@amityco/social-plus-vise 1.4.5 → 1.5.0

package/dist/tools/integration.js

@@ -4,7 +4,7 @@ import { BROAD_SOCIAL_REGEX, DESIGN_REGEX, getOutcomeDefinition, hasAnswer, plan
 import { objectInput, optionalStringField, stringField, textResult } from "../types.js";
 import { availableOptionalCapabilityIds, capabilityChecklist, optionalCapabilityChecklist, platformCapabilityAvailability, selectedOptionalCapabilityIds, slimCapabilityAvailability, slimCapabilityItem, } from "../capabilities.js";
 import { applicableCompliancePlanRuleSummaries } from "./compliance.js";
-import { DESIGN_CONTRACT_CONFIRMATION_ANSWER_ID, buildDesignBrief, designContractConfirmationFromAnswers, designPreviewPath, readDesignContract, readDesignProfile, buildDesignReviewLoop, } from "./design.js";
+import { DESIGN_CONTRACT_CONFIRMATION_ANSWER_ID, buildDesignBrief, designContractConfirmationFromAnswers, designPreviewPath, readDesignContract, readDesignProfile, readDesignProfileDiagnostic, buildDesignReviewLoop, } from "./design.js";
 import { sdkVersionGuidance } from "./sdkVersion.js";
 import { detectCommandSensors } from "./harness.js";
 import { inspectProject } from "./project.js";
@@ -65,8 +65,8 @@ function answersFromInput(raw) {
 }
 async function buildIntegrationPlan(repoPath, request, surfacePath, answers = {}) {
     const repoRoot = path.resolve(repoPath);
+    const flow = await readFlowState(repoRoot);
     if (!hasAnswer(answers, "solution_path")) {
-        const flow = await readFlowState(repoRoot);
         const confirmedPath = flow?.request === request && flow.blueprint?.confirmed_digest ? flow.blueprint?.path ?? null : null;
         if (confirmedPath) {
             answers = { ...answers, solution_path: confirmedPath };
@@ -75,7 +75,7 @@ async function buildIntegrationPlan(repoPath, request, surfacePath, answers = {}
     const inspection = await inspectProject(repoRoot, surfacePath);
     const root = inspection.effectiveRoot;
     const storedCreativeSelection = await readCreativeSelection(repoRoot);
-    const creativeSelection = storedCreativeSelection && creativeSelectionAppliesToRequest(storedCreativeSelection, request)
+    const creativeSelection = storedCreativeSelection && creativeSelectionAppliesToRequest(storedCreativeSelection, request, flow)
         ? storedCreativeSelection
         : undefined;
     const creativeContext = creativeSelection ? creativeContextForPlan(creativeSelection) : undefined;
@@ -113,7 +113,10 @@ async function buildIntegrationPlan(repoPath, request, surfacePath, answers = {}
     const designReview = designReviewGuidance(repoRoot, designContract, answers);
     const acceptedDesignContract = designReview.status === "accepted" ? designContract : null;
     const designProfile = acceptedDesignContract ? await readDesignProfile(repoRoot) : null;
-    const designBrief = acceptedDesignContract ? buildDesignBrief(acceptedDesignContract, designProfile) : undefined;
+    const designProfileDiagnostic = acceptedDesignContract && !designProfile ? await readDesignProfileDiagnostic(repoRoot) : undefined;
+    const designBrief = acceptedDesignContract
+        ? buildDesignBrief(acceptedDesignContract, designProfile, designProfileDiagnostic?.reason)
+        : undefined;
     const designReviewLoop = designProfile
         ? solutionPath.recommendation === "uikit"
             ? {
@@ -179,6 +182,20 @@ async function buildIntegrationPlan(repoPath, request, surfacePath, answers = {}
         uikitGuidedUnknown: platformDetected && outcome === "unknown" && Boolean(uikitCustomization),
