@descryy/core 0.3.0 → 0.5.0

package/dist/query/unresolved.js.map

@@ -1 +1 @@
-{"version":3,"file":"unresolved.js","sourceRoot":"","sources":["../../src/query/unresolved.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoGG;AA0BH,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AAEjD,2GAA2G;AAC3G,SAAS,MAAM,CAAC,SAAiB;IAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,QAAQ,CAAC,SAAiB;IACjC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,8EAA8E;IAC9E,2EAA2E;IAC3E,+DAA+D;IAC/D,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,8EAA8E;IAC9E,uEAAuE;IACvE,MAAM,mBAAmB,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,eAAe,CAAC,GAAkB,EAAE,QAAsB,EAAE;IAC1E,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,KAAK,cAAc;QAAE,OAAO,YAAY,CAAC;IAExE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3E,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,cAAc,CAAC;IACnD,OAAO,YAAY,CAAC;AACtB,CAAC;AAiBD,MAAM,UAAU,gBAAgB,CAC9B,IAA8B,EAC9B,QAAsB,EAAE;IAExB,MAAM,MAAM,GAAiC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC/F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,GAAG,MAAM;QACT,UAAU,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAClD,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AA2BD,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,IAA8B,EAC9B,QAAsB,EAAE;IAExB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,qBAAqB,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;IAClD,MAAM,mBAAmB,GAAG,IAAI,GAAG,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC;IAE3E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CACb,GAAG,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,KAAK,yDAAyD;YAC9F,kHAAkH;YAClH,iEAAiE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CACb,GAAG,MAAM,CAAC,YAAY,uEAAuE;YAC3F,kHAAkH;YAClH,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,UAAU,CAAC,IAAI,CACb,iFAAiF;YAC/E,6DAA6D,MAAM,CAAC,KAAK;iBACtE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC;iBACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,KAAK,CAAC,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO;QACL,IAAI;QACJ,MAAM;QACN,cAAc,EAAE,qBAAqB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,qBAAqB;QACjF,YAAY,EAAE,mBAAmB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,mBAAmB;QAC3E,UAAU;KACX,CAAC;AACJ,CAAC"}
+{"version":3,"file":"unresolved.js","sourceRoot":"","sources":["../../src/query/unresolved.ts"],"names":[],"mappings":"AAAA;;;;uDAIuD;AAevD,MAAM,QAAQ,GAAG,+BAA+B,CAAC;AAEjD,2GAA2G;AAC3G,SAAS,MAAM,CAAC,SAAiB;IAC/B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;qFACqF;AACrF,SAAS,QAAQ,CAAC,SAAiB;IACjC,MAAM,CAAC,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAC3B,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC1B,gFAAgF;IAChF,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpC,kFAAkF;IAClF,MAAM,mBAAmB,GAAG,CAAC,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,CAAC,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;yEAEyE;AACzE,MAAM,UAAU,eAAe,CAAC,GAAkB,EAAE,QAAsB,EAAE;IAC1E,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC,cAAc,CAAC,KAAK,cAAc;QAAE,OAAO,YAAY,CAAC;IAExE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAClF,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC;IAC3E,IAAI,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,OAAO,cAAc,CAAC;IACnD,OAAO,YAAY,CAAC;AACtB,CAAC;AAcD,MAAM,UAAU,gBAAgB,CAC9B,IAA8B,EAC9B,QAAsB,EAAE;IAExB,MAAM,MAAM,GAAiC,EAAE,UAAU,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,CAAC;IAC/F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACzC,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,IAAI;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,MAAM;QAClB,GAAG,MAAM;QACT,UAAU,EAAE,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAClD,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;aACzC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAiBD,MAAM,UAAU,QAAQ,CACtB,IAAY,EACZ,IAA8B,EAC9B,QAAsB,EAAE;IAExB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,qBAAqB,GAAG,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC;IAClD,MAAM,mBAAmB,GAAG,IAAI,GAAG,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY,CAAC;IAE3E,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,MAAM,CAAC,UAAU,GAAG,CAAC,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CACb,GAAG,MAAM,CAAC,UAAU,OAAO,MAAM,CAAC,KAAK,yDAAyD;YAC9F,kHAAkH;YAClH,iEAAiE,CACpE,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;QAC5B,UAAU,CAAC,IAAI,CACb,GAAG,MAAM,CAAC,YAAY,uEAAuE;YAC3F,kHAAkH;YAClH,sEAAsE,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,UAAU,CAAC,IAAI,CACb,iFAAiF;YAC/E,6DAA6D,MAAM,CAAC,KAAK;iBACtE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;iBACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC;iBACpC,IAAI,CAAC,IAAI,CAAC,GAAG,CACnB,CAAC;IACJ,CAAC;IACD,IAAI,qBAAqB,KAAK,CAAC,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO;QACL,IAAI;QACJ,MAAM;QACN,cAAc,EAAE,qBAAqB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,qBAAqB;QACjF,YAAY,EAAE,mBAAmB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,mBAAmB;QAC3E,UAAU;KACX,CAAC;AACJ,CAAC"}

