@cleocode/contracts 2026.9.7 → 2026.9.9

package/dist/acceptance-gate.d.ts

@@ -2,11 +2,11 @@
  * Acceptance gate discriminated union and result types.
  *
  * A machine-verifiable acceptance gate. Gates coexist with free-text criteria
- * in `Task.acceptance`; the runtime executes only gates and records results in
- * `task.verification.gateResults` and in the `lifecycle_gate_results` DB table.
+ * in `Task.acceptance`. The runner returns observed results; persistence and
+ * completion binding require the caller's explicit verification workflow.
  *
  * Six gate kinds are supported:
- * - `test`    — run a command and assert exit code / test-count
+ * - `test`    — run a command and assert exit code; unmeasured test-count requirements remain errors
  * - `file`    — assert properties of a file on disk
  * - `command` — run any CLI command and assert exit code / stdout
  * - `lint`    — run a static-analysis tool and require a clean result
@@ -18,6 +18,31 @@
  * @task T779
  * @see {@link https://github.com/kryptobaseddev/cleo} T760 RCASD hardening
  */
+import type { OperationExecutionContext, OperationExecutionIdentity } from './jobs.js';
+import type { ProcessCaptureOptions, ProcessCaptureResult, SystemdControlContext } from './resource-governor.js';
+/**
+ * Captured options for evaluating acceptance gates without renewing operation authority.
+ * @remarks An absent execution context receives a two-second shared foreground budget.
+ * Per-gate timeouts can tighten it; long work requires explicit runtime admission.
+ * @example
+ * ```typescript
+ * const options: AcceptanceGateRunOptions = { projectRoot: '/project', execution };
+ * ```
+ */
+export interface AcceptanceGateRunOptions extends Pick<ProcessCaptureOptions, 'memoryMaxMb' | 'tasksMax'> {
+    /** Explicit project root, or the captured operation's project root. */
+    projectRoot?: string;
+    /** Manual gates remain skipped and never become machine proof. */
+    skipManual?: boolean;
+    /** Original admitted operation, including project identity, deadline and cancellation. */
+    execution?: OperationExecutionContext;
+    /** Explicit captured environment; defaults to a copy of the calling environment. */
+    env?: Readonly<Record<string, string | undefined>>;
+    /** Aggregate process output and file-content read bound per gate. */
+    maxOutputBytes?: number;
+    /** Existing manager context, separate from the child environment. */
+    systemdControl?: SystemdControlContext;
+}
 /** Fields every gate variant carries. */
 export interface GateBase {
     /**
@@ -42,13 +67,13 @@ export interface GateBase {
     /**
      * Gate timeout in milliseconds.
      *
-     * @defaultValue 120_000
+     * @defaultValue 60_000 (further bounded by the shared operation deadline)
      */
     timeoutMs?: number;
 }
 /**
- * Run a command; pass when exit code is 0 and when at least `minCount`
- * tests have run. Designed for test suites:
+ * Run a command and verify its actual exit status. Positive `minCount` requires
+ * a structured test-count capability and currently returns an explicit error. Designed for test suites:
  * `{ kind: 'test', command: 'pnpm test', expect: 'pass' }`.
  */
 export interface TestGate extends GateBase {
@@ -62,7 +87,7 @@ export interface TestGate extends GateBase {
      * - `"exit0"`: exit code 0 only (permissive mode).
      */
     expect: 'pass' | 'exit0';
-    /** Minimum number of tests that must have run. */
+    /** Minimum test count; unsupported count evidence must return error, never infer a count from exit zero. */
     minCount?: number;
     /** Working directory relative to project root. Default `.`. */
     cwd?: string;
@@ -177,8 +202,8 @@ export interface LintGate extends GateBase {
 }
 /**
  * Hit a URL and assert HTTP status and optional body match. For tasks that
- * ship a webapp or API. The runner starts a server only if `startCommand`
- * is set and tears it down after the probe.
+ * ship a webapp or API. Probing an existing service is supported; `startCommand`
+ * currently returns an explicit error pending an admitted owned service lifetime.