         creativeSelected: Boolean(creativeSelection),
     }));
+    const experienceBundle = !creativeSelection && !socialWorkplan && outcome !== "unknown" ? experienceBundleFor(request) : undefined;
+    const experienceHint = experienceBundle
+        ? {
+            status: "consider-experience-expansion",
+            detectedExperience: experienceBundle.id,
+            variantId: experienceBundle.variantId,
+            companionSurfaces: experienceBundle.surfaces.map((surface) => surface.id),
+            routeTo: "vise creative",
+            message: `This request reads as a fuller "${experienceBundle.id}" experience (usually ${experienceBundle.surfaces
+                .map((surface) => surface.id)
+                .join(", ")}), but it classified to a single ${outcome} surface. ADVISORY: before building a lone surface, run ` +
+                `\`vise creative . --request "<intent>"\`, review the candidate experiences, and accept one if it fits — then \`vise workplan\` governs the multi-surface journey. Skipping is fine for a deliberately single-surface build; this never gates \`vise check\`.`,
+        }
+        : undefined;
     return {
         outcome,
         platform,
@@ -191,6 +208,7 @@ async function buildIntegrationPlan(repoPath, request, surfacePath, answers = {}
         creativeContext,
         uxHarness: uxHarnessContext,
         socialWorkplan,
+        ...(experienceHint ? { experienceHint } : {}),
         capabilityAvailability: slimCapabilityAvailability(capabilityAvailability),
         designReview,
         decisionsRequired,
@@ -312,7 +330,7 @@ function crossPlatformImplementationSteps(platform, packageJsonText) {
             {
                 step: "React Native target-discovery handoff: bridge only local API key/user/region config through ignored native build config; never bridge communityId, postId, channelId, targetId, or feedId. Resolve those from SDK search/list/create results or host navigation/app state, then pass the returned SDK object/id through normal React state. Treat native config bridge and native module output as unproven until a release/debug runtime smoke shows non-empty config, no `NativeModule: AsyncStorage is null` or `NativeModule.RNCNetInfo is null` log, and an established SDK session; a screen that says credentials/config are missing is failed populated proof even if BuildConfig and TypeScript checks pass. Record runtime proof in evidence/notes, not end-user UI: do not render `CLIENT`, `SESSION`, `RUNTIME`, SDK, env, region, setup/readiness-debug labels, visible runtime/probe/status panels, or hidden no-op controls in the product screen.",
                 evidence: [
-                    "requiredInputs.concrete feed target",
+                    "requiredInputs.feed source and post creation target",
                     "runtimeReadiness.targetDiscovery",
                     "runtimeReadiness.runtimeProof",
                 ],
@@ -632,17 +650,32 @@ function uxHarnessImplementationRules(context) {
         ...context.implementationGuidance,
     ];
 }
-function creativeSelectionAppliesToRequest(selection, request) {
+function creativeSelectionAppliesToRequest(selection, request, flow) {
     const normalizedRequest = normalizeCreativeRequest(request);
     const original = normalizeCreativeRequest(selection.source.request);
     const planRequest = normalizeCreativeRequest(selection.implementationContext.planRequest);
     if (!normalizedRequest || !original) {
         return false;
     }
+    const requestedOutcome = resolveOutcome(request, {});