package/dist/query/verification-status.d.ts

@@ -1,105 +1,20 @@
 /**
- * The static half of `verification_status` — `ai-tool-contract.md` §5.6, §8
- * endpoint 13; AI layer §19/§20 (`Verification status` moved off the
- * confidence axis); `ai-layer-plan.md` §2 (the trigger → stage mask), §4
- * technique 6 (a dedicated tool, not appended to every response).
- *
- * ## Scope boundary — read this before assuming more than this module builds
- *
- * A complete `Verification status` also depends on **which pipeline stages
- * ran under which trigger mask** (`ai-layer-plan.md` §2: the fast path skips
- * stages 8-13 entirely) — that is runtime information about one specific
- * run, and it does not exist in `descry-core`. This repo is the static
- * knowledge plane; there is no live run here to ask "did stage 9 actually
- * execute against this file." **This module builds the static half only:**
- * what a static reading of the graph and a language's declared capabilities
- * can determine about analysability and resolution. Combining that with the
- * runtime half — which stages actually ran — is `descry-runtime`/the
- * pipeline's job, not this one's.
- *
- * ## Output shape: `@descryy/ir`'s `VerificationStatus`, not a parallel one
- *
- * `packages/ir/src/finding.ts` already defines the shared shape two
- * repositories (the pipeline and the desktop golden-report test) assert
- * against — `{ exercised: string[], notExercised: UntestedScope[] }`. This
- * module produces exactly that, deliberately, rather than a second
- * "coverage" record: two structures answering the same question would be
- * exactly the kind of divergence `finding.ts`'s own module doc warns about
- * for `Finding` itself, one level down.
- *
- * An `exercised` entry is `"<ref> (R<resolution>)"` — the scope item's
- * identifier plus the real resolution level the graph actually holds for it,
- * because a present node's resolution is a fact worth keeping even though
- * `VerificationStatus.exercised` is typed as bare strings; see
- * {@link formatExercised} for the exact grammar and
- * {@link resolutionOfExercised} for the matching parser. A present item's
- * resolution is reported as-is and is **never filtered against the
- * requested check's `minResolution`** — whether R1 is "enough" for a given
- * claim is a judgement for something above this layer (rule 3's cap, or G4),
- * not a fact this function may assert.
- *
- * ## Hard constraint: no report category, ever
- *
- * §19's five report categories (`confirmed` / `strongly supported` /
- * `unconfirmed` / `not analysable` / `unsupported`) are assigned at G4,
- * above this surface (`ai-tool-contract.md` §1.2 draws the same line for
- * result states). This module returns only the raw coverage facts —
- * reachable-or-not, resolution, a named reason — and never the literal
- * category vocabulary; a test asserts none of the five strings ever appear
- * in the output.
- *
- * ## Reuses `tiers/certify.ts`'s capability comparison, not a second one
- *
- * "Does this language's declared `CapabilityMatrix` cover what a check
- * needs" is the same question `certify.ts`'s `checkCapability` already
- * answers for a whole adapter's tier. {@link capabilityGaps} restates that
- * comparison — declared node/edge types, declared `maxResolution` — at
- * per-scope-item granularity rather than adapter-wide, so the two never
- * quietly disagree about what "this language's capabilities satisfy this
- * requirement" means. It is a restatement rather than an import because
- * `certify.ts`'s function also folds in precision-draw attestation and
- * corpus conformance, both properties of a *published tier*, not of one live
- * scope item — pulling those in here would answer a different question than
- * the one being asked.
- *
- * ## Why this never looks up capabilities by language itself
- *
- * `ScopeItem.capabilities` is supplied by the caller, already resolved, per
- * item — never looked up here from a `language` string. A `Map.get(item.
- * language)` shape inside `packages/core/src/query/` would be exactly the
- * IR-boundary leak `descry-boundary/no-language-branch` exists to catch
- * (architecture principle 7 / `CLAUDE.md` rule 1): deciding behaviour from
- * *which* language a node came from, not merely from whether one is known.
- * `certify.ts` holds the same discipline one layer up — it takes one
- * `GateEvidence` per call and never builds a language-keyed registry inside
- * `packages/core` either. Resolving "which capabilities apply to this
- * item's language" is the caller's job, done above this boundary; `language`
- * is read here only for disclosure (naming it in a reason string), never for
- * a branch, comparison or lookup.
+ * Static half of `verification_status` (AI layer §19/§20: coverage is separate from
+ * confidence). Builds `@descryy/ir`'s `VerificationStatus` directly, not a parallel shape; never the runtime half (which stages ran) or the five report-category strings — both assigned above this layer (G4).
+ * `capabilityGaps` restates `tiers/certify.ts`'s comparison at per-item granularity. `language` is read only for disclosure, never a branch/lookup — capabilities come pre-resolved from the caller (IR-boundary rule 1).
  */
 import type { CapabilityMatrix, EdgeType, IRNode, NodeType, ResolutionLevel, VerificationStatus } from "@descryy/ir";
-/**
- * What a caller wants to know is answerable, for the whole scope in one
- * call. Mirrors the three targeting fields `tiers/ladder.ts`'s `Requirement`
- * uses (`nodeTypes`/`edgeTypes`/`minResolution`), restated rather than
- * imported: a live per-scope-item check is not a tier-ladder promotion row
- * and carries none of `Requirement`'s `id`/`kind`/`statement`. Every field
- * omitted asks only "was this item reached at all".
- */
+/** Mirrors `tiers/ladder.ts`'s `Requirement` targeting fields, restated (not
+ *  imported — this isn't a tier-ladder promotion row). Every field omitted
+ *  asks only "was this item reached at all". */
 export interface CoverageCheck {
     readonly nodeTypes?: readonly NodeType[];
     readonly edgeTypes?: readonly EdgeType[];
     readonly minResolution?: ResolutionLevel;
 }
-/**
- * One item of the scope being asked about — a file or a node.
- *
- * `node` is the strongest fact available: when the graph holds real,
- * analysed content for this item, its own `resolution` is reported as-is,
- * never re-derived. `capabilities` is consulted only when `node` is `null`,
- * to explain *why* nothing is there — `undefined` means no adapter is
- * registered for whatever this item is at all.
- */
+/** One scope item (file or node). `node`'s own `resolution` is reported as-is,
+ *  never re-derived; `capabilities` is consulted only when `node` is null, to
+ *  explain why — `undefined` means no adapter is registered. */
 export interface ScopeItem {
     /** The identifier this item is reported under — a node id or a file path. Opaque to this module. */
     readonly ref: string;
@@ -115,20 +30,8 @@ export declare function resolutionOfExercised(entry: string): {
     readonly ref: string;
     readonly resolution: ResolutionLevel;
 } | null;
-/**
- * Compute the static half of `VerificationStatus` for a scope.
- *
- * Per item, one of three outcomes — see the module header for the full
- * reasoning:
- *
- * 1. **Present in the graph** → `exercised`, carrying its real resolution.
- * 2. **Absent, no capabilities supplied** → `notExercised`, naming the
- *    language (or that none could be determined).
- * 3. **Absent, capabilities supplied** → `notExercised`, naming the specific
- *    declared gap against `check` when there is one, or — the honest edge
- *    case — that a registered adapter declares everything asked for and a
- *    static capability comparison alone cannot say why the item is still
- *    absent.
- */
+/** Per item: present → `exercised` with real resolution; absent + no capabilities →
+ *  `notExercised` naming the language; absent + capabilities → `notExercised` naming
+ *  the gap, or that a registered adapter declares everything and the absence is unexplained. */
 export declare function computeVerificationStatus(scope: readonly ScopeItem[], check?: CoverageCheck): VerificationStatus;
 //# sourceMappingURL=verification-status.d.ts.map

