@gate-forge/core 0.10.3 → 0.11.0

package/dist/schemas/scan-config.js

@@ -0,0 +1,101 @@
+/**
+ * `scan:` — the SCANNER settings section of `.gateforge.yml` (0.11.0).
+ *
+ * These four settings used to live in `classification-policy.yml`
+ * (`scanRoots`, `coverage`, `declarations`, `volatileFields`). They moved
+ * here for ONE reason: they are not owner ANSWERS, they are machine-wide
+ * scan configuration, and the answers file now holds exactly the answers.
+ * They are still inside the owner-approved policy digest, because
+ * `.gateforge.yml` is a trusted-policy input like every other declaration
+ * there — the move changes which document an agent has to edit, never who
+ * has to approve it.
+ *
+ * The section also carries the two detector configuration documents that
+ * used to be their own files (`scan.httpClients`, was
+ * `.gateforge/http-clients.json`; `scan.fastapi`, was
+ * `.gateforge/fastapi.json`), for the same reason and with the same
+ * rule: the SHAPE is checked here, the RULES by the detector that applies
+ * them (one validation source, unchanged from the readers that have always
+ * guarded them).
+ */
+import { z } from 'zod';
+import { CoverageRuleSchema } from './classification-policy.js';
+/**
+ * One owner-declared HTTP client-scan section (was
+ * `.gateforge/http-clients.json`). Shape here; the client-symbol /
+ * wrapper / URL-builder / same-origin rules are validated by pack-http's
+ * own reader, which is the single source of truth for that document.
+ */
+export const HttpClientsScanSectionSchema = z
+    .object({
+    /** Instance symbols exposing verb methods, e.g. `['apiClient']`. */
+    clientSymbols: z.array(z.unknown()).optional(),
+    /** Wrapper callables with the concrete method they always issue. */
+    wrapperFunctions: z.array(z.unknown()).optional(),
+    /** Pure URL builders with an optional literal base. */
+    urlBuilders: z.array(z.unknown()).optional(),
+    /** Absolute-URL hosts treated as same-origin. */
+    sameOriginHosts: z.array(z.unknown()).optional(),
+    /** Globs limiting client-call scanning. */
+    clientScanRoots: z.array(z.unknown()).optional(),
+    /** Globs limiting generic server-route scanning. */
+    serverScanRoots: z.array(z.unknown()).optional(),
+})
+    .strict();
+/**
+ * One owner-declared FastAPI scan section (was `.gateforge/fastapi.json`):
+ * repo-root-relative directories acting as Python import roots.
+ */
+export const FastapiScanSectionSchema = z
+    .object({
+    /** Repo-root-relative import roots for ABSOLUTE imports. */
+    importRoots: z.array(z.unknown()).optional(),
+})
+    .strict();
+/**
+ * The `scan:` section of `.gateforge.yml`. REQUIRED: a repository without
+ * it has not answered "what does a closed-world proof have to cover", and
+ * defaulting that would silently weaken every suppressive decision. The
+ * key lives in `.gateforge.yml`, so it is inside the trusted policy
+ * digest exactly like the settings it replaces.
+ */
+export const ScanConfigSchema = z
+    .object({
+    /**
+     * Repo-root-relative globs defining the scope a closed-world proof
+     * must cover. A non-empty list is the prerequisite of every
+     * complete-scan attestation (ADR 0003 D4).
+     */
+    scanRoots: z.array(z.string().min(1)).min(1),
+    /**
+     * Coverage requirements for COMPLETE-scan proofs (ADR 0003 D4). A
+     * closed-world attestation holds only when every rule's detector is
+     * configured, reports coverage, and covers every applicable requested
+     * file. Declaring none means no scan is provably complete — closed-
+     * world proofs stay unavailable (fail closed).
+     */
+    coverage: z.array(CoverageRuleSchema).optional(),
+    /**
+     * Supported source declaration syntax: the machine-readable keys
+     * detectors may translate into declaration signals (e.g.
+     * `internality: 'gateforge:internal'`).
+     */
+    declarations: z.record(z.string(), z.string().min(1)),
+    /**
+     * Bookkeeping columns that never satisfy an update by themselves
+     * (mirrors the verdict engine's `updateableFields` fail-closed rule).
+     */
+    volatileFields: z.array(z.string().min(1)),
+    /** HTTP client-scan settings (was `.gateforge/http-clients.json`). */
+    httpClients: HttpClientsScanSectionSchema.optional(),
+    /** FastAPI import roots (was `.gateforge/fastapi.json`). */
+    fastapi: FastapiScanSectionSchema.optional(),
+})
+    .strict();
+/** The scanner keys that used to live in `classification-policy.yml`. */
+export const MOVED_SCANNER_KEYS = ['scanRoots', 'coverage', 'declarations', 'volatileFields'];
+/** Whether `key` is one of the scanner settings that moved to `.gateforge.yml`. */
+export function isMovedScannerKey(key) {
+    return MOVED_SCANNER_KEYS.includes(key);
+}
+//# sourceMappingURL=scan-config.js.map