+    if (omittedCreativeOutcomeSet(flow).has(requestedOutcome)) {
+        return false;
+    }
     return (normalizedRequest === original ||
         normalizedRequest === planRequest ||
         normalizedRequest.includes(original) ||
-        original.includes(normalizedRequest));
+        original.includes(normalizedRequest) ||
+        (Boolean(selection.selectedVariant?.id) && creativeSelectionOutcomeSet(selection).has(requestedOutcome)));
+}
+function omittedCreativeOutcomeSet(flow) {
+    return new Set((flow?.blueprint?.omitted ?? []).map((item) => item.outcome).filter((outcome) => typeof outcome === "string"));
+}
+function creativeSelectionOutcomeSet(selection) {
+    const outcomes = new Set();
+    for (const hint of selection.implementationContext.surfaceHints ?? []) {
+        outcomes.add(hint.outcome);
+    }
+    return outcomes;
 }
 function normalizeCreativeRequest(value) {
     return value.toLowerCase().replace(/[^a-z0-9\s]+/g, " ").replace(/\s+/g, " ").trim();

package/dist/tools/project.js

@@ -71,6 +71,8 @@ async function inspectRoot(root) {
         ["flutter", "pubspec.yaml", "Flutter/Dart package manifest"],
         ["ios", "Podfile", "CocoaPods project manifest"],
         ["ios", "Package.swift", "Swift package manifest"],
+        ["ios", "project.yml", "xcodegen project manifest"],
+        ["ios", "project.yaml", "xcodegen project manifest"],
         ["typescript", "package.json", "JavaScript or TypeScript package manifest"],
         ["typescript", "tsconfig.json", "TypeScript project config"],
     ];
@@ -2014,6 +2016,8 @@ function validateFollowStatusSubscription(root, platform, sourceContent) {
             /\bobserve\s*\{/.test(checkContent) ||
             /\bdoOnNext\b/.test(checkContent) ||
             /\.subscribe\s*\(/.test(checkContent) ||
+            /\$snapshot\b/.test(checkContent) ||
+            /\.sink\s*[({]/.test(checkContent) ||
             /getFollowInfo\s*\([^()]*,/.test(checkContent) ||
             /\/\/\s*vise:\s*one-shot follow status intentional/i.test(content))
             continue;
@@ -3737,7 +3741,7 @@ function validateUnreadSubscribedNotCounted(root, platform, sourceContent) {
         if (/\.filter\s*\(\s*[^)]*!\s*[^)]*isRead\s*[^)]*\)\s*\.\s*length/.test(checkContent) ||
             /\.where\s*\(\s*[^)]*!\s*[^)]*isRead\s*[^)]*\)\s*\.\s*length/.test(checkContent) ||
             /\.count\s*\(\s*[^)]*!\s*[^)]*\.isRead\s*\)/.test(checkContent) ||
-            /unreadCount\s*=\s*[^;]*\bfilter\b/.test(checkContent)) {
+            /unreadCount\s*=\s*[^;\n]*\bfilter\b/.test(checkContent)) {
             hasManualCount = true;
             if (!firstManualCountFile) {
                 firstManualCountFile = (typeof filename === 'string' && root) ? (filename.startsWith(root) ? filename.slice(root.length).replace(/^\//, '') : filename) : filename;
@@ -3786,10 +3790,10 @@ function validateNotificationsPreferencesConfigured(root, platform, sourceConten
     return findings;
 }
 function isNonUiSourceFile(filename) {
-    const base = path.basename(filename).replace(/\.(kt|swift|dart|tsx?|jsx?)$/i, "");
-    if (/(?:Application|Manager|Repository|Repo|Service|DataSource|Datasource|Provider|Client|Store|Mapper|Interactor|UseCase|Bloc|Cubit|Notifier|Mock|Fake|Stub|Test|Tests|Spec)$/.test(base))
+    const base = path.basename(filename).replace(/\.(kt|kts|java|swift|dart|tsx?|jsx?)$/i, "");
+    if (/(?:Application|Manager|Repository|Repo|Service|DataSource|Datasource|Provider|Client|Store|Mapper|Interactor|UseCase|Bloc|Cubit|Notifier|Gateway|ViewModel|Mock|Fake|Stub|Test|Tests|Spec)$/.test(base))
