@codyswann/lisa 2.281.0 → 2.282.0

package/dist/standards/storage.js

@@ -0,0 +1,330 @@
+/** Confined, bounded, atomic storage for standards-conformance proof. */
+import * as fse from "fs-extra";
+import { constants as fsConstants } from "node:fs";
+import { lstat, open, realpath, rename, rm } from "node:fs/promises";
+import path from "node:path";
+import { withFileTargetLock } from "../core/learnings-lock.js";
+import { syncContainingDirectory } from "../health/directory-sync.js";
+import { STANDARDS_PROOF_PATH, validateStandardsProof, } from "./contract.js";
+import { MALFORMED_STANDARDS_PROOF_REASON, safeStandardsStorageReason, safeStandardsValidationReason, } from "./storage-reasons.js";
+export const MAX_STANDARDS_PROOF_BYTES = 128 * 1024;
+const PROOF_TOO_LARGE = "Standards proof exceeds 128 KiB";
+const UNSAFE_PROOF_TARGET = "Unsafe standards proof target";
+/**
+ * Read strict proof state without throwing for runtime-state faults.
+ * @param projectRoot - Project directory containing the proof
+ * @param now - Observation time for future-timestamp rejection
+ * @param dependencies - Test-only timing dependencies
+ * @returns Closed proof read result
+ */
+export async function readStandardsProof(projectRoot, now = new Date(), dependencies = {}) {
+    const payload = await readProofPayload(projectRoot, dependencies);
+    if (typeof payload !== "string")
+        return payload;
+    const parsed = parseProofPayload(payload);
+    if (parsed.status === "unreadable")
+        return parsed;
+    try {
+        return Object.freeze({
+            status: "available",
+            proof: validateStandardsProof(parsed.candidate, now),
+        });
+    }
+    catch (error) {
+        return unreadable(safeStandardsValidationReason(error));
+    }
+}
+/**
+ * Parse a bounded proof payload into untrusted data.
+ * @param payload - UTF-8 JSON payload
+ * @returns Parsed candidate or a safe unreadable result
+ */
+function parseProofPayload(payload) {
+    try {
+        return Object.freeze({
+            status: "parsed",
+            candidate: JSON.parse(payload),
+        });
+    }
+    catch {
+        return unreadable(MALFORMED_STANDARDS_PROOF_REASON);
+    }
+}
+/**
+ * Read a proof payload while converting storage faults to closed results.
+ * @param projectRoot - Project directory containing the proof
+ * @param dependencies - Test-only timing dependencies
+ * @returns Raw payload or a closed proof read result
+ */
+async function readProofPayload(projectRoot, dependencies) {
+    try {
+        const target = await resolveReadTarget(projectRoot);
+        const payload = await readBoundedRegularFile(target, dependencies);
+        return payload === undefined
+            ? Object.freeze({ status: "missing" })
+            : payload;
+    }
+    catch (error) {
+        return unreadable(safeStandardsStorageReason(error));
+    }
+}
+/**
+ * Construct an immutable unreadable result.
+ * @param reason - Sanitized operator-facing reason
+ * @returns Closed unreadable result
+ */
+function unreadable(reason) {
+    return Object.freeze({ status: "unreadable", reason });
+}
+/**
+ * Validate and atomically replace the proof only after capture succeeds.
+ * @param projectRoot - Project directory that owns the proof
+ * @param candidate - Untrusted proof candidate
+ * @param now - Validation time for future-timestamp rejection
+ * @returns Stored path and immutable proof
+ */
+export async function writeStandardsProof(projectRoot, candidate, now = new Date()) {
+    const proof = validateStandardsProof(candidate, now);
+    const serialized = serialize(proof);
+    const { directory, target } = await resolveWriteTarget(projectRoot);
+    return await withFileTargetLock(target, async () => {
+        await assertSafeTarget(target);
+        const temporary = path.join(directory, `.${path.basename(target)}.${process.pid}.${crypto.randomUUID()}.tmp`);
+        try {
+            const handle = await open(temporary, "wx", 0o600);
+            try {
+                await handle.writeFile(serialized, "utf8");
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            await assertSafeTarget(target);
+            await rename(temporary, target);
+            await syncContainingDirectory(directory);
+        }
+        finally {
+            await rm(temporary, { force: true });
+        }
+        return Object.freeze({ path: target, proof });
+    });
+}
+/**
+ * Serialize a proof within its storage budget.
