@dewtech/dare-cli 3.6.0 → 3.8.0

package/dist/verification/gates/formal/dafny.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dafny.d.ts","sourceRoot":"","sources":["../../../../src/verification/gates/formal/dafny.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,gBAAgB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAMlE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAyCD,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,GAAG,UAAU,CA8Bb;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,EAAE,CAS9D;AAmDD,eAAO,MAAM,YAAY,EAAE,aAK1B,CAAC;AAEF,eAAO,MAAM,OAAO,eAAe,CAAC"}

package/dist/verification/gates/formal/dafny.js

@@ -0,0 +1,131 @@
+import { safeSpawn } from '../../../exec/safe-spawn.js';
+import { FormalBackendError, FormalToolNotFoundError } from './backend.js';
+const DAFNY_BIN = 'dafny';
+const MIN_VERSION = '4.0.0';
+function classifyStage(output) {
+    const lower = output.toLowerCase();
+    const hasSpec = /\brequires\b/.test(lower) ||
+        /precondition might not hold/.test(lower) ||
+        /precondition could not be proved/.test(lower);
+    const hasImpl = /\bensures\b/.test(lower) ||
+        /postcondition might not hold/.test(lower) ||
+        /postcondition could not be proved/.test(lower) ||
+        /assertion might not hold/.test(lower);
+    if (hasSpec && hasImpl)
+        return 'both';
+    if (hasSpec)
+        return 'spec';
+    if (hasImpl)
+        return 'impl';
+    return 'impl';
+}
+function extractStableReason(output) {
+    const lines = output.split(/\r?\n/);
+    const patterns = [
+        /postcondition might not hold/i,
+        /precondition might not hold/i,
+        /assertion might not hold/i,
+        /postcondition could not be proved/i,
+        /precondition could not be proved/i,
+        /(\d+) errors?\b/i,
+    ];
+    for (const line of lines) {
+        const trimmed = line.trim().replace(/\s+/g, ' ');
+        if (!trimmed)
+            continue;
+        for (const p of patterns) {
+            if (p.test(trimmed))
+                return trimmed.slice(0, 200);
+        }
+    }
+    const errCount = output.match(/(\d+) errors?\b/i);
+    if (errCount)
+        return `dafny: ${errCount[0]}`;
+    return 'dafny: proof rejected';
+}
+/** Parse Dafny stdout/stderr + exit code into a deterministic verdict core. */
+export function parseDafnyOutput(args) {
+    const combined = `${args.stdout}\n${args.stderr}`;
+    if (args.timedOut) {
+        return { verified: false, stage: 'none', reason: 'proof timed out' };
+    }
+    const errorMatch = combined.match(/(\d+) errors?\b/i);
+    const errorCount = errorMatch ? Number.parseInt(errorMatch[1] ?? '0', 10) : 0;
+    const hasProofFailure = errorCount > 0 ||
+        /assertion might not hold/i.test(combined) ||
+        /postcondition might not hold/i.test(combined) ||
+        /precondition might not hold/i.test(combined) ||
+        /postcondition could not be proved/i.test(combined) ||
+        /precondition could not be proved/i.test(combined);
+    if (hasProofFailure) {
+        return {
+            verified: false,
+            stage: classifyStage(combined),
+            reason: extractStableReason(combined),
+        };
+    }
+    if (args.code === 0 && /\bverified\b/i.test(combined)) {
+        return { verified: true, stage: 'none', reason: 'dafny: verified' };
+    }
+    return { verified: false, stage: 'none', reason: 'dafny: unparseable' };
+}
+export function buildDafnyArgv(input) {
+    return [
+        'verify',
+        input.specPath,
+        '--solver-path',
+        'z3',
+        '--verification-time-limit',
+        String(input.proofTimeoutSeconds),
+    ];
+}
+async function probeDafny(cwd) {
+    const r = await safeSpawn(DAFNY_BIN, ['--version'], {
+        cwd,
+        timeoutSeconds: 30,
+        maxChars: 2000,
+    });
+    return r.code === 0;
+}
+async function isAvailable(cwd) {
+    return probeDafny(cwd);
+}
+async function run(input) {
+    const start = Date.now();
+    if (!(await isAvailable(input.cwd))) {
+        throw new FormalToolNotFoundError('dafny');
+    }
+    const argv = buildDafnyArgv(input);
+    const r = await safeSpawn(DAFNY_BIN, argv, {
+        cwd: input.cwd,
+        timeoutSeconds: input.proofTimeoutSeconds,
+        maxChars: 8000,
+    });
+    const parse = parseDafnyOutput({
+        stdout: r.stdout,
+        stderr: r.stderr,
+        code: r.code,
+        timedOut: r.timedOut,
+    });
+    if (r.code !== 0 && !r.timedOut && parse.reason === 'dafny: unparseable') {
+        throw new FormalBackendError(`dafny exited ${r.code}`, r.stderr);
+    }
+    return {
+        backend: 'dafny',
+        verified: parse.verified,
+        stage: parse.stage,
+        bypassDetected: false,
+        repairIterations: 0,
+        solverExitCode: r.code,
+        reason: parse.reason,
+        durationMs: Date.now() - start,
+    };
+}
+export const dafnyBackend = {
+    backend: 'dafny',
+    minVersion: MIN_VERSION,
+    isAvailable,
+    run,
+};
+export const backend = dafnyBackend;
+//# sourceMappingURL=dafny.js.map