  */
 export interface HttpGate extends GateBase {
     kind: 'http';
@@ -298,16 +323,89 @@ export type GateResultDetails = {
     /** Whether the reviewer accepted (`true`) or rejected (`false`) the gate. */
     accepted: boolean;
 };
+/**
+ * Exact bytes observed for one declared task input or resolved verification harness.
+ * @remarks A missing input is explicit, with both digest and size null. This inventory
+ * does not claim coverage of undeclared runtime dependencies or external services.
+ * @example
+ * ```typescript
+ * const input: AcceptanceGateArtifact = { path: '/project/check.mjs', sha256: 'a'.repeat(64), bytes: 42 };
+ * ```
+ */
+export interface AcceptanceGateArtifact {
+    /** Captured absolute input path, resolved within the admitted project scope. */
+    path: string;
+    /** SHA-256 of actual input bytes; null only for an observed absent path. */
+    sha256: string | null;
+    /** Exact byte length, or null alongside an absent digest. */
+    bytes: number | null;
+}
+/**
+ * Executable invocation captured before launching a typed verification gate.
+ * @remarks Environment values are represented only by a digest; credentials must
+ * not be duplicated into receipts. The verifier compares actual launch inputs.
+ * @example
+ * ```typescript
+ * const invocation: AcceptanceGateInvocation = { command: 'node', args: ['check.mjs'], cwd: '/project', environmentHash: 'b'.repeat(64) };
+ * ```
+ */
+export interface AcceptanceGateInvocation {
+    /** Exact executable passed to the existing process port. */
+    command: string;
+    /** Ordered arguments, without shell re-interpretation. */
+    args: string[];
+    /** Captured absolute process working directory. */
+    cwd: string;
+    /** SHA-256 of the canonically ordered effective environment. */
+    environmentHash: string;
+}
+/**
+ * Task and input binding attached to an explicitly verified acceptance result.
+ * @remarks This is provenance, not authority by itself. Persistence and completion
+ * must compare current canonical task/AC rows, input bytes and captured execution.
+ * No gate runs implicitly on task creation or editing. Historical unbound results
+ * remain readable but do not establish typed requirement completion.
+ * @example
+ * ```typescript
+ * const owner = result.binding?.identity.projectId;
+ * ```
+ */
+export interface AcceptanceGateBinding {
+    /** Version of the captured binding contract. */
+    version: 1;
+    /** Unique verification attempt whose result and receipt commit atomically. */
+    verificationId: string;
+    /** Existing captured operation identity, including actor and retry identity. */
+    identity: OperationExecutionIdentity;
+    /** Exact canonical task owning this criterion. */
+    taskId: string;
+    /** Current normalized acceptance row identifier. */
+    criterionId: string;
+    /** SHA-256 over the criterion's canonical persisted payload. */
+    criterionHash: string;
+    /** SHA-256 over the complete canonical gate, including REQ and launch options. */
+    gateHash: string;
+    /** ISO time of input capture before execution. */
+    capturedAt: string;
+    /** Original admitted absolute deadline in epoch milliseconds; never renewed. */
+    deadlineAt: number;
+    /** Actual process inputs; required for executable gate kinds. */
+    invocation?: AcceptanceGateInvocation;
+    /** Explicit bounded input inventory, including untracked harness/task files. */
+    artifacts: AcceptanceGateArtifact[];
+}
 /**
  * Result of running one acceptance gate.
  *
- * Persisted to `lifecycle_gate_results` and summarised in
- * `task.verification.gateResults`.
+ * Returned by the runner. Canonical verification explicitly persists bound results;
+ * the result shape alone does not prove persistence or authorize completion.
  *
  * NOTE: Named `AcceptanceGateResult` (not `GateResult`) for historical
  * clarity — it describes acceptance-criterion gate outcomes specifically.
