@am_shork/attest 0.2.0 → 0.2.1

package/CHANGELOG.md

@@ -15,6 +15,127 @@ not API.
 
 ## [Unreleased]
 
+### Under consideration
+
+Queued from the skills-manager adoption report (0.2.0, 41 requirements / 106
+scenarios, plain-TS). **Nothing below is built.** An entry here is a decision to
+ship, not a claim that it ships; each moves into `Added` / `Changed` / `Fixed`
+when it does, and this heading is deliberately not one of those, so no reader
+can take the section for a release note. The report's other proposals were
+declined and are not recorded.
+
+- **A report of N issues sharing one `code` should say so once.** The 0.1.1 →
+  0.2.0 upgrade printed six `registry-not-static` ERRORs in a row — one per
+  registry file, every one caused by the same prose written as `'…' + '…'` — and
+  left the reader to work out that they were one cause and one mechanical fix.
+  A summary line will name the shared cause when a code repeats; the per-file
+  lines stay exactly as they are, because they are what makes a diagnostic
+  clickable. Human output only — a summary that became an `Issue` would carry a
+  `code` into `--json`, `summary` and `hasError`, which is a report-contract
+  change and not what this is.
+
+## [0.2.1] - 2026-07-26
+
+The type layer stopped charging for the one behaviour the tool rewards, and
+three limits an adoption had to find on its own are now written down.
+
+### Added
+
+- **Reading a param cost a cast, and the cast was charged on the one behaviour
+  the tool rewards.** `defineRequirements` returned `Registry`, so every param
+  was the full `string | number | boolean | Array<…>` union and
+  `reqs[id].params.x` had to be converged at each read site — the reporting
+  adopter wrote `str()` / `strList()` helpers to do it. `possible-drift` goes
+  quiet precisely when a scenario reads `.params`, so the type layer was taxing
+  the behaviour the anti-drift heuristic exists to reward. It is now generic
+  over its argument with a `const` type parameter: `params.idleTimeoutMin` is
+  `30`, `params.vendorDirs` is an array of the strings written there, and a
+  declared ID is known to exist, so `reqs['AUTH-3']` needs no `!` under
+  `noUncheckedIndexedAccess`. Removing the casts from Attest's own `self/`
+  specs closed 21 latent type errors there. No runtime behaviour and no `--json`
+  change: since 0.2.0 the analysing commands read the registry from the AST, so
+  this type has no bearing on anything the engine sees.
+  **A widening, deliberately.** A `const` type parameter would infer array
+  literals as tuples — `readonly` ones under a constraint that admits them —
+  and neither is assignable to the mutable `Array<number | string | boolean>`
+  the schema parses to, which would have broken `const reqs: Registry =
+  defineRequirements({…})` and every `const xs: string[] = req.params.foo`; the
+  mapped type collapses them back to `E[]`. The result is still intersected with
+  `Registry`, so its index signature survives and `reqs[id]` with an `id: string`
+  — a shared test helper — still resolves, as does a param the registry does not
+  declare. **What that costs**, against the intent recorded when this was queued:
+  a mistyped literal `reqs['TYPO-9']` is *not* rejected outright. Rejecting an
+  unknown key and accepting a `string` one are the same question asked of one
+  index signature, and it cannot answer both ways; the fallback is what keeps
+  this non-breaking, so it wins. The weaker half is real — an unknown ID misses
+  the declared keys and resolves through the index signature, so under
+  `noUncheckedIndexedAccess` reading through it is an error where `reqs['AUTH-3']`
+  no longer is — and a wrong ID is an `unknown-req-id` ERROR from `check`
+  regardless, which reads registry and specs together. The type layer is the
+  second reader here, not the only one.
+- **Three things an adoption had to discover for itself.** Documentation only —
+  no behaviour changed, and each is a property the design deliberately has.
+  **`check` has no detection power over a params change**: editing a value
+  (`'main'` → `'trunk'`, an entry dropped from a nine-element list) leaves it at
+  `✓ No issues`, because `check` executes nothing and nothing became unbound or
+  uncovered. The single source makes the value impossible to *diverge*, which is
+  a different and stronger claim than announcing that it *moved* — but "params
+  are the single source for values that change" reads easily as "`check` guards
+  them", and what actually guards them is a scenario asserting on the value it
+  read. Now stated where params are introduced (README, design §2, the prompt
+  guide) and recorded as a limit in design §11, next to the others.