package/dist/schemas/scan-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scan-config.js","sourceRoot":"","sources":["../../src/schemas/scan-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAGhE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC;KAC1C,MAAM,CAAC;IACN,oEAAoE;IACpE,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9C,oEAAoE;IACpE,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACjD,uDAAuD;IACvD,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,iDAAiD;IACjD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,2CAA2C;IAC3C,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,oDAAoD;IACpD,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,4DAA4D;IAC5D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C;;;;;;OAMG;IACH,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IAChD;;;;OAIG;IACH,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD;;;OAGG;IACH,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,sEAAsE;IACtE,WAAW,EAAE,4BAA4B,CAAC,QAAQ,EAAE;IACpD,4DAA4D;IAC5D,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,gBAAgB,CAAU,CAAC;AAKvG,mFAAmF;AACnF,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAQ,kBAAwC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AACjE,CAAC"}

package/dist/schemas/test-catalog.d.ts

@@ -55,10 +55,10 @@ export declare const TestKindSchema: z.ZodEnum<{
     unknown: "unknown";
     "browser-e2e": "browser-e2e";
     "observed-e2e": "observed-e2e";
-    "server-e2e": "server-e2e";
-    "api-e2e": "api-e2e";
     unit: "unit";
     integration: "integration";
+    "server-e2e": "server-e2e";
+    "api-e2e": "api-e2e";
     component: "component";
 }>;
 /** Inferred test-kind type. */
@@ -109,10 +109,10 @@ export declare const KindSignalSchema: z.ZodObject<{
         unknown: "unknown";
         "browser-e2e": "browser-e2e";
         "observed-e2e": "observed-e2e";
-        "server-e2e": "server-e2e";
-        "api-e2e": "api-e2e";
         unit: "unit";
         integration: "integration";
+        "server-e2e": "server-e2e";
+        "api-e2e": "api-e2e";
         component: "component";
     }>;
 }, z.core.$strict>;
@@ -217,10 +217,10 @@ export declare const TestCatalogEntrySchema: z.ZodObject<{
         unknown: "unknown";
         "browser-e2e": "browser-e2e";
         "observed-e2e": "observed-e2e";
-        "server-e2e": "server-e2e";
-        "api-e2e": "api-e2e";
         unit: "unit";
         integration: "integration";
+        "server-e2e": "server-e2e";
+        "api-e2e": "api-e2e";
         component: "component";
     }>;
     kindSignals: z.ZodArray<z.ZodObject<{
@@ -235,10 +235,10 @@ export declare const TestCatalogEntrySchema: z.ZodObject<{
             unknown: "unknown";
             "browser-e2e": "browser-e2e";
             "observed-e2e": "observed-e2e";
-            "server-e2e": "server-e2e";
-            "api-e2e": "api-e2e";
             unit: "unit";
             integration: "integration";
+            "server-e2e": "server-e2e";
+            "api-e2e": "api-e2e";
             component: "component";
         }>;
     }, z.core.$strict>>;
@@ -357,10 +357,10 @@ export declare const TestCatalogSchema: z.ZodObject<{
             unknown: "unknown";
             "browser-e2e": "browser-e2e";
             "observed-e2e": "observed-e2e";
-            "server-e2e": "server-e2e";
-            "api-e2e": "api-e2e";
             unit: "unit";
             integration: "integration";
+            "server-e2e": "server-e2e";
+            "api-e2e": "api-e2e";
             component: "component";
         }>;
         kindSignals: z.ZodArray<z.ZodObject<{
@@ -375,10 +375,10 @@ export declare const TestCatalogSchema: z.ZodObject<{
                 unknown: "unknown";
                 "browser-e2e": "browser-e2e";
                 "observed-e2e": "observed-e2e";
-                "server-e2e": "server-e2e";
-                "api-e2e": "api-e2e";
                 unit: "unit";
                 integration: "integration";
+                "server-e2e": "server-e2e";
+                "api-e2e": "api-e2e";
                 component: "component";
             }>;
         }, z.core.$strict>>;