package/dist/query/verification-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verification-status.d.ts","sourceRoot":"","sources":["../../src/query/verification-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,eAAe,EAEf,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;CAC1C;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,oGAAoG;IACpG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2HAA2H;IAC3H,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kJAAkJ;IAClJ,QAAQ,CAAC,YAAY,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACrD;AAuCD,mIAAmI;AACnI,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAA;CAAE,GAAG,IAAI,CAI1H;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,KAAK,GAAE,aAAkB,GACxB,kBAAkB,CAkCpB"}
+{"version":3,"file":"verification-status.d.ts","sourceRoot":"","sources":["../../src/query/verification-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EACV,gBAAgB,EAChB,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,eAAe,EAEf,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAErB;;gDAEgD;AAChD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,QAAQ,EAAE,CAAC;IACzC,QAAQ,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC;CAC1C;AAED;;gEAEgE;AAChE,MAAM,WAAW,SAAS;IACxB,oGAAoG;IACpG,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,2HAA2H;IAC3H,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,uGAAuG;IACvG,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,kJAAkJ;IAClJ,QAAQ,CAAC,YAAY,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACrD;AAmCD,mIAAmI;AACnI,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAA;CAAE,GAAG,IAAI,CAI1H;AAED;;gGAEgG;AAChG,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,SAAS,SAAS,EAAE,EAC3B,KAAK,GAAE,aAAkB,GACxB,kBAAkB,CAkCpB"}