package/dist/verification/gates/formal/dafny.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dafny.js","sourceRoot":"","sources":["../../../../src/verification/gates/formal/dafny.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGxD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE3E,MAAM,SAAS,GAAG,OAAO,CAAC;AAC1B,MAAM,WAAW,GAAG,OAAO,CAAC;AAQ5B,SAAS,aAAa,CAAC,MAAc;IACnC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,MAAM,OAAO,GACX,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1B,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC;QACzC,kCAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjD,MAAM,OAAO,GACX,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,8BAA8B,CAAC,IAAI,CAAC,KAAK,CAAC;QAC1C,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/C,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC;IACtC,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3B,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC;IAC3B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,mBAAmB,CAAC,MAAc;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG;QACf,+BAA+B;QAC/B,8BAA8B;QAC9B,2BAA2B;QAC3B,oCAAoC;QACpC,mCAAmC;QACnC,kBAAkB;KACnB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACjD,IAAI,CAAC,OAAO;YAAE,SAAS;QACvB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IAClD,IAAI,QAAQ;QAAE,OAAO,UAAU,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;IAElD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvE,CAAC;IAED,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACtD,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,eAAe,GACnB,UAAU,GAAG,CAAC;QACd,2BAA2B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC1C,+BAA+B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC9C,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAC7C,oCAAoC,CAAC,IAAI,CAAC,QAAQ,CAAC;QACnD,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAErD,IAAI,eAAe,EAAE,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,KAAK,EAAE,aAAa,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,mBAAmB,CAAC,QAAQ,CAAC;SACtC,CAAC;IACJ,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACtD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACtE,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAqB;IAClD,OAAO;QACL,QAAQ;QACR,KAAK,CAAC,QAAQ;QACd,eAAe;QACf,IAAI;QACJ,2BAA2B;QAC3B,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC;KAClC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QAClD,GAAG;QACH,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,KAAqB;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,IAAI,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE;QACzC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,KAAK,CAAC,mBAAmB;QACzC,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,gBAAgB,CAAC;QAC7B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;KACrB,CAAC,CAAC;IAEH,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACzE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC,CAAC,IAAI;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,WAAW;IACvB,WAAW;IACX,GAAG;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC"}

package/dist/verification/gates/formal/lean.d.ts

@@ -0,0 +1,17 @@
+import type { FormalStage } from '../../types.js';
+import type { FormalBackend, FormalRunInput } from './backend.js';
+export interface LeanParse {
+    readonly verified: boolean;
+    readonly stage: FormalStage;
+    readonly reason: string;
+}
+export declare function parseLeanOutput(args: {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly code: number;
+    readonly timedOut: boolean;
+}): LeanParse;
+export declare function buildLeanArgv(input: FormalRunInput): string[];
+export declare const leanBackend: FormalBackend;
+export declare const backend: FormalBackend;
+//# sourceMappingURL=lean.d.ts.map

package/dist/verification/gates/formal/lean.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean.d.ts","sourceRoot":"","sources":["../../../../src/verification/gates/formal/lean.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,gBAAgB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAMlE,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,GAAG,SAAS,CAYZ;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,EAAE,CAE7D;AAqCD,eAAO,MAAM,WAAW,EAAE,aAKzB,CAAC;AAEF,eAAO,MAAM,OAAO,eAAc,CAAC"}

