `attest cover`). */
+export declare function runCover(root: string): Promise<CoverageRow[]>;
+/** Archive gate for a change (design §8, §9: `attest archive <change>`). */
+export declare function runArchive(root: string, changeName: string): Promise<Issue[]>;
+/** True when a spec suite exists at all (used by the CLI to warn on empty roots). */
+export declare function hasSpecs(root: string): Promise<boolean>;
+//# sourceMappingURL=pipeline.d.ts.map

package/dist/core/pipeline.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.d.ts","sourceRoot":"","sources":["../../src/core/pipeline.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAc,KAAK,EAAY,MAAM,YAAY,CAAC;AAE9D,2DAA2D;AAC3D,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CAa7D;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;CACb;AAED,4DAA4D;AAC5D,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CAmCnE;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED,wDAAwD;AACxD,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAmBnE;AAED,4EAA4E;AAC5E,wBAAsB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC,CA8CnF;AAED,qFAAqF;AACrF,wBAAsB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE7D"}

package/dist/core/pipeline.js

@@ -0,0 +1,135 @@
+// High-level operations composing the core layers (design §9). These are
+// tool-agnostic; the CLI is a thin shell that calls them and renders the result.
+import { createLoader } from './loader.js';
+import { loadRegistry, parseAllSpecFiles, parseChangeSpecs, listChangeNames, findFiles, } from './locate.js';
+import { validateStructure, detectPotentialDrift } from './validator.js';
+import { runAndCollect } from './runner.js';
+import { applyDelta } from './apply.js';
+import { evaluateGate } from './gate.js';
+import { join, relative } from 'node:path';
+import { configDefaults } from 'vitest/config';
+/** Static structural check (design §9: `attest check`). */
+export async function runCheck(root) {
+    const loader = await createLoader();
+    try {
+        const { registry, issues } = await loadRegistry(root, loader);
+        const plan = await parseAllSpecFiles(root);
+        return [
+            ...issues,
+            ...validateStructure(registry, plan),
+            ...detectPotentialDrift(registry, plan, plan.paramRefs),
+        ];
+    }
+    finally {
+        await loader.close();
+    }
+}
+/** Executable verification (design §9: `attest verify`). */
+export async function runVerify(root) {
+    const loader = await createLoader();
+    let registry;
+    let plan;
+    const issues = [];
+    try {
+        const loaded = await loadRegistry(root, loader);
+        registry = loaded.registry;
+        issues.push(...loaded.issues);
+        plan = await parseAllSpecFiles(root);
+    }
+    finally {
+        await loader.close();
+    }
+    issues.push(...validateStructure(registry, plan));
+    issues.push(...detectPotentialDrift(registry, plan, plan.paramRefs));
+    const run = await runAndCollect({ root, quiet: true });
+    if (!run.passed) {
+        issues.push({ level: 'ERROR', code: 'tests-red', message: '尚有測試未通過。' });
+    }
+    for (const s of plan.scenarios) {
+        if (!run.runtimeCoverage.get(s.reqId)?.has(s.name)) {
+            issues.push({
+                level: 'ERROR',
+                code: 'declared-not-run',
+                file: s.file,
+                line: s.line,
+                message: `scenario "${s.name}" 靜態宣告覆蓋 ${s.reqId}，執行期卻沒跑到（被 skip/only？）。`,
+            });
+        }
+    }
+    const hasError = issues.some((i) => i.level === 'ERROR');
+    return { issues, passed: run.passed, ok: run.passed && !hasError };
+}
+/** Coverage-only report (design §9: `attest cover`). */
+export async function runCover(root) {
+    const loader = await createLoader();
+    try {
+        const { registry } = await loadRegistry(root, loader);
+        const plan = await parseAllSpecFiles(root);
+        const counts = new Map();
+        for (const s of plan.scenarios) {
+            counts.set(s.reqId, (counts.get(s.reqId) ?? 0) + 1);
+        }
+        return Object.keys(registry)
+            .sort()
+            .map((reqId) => ({
+            reqId,
+            covered: (counts.get(reqId) ?? 0) > 0,
+            scenarioCount: counts.get(reqId) ?? 0,
+        }));
+    }
+    finally {
+        await loader.close();
+    }
+}
+/** Archive gate for a change (design §8, §9: `attest archive <change>`). */
+export async function runArchive(root, changeName) {
+    const loader = await createLoader();
+    try {
+        const { registry: base, issues } = await loadRegistry(root, loader);
+        if (issues.some((i) => i.level === 'ERROR'))
+            return issues;
+        const deltaPath = join(root, 'changes', changeName, 'requirements.delta.ts');
+        let delta;
+        try {
+            const mod = await loader.load(deltaPath);
+            delta = mod.default;
+        }
+        catch (err) {
+            return [
+                {
+                    level: 'ERROR',
+                    code: 'change-not-found',
+                    file: relative(root, deltaPath),
+                    message: `找不到或無法載入 change "${changeName}" 的 delta：${err instanceof Error ? err.message : String(err)}`,
+                },
+            ];
+        }
+        const applied = applyDelta(base, delta);
+        if (applied.issues.length > 0)
+            return applied.issues;
+        // Static plan = merged base suite + this change's specs (design §8).
+        const basePlan = await parseAllSpecFiles(root);
+        const changePlan = await parseChangeSpecs(root, changeName);
+        const plan = {
+            scenarios: [...basePlan.scenarios, ...changePlan.scenarios],
+            paramRefs: [...basePlan.paramRefs, ...changePlan.paramRefs],
+        };
+        // Run base specs + this change's specs; exclude other proposals and archive.
+        const others = (await listChangeNames(root)).filter((n) => n !== changeName);
+        const exclude = [
+            ...configDefaults.exclude,
+            '**/archive/**',
+            ...others.map((n) => `**/changes/${n}/**`),
+        ];
+        const run = await runAndCollect({ root, quiet: true, exclude });
+        return evaluateGate({ registry: applied.registry, plan, run });
+    }
+    finally {
+        await loader.close();
+    }
+}
+/** True when a spec suite exists at all (used by the CLI to warn on empty roots). */
+export async function hasSpecs(root) {
+    return (await findFiles(root, (n) => n.endsWith('.spec.ts'))).length > 0;
+}
+//# sourceMappingURL=pipeline.js.map