package/dist/query/verification-status.js

@@ -1,81 +1,7 @@
 /**
- * The static half of `verification_status` — `ai-tool-contract.md` §5.6, §8
- * endpoint 13; AI layer §19/§20 (`Verification status` moved off the
- * confidence axis); `ai-layer-plan.md` §2 (the trigger → stage mask), §4
- * technique 6 (a dedicated tool, not appended to every response).
- *
- * ## Scope boundary — read this before assuming more than this module builds
- *
- * A complete `Verification status` also depends on **which pipeline stages
- * ran under which trigger mask** (`ai-layer-plan.md` §2: the fast path skips
- * stages 8-13 entirely) — that is runtime information about one specific
- * run, and it does not exist in `descry-core`. This repo is the static
- * knowledge plane; there is no live run here to ask "did stage 9 actually
- * execute against this file." **This module builds the static half only:**
- * what a static reading of the graph and a language's declared capabilities
- * can determine about analysability and resolution. Combining that with the
- * runtime half — which stages actually ran — is `descry-runtime`/the
- * pipeline's job, not this one's.
- *
- * ## Output shape: `@descryy/ir`'s `VerificationStatus`, not a parallel one
- *
- * `packages/ir/src/finding.ts` already defines the shared shape two
- * repositories (the pipeline and the desktop golden-report test) assert
- * against — `{ exercised: string[], notExercised: UntestedScope[] }`. This
- * module produces exactly that, deliberately, rather than a second
- * "coverage" record: two structures answering the same question would be
- * exactly the kind of divergence `finding.ts`'s own module doc warns about
- * for `Finding` itself, one level down.
- *
- * An `exercised` entry is `"<ref> (R<resolution>)"` — the scope item's
- * identifier plus the real resolution level the graph actually holds for it,
- * because a present node's resolution is a fact worth keeping even though
- * `VerificationStatus.exercised` is typed as bare strings; see
- * {@link formatExercised} for the exact grammar and
- * {@link resolutionOfExercised} for the matching parser. A present item's
- * resolution is reported as-is and is **never filtered against the
- * requested check's `minResolution`** — whether R1 is "enough" for a given
- * claim is a judgement for something above this layer (rule 3's cap, or G4),
- * not a fact this function may assert.
- *
- * ## Hard constraint: no report category, ever
- *
- * §19's five report categories (`confirmed` / `strongly supported` /
- * `unconfirmed` / `not analysable` / `unsupported`) are assigned at G4,
- * above this surface (`ai-tool-contract.md` §1.2 draws the same line for
- * result states). This module returns only the raw coverage facts —
- * reachable-or-not, resolution, a named reason — and never the literal
- * category vocabulary; a test asserts none of the five strings ever appear
- * in the output.
- *
- * ## Reuses `tiers/certify.ts`'s capability comparison, not a second one
- *
- * "Does this language's declared `CapabilityMatrix` cover what a check
- * needs" is the same question `certify.ts`'s `checkCapability` already
- * answers for a whole adapter's tier. {@link capabilityGaps} restates that
- * comparison — declared node/edge types, declared `maxResolution` — at
- * per-scope-item granularity rather than adapter-wide, so the two never
- * quietly disagree about what "this language's capabilities satisfy this
- * requirement" means. It is a restatement rather than an import because
- * `certify.ts`'s function also folds in precision-draw attestation and
- * corpus conformance, both properties of a *published tier*, not of one live
- * scope item — pulling those in here would answer a different question than
- * the one being asked.
- *
- * ## Why this never looks up capabilities by language itself
- *
- * `ScopeItem.capabilities` is supplied by the caller, already resolved, per
- * item — never looked up here from a `language` string. A `Map.get(item.
- * language)` shape inside `packages/core/src/query/` would be exactly the
- * IR-boundary leak `descry-boundary/no-language-branch` exists to catch
- * (architecture principle 7 / `CLAUDE.md` rule 1): deciding behaviour from
- * *which* language a node came from, not merely from whether one is known.
- * `certify.ts` holds the same discipline one layer up — it takes one
- * `GateEvidence` per call and never builds a language-keyed registry inside
- * `packages/core` either. Resolving "which capabilities apply to this
- * item's language" is the caller's job, done above this boundary; `language`
- * is read here only for disclosure (naming it in a reason string), never for
- * a branch, comparison or lookup.
+ * Static half of `verification_status` (AI layer §19/§20: coverage is separate from
+ * confidence). Builds `@descryy/ir`'s `VerificationStatus` directly, not a parallel shape; never the runtime half (which stages ran) or the five report-category strings — both assigned above this layer (G4).
+ * `capabilityGaps` restates `tiers/certify.ts`'s comparison at per-item granularity. `language` is read only for disclosure, never a branch/lookup — capabilities come pre-resolved from the caller (IR-boundary rule 1).
  */
 /** `certify.ts`'s own `missing()`, restated: what `wanted` names that `have` does not declare. */
 function missing(wanted, have) {
@@ -84,13 +10,9 @@ function missing(wanted, have) {
     const present = new Set(have);
     return wanted.filter((w) => !present.has(w));
 }
-/**
- * The same comparison `tiers/certify.ts`'s `checkCapability` makes — declared
- * node/edge types, declared resolution ceiling — restated at one scope
- * item's granularity. Empty when `caps` declares everything `check` asks
- * for (which does not, by itself, mean the item was reachable — see the
- * caller in {@link computeVerificationStatus}).
- */
+/** Same comparison as `tiers/certify.ts`'s `checkCapability`, restated per-item.
+ *  Empty when `caps` covers everything `check` asks — not itself proof the
+ *  item was reachable, see {@link computeVerificationStatus}. */
 function capabilityGaps(caps, check) {
     const gaps = [];
     const nodeGap = missing(check.nodeTypes, caps.nodeTypes);
@@ -116,21 +38,9 @@ export function resolutionOfExercised(entry) {
         return null;
     return { ref: m[1], resolution: Number(m[2]) };
 }
-/**
- * Compute the static half of `VerificationStatus` for a scope.
- *
- * Per item, one of three outcomes — see the module header for the full
- * reasoning:
- *
- * 1. **Present in the graph** → `exercised`, carrying its real resolution.
- * 2. **Absent, no capabilities supplied** → `notExercised`, naming the
- *    language (or that none could be determined).
- * 3. **Absent, capabilities supplied** → `notExercised`, naming the specific
- *    declared gap against `check` when there is one, or — the honest edge
- *    case — that a registered adapter declares everything asked for and a
- *    static capability comparison alone cannot say why the item is still
- *    absent.
- */
+/** Per item: present → `exercised` with real resolution; absent + no capabilities →
+ *  `notExercised` naming the language; absent + capabilities → `notExercised` naming
+ *  the gap, or that a registered adapter declares everything and the absence is unexplained. */
 export function computeVerificationStatus(scope, check = {}) {
     const exercised = [];
     const notExercised = [];

