@dzhechkov/harness-core 0.3.115 → 0.3.117

package/dist/challenge-panel.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Adversarial plan-gate — the challenge panel (feature challenge-panel-plan-gate, ADR-001).
+ *
+ * feature-adr's cross-model Codex QE (Step 8) bites AFTER the code is written. The most expensive mistakes
+ * (overengineering, silent decisions, cemented degradations, test-theater, unrealistic scope) cement at the
+ * PLAN stage. This module is the deterministic "cartridge": it assembles a WIDE context pack and emits a
+ * fixed C1-C8 "break it, don't confirm it" brief + a verdict schema. The LLM "shot" — a FRESH adversary that
+ * did NOT write the plan, plus a mandatory cross-validator — is fired by the `challenge-panel` SKILL.
+ *
+ * The set/brief/select/render functions are PURE + deterministic (sorted, no clock/random) so the same
+ * context yields a byte-identical brief; the assemble helper does disk I/O with TOP-LEVEL node:fs imports
+ * (harness-core is ESM — a lazy require() is undefined at runtime; the R1 footgun).
+ *
+ * SAFETY PROPERTIES (load-bearing, both named by the ADR and pinned by a test):
+ *   1. (ADR §1) `pickAdversaryModel` returns a family DIFFERENT from the plan author — the panel is never
+ *      the plan's own author (author bias). The врезка/skill honor this; the helper makes it testable.
+ *   2. (ADR §2) `buildChallengeBrief` inlines the WIDE context (vision + testing + map + degradations +
+ *      code hints when supplied) — narrow context = shallow findings (the archive's core lesson).
+ *   3. (ADR §3) C1 is degradation-registry-aware: deviating from a REGISTERED accepted degradation is NOT a
+ *      finding; and the gate is ADVISE — `confirmedVerdict` drops non-cross-validated P0/P1 (FP/theory),
+ *      nothing here auto-aborts.
+ */
+export type CId = 'C1' | 'C2' | 'C3' | 'C4' | 'C5' | 'C6' | 'C7' | 'C8';
+export type ChallengeSeverity = 'P0' | 'P1' | 'P2';
+export interface ChallengeQuestion {
+    readonly id: CId;
+    readonly title: string;
+    readonly prompt: string;
+}
+/**
+ * The fixed, DEPERSONALIZED owner-question set (FR-2). Frozen + generic — no product/vendor/section-number
+ * hardcode. Each is phrased in "break it, don't confirm it" mode. C1 is degradation-registry-aware.
+ */
+export declare const CHALLENGE_QUESTIONS: readonly ChallengeQuestion[];
+export interface ChallengeContext {
+    readonly plan: string;
+    readonly planPath: string;
+    readonly vision?: string;
+    readonly testing?: string;
+    readonly map?: string;
+    readonly degradations?: string;
+    readonly codeHints?: string;
+}
+/** JSON Schema for the panel's verdict — the skill forces the adversary to emit exactly this shape. */
+export declare const CHALLENGE_VERDICT_SCHEMA: object;
+export interface ChallengeFinding {
+    readonly c: CId;
+    readonly severity: ChallengeSeverity;
+    readonly title: string;
+    readonly why: string;
+    readonly where?: string;
+    readonly crossValidated?: boolean;
+}
+export interface Verdict {
+    readonly findings: readonly ChallengeFinding[];
+    readonly summary: string;
+}
+/**
+ * Assemble the WIDE context pack (FR-1). Impure I/O; NEVER throws — a missing plan yields an empty `plan`
+ * (the caller/CLI reports it), a missing calibration doc simply drops that field.
+ */
+export declare function assembleChallengeContext(repoRoot: string, planPath: string): ChallengeContext;
+/**
+ * PURE (FR-1/NFR-1): same context → byte-identical brief. Inlines the WIDE context (vision + testing + map +
+ * degradations + code hints when present) so the adversary reasons over the whole product, not a slice
+ * (ADR §2), and states the hard invariant + the "break it" mandate + the degradation-registry rule.
+ */
+export declare function buildChallengeBrief(ctx: ChallengeContext): string;
+/**
+ * Sanitize ONE raw finding (QE #10): reject anything whose `c`/`severity` is not a known enum value or
+ * whose required strings are missing — an out-of-enum finding NEVER survives to render/gate. Returns null
+ * for a bad finding so the caller drops it.
+ */
+export declare function sanitizeFinding(raw: unknown): ChallengeFinding | null;
+/**
+ * Validate a raw adversary payload into a Verdict (QE #7): a value without a `findings` ARRAY is NOT a
+ * verdict (returns null → the caller falls back LOUDLY, never a fake-clean empty verdict). Bad individual
+ * findings are dropped via sanitizeFinding; `summary` defaults to '' but the shape must be right.
+ */
+export declare function sanitizeVerdict(raw: unknown): Verdict | null;
+/** The P0/P1 findings that MUST be cross-validated before reaching the owner (FR-5). Sorted, deterministic. */
+export declare function findingsNeedingCrossValidation(v: Verdict): ChallengeFinding[];
+/**
+ * Drop non-cross-validated P0/P1 (FP/theory) — the anti-noise / advise-not-block property (ADR §3, FR-5).