package/dist/verification/gates/formal/lean.js

@@ -0,0 +1,61 @@
+import { safeSpawn } from '../../../exec/safe-spawn.js';
+import { FormalBackendError, FormalToolNotFoundError } from './backend.js';
+const LAKE_BIN = 'lake';
+const MIN_VERSION = '4.0.0';
+export function parseLeanOutput(args) {
+    const combined = `${args.stdout}\n${args.stderr}`;
+    if (args.timedOut) {
+        return { verified: false, stage: 'none', reason: 'proof timed out' };
+    }
+    if (/\bsorry\b/i.test(combined) || /\berror:/i.test(combined)) {
+        return { verified: false, stage: 'impl', reason: 'lean: proof rejected' };
+    }
+    if (args.code === 0) {
+        return { verified: true, stage: 'none', reason: 'lean: verified' };
+    }
+    return { verified: false, stage: 'none', reason: 'lean: unparseable' };
+}
+export function buildLeanArgv(input) {
+    return ['env', 'lean', input.specPath];
+}
+async function isAvailable(cwd) {
+    const r = await safeSpawn(LAKE_BIN, ['--version'], {
+        cwd,
+        timeoutSeconds: 30,
+        maxChars: 2000,
+    });
+    return r.code === 0;
+}
+async function run(input) {
+    const start = Date.now();
+    if (!(await isAvailable(input.cwd))) {
+        throw new FormalToolNotFoundError('lean', input.target.file);
+    }
+    const r = await safeSpawn(LAKE_BIN, buildLeanArgv(input), {
+        cwd: input.cwd,
+        timeoutSeconds: input.proofTimeoutSeconds,
+        maxChars: 8000,
+    });
+    const parse = parseLeanOutput(r);
+    if (r.code !== 0 && !r.timedOut && parse.reason === 'lean: unparseable') {
+        throw new FormalBackendError(`lean exited ${r.code}`, r.stderr);
+    }
+    return {
+        backend: 'lean',
+        verified: parse.verified,
+        stage: parse.stage,
+        bypassDetected: false,
+        repairIterations: 0,
+        solverExitCode: r.code,
+        reason: parse.reason,
+        durationMs: Date.now() - start,
+    };
+}
+export const leanBackend = {
+    backend: 'lean',
+    minVersion: MIN_VERSION,
+    isAvailable,
+    run,
+};
+export const backend = leanBackend;
+//# sourceMappingURL=lean.js.map

package/dist/verification/gates/formal/lean.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lean.js","sourceRoot":"","sources":["../../../../src/verification/gates/formal/lean.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGxD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE3E,MAAM,QAAQ,GAAG,MAAM,CAAC;AACxB,MAAM,WAAW,GAAG,OAAO,CAAC;AAQ5B,MAAM,UAAU,eAAe,CAAC,IAK/B;IACC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvE,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IAC5E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACrE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAqB;IACjD,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;AACzC,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,CAAC,WAAW,CAAC,EAAE;QACjD,GAAG;QACH,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,KAAqB;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,uBAAuB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE;QACxD,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,KAAK,CAAC,mBAAmB;QACzC,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;QACxE,MAAM,IAAI,kBAAkB,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IAClE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC,CAAC,IAAI;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAkB;IACxC,OAAO,EAAE,MAAM;IACf,UAAU,EAAE,WAAW;IACvB,WAAW;IACX,GAAG;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,WAAW,CAAC"}

package/dist/verification/gates/formal/marker.d.ts

@@ -0,0 +1,15 @@
+import type { CriticalModuleMarker, FormalGateConfig } from '../../types.js';
+/**
+ * Une marcação por tag (@dare-formal no changedFiles) e por config
+ * (verification.formal.modules no formato "path::symbol"). Valida cada
+ * file com assertRelativeSafe (RS-01). Deduplica por (file, symbol).
+ *
+ * Pura sobre (cwd, changedFiles, config). Sem LLM, sem rede. readFile READ-ONLY.
+ * Pós: lista de alvos críticos; VAZIA ⇒ aspecto formal vira SKIP (O-03).
+ */
+export declare function resolveFormalTargets(args: {
+    readonly cwd: string;
+    readonly changedFiles: ReadonlyArray<string>;
+    readonly config: FormalGateConfig;
+}): Promise<ReadonlyArray<CriticalModuleMarker>>;
+//# sourceMappingURL=marker.d.ts.map

package/dist/verification/gates/formal/marker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"marker.d.ts","sourceRoot":"","sources":["../../../../src/verification/gates/formal/marker.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AA8B7E;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC,GAAG,OAAO,CAAC,aAAa,CAAC,oBAAoB,CAAC,CAAC,CAsC/C"}