+  **`verify` does not read your `vitest.config.ts`**: the child run starts
+  isolated, so a verdict never depends on ambient configuration — which also
+  means framework code gets no transforms, no DOM and no aliases until
+  `--vitest-config` points it at one. The flag was documented in the README; the
+  trade-off behind it now sits in design §5.4, where the run scope is described,
+  because that is where a reader meets the isolation.
+  **A template literal keeps its whitespace**: one with no substitution reads
+  statically and is accepted, but preserves every newline and space of
+  indentation, and `render` copies the statement into the Markdown as written —
+  so editor-friendly wrapping lands in the generated document. This is the
+  reason registry prose is written as one long single-line string, which was
+  folklore until now.
+- **A codemod for the 0.2.0 `registry-not-static` migration.** Collapsing
+  multi-line `'…' + '…'` prose into one literal is mechanical and was done by
+  hand across 21 requirements in the first reported adoption. The 0.2.0 entry
+  now carries a compiler-API script that does it, tested on the shapes that make
+  it awkward: mixed quote styles, an apostrophe inside the prose, a template
+  literal in the chain, and a numeric `1 + 2` it must leave alone.
+- **Type tests, and a suite that runs them.** The repo had none, and this change
+  is entirely type-level: no runtime test and no `verify self` run could observe
+  a regression in it. `tests/registry-types.spec-d.ts` pins the narrowing, both
+  compatibility promises and the trade-off above; `vitest run` now typechecks in
+  the same pass (`tsconfig.typecheck.json`, which unlike the build project covers
+  `tests/` and `self/` — neither had ever been through a compiler). `DefinedRegistry`
+  is exported for consumers that need to name the type.
+
+- **A `{placeholder}` in a `rationale` reached the document unread.** `render`
+  interpolates `statement` and nothing else, and `unbound-param` only scans
+  statements, so braces written into a rationale passed through every check and
+  landed verbatim in the generated Markdown. The mistyped placeholder is the
+  obvious case; the one that misleads is the **correctly spelled** one, where
+  the author declared the param and simply picked the wrong field — nothing was
+  unbound, so nothing fired, and the document reviewers and audit read showed a
+  placeholder where a value was meant. A new `rationale-placeholder` WARNING now
+  reports any `{name}` in a rationale, bound or not.
+  Deliberately not the two alternatives. Extending `unbound-param` to rationales
+  would cover only the undeclared half — the half that misleads least. And
+  making `render` interpolate rationales would change the bytes of every
+  committed rendering, turning `render --check` red on an upgrade where the user
+  moved no intent, which this file already treats as breaking for that surface.
+  **A placeholder inside a Markdown code span is not reported.** That exclusion
+  came from dogfooding: the first run against Attest's own registry flagged
+  ATX-14, whose rationale explains that `` `{toString}` `` *looks* bound — prose
+  about a placeholder, not a misfiled one, and the only way to write a
+  requirement whose subject is the syntax itself. A rationale is Markdown and
+  `render` leaves a code span exactly as written, so a backticked token is
+  already marked as quoted.
+  WARNING sits below the `hasError` predicate that `ok`, `--json` and the exit
+  code all read from, so an existing green registry with braces in a rationale
+  gains a line of output and keeps its verdict. A new `code` on the existing
+  `Issue` shape is additive: `schemaVersion` stays `1`.
+
 ## [0.2.0] - 2026-07-26
 
 Three things that could each end a run with the wrong verdict: a registry read
@@ -63,6 +184,47 @@ never pointed at.
   A registry file may still be written as `const reqs = defineRequirements({…});
   export default reqs;`, and may import `defineRequirements` under any alias or
   through a namespace.