+ * POSITIONAL, collision-free (QE #5/#6): `realFlags[i]` aligns to `findingsNeedingCrossValidation(v)[i]` —
+ * matching by INDEX, never by title, so two findings sharing a title can never cross-contaminate. A P0/P1
+ * survives ONLY when its flag is explicitly `true` (a missing/`false`/`undefined` flag ⇒ dropped — the
+ * anti-noise default: not-validated is treated as refuted). P2 pass through untouched. Deterministic sort.
+ */
+export declare function confirmedVerdict(v: Verdict, realFlags: readonly boolean[]): Verdict;
+/** Human surface, grouped by severity (FR-3). ADVISE — never an abort. PURE. */
+export declare function renderVerdict(v: Verdict): string;
+/**
+ * HARD INVARIANT (ADR §1, FR-4): pick an adversary model family DIFFERENT from the plan author's, so the
+ * panel is never the plan's own author (author bias). Claude author → Codex adversary; Codex author →
+ * a fresh Claude adversary. PURE — the врезка/skill call this and dispatch accordingly.
+ */
+export declare function pickAdversaryModel(plannerModel: string): {
+    model: string;
+    note: string;
+};
+/** Normalize a model id to a coarse family for the panel-≠-author invariant. */
+export declare function classifyModelFamily(model: string): 'claude' | 'openai' | 'unknown';
+//# sourceMappingURL=challenge-panel.d.ts.map

package/dist/challenge-panel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-panel.d.ts","sourceRoot":"","sources":["../src/challenge-panel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAKH,MAAM,MAAM,GAAG,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AACxE,MAAM,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAKnD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC;IACjB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAE,SAAS,iBAAiB,EAmE1D,CAAC;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,uGAAuG;AACvG,eAAO,MAAM,wBAAwB,EAAE,MAoBrC,CAAC;AAEH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;IAChB,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC;AAED,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,QAAQ,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAmBD;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAO7F;AA+CD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,CAsCjE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CASrE;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,GAAG,IAAI,CAM5D;AAED,+GAA+G;AAC/G,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAI7E;AASD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAQnF;AAED,gFAAgF;AAChF,wBAAgB,aAAa,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAoBhD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAMxF;AAED,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAKlF"}

package/dist/challenge-panel.js

@@ -0,0 +1,339 @@
+/**
+ * Adversarial plan-gate — the challenge panel (feature challenge-panel-plan-gate, ADR-001).
+ *
+ * feature-adr's cross-model Codex QE (Step 8) bites AFTER the code is written. The most expensive mistakes
+ * (overengineering, silent decisions, cemented degradations, test-theater, unrealistic scope) cement at the
+ * PLAN stage. This module is the deterministic "cartridge": it assembles a WIDE context pack and emits a
+ * fixed C1-C8 "break it, don't confirm it" brief + a verdict schema. The LLM "shot" — a FRESH adversary that
+ * did NOT write the plan, plus a mandatory cross-validator — is fired by the `challenge-panel` SKILL.
+ *
+ * The set/brief/select/render functions are PURE + deterministic (sorted, no clock/random) so the same
+ * context yields a byte-identical brief; the assemble helper does disk I/O with TOP-LEVEL node:fs imports
+ * (harness-core is ESM — a lazy require() is undefined at runtime; the R1 footgun).
+ *
+ * SAFETY PROPERTIES (load-bearing, both named by the ADR and pinned by a test):
+ *   1. (ADR §1) `pickAdversaryModel` returns a family DIFFERENT from the plan author — the panel is never
+ *      the plan's own author (author bias). The врезка/skill honor this; the helper makes it testable.
+ *   2. (ADR §2) `buildChallengeBrief` inlines the WIDE context (vision + testing + map + degradations +
+ *      code hints when supplied) — narrow context = shallow findings (the archive's core lesson).
+ *   3. (ADR §3) C1 is degradation-registry-aware: deviating from a REGISTERED accepted degradation is NOT a
+ *      finding; and the gate is ADVISE — `confirmedVerdict` drops non-cross-validated P0/P1 (FP/theory),
+ *      nothing here auto-aborts.
+ */
+import { existsSync, readFileSync, realpathSync } from 'node:fs';
+import { join, resolve, sep } from 'node:path';
+const SEV_RANK = { P0: 3, P1: 2, P2: 1 };
+const VALID_CID = new Set(['C1', 'C2', 'C3', 'C4', 'C5', 'C6', 'C7', 'C8']);
+const isValidSeverity = (s) => s === 'P0' || s === 'P1' || s === 'P2';
+/**
+ * The fixed, DEPERSONALIZED owner-question set (FR-2). Frozen + generic — no product/vendor/section-number
+ * hardcode. Each is phrased in "break it, don't confirm it" mode. C1 is degradation-registry-aware.