package/dist/verification/gates/formal/marker.js

@@ -0,0 +1,73 @@
+import fs from 'fs-extra';
+import path from 'node:path';
+import { assertRelativeSafe } from '../../../utils/path-safety.js';
+/** Tag de marcação no código-fonte (A-11). Aceita `@dare-formal` e `@dare-formal: <symbol>`. */
+const FORMAL_TAG = /@dare-formal(?::\s*([A-Za-z_$][\w$]*))?/;
+/** Captura o nome de função/método na linha (ou nas próximas) após a tag. */
+const SYMBOL_NEAR = /\b(?:function|async function|class)\s+([A-Za-z_$][\w$]*)|\b([A-Za-z_$][\w$]*)\s*(?:=\s*(?:async\s*)?\(|\()/;
+function markerKey(file, symbol) {
+    return `${file}::${symbol ?? '*'}`;
+}
+function parseConfigModule(entry) {
+    const sep = entry.indexOf('::');
+    if (sep === -1)
+        return { file: entry.trim() };
+    return {
+        file: entry.slice(0, sep).trim(),
+        symbol: entry.slice(sep + 2).trim() || undefined,
+    };
+}
+function extractSymbolNear(lines, startIndex) {
+    for (let i = startIndex; i < Math.min(lines.length, startIndex + 4); i++) {
+        const match = lines[i]?.match(SYMBOL_NEAR);
+        if (match)
+            return match[1] ?? match[2];
+    }
+    return undefined;
+}
+/**
+ * Une marcação por tag (@dare-formal no changedFiles) e por config
+ * (verification.formal.modules no formato "path::symbol"). Valida cada
+ * file com assertRelativeSafe (RS-01). Deduplica por (file, symbol).
+ *
+ * Pura sobre (cwd, changedFiles, config). Sem LLM, sem rede. readFile READ-ONLY.
+ * Pós: lista de alvos críticos; VAZIA ⇒ aspecto formal vira SKIP (O-03).
+ */
+export async function resolveFormalTargets(args) {
+    const seen = new Set();
+    const out = [];
+    const push = (marker) => {
+        const key = markerKey(marker.file, marker.symbol);
+        if (seen.has(key))
+            return;
+        seen.add(key);
+        out.push(marker);
+    };
+    for (const entry of args.config.modules) {
+        const { file, symbol } = parseConfigModule(entry);
+        assertRelativeSafe(file);
+        push({ file, symbol, source: 'config' });
+    }
+    for (const rel of args.changedFiles) {
+        assertRelativeSafe(rel);
+        const abs = path.resolve(args.cwd, rel);
+        let content;
+        try {
+            content = await fs.readFile(abs, 'utf8');
+        }
+        catch {
+            continue;
+        }
+        const lines = content.split(/\r?\n/);
+        for (let i = 0; i < lines.length; i++) {
+            const tagMatch = lines[i]?.match(FORMAL_TAG);
+            if (!tagMatch)
+                continue;
+            const explicit = tagMatch[1];
+            const symbol = explicit ?? extractSymbolNear(lines, i);
+            push({ file: rel, symbol, source: 'tag' });
+        }
+    }
+    return Object.freeze(out);
+}
+//# sourceMappingURL=marker.js.map

package/dist/verification/gates/formal/marker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"marker.js","sourceRoot":"","sources":["../../../../src/verification/gates/formal/marker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,UAAU,CAAC;AAC1B,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAGnE,gGAAgG;AAChG,MAAM,UAAU,GAAG,yCAAyC,CAAC;AAE7D,6EAA6E;AAC7E,MAAM,WAAW,GACf,4GAA4G,CAAC;AAE/G,SAAS,SAAS,CAAC,IAAY,EAAE,MAAe;IAC9C,OAAO,GAAG,IAAI,KAAK,MAAM,IAAI,GAAG,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAa;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC9C,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE;QAChC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAe,EAAE,UAAkB;IAC5D,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QACzE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC;QAC3C,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAI1C;IACC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAA2B,EAAE,CAAC;IAEvC,MAAM,IAAI,GAAG,CAAC,MAA4B,EAAQ,EAAE;QAClD,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClD,kBAAkB,CAAC,IAAI,CAAC,CAAC;QACzB,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACpC,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QACxC,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;YAC7C,IAAI,CAAC,QAAQ;gBAAE,SAAS;YACxB,MAAM,QAAQ,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,MAAM,GAAG,QAAQ,IAAI,iBAAiB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YACvD,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC5B,CAAC"}

package/dist/verification/gates/formal/registry.d.ts

@@ -0,0 +1,7 @@
+import type { FormalGateConfig } from '../../types.js';
+import type { FormalBackend } from './backend.js';
+/** Resolve o backend formal por config; lazy-load por import(). throws UnknownFormalBackendError. */
+export declare function backendForConfig(cfg: FormalGateConfig): Promise<FormalBackend>;
+/** Todos os backends registrados (carrega cada módulo no máximo uma vez). */
+export declare function listFormalBackends(): Promise<ReadonlyArray<FormalBackend>>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/verification/gates/formal/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../../src/verification/gates/formal/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAoC,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAyBlD,qGAAqG;AACrG,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC,CAKpF;AAED,6EAA6E;AAC7E,wBAAsB,kBAAkB,IAAI,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAEhF"}