package/dist/core/pipeline.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pipeline.js","sourceRoot":"","sources":["../../src/core/pipeline.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,iFAAiF;AAEjF,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,SAAS,GACV,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAI/C,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,OAAO;YACL,GAAG,MAAM;YACT,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC;YACpC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;SACxD,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAQD,4DAA4D;AAC5D,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;IACpC,IAAI,QAAkB,CAAC;IACvB,IAAI,IAAgB,CAAC;IACrB,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IAClD,MAAM,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAErE,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,kBAAkB;gBACxB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,YAAY,CAAC,CAAC,KAAK,yBAAyB;aACzE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC;IACzD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,EAAE,EAAE,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;AACrE,CAAC;AAQD,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;aACzB,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,KAAK;YACL,OAAO,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC;YACrC,aAAa,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;SACtC,CAAC,CAAC,CAAC;IACR,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,UAAkB;IAC/D,MAAM,MAAM,GAAG,MAAM,YAAY,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACpE,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC;YAAE,OAAO,MAAM,CAAC;QAE3D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,uBAAuB,CAAC,CAAC;QAC7E,IAAI,KAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAA6B,SAAS,CAAC,CAAC;YACrE,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO;gBACL;oBACE,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,kBAAkB;oBACxB,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;oBAC/B,OAAO,EAAE,oBAAoB,UAAU,aAAa,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;iBACvG;aACF,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QAErD,qEAAqE;QACrE,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAe;YACvB,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC;YAC3D,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,UAAU,CAAC,SAAS,CAAC;SAC5D,CAAC;QAEF,6EAA6E;QAC7E,MAAM,MAAM,GAAG,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,CAAC;QAC7E,MAAM,OAAO,GAAG;YACd,GAAG,cAAc,CAAC,OAAO;YACzB,eAAe;YACf,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC;SAC3C,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAEhE,OAAO,YAAY,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACjE,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAY;IACzC,OAAO,CAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AAC3E,CAAC"}