         return true;
-    if (/_(?:manager|repository|repo|service|data_source|datasource|provider|client|store|mapper|interactor|use_case|usecase|bloc|cubit|notifier|mock|fake|stub|test|spec)$/i.test(base))
+    if (/_(?:manager|repository|repo|service|data_source|datasource|provider|client|store|mapper|interactor|use_case|usecase|bloc|cubit|notifier|gateway|view_model|viewmodel|mock|fake|stub|test|spec)$/i.test(base))
         return true;
     if (/^(?:store|stores|repository|repositories|repo|repos|service|services|datasource|datasources|provider|providers|client|clients|interactor|interactors|usecase|usecases|bloc|cubit|notifier|api|mapper)$/i.test(base))
         return true;
@@ -3797,6 +3801,36 @@ function isNonUiSourceFile(filename) {
         return true;
     return false;
 }
+function viseGuardAssertionTrusted(comment, sourceContent, realGuardTest) {
+    const fileTokens = comment.match(/\b[A-Za-z_][\w]*\.(?:swift|kt|kts|java|dart|tsx?|jsx?)\b/g) ?? [];
+    if (fileTokens.length === 0)
+        return true;
+    const wanted = new Set(fileTokens);
+    for (const [file, content] of sourceContent) {
+        if (wanted.has(path.basename(file)) && realGuardTest(file, content))
+            return true;
+    }
+    return false;
+}
+function hasRealBanGuard(content) {
+    const banUseSurface = content.replace(/\b(?:export\s+)?(?:default\s+)?(?:async\s+)?(?:function|fun|func|const|let|var|val)\s+\w*[Bb]an\w*\b/g, " ");
+    return (/\bis\w*Ban(?:ned)?\b/.test(banUseSurface) ||
+        /\b\w*[Ii]sBanned\b/.test(banUseSurface) ||
+        /isCurrentUserBannedFromCommunity/.test(content) ||
+        /community\.bannedUserIds\.(?:contains|includes)/i.test(content) ||
+        /channel\.isMuted/.test(content) ||
+        /member\.isMuted/.test(content) ||
+        /user\.banState/.test(content));
+}
+function hasRealOwnershipGuard(stripped) {
+    return (/\bisAuthor\b/.test(stripped) ||
+        /\bisOwner\b/.test(stripped) ||
+        /postedUserId\s*===?=?\s*\w+/.test(stripped) ||
+        /\w+\s*===?=?\s*[\w.]*postedUserId\b/.test(stripped) ||
+        /creator\s*\??\.\s*userId\s*===?=?/.test(stripped) ||
+        /\buserId\s*===?\s*[\w.]*(?:currentUser|currentUserId)\b/.test(stripped) ||
+        /\b(?:currentUser|currentUserId)[\w.]*\s*===?\s*[\w.]*\buserId\b/.test(stripped));
+}
 function validateUserBanStateRespected(root, platform, sourceContent) {
     const findings = [];
     const ruleId = platform + '.user.ban-state-respected';
@@ -3818,7 +3852,10 @@ function validateUserBanStateRespected(root, platform, sourceContent) {
             /channel\.isMuted/.test(text) ||
             /member\.isMuted/.test(text) ||
             /user\.banState/.test(text) ||
-            /\/\/\s*vise:\s*ban state checked at/i.test(text);
+            (() => {
+                const m = text.match(/\/\/\s*vise:\s*ban state checked\b[^\n]*/i);
+                return m ? viseGuardAssertionTrusted(m[0], sourceContent, (_f, c) => hasRealBanGuard(c)) : false;
+            })();
         if (!hasBanCheck) {
             findings.push(finding(ruleId, "warning", "File " + rel + " renders an interaction action without checking ban state.", rel, "Banned users still see post-create, like, comment, or send-message buttons, which fail on the server. To avoid poor UX and support tickets, check the ban state before showing these actions."));
         }
@@ -3884,7 +3921,10 @@ function validateModerationRoleGatedAction(root, platform, sourceContent) {
