@aperant/framework 0.6.2

package/dist/cli/consistency/registry.mjs

@@ -0,0 +1,79 @@
+/**
+ * @internal
+ * consistency/registry.mjs — rule registry for the C15 cross-artifact
+ * consistency validator. Mirrors the shape of gate/registry.mjs so that a
+ * single rule is:
+ *
+ *   {
+ *     id:          string,                       // e.g. 'r1-ac-coverage'
+ *     severity:    'error' | 'warn',
+ *     stages:      Array<string>,                // ['plan','execute','verify','review','ship']
+ *     description: string,
+ *     check:       async ({taskDir, parsed}) => {
+ *                    status: 'pass' | 'fail' | 'skip',
+ *                    drift: Array<object>,
+ *                    reason: string
+ *                  }
+ *   }
+ *
+ * Module-scope singleton. Built-in rule modules self-register via the
+ * `rules/index.mjs` barrel, imported eagerly by check.mjs.
+ */
+const registry = new Map();
+/**
+ * Register a rule. Re-registering the same id replaces the previous entry
+ * (supports hot-reload in tests).
+ *
+ * @internal
+ */
+export function registerRule(rule) {
+    if (!rule || typeof rule !== 'object') {
+        throw new Error('registerRule: rule must be an object');
+    }
+    if (typeof rule.id !== 'string' || !rule.id) {
+        throw new Error('registerRule: rule.id must be a non-empty string');
+    }
+    if (rule.severity !== 'error' && rule.severity !== 'warn') {
+        throw new Error(`registerRule(${rule.id}): severity must be "error" or "warn" (got ${rule.severity})`);
+    }
+    if (!Array.isArray(rule.stages) || rule.stages.length === 0) {
+        throw new Error(`registerRule(${rule.id}): stages must be a non-empty array`);
+    }
+    if (typeof rule.check !== 'function') {
+        throw new Error(`registerRule(${rule.id}): check must be a function`);
+    }
+    if (typeof rule.description !== 'string') {
+        throw new Error(`registerRule(${rule.id}): description must be a string`);
+    }
+    registry.set(rule.id, rule);
+    return rule;
+}
+/**
+ * List all registered rules, optionally filtered to those applicable to a
+ * specific stage.
+ *
+ * @internal
+ */
+export function listRules({ stage } = {}) {
+    const all = Array.from(registry.values());
+    if (!stage)
+        return all;
+    return all.filter((r) => r.stages.includes(stage));
+}
+/**
+ * Lookup a single rule by id. Returns undefined when unknown.
+ *
+ * @internal
+ */
+export function getRule(id) {
+    return registry.get(id);
+}
+/**
+ * Test-only helper — drop every registered rule.
+ *
+ * @internal
+ */
+export function __resetRegistryForTests() {
+    registry.clear();
+}
+//# sourceMappingURL=registry.mjs.map

package/dist/cli/consistency/registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.mjs","sourceRoot":"","sources":["../../../src/cli/consistency/registry.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAA;AAE1B;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,IAAI;IAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAA;IACxD,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAA;IACpE,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CACd,gBAAgB,IAAI,CAAC,EAAE,8CAA8C,IAAI,CAAC,QAAQ,GAAG,CACrF,CAAA;IACF,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,qCAAqC,CAAC,CAAA;IAC9E,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,UAAU,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,6BAA6B,CAAC,CAAA;IACtE,CAAC;IACD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,CAAC,EAAE,iCAAiC,CAAC,CAAA;IAC1E,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;IAC3B,OAAO,IAAI,CAAA;AACZ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE;IACvC,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK;QAAE,OAAO,GAAG,CAAA;IACtB,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAA;AACnD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO,CAAC,EAAE;IACzB,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,CAAA;AACjB,CAAC"}

package/dist/cli/consistency/rules/index.d.mts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.mts.map

package/dist/cli/consistency/rules/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/index.mjs"],"names":[],"mappings":""}