package/dist/core/registry.d.ts

@@ -0,0 +1,35 @@
+import { z } from 'zod';
+import { type RegistryInput, type RequirementInput } from './schema.js';
+import type { Registry } from './types.js';
+/** Thrown when a registry fails structural validation (design §5.1). */
+export declare class RegistryValidationError extends Error {
+    readonly issues: z.ZodIssue[];
+    constructor(issues: z.ZodIssue[]);
+}
+/**
+ * Declare a requirement registry. Validates structure against RegistrySchema
+ * (SHALL/MUST keyword, non-empty rationale, well-formed IDs, scalar params) and
+ * returns the parsed registry with defaults applied (design §2, §5.1).
+ * Throws {@link RegistryValidationError} on invalid input.
+ */
+export declare function defineRequirements(input: RegistryInput): Registry;
+/**
+ * Shape of a change delta over the registry (design §7). Authoring (input)
+ * shapes are used so added / modified entries may omit defaulted fields.
+ */
+export interface RegistryDelta {
+    added?: RegistryInput;
+    modified?: Record<string, Partial<RequirementInput>>;
+    removed?: string[];
+    renamed?: {
+        from: string;
+        to: string;
+    }[];
+}
+/**
+ * Declare a registry delta for a change. This is an identity pass-through that
+ * fixes the authoring surface; ordered idempotent application
+ * (RENAMED -> REMOVED -> MODIFIED -> ADDED) lives in applyDelta (design §7).
+ */
+export declare function delta(d: RegistryDelta): RegistryDelta;
+//# sourceMappingURL=registry.d.ts.map

package/dist/core/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,wEAAwE;AACxE,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;gBAApB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAIjD;AAQD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAMjE;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,aAAa,CAErD"}

package/dist/core/registry.js

@@ -0,0 +1,41 @@
+// Requirement registry authoring API (design §2, §5.1, §7).
+// defineRequirements validates against RegistrySchema and applies defaults;
+// delta() declares a change delta, applied by applyDelta (see apply.ts).
+import { z } from 'zod';
+import { RegistrySchema, } from './schema.js';
+/** Thrown when a registry fails structural validation (design §5.1). */
+export class RegistryValidationError extends Error {
+    issues;
+    constructor(issues) {
+        super(`Invalid requirement registry:\n${formatIssues(issues)}`);
+        this.issues = issues;
+        this.name = 'RegistryValidationError';
+    }
+}
+function formatIssues(issues) {
+    return issues
+        .map((i) => `  - ${i.path.join('.') || '(root)'}: ${i.message}`)
+        .join('\n');
+}
+/**
+ * Declare a requirement registry. Validates structure against RegistrySchema
+ * (SHALL/MUST keyword, non-empty rationale, well-formed IDs, scalar params) and
+ * returns the parsed registry with defaults applied (design §2, §5.1).
+ * Throws {@link RegistryValidationError} on invalid input.
+ */
+export function defineRequirements(input) {
+    const result = RegistrySchema.safeParse(input);
+    if (!result.success) {
+        throw new RegistryValidationError(result.error.issues);
+    }
+    return result.data;
+}
+/**
+ * Declare a registry delta for a change. This is an identity pass-through that
+ * fixes the authoring surface; ordered idempotent application
+ * (RENAMED -> REMOVED -> MODIFIED -> ADDED) lives in applyDelta (design §7).
+ */
+export function delta(d) {
+    return d;
+}
+//# sourceMappingURL=registry.js.map

package/dist/core/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,4EAA4E;AAC5E,yEAAyE;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,aAAa,CAAC;AAGrB,wEAAwE;AACxE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,MAAoB;QAC9C,KAAK,CAAC,kCAAkC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QADtC,WAAM,GAAN,MAAM,CAAc;QAE9C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,CAAgB;IACpC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/runner.d.ts