package/dist/schemas/test-map.d.ts

@@ -54,10 +54,10 @@ export declare const TestMapEntrySchema: z.ZodObject<{
         unknown: "unknown";
         "browser-e2e": "browser-e2e";
         "observed-e2e": "observed-e2e";
-        "server-e2e": "server-e2e";
-        "api-e2e": "api-e2e";
         unit: "unit";
         integration: "integration";
+        "server-e2e": "server-e2e";
+        "api-e2e": "api-e2e";
         component: "component";
     }>>;
     source: z.ZodOptional<z.ZodLiteral<"annotation">>;
@@ -88,10 +88,10 @@ export declare const TestMapSchema: z.ZodObject<{
             unknown: "unknown";
             "browser-e2e": "browser-e2e";
             "observed-e2e": "observed-e2e";
-            "server-e2e": "server-e2e";
-            "api-e2e": "api-e2e";
             unit: "unit";
             integration: "integration";
+            "server-e2e": "server-e2e";
+            "api-e2e": "api-e2e";
             component: "component";
         }>>;
         source: z.ZodOptional<z.ZodLiteral<"annotation">>;

package/dist/schemas/verdict.d.ts

@@ -87,6 +87,10 @@ export declare const CauseCodeSchema: z.ZodEnum<{
     RESOURCE_SINGLETON_PER_TENANT: "RESOURCE_SINGLETON_PER_TENANT";
     RESPONSE_FIELD_MISSING_FROM_MODEL: "RESPONSE_FIELD_MISSING_FROM_MODEL";
     TWIN_PATH_DIVERGENT: "TWIN_PATH_DIVERGENT";
+    BUSINESS_RULE_TEST_MISSING: "BUSINESS_RULE_TEST_MISSING";
+    BUSINESS_RULE_TEST_TYPE_MISMATCH: "BUSINESS_RULE_TEST_TYPE_MISMATCH";
+    BUSINESS_RULE_TEST_UNPROVEN: "BUSINESS_RULE_TEST_UNPROVEN";
+    BUSINESS_RULE_TEST_FAILING: "BUSINESS_RULE_TEST_FAILING";
 }>;
 /** Inferred cause-code union. */
 export type CauseCode = z.infer<typeof CauseCodeSchema>;

package/dist/schemas/verdict.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../src/schemas/verdict.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;EAQxB,CAAC;AAEH,8BAA8B;AAC9B,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,iEAAiE;AACjE,eAAO,MAAM,sBAAsB;;;;;;;;kBASxB,CAAC;AAEZ,wCAAwC;AACxC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA+C1B,CAAC;AAEH,iCAAiC;AACjC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAiFjE,CAAC"}
+{"version":3,"file":"verdict.d.ts","sourceRoot":"","sources":["../../src/schemas/verdict.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;;GAIG;AACH,eAAO,MAAM,aAAa;;;;;;;;EAQxB,CAAC;AAEH,8BAA8B;AAC9B,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD,iEAAiE;AACjE,eAAO,MAAM,sBAAsB;;;;;;;;kBASxB,CAAC;AAEZ,wCAAwC;AACxC,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmD1B,CAAC;AAEH,iCAAiC;AACjC,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CA8FjE,CAAC"}