+ * @param proof - Validated proof
+ * @returns Canonical JSON file payload
+ */
+function serialize(proof) {
+    const payload = `${JSON.stringify(proof, null, 2)}\n`;
+    if (Buffer.byteLength(payload, "utf8") > MAX_STANDARDS_PROOF_BYTES) {
+        throw new Error(PROOF_TOO_LARGE);
+    }
+    return payload;
+}
+/**
+ * Resolve and validate a real project directory.
+ * @param projectRoot - Candidate project directory
+ * @returns Canonical project directory
+ */
+async function requireProjectRoot(projectRoot) {
+    const root = await realpath(path.resolve(projectRoot));
+    const metadata = await lstat(root);
+    if (!metadata.isDirectory())
+        throw new Error("Project root is not a directory");
+    return root;
+}
+/**
+ * Resolve a confined proof read target without creating directories.
+ * @param projectRoot - Project directory containing the proof
+ * @returns Confined proof path
+ */
+async function resolveReadTarget(projectRoot) {
+    const root = await requireProjectRoot(projectRoot);
+    for (const directory of [
+        path.join(root, ".lisa"),
+        path.join(root, ".lisa", "standards"),
+    ]) {
+        if ((await statPath(directory)) !== undefined) {
+            await assertConfinedDirectory(root, directory);
+        }
+    }
+    return path.join(root, STANDARDS_PROOF_PATH);
+}
+/**
+ * Resolve and prepare a confined proof write target.
+ * @param projectRoot - Project directory that owns the proof
+ * @returns Confined storage directory and proof path
+ */
+async function resolveWriteTarget(projectRoot) {
+    const root = await requireProjectRoot(projectRoot);
+    const lisa = path.join(root, ".lisa");
+    const directory = path.join(lisa, "standards");
+    await ensureSafeDirectory(root, lisa);
+    await ensureSafeDirectory(root, directory);
+    return { directory, target: path.join(directory, "latest.json") };
+}
+/**
+ * Create a directory only through a confined real parent.
+ * @param root - Canonical project directory
+ * @param directory - Directory to validate or create
+ */
+async function ensureSafeDirectory(root, directory) {
+    if ((await statPath(directory)) !== undefined) {
+        await assertConfinedDirectory(root, directory);
+        return;
+    }
+    await assertConfinedDirectory(root, path.dirname(directory));
+    await fse.ensureDir(directory);
+    await assertConfinedDirectory(root, directory);
+}
+/**
+ * Require a real directory confined beneath the project root.
+ * @param root - Canonical project directory
+ * @param directory - Directory to validate
+ */
+async function assertConfinedDirectory(root, directory) {
+    const metadata = await lstat(directory);
+    if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+        throw new Error("Unsafe standards storage parent");
+    }
+    const actual = await realpath(directory);
+    if (actual !== root && !actual.startsWith(`${root}${path.sep}`)) {
+        throw new Error("Unsafe standards storage parent escapes project root");
+    }
+}
+/**
+ * Reject an existing proof target unless it is a regular file.
+ * @param target - Proof path to validate
+ */
+async function assertSafeTarget(target) {
+    try {
+        const metadata = await lstat(target);
+        if (!metadata.isFile() || metadata.isSymbolicLink()) {
+            throw new Error(UNSAFE_PROOF_TARGET);
+        }
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+}
+/**
+ * Open and read one bounded regular file without following symlinks.