package/dist/verification/gates/formal/registry.js

@@ -0,0 +1,31 @@
+import { UnknownFormalBackendError } from './backend.js';
+const BACKEND_LOADERS = {
+    dafny: async () => (await import('./dafny.js')).backend,
+    verus: async () => (await import('./verus.js')).backend,
+    lean: async () => (await import('./lean.js')).backend,
+};
+const BACKEND_ORDER = ['dafny', 'verus', 'lean'];
+const backendCache = new Map();
+async function loadBackend(id) {
+    const cached = backendCache.get(id);
+    if (cached)
+        return cached;
+    const loader = BACKEND_LOADERS[id];
+    if (!loader)
+        throw new UnknownFormalBackendError(String(id));
+    const loaded = await loader();
+    backendCache.set(id, loaded);
+    return loaded;
+}
+/** Resolve o backend formal por config; lazy-load por import(). throws UnknownFormalBackendError. */
+export async function backendForConfig(cfg) {
+    if (!(cfg.backend in BACKEND_LOADERS)) {
+        throw new UnknownFormalBackendError(String(cfg.backend));
+    }
+    return loadBackend(cfg.backend);
+}
+/** Todos os backends registrados (carrega cada módulo no máximo uma vez). */
+export async function listFormalBackends() {
+    return Promise.all(BACKEND_ORDER.map((id) => loadBackend(id)));
+}
+//# sourceMappingURL=registry.js.map

package/dist/verification/gates/formal/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../../src/verification/gates/formal/registry.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,yBAAyB,EAAE,MAAM,cAAc,CAAC;AAEzD,MAAM,eAAe,GAEjB;IACF,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO;IACvD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO;IACvD,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;CACtD,CAAC;AAEF,MAAM,aAAa,GAAmC,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;AAEjF,MAAM,YAAY,GAAG,IAAI,GAAG,EAAkC,CAAC;AAE/D,KAAK,UAAU,WAAW,CAAC,EAAmB;IAC5C,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,MAAM,MAAM,EAAE,CAAC;IAC9B,YAAY,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qGAAqG;AACrG,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAqB;IAC1D,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,eAAe,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,yBAAyB,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,OAAO,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/verification/gates/formal/runner.d.ts

@@ -0,0 +1,31 @@
+import type { AspectResult, FormalGateConfig, FormalVerdict } from '../../types.js';
+import { resolveFormalTargets } from './marker.js';
+import { backendForConfig } from './registry.js';
+import { detectBypass } from './anti-bypass.js';
+export interface FormalRunnerDeps {
+    readonly resolveFormalTargets: typeof resolveFormalTargets;
+    readonly backendForConfig: typeof backendForConfig;
+    readonly detectBypass: typeof detectBypass;
+    readonly readSource: (cwd: string, relPath: string) => Promise<string>;
+    readonly persistFormalProof: (cwd: string, taskId: string, proof: FormalVerdict) => Promise<void>;
+}
+export declare const defaultFormalRunnerDeps: FormalRunnerDeps;
+/**
+ * Aspecto formal — marker → isAvailable → run → anti-bypass → AspectResult.
+ * Loop PREFACE NÃO roda aqui (A-8); a skill itera fora do CLI.
+ */
+export declare function createCheckFormal(deps?: Partial<FormalRunnerDeps>): (args: {
+    readonly taskId: string;
+    readonly stack: string;
+    readonly cwd: string;
+    readonly config: FormalGateConfig;
+    readonly changedFiles: ReadonlyArray<string>;
+}) => Promise<AspectResult>;
+export declare const checkFormal: (args: {
+    readonly taskId: string;
+    readonly stack: string;
+    readonly cwd: string;
+    readonly config: FormalGateConfig;
+    readonly changedFiles: ReadonlyArray<string>;
+}) => Promise<AspectResult>;
+//# sourceMappingURL=runner.d.ts.map

package/dist/verification/gates/formal/runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.d.ts","sourceRoot":"","sources":["../../../../src/verification/gates/formal/runner.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,YAAY,EAEZ,gBAAgB,EAChB,aAAa,EACd,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EACL,YAAY,EAEb,MAAM,kBAAkB,CAAC;AAmB1B,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,oBAAoB,EAAE,OAAO,oBAAoB,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,OAAO,gBAAgB,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,OAAO,YAAY,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,QAAQ,CAAC,kBAAkB,EAAE,CAC3B,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,aAAa,KACjB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB;AAED,eAAO,MAAM,uBAAuB,EAAE,gBAOrC,CAAC;AAsBF;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,GAAE,OAAO,CAAC,gBAAgB,CAAM,GACnC,CAAC,IAAI,EAAE;IACR,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C,KAAK,OAAO,CAAC,YAAY,CAAC,CA2F1B;AAED,eAAO,MAAM,WAAW,SAnGd;IACR,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC9C,KAAK,OAAO,CAAC,YAAY,CA6FoB,CAAC"}