package/dist/schemas/verdict.js

@@ -85,6 +85,10 @@ export const CauseCodeSchema = z.enum([
     'RESOURCE_SINGLETON_PER_TENANT',
     'RESPONSE_FIELD_MISSING_FROM_MODEL',
     'TWIN_PATH_DIVERGENT',
+    'BUSINESS_RULE_TEST_MISSING',
+    'BUSINESS_RULE_TEST_TYPE_MISMATCH',
+    'BUSINESS_RULE_TEST_UNPROVEN',
+    'BUSINESS_RULE_TEST_FAILING',
 ]);
 /**
  * The plan §5.4 next action per cause code. Text, JSON, and SARIF
@@ -152,5 +156,14 @@ export const CAUSE_NEXT_ACTIONS = Object.freeze({
         'response model (or read the one it declares). A test that mocks the response proves nothing ' +
         'about this read',
     TWIN_PATH_DIVERGENT: 'Make the raw test and its witnessed twin send the same request: align the shared helper defaults, or map the pair with `twinOf`',
+    BUSINESS_RULE_TEST_MISSING: 'Write the test the rule names (a starter is printed by `gateforge next`), then map it with ' +
+        '`gateforge tests mark --rule <rule>/<case> --test <file>#<title> --kind <kind> --reason "…"`. ' +
+        'A mapping alone is a declaration, never a proof.',
+    BUSINESS_RULE_TEST_TYPE_MISMATCH: 'Map a test of the type the rule names (`gateforge tests explain` lists the accepted kinds): a ' +
+        'weaker test kind never satisfies a stronger rule type.',
+    BUSINESS_RULE_TEST_UNPROVEN: 'Run the mapped test under supervision for this exact candidate (`gateforge test-gates`). A case ' +
+        'with no passing, witnessed run is `unproven`, never satisfied.',
+    BUSINESS_RULE_TEST_FAILING: 'Fix the mapped test or the behaviour it proves: every mapped test of a case must pass (a green ' +
+        'sibling never forgives a red one).',
 });
 //# sourceMappingURL=verdict.js.map