             /creator\s*\??\.\s*userId\s*===?=?/.test(stripped) ||
             /\buserId\s*===?\s*[\w.]*(?:currentUser|currentUserId)\b/.test(stripped) ||
             /\b(?:currentUser|currentUserId)[\w.]*\s*===?\s*[\w.]*\buserId\b/.test(stripped) ||
-            /\/\/\s*vise:\s*owner action\b/i.test(text);
+            (() => {
+                const m = text.match(/\/\/\s*vise:\s*owner action\b[^\n]*/i);
+                return m ? viseGuardAssertionTrusted(m[0], sourceContent, (f, c) => hasRealOwnershipGuard(commentStripped(f, platform, c))) : false;
+            })();
         if (hasModOnlyAction && !hasRoleCheck) {
             findings.push(finding(ruleId, "warning", "File " + rel + " invokes a moderator-only action (ban/mute) without a role check.", rel, "Ban/mute require the moderator role and fail on the server otherwise. Gate the action behind a role check (e.g. currentUser.roles.includes('moderator'), or client.hasPermission(...))."));
         }
@@ -3986,7 +4026,7 @@ function validatePostBodyRendered(root, platform, sourceContent) {
         typescript: /\bpost\s*\??\.\s*(?:text|description|caption)\b|\bpost\s*\??\.\s*data[\s\S]{0,140}\b(?:text|description|caption)\b|\b(?:render|format|get|build)(?:Post)?(?:Body|Text|Description|Caption)\s*\(\s*post\s*\)|<\s*(?:PostBody|PostText|PostDescription|PostContent)\b[^>]*\bpost=/i,
         "react-native": /\bpost\s*\??\.\s*(?:text|description|caption)\b|\bpost\s*\??\.\s*data[\s\S]{0,140}\b(?:text|description|caption)\b|\b(?:render|format|get|build)(?:Post)?(?:Body|Text|Description|Caption)\s*\(\s*post\s*\)|<\s*(?:PostBody|PostText|PostDescription|PostContent)\b[^>]*\bpost=/i,
         flutter: /\bpost\s*\.\s*(?:text|description|caption)\b|\bpost\s*\.\s*getData\s*<|\bAmityTextPost\b|\bAmityPostData\b|\b(?:postBody|postText|postDescription|postCaption)\s*\(\s*post\s*\)/i,
-        ios: /\bpost\s*\.\s*(?:text|description|caption)\b|\bpost\s*\.\s*getData\(\)\s*as\?[\s\S]{0,80}\bAmityPost\.Data\.TEXT\b|\bgetText\s*\(\s*\)|\b(?:postBody|postText|postDescription|postCaption)\s*\(\s*post\s*\)/i,
+        ios: /\bpost\s*\.\s*(?:text|description|caption)\b|\bpost\s*\.\s*postData\b|\bpost\s*\.\s*data\s*\??\s*\[\s*["']text["']\s*\]|\bpost\s*\.\s*getData\(\)\s*as\?[\s\S]{0,80}\bAmityPost\.Data\.TEXT\b|\bgetText\s*\(\s*\)|\b(?:postBody|postText|postDescription|postCaption)\s*\(\s*post\s*\)/i,
         android: /\bpost\s*\.\s*(?:text|description|caption)\b|\bpost\s*\.\s*getData\(\)\s*as\??[\s\S]{0,80}\bAmityPost\.Data\.TEXT\b|\bAmityPost\.Data\.TEXT\b|\bgetText\s*\(\s*\)|\b(?:postBody|postText|postDescription|postCaption)\s*\(\s*post\s*\)/i,
     };
     const uiPat = uiTextPat[platform] ?? uiTextPat.typescript;
@@ -4521,7 +4561,7 @@ function validateFeedTargetTypeExplicit(root, platform, sourceContent) {
     const findings = [];
     const ruleId = `${platform}.feed.target-type-explicit`;
     const TARGET_TYPE_PATTERNS = [
-        /targetType\s*[:=\(]\s*(?:co\.amity\.android\.sdk\.)?(AmityPostTargetType\.|TargetType\.|\.community|\.user|\.my_feed|\.COMMUNITY|\.USER|\.MY_FEED|"COMMUNITY"|"USER"|"MY_FEED"|'COMMUNITY'|'USER'|'MY_FEED')/i
+        /targetType\s*[:=\(]\s*(?:co\.amity\.android\.sdk\.)?(AmityPostTargetType\.|TargetType\.|\.community|\.user|\.global|\.my_feed|\.COMMUNITY|\.USER|\.GLOBAL|\.MY_FEED|"community"|"user"|"global"|"my_feed"|"COMMUNITY"|"USER"|"GLOBAL"|"MY_FEED"|'community'|'user'|'global'|'my_feed'|'COMMUNITY'|'USER'|'GLOBAL'|'MY_FEED')/i
     ];
     for (const [filename, text] of sourceContent) {
