@decantr/verifier 3.0.0-next.0 → 3.0.1

package/dist/index.js

@@ -1064,10 +1064,9 @@ function isClassHelperCall(node) {
   return Boolean(helperName && CLASS_HELPER_NAMES.has(helperName));
 }
 function templateExpressionText(expression) {
-  return [
-    expression.head.text,
-    ...expression.templateSpans.map((span) => span.literal.text)
-  ].join(" ");
+  return [expression.head.text, ...expression.templateSpans.map((span) => span.literal.text)].join(
+    " "
+  );
 }
 function collectClassTextsFromNode(node) {
   const entries = [];
@@ -1297,9 +1296,7 @@ function auditStyleBridgeDrift(projectRoot, sourceFiles) {
   );
   return {
     filesChecked: filesToCheck.filter(
-      (file) => !isNonProductionStyleBridgeDriftFile(
-        normalizePath2(relative2(projectRoot, file) || file)
-      )
+      (file) => !isNonProductionStyleBridgeDriftFile(normalizePath2(relative2(projectRoot, file) || file))
     ).length,
     bridgeMappingCount: bridge.mappingIds.length,
     arbitraryValueCount: findings.length,
@@ -1346,6 +1343,18 @@ var KNOWN_VERIFICATION_DIAGNOSTICS = [
     repairId: "replace-raw-control-with-local-component",
     family: "COMP"
   },
+  {
+    rule: "behavior-project-interaction-primitive",
+    code: "COMP020",
+    repairId: "use-project-owned-interaction-primitive",
+    family: "COMP"
+  },
+  {
+    rule: "behavior-dialog-project-primitive",
+    code: "COMP020",
+    repairId: "use-project-owned-interaction-primitive",
+    family: "COMP"
+  },
   {
     rule: "component-reuse-primitive-reimplemented",
     code: "COMP001",
@@ -1388,6 +1397,42 @@ var KNOWN_VERIFICATION_DIAGNOSTICS = [
     repairId: "enable-focus-visible",
     family: "A11Y"
   },
+  {
+    rule: "behavior-dialog-accessible-name",
+    code: "A11Y010",
+    repairId: "restore-dialog-accessible-name",
+    family: "A11Y"
+  },
+  {
+    rule: "behavior-form-label-associated",
+    code: "A11Y011",
+    repairId: "restore-label-association",
+    family: "A11Y"
+  },
+  {
+    rule: "behavior-dialog-visible-consequence",
+    code: "INT010",
+    repairId: "restore-visible-consequence-copy",
+    family: "INT"
+  },
+  {
+    rule: "behavior-dialog-cancel-affordance",
+    code: "INT011",
+    repairId: "restore-cancel-affordance",
+    family: "INT"
+  },
+  {
+    rule: "behavior-dialog-submitting-guard",
+    code: "INT012",
+    repairId: "restore-submitting-guard",
+    family: "INT"
+  },
+  {
+    rule: "behavior-form-explicit-button-type",
+    code: "INT013",
+    repairId: "set-explicit-button-type",
+    family: "INT"
+  },
   {
     rule: "pack-manifest-present",
     code: "CTX002",
@@ -1953,7 +1998,16 @@ import { existsSync as existsSync3, readdirSync as readdirSync3, readFileSync as
 import { extname as extname3, isAbsolute, join as join3, relative as relative3 } from "path";
 import { decodeHTML, decodeHTMLAttribute } from "entities";
 var SCAN_REPORT_SCHEMA_URL = "https://decantr.ai/schemas/scan-report.v1.json";
-var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".vue", ".svelte"]);
+var SOURCE_EXTENSIONS = /* @__PURE__ */ new Set([
+  ".ts",
+  ".tsx",
+  ".js",
+  ".jsx",
+  ".mjs",
+  ".cjs",
+  ".vue",
+  ".svelte"
+]);
 var STYLE_EXTENSIONS = /* @__PURE__ */ new Set([".css", ".scss", ".sass", ".less"]);
 var PAGE_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".vue", ".svelte", ".html"]);
 var MAX_FILE_READ_BYTES = 512 * 1024;
@@ -2034,7 +2088,11 @@ function readPackageJson(projectRoot) {
   if (!content) return { value: null, present: true, valid: false };
   try {
     const parsed = JSON.parse(content);
-    return { value: isRecord(parsed) ? parsed : null, present: true, valid: isRecord(parsed) };
+    return {
+      value: isRecord(parsed) ? parsed : null,