package/dist/query/verification-status.js.map

@@ -1 +1 @@
-{"version":3,"file":"verification-status.js","sourceRoot":"","sources":["../../src/query/verification-status.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8EG;AA8CH,kGAAkG;AAClG,SAAS,OAAO,CAAI,MAAgC,EAAE,IAAkB;IACtE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,IAAsB,EAAE,KAAoB;IAClE,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtF,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,aAAa,YAAY,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iIAAiI;AACjI,SAAS,eAAe,CAAC,GAAW,EAAE,UAA2B;IAC/D,OAAO,GAAG,GAAG,MAAM,UAAU,GAAG,CAAC;AACnC,CAAC;AAED,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,mIAAmI;AACnI,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAoB,EAAE,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,KAA2B,EAC3B,QAAuB,EAAE;IAEzB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAoB,EAAE,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,YAAY,CAAC,IAAI,CAAC;gBAChB,KAAK,EAAE,IAAI,CAAC,GAAG;gBACf,MAAM,EACJ,IAAI,CAAC,QAAQ,KAAK,IAAI;oBACpB,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,iCAAiC,IAAI,CAAC,QAAQ,GAAG;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACtD,YAAY,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,IAAI,CAAC,GAAG;YACf,MAAM,EACJ,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjB,CAAC,CAAC,2BAA2B,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,QAAQ,GAAG,gBAAgB;oBAClG,iGAAiG;oBACjG,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACrC,CAAC"}
+{"version":3,"file":"verification-status.js","sourceRoot":"","sources":["../../src/query/verification-status.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAmCH,kGAAkG;AAClG,SAAS,OAAO,CAAI,MAAgC,EAAE,IAAkB;IACtE,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED;;iEAEiE;AACjE,SAAS,cAAc,CAAC,IAAsB,EAAE,KAAoB;IAClE,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtF,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACzD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEtF,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,aAAa,YAAY,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iIAAiI;AACjI,SAAS,eAAe,CAAC,GAAW,EAAE,UAA2B;IAC/D,OAAO,GAAG,GAAG,MAAM,UAAU,GAAG,CAAC;AACnC,CAAC;AAED,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,mIAAmI;AACnI,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,MAAM,CAAC,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAE,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAoB,EAAE,CAAC;AACrE,CAAC;AAED;;gGAEgG;AAChG,MAAM,UAAU,yBAAyB,CACvC,KAA2B,EAC3B,QAAuB,EAAE;IAEzB,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAoB,EAAE,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;YACpC,YAAY,CAAC,IAAI,CAAC;gBAChB,KAAK,EAAE,IAAI,CAAC,GAAG;gBACf,MAAM,EACJ,IAAI,CAAC,QAAQ,KAAK,IAAI;oBACpB,CAAC,CAAC,qFAAqF;oBACvF,CAAC,CAAC,iCAAiC,IAAI,CAAC,QAAQ,GAAG;aACxD,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;QACtD,YAAY,CAAC,IAAI,CAAC;YAChB,KAAK,EAAE,IAAI,CAAC,GAAG;YACf,MAAM,EACJ,IAAI,CAAC,MAAM,GAAG,CAAC;gBACb,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;gBACjB,CAAC,CAAC,2BAA2B,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,QAAQ,GAAG,gBAAgB;oBAClG,iGAAiG;oBACjG,2BAA2B;SAClC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC;AACrC,CAAC"}

package/dist/recording/migrate.d.ts

@@ -1,13 +1,7 @@
-/**
- * Schema creation and version enforcement for the recording store.
- *
- * Mirrors `../store/migrate.ts`'s shape deliberately (create-if-absent, then
- * verify) but not its recovery path: the graph store's `dropDerived()` exists
- * because a version mismatch there means "rebuild from source." There is no
- * source to rebuild a recorded call from, so a mismatch here has exactly one
- * safe response — refuse to open — and no `dropDerived` equivalent is
- * provided.
- */
+/** Schema creation and version enforcement for the recording store. Mirrors
+ *  `../store/migrate.ts` (create-if-absent, then verify) but not its
+ *  recovery: there's no source to rebuild a recorded call from, so a
+ *  mismatch here refuses to open — no `dropDerived` equivalent exists. */
 import { type SqlDriver } from "../store/driver/driver.ts";
 export declare class RecordingSchemaVersionError extends Error {
     readonly name = "RecordingSchemaVersionError";

package/dist/recording/migrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/recording/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAGxE,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,SAAkB,IAAI,iCAAiC;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAS5C;AAmBD,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAkBxE"}
+{"version":3,"file":"migrate.d.ts","sourceRoot":"","sources":["../../src/recording/migrate.ts"],"names":[],"mappings":"AAAA;;;0EAG0E;AAE1E,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAGxE,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,SAAkB,IAAI,iCAAiC;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;gBAEd,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM;CAS5C;AAmBD,8EAA8E;AAC9E,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,GAAG;IAAE,OAAO,EAAE,OAAO,CAAA;CAAE,CAkBxE"}

package/dist/recording/migrate.js

@@ -1,13 +1,7 @@
-/**
- * Schema creation and version enforcement for the recording store.
- *
- * Mirrors `../store/migrate.ts`'s shape deliberately (create-if-absent, then
- * verify) but not its recovery path: the graph store's `dropDerived()` exists
- * because a version mismatch there means "rebuild from source." There is no
- * source to rebuild a recorded call from, so a mismatch here has exactly one
- * safe response — refuse to open — and no `dropDerived` equivalent is
- * provided.
- */
+/** Schema creation and version enforcement for the recording store. Mirrors
+ *  `../store/migrate.ts` (create-if-absent, then verify) but not its
+ *  recovery: there's no source to rebuild a recorded call from, so a
+ *  mismatch here refuses to open — no `dropDerived` equivalent exists. */
 import { DriverError } from "../store/driver/driver.js";
 import { RECORDING_SCHEMA_VERSION, SCHEMA_SQL } from "./schema.js";
 export class RecordingSchemaVersionError extends Error {