         const rel = relativeFile(root, filename);
@@ -4538,14 +4578,16 @@ function validateFeedTargetTypeExplicit(root, platform, sourceContent) {
             while ((ttm = g.exec(text)) !== null) {
                 const window = text.slice(Math.max(0, ttm.index - 180), ttm.index + 180);
                 const isReadQuery = /\b(?:feedType|sortBy)\s*:/.test(window) && !/\bdataType\s*:/.test(window);
+                const targetTypeExpression = text.slice(ttm.index, Math.min(text.length, ttm.index + 100));
+                const invalidWriteTarget = /targetType\s*[:=\(][^,)\n}]*\b(?:global|my_feed)\b/i.test(targetTypeExpression);
                 const targetIdDynamic = /\btargetId\s*:\s*[A-Za-z_$]/.test(window);
-                if (!isReadQuery && !targetIdDynamic) {
+                if (!isReadQuery && (invalidWriteTarget || !targetIdDynamic)) {
                     flagged = true;
                     break;
                 }
             }
             if (flagged) {
-                findings.push(finding(ruleId, "warning", `A createPost call sets a literal targetType but its targetId is not bound to a dynamic value (route param, auth context, or prop).`, rel, "Feed targets must be bound to the intake-resolved target — the community ID from route params, the user ID from auth context, or a prop passed from the caller. Do not leave targetType as a free variable or default enum value: the intent is to wire it to 'requiredInputs.concrete feed target', not simply to avoid a literal. If this is intentional, add comment // vise: target-type rationale — <reason>."));
+                findings.push(finding(ruleId, "warning", `A createPost call uses an invalid or unbound targetType/targetId pair.`, rel, "Feed targets must be bound to the intake-resolved read/write target — the community ID from route params, the user ID from auth context, or a prop passed from the caller. Do not use global as a createPost target, and do not leave targetType as a free variable or default enum value. If this is intentional, add comment // vise: target-type rationale — <reason>."));
                 break;
             }
         }

package/dist/tools/smoke.js

@@ -1,4 +1,5 @@
 import path from "node:path";
+import { createHash } from "node:crypto";
 import { promises as fs } from "node:fs";
 import { objectInput, optionalStringField, stringField, textResult } from "../types.js";
 function escapeRegExp(s) {
@@ -66,6 +67,31 @@ async function loadSmokeConfig(repoRoot) {
         return null;
     }
 }
+const RUNTIME_PROOF_WAIVER_PATH = ["sp-vise", "evidence", "runtime-proof-waiver.json"];
+export const MIN_WAIVER_REASON_CHARS = 8;
+export async function readRuntimeProofWaiver(repoRoot) {
+    try {
+        const parsed = JSON.parse(await fs.readFile(path.join(repoRoot, ...RUNTIME_PROOF_WAIVER_PATH), "utf8"));
+        if ((parsed.mode !== "declined" && parsed.mode !== "deviceless") || typeof parsed.reason !== "string" || parsed.reason.trim().length < MIN_WAIVER_REASON_CHARS) {
+            return null;
+        }
+        return { mode: parsed.mode, reason: parsed.reason.trim(), recorded_at: typeof parsed.recorded_at === "string" ? parsed.recorded_at : "" };
+    }
+    catch {
+        return null;
+    }
+}
+export async function writeRuntimeProofWaiver(repoRoot, mode, reason, recordedAt) {
+    const trimmed = reason.trim();
+    if (trimmed.length < MIN_WAIVER_REASON_CHARS) {
+        throw new Error(`A runtime-proof waiver requires an auditable reason of at least ${MIN_WAIVER_REASON_CHARS} characters (got ${trimmed.length}).`);
+    }