+      present: true,
+      valid: isRecord(parsed)
+    };
   } catch {
     return { value: null, present: true, valid: false };
   }
@@ -2062,7 +2120,8 @@ function detectPackageManager(projectRoot, pkg) {
 }
 function detectPrimaryLanguage(projectRoot, packageJsonPresent) {
   if (packageJsonPresent) return "javascript";
-  if (hasAnyFile(projectRoot, ["pyproject.toml", "requirements.txt", "setup.py", "Pipfile"])) return "python";
+  if (hasAnyFile(projectRoot, ["pyproject.toml", "requirements.txt", "setup.py", "Pipfile"]))
+    return "python";
   if (hasAnyFile(projectRoot, ["go.mod"])) return "go";
   if (hasAnyFile(projectRoot, ["Cargo.toml"])) return "rust";
   if (hasAnyFile(projectRoot, ["index.html", "docs/index.html"])) return "html";
@@ -2194,14 +2253,23 @@ function walkNextAppRoutes(dir, projectRoot, segments) {
       continue;
     }
     const routeSegment = segmentToRoute(entry);
-    routes.push(...walkNextAppRoutes(fullPath, projectRoot, routeSegment === null ? segments : [...segments, routeSegment]));
+    routes.push(
+      ...walkNextAppRoutes(
+        fullPath,
+        projectRoot,
+        routeSegment === null ? segments : [...segments, routeSegment]
+      )
+    );
   }
   return routes;
 }
 function fileRouteFromPath(file, baseDir) {
   let withoutExt = file.slice(0, -extname3(file).length);
   if (withoutExt.endsWith("/index")) withoutExt = withoutExt.slice(0, -"/index".length);
-  withoutExt = withoutExt.replace(new RegExp(`^${baseDir.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}`), "");
+  withoutExt = withoutExt.replace(
+    new RegExp(`^${baseDir.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}`),
+    ""
+  );
   const parts = withoutExt.split("/").filter(Boolean).map((part) => segmentToRoute(part)).filter(Boolean);
   return `/${parts.join("/")}` || "/";
 }
@@ -2241,7 +2309,8 @@ function scanRoutes(projectRoot, detection) {
   );
   const pagesRoutes = ["src/pages", "pages"].flatMap((dir) => scanFileRoutes(projectRoot, dir));
   if (detection.framework === "nextjs") {
-    if (appRoutes.length > 0 && pagesRoutes.length > 0) return { strategy: "mixed-next-router", routes: [...appRoutes, ...pagesRoutes] };
+    if (appRoutes.length > 0 && pagesRoutes.length > 0)
+      return { strategy: "mixed-next-router", routes: [...appRoutes, ...pagesRoutes] };
     if (appRoutes.length > 0) return { strategy: "app-router", routes: appRoutes };
     if (pagesRoutes.length > 0) return { strategy: "pages-router", routes: pagesRoutes };
   }
@@ -2250,7 +2319,9 @@ function scanRoutes(projectRoot, detection) {
     if (routes.length > 0) return { strategy: "sveltekit-router", routes };
   }
   if (detection.framework === "nuxt") {
-    const routes = ["pages", "app/pages"].flatMap((dir) => scanFileRoutes(projectRoot, dir, /* @__PURE__ */ new Set([".vue"])));
+    const routes = ["pages", "app/pages"].flatMap(
+      (dir) => scanFileRoutes(projectRoot, dir, /* @__PURE__ */ new Set([".vue"]))
+    );
     if (routes.length > 0) return { strategy: "nuxt-router", routes };
   }
   if (detection.framework === "vue") {
@@ -2258,13 +2329,20 @@ function scanRoutes(projectRoot, detection) {
     if (router.routes.length > 0) return { strategy: "vue-router", routes: router.routes };
   }
   const reactRouter = scanReactRouter(projectRoot);
-  if (reactRouter.routes.length > 0) return { strategy: "react-router", routes: reactRouter.routes };
+  if (reactRouter.routes.length > 0)
+    return { strategy: "react-router", routes: reactRouter.routes };
   if (pagesRoutes.length > 0) return { strategy: "pages-router", routes: pagesRoutes };
   if (existsSync3(join3(projectRoot, "index.html"))) {