+ * @param target - Proof path to read
+ * @param dependencies - Test-only timing dependencies
+ * @returns UTF-8 payload, or undefined when the path is absent
+ */
+async function readBoundedRegularFile(target, dependencies) {
+    try {
+        const before = await lstat(target);
+        assertReadableMetadata(before);
+        const handle = await open(target, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW | fsConstants.O_NONBLOCK);
+        try {
+            return await readOpenedProof(handle, target, before, dependencies);
+        }
+        finally {
+            await handle.close();
+        }
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        if (["ELOOP", "ENXIO", "EAGAIN"].includes(error.code ?? "")) {
+            throw new Error(UNSAFE_PROOF_TARGET);
+        }
+        throw error;
+    }
+}
+/**
+ * Require regular-file metadata within the proof size budget.
+ * @param metadata - Filesystem metadata to validate
+ */
+function assertReadableMetadata(metadata) {
+    if (!metadata.isFile() || metadata.isSymbolicLink()) {
+        throw new Error(UNSAFE_PROOF_TARGET);
+    }
+    if (metadata.size > MAX_STANDARDS_PROOF_BYTES) {
+        throw new Error(PROOF_TOO_LARGE);
+    }
+}
+/**
+ * Pin an opened proof descriptor before reading its contents.
+ * @param handle - Open no-follow file handle
+ * @param target - Proof path used for identity checks
+ * @param before - Metadata observed before opening
+ * @param dependencies - Test-only timing dependencies
+ * @returns Stable UTF-8 payload
+ */
+async function readOpenedProof(handle, target, before, dependencies) {
+    const opened = await handle.stat();
+    const bytes = Buffer.alloc(MAX_STANDARDS_PROOF_BYTES + 1);
+    assertSameFile(before, opened);
+    await dependencies.afterOpen?.(target);
+    return await finishOpenedProofRead(handle, target, opened, bytes);
+}
+/**
+ * Read an opened proof and verify its descriptor and path remain stable.
+ * @param handle - Open proof file handle
+ * @param target - Proof path used for identity checks
+ * @param opened - Metadata pinned immediately after opening
+ * @param bytes - Fixed-size destination buffer
+ * @returns Stable UTF-8 payload
+ */
+async function finishOpenedProofRead(handle, target, opened, bytes) {
+    const total = await readDescriptorBytes(handle, bytes);
+    if (total > MAX_STANDARDS_PROOF_BYTES)
+        throw new Error(PROOF_TOO_LARGE);
+    const [afterOpened, afterPath] = await Promise.all([
+        handle.stat(),
+        lstat(target),
+    ]);
+    assertSameFile(opened, afterOpened);
+    assertSameFile(opened, afterPath);
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, total));
+}
+/**
+ * Require two metadata snapshots to identify the same unchanged file.
+ * @param expected - Pinned metadata snapshot
+ * @param actual - Later metadata snapshot
+ */
+function assertSameFile(expected, actual) {
+    if (!actual.isFile() ||
+        actual.dev !== expected.dev ||
+        actual.ino !== expected.ino ||
+        actual.size !== expected.size) {
+        throw new Error("Standards proof changed during read");
+    }
+}
+/**
+ * Fill a fixed-size buffer from an opened descriptor.
+ * @param handle - Open proof file handle
+ * @param bytes - Destination buffer
+ * @returns Number of bytes read
+ */
+async function readDescriptorBytes(handle, bytes) {
+    // eslint-disable-next-line functional/no-let -- fixed-size descriptor read advances one bounded offset
+    let total = 0;
+    while (total < bytes.byteLength) {
+        const chunk = await handle.read(bytes, total, bytes.byteLength - total, total);
+        if (chunk.bytesRead === 0)
+            break;
+        total += chunk.bytesRead;
+    }
+    return total;
+}
+/**
+ * Read path metadata while treating absence as undefined.