@@ -0,0 +1,15 @@
+import type { RunResult } from './types.js';
+export interface RunAndCollectOptions {
+    /** Project root to run. Defaults to the current working directory. */
+    root?: string;
+    /** Optional Vitest CLI test-name filters. */
+    filters?: string[];
+    /** Suppress the child Vitest reporter output (the CLI renders its own report). */
+    quiet?: boolean;
+    /** Spec include globs (default: all spec files). */
+    include?: string[];
+    /** Spec exclude globs (default: node_modules/dist + changes/archive). */
+    exclude?: string[];
+}
+export declare function runAndCollect(options?: RunAndCollectOptions): Promise<RunResult>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/core/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../src/core/runner.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAQ5C,MAAM,WAAW,oBAAoB;IACnC,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kFAAkF;IAClF,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,wBAAsB,aAAa,CACjC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,SAAS,CAAC,CA0CpB"}

package/dist/core/runner.js

@@ -0,0 +1,59 @@
+// Executable verification: run Vitest programmatically and reconstruct runtime
+// coverage from the task tree (design §5.4). Coverage is NOT collected via an
+// in-process singleton — tests run in worker subprocesses, so the singleton
+// never crosses the process boundary; the serialized task tree does.
+import { startVitest } from 'vitest/node';
+import { configDefaults } from 'vitest/config';
+/** requirement() names each describe block `[reqId]`; recover the id from that. */
+const REQ_SUITE = /^\[(.+)\]$/;
+/** Proposed / archived changes are excluded from a normal run (design §7, §8). */
+const DEFAULT_EXCLUDE = [...configDefaults.exclude, '**/changes/**', '**/archive/**'];
+export async function runAndCollect(options = {}) {
+    const vitest = await startVitest('test', options.filters ?? [], {
+        watch: false,
+        root: options.root,
+        include: options.include ?? ['**/*.spec.ts'],
+        exclude: options.exclude ?? DEFAULT_EXCLUDE,
+        // Isolate from any ambient vitest.config so the child run is deterministic.
+        config: false,
+        ...(options.quiet ? { silent: true, reporters: [{}] } : {}),
+    });
+    if (!vitest) {
+        throw new Error('runAndCollect: failed to start Vitest.');
+    }
+    try {
+        const runtimeCoverage = new Map();
+        // Reconstruct coverage from the task tree (not an in-process singleton).
+        const walk = (task) => {
+            if (task.type === 'suite') {
+                const m = REQ_SUITE.exec(task.name);
+                if (m) {
+                    const id = m[1];
+                    const set = runtimeCoverage.get(id) ?? new Set();
+                    for (const c of task.tasks ?? []) {
+                        // A scenario counts as covered only if it actually executed —
+                        // skipped/todo scenarios have no run result (enables §8's
+                        // declared-not-run check).
+                        if (c.type === 'test' && isExecuted(c))
+                            set.add(c.name);
+                    }
+                    runtimeCoverage.set(id, set);
+                }
+            }
+            for (const c of task.tasks ?? [])
+                walk(c);
+        };
+        for (const file of vitest.state.getFiles())
+            walk(file);
+        const passed = (vitest.state.getCountOfFailedTests?.() ?? 0) === 0;
+        return { passed, runtimeCoverage };
+    }
+    finally {
+        await vitest.close();
+    }
+}
+function isExecuted(task) {
+    const state = task.result?.state;
+    return state === 'pass' || state === 'fail';
+}
+//# sourceMappingURL=runner.js.map