-    return { strategy: "static-html", routes: [{ path: "/", file: "index.html", hasLayout: false }] };
+    return {
+      strategy: "static-html",
+      routes: [{ path: "/", file: "index.html", hasLayout: false }]
+    };
   }
   if (existsSync3(join3(projectRoot, "docs", "index.html"))) {
-    return { strategy: "static-html", routes: [{ path: "/", file: "docs/index.html", hasLayout: false }] };
+    return {
+      strategy: "static-html",
+      routes: [{ path: "/", file: "docs/index.html", hasLayout: false }]
+    };
   }
   return { strategy: "none", routes: [] };
 }
@@ -2274,7 +2352,11 @@ function countComponents(projectRoot, routes) {
     const base = file.split("/").pop() ?? file;
     return /^[A-Z][\w-]*\.(tsx|ts|jsx|js|vue|svelte)$/.test(base);
   });
-  const directories = [...new Set(componentFiles.map((file) => file.split("/").slice(0, -1).join("/")).filter(Boolean))].slice(0, 16);
+  const directories = [
+    ...new Set(
+      componentFiles.map((file) => file.split("/").slice(0, -1).join("/")).filter(Boolean)
+    )
+  ].slice(0, 16);
   return {
     pageCount: routes.routes.length,
     componentCount: componentFiles.length,
@@ -2285,7 +2367,8 @@ function extractCssEvidence(content) {
   const variableMatches = [...content.matchAll(/--[\w-]+\s*:/g)];
   const colorMatches = [...content.matchAll(/#[0-9a-fA-F]{3,8}\b|rgb[a]?\(|hsl[a]?\(/g)];
   const themeSignals = /* @__PURE__ */ new Set();
-  if (/\bdark\b|color-scheme:\s*dark|\[data-theme=['"]dark['"]|\.dark\b/.test(content)) themeSignals.add("dark mode");
+  if (/\bdark\b|color-scheme:\s*dark|\[data-theme=['"]dark['"]|\.dark\b/.test(content))
+    themeSignals.add("dark mode");
   if (/\[data-theme=|data-theme|theme-\w+/.test(content)) themeSignals.add("theme selector");
   if (/prefers-color-scheme/.test(content)) themeSignals.add("system color preference");
   return {
@@ -2304,9 +2387,12 @@ function scanStyling(projectRoot, detection) {
   let darkMode = false;
   let configFile = null;
   let approach = "unknown";
-  const tailwindConfig = ["tailwind.config.js", "tailwind.config.ts", "tailwind.config.mjs", "tailwind.config.cjs"].find(
-    (file) => existsSync3(join3(projectRoot, file))
-  );
+  const tailwindConfig = [
+    "tailwind.config.js",
+    "tailwind.config.ts",
+    "tailwind.config.mjs",
+    "tailwind.config.cjs"
+  ].find((file) => existsSync3(join3(projectRoot, file)));
   if (tailwindConfig || deps.tailwindcss) {
     approach = "tailwind";
     configFile = tailwindConfig ?? "package.json";
@@ -2363,13 +2449,17 @@ function scanStaticHosting(projectRoot, detection) {
   if (detection.dependencies["gh-pages"] || pkg?.scripts?.deploy?.includes("gh-pages")) {
     evidence.push("package scripts or dependencies reference gh-pages");
   }
-  if (existsSync3(join3(projectRoot, "docs", "index.html"))) evidence.push("docs/index.html can serve GitHub Pages");
+  if (existsSync3(join3(projectRoot, "docs", "index.html")))
+    evidence.push("docs/index.html can serve GitHub Pages");
   if (existsSync3(join3(projectRoot, "404.html")) || existsSync3(join3(projectRoot, "docs", "404.html"))) {
     evidence.push("404.html fallback is present");
   }
   const workflowDir = join3(projectRoot, ".github", "workflows");
   if (existsSync3(workflowDir)) {
-    for (const file of walkFiles(workflowDir, { extensions: /* @__PURE__ */ new Set([".yml", ".yaml"]) }).slice(0, 20)) {
+    for (const file of walkFiles(workflowDir, { extensions: /* @__PURE__ */ new Set([".yml", ".yaml"]) }).slice(
+      0,
+      20
+    )) {
       const content = readTextFile(join3(workflowDir, file));
       if (content && /pages|gh-pages|upload-pages-artifact|deploy-pages/i.test(content)) {
         evidence.push(`GitHub Pages workflow hint: .github/workflows/${file}`);