+  **Migrating concatenated prose.** The common shape is a statement or rationale
+  wrapped across lines as `'…' + '…'`, which is a computation and so no longer
+  reads. Collapsing it is purely mechanical — 21 requirements by hand in the
+  first reported adoption — so it is worth a codemod. Save this at the project
+  root and run it over the registry files; it rewrites only concatenations whose
+  every operand is a string (or substitution-free template) literal, leaving
+  `1 + 2` and anything with an identifier in it alone:
+
+  ```js
+  // flatten-reqs.mjs — node flatten-reqs.mjs requirements/*.reqs.ts
+  import ts from 'typescript';
+  import { readFileSync, writeFileSync } from 'node:fs';
+
+  const flat = (n) =>
+    ts.isBinaryExpression(n) && n.operatorToken.kind === ts.SyntaxKind.PlusToken
+      ? [flat(n.left), flat(n.right)].every(Boolean) && flat(n.left) + flat(n.right)
+      : (ts.isStringLiteral(n) || ts.isNoSubstitutionTemplateLiteral(n)) && n.text;
+
+  for (const file of process.argv.slice(2)) {
+    const src = readFileSync(file, 'utf8');
+    const sf = ts.createSourceFile(file, src, ts.ScriptTarget.Latest, true);
+    const edits = [];
+    const visit = (n) => {
+      const text = flat(n);
+      // the whole chain is one edit, so do not descend into it
+      if (text !== false && ts.isBinaryExpression(n)) return void edits.push([n.getStart(sf), n.getEnd(), text]);
+      n.forEachChild(visit);
+    };
+    visit(sf);
+    let out = src;
+    for (const [start, end, text] of edits.reverse())
+      out = `${out.slice(0, start)}${JSON.stringify(text)}${out.slice(end)}`;
+    if (edits.length) writeFileSync(file, out), console.log(`${file}: ${edits.length} collapsed`);
+  }
+  ```
+
+  It emits double-quoted strings (`JSON.stringify` does the escaping, so prose
+  containing an apostrophe survives); run the formatter afterwards. Write the
+  result as one long line rather than re-wrapping it — a template literal reads
+  statically but keeps its newlines and indentation, and `render` copies the
+  statement into the Markdown exactly as written.
   The `--json` envelope is unchanged: `registry-not-static` is a new `code` on
   the existing `Issue` shape, which is additive, so `schemaVersion` stays `1`.
   `vite` remains a peer dependency — `verify` and `archive` run the suite through
@@ -174,12 +336,13 @@ not move when one is cut.
   when a requirement is added without a hand-labelled obligation count, because
   the reach figure once quoted here went stale exactly that way.
   *`compound-requirement` (WARNING) — rejected.* More than one RFC-2119 keyword
-  in one `statement` is objectively more than one obligation. Measured: of the 6
-  requirements in the corpus carrying more than one, it flags 1 (`ATX-10`) and
-  misses `ATX-5`, `ATX-9`, `ATX-13`, `ATX-14`, `ATX-17` — every one that packs
-  clauses under a single keyword, which is the form the coverage incentive
-  actually rewards. A wider variant (keyword plus a coordinating `and`/`while`/
-  `;`) reaches 5 of 6 with one wrong hit, so reach is not the deciding argument.
+  in one `statement` is objectively more than one obligation. Measured: of the 7
+  requirements in the corpus carrying more than one, it flags 2 (`ATX-10`,
+  `ATX-21`) and misses `ATX-5`, `ATX-9`, `ATX-13`, `ATX-14`, `ATX-17` — every
+  one that packs clauses under a single keyword, which is the form the coverage
+  incentive actually rewards. A wider variant (keyword plus a coordinating
+  `and`/`while`/`;`) reaches 6 of 7 with one wrong hit, so reach is not the
+  deciding argument.
   This is: both variants are silenced by deleting the word that triggered them,
   and neither can tell that deletion from a real split. `SHALL do A and MUST do
   B` clears the warning as `SHALL do A and do B` — same two obligations, one
@@ -189,12 +352,13 @@ not move when one is cut.
   different values in two requirements sharing an id prefix. Measured: it fires
   twice on this repo and both firings are wrong — `idleTimeoutMin` (`15` in
   `ATX-3`, `30` in `ATX-10`), unrelated illustrative fixtures, and `code`
-  (`registry-not-static` in `ATX-17`, `empty-spec` in `ATX-18`), two diagnostics
-  that could not possibly agree. The second arrived on its own when `ATX-18` was
-  added, which is the more damning half: a generic param name collides more often
-  as a registry grows, so the false-positive rate rises with adoption — the
-  opposite of what a shippable rule does. Still zero true positives across 24
-  requirements. The escape hatch it was blocked on has since been designed
+  (`registry-not-static` in `ATX-17`, `empty-spec` in `ATX-18`,
+  `rationale-placeholder` in `ATX-21`), diagnostics that could not possibly
+  agree. The second arrived on its own when `ATX-18` was added and grew a third
+  member on its own again when `ATX-21` was, which is the more damning half: a
+  generic param name collides more often as a registry grows, so the
+  false-positive rate rises with adoption — the opposite of what a shippable rule
+  does. Still zero true positives across 25 requirements. The escape hatch it was blocked on has since been designed
   and does not rescue it: with no config file the only workable shape is an
   additive `independentParams?: string[]` on the requirement (a CLI flag is
   per-invocation for what is a permanent property of two requirements; changing
@@ -534,7 +698,8 @@ Initial release.