package/dist/cli/consistency/rules/index.mjs

@@ -0,0 +1,18 @@
+/**
+ * @internal
+ * consistency/rules/index.mjs — barrel that imports every built-in rule module.
+ *
+ * Each module calls `registerRule(...)` at import time. Importing this barrel
+ * once (from check.mjs) populates the registry with the full v1 rule set.
+ *
+ * When a new built-in rule is added, append its import here and register it
+ * from its own module — never register rules inline in this file.
+ */
+import './r1-ac-coverage.mjs';
+import './r2-subtask-progress.mjs';
+import './r3-dimension-claims.mjs';
+import './r4-finding-propagation.mjs';
+import './r5-verdict-consistency.mjs';
+import './r6-plan-approval.mjs';
+import './r7-persona-alignment.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/cli/consistency/rules/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/index.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,sBAAsB,CAAA;AAC7B,OAAO,2BAA2B,CAAA;AAClC,OAAO,2BAA2B,CAAA;AAClC,OAAO,8BAA8B,CAAA;AACrC,OAAO,8BAA8B,CAAA;AACrC,OAAO,wBAAwB,CAAA;AAC/B,OAAO,4BAA4B,CAAA"}

package/dist/cli/consistency/rules/r1-ac-coverage.d.mts

@@ -0,0 +1,19 @@
+export default rule;
+declare namespace rule {
+    let id: string;
+    let severity: string;
+    let stages: string[];
+    let description: string;
+    function check({ parsed }: {
+        parsed: any;
+    }): Promise<{
+        status: string;
+        drift: {
+            ac_id: any;
+            ac_text: any;
+            reason: string;
+        }[];
+        reason: string;
+    }>;
+}
+//# sourceMappingURL=r1-ac-coverage.d.mts.map

package/dist/cli/consistency/rules/r1-ac-coverage.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r1-ac-coverage.d.mts","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r1-ac-coverage.mjs"],"names":[],"mappings":";;;;;;IAqBC;;;;;;;;;;OAyCC"}

package/dist/cli/consistency/rules/r1-ac-coverage.mjs

@@ -0,0 +1,66 @@
+/**
+ * @internal
+ * consistency/rules/r1-ac-coverage.mjs — R1 (C15).
+ *
+ * Every AC in spec.md must be referenced by at least one subtask in
+ * implementation_plan.json via `subtask.acceptance_criteria` — either the
+ * canonical id ("AC3", case-insensitive) or the full AC text as a verbatim
+ * substring.
+ *
+ * Severity: error.
+ * Stages: execute, verify, review, ship.
+ * Skip when: spec has 0 ACs OR plan has 0 subtasks.
+ */
+import { registerRule } from '../registry.mjs';
+const rule = {
+    id: 'r1-ac-coverage',
+    severity: 'error',
+    stages: ['execute', 'verify', 'review', 'ship'],
+    description: 'Every spec.md acceptance criterion is referenced by ≥1 subtask.',
+    async check({ parsed }) {
+        const acs = parsed?.spec?.acs ?? [];
+        const subtasks = parsed?.plan?.subtasks ?? [];
+        if (acs.length === 0) {
+            return { status: 'skip', drift: [], reason: 'spec.md has no acceptance criteria' };
+        }
+        if (subtasks.length === 0) {
+            return {
+                status: 'skip',
+                drift: [],
+                reason: 'implementation_plan.json has no subtasks',
+            };
+        }
+        const drift = [];
+        for (const ac of acs) {
+            const idLower = ac.id.toLowerCase();
+            const text = ac.text;
+            const matched = subtasks.some((s) => (s.acceptance_criteria ?? []).some((ref) => {
+                if (typeof ref !== 'string')
+                    return false;
+                if (ref.toLowerCase() === idLower)
+                    return true;
+                if (text && ref.includes(text))
+                    return true;
+                return false;
+            }));
+            if (!matched) {
+                drift.push({ ac_id: ac.id, ac_text: ac.text, reason: 'no subtask references it' });
+            }
+        }
+        if (drift.length > 0) {
+            return {
+                status: 'fail',
+                drift,
+                reason: `${drift.length} of ${acs.length} acceptance criteria not mapped to any subtask`,
+            };
+        }
+        return {
+            status: 'pass',
+            drift: [],
+            reason: `all ${acs.length} acceptance criteria mapped`,
+        };
+    },
+};
+registerRule(rule);
+export default rule;
+//# sourceMappingURL=r1-ac-coverage.mjs.map