+ * @param filePath - Filesystem path to inspect
+ * @returns Metadata, or undefined when absent
+ */
+async function statPath(filePath) {
+    try {
+        return await lstat(filePath);
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return undefined;
+        throw error;
+    }
+}
+//# sourceMappingURL=storage.js.map

package/dist/standards/storage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage.js","sourceRoot":"","sources":["../../src/standards/storage.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AACrE,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EACL,oBAAoB,EAEpB,sBAAsB,GACvB,MAAM,eAAe,CAAC;AACvB,OAAO,EACL,gCAAgC,EAChC,0BAA0B,EAC1B,6BAA6B,GAC9B,MAAM,sBAAsB,CAAC;AAE9B,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,GAAG,IAAI,CAAC;AACpD,MAAM,eAAe,GAAG,iCAAiC,CAAC;AAC1D,MAAM,mBAAmB,GAAG,+BAA+B,CAAC;AAe5D;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,MAAY,IAAI,IAAI,EAAE,EACtB,eAA+C,EAAE;IAEjD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IAClE,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,MAAM,MAAM,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY;QAAE,OAAO,MAAM,CAAC;IAClD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,sBAAsB,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,CAAC;SACrD,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CACxB,OAAe;IAIf,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,QAAQ;YAChB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY;SAC1C,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,UAAU,CAAC,gCAAgC,CAAC,CAAC;IACtD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,YAA4C;IAE5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;QACnE,OAAO,OAAO,KAAK,SAAS;YAC1B,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;YACtC,CAAC,CAAC,OAAO,CAAC;IACd,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,UAAU,CAAC,0BAA0B,CAAC,KAAK,CAAC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CACjB,MAAc;IAEd,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,WAAmB,EACnB,SAAkB,EAClB,MAAY,IAAI,IAAI,EAAE;IAEtB,MAAM,KAAK,GAAG,sBAAsB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;IACrD,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACpE,OAAO,MAAM,kBAAkB,CAAC,MAAM,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CACzB,SAAS,EACT,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,MAAM,CACtE,CAAC;QACF,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;gBAC3C,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YACtB,CAAC;oBAAS,CAAC;gBACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACvB,CAAC;YACD,MAAM,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAC/B,MAAM,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,MAAM,uBAAuB,CAAC,SAAS,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAqB;IACtC,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IACtD,IAAI,MAAM,CAAC,UAAU,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,yBAAyB,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,WAAmB;IACnD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE;QACzB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,WAAmB;IAClD,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,KAAK,MAAM,SAAS,IAAI;QACtB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC;QACxB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,CAAC;KACtC,EAAE,CAAC;QACF,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC9C,MAAM,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAC/C,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAC/B,WAAmB;IAEnB,MAAM,IAAI,GAAG,MAAM,kBAAkB,CAAC,WAAW,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC/C,MAAM,mBAAmB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,EAAE,CAAC;AACpE,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAY,EACZ,SAAiB;IAEjB,IAAI,CAAC,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;QAC9C,MAAM,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IACD,MAAM,uBAAuB,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC;IAC7D,MAAM,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC/B,MAAM,uBAAuB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;AACjD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAY,EACZ,SAAiB;IAEjB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IACrD,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,gBAAgB,CAAC,MAAc;IAC5C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;YACpD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,sBAAsB,CACnC,MAAc,EACd,YAA4C;IAE5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,CAAC;QACnC,sBAAsB,CAAC,MAAM,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CACvB,MAAM,EACN,WAAW,CAAC,QAAQ,GAAG,WAAW,CAAC,UAAU,GAAG,WAAW,CAAC,UAAU,CACvE,CAAC;QACF,IAAI,CAAC;YACH,OAAO,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,CAAC;QACrE,CAAC;gBAAS,CAAC;YACT,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,IACE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAClC,KAA+B,CAAC,IAAI,IAAI,EAAE,CAC5C,EACD,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,sBAAsB,CAAC,QAAsB;IACpD,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