  */
 export interface AcceptanceGateResult {
+    /** Explicit verification binding; absent on historical/unpersisted runner observations. */
+    binding?: AcceptanceGateBinding;
     /** Zero-based index in the task's acceptance array. */
     index: number;
     /** REQ-ID if the gate had one, else `undefined`. */
@@ -335,6 +433,8 @@ export interface AcceptanceGateResult {
     result: 'pass' | 'fail' | 'warn' | 'skipped' | 'error';
     /** Wall-clock duration of the gate execution in milliseconds. */
     durationMs: number;
+    /** Actual process outcome and containment evidence; wrapper status is not target proof. */
+    execution?: ProcessCaptureResult;
     /**
      * Typed kind-specific detail payload.
      *
@@ -363,4 +463,15 @@ export interface AcceptanceGateResult {
     /** Agent identifier or `"human"` that ran or attested the gate. */
     checkedBy: string;
 }
+/** Canonical typed-verification audit details stored with results in the task transaction. */
+export interface AcceptanceGateVerificationReceipt {
+    /** One admitted verification batch identity shared by every result. */
+    verificationId: string;
+    /** SHA-256 of the exact persisted result-array JSON bytes. */
+    resultHash: string;
+    /** Explicit verification operation; never inferred from generic completion evidence. */
+    operation: 'check.gate.verify';
+    /** Overall generic-plus-typed verification outcome at this observation. */
+    passed: boolean;
+}
 //# sourceMappingURL=acceptance-gate.d.ts.map

package/dist/acceptance-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"acceptance-gate.d.ts","sourceRoot":"","sources":["../src/acceptance-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,yCAAyC;AACzC,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,QAAQ;IAC3C,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IACnE;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;IAC7B,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACpD,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAW,SAAQ,QAAQ;IAC1C,IAAI,EAAE,QAAQ,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACzC;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElG,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;AAIxD;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAIN;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACvD,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;CACnB"}
+{"version":3,"file":"acceptance-gate.d.ts","sourceRoot":"","sources":["../src/acceptance-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,yBAAyB,EAAE,0BAA0B,EAAE,MAAM,WAAW,CAAC;AACvF,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EACpB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAEhC;;;;;;;;GAQG;AACH,MAAM,WAAW,wBACf,SAAQ,IAAI,CAAC,qBAAqB,EAAE,aAAa,GAAG,UAAU,CAAC;IAC/D,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,0FAA0F;IAC1F,SAAS,CAAC,EAAE,yBAAyB,CAAC;IACtC,oFAAoF;IACpF,GAAG,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC;IACnD,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,qEAAqE;IACrE,cAAc,CAAC,EAAE,qBAAqB,CAAC;CACxC;AAID,yCAAyC;AACzC,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,4GAA4G;IAC5G,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;;;;;;;;OAWG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,QAAQ;IAC3C,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IACnE;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;IAC7B,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACpD,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAW,SAAQ,QAAQ;IAC1C,IAAI,EAAE,QAAQ,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACzC;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElG,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;AAIxD;;;;;;;;;GASG;AACH,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,QAAQ,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,8CAA8C;IAC9C,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B,GACD;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,gCAAgC;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,mDAAmD;IACnD,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,mDAAmD;IACnD,IAAI,EAAE,MAAM,CAAC;IACb,6CAA6C;IAC7C,QAAQ,EAAE,MAAM,CAAC;IACjB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB,GACD;IACE,IAAI,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,wCAAwC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAIN;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,6DAA6D;IAC7D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,wBAAwB;IACvC,4DAA4D;IAC5D,OAAO,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAC;IACZ,gEAAgE;IAChE,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,qBAAqB;IACpC,gDAAgD;IAChD,OAAO,EAAE,CAAC,CAAC;IACX,8EAA8E;IAC9E,cAAc,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,EAAE,0BAA0B,CAAC;IACrC,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,aAAa,EAAE,MAAM,CAAC;IACtB,kFAAkF;IAClF,QAAQ,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,UAAU,EAAE,MAAM,CAAC;IACnB,iEAAiE;IACjE,UAAU,CAAC,EAAE,wBAAwB,CAAC;IACtC,gFAAgF;IAChF,SAAS,EAAE,sBAAsB,EAAE,CAAC;CACrC;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,oBAAoB;IACnC,2FAA2F;IAC3F,OAAO,CAAC,EAAE,qBAAqB,CAAC;IAChC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB;;;;;;;;;;;;;;;;;OAiBG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACvD,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,2FAA2F;IAC3F,SAAS,CAAC,EAAE,oBAAoB,CAAC;IACjC;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8FAA8F;AAC9F,MAAM,WAAW,iCAAiC;IAChD,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,UAAU,EAAE,MAAM,CAAC;IACnB,wFAAwF;IACxF,SAAS,EAAE,mBAAmB,CAAC;IAC/B,2EAA2E;IAC3E,MAAM,EAAE,OAAO,CAAC;CACjB"}

package/dist/acceptance-gate.js

@@ -2,11 +2,11 @@
  * Acceptance gate discriminated union and result types.