package/dist/core/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../src/core/runner.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAC/E,8EAA8E;AAC9E,4EAA4E;AAC5E,qEAAqE;AAErE,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,mFAAmF;AACnF,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,kFAAkF;AAClF,MAAM,eAAe,GAAG,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,eAAe,EAAE,eAAe,CAAC,CAAC;AAetF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAgC,EAAE;IAElC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,IAAI,EAAE,EAAE;QAC9D,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,CAAC,cAAc,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,eAAe;QAC3C,4EAA4E;QAC5E,MAAM,EAAE,KAAK;QACb,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;IAC5D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,eAAe,GAAG,IAAI,GAAG,EAAuB,CAAC;QAEvD,yEAAyE;QACzE,MAAM,IAAI,GAAG,CAAC,IAAc,EAAQ,EAAE;YACpC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC1B,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACpC,IAAI,CAAC,EAAE,CAAC;oBACN,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;oBACjB,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;oBACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,EAAE,CAAC;wBACjC,8DAA8D;wBAC9D,0DAA0D;wBAC1D,2BAA2B;wBAC3B,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC;4BAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAC1D,CAAC;oBACD,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;gBAC/B,CAAC;YACH,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE;gBAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC;QACF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE;YAAE,IAAI,CAAC,IAA2B,CAAC,CAAC;QAE9E,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,qBAAqB,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;QACnE,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IACrC,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AASD,SAAS,UAAU,CAAC,IAAc;IAChC,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC;IACjC,OAAO,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,MAAM,CAAC;AAC9C,CAAC"}

package/dist/core/schema.d.ts

@@ -0,0 +1,42 @@
+import { z } from 'zod';
+/** A single behavioural contract (design §2). */
+export declare const RequirementSchema: z.ZodObject<{
+    statement: z.ZodEffects<z.ZodString, string, string>;
+    rationale: z.ZodString;
+    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodNumber, z.ZodString, z.ZodBoolean]>>>;
+    outOfScope: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    params: Record<string, string | number | boolean>;
+    statement: string;
+    rationale: string;
+    outOfScope: string[];
+}, {
+    statement: string;
+    rationale: string;
+    params?: Record<string, string | number | boolean> | undefined;
+    outOfScope?: string[] | undefined;
+}>;
+/** The requirement registry: stable ID -> requirement (design §2, §5.1). */
+export declare const RegistrySchema: z.ZodRecord<z.ZodString, z.ZodObject<{
+    statement: z.ZodEffects<z.ZodString, string, string>;
+    rationale: z.ZodString;
+    params: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodNumber, z.ZodString, z.ZodBoolean]>>>;
+    outOfScope: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+}, "strip", z.ZodTypeAny, {
+    params: Record<string, string | number | boolean>;
+    statement: string;
+    rationale: string;
+    outOfScope: string[];
+}, {
+    statement: string;
+    rationale: string;
+    params?: Record<string, string | number | boolean> | undefined;
+    outOfScope?: string[] | undefined;
+}>>;
+/** Parsed (output) shapes — defaults applied. */
+export type Requirement = z.infer<typeof RequirementSchema>;
+export type Registry = z.infer<typeof RegistrySchema>;
+/** Authoring (input) shapes — params / outOfScope optional. */
+export type RequirementInput = z.input<typeof RequirementSchema>;
+export type RegistryInput = z.input<typeof RegistrySchema>;
+//# sourceMappingURL=schema.d.ts.map

package/dist/core/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/core/schema.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,iDAAiD;AACjD,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;EAW5B,CAAC;AAEH,4EAA4E;AAC5E,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;GAG1B,CAAC;AAEF,iDAAiD;AACjD,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAC5D,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD,+DAA+D;AAC/D,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AACjE,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC"}

package/dist/core/schema.js

@@ -0,0 +1,20 @@
+// Zod structural schema for the requirement registry (design §2, §5.1).
+// This is the single source of truth for the shape of the intent layer; the
+// Requirement / Registry TypeScript types are inferred from it.
+import { z } from 'zod';
+/** A single behavioural contract (design §2). */
+export const RequirementSchema = z.object({
+    statement: z
+        .string()
+        .refine((s) => /\b(SHALL|MUST)\b/.test(s), {
+        message: 'statement 必須含 RFC-2119 關鍵字 SHALL/MUST',
+    }),
+    rationale: z.string().min(10, 'rationale 不可為空（意圖層必須說明為什麼）'),
+    params: z
+        .record(z.string(), z.union([z.number(), z.string(), z.boolean()]))
+        .default({}),
+    outOfScope: z.array(z.string()).default([]),
+});
+/** The requirement registry: stable ID -> requirement (design §2, §5.1). */
+export const RegistrySchema = z.record(z.string().regex(/^[A-Z]+-\d+$/, 'ID 需形如 AUTH-3'), RequirementSchema);
+//# sourceMappingURL=schema.js.map