,GAAG,yBAAyB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACnC,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,eAAe,CAC5B,MAAwC,EACxC,MAAc,EACd,MAAoB,EACpB,YAA4C;IAE5C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,yBAAyB,GAAG,CAAC,CAAC,CAAC;IAC1D,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,YAAY,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;IACvC,OAAO,MAAM,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,qBAAqB,CAClC,MAAwC,EACxC,MAAc,EACd,MAAoB,EACpB,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IACvD,IAAI,KAAK,GAAG,yBAAyB;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;IACxE,MAAM,CAAC,WAAW,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACjD,MAAM,CAAC,IAAI,EAAE;QACb,KAAK,CAAC,MAAM,CAAC;KACd,CAAC,CAAC;IACH,cAAc,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACpC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAClC,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CACrD,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CACzB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,QAAsB,EAAE,MAAoB;IAClE,IACE,CAAC,MAAM,CAAC,MAAM,EAAE;QAChB,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC3B,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG;QAC3B,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,EAC7B,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAChC,MAAwC,EACxC,KAAa;IAEb,uGAAuG;IACvG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,CAC7B,KAAK,EACL,KAAK,EACL,KAAK,CAAC,UAAU,GAAG,KAAK,EACxB,KAAK,CACN,CAAC;QACF,IAAI,KAAK,CAAC,SAAS,KAAK,CAAC;YAAE,MAAM;QACjC,KAAK,IAAI,KAAK,CAAC,SAAS,CAAC;IAC3B,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,QAAgB;IAEhB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACzE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/standards/test-evidence.d.ts

@@ -0,0 +1,19 @@
+/** Positive, private-output evidence that a managed test runner executed tests. */
+export declare const TEST_EVIDENCE_FORMATS: readonly ["vitest", "jest", "playwright", "rspec", "managed"];
+/** Runner grammar used to prove that at least one test executed. */
+export type TestEvidenceFormat = (typeof TEST_EVIDENCE_FORMATS)[number];
+/**
+ * Require affirmative runner output for at least one executed test. A clean
+ * exit, an empty stream, or an all-skipped summary is never sufficient.
+ * @param format - Runner-specific or managed-union evidence grammar
+ * @param output - Bounded private stdout/stderr captured by the explicit CLI
+ * @returns Whether at least one test was positively reported as executed
+ */
+export declare function hasPositiveTestEvidence(format: TestEvidenceFormat, output: string): boolean;
+/**
+ * Select the narrowest known parser from a managed package script.
+ * @param script - Package-script text read from the confined manifest
+ * @returns Positive-evidence grammar for its runner
+ */
+export declare function inferTestEvidenceFormat(script: string): TestEvidenceFormat;
+//# sourceMappingURL=test-evidence.d.ts.map

package/dist/standards/test-evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-evidence.d.ts","sourceRoot":"","sources":["../../src/standards/test-evidence.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,eAAO,MAAM,qBAAqB,+DAMxB,CAAC;AACX,oEAAoE;AACpE,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAMxE;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,kBAAkB,EAC1B,MAAM,EAAE,MAAM,GACb,OAAO,CAgBT;AA6KD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAO1E"}

package/dist/standards/test-evidence.js

@@ -0,0 +1,195 @@
+/** Positive, private-output evidence that a managed test runner executed tests. */
+export const TEST_EVIDENCE_FORMATS = [
+    "vitest",
+    "jest",
+    "playwright",
+    "rspec",
+    "managed",
+];
+const MAX_EVIDENCE_OUTPUT_CHARACTERS = 1024 * 1024;
+const MAX_EVIDENCE_LINES = 4096;
+const MAX_EVIDENCE_LINE_CHARACTERS = 4096;
+/**
+ * Require affirmative runner output for at least one executed test. A clean
+ * exit, an empty stream, or an all-skipped summary is never sufficient.
+ * @param format - Runner-specific or managed-union evidence grammar
+ * @param output - Bounded private stdout/stderr captured by the explicit CLI
+ * @returns Whether at least one test was positively reported as executed
+ */
+export function hasPositiveTestEvidence(format, output) {
+    const lines = boundedTokenLines(output);
+    const runnerEvidence = lines.some(tokens => {
+        if (format === "vitest" || format === "jest") {
+            return isTestsSummary(tokens);
+        }
+        if (format === "playwright")
+            return isLeadingStatusSummary(tokens);
+        if (format === "rspec")
+            return isExamplesSummary(tokens);
+        return (isTestsSummary(tokens) ||
+            isLeadingStatusSummary(tokens) ||
+            isExamplesSummary(tokens) ||
+            isManagedTestSummary(tokens));
+    });
+    return runnerEvidence || (format === "managed" && isTapSummary(lines));
+}
+/**
+ * Split bounded output into bounded, punctuation-neutral token lines.