package/dist/recording/migrate.js.map

@@ -1 +1 @@
-{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/recording/migrate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,WAAW,EAAkB,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAClC,IAAI,GAAG,6BAA6B,CAAC;IAC9C,KAAK,CAAS;IACd,QAAQ,CAAS;IAE1B,YAAY,KAAa,EAAE,QAAgB;QACzC,KAAK,CACH,oDAAoD,KAAK,wBAAwB,QAAQ,IAAI;YAC3F,4FAA4F;YAC5F,4BAA4B,CAC/B,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAOD,SAAS,QAAQ,CAAC,MAAiB,EAAE,GAAW;IAC9C,OAAO,MAAM,CAAC,OAAO,CAAU,qDAAqD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;AACxG,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB,EAAE,GAAW,EAAE,KAAa;IAC9D,MAAM;SACH,OAAO,CACN,6GAA6G,CAC9G;SACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,KAAK,KAAK,wBAAwB;YAAE,MAAM,IAAI,2BAA2B,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QAE/G,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"migrate.js","sourceRoot":"","sources":["../../src/recording/migrate.ts"],"names":[],"mappings":"AAAA;;;0EAG0E;AAE1E,OAAO,EAAE,WAAW,EAAkB,MAAM,2BAA2B,CAAC;AACxE,OAAO,EAAE,wBAAwB,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAClC,IAAI,GAAG,6BAA6B,CAAC;IAC9C,KAAK,CAAS;IACd,QAAQ,CAAS;IAE1B,YAAY,KAAa,EAAE,QAAgB;QACzC,KAAK,CACH,oDAAoD,KAAK,wBAAwB,QAAQ,IAAI;YAC3F,4FAA4F;YAC5F,4BAA4B,CAC/B,CAAC;QACF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAOD,SAAS,QAAQ,CAAC,MAAiB,EAAE,GAAW;IAC9C,OAAO,MAAM,CAAC,OAAO,CAAU,qDAAqD,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;AACxG,CAAC;AAED,SAAS,SAAS,CAAC,MAAiB,EAAE,GAAW,EAAE,KAAa;IAC9D,MAAM;SACH,OAAO,CACN,6GAA6G,CAC9G;SACA,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,gBAAgB,CAAC,MAAiB;IAChD,OAAO,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;QAC7B,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAExB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAClD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC;YACtE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QAC3B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,WAAW,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,IAAI,KAAK,KAAK,wBAAwB;YAAE,MAAM,IAAI,2BAA2B,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;QAE/G,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/recording/reader.d.ts

@@ -1,11 +1,6 @@
 /**
- * Reads over the recording store — the replay path.
- *
- * `readRun` is deliberately the only read here: replay needs the whole run,
- * in order, with nothing summarised out. A caller wanting "just the last
- * call" or "just this tool's calls" can filter `readRun`'s result; a second
- * entry point that pre-filters would be a second place the ordering guarantee
- * has to be re-proven.
+ * The replay path. `readRun` is deliberately the only read — a pre-filtering entry point would be a
+ * second place the ordering guarantee has to be re-proven; callers filter its result instead.
  */
 import type { SqlDriver } from "../store/driver/driver.ts";
 import type { RunStamp, ToolCallRecord } from "./writer.ts";

package/dist/recording/reader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reader.d.ts","sourceRoot":"","sources":["../../src/recording/reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;CACzC;AA4CD,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CA4BjF"}
+{"version":3,"file":"reader.d.ts","sourceRoot":"","sources":["../../src/recording/reader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE5D,MAAM,WAAW,YAAa,SAAQ,cAAc;IAClD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;CACzC;AA4CD,oFAAoF;AACpF,wBAAgB,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,WAAW,GAAG,SAAS,CA4BjF"}

package/dist/recording/reader.js

@@ -1,11 +1,6 @@
 /**
- * Reads over the recording store — the replay path.
- *
- * `readRun` is deliberately the only read here: replay needs the whole run,
- * in order, with nothing summarised out. A caller wanting "just the last
- * call" or "just this tool's calls" can filter `readRun`'s result; a second
- * entry point that pre-filters would be a second place the ordering guarantee
- * has to be re-proven.
+ * The replay path. `readRun` is deliberately the only read — a pre-filtering entry point would be a
+ * second place the ordering guarantee has to be re-proven; callers filter its result instead.
  */
 import { isToolClass } from "@descryy/ir";
 function rowToCall(row) {

package/dist/recording/reader.js.map

@@ -1 +1 @@
-{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../src/recording/reader.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AA0C1D,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,GAAG,0BAA0B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,SAAS,GAAc,GAAG,CAAC,KAAK,CAAC;IACvC,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAY;QAC/C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAY;QACzC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,WAAW;KAC5B,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,OAAO,CAAC,MAAiB,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,MAAM;SACf,OAAO,CACN;yCACmC,CACpC;SACA,GAAG,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAExC,MAAM,IAAI,GAAG,MAAM;SAChB,OAAO,CACN;+DACyD,CAC1D;SACA,GAAG,CAAC,KAAK,CAAC,CAAC;IAEd,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,eAAe,EAAE,GAAG,CAAC,iBAAiB;SACvC;QACD,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;KAC3B,CAAC;AACJ,CAAC"}
+{"version":3,"file":"reader.js","sourceRoot":"","sources":["../../src/recording/reader.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAC;AA0C1D,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,wEAAwE;QACxE,yDAAyD;QACzD,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,GAAG,0BAA0B,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,SAAS,GAAc,GAAG,CAAC,KAAK,CAAC;IACvC,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,WAAW,EAAE,GAAG,CAAC,YAAY;QAC7B,KAAK,EAAE,SAAS;QAChB,SAAS,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAY;QAC/C,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAY;QACzC,UAAU,EAAE,GAAG,CAAC,WAAW;QAC3B,IAAI,EAAE,GAAG,CAAC,IAAI;QACd,UAAU,EAAE,GAAG,CAAC,WAAW;KAC5B,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,OAAO,CAAC,MAAiB,EAAE,KAAa;IACtD,MAAM,GAAG,GAAG,MAAM;SACf,OAAO,CACN;yCACmC,CACpC;SACA,GAAG,CAAC,KAAK,CAAC,CAAC;IACd,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAExC,MAAM,IAAI,GAAG,MAAM;SAChB,OAAO,CACN;+DACyD,CAC1D;SACA,GAAG,CAAC,KAAK,CAAC,CAAC;IAEd,OAAO;QACL,KAAK,EAAE,GAAG,CAAC,EAAE;QACb,SAAS,EAAE,GAAG,CAAC,UAAU;QACzB,KAAK,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,UAAU;YACzB,OAAO,EAAE,GAAG,CAAC,QAAQ;YACrB,eAAe,EAAE,GAAG,CAAC,iBAAiB;SACvC;QACD,aAAa,EAAE,GAAG,CAAC,cAAc;QACjC,OAAO,EAAE,GAAG,CAAC,QAAQ;QACrB,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;KAC3B,CAAC;AACJ,CAAC"}