package/dist/cli/consistency/rules/r1-ac-coverage.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"r1-ac-coverage.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r1-ac-coverage.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,gBAAgB;IACpB,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;IAC/C,WAAW,EAAE,iEAAiE;IAC9E,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE;QACrB,MAAM,GAAG,GAAG,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,CAAA;QACnC,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAA;QAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAA;QACnF,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,EAAE;gBACT,MAAM,EAAE,0CAA0C;aAClD,CAAA;QACF,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAA;QAChB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACtB,MAAM,OAAO,GAAG,EAAE,CAAC,EAAE,CAAC,WAAW,EAAE,CAAA;YACnC,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAA;YACpB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACnC,CAAC,CAAC,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE;gBAC1C,IAAI,OAAO,GAAG,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAA;gBACzC,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,OAAO;oBAAE,OAAO,IAAI,CAAA;gBAC9C,IAAI,IAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC;oBAAE,OAAO,IAAI,CAAA;gBAC3C,OAAO,KAAK,CAAA;YACb,CAAC,CAAC,CACF,CAAA;YACD,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC,CAAA;YACnF,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK;gBACL,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,OAAO,GAAG,CAAC,MAAM,gDAAgD;aACxF,CAAA;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,OAAO,GAAG,CAAC,MAAM,6BAA6B;SACtD,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}

package/dist/cli/consistency/rules/r2-subtask-progress.d.mts

@@ -0,0 +1,19 @@
+export default rule;
+declare namespace rule {
+    let id: string;
+    let severity: string;
+    let stages: string[];
+    let description: string;
+    function check({ parsed }: {
+        parsed: any;
+    }): Promise<{
+        status: string;
+        drift: {
+            subtask_id: any;
+            title: any;
+            reason: string;
+        }[];
+        reason: string;
+    }>;
+}
+//# sourceMappingURL=r2-subtask-progress.d.mts.map

package/dist/cli/consistency/rules/r2-subtask-progress.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-subtask-progress.d.mts","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r2-subtask-progress.mjs"],"names":[],"mappings":";;;;;;IAkBC;;;;;;;;;;OA+BC"}

package/dist/cli/consistency/rules/r2-subtask-progress.mjs

@@ -0,0 +1,52 @@
+/**
+ * @internal
+ * consistency/rules/r2-subtask-progress.mjs — R2 (C15).
+ *
+ * Every subtask in implementation_plan.json must have a matching status
+ * entry in build-progress.json. Warn-severity — never blocks ship.
+ *
+ * Stages: verify, ship.
+ * Skip when: build-progress.json is absent (empty parsed progress).
+ */
+import { registerRule } from '../registry.mjs';
+const rule = {
+    id: 'r2-subtask-progress',
+    severity: 'warn',
+    stages: ['verify', 'ship'],
+    description: 'Every plan subtask has a build-progress entry.',
+    async check({ parsed }) {
+        const subtasks = parsed?.plan?.subtasks ?? [];
+        const progressMap = parsed?.progress?.subtasks ?? {};
+        if (subtasks.length === 0) {
+            return { status: 'skip', drift: [], reason: 'no subtasks in plan' };
+        }
+        if (!parsed?.progress?.present) {
+            return {
+                status: 'skip',
+                drift: [],
+                reason: 'build-progress.json not present',
+            };
+        }
+        const drift = [];
+        for (const s of subtasks) {
+            if (!progressMap[s.id]) {
+                drift.push({ subtask_id: s.id, title: s.title, reason: 'no build-progress entry' });
+            }
+        }
+        if (drift.length > 0) {
+            return {
+                status: 'fail',
+                drift,
+                reason: `${drift.length} of ${subtasks.length} subtasks missing from build-progress.json`,
+            };
+        }
+        return {
+            status: 'pass',
+            drift: [],
+            reason: `all ${subtasks.length} subtasks have progress entries`,
+        };
+    },
+};
+registerRule(rule);
+export default rule;
+//# sourceMappingURL=r2-subtask-progress.mjs.map

package/dist/cli/consistency/rules/r2-subtask-progress.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"r2-subtask-progress.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r2-subtask-progress.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,gDAAgD;IAC7D,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE;QACrB,MAAM,QAAQ,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAA;QAC7C,MAAM,WAAW,GAAG,MAAM,EAAE,QAAQ,EAAE,QAAQ,IAAI,EAAE,CAAA;QACpD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAA;QACpE,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;YAChC,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,EAAE;gBACT,MAAM,EAAE,iCAAiC;aACzC,CAAA;QACF,CAAC;QACD,MAAM,KAAK,GAAG,EAAE,CAAA;QAChB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YAC1B,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;gBACxB,KAAK,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,CAAC,CAAA;YACpF,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK;gBACL,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,OAAO,QAAQ,CAAC,MAAM,4CAA4C;aACzF,CAAA;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,OAAO,QAAQ,CAAC,MAAM,iCAAiC;SAC/D,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}