+ * @param output - Private runner output
+ * @returns Bounded token lines
+ */
+function boundedTokenLines(output) {
+    return output
+        .slice(0, MAX_EVIDENCE_OUTPUT_CHARACTERS)
+        .split("\n", MAX_EVIDENCE_LINES)
+        .map(line => tokenizeLine(line.slice(0, MAX_EVIDENCE_LINE_CHARACTERS)));
+}
+/**
+ * Convert one bounded ASCII runner line to lowercase alphanumeric tokens.
+ * @param line - One bounded runner line
+ * @returns Lowercase alphanumeric tokens
+ */
+function tokenizeLine(line) {
+    return Array.from(line, character => isAsciiAlphanumeric(character) ? character.toLowerCase() : " ")
+        .join("")
+        .split(" ")
+        .filter(Boolean);
+}
+/**
+ * Return whether one character is an ASCII letter or digit.
+ * @param character - Single input character
+ * @returns Whether the character is token-safe
+ */
+function isAsciiAlphanumeric(character) {
+    const code = character.charCodeAt(0);
+    return ((code >= 48 && code <= 57) ||
+        (code >= 65 && code <= 90) ||
+        (code >= 97 && code <= 122));
+}
+/**
+ * Return whether a token is a nonzero base-10 integer.
+ * @param token - Candidate numeric token
+ * @returns Whether the token is positive
+ */
+function isPositiveInteger(token) {
+    const value = nonnegativeIntegerValue(token);
+    return value !== undefined && value > 0;
+}
+/**
+ * Parse one bounded decimal token without accepting signs or fractions.
+ * @param token - Candidate count token
+ * @returns Safe nonnegative integer, when valid
+ */
+function nonnegativeIntegerValue(token) {
+    if (token === undefined || token.length === 0)
+        return undefined;
+    const digitsOnly = Array.from(token).every(character => {
+        const code = character.charCodeAt(0);
+        return code >= 48 && code <= 57;
+    });
+    if (!digitsOnly)
+        return undefined;
+    const value = Number(token);
+    return Number.isSafeInteger(value) ? value : undefined;
+}
+/**
+ * Recognize Vitest/Jest `Tests: N passed|failed` summary fragments.
+ * @param tokens - One bounded token line
+ * @returns Whether the line proves test execution
+ */
+function isTestsSummary(tokens) {
+    if (tokens[0] !== "tests")
+        return false;
+    return tokens.some((token, index) => isOutcome(token) && isPositiveInteger(tokens[index - 1]));
+}
+/**
+ * Recognize Playwright `N passed|failed` summary lines.
+ * @param tokens - One bounded token line
+ * @returns Whether the line proves test execution
+ */
+function isLeadingStatusSummary(tokens) {
+    return isPositiveInteger(tokens[0]) && isOutcome(tokens[1]);
+}
+/**
+ * Recognize RSpec `N examples` summary fragments.
+ * @param tokens - One bounded token line
+ * @returns Whether the line proves example execution
+ */
+function isExamplesSummary(tokens) {
+    const examples = countBeforeLabel(tokens, ["example", "examples"]);
+    const failures = countBeforeLabel(tokens, ["failure", "failures"]) ?? 0;
+    const pending = countBeforeLabel(tokens, ["pending"]) ?? 0;
+    return (examples !== undefined &&
+        examples > 0 &&
+        (failures > 0 || examples > pending));
+}
+/**
+ * Read the count immediately before a known summary label.
+ * @param tokens - One bounded token line
+ * @param labels - Accepted singular/plural labels
+ * @returns Parsed count, when present
+ */
+function countBeforeLabel(tokens, labels) {
+    const index = tokens.findIndex(token => labels.includes(token));
+    return index < 1 ? undefined : nonnegativeIntegerValue(tokens[index - 1]);
+}
+/**
+ * Correlate bounded TAP aggregate lines and reject explicitly all-skipped runs.