@@ -2397,7 +2487,9 @@ function scanStaticHosting(projectRoot, detection) {
     }
   }
   return {
-    githubPagesLikely: evidence.some((item) => item.toLowerCase().includes("github") || item.toLowerCase().includes("pages")),
+    githubPagesLikely: evidence.some(
+      (item) => item.toLowerCase().includes("github") || item.toLowerCase().includes("pages")
+    ),
     evidence: [...new Set(evidence)].slice(0, 12),
     homepageUrl,
     basePath,
@@ -2419,7 +2511,10 @@ function buildApplicability(detection, routes, components) {
     return {
       status: "strong_fit",
       label: "Good Brownfield scan target",
-      reasons: ["A supported web UI framework or static site entrypoint was detected.", "Routes or UI component files are present."]
+      reasons: [
+        "A supported web UI framework or static site entrypoint was detected.",
+        "Routes or UI component files are present."
+      ]
     };
   }
   return {
@@ -2481,7 +2576,10 @@ function buildFindings(input) {
       severity: "info",
       title: "Not a Brownfield UI target",
       message: "This repository does not look like a supported frontend application for Decantr adoption.",
-      evidence: [`primary language: ${detection.primaryLanguage}`, `framework: ${detection.framework}`],
+      evidence: [
+        `primary language: ${detection.primaryLanguage}`,
+        `framework: ${detection.framework}`
+      ],
       recommendation: "Use Decantr scan on a frontend app or GitHub Pages site."
     });
     return findings;
@@ -2518,7 +2616,9 @@ function buildFindings(input) {
       severity: "success",
       title: "Style authority detected",
       message: `The project appears to use ${styling.approach}. Decantr should preserve that authority during Brownfield adoption.`,
-      evidence: [styling.configFile ? `${styling.approach}: ${styling.configFile}` : `styling approach: ${styling.approach}`]
+      evidence: [
+        styling.configFile ? `${styling.approach}: ${styling.configFile}` : `styling approach: ${styling.approach}`
+      ]
     });
   }
   if (hosting.githubPagesLikely) {
@@ -2614,7 +2714,15 @@ async function scanProject(projectRoot, options = {}) {
       ruleFiles: assistantRules
     },
     pagesProbe,
-    findings: buildFindings({ detection, routes, styling, hosting: staticHosting, assistantRules, applicability, pagesProbe }),
+    findings: buildFindings({
+      detection,
+      routes,
+      styling,
+      hosting: staticHosting,
+      assistantRules,
+      applicability,
+      pagesProbe
+    }),
     recommendedCommands: buildCommands(applicability),
     privacy: {
       sourceUploaded: input.kind !== "local",
@@ -2947,6 +3055,9 @@ function evidenceRepairReadTargets(projectRoot, finding) {
   if (finding.source === "style-bridge") {
     targets.add(".decantr/style-bridge.json");
   }
+  if (finding.category.toLowerCase().includes("behavior obligation") || finding.rule?.startsWith("behavior:")) {
+    targets.add(".decantr/local-patterns.json");
+  }
   if (finding.source === "pack" || finding.source === "assertion") {
     targets.add(".decantr/context/pack-manifest.json");
   }
@@ -4824,6 +4935,322 @@ function appendRuntimeAuditFindings(findings, runtimeAudit, projectRoot, topolog
     );
   }
 }
+function readBehaviorPatterns(projectRoot) {
+  const pack = readJsonIfExists(
+    join4(projectRoot, ".decantr", "local-patterns.json")
+  );
+  return (pack?.patterns ?? []).filter(
+    (pattern) => pattern.behavior_obligations && Array.isArray(pattern.behavior_obligations.obligations) && pattern.behavior_obligations.obligations.length > 0
+  );
+}
+function behaviorPatternRole(pattern) {