  *
  * A machine-verifiable acceptance gate. Gates coexist with free-text criteria
- * in `Task.acceptance`; the runtime executes only gates and records results in
- * `task.verification.gateResults` and in the `lifecycle_gate_results` DB table.
+ * in `Task.acceptance`. The runner returns observed results; persistence and
+ * completion binding require the caller's explicit verification workflow.
  *
  * Six gate kinds are supported:
- * - `test`    — run a command and assert exit code / test-count
+ * - `test`    — run a command and assert exit code; unmeasured test-count requirements remain errors
  * - `file`    — assert properties of a file on disk
  * - `command` — run any CLI command and assert exit code / stdout
  * - `lint`    — run a static-analysis tool and require a clean result

package/dist/audit.d.ts

@@ -12,6 +12,7 @@
  * @task T1322
  * @epic T1216
  */
+import type { ProcessCaptureResult, ProcessLaunchExecution } from './resource-governor.js';
 /**
  * A single commit entry extracted from git log.
  */
@@ -48,15 +49,19 @@ export interface ReleaseTagEntry {
  * necessarily from the task DB.
  */
 export interface ReconstructResult {
+    /** Assessment provenance; absent only on legacy results. New assessments always emit it.
+     * @defaultValue undefined on legacy records only
+     */
+    assessment?: ReconstructAssessment;
     /** The task ID being reconstructed (e.g. `T991`). */
     taskId: string;
     /**
      * Commits whose message directly references `taskId`.
-     * Pattern: `<taskId>:`, `(<taskId>):`, or `<taskId> ` (space-delimited).
+     * Exact word-boundary task tokens in the full subject and body, never numeric prefixes.
      */
     directCommits: CommitEntry[];
     /**
-     * Numeric child ID range inferred from commit-message mining and DB lookup.
+     * Numeric child ID range inferred from commit-message mining and numeric proximity (not authoritative containment).
      * Both bounds are inclusive. `null` when no children could be inferred.
      */
     childIdRange: {
@@ -94,4 +99,68 @@ export interface ReconstructResult {
      */
     inferredChildren: string[];
 }
+/** Options for bounded Git-backed lineage assessment.
+ * @remarks These options may shorten but never extend an inherited operation lifetime.
+ * @example
+ * ```ts
+ * const options: ReconstructOptions = { execution: { deadlineAt: Date.now() + 1000 } };
+ * ```
+ */
+export interface ReconstructOptions {
+    /** Original caller deadline and cancellation.
+     * @defaultValue inherited context, otherwise one two-second foreground budget
+     */
+    execution?: ProcessLaunchExecution;
+    /** Combined capture byte ceiling across all commands.
+     * @defaultValue 8388608
+     */
+    maxOutputBytes?: number;
+}
+/** Observed bounded command outcome without duplicating captured Git history.
+ * @remarks Target outcome and cleanup evidence remain distinct.