+ * @param lines - Bounded token lines
+ * @returns Whether TAP proves at least one actual execution
+ */
+function isTapSummary(lines) {
+    const tests = tapAggregate(lines, ["tests"]);
+    if (tests === undefined || tests === 0)
+        return false;
+    const passed = tapAggregate(lines, ["pass", "passed"]);
+    const failed = tapAggregate(lines, ["fail", "failed"]);
+    const executed = (passed ?? 0) + (failed ?? 0);
+    return executed > 0 && executed <= tests;
+}
+/**
+ * Read one exact two-token TAP aggregate line.
+ * @param lines - Bounded token lines
+ * @param labels - Accepted aggregate labels
+ * @returns Parsed aggregate count, when present
+ */
+function tapAggregate(lines, labels) {
+    const line = lines.find(tokens => tokens.length === 2 && labels.includes(tokens[0] ?? ""));
+    return line === undefined ? undefined : nonnegativeIntegerValue(line[1]);
+}
+/**
+ * Recognize generic managed-runner `N test(s) passed|failed` summaries.
+ * @param tokens - One bounded token line
+ * @returns Whether the line proves test execution
+ */
+function isManagedTestSummary(tokens) {
+    return (isPositiveInteger(tokens[0]) &&
+        (tokens[1] === "test" || tokens[1] === "tests") &&
+        isOutcome(tokens[2]));
+}
+/**
+ * Return whether a summary token represents an executed test outcome.
+ * @param token - Candidate outcome token
+ * @returns Whether it is a pass/fail outcome
+ */
+function isOutcome(token) {
+    return token === "passed" || token === "failed";
+}
+/**
+ * Select the narrowest known parser from a managed package script.
+ * @param script - Package-script text read from the confined manifest
+ * @returns Positive-evidence grammar for its runner
+ */
+export function inferTestEvidenceFormat(script) {
+    const normalized = script.toLowerCase();
+    if (normalized.includes("vitest"))
+        return "vitest";
+    if (normalized.includes("playwright"))
+        return "playwright";
+    if (normalized.includes("jest"))
+        return "jest";
+    if (normalized.includes("rspec"))
+        return "rspec";
+    return "managed";
+}
+//# sourceMappingURL=test-evidence.js.map

package/dist/standards/test-evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-evidence.js","sourceRoot":"","sources":["../../src/standards/test-evidence.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,QAAQ;IACR,MAAM;IACN,YAAY;IACZ,OAAO;IACP,SAAS;CACD,CAAC;AAIX,MAAM,8BAA8B,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAA0B,EAC1B,MAAc;IAEd,MAAM,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QACzC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7C,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,MAAM,KAAK,YAAY;YAAE,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,OAAO;YAAE,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,CACL,cAAc,CAAC,MAAM,CAAC;YACtB,sBAAsB,CAAC,MAAM,CAAC;YAC9B,iBAAiB,CAAC,MAAM,CAAC;YACzB,oBAAoB,CAAC,MAAM,CAAC,CAC7B,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,cAAc,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAc;IACvC,OAAO,MAAM;SACV,KAAK,CAAC,CAAC,EAAE,8BAA8B,CAAC;SACxC,KAAK,CAAC,IAAI,EAAE,kBAAkB,CAAC;SAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,4BAA4B,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAClC,mBAAmB,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,GAAG,CAC/D;SACE,IAAI,CAAC,EAAE,CAAC;SACR,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,OAAO,CAAC,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,SAAS,mBAAmB,CAAC,SAAiB;IAC5C,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,CACL,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;QAC1B,CAAC,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,GAAG,CAAC,CAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,KAAyB;IAClD,MAAM,KAAK,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC7C,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,SAAS,uBAAuB,CAC9B,KAAyB;IAEzB,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE;QACrD,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QACrC,OAAO,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAClC,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,MAAyB;IAC/C,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,MAAM,CAAC,IAAI,CAChB,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,MAAyB;IACvD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9D,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAyB;IAClD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,QAAQ,GAAG,CAAC;QACZ,CAAC,QAAQ,GAAG,CAAC,IAAI,QAAQ,GAAG,OAAO,CAAC,CACrC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,gBAAgB,CACvB,MAAyB,EACzB,MAAyB;IAEzB,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,KAAqC;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC;IAC/C,OAAO,QAAQ,GAAG,CAAC,IAAI,QAAQ,IAAI,KAAK,CAAC;AAC3C,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CACnB,KAAqC,EACrC,MAAyB;IAEzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CACrB,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAClE,CAAC;IACF,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,MAAyB;IACrD,OAAO,CACL,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC;QAC/C,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CACrB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,KAAyB;IAC1C,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAc;IACpD,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QAAE,OAAO,YAAY,CAAC;IAC3D,IAAI,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/package.json

@@ -112,7 +112,7 @@
     "brace-expansion": ">=5.0.6"
   },
   "name": "@codyswann/lisa",
-  "version": "2.281.0",
+  "version": "2.282.0",
   "description": "Claude Code governance framework that applies guardrails, guidance, and automated enforcement to projects",
   "main": "dist/index.js",
   "exports": {

package/plugins/lisa/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.281.0",
+  "version": "2.282.0",
   "description": "Universal governance — agents, skills, commands, hooks, and rules for all projects",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "lisa",
-  "version": "2.281.0",
+  "version": "2.282.0",
   "description": "Universal governance: agents, skills, commands, hooks, and rules for all projects.",
   "author": {
     "name": "Cody Swann"

package/plugins/lisa/.codex-plugin/skills/lisa-doctor/SKILL.md

@@ -319,9 +319,27 @@ default doctor path never renders it and stays byte-identical.
    contract; do not restate or fork that vocabulary here.
 3. **`SKIP` carries a reason and is never blank.** A dimension with no applicable evidence renders
    `SKIP` with a stated reason ("no deployment target configured, so delivery/authority was not
-   assessed"). An unassessed dimension is a known unknown, and the report says so. In Lisa versions
-   where the evidence-gathering surfaces (RRR-4/5/6) are not yet wired, every dimension renders `SKIP`
-   with that reason.
+   assessed"). An unassessed dimension is a known unknown, and the report says so.
+
+   **This surface reflects the CLI; it does not re-score.** The evidence producers and the blocker
+   engine live in the Lisa CLI, which is the single source of truth. When `.lisa/readiness.json` is
+   present and readable (parses, matching `schema_version`, carries a `dimensions` array), this group
+   **projects** each recorded dimension's status and its operator-facing evidence/reason text, so an
+   operator running `/lisa:doctor` through any coding agent sees the same readiness answer the CLI
+   gives. When the report is absent, unparseable, or stamped with an unknown `schema_version` — or
+   records nothing for a given dimension — that dimension falls back to `SKIP` with the reason it was
+   not assessed. Absence means the readiness pass has not run, never that the repository is clean: a
+   pass or a fail is never manufactured from a missing report. Run
+   `lisa doctor --offline --readiness` to produce the report first.
+
+   **A standing blocker outranks the recorded status.** Some CLI producers record `WARN` while
+   standing a ship blocker — the blocker engine never reads the per-dimension status, so the finding
+   flips the repository to `NOT_READY` exactly as a `FAIL` would. A dimension that owns an entry in
+   the report's `blockers[]` therefore projects as `FAIL` regardless of its recorded label, and its
+   remediation names the blocker ids and repeats the report's `narrowed_claim` (the "IS ready for
+   supervised, single-ticket agent work" fallback `readiness-rubric` requires whenever a blocker
+   stands). Projected checks also carry the report's `generated_at`/`lisa_version` so a stale report
+   cannot read as current truth, and unassessed dimensions carry the CLI's not-established caveat.
 4. **Reuse the shipped verdict ladder and consequence ordering.** No new verdict value and no new
    severity: reuse `READY` / `READY_WITH_WARNINGS` / `NOT_READY`. `READY` requires *positive*
    evidence — every readiness dimension assessed and clean, with no blocker standing. An unassessed