+ */
+export const CHALLENGE_QUESTIONS = Object.freeze([
+    Object.freeze({
+        id: 'C1',
+        title: 'Architecture anti-cement',
+        prompt: 'Does this plan cement a NEW bad pattern, a wrong boundary, or a shortcut that later work will be ' +
+            'forced to copy? Check it against the product map + vision. IMPORTANT: deviating from a pattern that ' +
+            'is REGISTERED in the accepted-degradations registry is NOT a finding — that debt is already owned. ' +
+            'A genuinely new degradation the plan introduces → name it and propose it for the registry.',
+    }),
+    Object.freeze({
+        id: 'C2',
+        title: 'Production-ready',
+        prompt: 'Where would this fall over in production? Missing error handling, unhandled failure modes, ' +
+            'resource leaks, missing observability, config/secret handling, migration/rollback. Name the ' +
+            'concrete input or condition that breaks it, not a general worry.',
+    }),
+    Object.freeze({
+        id: 'C3',
+        title: 'Test sufficiency + honesty (both ways)',
+        prompt: 'Attack the test plan from BOTH sides. Under-testing: which claim — especially a safety property the ' +
+            'ADR NAMES ("never X") — has no falsifying test? A test that cannot fail (a wrapper, a tautology, ' +
+            'asserting the mock) is not coverage. Over-testing: which tests are theater — restating the ' +
+            'implementation, testing the framework, brittle snapshots that verify nothing a user cares about?',
+    }),
+    Object.freeze({
+        id: 'C4',
+        title: 'Overengineering sweep',
+        prompt: 'What in this plan is built for a requirement nobody stated? Speculative generality, an abstraction ' +
+            'with one caller, a config knob no one asked for, a plugin seam for a single case. For each: what is ' +
+            'the simpler thing that meets the ACTUAL requirement?',
+    }),
+    Object.freeze({
+        id: 'C5',
+        title: 'Silent decisions',
+        prompt: 'Which load-bearing decisions did the plan make WITHOUT surfacing them as a decision? A default that ' +
+            'is really a policy, a chosen tradeoff presented as the only option, a dependency added in passing. ' +
+            'Each silent decision the owner did not get to refuse is a finding.',
+    }),
+    Object.freeze({
+        id: 'C6',
+        title: 'Runtime consistency',
+        prompt: 'Will this behave consistently with how the rest of the system already works — same error shape, ' +
+            'same config source, same module/ESM conventions, same logging, same naming? Point to the specific ' +
+            'existing convention the plan contradicts.',
+    }),
+    Object.freeze({
+        id: 'C7',
+        title: 'Scope',
+        prompt: 'Is the plan more than ~1.5× the size the request actually needs? If so, what is the concrete cut ' +
+            'list — which files/steps/abstractions to drop to hit the real requirement — and what is genuinely ' +
+            'load-bearing and must stay?',
+    }),
+    Object.freeze({
+        id: 'C8',
+        title: 'Executability',
+        prompt: 'Could an executor who is NOT the plan author complete every step without coming back to ask what was ' +
+            'meant? Find the steps that are under-specified, assume unstated context, or hide a research task ' +
+            'behind an imperative verb ("integrate X", "wire up Y") with no concrete how.',
+    }),
+]);
+/** JSON Schema for the panel's verdict — the skill forces the adversary to emit exactly this shape. */
+export const CHALLENGE_VERDICT_SCHEMA = Object.freeze({
+    type: 'object',
+    required: ['findings', 'summary'],
+    properties: {
+        findings: {
+            type: 'array',
+            items: {
+                type: 'object',
+                required: ['c', 'severity', 'title', 'why'],
+                properties: {
+                    c: { type: 'string', enum: ['C1', 'C2', 'C3', 'C4', 'C5', 'C6', 'C7', 'C8'] },
+                    severity: { type: 'string', enum: ['P0', 'P1', 'P2'] },
+                    title: { type: 'string' },
+                    why: { type: 'string', description: 'concrete failing input/condition, not a general worry' },
+                    where: { type: 'string', description: 'plan section / file:line if locatable' },
+                },
+            },
+        },
+        summary: { type: 'string' },
+    },
+});
+// Where architecture-layer calibration docs live (committed intent layer; inherits R1/R5 paths).
+// Module-local — the canonical exported constants live in feature-adr-setup.ts / architecture.ts.
+const CP_VISION = 'architecture/vision.md';
+const CP_TESTING = 'architecture/testing.md';
+const CP_MAP = 'architecture/map.json';
+const CP_DEGRADATIONS = 'architecture/degradations.md';
+const readIf = (p) => {
+    try {
+        if (!existsSync(p))
+            return undefined;
+        const t = readFileSync(p, 'utf8');
+        return t.trim() === '' ? undefined : t;
+    }
+    catch {
+        return undefined; // unreadable ⇒ run with less calibration, never error (FR-6)
+    }
+};
+/**
+ * Assemble the WIDE context pack (FR-1). Impure I/O; NEVER throws — a missing plan yields an empty `plan`
+ * (the caller/CLI reports it), a missing calibration doc simply drops that field.
+ */
+export function assembleChallengeContext(repoRoot, planPath) {
+    // Path containment (QE #12): `--plan ../../etc/passwd` must NOT read outside the repo. Resolve and require
+    // the plan to stay under repoRoot; an escaping path yields an empty plan (the caller reports "not found").