package/dist/recording/redact.d.ts

@@ -1,63 +1,12 @@
 /**
- * A concrete implementation for `writer.ts`'s `RecordCallOptions.redact` seam.
- *
- * ## Why this exists
- *
- * `schema.ts` and `writer.ts`'s module headers both say the same thing: the
- * `redact` option is a documented seam, and until something is plugged into
- * it every row this store writes is exactly what the tool call carried,
- * including secrets. That was true because nothing in this repository ever
- * built a redactor — not because building one needs work outside this
- * repo's scope. This file is that redactor.
- *
- * ## Literal substring replacement, never a pattern
- *
- * Ported from descry-desktop's `packages/session/src/redact.ts`
- * (`redactSecrets`) — the model-client redaction seam's own implementation,
- * the one place in the four-repo split this logic already existed and was
- * already tested. That file's doc comment states the reason plainly and it
- * applies here unchanged: **a secret is arbitrary text and must never be
- * interpreted as a pattern.** A regex-based "looks like an API key" detector
- * is a recall play — it guesses, and a wrong guess either redacts real data
- * that was not a secret or misses a secret shaped unlike the pattern.
- * `CLAUDE.md`'s "precision over recall, when in doubt omit" applies to
- * redaction exactly as it applies to a graph edge: only redact a value the
- * caller can actually name as a secret.
- *
- * There is no shared package between `descry-core` and `descry-desktop`
- * today (DEC-001's four-repo split names no fifth "shared utilities" repo),
- * so this is a deliberate duplication of the minimal literal-substitution
- * logic rather than a new cross-repo dependency edge. If a third call site
- * needs this, that is the trigger to extract a shared package — not before.
- *
- * ## Why this is still opt-in, not automatic inside `recordCall`
- *
- * `recordCall` has no way to know, on its own, which strings in an
- * arbitrary `arguments`/`result` payload are secrets — that is exactly the
- * "arbitrary text, not a pattern" problem above. Only a caller holding the
- * deployment's actual configured secret values (an API key, a token, a DB
- * password) can supply that list, the same division of responsibility
- * `createPromptRedactor` uses on the model-client side. Wiring this
- * redactor into a live `recordCall` call site — the MCP server's tool
- * dispatch, or `descry-runtime`'s — with real configured secret values is
- * separate work (the same "P3, the tool boundary" wiring the module headers
- * already point at), not something this file can do for a caller that does
- * not exist yet in this repo.
+ * Concrete implementation for writer.ts's RecordCallOptions.redact seam. Literal substring replacement only, never a pattern-based detector — a secret is arbitrary text (precision over recall, per CLAUDE.md).
+ * Ported from descry-desktop's redact.ts rather than shared (DEC-001 names no fifth repo). Opt-in, not automatic — only a caller holding actual configured secret values can supply what to redact.
  */
 import type { ToolCallRecord } from "./writer.ts";
-/**
- * Replace every occurrence of each secret value in `text` with a fixed
- * marker. Literal substring replacement, not regex — see this file's module
- * header for why.
- */
+/** Replace every occurrence of each secret value in `text` with a fixed
+ *  marker. Literal substring replacement, not regex — see module header. */
 export declare function redactSecretsInText(text: string, secretValues: readonly string[]): string;
-/**
- * Builds a `redact` function for `recordCall`'s seam (`RecordCallOptions`),
- * given the secret values known at the call site — whatever the caller's own
- * configuration surface can name as sensitive. Walks both `arguments` and
- * `result` in full, since a secret passed in can just as easily be echoed
- * back in a tool's result (an error message quoting the bad input, for
- * instance) as it can appear in the arguments themselves.
- */
+/** Builds a redact function for recordCall's seam. Walks both arguments and
+ *  result in full — a secret can just as easily be echoed back in a result. */
 export declare function createRecordingRedactor(secretValues: readonly string[]): (call: ToolCallRecord) => ToolCallRecord;
 //# sourceMappingURL=redact.d.ts.map

package/dist/recording/redact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/recording/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAOzF;AAsBD;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,CAAC,IAAI,EAAE,cAAc,KAAK,cAAc,CAM1C"}
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/recording/redact.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAIlD;4EAC4E;AAC5E,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAOzF;AAiBD;+EAC+E;AAC/E,wBAAgB,uBAAuB,CACrC,YAAY,EAAE,SAAS,MAAM,EAAE,GAC9B,CAAC,IAAI,EAAE,cAAc,KAAK,cAAc,CAM1C"}