+  return (pattern.behavior_obligations?.pattern_role ?? pattern.role ?? pattern.id ?? "behavior-obligation").trim().toLowerCase();
+}
+function behaviorSlug(value) {
+  return value.trim().toLowerCase().replace(/[^a-z0-9_.:/-]+/g, "-").replace(/-+/g, "-").replace(/^-|-$/g, "");
+}
+function behaviorRuleId(patternId, obligationId) {
+  return `behavior:${behaviorSlug(patternId) || "pattern"}:${behaviorSlug(obligationId) || "obligation"}`;
+}
+function behaviorPatternHasObligation(pattern, obligationId) {
+  return Boolean(
+    pattern.behavior_obligations?.obligations?.some((obligation) => obligation.id === obligationId)
+  );
+}
+function behaviorRepairPayload(input) {
+  return {
+    local_pattern_id: input.patternId,
+    behavior_obligation_id: input.obligationId,
+    file: input.file,
+    ...input.componentPaths?.length ? { component_paths: input.componentPaths } : {}
+  };
+}
+function sourceAuditFilePath(projectRoot, file) {
+  return isAbsolute2(file) ? file : join4(projectRoot, file);
+}
+function sourceAuditRelativePath(projectRoot, file) {
+  return (isAbsolute2(file) ? relative4(projectRoot, file) : file).replace(/\\/g, "/");
+}
+function sourceFileContainsAny(projectRoot, sourceFiles, patterns) {
+  for (const file of sourceFiles.slice(0, 400)) {
+    try {
+      const code = readFileSync5(sourceAuditFilePath(projectRoot, file), "utf-8");
+      if (patterns.some((pattern) => pattern.test(code))) return true;
+    } catch {
+    }
+  }
+  return false;
+}
+function hasProjectDialogPrimitive(pattern) {
+  return (pattern.componentPaths ?? []).some((file) => /dialog|alert|modal|confirm/i.test(file));
+}
+function fileUsesProjectDialogPrimitive(code) {
+  return /<\s*(?:AlertDialog|Dialog|Modal|ConfirmationDialog|ConfirmDialog)\b/.test(code);
+}
+function fileHasDialogSurface(code) {
+  return /<\s*dialog\b/i.test(code) || /role\s*=\s*["'](?:dialog|alertdialog)["']/i.test(code) || /<\s*(?:AlertDialog|Dialog|Modal|ConfirmationDialog|ConfirmDialog)\b/.test(code) || /\b(?:fixed|absolute)\b[^"'`]+(?:inset-0|z-\d+|bg-black\/|backdrop)/i.test(code);
+}
+function fileHasDestructiveIntent(code) {
+  return /\b(?:delete|remove|destroy|destructive|permanent|irreversible|cannot be undone|account deletion)\b/i.test(
+    code
+  );
+}
+function fileHasDialogAccessibleName(code) {
+  return /(?:aria-label|aria-labelledby|title)\s*=/i.test(code) || /<\s*(?:AlertDialogTitle|DialogTitle|ModalTitle|h[1-6])\b/i.test(code);
+}
+function fileHasVisibleConsequenceCopy(code) {
+  return /\b(?:cannot be undone|permanent(?:ly)?|irreversible|lose access|delete your account|remove this|destroy)\b/i.test(
+    code
+  );
+}
+function fileHasCancelAffordance(code) {
+  return /\b(?:cancel|close|dismiss|go back|keep account|never mind)\b/i.test(code) || /<\s*(?:AlertDialogCancel|DialogClose|ModalClose)\b/i.test(code);
+}
+function fileHasSubmittingGuard(code) {
+  return /\b(?:isSubmitting|submitting|isPending|pending|loading|disabled|aria-disabled|useTransition)\b/i.test(
+    code
+  );
+}
+function appendBehaviorObligationFindings(findings, projectRoot, sourceFiles) {
+  const behaviorPatterns = readBehaviorPatterns(projectRoot);
+  if (behaviorPatterns.length === 0) return;
+  const formPattern = behaviorPatterns.find(
+    (pattern) => /form-control|form|input|field/.test(`${pattern.id ?? ""} ${behaviorPatternRole(pattern)}`)
+  );
+  const dialogPattern = behaviorPatterns.find(
+    (pattern) => /confirmation-dialog|dialog|modal|alertdialog|destructive/.test(
+      `${pattern.id ?? ""} ${behaviorPatternRole(pattern)}`
+    )
+  );
+  if (formPattern) {
+    const patternId = formPattern.id ?? "form-control";
+    for (const file of sourceFiles.slice(0, 400)) {
+      const relativeFile = sourceAuditRelativePath(projectRoot, file);