+ * @example
+ * ```ts
+ * const stopped = command.stopped;
+ * ```
+ */
+export interface ReconstructCommand extends Omit<ProcessCaptureResult, 'stdout' | 'stderr'> {
+    /** Exact requested Git arguments. */
+    args: readonly string[];
+    /** Diagnostic stderr, bounded by the shared output limit. */
+    stderr: string;
+}
+/** Coverage and failure truth for a lineage assessment.
+ * @remarks Current means the observed local Git scope was assessed, not complete remote history
+ * or proven task containment. Partial results must not authorize provenance repair.
+ * @example
+ * ```ts
+ * if (result.assessment?.coverage !== 'current') return;
+ * ```
+ */
+export interface ReconstructAssessment {
+    /** Absolute repository root captured before asynchronous work. */
+    repositoryRoot: string;
+    /** One absolute execution deadline, shared with every command and computation stage. */
+    deadlineAt: number;
+    /** Completeness of the observed local Git history and release-tag assessment. */
+    coverage: 'current' | 'partial' | 'failed';
+    /** Shallow history is explicitly incomplete; null means the probe did not complete. */
+    shallow: boolean | null;
+    /** Number of commits parsed from the bounded history, not total remote commits. */
+    observedCommits: number;
+    /** Whether all history records were parsed successfully. */
+    historyComplete: boolean;
+    /** Whether every commit-targeting tag was assessed successfully. */
+    tagsComplete: boolean;
+    /** Captured process verdicts and cleanup observations. */
+    commands: ReconstructCommand[];
+    /** Explicit failures and incomplete-scope reasons; never replaced with healthy empty arrays. */
+    diagnostics: Array<{
+        code: string;
+        stage: string;
+        message: string;
+    }>;
+    /** Non-authoritative inference and local-scope limitations retained even for current coverage. */
+    limitations: string[];
+}
 //# sourceMappingURL=audit.d.ts.map

package/dist/audit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,aAAa,EAAE,WAAW,EAAE,CAAC;IAE7B;;;OAGG;IACH,YAAY,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAElD;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAE5C;;;OAGG;IACH,WAAW,EAAE,eAAe,EAAE,CAAC;IAE/B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAE5B;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B;;;OAGG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B"}
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../src/audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,wBAAwB,CAAC;AAE3F;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,oCAAoC;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,oCAAoC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,gCAAgC;IAChC,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,4CAA4C;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,UAAU,CAAC,EAAE,qBAAqB,CAAC;IAEnC,qDAAqD;IACrD,MAAM,EAAE,MAAM,CAAC;IAEf;;;OAGG;IACH,aAAa,EAAE,WAAW,EAAE,CAAC;IAE7B;;;OAGG;IACH,YAAY,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAElD;;;OAGG;IACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IAE5C;;;OAGG;IACH,WAAW,EAAE,eAAe,EAAE,CAAC;IAE/B;;;OAGG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAE5B;;;OAGG;IACH,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B;;;OAGG;IACH,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAE1B;;;OAGG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC;;OAEG;IACH,SAAS,CAAC,EAAE,sBAAsB,CAAC;IACnC;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAmB,SAAQ,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,QAAQ,CAAC;IACzF,qCAAqC;IACrC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,6DAA6D;IAC7D,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,qBAAqB;IACpC,kEAAkE;IAClE,cAAc,EAAE,MAAM,CAAC;IACvB,wFAAwF;IACxF,UAAU,EAAE,MAAM,CAAC;IACnB,iFAAiF;IACjF,QAAQ,EAAE,SAAS,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3C,uFAAuF;IACvF,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACxB,mFAAmF;IACnF,eAAe,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,eAAe,EAAE,OAAO,CAAC;IACzB,oEAAoE;IACpE,YAAY,EAAE,OAAO,CAAC;IACtB,0DAA0D;IAC1D,QAAQ,EAAE,kBAAkB,EAAE,CAAC;IAC/B,gGAAgG;IAChG,WAAW,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrE,kGAAkG;IAClG,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB"}