package/dist/cli/consistency/rules/r3-dimension-claims.d.mts

@@ -0,0 +1,19 @@
+export default rule;
+declare namespace rule {
+    let id: string;
+    let severity: string;
+    let stages: string[];
+    let description: string;
+    function check({ parsed }: {
+        parsed: any;
+    }): Promise<{
+        status: string;
+        drift: {
+            axis: string;
+            expected_keywords: any[];
+            reason: string;
+        }[];
+        reason: string;
+    }>;
+}
+//# sourceMappingURL=r3-dimension-claims.d.mts.map

package/dist/cli/consistency/rules/r3-dimension-claims.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r3-dimension-claims.d.mts","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r3-dimension-claims.mjs"],"names":[],"mappings":";;;;;;IAmBC;;;;;;;;;;OA0CC"}

package/dist/cli/consistency/rules/r3-dimension-claims.mjs

@@ -0,0 +1,79 @@
+/**
+ * @internal
+ * consistency/rules/r3-dimension-claims.mjs — R3 (C15).
+ *
+ * For every axis where plan.dimensions_covered[axis].crossed === true, the
+ * spec.md must cite at least one keyword from that axis's values (or have
+ * a "Dimensions Crossed" / "Deployment Modes" section). Warn-severity.
+ *
+ * Stages: plan, execute, verify, ship.
+ * Skip when: plan has no dimensions_covered entries.
+ */
+import { registerRule } from '../registry.mjs';
+const rule = {
+    id: 'r3-dimension-claims',
+    severity: 'warn',
+    stages: ['plan', 'execute', 'verify', 'ship'],
+    description: 'Every crossed dimension is cited in spec.md.',
+    async check({ parsed }) {
+        const dims = parsed?.plan?.dimensions_covered ?? {};
+        const axes = Object.keys(dims);
+        if (axes.length === 0) {
+            return { status: 'skip', drift: [], reason: 'plan has no dimensions_covered' };
+        }
+        const claimed = new Set((parsed?.spec?.dimensions_claimed ?? []).map((k) => k.toLowerCase()));
+        const specTextLower = (parsed?.spec?.rawLower ?? '').toString();
+        const drift = [];
+        let crossedCount = 0;
+        for (const axis of axes) {
+            const entry = dims[axis];
+            if (!entry?.crossed)
+                continue;
+            crossedCount++;
+            const keywords = extractKeywords(axis, entry);
+            if (keywords.length === 0)
+                continue; // nothing to check
+            const found = keywords.some((k) => claimed.has(k.toLowerCase()) || specTextLower.includes(k.toLowerCase()));
+            if (!found) {
+                drift.push({
+                    axis,
+                    expected_keywords: keywords,
+                    reason: 'spec.md has no evidence',
+                });
+            }
+        }
+        if (crossedCount === 0) {
+            return { status: 'skip', drift: [], reason: 'no dimensions marked crossed' };
+        }
+        if (drift.length > 0) {
+            return {
+                status: 'fail',
+                drift,
+                reason: `${drift.length} crossed dimension(s) not cited in spec.md`,
+            };
+        }
+        return {
+            status: 'pass',
+            drift: [],
+            reason: `all ${crossedCount} crossed dimension(s) cited`,
+        };
+    },
+};
+function extractKeywords(axis, entry) {
+    const out = new Set();
+    out.add(axis);
+    const values = entry?.values;
+    if (Array.isArray(values)) {
+        for (const v of values)
+            if (typeof v === 'string')
+                out.add(v);
+    }
+    else if (values && typeof values === 'object') {
+        for (const k of Object.keys(values))
+            out.add(k);
+    }
+    return Array.from(out);
+}
+registerRule(rule);
+export default rule;
+//# sourceMappingURL=r3-dimension-claims.mjs.map