   (MIT), whose four-stage engine and diff-first change model Attest's
   architecture is adapted from (re-implemented from scratch, no source copied).
 
-[Unreleased]: https://gitlab.com/Pseudorca/attest/-/compare/v0.2.0...main
+[Unreleased]: https://gitlab.com/Pseudorca/attest/-/compare/v0.2.1...main
+[0.2.1]: https://gitlab.com/Pseudorca/attest/-/tags/v0.2.1
 [0.2.0]: https://gitlab.com/Pseudorca/attest/-/tags/v0.2.0
 [0.1.7]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.7
 [0.1.6]: https://gitlab.com/Pseudorca/attest/-/tags/v0.1.6

package/README.md

@@ -14,6 +14,13 @@ physically impossible to drift between the spec and the assertion. A param may b
 a scalar or an array of scalars, so list-shaped constants (vendor blacklists, id
 sets) get the same single source as a lone number.
 
+What that does not buy is a warning when you change the value. `check` runs
+nothing, so editing a param leaves it at `✓ No issues` — nothing became unbound,
+nothing became uncovered. The value cannot *diverge* from the assertion, which is
+the stronger property; noticing that it *moved* is `verify`'s job, and only when
+a scenario asserts on the value it read from `params`. Read the param inside the
+assertion, not beside it.
+
 See the authoritative design — [English](https://gitlab.com/Pseudorca/attest/-/blob/main/docs/en/attest-design.md) · [中文](https://gitlab.com/Pseudorca/attest/-/blob/main/docs/zh/attest-design.md) — and the rest of the [docs](https://gitlab.com/Pseudorca/attest/-/tree/main/docs).
 
 ## Prerequisites
@@ -57,7 +64,7 @@ import { createSession, advance, isValid } from './session.js';
 
 requirement('AUTH-3', () => {
   scenario('idle timeout invalidates the session', () => {
-    const t = reqs['AUTH-3'].params.idleTimeoutMin; // read from the single source
+    const t = reqs['AUTH-3'].params.idleTimeoutMin; // single source, typed `30` — no cast
     const s = createSession();
     advance(s, t + 1, 'minutes');
     expect(isValid(s, t)).toBe(false);
@@ -115,6 +122,12 @@ behaviour instead, `--eval` restores it on all three commands:
 attest check --eval    # reads the registry by executing every *.reqs.ts
 ```
 
+One more thing to know about literals: write registry prose as **one long
+single-line string**. A template literal with no substitution reads statically and
+is accepted — but it keeps every newline and every space of indentation inside it,
+and `render` puts the statement into the Markdown exactly as written, so the
+wrapping that looked tidy in the editor lands in the generated document.
+
 ### A readable spec for humans (`attest render`)
 
 The intent layer lives in TypeScript, which means a reviewer, a QA engineer, or
@@ -208,7 +221,7 @@ attest check --json
 {
   "tool": "attest",
   "schemaVersion": 1,
-  "version": "0.2.0",
+  "version": "0.2.1",
   "command": "check",
   "ok": false,
   "summary": { "error": 1, "warning": 0, "info": 0 },

package/dist/core/registry.d.ts

@@ -1,18 +1,66 @@
 import { z } from 'zod';
 import { type RegistryInput, type RequirementInput } from './schema.js';
-import type { Registry } from './types.js';
+import type { Registry, Requirement } from './types.js';
 /** Thrown when a registry fails structural validation (design §5.1). */
 export declare class RegistryValidationError extends Error {
     readonly issues: z.ZodIssue[];
     constructor(issues: z.ZodIssue[]);
 }
+/**
+ * A `const` type parameter infers an array literal as a tuple, and would infer
+ * it as a `readonly` tuple under a constraint that admits one. Neither is what
+ * the registry parses to: the schema's array params are plain mutable
+ * `Array<scalar>`, and `const xs: string[] = req.params.dirs` has to keep
+ * compiling. Collapsing to `E[]` keeps the element types the author wrote —
+ * the point of the exercise — without claiming a length or a mutability the
+ * parsed value does not have.