+      let code = "";
+      try {
+        code = readFileSync5(sourceAuditFilePath(projectRoot, file), "utf-8");
+      } catch {
+        continue;
+      }
+      if (!/<\s*(?:form|input|select|textarea|button)\b/i.test(code)) continue;
+      const signals = analyzeAstSignals(relativeFile, code);
+      if (behaviorPatternHasObligation(formPattern, "label-associated") && signals.formControlWithoutLabelCount > 0) {
+        findings.push(
+          makeFinding({
+            id: "behavior-form-label-associated",
+            code: "A11Y011",
+            category: "Behavior Obligation",
+            severity: "warn",
+            message: "Accepted form-control behavior obligations require controls to keep associated labels.",
+            evidence: [
+              ".decantr/local-patterns.json behavior_obligations: form-control/label-associated",
+              `${relativeFile}: form controls without labels: ${signals.formControlWithoutLabelCount}`
+            ],
+            file: relativeFile,
+            target: patternId,
+            rule: behaviorRuleId(patternId, "label-associated"),
+            suggestedFix: "Associate each input, select, or textarea with a visible label, htmlFor/id pair, aria-label, or aria-labelledby while preserving the project-owned form primitive.",
+            repair: {
+              id: "restore-label-association",
+              payload: behaviorRepairPayload({
+                patternId,
+                obligationId: "label-associated",
+                file: relativeFile,
+                componentPaths: formPattern.componentPaths
+              })
+            }
+          })
+        );
+      }
+      if (behaviorPatternHasObligation(formPattern, "explicit-form-button-type") && signals.buttonInFormWithoutTypeCount > 0) {
+        findings.push(
+          makeFinding({
+            id: "behavior-form-explicit-button-type",
+            code: "INT013",
+            category: "Behavior Obligation",
+            severity: "warn",
+            message: "Accepted form-control behavior obligations require buttons inside forms to declare an explicit type.",
+            evidence: [
+              ".decantr/local-patterns.json behavior_obligations: form-control/explicit-form-button-type",
+              `${relativeFile}: buttons inside forms without type: ${signals.buttonInFormWithoutTypeCount}`
+            ],
+            file: relativeFile,
+            target: patternId,
+            rule: behaviorRuleId(patternId, "explicit-form-button-type"),
+            suggestedFix: 'Set type="button" for non-submit actions and type="submit" for the intended submit control.',
+            repair: {
+              id: "set-explicit-button-type",
+              payload: behaviorRepairPayload({
+                patternId,
+                obligationId: "explicit-form-button-type",
+                file: relativeFile,
+                componentPaths: formPattern.componentPaths
+              })
+            }
+          })
+        );
+      }
+    }
+  }
+  if (!dialogPattern) return;
+  const dialogPatternId = dialogPattern.id ?? "confirmation-dialog";
+  const projectHasDialogPrimitive = hasProjectDialogPrimitive(dialogPattern);
+  const sourceHasDialogIntent = sourceFileContainsAny(projectRoot, sourceFiles, [
+    /<\s*(?:dialog|AlertDialog|Dialog|Modal|ConfirmationDialog|ConfirmDialog)\b/i,
+    /role\s*=\s*["'](?:dialog|alertdialog)["']/i
+  ]);
+  if (!sourceHasDialogIntent) return;
+  for (const file of sourceFiles.slice(0, 400)) {
+    const relativeFile = sourceAuditRelativePath(projectRoot, file);
+    let code = "";
+    try {
+      code = readFileSync5(sourceAuditFilePath(projectRoot, file), "utf-8");
+    } catch {
+      continue;