+    const rootAbs = resolve(repoRoot);
+    const absPlan = resolve(rootAbs, planPath);
+    const plan = containedRead(rootAbs, absPlan) ?? '';
+    return withCalibration({ plan, planPath }, repoRoot);
+}
+/**
+ * Read a file ONLY if it stays under repoRoot both lexically AND after resolving symlinks (QE #12): a `..`
+ * escape is blocked lexically, and a symlink inside the repo pointing OUT (e.g. `plan.md -> /etc/passwd`) is
+ * blocked by re-checking the realpath of both the file and the root. Returns undefined on any escape/error.
+ */
+function containedRead(rootAbs, absPath) {
+    if (absPath !== rootAbs && !absPath.startsWith(rootAbs + sep))
+        return undefined; // lexical `..` escape
+    if (!existsSync(absPath))
+        return undefined;
+    let realFile;
+    let realRoot;
+    try {
+        realFile = realpathSync(absPath);
+        realRoot = realpathSync(rootAbs);
+    }
+    catch {
+        return undefined; // broken/dangling symlink
+    }
+    if (realFile !== realRoot && !realFile.startsWith(realRoot + sep))
+        return undefined; // symlink escape
+    return readIf(realFile);
+}
+// exactOptionalPropertyTypes: build the optional fields by conditional spread (never assign `undefined`).
+// The calibration docs are containment-checked too (a symlinked `architecture/vision.md -> /etc/passwd` must
+// not leak either) — same realpath guard as the plan.
+function withCalibration(base, repoRoot) {
+    const rootAbs = resolve(repoRoot);
+    const readDoc = (rel) => containedRead(rootAbs, resolve(rootAbs, rel));
+    const vision = readDoc(CP_VISION);
+    const testing = readDoc(CP_TESTING);
+    const map = readDoc(CP_MAP);
+    const degradations = readDoc(CP_DEGRADATIONS);
+    return {
+        plan: base.plan,
+        planPath: base.planPath,
+        ...(vision === undefined ? {} : { vision }),
+        ...(testing === undefined ? {} : { testing }),
+        ...(map === undefined ? {} : { map }),
+        ...(degradations === undefined ? {} : { degradations }),
+        ...(base.codeHints === undefined ? {} : { codeHints: base.codeHints }),
+    };
+}
+const HR = '─'.repeat(72);
+const section = (title, body) => body === undefined ? `## ${title}\n(not provided — panel runs with less calibration)\n` : `## ${title}\n${body}\n`;
+/**
+ * PURE (FR-1/NFR-1): same context → byte-identical brief. Inlines the WIDE context (vision + testing + map +
+ * degradations + code hints when present) so the adversary reasons over the whole product, not a slice
+ * (ADR §2), and states the hard invariant + the "break it" mandate + the degradation-registry rule.
+ */
+export function buildChallengeBrief(ctx) {
+    const lines = [];
+    lines.push('# CHALLENGE PANEL — adversarial plan-gate');
+    lines.push('');
+    lines.push('You are a FRESH adversarial reviewer. You did NOT write this plan. Your job is to BREAK it, not to ' +
+        'confirm it — find the concrete way each answer fails, or state plainly that you could not. A finding ' +
+        'is a specific failing input/condition/omission, never a general worry. Every P0/P1 you raise will be ' +
+        'independently cross-validated, so do not pad — theory that cannot be reproduced will be dropped.');
+    lines.push('');
+    lines.push(HR);
+    lines.push(section('PLAN UNDER REVIEW (' + ctx.planPath + ')', ctx.plan === '' ? undefined : ctx.plan));
+    lines.push(section('PRODUCT VISION (boundaries + principles)', ctx.vision));
+    lines.push(section('TESTING POLICY (what "done" + honest tests mean here)', ctx.testing));
+    lines.push(section('PRODUCT MAP (subsystems + existing conventions)', ctx.map));
+    lines.push(section('ACCEPTED-DEGRADATIONS REGISTRY (deviating from THESE is NOT a finding)', ctx.degradations));
+    lines.push(section('CODE HINTS', ctx.codeHints));
+    lines.push(HR);
+    lines.push('');
+    lines.push('## Ask each question in "break it, don\'t confirm it" mode');
+    for (const q of CHALLENGE_QUESTIONS) {
+        lines.push('');
+        lines.push(`### ${q.id} — ${q.title}`);
+        lines.push(q.prompt);
+    }
+    lines.push('');
+    lines.push(HR);
+    lines.push('## Output');
+    lines.push('Return findings tagged by C-number with severity P0 (would ship a serious defect / cements bad ' +
+        'architecture), P1 (real gap, fix before code), or P2 (worth noting). For each: a concrete `why` ' +
+        '(the failing input/condition) and `where` if locatable. Then a one-paragraph `summary`. This gate ' +
+        'ADVISES — it does not block; the owner decides.');
+    lines.push('');
+    lines.push('Verdict JSON schema: ' + JSON.stringify(CHALLENGE_VERDICT_SCHEMA));
+    return lines.join('\n');
+}
+/**
+ * Sanitize ONE raw finding (QE #10): reject anything whose `c`/`severity` is not a known enum value or
+ * whose required strings are missing — an out-of-enum finding NEVER survives to render/gate. Returns null
+ * for a bad finding so the caller drops it.