package/dist/cli/consistency/rules/r3-dimension-claims.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"r3-dimension-claims.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r3-dimension-claims.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,qBAAqB;IACzB,QAAQ,EAAE,MAAM;IAChB,MAAM,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC;IAC7C,WAAW,EAAE,8CAA8C;IAC3D,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE;QACrB,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAI,EAAE,CAAA;QACnD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAA;QAC/E,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,kBAAkB,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAA;QAC7F,MAAM,aAAa,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/D,MAAM,KAAK,GAAG,EAAE,CAAA;QAChB,IAAI,YAAY,GAAG,CAAC,CAAA;QACpB,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;YACxB,IAAI,CAAC,KAAK,EAAE,OAAO;gBAAE,SAAQ;YAC7B,YAAY,EAAE,CAAA;YACd,MAAM,QAAQ,GAAG,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC,CAAA;YAC7C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ,CAAC,mBAAmB;YACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAC1B,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC9E,CAAA;YACD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,KAAK,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,iBAAiB,EAAE,QAAQ;oBAC3B,MAAM,EAAE,yBAAyB;iBACjC,CAAC,CAAA;YACH,CAAC;QACF,CAAC;QACD,IAAI,YAAY,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAA;QAC7E,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK;gBACL,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,4CAA4C;aACnE,CAAA;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,OAAO,YAAY,6BAA6B;SACxD,CAAA;IACF,CAAC;CACD,CAAA;AAED,SAAS,eAAe,CAAC,IAAI,EAAE,KAAK;IACnC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;IACrB,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IACb,MAAM,MAAM,GAAG,KAAK,EAAE,MAAM,CAAA;IAC5B,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,KAAK,MAAM,CAAC,IAAI,MAAM;YAAE,IAAI,OAAO,CAAC,KAAK,QAAQ;gBAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAC9D,CAAC;SAAM,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAA;IAChD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;AACvB,CAAC;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}

package/dist/cli/consistency/rules/r4-finding-propagation.d.mts

@@ -0,0 +1,20 @@
+export default rule;
+declare namespace rule {
+    let id: string;
+    let severity: string;
+    let stages: string[];
+    let description: string;
+    function check({ parsed }: {
+        parsed: any;
+    }): Promise<{
+        status: string;
+        drift: {
+            review_finding_id: any;
+            title: any;
+            severity: any;
+            reason: string;
+        }[];
+        reason: string;
+    }>;
+}
+//# sourceMappingURL=r4-finding-propagation.d.mts.map

package/dist/cli/consistency/rules/r4-finding-propagation.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r4-finding-propagation.d.mts","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r4-finding-propagation.mjs"],"names":[],"mappings":";;;;;;IAqBC;;;;;;;;;;;OA0CC"}

package/dist/cli/consistency/rules/r4-finding-propagation.mjs

@@ -0,0 +1,66 @@
+/**
+ * @internal
+ * consistency/rules/r4-finding-propagation.mjs — R4 (C15).
+ *
+ * Every unresolved (status !== 'fixed') critical/major finding in review.json
+ * must have a matching entry in qa_signoff.json findings (by title substring
+ * or file equality).
+ *
+ * Severity: error. Stages: review, ship.
+ * Skip when: review.json or qa_signoff.json absent.
+ */
+import { registerRule } from '../registry.mjs';
+const BLOCKING = new Set(['critical', 'major']);
+const rule = {
+    id: 'r4-finding-propagation',
+    severity: 'error',
+    stages: ['review', 'ship'],
+    description: 'Unresolved review findings are cited in qa_signoff.',
+    async check({ parsed }) {
+        if (!parsed?.review?.present || !parsed?.qa?.present) {
+            return {
+                status: 'skip',
+                drift: [],
+                reason: 'review.json or qa_signoff.json not present',
+            };
+        }
+        const reviewFindings = parsed.review.findings ?? [];
+        const qaFindings = parsed.qa.findings ?? [];
+        const unresolved = reviewFindings.filter((f) => BLOCKING.has(f.severity) && f.status !== 'fixed');
+        const drift = [];
+        for (const rf of unresolved) {
+            const matched = qaFindings.some((qf) => {
+                if (rf.file && qf.file && rf.file === qf.file)
+                    return true;
+                if (rf.title && qf.title?.includes(rf.title))
+                    return true;
+                if (rf.title && qf.title && rf.title.includes(qf.title))
+                    return true;
+                return false;
+            });
+            if (!matched) {
+                drift.push({
+                    review_finding_id: rf.id,
+                    title: rf.title,
+                    severity: rf.severity,
+                    reason: 'not cited in qa_signoff',
+                });
+            }
+        }
+        if (drift.length > 0) {
+            return {
+                status: 'fail',
+                drift,
+                reason: `${drift.length} unresolved review finding(s) missing from qa_signoff`,
+            };
+        }
+        return {
+            status: 'pass',
+            drift: [],
+            reason: `${unresolved.length} unresolved review finding(s) cited in qa_signoff`,
+        };
+    },
+};
+registerRule(rule);
+export default rule;
+//# sourceMappingURL=r4-finding-propagation.mjs.map