+    const waiver = { mode, reason: trimmed, recorded_at: recordedAt };
+    const target = path.join(repoRoot, ...RUNTIME_PROOF_WAIVER_PATH);
+    await fs.mkdir(path.dirname(target), { recursive: true });
+    await fs.writeFile(target, `${JSON.stringify(waiver, null, 2)}\n`, "utf8");
+    return waiver;
+}
 function smokeCaptureHelp() {
     return [
         "Create `sp-vise/smoke.json` with the mounted collection surfaces, for example `{ \"platform\": \"android\", \"surfaces\": [{ \"id\": \"feed\", \"expect\": \"populated\" }] }`.",
@@ -75,6 +101,115 @@ function smokeCaptureHelp() {
         "Then run `vise smoke . --log sp-vise/evidence/runtime-smoke.log` and rerun `vise check --ci`.",
     ].join(" ");
 }
+function digestText(value) {
+    return `sha256:${createHash("sha256").update(value).digest("hex")}`;
+}
+function pathInside(root, candidate) {
+    const relative = path.relative(root, candidate);
+    return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
+}
+function repoRelativePath(repoRoot, filePath) {
+    return path.relative(repoRoot, filePath).split(path.sep).join(path.posix.sep);
+}
+function shouldSkipDir(name) {
+    return new Set([
+        ".git",
+        ".idea",
+        ".vscode",
+        "node_modules",
+        "dist",
+        "build",
+        ".next",
+        ".nuxt",
+        ".dart_tool",
+        ".gradle",
+        "Pods",
+        "DerivedData",
+        "sp-vise",
+    ]).has(name);
+}
+function isSourceFile(filePath) {
+    return /\.(?:ts|tsx|js|jsx|mjs|cjs|swift|kt|kts|java|dart)$/i.test(filePath);
+}
+async function collectSourceFiles(root, limit = 800) {
+    const found = [];
+    async function walk(dir) {
+        if (found.length >= limit)
+            return;
+        let entries;
+        try {
+            entries = await fs.readdir(dir, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            if (found.length >= limit)
+                break;
+            const full = path.join(dir, entry.name);
+            if (entry.isDirectory()) {
+                if (!shouldSkipDir(entry.name))
+                    await walk(full);
+            }
+            else if (entry.isFile() && isSourceFile(full)) {
+                found.push(full);
+            }
+        }
+    }
+    await walk(root);
+    return found;
+}
+export function hasExecutableSmokeMarker(content) {
+    for (const line of content.split(/\r?\n/)) {
+        const idx = line.indexOf("VISE_SMOKE");
+        if (idx < 0)
+            continue;
+        if (/^\s*(\/\/|\*|#|<!--|\/\*)/.test(line))
+            continue;
+        const before = line.slice(0, idx);
+        if ((before.match(/["'`]/g) || []).length % 2 === 1)
+            return true;
+    }
+    return false;
+}
+async function collectSmokeSourceProvenance(repoRoot, surfaces) {
+    const files = await collectSourceFiles(repoRoot);
+    const markerFiles = [];
+    const surfaceFiles = new Map();
+    for (const file of files) {
+        let content;
+        try {
+            content = await fs.readFile(file, "utf8");
+        }
+        catch {
+            continue;
+        }
+        if (!hasExecutableSmokeMarker(content)) {
+            continue;
+        }
+        const matchedSurfaces = surfaces
+            .map((surface) => surface.id)
+            .filter((id) => content.includes(id));
+        if (matchedSurfaces.length === 0) {
+            continue;
+        }
+        const relative = repoRelativePath(repoRoot, file);
+        markerFiles.push({
+            path: relative,
+            sha256: digestText(content),