+ */
+export function sanitizeFinding(raw) {
+    if (raw === null || typeof raw !== 'object')
+        return null;
+    const r = raw;
+    if (typeof r.c !== 'string' || !VALID_CID.has(r.c))
+        return null; // typeof-guard: a hostile {toString:null} must NOT throw
+    if (!isValidSeverity(r.severity))
+        return null;
+    if (typeof r.title !== 'string' || r.title === '')
+        return null;
+    if (typeof r.why !== 'string' || r.why === '')
+        return null;
+    const out = { c: r.c, severity: r.severity, title: r.title, why: r.why };
+    return typeof r.where === 'string' && r.where !== '' ? { ...out, where: r.where } : out;
+}
+/**
+ * Validate a raw adversary payload into a Verdict (QE #7): a value without a `findings` ARRAY is NOT a
+ * verdict (returns null → the caller falls back LOUDLY, never a fake-clean empty verdict). Bad individual
+ * findings are dropped via sanitizeFinding; `summary` defaults to '' but the shape must be right.
+ */
+export function sanitizeVerdict(raw) {
+    if (raw === null || typeof raw !== 'object')
+        return null;
+    const r = raw;
+    if (!Array.isArray(r.findings))
+        return null;
+    const findings = r.findings.map(sanitizeFinding).filter((f) => f !== null);
+    return { findings, summary: typeof r.summary === 'string' ? r.summary : '' };
+}
+/** The P0/P1 findings that MUST be cross-validated before reaching the owner (FR-5). Sorted, deterministic. */
+export function findingsNeedingCrossValidation(v) {
+    return [...v.findings]
+        .filter((f) => f.severity === 'P0' || f.severity === 'P1')
+        .sort(cmpFinding);
+}
+function cmpFinding(a, b) {
+    const s = SEV_RANK[b.severity] - SEV_RANK[a.severity];
+    if (s !== 0)
+        return s;
+    if (a.c !== b.c)
+        return a.c < b.c ? -1 : 1;
+    return a.title < b.title ? -1 : a.title > b.title ? 1 : 0;
+}
+/**
+ * Drop non-cross-validated P0/P1 (FP/theory) — the anti-noise / advise-not-block property (ADR §3, FR-5).
+ * POSITIONAL, collision-free (QE #5/#6): `realFlags[i]` aligns to `findingsNeedingCrossValidation(v)[i]` —
+ * matching by INDEX, never by title, so two findings sharing a title can never cross-contaminate. A P0/P1
+ * survives ONLY when its flag is explicitly `true` (a missing/`false`/`undefined` flag ⇒ dropped — the
+ * anti-noise default: not-validated is treated as refuted). P2 pass through untouched. Deterministic sort.
+ */
+export function confirmedVerdict(v, realFlags) {
+    const need = findingsNeedingCrossValidation(v);
+    const kept = v.findings.filter((f) => f.severity === 'P2');
+    need.forEach((f, i) => {
+        if (realFlags[i] === true)
+            kept.push({ ...f, crossValidated: true });
+    });
+    kept.sort(cmpFinding);
+    return { findings: kept, summary: v.summary };
+}
+/** Human surface, grouped by severity (FR-3). ADVISE — never an abort. PURE. */
+export function renderVerdict(v) {
+    if (v.findings.length === 0) {
+        return `Challenge panel: no cross-validated findings. ${v.summary}`.trim();
+    }
+    const byId = (s) => v.findings.filter((f) => f.severity === s).sort(cmpFinding);
+    const out = ['Challenge panel verdict (advisory — you decide):', ''];
+    for (const sev of ['P0', 'P1', 'P2']) {
+        const group = byId(sev);
+        if (group.length === 0)
+            continue;
+        out.push(`### ${sev} (${group.length})`);
+        for (const f of group) {
+            const cv = f.crossValidated ? ' ✓cross-validated' : '';
+            const where = f.where ? ` [${f.where}]` : '';
+            out.push(`- ${f.c} ${f.title}${where}${cv}`);
+            out.push(`  why: ${f.why}`);
+        }
+        out.push('');
+    }
+    out.push(v.summary);
+    return out.join('\n').trim();
+}
+/**
+ * HARD INVARIANT (ADR §1, FR-4): pick an adversary model family DIFFERENT from the plan author's, so the
+ * panel is never the plan's own author (author bias). Claude author → Codex adversary; Codex author →
+ * a fresh Claude adversary. PURE — the врезка/skill call this and dispatch accordingly.
+ */
+export function pickAdversaryModel(plannerModel) {
+    const fam = classifyModelFamily(plannerModel);
+    if (fam === 'claude')
+        return { model: 'codex', note: `plan authored on ${plannerModel} (Claude) → Codex adversary (cross-family)` };
+    if (fam === 'openai')
+        return { model: 'claude', note: `plan authored on ${plannerModel} (OpenAI/Codex) → fresh Claude adversary (cross-family)` };
+    // Unknown author family: default to a Claude adversary but say so — verify it is genuinely NOT the author's family.