+    }
+    if (!fileHasDialogSurface(code) || !fileHasDestructiveIntent(code)) continue;
+    if (behaviorPatternHasObligation(dialogPattern, "project-dialog-primitive") && projectHasDialogPrimitive && !fileUsesProjectDialogPrimitive(code)) {
+      findings.push(
+        makeFinding({
+          id: "behavior-dialog-project-primitive",
+          code: "COMP020",
+          category: "Behavior Obligation",
+          severity: "warn",
+          message: "Accepted confirmation-dialog behavior obligations require the project-owned Dialog primitive instead of one-off destructive overlays.",
+          evidence: [
+            ".decantr/local-patterns.json behavior_obligations: confirmation-dialog/project-dialog-primitive",
+            `${relativeFile}: destructive dialog-like surface does not use the project Dialog primitive`
+          ],
+          file: relativeFile,
+          target: dialogPatternId,
+          rule: behaviorRuleId(dialogPatternId, "project-dialog-primitive"),
+          suggestedFix: "Replace the one-off overlay with the project-owned Dialog or AlertDialog primitive listed in .decantr/local-patterns.json.",
+          repair: {
+            id: "use-project-owned-interaction-primitive",
+            payload: behaviorRepairPayload({
+              patternId: dialogPatternId,
+              obligationId: "project-dialog-primitive",
+              file: relativeFile,
+              componentPaths: dialogPattern.componentPaths
+            })
+          }
+        })
+      );
+    }
+    if (behaviorPatternHasObligation(dialogPattern, "accessible-name") && !fileHasDialogAccessibleName(code)) {
+      findings.push(
+        makeFinding({
+          id: "behavior-dialog-accessible-name",
+          code: "A11Y010",
+          category: "Behavior Obligation",
+          severity: "error",
+          message: "Accepted confirmation-dialog behavior obligations require the destructive dialog to have an accessible name.",
+          evidence: [
+            ".decantr/local-patterns.json behavior_obligations: confirmation-dialog/accessible-name",
+            `${relativeFile}: destructive dialog-like surface has no DialogTitle, aria-label, aria-labelledby, title, or heading signal`
+          ],
+          file: relativeFile,
+          target: dialogPatternId,
+          rule: behaviorRuleId(dialogPatternId, "accessible-name"),
+          suggestedFix: "Add the project Dialog title primitive or an aria-label/aria-labelledby that names the destructive confirmation.",
+          repair: {
+            id: "restore-dialog-accessible-name",
+            payload: behaviorRepairPayload({
+              patternId: dialogPatternId,
+              obligationId: "accessible-name",
+              file: relativeFile,
+              componentPaths: dialogPattern.componentPaths
+            })
+          }
+        })
+      );
+    }
+    if (behaviorPatternHasObligation(dialogPattern, "visible-consequence") && !fileHasVisibleConsequenceCopy(code)) {
+      findings.push(
+        makeFinding({
+          id: "behavior-dialog-visible-consequence",
+          code: "INT010",
+          category: "Behavior Obligation",
+          severity: "warn",
+          message: "Accepted confirmation-dialog behavior obligations require visible copy that states the destructive consequence.",
+          evidence: [
+            ".decantr/local-patterns.json behavior_obligations: confirmation-dialog/visible-consequence",
+            `${relativeFile}: destructive dialog-like surface lacks consequence copy such as "cannot be undone" or "permanently"`
+          ],
+          file: relativeFile,
+          target: dialogPatternId,
+          rule: behaviorRuleId(dialogPatternId, "visible-consequence"),