package/dist/cli/consistency/rules/r4-finding-propagation.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"r4-finding-propagation.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r4-finding-propagation.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAA;AAE/C,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,qDAAqD;IAClE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE;QACrB,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;YACtD,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,EAAE;gBACT,MAAM,EAAE,4CAA4C;aACpD,CAAA;QACF,CAAC;QACD,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAA;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAA;QAC3C,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CACvC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CACvD,CAAA;QACD,MAAM,KAAK,GAAG,EAAE,CAAA;QAChB,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;gBACtC,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI;oBAAE,OAAO,IAAI,CAAA;gBAC1D,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAA;gBACzD,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC;oBAAE,OAAO,IAAI,CAAA;gBACpE,OAAO,KAAK,CAAA;YACb,CAAC,CAAC,CAAA;YACF,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC;oBACV,iBAAiB,EAAE,EAAE,CAAC,EAAE;oBACxB,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,MAAM,EAAE,yBAAyB;iBACjC,CAAC,CAAA;YACH,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK;gBACL,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,uDAAuD;aAC9E,CAAA;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,GAAG,UAAU,CAAC,MAAM,mDAAmD;SAC/E,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}

package/dist/cli/consistency/rules/r5-verdict-consistency.d.mts

@@ -0,0 +1,19 @@
+export default rule;
+declare namespace rule {
+    let id: string;
+    let severity: string;
+    let stages: string[];
+    let description: string;
+    function check({ parsed }: {
+        parsed: any;
+    }): Promise<{
+        status: string;
+        drift: {
+            verdict: any;
+            blockers: any;
+            reason: string;
+        }[];
+        reason: string;
+    }>;
+}
+//# sourceMappingURL=r5-verdict-consistency.d.mts.map

package/dist/cli/consistency/rules/r5-verdict-consistency.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r5-verdict-consistency.d.mts","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r5-verdict-consistency.mjs"],"names":[],"mappings":";;;;;;IAsBC;;;;;;;;;;OA+CC"}

package/dist/cli/consistency/rules/r5-verdict-consistency.mjs

@@ -0,0 +1,70 @@
+/**
+ * @internal
+ * consistency/rules/r5-verdict-consistency.mjs — R5 (C15).
+ *
+ * Fails when:
+ *   - qa.verdict === 'approved' AND review has >=1 unresolved critical finding
+ *   - qa.verdict === 'rejected' AND qa has no findings at all AND review has
+ *     zero unresolved findings (rejected-without-evidence)
+ *
+ * `approved-with-notes` is the escape hatch — passes regardless of unresolved
+ * criticals in review.json.
+ *
+ * Severity: error. Stages: verify, ship.
+ */
+import { registerRule } from '../registry.mjs';
+const rule = {
+    id: 'r5-verdict-consistency',
+    severity: 'error',
+    stages: ['verify', 'ship'],
+    description: 'qa_signoff verdict is consistent with review evidence.',
+    async check({ parsed }) {
+        if (!parsed?.qa?.present) {
+            return { status: 'skip', drift: [], reason: 'qa_signoff.json not present' };
+        }
+        const verdict = parsed.qa.verdict ?? 'unknown';
+        const reviewFindings = parsed?.review?.findings ?? [];
+        const unresolvedCritical = reviewFindings.filter((f) => f.severity === 'critical' && f.status !== 'fixed');
+        if (verdict === 'approved' && unresolvedCritical.length > 0) {
+            return {
+                status: 'fail',
+                drift: [
+                    {
+                        verdict,
+                        blockers: unresolvedCritical.map((f) => ({
+                            id: f.id,
+                            title: f.title,
+                        })),
+                        reason: 'approved verdict with unresolved critical finding(s)',
+                    },
+                ],
+                reason: `approved verdict contradicts ${unresolvedCritical.length} unresolved critical finding(s)`,
+            };
+        }
+        if (verdict === 'rejected') {
+            const qaFindings = parsed.qa.findings ?? [];
+            const anyUnresolvedReview = reviewFindings.some((f) => f.status !== 'fixed');
+            if (qaFindings.length === 0 && !anyUnresolvedReview) {
+                return {
+                    status: 'fail',
+                    drift: [
+                        {
+                            verdict,
+                            blockers: [],
+                            reason: 'rejected verdict without any cited findings',
+                        },
+                    ],
+                    reason: 'rejected verdict has no supporting findings',
+                };
+            }
+        }
+        return {
+            status: 'pass',
+            drift: [],
+            reason: `verdict ${verdict} is consistent with review evidence`,
+        };
+    },
+};
+registerRule(rule);
+export default rule;
+//# sourceMappingURL=r5-verdict-consistency.mjs.map