+            surfaces: matchedSurfaces.sort(),
+        });
+        for (const surface of matchedSurfaces) {
+            surfaceFiles.set(surface, [...(surfaceFiles.get(surface) ?? []), relative]);
+        }
+    }
+    const surfaceEmitters = surfaces.map((surface) => ({
+        surface: surface.id,
+        files: (surfaceFiles.get(surface.id) ?? []).sort(),
+    }));
+    const missingSurfaces = surfaceEmitters.filter((item) => item.files.length === 0).map((item) => item.surface);
+    return { fingerprints: markerFiles.sort((a, b) => a.path.localeCompare(b.path)), surfaceEmitters, missingSurfaces };
+}
 export const smokeTool = {
     name: "smoke",
     description: "Assess a captured runtime mount-smoke log (VISE_SMOKE markers) into a pass/fail verdict and record runtime-smoke evidence. Catches the session-establish race that static check cannot.",
@@ -115,10 +250,43 @@ export const smokeTool = {
             return textResult({ status: "no-surfaces", note: only ? `Surface '${only}' is not declared in smoke.json.` : "smoke.json declares no surfaces." });
         }
         const assessment = assessSmokeLog(logText, surfaces);
+        const sourceProvenance = await collectSmokeSourceProvenance(repoRoot, surfaces);
+        if (sourceProvenance.fingerprints.length === 0 || sourceProvenance.missingSurfaces.length > 0) {
+            return textResult({
+                status: "no-source-provenance",
+                platform: config.platform,
+                results: assessment.results,
+                missingSurfaces: sourceProvenance.missingSurfaces,
+                note: "Runtime smoke log markers were not bound to source emitters. Add `VISE_SMOKE` marker code in product source for each declared surface id, rerun the app, capture logs, and rerun `vise smoke`.",
+            });
+        }
         try {
             const evidenceDir = path.join(repoRoot, "sp-vise", "evidence");
             await fs.mkdir(evidenceDir, { recursive: true });
-            await fs.writeFile(path.join(evidenceDir, "runtime-smoke.json"), JSON.stringify({ passed: assessment.passed, platform: config.platform, results: assessment.results }, null, 2));
+            const canonicalLogPath = path.join(evidenceDir, "runtime-smoke.log");
+            if (path.resolve(logPath) !== canonicalLogPath) {
+                await fs.writeFile(canonicalLogPath, logText, "utf8");
+            }
+            const smokeConfigPath = path.join(repoRoot, "sp-vise", "smoke.json");
+            const smokeConfigText = await fs.readFile(smokeConfigPath, "utf8");
+            const inputLogPath = pathInside(repoRoot, logPath) ? repoRelativePath(repoRoot, logPath) : logPath;
+            await fs.writeFile(path.join(evidenceDir, "runtime-smoke.json"), JSON.stringify({
+                passed: assessment.passed,
+                platform: config.platform,
+                generated_at: new Date().toISOString(),
+                log: {
+                    path: "sp-vise/evidence/runtime-smoke.log",
+                    input_path: inputLogPath,
+                    sha256: digestText(logText),
+                },
+                smoke_config: {
+                    path: "sp-vise/smoke.json",
+                    sha256: digestText(smokeConfigText),
+                },
+                source_fingerprints: sourceProvenance.fingerprints,
+                surface_emitters: sourceProvenance.surfaceEmitters,
+                results: assessment.results,
+            }, null, 2));
         }
         catch {
         }