package/dist/backup-manifest.d.ts

@@ -152,4 +152,84 @@ export interface BackupManifest {
     /** Bundle integrity metadata (algorithm, checksums file, manifest self-hash). */
     integrity: BackupIntegrity;
 }
+/** Lossless SQLite value representation for an authentic observation payload. */
+export type BackupObservationValue = {
+    type: 'null';
+} | {
+    type: 'integer';
+    decimal: string;
+} | {
+    type: 'real';
+    ieee754Hex: string;
+} | {
+    type: 'text' | 'blob';
+    bytesBase64: string;
+};
+/** Explicit inputs for inspecting one snapshot; no ambient live-store routing. */
+export interface BackupObservationInspectOptions {
+    /** Absolute path to one authorized SQLite snapshot, never a live-store role. */
+    snapshotPath: string;
+    /** Exact observation identity; no substring or semantic matching. */
+    recordId: string;
+    /** Original caller-supplied backup label; advisory, never used for routing. */
+    label?: string;
+    /** Stable expected project identity, compared only with recorded project_id. */
+    expectedProjectId?: string;
+    /** Source byte ceiling, at most 1 GiB; default 512 MiB. */
+    maxSnapshotBytes?: number;
+    /** Sum of SQLite CAST(value AS BLOB) lengths; at most 16 MiB, default 1 MiB. */
+    maxPayloadBytes?: number;
+}
+/** Supported diagnostic categories; none establish absence of a historical record. */
+export type BackupObservationInspectFailure = 'INVALID_INPUT' | 'UNSUPPORTED_SOURCE' | 'SOURCE_CHANGED' | 'JOURNAL_PRESENT' | 'SOURCE_LIMIT' | 'PAYLOAD_LIMIT' | 'INVALID_SNAPSHOT' | 'UNSUPPORTED_SCHEMA' | 'AMBIGUOUS_RECORD' | 'PROJECT_MISMATCH';
+/** Authentic observation extracted from one exact, ordinary indexed table. */
+export interface BackupObservationRecord {
+    /** Actual table containing the row, independent of snapshot filename. */
+    table: 'brain_observations' | 'observations';
+    /** Exact column names mapped to lossless tagged SQLite values. */
+    payload: Record<string, BackupObservationValue>;
+    /** SHA256 of UTF-8 JSON for column-name-sorted [name, taggedValue] pairs. */
+    payloadSha256: string;
+    /** Sum of SQLite CAST(value AS BLOB) lengths before JSON/base64 expansion. */
+    payloadBytes: number;
+}
+/** Scoped read-only result; not-found never means all backups were searched. */
+export interface BackupObservationInspection {
+    /** Whether this exact ID occurred in a supported table in this snapshot. */
+    status: 'found' | 'not-found';
+    /** Exact requested identity. */
+    recordId: string;
+    /** Canonical source path and byte identity, rechecked after inspection. */
+    source: {
+        path: string;
+        label: string | null;
+        sha256: string;
+        bytes: number;
+        mtimeNs: string;
+        ctimeNs: string;
+        /** Observed access time before reading; not a content-mutation precondition. */
+        atimeNs: string;
+        /** Observed access time at the final identity/content-metadata recheck. */
+        atimeAfterNs: string;
+        /** Whether access time changed; this does not identify the responsible reader. */
+        atimeChanged: boolean;
+    };
+    /** Actual SQLite schema marker; not an inferred product/schema version. */
+    userVersion: number;
+    /** Database encoding used by the preserved TEXT bytes. */
+    textEncoding: 'UTF-8' | 'UTF-16le' | 'UTF-16be';
+    /** Every supported table found and queried with indexed exact equality. */
+    inspectedTables: Array<'brain_observations' | 'observations'>;
+    /** Caller expectation is separate from recorded identity and never fills it in. */
+    projectIdentity: {
+        expected: string | null;
+        recorded: string | null;
+        status: 'matched' | 'recorded' | 'unknown';
+        evidence: string | null;
+    };
+    /** Full authentic row, or null only after eligible tables were inspected. */
+    record: BackupObservationRecord | null;
+    /** Explicit boundaries on completeness, identity and synchronous execution. */
+    limitations: string[];
+}
 //# sourceMappingURL=backup-manifest.d.ts.map