package/dist/schemas/verdict.js.map

@@ -1 +1 @@
-{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../../src/schemas/verdict.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,WAAW;IACX,SAAS;IACT,SAAS;IACT,cAAc;IACd,YAAY;IACZ,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAKH,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,kEAAkE;IAClE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,uDAAuD;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,4CAA4C;IAC5C,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,2BAA2B;IAC3B,mBAAmB;IACnB,sBAAsB;IACtB,wBAAwB;IACxB,oBAAoB;IACpB,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,mBAAmB;IACnB,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,2BAA2B;IAC3B,uBAAuB;IACvB,yBAAyB;IACzB,0BAA0B;IAC1B,uBAAuB;IACvB,yBAAyB;IACzB,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;IAC3B,0BAA0B;IAC1B,wBAAwB;IACxB,uBAAuB;IACvB,2BAA2B;IAC3B,0BAA0B;IAC1B,8BAA8B;IAC9B,4BAA4B;IAC5B,iCAAiC;IACjC,4BAA4B;IAC5B,0BAA0B;IAC1B,oBAAoB;IACpB,mBAAmB;IACnB,0BAA0B;IAC1B,0BAA0B;IAC1B,iBAAiB;IACjB,4BAA4B;IAC5B,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,wBAAwB;IACxB,gCAAgC;IAChC,+BAA+B;IAC/B,mCAAmC;IACnC,qBAAqB;CACtB,CAAC,CAAC;AAKH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwC,MAAM,CAAC,MAAM,CAAC;IACnF,yBAAyB,EAAE,kDAAkD;IAC7E,iBAAiB,EAAE,8BAA8B;IACjD,oBAAoB,EAClB,6FAA6F;QAC7F,uCAAuC;IACzC,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,2BAA2B;IAC/C,oBAAoB,EAAE,sBAAsB;IAC5C,sBAAsB,EACpB,yFAAyF;QACzF,uFAAuF;QACvF,uCAAuC;IACzC,oBAAoB,EAClB,yFAAyF;IAC3F,iBAAiB,EAAE,kCAAkC;IACrD,WAAW,EAAE,kCAAkC;IAC/C,cAAc,EAAE,kCAAkC;IAClD,cAAc,EAAE,+BAA+B;IAC/C,eAAe,EACb,4FAA4F;QAC5F,6EAA6E;QAC7E,sFAAsF;QACtF,uBAAuB;IACzB,yBAAyB,EACvB,oFAAoF;QACpF,oDAAoD;IACtD,qBAAqB,EAAE,0BAA0B;IACjD,uBAAuB,EAAE,8CAA8C;IACvE,wBAAwB,EACtB,0GAA0G;IAC5G,qBAAqB,EACnB,kFAAkF;QAClF,wCAAwC;IAC1C,uBAAuB,EAAE,kEAAkE;IAC3F,yBAAyB,EACvB,wEAAwE;IAC1E,uBAAuB,EAAE,oDAAoD;IAC7E,yBAAyB,EAAE,0DAA0D;IACrF,wBAAwB,EAAE,sCAAsC;IAChE,sBAAsB,EAAE,sDAAsD;IAC9E,qBAAqB,EAAE,+CAA+C;IACtE,yBAAyB,EAAE,6DAA6D;IACxF,wBAAwB,EAAE,mDAAmD;IAC7E,4BAA4B,EAAE,qDAAqD;IACnF,0BAA0B,EAAE,6BAA6B;IACzD,+BAA+B,EAAE,mCAAmC;IACpE,0BAA0B,EACxB,iGAAiG;QACjG,yEAAyE;IAC3E,kBAAkB,EAChB,sJAAsJ;IACxJ,wBAAwB,EACtB,mFAAmF;QACnF,sDAAsD;IACxD,iBAAiB,EAAE,6EAA6E;IAChG,wBAAwB,EACtB,sHAAsH;IACxH,wBAAwB,EACtB,2HAA2H;IAC7H,eAAe,EAAE,2EAA2E;IAC5F,0BAA0B,EACxB,6HAA6H;IAC/H,mBAAmB,EAAE,6EAA6E;IAClG,kBAAkB,EAAE,uFAAuF;IAC3G,wBAAwB,EACtB,kIAAkI;IACpI,sBAAsB,EACpB,sJAAsJ;IACxJ,8BAA8B,EAC5B,sKAAsK;IACxK,6BAA6B,EAC3B,6FAA6F;QAC7F,yEAAyE;QACzE,sDAAsD;IACxD,iCAAiC,EAC/B,2FAA2F;QAC3F,8FAA8F;QAC9F,iBAAiB;IACnB,mBAAmB,EACjB,iIAAiI;CACpI,CAAC,CAAC"}