package/dist/cli/consistency/rules/r5-verdict-consistency.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"r5-verdict-consistency.mjs","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r5-verdict-consistency.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAE9C,MAAM,IAAI,GAAG;IACZ,EAAE,EAAE,wBAAwB;IAC5B,QAAQ,EAAE,OAAO;IACjB,MAAM,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,WAAW,EAAE,wDAAwD;IACrE,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE;QACrB,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAA;QAC5E,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,CAAC,OAAO,IAAI,SAAS,CAAA;QAC9C,MAAM,cAAc,GAAG,MAAM,EAAE,MAAM,EAAE,QAAQ,IAAI,EAAE,CAAA;QACrD,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAC/C,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,OAAO,CACxD,CAAA;QACD,IAAI,OAAO,KAAK,UAAU,IAAI,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,OAAO;gBACN,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE;oBACN;wBACC,OAAO;wBACP,QAAQ,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;4BACxC,EAAE,EAAE,CAAC,CAAC,EAAE;4BACR,KAAK,EAAE,CAAC,CAAC,KAAK;yBACd,CAAC,CAAC;wBACH,MAAM,EAAE,sDAAsD;qBAC9D;iBACD;gBACD,MAAM,EAAE,gCAAgC,kBAAkB,CAAC,MAAM,iCAAiC;aAClG,CAAA;QACF,CAAC;QACD,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;YAC5B,MAAM,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAA;YAC3C,MAAM,mBAAmB,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAA;YAC5E,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBACrD,OAAO;oBACN,MAAM,EAAE,MAAM;oBACd,KAAK,EAAE;wBACN;4BACC,OAAO;4BACP,QAAQ,EAAE,EAAE;4BACZ,MAAM,EAAE,6CAA6C;yBACrD;qBACD;oBACD,MAAM,EAAE,6CAA6C;iBACrD,CAAA;YACF,CAAC;QACF,CAAC;QACD,OAAO;YACN,MAAM,EAAE,MAAM;YACd,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,WAAW,OAAO,qCAAqC;SAC/D,CAAA;IACF,CAAC;CACD,CAAA;AAED,YAAY,CAAC,IAAI,CAAC,CAAA;AAClB,eAAe,IAAI,CAAA"}

package/dist/cli/consistency/rules/r6-plan-approval.d.mts

@@ -0,0 +1,33 @@
+export default rule;
+declare namespace rule {
+    let id: string;
+    let severity: string;
+    let stages: string[];
+    let description: string;
+    function check({ parsed }: {
+        parsed: any;
+    }): Promise<{
+        status: string;
+        drift: {
+            reason: string;
+        }[];
+        reason: string;
+    } | {
+        status: string;
+        drift: {
+            decision: any;
+            reason: string;
+        }[];
+        reason: string;
+    } | {
+        status: string;
+        drift: {
+            file: string;
+            stored_hash: any;
+            current_hash: any;
+            reason: string;
+        }[];
+        reason: string;
+    }>;
+}
+//# sourceMappingURL=r6-plan-approval.d.mts.map

package/dist/cli/consistency/rules/r6-plan-approval.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"r6-plan-approval.d.mts","sourceRoot":"","sources":["../../../../src/cli/consistency/rules/r6-plan-approval.mjs"],"names":[],"mappings":";;;;;;IA+BC;;;;;;;;;;;;;;;;;;;;;;;;OAyEC"}