package/dist/backup-manifest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"backup-manifest.d.ts","sourceRoot":"","sources":["../src/backup-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,iFAAiF;AACjF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;AAMvD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,KAAK,EAAE,WAAW,CAAC;IACnB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,SAAS,EAAE,OAAO,CAAC;CACpB;AAMD;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;IAC7D,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,QAAQ,EAAE,kBAAkB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;IACtF,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,wCAAwC;IACxC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,SAAS,EAAE,QAAQ,CAAC;IACpB;;;OAGG;IACH,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,OAAO,EAAE,4BAA4B,CAAC;IACtC,oFAAoF;IACpF,eAAe,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,MAAM,EAAE,cAAc,CAAC;IACvB;;;OAGG;IACH,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC;;;OAGG;IACH,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACtC,iFAAiF;IACjF,SAAS,EAAE,eAAe,CAAC;CAC5B"}
+{"version":3,"file":"backup-manifest.d.ts","sourceRoot":"","sources":["../src/backup-manifest.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,iFAAiF;AACjF,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;AAMvD;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,SAAS,EAAE,MAAM,CAAC;IAClB,qDAAqD;IACrD,KAAK,EAAE,WAAW,CAAC;IACnB,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,WAAW,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,SAAS,EAAE,OAAO,CAAC;CACpB;AAMD;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;IAC7D,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,8CAA8C;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,wCAAwC;IACxC,QAAQ,EAAE,kBAAkB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;IACtF,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;;;;GAMG;AACH,MAAM,WAAW,qBAAqB;IACpC,wCAAwC;IACxC,QAAQ,EAAE,oBAAoB,CAAC;IAC/B,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAC;CAChB;AAMD;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,2DAA2D;IAC3D,SAAS,EAAE,QAAQ,CAAC;IACpB;;;OAGG;IACH,aAAa,EAAE,kBAAkB,CAAC;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAMD;;;;;;;;;GASG;AACH,MAAM,WAAW,cAAc;IAC7B,+EAA+E;IAC/E,OAAO,EAAE,4BAA4B,CAAC;IACtC,oFAAoF;IACpF,eAAe,EAAE,OAAO,CAAC;IACzB,mEAAmE;IACnE,MAAM,EAAE,cAAc,CAAC;IACvB;;;OAGG;IACH,SAAS,EAAE,mBAAmB,EAAE,CAAC;IACjC;;;OAGG;IACH,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB;;;;OAIG;IACH,WAAW,CAAC,EAAE,qBAAqB,EAAE,CAAC;IACtC,iFAAiF;IACjF,SAAS,EAAE,eAAe,CAAC;CAC5B;AAED,iFAAiF;AACjF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnD,kFAAkF;AAClF,MAAM,WAAW,+BAA+B;IAC9C,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAC;IACrB,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,2DAA2D;IAC3D,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gFAAgF;IAChF,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,sFAAsF;AACtF,MAAM,MAAM,+BAA+B,GACvC,eAAe,GACf,oBAAoB,GACpB,gBAAgB,GAChB,iBAAiB,GACjB,cAAc,GACd,eAAe,GACf,kBAAkB,GAClB,oBAAoB,GACpB,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,8EAA8E;AAC9E,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,KAAK,EAAE,oBAAoB,GAAG,cAAc,CAAC;IAC7C,kEAAkE;IAClE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAChD,6EAA6E;IAC7E,aAAa,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,4EAA4E;IAC5E,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B,gCAAgC;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,MAAM,EAAE;QACN,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,EAAE,MAAM,CAAC;QACf,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,gFAAgF;QAChF,OAAO,EAAE,MAAM,CAAC;QAChB,2EAA2E;QAC3E,YAAY,EAAE,MAAM,CAAC;QACrB,kFAAkF;QAClF,YAAY,EAAE,OAAO,CAAC;KACvB,CAAC;IACF,2EAA2E;IAC3E,WAAW,EAAE,MAAM,CAAC;IACpB,0DAA0D;IAC1D,YAAY,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,CAAC;IAChD,2EAA2E;IAC3E,eAAe,EAAE,KAAK,CAAC,oBAAoB,GAAG,cAAc,CAAC,CAAC;IAC9D,mFAAmF;IACnF,eAAe,EAAE;QACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;QAC3C,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;KACzB,CAAC;IACF,6EAA6E;IAC7E,MAAM,EAAE,uBAAuB,GAAG,IAAI,CAAC;IACvC,+EAA+E;IAC/E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB"}

package/dist/caamp-markers.d.ts

@@ -96,4 +96,24 @@ export type CaampInjectionAction = 'created' | 'added' | 'repaired' | 'consolida
  * across a batch of files.