package/dist/verification/gates/formal/runner.js

@@ -0,0 +1,118 @@
+import path from 'node:path';
+import fs from 'fs-extra';
+import { resolveFormalTargets } from './marker.js';
+import { backendForConfig } from './registry.js';
+import { detectBypass, formatBypassRejection, } from './anti-bypass.js';
+import { FormalToolNotFoundError } from './backend.js';
+const VERIFICATION_DIR = '.dare/verification';
+async function persistFormalProof(cwd, taskId, proof) {
+    const file = path.join(cwd, VERIFICATION_DIR, `${taskId}.json`);
+    await fs.ensureDir(path.dirname(file));
+    const prev = (await fs.pathExists(file))
+        ? (await fs.readJson(file))
+        : {};
+    await fs.writeJson(file, { ...prev, formalProof: proof }, { spaces: 2 });
+}
+export const defaultFormalRunnerDeps = {
+    resolveFormalTargets,
+    backendForConfig,
+    detectBypass,
+    readSource: async (cwd, relPath) => fs.readFile(path.resolve(cwd, relPath), 'utf8'),
+    persistFormalProof,
+};
+function targetLabel(marker) {
+    return marker.symbol ? `${marker.file}::${marker.symbol}` : marker.file;
+}
+function formalRunInput(taskId, cwd, target, proofTimeoutSeconds) {
+    const specPath = path.join('EXECUTION', `${taskId}.formal`, 'spec.dfy');
+    return {
+        cwd,
+        target,
+        specPath,
+        implPath: target.file,
+        proofTimeoutSeconds,
+    };
+}
+/**
+ * Aspecto formal — marker → isAvailable → run → anti-bypass → AspectResult.
+ * Loop PREFACE NÃO roda aqui (A-8); a skill itera fora do CLI.
+ */
+export function createCheckFormal(deps = {}) {
+    const d = { ...defaultFormalRunnerDeps, ...deps };
+    return async function checkFormal(args) {
+        const start = Date.now();
+        const targets = await d.resolveFormalTargets({
+            cwd: args.cwd,
+            changedFiles: args.changedFiles,
+            config: args.config,
+        });
+        if (targets.length === 0) {
+            return {
+                aspect: 'formal',
+                verdict: 'SKIP',
+                reason: 'no marked module',
+                durationMs: Date.now() - start,
+            };
+        }
+        const backend = await d.backendForConfig(args.config);
+        const available = await backend.isAvailable(args.cwd);
+        if (!available) {
+            throw new FormalToolNotFoundError(backend.backend, targetLabel(targets[0]));
+        }
+        let lastVerdict;
+        let failReason;
+        for (const target of targets) {
+            const input = formalRunInput(args.taskId, args.cwd, target, args.config.proofTimeoutSeconds);
+            const verdict = await backend.run(input);
+            let specSource = '';
+            let implSource = '';
+            try {
+                specSource = await d.readSource(args.cwd, input.specPath);
+            }
+            catch {
+                specSource = '';
+            }
+            try {
+                implSource = await d.readSource(args.cwd, input.implPath);
+            }
+            catch {
+                implSource = '';
+            }
+            const solverPassed = verdict.verified;
+            const bypass = args.config.antiBypass
+                ? d.detectBypass({ specSource, implSource })
+                : { bypassDetected: false, pattern: undefined };
+            const verified = solverPassed && !bypass.bypassDetected;
+            const finalVerdict = {
+                ...verdict,
+                verified,
+                bypassDetected: bypass.bypassDetected,
+            };
+            await d.persistFormalProof(args.cwd, args.taskId, finalVerdict);
+            lastVerdict = finalVerdict;
+            if (!verified) {
+                failReason = bypass.bypassDetected
+                    ? formatBypassRejection(targetLabel(target), bypass.pattern ?? 'unknown')
+                    : finalVerdict.reason;
+                break;
+            }
+        }
+        const durationMs = Date.now() - start;
+        if (lastVerdict?.verified) {
+            return {
+                aspect: 'formal',
+                verdict: 'PASS',
+                reason: lastVerdict.reason,
+                durationMs,
+            };
+        }
+        return {
+            aspect: 'formal',
+            verdict: 'FAIL',
+            reason: failReason ?? lastVerdict?.reason ?? 'formal verification failed',
+            durationMs,
+        };
+    };
+}
+export const checkFormal = createCheckFormal();
+//# sourceMappingURL=runner.js.map