+    return { model: 'claude', note: `plan author family UNKNOWN (${plannerModel}) → Claude adversary by default; verify it is cross-family before trusting the verdict` };
+}
+/** Normalize a model id to a coarse family for the panel-≠-author invariant. */
+export function classifyModelFamily(model) {
+    const m = String(model).toLowerCase();
+    if (/claude|opus|sonnet|haiku|fable/.test(m))
+        return 'claude';
+    if (/codex|gpt|openai|\bo[1-9]\b/.test(m))
+        return 'openai';
+    return 'unknown';
+}
+//# sourceMappingURL=challenge-panel.js.map

package/dist/challenge-panel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"challenge-panel.js","sourceRoot":"","sources":["../src/challenge-panel.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAI/C,MAAM,QAAQ,GAAsC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;AAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAS,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACpF,MAAM,eAAe,GAAG,CAAC,CAAU,EAA0B,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC;AAQvG;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAiC,MAAM,CAAC,MAAM,CAAC;IAC7E,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,0BAA0B;QACjC,MAAM,EACJ,mGAAmG;YACnG,sGAAsG;YACtG,qGAAqG;YACrG,4FAA4F;KAC/F,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,kBAAkB;QACzB,MAAM,EACJ,6FAA6F;YAC7F,8FAA8F;YAC9F,kEAAkE;KACrE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,wCAAwC;QAC/C,MAAM,EACJ,sGAAsG;YACtG,mGAAmG;YACnG,6FAA6F;YAC7F,kGAAkG;KACrG,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,uBAAuB;QAC9B,MAAM,EACJ,qGAAqG;YACrG,sGAAsG;YACtG,sDAAsD;KACzD,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,kBAAkB;QACzB,MAAM,EACJ,sGAAsG;YACtG,qGAAqG;YACrG,oEAAoE;KACvE,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,qBAAqB;QAC5B,MAAM,EACJ,kGAAkG;YAClG,oGAAoG;YACpG,2CAA2C;KAC9C,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,OAAO;QACd,MAAM,EACJ,mGAAmG;YACnG,oGAAoG;YACpG,6BAA6B;KAChC,CAAC;IACF,MAAM,CAAC,MAAM,CAAC;QACZ,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,eAAe;QACtB,MAAM,EACJ,uGAAuG;YACvG,mGAAmG;YACnG,8EAA8E;KACjF,CAAC;CACH,CAAC,CAAC;AAYH,uGAAuG;AACvG,MAAM,CAAC,MAAM,wBAAwB,GAAW,MAAM,CAAC,MAAM,CAAC;IAC5D,IAAI,EAAE,QAAQ;IACd,QAAQ,EAAE,CAAC,UAAU,EAAE,SAAS,CAAC;IACjC,UAAU,EAAE;QACV,QAAQ,EAAE;YACR,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,QAAQ,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,KAAK,CAAC;gBAC3C,UAAU,EAAE;oBACV,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;oBAC7E,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE;oBACtD,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;oBACzB,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uDAAuD,EAAE;oBAC7F,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,uCAAuC,EAAE;iBAChF;aACF;SACF;QACD,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;KAC5B;CACF,CAAC,CAAC;AAgBH,iGAAiG;AACjG,kGAAkG;AAClG,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAC3C,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,MAAM,MAAM,GAAG,uBAAuB,CAAC;AACvC,MAAM,eAAe,GAAG,8BAA8B,CAAC;AAEvD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAsB,EAAE;IAC/C,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,SAAS,CAAC;QACrC,MAAM,CAAC,GAAG,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,6DAA6D;IACjF,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CAAC,QAAgB,EAAE,QAAgB;IACzE,2GAA2G;IAC3G,2GAA2G;IAC3G,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC3C,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IACnD,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,SAAS,aAAa,CAAC,OAAe,EAAE,OAAe;IACrD,IAAI,OAAO,KAAK,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,GAAG,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,sBAAsB;IACvG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,QAAgB,CAAC;IACrB,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;QACjC,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC,CAAC,0BAA0B;IAC9C,CAAC;IACD,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,QAAQ,GAAG,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,iBAAiB;IACtG,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1B,CAAC;AAED,0GAA0G;AAC1G,6GAA6G;AAC7G,sDAAsD;AACtD,SAAS,eAAe,CAAC,IAAsB,EAAE,QAAgB;IAC/D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,GAAW,EAAsB,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;IACnG,MAAM,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAC9C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;QAC3C,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;QAC7C,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC;QACrC,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;QACvD,GAAG,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC1B,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,IAAwB,EAAU,EAAE,CAClE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,KAAK,uDAAuD,CAAC,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,IAAI,CAAC;AAErH;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAqB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;IACxD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CACR,qGAAqG;QACnG,uGAAuG;QACvG,uGAAuG;QACvG,kGAAkG,CACrG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,qBAAqB,GAAG,GAAG,CAAC,QAAQ,GAAG,GAAG,EAAE,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,0CAA0C,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC5E,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,uDAAuD,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1F,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,iDAAiD,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAChF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,wEAAwE,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IAChH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;IACjD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,4DAA4D,CAAC,CAAC;IACzE,KAAK,MAAM,CAAC,IAAI,mBAAmB,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxB,KAAK,CAAC,IAAI,CACR,iGAAiG;QAC/F,kGAAkG;QAClG,oGAAoG;QACpG,iDAAiD,CACpD,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,uBAAuB,GAAG,IAAI,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC,CAAC;IAC/E,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,yDAAyD;IAC1H,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE;QAAE,OAAO,IAAI,CAAC;IAC3D,MAAM,GAAG,GAAqB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC;IAClG,OAAO,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAC1F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAyB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAClG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AAC/E,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,8BAA8B,CAAC,CAAU;IACvD,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC;SACnB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC;SACzD,IAAI,CAAC,UAAU,CAAC,CAAC;AACtB,CAAC;AAED,SAAS,UAAU,CAAC,CAAmB,EAAE,CAAmB;IAC1D,MAAM,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IACtB,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAU,EAAE,SAA6B;IACxE,MAAM,IAAI,GAAG,8BAA8B,CAAC,CAAC,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAuB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACpB,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtB,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,CAAU;IACtC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,iDAAiD,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAoB,EAAsB,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACvH,MAAM,GAAG,GAAa,CAAC,kDAAkD,EAAE,EAAE,CAAC,CAAC;IAC/E,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAU,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;QACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACjC,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,KAAK,GAAG,EAAE,EAAE,CAAC,CAAC;YAC7C,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9B,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACpB,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,YAAoB;IACrD,MAAM,GAAG,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAC9C,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,YAAY,4CAA4C,EAAE,CAAC;IACpI,IAAI,GAAG,KAAK,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,YAAY,yDAAyD,EAAE,CAAC;IAClJ,oHAAoH;IACpH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,+BAA+B,YAAY,wFAAwF,EAAE,CAAC;AACxK,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,gCAAgC,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,IAAI,6BAA6B,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC3D,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/feature-adr-setup.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Guided feature-adr onboarding (feature guided-feature-adr-setup, ADR-001).