+ */
+type AsArray<V> = V extends readonly (infer E)[] ? E[] : V;
+/**
+ * The params of one requirement as written, over the schema's wider record.
+ * The intersection is what keeps this a widening: `params.retries` narrows to
+ * the literal `3`, while `params.somethingElse` still resolves through the
+ * record, so no read that compiled before stops compiling.
+ */
+type DefinedParams<R> = R extends {
+    params: infer P;
+} ? {
+    -readonly [K in keyof P]: AsArray<P[K]>;
+} & Requirement['params'] : Requirement['params'];
+/**
+ * What `defineRequirements` returns for a literal registry: each declared ID
+ * keeps the param types its author wrote, so a scenario reads a value without
+ * converging the `string | number | boolean | Array<…>` union at the read site
+ * (design §6, mechanism 3 — a scenario reading `.params` is what quiets the
+ * anti-drift heuristic, so the type layer must not tax the one behaviour the
+ * rest of the tool exists to reward).
+ *
+ * The intersection with {@link Registry} is deliberate and load-bearing: it
+ * keeps the index signature, so `reqs[id]` with an `id: string` — a shared test
+ * helper — still compiles, and the result is still assignable to `Registry`.
+ * The cost is that an index signature admits *every* string, so a mistyped
+ * literal `reqs['TYPO-9']` falls through to it instead of being rejected
+ * outright: rejecting an unknown key and accepting a `string` one are the same
+ * question asked of one index signature, and it cannot answer both ways. What
+ * survives is the weaker form — an unknown ID misses the declared keys, so
+ * under `noUncheckedIndexedAccess` reading through it is an error where a
+ * declared ID is not. Compatibility takes the tie because a wrong ID is
+ * already an `unknown-req-id` ERROR from `check`, which reads the registry and
+ * the specs together; the type layer is the second reader here, not the only
+ * one.
+ */
+export type DefinedRegistry<T extends RegistryInput> = {
+    [K in keyof T]: Omit<Requirement, 'params'> & {
+        params: DefinedParams<T[K]>;
+    };
+} & Registry;
 /**
  * Declare a requirement registry. Validates structure against RegistrySchema
  * (SHALL/MUST keyword, non-empty rationale, well-formed IDs, scalar params) and
  * returns the parsed registry with defaults applied (design §2, §5.1).
  * Throws {@link RegistryValidationError} on invalid input.
  */
-export declare function defineRequirements(input: RegistryInput): Registry;
+export declare function defineRequirements<const T extends RegistryInput>(input: T): DefinedRegistry<T>;
 /**
  * Shape of a change delta over the registry (design §7). Authoring (input)
  * shapes are used so added / modified entries may omit defaulted fields.
@@ -32,4 +80,5 @@ export interface RegistryDelta {
  * (RENAMED -> REMOVED -> MODIFIED -> ADDED) lives in applyDelta (design §7).
  */
 export declare function delta(d: RegistryDelta): RegistryDelta;
+export {};
 //# sourceMappingURL=registry.d.ts.map

package/dist/core/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,wEAAwE;AACxE,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;gBAApB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAIjD;AAQD;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,aAAa,GAAG,QAAQ,CAMjE;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,aAAa,CAErD"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACtB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAExD,wEAAwE;AACxE,qBAAa,uBAAwB,SAAQ,KAAK;aACpB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;gBAApB,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAIjD;AAQD;;;;;;;;GAQG;AACH,KAAK,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,KAAK,aAAa,CAAC,CAAC,IAAI,CAAC,SAAS;IAAE,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACjD;IAAE,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;CAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,GACnE,WAAW,CAAC,QAAQ,CAAC,CAAC;AAE1B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,aAAa,IAAI;KACpD,CAAC,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,GAAG;QAAE,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;KAAE;CAC9E,GAAG,QAAQ,CAAC;AAEb;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,EAAE,CAAC,GAAG,eAAe,CAAC,CAAC,CAAC,CAS9F;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,CAAC,EAAE,aAAa,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;IACrD,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC1C;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,CAAC,EAAE,aAAa,GAAG,aAAa,CAErD"}

package/dist/core/registry.js

@@ -28,6 +28,9 @@ export function defineRequirements(input) {
     if (!result.success) {
         throw new RegistryValidationError(result.error.issues);
     }
+    // Zod validates the shape but its output type is the schema's, which has
+    // already forgotten the literals `const T` captured. Same object, narrower
+    // description of it — the assertion carries the literals across.