package/dist/verification/gates/formal/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../../src/verification/gates/formal/runner.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,UAAU,CAAC;AAO1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EACL,YAAY,EACZ,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAEvD,MAAM,gBAAgB,GAAG,oBAAoB,CAAC;AAE9C,KAAK,UAAU,kBAAkB,CAC/B,GAAW,EACX,MAAc,EACd,KAAoB;IAEpB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC;IAChE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC,CAAE,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAA6B;QACxD,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AAC3E,CAAC;AAcD,MAAM,CAAC,MAAM,uBAAuB,GAAqB;IACvD,oBAAoB;IACpB,gBAAgB;IAChB,YAAY;IACZ,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CACjC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjD,kBAAkB;CACnB,CAAC;AAEF,SAAS,WAAW,CAAC,MAA4B;IAC/C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED,SAAS,cAAc,CACrB,MAAc,EACd,GAAW,EACX,MAA4B,EAC5B,mBAA2B;IAE3B,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,SAAS,EAAE,UAAU,CAAC,CAAC;IACxE,OAAO;QACL,GAAG;QACH,MAAM;QACN,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,IAAI;QACrB,mBAAmB;KACpB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAkC,EAAE;IAQpC,MAAM,CAAC,GAAqB,EAAE,GAAG,uBAAuB,EAAE,GAAG,IAAI,EAAE,CAAC;IAEpE,OAAO,KAAK,UAAU,WAAW,CAAC,IAAI;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,oBAAoB,CAAC;YAC3C,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEH,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,kBAAkB;gBAC1B,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;aAC/B,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAkB,MAAM,CAAC,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrE,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,WAAsC,CAAC;QAC3C,IAAI,UAA8B,CAAC;QAEnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,cAAc,CAC1B,IAAI,CAAC,MAAM,EACX,IAAI,CAAC,GAAG,EACR,MAAM,EACN,IAAI,CAAC,MAAM,CAAC,mBAAmB,CAChC,CAAC;YACF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAEzC,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,UAAU,GAAG,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,EAAE,CAAC;YAClB,CAAC;YACD,IAAI,CAAC;gBACH,UAAU,GAAG,MAAM,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,UAAU,GAAG,EAAE,CAAC;YAClB,CAAC;YAED,MAAM,YAAY,GAAG,OAAO,CAAC,QAAQ,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,UAAU;gBACnC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;gBAC5C,CAAC,CAAC,EAAE,cAAc,EAAE,KAAc,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC3D,MAAM,QAAQ,GAAG,YAAY,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;YACxD,MAAM,YAAY,GAAkB;gBAClC,GAAG,OAAO;gBACV,QAAQ;gBACR,cAAc,EAAE,MAAM,CAAC,cAAc;aACtC,CAAC;YAEF,MAAM,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAChE,WAAW,GAAG,YAAY,CAAC;YAE3B,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,UAAU,GAAG,MAAM,CAAC,cAAc;oBAChC,CAAC,CAAC,qBAAqB,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,OAAO,IAAI,SAAS,CAAC;oBACzE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC;gBACxB,MAAM;YACR,CAAC;QACH,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QAEtC,IAAI,WAAW,EAAE,QAAQ,EAAE,CAAC;YAC1B,OAAO;gBACL,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,MAAM;gBACf,MAAM,EAAE,WAAW,CAAC,MAAM;gBAC1B,UAAU;aACX,CAAC;QACJ,CAAC;QAED,OAAO;YACL,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,UAAU,IAAI,WAAW,EAAE,MAAM,IAAI,4BAA4B;YACzE,UAAU;SACX,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,WAAW,GAAG,iBAAiB,EAAE,CAAC"}

package/dist/verification/gates/formal/verus.d.ts

@@ -0,0 +1,17 @@
+import type { FormalStage } from '../../types.js';
+import type { FormalBackend, FormalRunInput } from './backend.js';
+export interface VerusParse {
+    readonly verified: boolean;
+    readonly stage: FormalStage;
+    readonly reason: string;
+}
+export declare function parseVerusOutput(args: {
+    readonly stdout: string;
+    readonly stderr: string;
+    readonly code: number;
+    readonly timedOut: boolean;
+}): VerusParse;
+export declare function buildVerusArgv(input: FormalRunInput): string[];
+export declare const verusBackend: FormalBackend;
+export declare const backend: FormalBackend;
+//# sourceMappingURL=verus.d.ts.map