+ *
+ * The `configure-feature-adr` SKILL runs a short interview and fills a `SetupSpec`; `dz feature-adr-setup`
+ * scaffolds the project-awareness files from that spec — so a user configures feature-adr WITHOUT knowing
+ * any manifest schema ("complex inside, simple outside"). The plan/render/scaffold builders are PURE +
+ * deterministic (sorted, no clock/random); the scan helper does disk I/O with TOP-LEVEL node:fs (ESM).
+ *
+ * SAFETY PROPERTY (ADR-001 §2, load-bearing): `scaffoldFromSpec` NEVER emits a full overwrite of an existing
+ * file. A structured file (manifest / project-skills) is UNION-merged (existing content preserved); a prose
+ * doc (vision.md / testing.md) that already exists is left untouched (`unchanged`), never clobbered.
+ */
+import type { Subsystem, SubsystemManifest } from './architecture.js';
+import type { ProjectSkillManifest, ExtraSkill } from './project-skills.js';
+export interface VisionSpec {
+    readonly core: string;
+    readonly direction?: string;
+    readonly boundaries?: readonly string[];
+    readonly principles?: readonly string[];
+}
+export interface TestingSpec {
+    readonly commands?: readonly string[];
+    readonly doneDefinition?: string;
+    readonly gates?: readonly string[];
+}
+export type SubsystemSpec = Subsystem;
+export interface SetupSpec {
+    readonly vision?: VisionSpec;
+    readonly subsystems?: readonly SubsystemSpec[];
+    readonly testing?: TestingSpec;
+    /** critic: 'auto' ⇒ a generated project-critic skill; a path ⇒ that file. brand/impl-bar: a path. */
+    readonly roles?: Partial<Record<'critic' | 'brand' | 'impl-bar', string>>;
+    readonly extra?: readonly ExtraSkill[];
+    /** scaffold a starter `architecture/degradations.md` — the accepted-degradations registry the R6
+     *  challenge panel (C1) reads so it does not re-flag debt you already own. Create-if-absent. */
+    readonly degradations?: boolean;
+}
+export interface SetupScan {
+    readonly visionExists: boolean;
+    readonly manifestExists: boolean;
+    readonly projectSkillsExists: boolean;
+    readonly testingExists: boolean;
+    readonly packages: readonly string[];
+    readonly reviewCorpus: boolean;
+}
+export interface SetupPlan {
+    readonly exists: {
+        readonly vision: boolean;
+        readonly manifest: boolean;
+        readonly projectSkills: boolean;
+        readonly testing: boolean;
+    };
+    readonly discoveredPackages: readonly string[];
+    readonly hasReviewCorpus: boolean;
+    readonly missing: readonly string[];
+    readonly suggestions: readonly string[];
+}
+export interface ScaffoldFile {
+    readonly path: string;
+    readonly action: 'create' | 'augment' | 'unchanged';
+    readonly content: string;
+    readonly note?: string;
+}
+export interface ScaffoldResult {
+    readonly files: readonly ScaffoldFile[];
+}
+/** One existing on-disk file: `exists` distinguishes ABSENT from EXISTS-BUT-UNREADABLE (never clobber either). */
+export interface ExistingFile {
+    readonly exists: boolean;
+    readonly content?: string;
+}
+/** The existing files the scaffold compares against. */
+export interface ExistingScaffoldFiles {
+    readonly vision: ExistingFile;
+    readonly manifest: ExistingFile;
+    readonly projectSkills: ExistingFile;
+    readonly testing: ExistingFile;
+    readonly degradations?: ExistingFile;
+}
+export declare const P_VISION = "architecture/vision.md";
+export declare const P_TESTING = "architecture/testing.md";
+export declare const P_MANIFEST = "architecture/subsystems.manifest.json";
+export declare const P_PROJECT_SKILLS = "architecture/project-skills.json";
+export declare const P_CRITIC = "architecture/project-critic/SKILL.md";
+export declare const P_DEGRADATIONS = "architecture/degradations.md";
+/** What exists, what is discoverable, what is still missing — the read-only "which docs, and where?" answer (FR-2). PURE. */
+export declare function buildSetupPlan(scan: SetupScan): SetupPlan;
+/** Suggest a starter subsystem grouping from discovered packages (deterministic heuristic — user refines). PURE. */
+export declare function suggestSubsystems(packages: readonly string[]): SubsystemSpec[];
+/** architecture/vision.md from the spec. Deterministic. */