     return result.data;
 }
 /**

package/dist/core/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,4EAA4E;AAC5E,yEAAyE;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,aAAa,CAAC;AAGrB,wEAAwE;AACxE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,MAAoB;QAC9C,KAAK,CAAC,kCAAkC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QADtC,WAAM,GAAN,MAAM,CAAc;QAE9C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAoB;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,CAAgB;IACpC,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/core/registry.ts"],"names":[],"mappings":"AAAA,4DAA4D;AAC5D,4EAA4E;AAC5E,yEAAyE;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,GAGf,MAAM,aAAa,CAAC;AAGrB,wEAAwE;AACxE,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IACpB;IAA5B,YAA4B,MAAoB;QAC9C,KAAK,CAAC,kCAAkC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QADtC,WAAM,GAAN,MAAM,CAAc;QAE9C,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,MAAoB;IACxC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,QAAQ,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;SAC/D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAiDD;;;;;GAKG;AACH,MAAM,UAAU,kBAAkB,CAAgC,KAAQ;IACxE,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC;IACD,yEAAyE;IACzE,2EAA2E;IAC3E,iEAAiE;IACjE,OAAO,MAAM,CAAC,IAA0B,CAAC;AAC3C,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,CAAgB;IACpC,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/validator.d.ts

@@ -4,6 +4,9 @@ import type { AttestPlan, Issue, ParamRef, Registry } from './types.js';
  * - orphan-test: a scenario covers an unknown requirement id
  * - uncovered-requirement: a requirement has no scenario
  * - unbound-param: a statement placeholder has no matching param
+ *
+ * and one WARNING:
+ * - rationale-placeholder: a `{name}` in a rationale, which is never interpolated
  */
 export declare function validateStructure(registry: Registry, plan: AttestPlan): Issue[];
 /**

package/dist/core/validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAkB,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExF;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,EAAE,CAkD/E;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,QAAQ,EAAE,GACf,KAAK,EAAE,CA+BT"}
+{"version":3,"file":"validator.d.ts","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,QAAQ,EAAkB,QAAQ,EAAE,MAAM,YAAY,CAAC;AAExF;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,GAAG,KAAK,EAAE,CA0E/E;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,QAAQ,EAClB,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,QAAQ,EAAE,GACf,KAAK,EAAE,CA+BT"}

package/dist/core/validator.js

@@ -5,6 +5,9 @@
  * - orphan-test: a scenario covers an unknown requirement id
  * - uncovered-requirement: a requirement has no scenario
  * - unbound-param: a statement placeholder has no matching param
+ *
+ * and one WARNING:
+ * - rationale-placeholder: a `{name}` in a rationale, which is never interpolated
  */
 export function validateStructure(registry, plan) {
     const issues = [];
@@ -51,6 +54,29 @@ export function validateStructure(registry, plan) {
             }
         }
     }
+    // rationale-placeholder: `{name}` written in a rationale, which render does
+    // not interpolate (it substitutes into the statement and nothing else). Both
+    // spellings are reported, and the declared one is the reason this is not an
+    // extension of unbound-param: an author who declares `maxAttempts` and then
+    // writes it into the rationale has made no binding mistake at all, yet the
+    // braces still reach the document reviewers and audit read. Fixing render to
+    // interpolate here would change the bytes of every existing rendering, so
+    // this reports instead. WARNING, deliberately below `hasError`: an existing
+    // green registry gains a line of output and keeps its exit code.
+    for (const [id, req] of Object.entries(registry)) {
+        // Code spans are dropped first: a rationale is rendered as Markdown, so a
+        // backticked `{toString}` is a quoted token, not a placeholder its author
+        // misfiled — and render leaves a code span exactly as written. Attest's own
+        // ATX-14 is that case, which is how this exclusion was found.