+{"version":3,"file":"verdict.js","sourceRoot":"","sources":["../../src/schemas/verdict.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC;IAClC,WAAW;IACX,SAAS;IACT,SAAS;IACT,cAAc;IACd,YAAY;IACZ,QAAQ;IACR,OAAO;CACR,CAAC,CAAC;AAKH,iEAAiE;AACjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,kEAAkE;IAClE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,uDAAuD;IACvD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,4CAA4C;IAC5C,QAAQ,EAAE,cAAc;CACzB,CAAC;KACD,MAAM,EAAE,CAAC;AAKZ;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,2BAA2B;IAC3B,mBAAmB;IACnB,sBAAsB;IACtB,wBAAwB;IACxB,oBAAoB;IACpB,sBAAsB;IACtB,wBAAwB;IACxB,sBAAsB;IACtB,mBAAmB;IACnB,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,2BAA2B;IAC3B,uBAAuB;IACvB,yBAAyB;IACzB,0BAA0B;IAC1B,uBAAuB;IACvB,yBAAyB;IACzB,2BAA2B;IAC3B,yBAAyB;IACzB,2BAA2B;IAC3B,0BAA0B;IAC1B,wBAAwB;IACxB,uBAAuB;IACvB,2BAA2B;IAC3B,0BAA0B;IAC1B,8BAA8B;IAC9B,4BAA4B;IAC5B,iCAAiC;IACjC,4BAA4B;IAC5B,0BAA0B;IAC1B,oBAAoB;IACpB,mBAAmB;IACnB,0BAA0B;IAC1B,0BAA0B;IAC1B,iBAAiB;IACjB,4BAA4B;IAC5B,qBAAqB;IACrB,oBAAoB;IACpB,0BAA0B;IAC1B,wBAAwB;IACxB,gCAAgC;IAChC,+BAA+B;IAC/B,mCAAmC;IACnC,qBAAqB;IACrB,4BAA4B;IAC5B,kCAAkC;IAClC,6BAA6B;IAC7B,4BAA4B;CAC7B,CAAC,CAAC;AAKH;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAwC,MAAM,CAAC,MAAM,CAAC;IACnF,yBAAyB,EAAE,kDAAkD;IAC7E,iBAAiB,EAAE,8BAA8B;IACjD,oBAAoB,EAClB,6FAA6F;QAC7F,uCAAuC;IACzC,sBAAsB,EAAE,2BAA2B;IACnD,kBAAkB,EAAE,2BAA2B;IAC/C,oBAAoB,EAAE,sBAAsB;IAC5C,sBAAsB,EACpB,yFAAyF;QACzF,uFAAuF;QACvF,uCAAuC;IACzC,oBAAoB,EAClB,yFAAyF;IAC3F,iBAAiB,EAAE,kCAAkC;IACrD,WAAW,EAAE,kCAAkC;IAC/C,cAAc,EAAE,kCAAkC;IAClD,cAAc,EAAE,+BAA+B;IAC/C,eAAe,EACb,4FAA4F;QAC5F,6EAA6E;QAC7E,sFAAsF;QACtF,uBAAuB;IACzB,yBAAyB,EACvB,oFAAoF;QACpF,oDAAoD;IACtD,qBAAqB,EAAE,0BAA0B;IACjD,uBAAuB,EAAE,8CAA8C;IACvE,wBAAwB,EACtB,0GAA0G;IAC5G,qBAAqB,EACnB,kFAAkF;QAClF,wCAAwC;IAC1C,uBAAuB,EAAE,kEAAkE;IAC3F,yBAAyB,EACvB,wEAAwE;IAC1E,uBAAuB,EAAE,oDAAoD;IAC7E,yBAAyB,EAAE,0DAA0D;IACrF,wBAAwB,EAAE,sCAAsC;IAChE,sBAAsB,EAAE,sDAAsD;IAC9E,qBAAqB,EAAE,+CAA+C;IACtE,yBAAyB,EAAE,6DAA6D;IACxF,wBAAwB,EAAE,mDAAmD;IAC7E,4BAA4B,EAAE,qDAAqD;IACnF,0BAA0B,EAAE,6BAA6B;IACzD,+BAA+B,EAAE,mCAAmC;IACpE,0BAA0B,EACxB,iGAAiG;QACjG,yEAAyE;IAC3E,kBAAkB,EAChB,sJAAsJ;IACxJ,wBAAwB,EACtB,mFAAmF;QACnF,sDAAsD;IACxD,iBAAiB,EAAE,6EAA6E;IAChG,wBAAwB,EACtB,sHAAsH;IACxH,wBAAwB,EACtB,2HAA2H;IAC7H,eAAe,EAAE,2EAA2E;IAC5F,0BAA0B,EACxB,6HAA6H;IAC/H,mBAAmB,EAAE,6EAA6E;IAClG,kBAAkB,EAAE,uFAAuF;IAC3G,wBAAwB,EACtB,kIAAkI;IACpI,sBAAsB,EACpB,sJAAsJ;IACxJ,8BAA8B,EAC5B,sKAAsK;IACxK,6BAA6B,EAC3B,6FAA6F;QAC7F,yEAAyE;QACzE,sDAAsD;IACxD,iCAAiC,EAC/B,2FAA2F;QAC3F,8FAA8F;QAC9F,iBAAiB;IACnB,mBAAmB,EACjB,iIAAiI;IACnI,0BAA0B,EACxB,6FAA6F;QAC7F,gGAAgG;QAChG,kDAAkD;IACpD,gCAAgC,EAC9B,gGAAgG;QAChG,wDAAwD;IAC1D,2BAA2B,EACzB,kGAAkG;QAClG,gEAAgE;IAClE,0BAA0B,EACxB,iGAAiG;QACjG,oCAAoC;CACvC,CAAC,CAAC"}