package/dist/verification/gates/formal/verus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verus.d.ts","sourceRoot":"","sources":["../../../../src/verification/gates/formal/verus.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAiB,MAAM,gBAAgB,CAAC;AACjE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAMlE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,GAAG,UAAU,CAkBb;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,cAAc,GAAG,MAAM,EAAE,CAE9D;AAqCD,eAAO,MAAM,YAAY,EAAE,aAK1B,CAAC;AAEF,eAAO,MAAM,OAAO,eAAe,CAAC"}

package/dist/verification/gates/formal/verus.js

@@ -0,0 +1,65 @@
+import { safeSpawn } from '../../../exec/safe-spawn.js';
+import { FormalBackendError, FormalToolNotFoundError } from './backend.js';
+const VERUS_BIN = 'verus';
+const MIN_VERSION = '0.0.0';
+export function parseVerusOutput(args) {
+    const combined = `${args.stdout}\n${args.stderr}`;
+    if (args.timedOut) {
+        return { verified: false, stage: 'none', reason: 'proof timed out' };
+    }
+    const verifiedMatch = /verification results:\s*(\d+)\s+verified,\s*0\s+errors/i.exec(combined);
+    if (args.code === 0 && verifiedMatch) {
+        return { verified: true, stage: 'none', reason: 'verus: verified' };
+    }
+    if (/\berror\b/i.test(combined) || /\bfailed\b/i.test(combined)) {
+        return { verified: false, stage: 'impl', reason: 'verus: proof rejected' };
+    }
+    if (args.code !== 0) {
+        return { verified: false, stage: 'none', reason: 'verus: unparseable' };
+    }
+    return { verified: false, stage: 'none', reason: 'verus: unparseable' };
+}
+export function buildVerusArgv(input) {
+    return [input.specPath, '--time-limit', String(input.proofTimeoutSeconds)];
+}
+async function isAvailable(cwd) {
+    const r = await safeSpawn(VERUS_BIN, ['--version'], {
+        cwd,
+        timeoutSeconds: 30,
+        maxChars: 2000,
+    });
+    return r.code === 0;
+}
+async function run(input) {
+    const start = Date.now();
+    if (!(await isAvailable(input.cwd))) {
+        throw new FormalToolNotFoundError('verus', input.target.file);
+    }
+    const r = await safeSpawn(VERUS_BIN, buildVerusArgv(input), {
+        cwd: input.cwd,
+        timeoutSeconds: input.proofTimeoutSeconds,
+        maxChars: 8000,
+    });
+    const parse = parseVerusOutput(r);
+    if (r.code !== 0 && !r.timedOut && parse.reason === 'verus: unparseable') {
+        throw new FormalBackendError(`verus exited ${r.code}`, r.stderr);
+    }
+    return {
+        backend: 'verus',
+        verified: parse.verified,
+        stage: parse.stage,
+        bypassDetected: false,
+        repairIterations: 0,
+        solverExitCode: r.code,
+        reason: parse.reason,
+        durationMs: Date.now() - start,
+    };
+}
+export const verusBackend = {
+    backend: 'verus',
+    minVersion: MIN_VERSION,
+    isAvailable,
+    run,
+};
+export const backend = verusBackend;
+//# sourceMappingURL=verus.js.map

package/dist/verification/gates/formal/verus.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verus.js","sourceRoot":"","sources":["../../../../src/verification/gates/formal/verus.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAGxD,OAAO,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAE3E,MAAM,SAAS,GAAG,OAAO,CAAC;AAC1B,MAAM,WAAW,GAAG,OAAO,CAAC;AAQ5B,MAAM,UAAU,gBAAgB,CAAC,IAKhC;IACC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,aAAa,GAAG,yDAAyD,CAAC,IAAI,CAClF,QAAQ,CACT,CAAC;IACF,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,aAAa,EAAE,CAAC;QACrC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACtE,CAAC;IACD,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;AAC1E,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,KAAqB;IAClD,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED,KAAK,UAAU,WAAW,CAAC,GAAW;IACpC,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,CAAC,WAAW,CAAC,EAAE;QAClD,GAAG;QACH,cAAc,EAAE,EAAE;QAClB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,OAAO,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,KAAqB;IACtC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,IAAI,CAAC,CAAC,MAAM,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,uBAAuB,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,SAAS,EAAE,cAAc,CAAC,KAAK,CAAC,EAAE;QAC1D,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,cAAc,EAAE,KAAK,CAAC,mBAAmB;QACzC,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;QACzE,MAAM,IAAI,kBAAkB,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACnE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,cAAc,EAAE,KAAK;QACrB,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,CAAC,CAAC,IAAI;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;KAC/B,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAkB;IACzC,OAAO,EAAE,OAAO;IAChB,UAAU,EAAE,WAAW;IACvB,WAAW;IACX,GAAG;CACJ,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC"}