package/dist/core/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/core/schema.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,4EAA4E;AAC5E,gEAAgE;AAEhE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,iDAAiD;AACjD,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QACzC,OAAO,EAAE,uCAAuC;KACjD,CAAC;IACJ,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,4BAA4B,CAAC;IAC3D,MAAM,EAAE,CAAC;SACN,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;SAClE,OAAO,CAAC,EAAE,CAAC;IACd,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC5C,CAAC,CAAC;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CACpC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,EAAE,eAAe,CAAC,EACjD,iBAAiB,CAClB,CAAC"}

package/dist/core/types.d.ts

@@ -0,0 +1,39 @@
+export type { Requirement, Registry } from './schema.js';
+/** A scenario extracted statically from a spec file (design §5.2). */
+export interface ParsedScenario {
+    reqId: string;
+    name: string;
+    file: string;
+    line: number;
+}
+/**
+ * A static signal that a scenario referenced a `.params` value — the producer
+ * for the anti-drift heuristic (design §6, mechanism 3).
+ */
+export interface ParamRef {
+    reqId: string;
+    scenario: string;
+}
+/** The strongly-typed static plan produced by the AST parser (design §5.2). */
+export interface AttestPlan {
+    scenarios: ParsedScenario[];
+    paramRefs: ParamRef[];
+}
+/** Result of an executable verification run (design §5.4). */
+export interface RunResult {
+    /** True when no test failed. */
+    passed: boolean;
+    /** reqId -> set of scenario names that actually executed (from the task tree). */
+    runtimeCoverage: Map<string, Set<string>>;
+}
+/** Severity levels for graded reporting (design §5.3). */
+export type Level = 'ERROR' | 'WARNING' | 'INFO';
+/** A single graded diagnostic with location + fix hint (design §5.3). */
+export interface Issue {
+    level: Level;
+    code: string;
+    file?: string;
+    line?: number;
+    message: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/core/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAIA,YAAY,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEzD,sEAAsE;AACtE,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,+EAA+E;AAC/E,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,SAAS,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,8DAA8D;AAC9D,MAAM,WAAW,SAAS;IACxB,gCAAgC;IAChC,MAAM,EAAE,OAAO,CAAC;IAChB,kFAAkF;IAClF,eAAe,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;CAC3C;AAED,0DAA0D;AAC1D,MAAM,MAAM,KAAK,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAEjD,yEAAyE;AACzE,MAAM,WAAW,KAAK;IACpB,KAAK,EAAE,KAAK,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB"}

package/dist/core/types.js

@@ -0,0 +1,5 @@
+// Central strongly-typed model for Attest.
+// Requirement / Registry are inferred from the Zod schema (design §5.1, the
+// single source of truth for the intent layer); the remaining shapes live here.
+export {};
+//# sourceMappingURL=types.js.map

package/dist/core/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/core/types.ts"],"names":[],"mappings":"AAAA,2CAA2C;AAC3C,4EAA4E;AAC5E,gFAAgF"}

package/dist/core/validator.d.ts

@@ -0,0 +1,15 @@
+import type { AttestPlan, Issue, ParamRef, Registry } from './types.js';
+/**
+ * Static structural validation (design §5.3). Emits ERROR-level issues for:
+ * - orphan-test: a scenario covers an unknown requirement id
+ * - uncovered-requirement: a requirement has no scenario
+ * - unbound-param: a statement placeholder has no matching param
+ */
+export declare function validateStructure(registry: Registry, plan: AttestPlan): Issue[];
+/**
+ * Weak anti-drift heuristic (design §6, mechanism 3). Emits an INFO when a
+ * scenario covers a requirement that has params but the scenario does not
+ * reference them — a place a drifting hardcoded literal could hide.
+ */
+export declare function detectPotentialDrift(registry: Registry, plan: AttestPlan, refs: ParamRef[]): Issue[];
+//# sourceMappingURL=validator.d.ts.map

package/dist/core/validator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,EAAE,CA4C/E;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,QAAQ,EAAE,GACf,KAAK,EAAE,CAmBT"}