+        for (const m of req.rationale.replace(/`[^`]*`/g, ' ').matchAll(/\{(\w+)\}/g)) {
+            issues.push({
+                level: 'WARNING',
+                code: 'rationale-placeholder',
+                reqId: id,
+                message: `Requirement "${id}" writes {${m[1]}} in its rationale, but only the statement is interpolated — the braces reach the rendering verbatim. Move the placeholder into the statement, or write the value out as prose.`,
+            });
+        }
+    }
     return issues;
 }
 /**

package/dist/core/validator.js.map

@@ -1 +1 @@
-{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,8EAA8E;AAI9E;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAkB,EAAE,IAAgB;IACpE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/D,yDAAyD;IACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC,KAAK,2CAA2C;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,gBAAgB,EAAE,sEAAsE;aAClG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,sDAAsD;IACtD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,gBAAgB,EAAE,WAAW,IAAI,oDAAoD;iBAC/F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAkB,EAClB,IAAgB,EAChB,IAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0B,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAElC,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,OAAO,EAAE,GAAG,EAAE,iGAAiG;SAChH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"validator.js","sourceRoot":"","sources":["../../src/core/validator.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,8EAA8E;AAI9E;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAkB,EAAE,IAAgB;IACpE,MAAM,MAAM,GAAY,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/D,yDAAyD;IACzD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,aAAa;gBACnB,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,OAAO,EAAE,aAAa,CAAC,CAAC,IAAI,kCAAkC,CAAC,CAAC,KAAK,2CAA2C;aACjH,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,OAAO;gBACd,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,gBAAgB,EAAE,sEAAsE;aAClG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,4EAA4E;IAC5E,8EAA8E;IAC9E,sDAAsD;IACtD,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;YACnB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBACrC,MAAM,CAAC,IAAI,CAAC;oBACV,KAAK,EAAE,OAAO;oBACd,IAAI,EAAE,eAAe;oBACrB,KAAK,EAAE,EAAE;oBACT,OAAO,EAAE,gBAAgB,EAAE,WAAW,IAAI,oDAAoD;iBAC/F,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,4EAA4E;IAC5E,4EAA4E;IAC5E,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,4EAA4E;IAC5E,iEAAiE;IACjE,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,0EAA0E;QAC1E,0EAA0E;QAC1E,4EAA4E;QAC5E,8DAA8D;QAC9D,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;YAC9E,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK,EAAE,SAAS;gBAChB,IAAI,EAAE,uBAAuB;gBAC7B,KAAK,EAAE,EAAE;gBACT,OAAO,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC,CAAC,CAAE,iLAAiL;aAC/N,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,QAAkB,EAClB,IAAgB,EAChB,IAAgB;IAEhB,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAY,EAAE,CAAC;IAE3B,0EAA0E;IAC1E,4EAA4E;IAC5E,yDAAyD;IACzD,MAAM,aAAa,GAAG,IAAI,GAAG,EAA0B,CAAC;IACxD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QAC/B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,MAAM,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACnD,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAElC,wEAAwE;QACxE,mEAAmE;QACnE,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,CAAC,EAAE;YAAE,SAAS;QAClB,MAAM,CAAC,IAAI,CAAC;YACV,KAAK,EAAE,MAAM;YACb,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,EAAE;YACT,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,IAAI,EAAE,EAAE,CAAC,IAAI;YACb,OAAO,EAAE,GAAG,EAAE,iGAAiG;SAChH,CAAC,CAAC;IACL,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/index.d.ts

@@ -1,6 +1,6 @@
 export { requirement, scenario } from './runtime.js';
 export { defineRequirements, delta } from './core/registry.js';
-export type { RegistryDelta } from './core/registry.js';
+export type { RegistryDelta, DefinedRegistry } from './core/registry.js';
 export type { Requirement, Registry, ParsedScenario, AttestPlan, Level, Issue, } from './core/types.js';
 export type { JsonReport, JsonSummary, JsonCommand } from './cli/json.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,YAAY,EACV,WAAW,EACX,QAAQ,EACR,cAAc,EACd,UAAU,EACV,KAAK,EACL,KAAK,GACN,MAAM,iBAAiB,CAAC;AAIzB,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC/D,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzE,YAAY,EACV,WAAW,EACX,QAAQ,EACR,cAAc,EACd,UAAU,EACV,KAAK,EACL,KAAK,GACN,MAAM,iBAAiB,CAAC;AAIzB,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@am_shork/attest",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "TDD-native spec framework: tests are the source of truth for verification, ID-bound requirements the source of truth for intent.",
   "type": "module",
   "engines": {
@@ -64,6 +64,7 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "typecheck": "tsc -p tsconfig.json --noEmit",
+    "typecheck:all": "tsc -p tsconfig.typecheck.json",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:consumer": "pnpm run build && vitest run --config vitest.consumer.config.ts",