+export declare function renderVisionDoc(v: VisionSpec): string;
+/** architecture/testing.md from the spec — the project's verification procedure (feeds Step 8 QE). Deterministic. */
+export declare function renderTestingDoc(t: TestingSpec): string;
+/** Starter accepted-degradations registry (R6 challenge panel C1 reads this). PURE. */
+export declare function renderDegradationsDoc(): string;
+/** Build a subsystem manifest from the spec's subsystems. PURE. */
+export declare function buildManifestFromSpec(subs: readonly SubsystemSpec[]): SubsystemManifest;
+/** Wire the project-skills manifest from the spec: product-vision + testing point at the scaffolded docs;
+ *  critic/brand/impl-bar are added when the spec supplies them; extra is carried through. PURE. */
+export declare function buildProjectSkillsFromSpec(spec: SetupSpec): ProjectSkillManifest;
+/**
+ * Build the scaffold plan from the spec + what already exists. PURE + deterministic. AUGMENT-NEVER-CLOBBER
+ * (ADR-001 §2, load-bearing): a file that EXISTS is never replaced — prose is left as-is; structured files
+ * are append-only merged (existing content, order, and unknown keys preserved). A file only gets `create`
+ * when it is genuinely ABSENT. Malformed existing content never crashes and never clobbers.
+ */
+export declare function scaffoldFromSpec(spec: SetupSpec, existing: ExistingScaffoldFiles): ScaffoldResult;
+/** Human preview of the scaffold plan. Deterministic. */
+export declare function renderScaffoldPreview(result: ScaffoldResult): string;
+/** Scan the repo for the setup plan: what exists + discovered packages + a review corpus. Impure; never throws. */
+export declare function scanForSetup(repoRoot: string): SetupScan;
+/** Read the existing files the scaffold needs to compare against. Impure; never throws. */
+export declare function readExistingForScaffold(repoRoot: string): ExistingScaffoldFiles;
+//# sourceMappingURL=feature-adr-setup.d.ts.map

package/dist/feature-adr-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-adr-setup.d.ts","sourceRoot":"","sources":["../src/feature-adr-setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtE,OAAO,KAAK,EAAE,oBAAoB,EAAE,UAAU,EAAY,MAAM,qBAAqB,CAAC;AAGtF,MAAM,WAAW,UAAU;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AACpK,MAAM,WAAW,WAAW;IAAG,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE;AAC5I,MAAM,MAAM,aAAa,GAAG,SAAS,CAAC;AAEtC,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,aAAa,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,qGAAqG;IACrG,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,GAAG,OAAO,GAAG,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC;oGACgG;IAChG,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;IACtI,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAAG,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AAC9J,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;CAAE;AAE3E,kHAAkH;AAClH,MAAM,WAAW,YAAY;IAAG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AACrF,wDAAwD;AACxD,MAAM,WAAW,qBAAqB;IAAG,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,YAAY,CAAA;CAAE;AAGrN,eAAO,MAAM,QAAQ,2BAA2B,CAAC;AACjD,eAAO,MAAM,SAAS,4BAA4B,CAAC;AACnD,eAAO,MAAM,UAAU,0CAA0C,CAAC;AAClE,eAAO,MAAM,gBAAgB,qCAAqC,CAAC;AACnE,eAAO,MAAM,QAAQ,yCAAyC,CAAC;AAC/D,eAAO,MAAM,cAAc,iCAAiC,CAAC;AAK7D,6HAA6H;AAC7H,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,SAAS,CAoBzD;AAED,oHAAoH;AACpH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,GAAG,aAAa,EAAE,CAe9E;AAED,2DAA2D;AAC3D,wBAAgB,eAAe,CAAC,CAAC,EAAE,UAAU,GAAG,MAAM,CAMrD;AAED,qHAAqH;AACrH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,WAAW,GAAG,MAAM,CAMvD;AAED,uFAAuF;AACvF,wBAAgB,qBAAqB,IAAI,MAAM,CAoB9C;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,GAAG,iBAAiB,CAEvF;AAED;mGACmG;AACnG,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,SAAS,GAAG,oBAAoB,CAQhF;AA8DD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,qBAAqB,GAAG,cAAc,CAYjG;AAED,yDAAyD;AACzD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,GAAG,MAAM,CAKpE;AAYD,mHAAmH;AACnH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAcxD;AAED,2FAA2F;AAC3F,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,MAAM,GAAG,qBAAqB,CAQ/E"}