package/dist/recording/redact.js

@@ -1,55 +1,10 @@
 /**
- * A concrete implementation for `writer.ts`'s `RecordCallOptions.redact` seam.
- *
- * ## Why this exists
- *
- * `schema.ts` and `writer.ts`'s module headers both say the same thing: the
- * `redact` option is a documented seam, and until something is plugged into
- * it every row this store writes is exactly what the tool call carried,
- * including secrets. That was true because nothing in this repository ever
- * built a redactor — not because building one needs work outside this
- * repo's scope. This file is that redactor.
- *
- * ## Literal substring replacement, never a pattern
- *
- * Ported from descry-desktop's `packages/session/src/redact.ts`
- * (`redactSecrets`) — the model-client redaction seam's own implementation,
- * the one place in the four-repo split this logic already existed and was
- * already tested. That file's doc comment states the reason plainly and it
- * applies here unchanged: **a secret is arbitrary text and must never be
- * interpreted as a pattern.** A regex-based "looks like an API key" detector
- * is a recall play — it guesses, and a wrong guess either redacts real data
- * that was not a secret or misses a secret shaped unlike the pattern.
- * `CLAUDE.md`'s "precision over recall, when in doubt omit" applies to
- * redaction exactly as it applies to a graph edge: only redact a value the
- * caller can actually name as a secret.
- *
- * There is no shared package between `descry-core` and `descry-desktop`
- * today (DEC-001's four-repo split names no fifth "shared utilities" repo),
- * so this is a deliberate duplication of the minimal literal-substitution
- * logic rather than a new cross-repo dependency edge. If a third call site
- * needs this, that is the trigger to extract a shared package — not before.
- *
- * ## Why this is still opt-in, not automatic inside `recordCall`
- *
- * `recordCall` has no way to know, on its own, which strings in an
- * arbitrary `arguments`/`result` payload are secrets — that is exactly the
- * "arbitrary text, not a pattern" problem above. Only a caller holding the
- * deployment's actual configured secret values (an API key, a token, a DB
- * password) can supply that list, the same division of responsibility
- * `createPromptRedactor` uses on the model-client side. Wiring this
- * redactor into a live `recordCall` call site — the MCP server's tool
- * dispatch, or `descry-runtime`'s — with real configured secret values is
- * separate work (the same "P3, the tool boundary" wiring the module headers
- * already point at), not something this file can do for a caller that does
- * not exist yet in this repo.
+ * Concrete implementation for writer.ts's RecordCallOptions.redact seam. Literal substring replacement only, never a pattern-based detector — a secret is arbitrary text (precision over recall, per CLAUDE.md).
+ * Ported from descry-desktop's redact.ts rather than shared (DEC-001 names no fifth repo). Opt-in, not automatic — only a caller holding actual configured secret values can supply what to redact.
  */
 const REDACTED = "[REDACTED]";
-/**
- * Replace every occurrence of each secret value in `text` with a fixed
- * marker. Literal substring replacement, not regex — see this file's module
- * header for why.
- */
+/** Replace every occurrence of each secret value in `text` with a fixed
+ *  marker. Literal substring replacement, not regex — see module header. */
 export function redactSecretsInText(text, secretValues) {
     let result = text;
     for (const value of secretValues) {
@@ -59,13 +14,8 @@ export function redactSecretsInText(text, secretValues) {
     }
     return result;
 }
-/**
- * Walks arbitrary JSON-shaped data — exactly what `ToolCallRecord.arguments`
- * and `.result` are typed as (`unknown`) — replacing every string leaf via
- * `redactSecretsInText`. Non-string leaves (numbers, booleans, null) pass
- * through untouched: a secret value the caller supplied is text, by
- * definition, so there is nothing to compare a number against.
- */
+/** Walks arbitrary JSON-shaped data, redacting every string leaf. Non-string
+ *  leaves pass through — a secret value is text by definition. */
 function redactDeep(value, secretValues) {
     if (typeof value === "string")
         return redactSecretsInText(value, secretValues);
@@ -80,14 +30,8 @@ function redactDeep(value, secretValues) {
     }
     return value;
 }
-/**
- * Builds a `redact` function for `recordCall`'s seam (`RecordCallOptions`),
- * given the secret values known at the call site — whatever the caller's own
- * configuration surface can name as sensitive. Walks both `arguments` and
- * `result` in full, since a secret passed in can just as easily be echoed
- * back in a tool's result (an error message quoting the bad input, for
- * instance) as it can appear in the arguments themselves.
- */
+/** Builds a redact function for recordCall's seam. Walks both arguments and
+ *  result in full — a secret can just as easily be echoed back in a result. */
 export function createRecordingRedactor(secretValues) {
     return (call) => ({
         ...call,

package/dist/recording/redact.js.map

@@ -1 +1 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/recording/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAIH,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,YAA+B;IAC/E,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,gDAAgD;QAClF,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,KAAc,EAAE,YAA+B;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACrF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,YAA+B;IAE/B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,IAAI;QACP,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACnD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/recording/redact.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,MAAM,QAAQ,GAAG,YAAY,CAAC;AAE9B;4EAC4E;AAC5E,MAAM,UAAU,mBAAmB,CAAC,IAAY,EAAE,YAA+B;IAC/E,IAAI,MAAM,GAAG,IAAI,CAAC;IAClB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,gDAAgD;QAClF,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;kEACkE;AAClE,SAAS,UAAU,CAAC,KAAc,EAAE,YAA+B;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,mBAAmB,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,CAAC;IACrF,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;+EAC+E;AAC/E,MAAM,UAAU,uBAAuB,CACrC,YAA+B;IAE/B,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAChB,GAAG,IAAI;QACP,SAAS,EAAE,UAAU,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC;QACnD,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC;KAC9C,CAAC,CAAC;AACL,CAAC"}