  */
 export declare const CAAMP_INJECTION_ACTIONS: readonly ["created", "added", "repaired", "consolidated", "updated", "intact"];
+/** A delivery defect that must remain visible rather than pretending instructions loaded. */
+export interface InstructionDeliveryFinding {
+    /** Defect found during deterministic reference expansion. */
+    kind: 'missing-reference' | 'cycle' | 'duplicate' | 'limit' | 'stale';
+    /** Referenced source path or managed destination. */
+    path: string;
+    /** Human-readable evidence for the finding. */
+    reason: string;
+}
+/** Self-contained instruction delivery with explicit static verification limits. */
+export interface InstructionDelivery {
+    /** Resolved content with no reliance on provider reference expansion. */
+    content: string;
+    /** Sources actually read during expansion. */
+    sources: string[];
+    /** Defects preventing trustworthy delivery. */
+    findings: InstructionDeliveryFinding[];
+    /** Static expansion is not a live provider behavior evaluation. */
+    liveEvaluation: 'unverified';
+}
 //# sourceMappingURL=caamp-markers.d.ts.map

package/dist/caamp-markers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"caamp-markers.d.ts","sourceRoot":"","sources":["../src/caamp-markers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,yBAAyB,CAAC;AAEzD,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,uDAAuD,CAAC;AAiC/F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,kCAAkC,QAA+B,CAAC;AAE/E;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,QAA6B,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,OAAO,GACP,UAAU,GACV,cAAc,GACd,SAAS,GACT,QAAQ,CAAC;AAEb;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,gFAO1B,CAAC"}
+{"version":3,"file":"caamp-markers.d.ts","sourceRoot":"","sources":["../src/caamp-markers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,yDAAyD;AACzD,eAAO,MAAM,kBAAkB,yBAAyB,CAAC;AAEzD,yDAAyD;AACzD,eAAO,MAAM,gBAAgB,uBAAuB,CAAC;AAErD;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,0BAA0B,uDAAuD,CAAC;AAiC/F;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,kCAAkC,QAA+B,CAAC;AAE/E;;;;;GAKG;AACH,eAAO,MAAM,gCAAgC,QAA6B,CAAC;AAE3E;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oBAAoB,GAC5B,SAAS,GACT,OAAO,GACP,UAAU,GACV,cAAc,GACd,SAAS,GACT,QAAQ,CAAC;AAEb;;;;GAIG;AACH,eAAO,MAAM,uBAAuB,gFAO1B,CAAC;AAEX,6FAA6F;AAC7F,MAAM,WAAW,0BAA0B;IACzC,6DAA6D;IAC7D,IAAI,EAAE,mBAAmB,GAAG,OAAO,GAAG,WAAW,GAAG,OAAO,GAAG,OAAO,CAAC;IACtE,qDAAqD;IACrD,IAAI,EAAE,MAAM,CAAC;IACb,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,+CAA+C;IAC/C,QAAQ,EAAE,0BAA0B,EAAE,CAAC;IACvC,mEAAmE;IACnE,cAAc,EAAE,YAAY,CAAC;CAC9B"}