+          suggestedFix: "Add visible consequence copy that clearly explains what will be deleted, removed, or lost.",
+          repair: {
+            id: "restore-visible-consequence-copy",
+            payload: behaviorRepairPayload({
+              patternId: dialogPatternId,
+              obligationId: "visible-consequence",
+              file: relativeFile,
+              componentPaths: dialogPattern.componentPaths
+            })
+          }
+        })
+      );
+    }
+    if (behaviorPatternHasObligation(dialogPattern, "cancel-affordance") && !fileHasCancelAffordance(code)) {
+      findings.push(
+        makeFinding({
+          id: "behavior-dialog-cancel-affordance",
+          code: "INT011",
+          category: "Behavior Obligation",
+          severity: "warn",
+          message: "Accepted confirmation-dialog behavior obligations require a visible cancel or close affordance.",
+          evidence: [
+            ".decantr/local-patterns.json behavior_obligations: confirmation-dialog/cancel-affordance",
+            `${relativeFile}: destructive dialog-like surface lacks a cancel/close affordance signal`
+          ],
+          file: relativeFile,
+          target: dialogPatternId,
+          rule: behaviorRuleId(dialogPatternId, "cancel-affordance"),
+          suggestedFix: "Add a reviewed cancel/close affordance before the destructive action using the project Dialog primitive.",
+          repair: {
+            id: "restore-cancel-affordance",
+            payload: behaviorRepairPayload({
+              patternId: dialogPatternId,
+              obligationId: "cancel-affordance",
+              file: relativeFile,
+              componentPaths: dialogPattern.componentPaths
+            })
+          }
+        })
+      );
+    }
+    if (behaviorPatternHasObligation(dialogPattern, "submitting-guard") && !fileHasSubmittingGuard(code)) {
+      findings.push(
+        makeFinding({
+          id: "behavior-dialog-submitting-guard",
+          code: "INT012",
+          category: "Behavior Obligation",
+          severity: "info",
+          message: "Accepted confirmation-dialog behavior obligations expect a submitting guard for destructive execution.",
+          evidence: [
+            ".decantr/local-patterns.json behavior_obligations: confirmation-dialog/submitting-guard",
+            `${relativeFile}: destructive dialog-like surface has no obvious disabled/loading/pending guard`
+          ],
+          file: relativeFile,
+          target: dialogPatternId,
+          rule: behaviorRuleId(dialogPatternId, "submitting-guard"),
+          suggestedFix: "Guard the destructive submit path with a disabled, pending, loading, or submitting state to avoid repeated execution.",
+          repair: {
+            id: "restore-submitting-guard",
+            payload: behaviorRepairPayload({
+              patternId: dialogPatternId,
+              obligationId: "submitting-guard",
+              file: relativeFile,
+              componentPaths: dialogPattern.componentPaths
+            })
+          }
+        })
+      );
+    }
+  }
+}
 function appendSourceAuditFindings(findings, sourceAudit, essence, reviewPack, adoptionMode) {
   if (sourceAudit.filesChecked === 0) {
     return;
@@ -6211,6 +6638,7 @@ async function auditProject(projectRoot) {
     sourceAudit
   );
   appendSourceAuditFindings(findings, sourceAudit, essence, reviewPack, adoptionMode);
+  appendBehaviorObligationFindings(findings, projectRoot, projectSourceFiles);
   appendComponentReuseFindings(findings, componentReuseAudit);
   appendStyleBridgeDriftFindings(findings, styleBridgeDriftAudit);
   appendStyleContractFindings(findings, styleAudit, essence);