package/dist/testing/gate-runner.d.ts

@@ -2,7 +2,7 @@ import type { DetectorOutput, GraphFinding, ResourceGraph } from '../graph/index
 import type { PolicyEvaluationResult } from '../policy/index.js';
 import type { Claim } from '../schemas/claim.js';
 import type { Classification } from '../schemas/classification.js';
-import type { ClassificationPolicy } from '../schemas/classification-policy.js';
+import type { ClassifierPolicy } from '../schemas/scan-config.js';
 import type { PolicyFile } from '../schemas/policy.js';
 import type { EvidenceRecord } from '../schemas/evidence.js';
 import type { Obligation } from '../schemas/obligation.js';
@@ -60,7 +60,7 @@ export interface RunGatesInput {
      * deterministically from detector signals on every run — there is no
      * manual classifications document.
      */
-    classificationPolicy: ClassificationPolicy;
+    classificationPolicy: ClassifierPolicy;
     /** Policies document (`.gateforge/policies.yml` content). */
     policies: PolicyFile;
     /** The obligation evaluator (pin #9). */

package/dist/testing/gate-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gate-runner.d.ts","sourceRoot":"","sources":["../../src/testing/gate-runner.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAIjE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAChF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,oCAAoC;IACpC,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,oDAAoD;IACpD,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,qCAAqC;IACrC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,sDAAsD;IACtD,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,wBAAwB,KAC5B,gBAAgB,CAAC;AAEtB,sEAAsE;AACtE,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D,oEAAoE;IACpE,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,IAAI,EAAE,QAAQ,CAAC;IACf,4CAA4C;IAC5C,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC;;;;;OAKG;IACH,oBAAoB,EAAE,oBAAoB,CAAC;IAC3C,6DAA6D;IAC7D,QAAQ,EAAE,UAAU,CAAC;IACrB,yCAAyC;IACzC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,qEAAqE;IACrE,KAAK,EAAE,SAAS,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mCAAmC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,QAAQ,EAAE,WAAW,CAAC;IACtB,wDAAwD;IACxD,KAAK,EAAE,aAAa,CAAC;IACrB,8EAA8E;IAC9E,MAAM,EAAE,sBAAsB,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,2EAA2E;IAC3E,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gEAAgE;IAChE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAyI5D"}
+{"version":3,"file":"gate-runner.d.ts","sourceRoot":"","sources":["../../src/testing/gate-runner.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAGrF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAIjE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAC7D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAC3D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AAE9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AACrD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,oCAAoC;IACpC,MAAM,EAAE,KAAK,EAAE,CAAC;IAChB,oDAAoD;IACpD,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,qCAAqC;IACrC,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,4EAA4E;IAC5E,cAAc,EAAE,cAAc,GAAG,IAAI,CAAC;IACtC,sDAAsD;IACtD,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,iCAAiC;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAChC,UAAU,EAAE,UAAU,EACtB,KAAK,EAAE,wBAAwB,KAC5B,gBAAgB,CAAC;AAEtB,sEAAsE;AACtE,MAAM,WAAW,oBAAqB,SAAQ,cAAc;IAC1D,oEAAoE;IACpE,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB;AAED,6EAA6E;AAC7E,MAAM,WAAW,aAAa;IAC5B,yCAAyC;IACzC,IAAI,EAAE,QAAQ,CAAC;IACf,4CAA4C;IAC5C,SAAS,EAAE,oBAAoB,EAAE,CAAC;IAClC;;;;;OAKG;IACH,oBAAoB,EAAE,gBAAgB,CAAC;IACvC,6DAA6D;IAC7D,QAAQ,EAAE,UAAU,CAAC;IACrB,yCAAyC;IACzC,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,qEAAqE;IACrE,KAAK,EAAE,SAAS,CAAC;IACjB,uDAAuD;IACvD,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC;IACjB,+CAA+C;IAC/C,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC;IAC3B,wBAAwB;IACxB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,mBAAmB,CAAC;IACtC,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,wEAAwE;AACxE,MAAM,WAAW,cAAc;IAC7B,iCAAiC;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,4CAA4C;IAC5C,QAAQ,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAC;IACpB,uBAAuB;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,sDAAsD;IACtD,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,mCAAmC;IACnC,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,kDAAkD;AAClD,MAAM,WAAW,aAAa;IAC5B,2DAA2D;IAC3D,QAAQ,EAAE,WAAW,CAAC;IACtB,wDAAwD;IACxD,KAAK,EAAE,aAAa,CAAC;IACrB,8EAA8E;IAC9E,MAAM,EAAE,sBAAsB,CAAC;IAC/B,wDAAwD;IACxD,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,2EAA2E;IAC3E,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,gEAAgE;IAChE,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB;;;;OAIG;IACH,KAAK,EAAE,OAAO,CAAC;CAChB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,aAAa,CAyI5D"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gate-forge/core",
-  "version": "0.10.3",
+  "version": "0.11.0",
   "license": "Apache-2.0",
   "description": "Gateforge core: artifact schemas, canonical JSON, fingerprints, config loading.",
   "type": "module",