@getvda/test-suite 0.1.0

package/dist/signoff-trailer.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Governance sign-off as a COMMIT TRAILER.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHY A TRAILER, AND WHY THIS FORMAT
+ *
+ * A CI check runs from git refs. It cannot see a sign-off that only exists in a
+ * propose call or a PR body — which is how a signed change ended up failing the
+ * required status check, and how a sign-off silently no-opped before that.
+ *
+ * The document/event split applied to itself: **the sign-off EVENT belongs in
+ * Witness; a durable POINTER belongs in git.** Storing the authorising event in
+ * git would be the category error Witness exists to prevent. Storing a pointer
+ * is exactly the design — the commit hash tying documents to events.
+ *
+ * A trailer specifically (not a repo file):
+ *   - DIFF-NEUTRAL BY CONSTRUCTION. Commit messages are not in the tree, so the
+ *     governance diff — and therefore the finding id the sign-off references —
+ *     cannot shift because a sign-off was added. A sign-off stored in a repo
+ *     file risks perturbing the very diff it authorises.
+ *   - DURABLE. It survives PR deletion, body edits and squash (with care), and
+ *     it is visible in `git log` forever. A PR body is none of those things.
+ *   - CONVENTIONAL. Same shape as DCO `Signed-off-by:`.
+ *
+ * A repo policy file was rejected: a stale `covers: "*"` would silently
+ * authorise every future weakening — a footgun with a long fuse — and it puts
+ * the event in the wrong store.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * FORMAT — designed so the Phase 4 swap is a VALUE change, not a format change
+ *
+ *   Governance-Signoff: <finding-id> / <approver> / <proof>
+ *
+ * `proof` is the only field that changes when Phase 4 lands:
+ *
+ *   today   proof = `assertion`            → rendered "claimed by X, UNVERIFIED"
+ *   Phase 4 proof = `witness:<record-id>`  → resolvable to a sealed hitl_decision
+ *
+ * The third field is optional on parse and defaults to `assertion`, so the
+ * short two-field form stays valid and nothing needs rewriting.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHAT THIS IS NOT
+ *
+ * A trailer is an ASSERTION. Anyone who can push can write any name into one.
+ * It is durable, not authenticated — strictly better than a PR body on
+ * persistence, no better on verifiability. The suite must therefore never
+ * render it as a verified check, and this module never claims it is one.
+ *
+ * Commit signing would authenticate the trailer's AUTHOR without Witness, and
+ * is worth having — but it proves who wrote the trailer, not that an authorised
+ * approver accepted a specific finding. Complementary to Witness, not a
+ * substitute. Tracked as its own decision.
+ *
+ * OFFLINE IS A HARD CONSTRAINT and this respects it: parsing needs no network
+ * and no tokens. When verification is unavailable the finding reports what
+ * could not be checked — it never fails closed on inability to verify, the same
+ * discipline as `did_unresolvable` in issuer verification.
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+import type { SignOff } from '@getvda/compliance-guard';
+export declare const TRAILER_KEY = "Governance-Signoff";
+export type SignoffProof = 
+/** No verifiable backing. Durable claim only. */
+{
+    readonly kind: 'assertion';
+}
+/** Phase 4: points at a sealed Witness hitl_decision. */
+ | {
+    readonly kind: 'witness';
+    readonly recordId: string;
+};
+export interface TrailerSignoff {
+    readonly findingId: string;
+    readonly approver: string;
+    readonly proof: SignoffProof;
+    /** The raw trailer line, for reporting exactly what was found. */
+    readonly raw: string;
+}
+/**
+ * Parse `Governance-Signoff:` trailers out of one or more commit messages.
+ *
+ * Tolerant on input, strict on status: a malformed or unrecognised trailer
+ * never produces a stronger claim than `assertion`.
+ */
+export declare function parseSignoffTrailers(commitMessages: readonly string[]): TrailerSignoff[];
+/** Render a trailer line. Used when authoring a commit that carries a sign-off. */
+export declare function formatSignoffTrailer(findingId: string, approver: string, proof?: SignoffProof): string;
+/**
+ * Convert to the Guard's SignOff shape.
+ *
+ * NOTE the deliberate absence of a `'*'` blanket: a trailer covers exactly the
+ * finding it names. Blanket coverage is what made the policy-file route a
+ * footgun, and it is not reachable from here.
+ */
+export declare function toSignOffs(trailers: readonly TrailerSignoff[]): SignOff[];
+/** How a sign-off should be described to a human, given what could be checked. */
+export declare function describeProof(trailer: TrailerSignoff): string;
+//# sourceMappingURL=signoff-trailer.d.ts.map

package/dist/signoff-trailer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signoff-trailer.d.ts","sourceRoot":"","sources":["../src/signoff-trailer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,0BAA0B,CAAC;AAExD,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAEhD,MAAM,MAAM,YAAY;AACtB,iDAAiD;AAC/C;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE;AAChC,yDAAyD;GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,kEAAkE;IAClE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAcD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,GAAG,cAAc,EAAE,CAmBxF;AAED,mFAAmF;AACnF,wBAAgB,oBAAoB,CAClC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,KAAK,GAAE,YAAoC,GAC1C,MAAM,CAGR;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,QAAQ,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,EAAE,CASzE;AAED,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,MAAM,CAI7D"}

package/dist/signoff-trailer.js

@@ -0,0 +1,129 @@
+/**
+ * Governance sign-off as a COMMIT TRAILER.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHY A TRAILER, AND WHY THIS FORMAT
+ *
+ * A CI check runs from git refs. It cannot see a sign-off that only exists in a
+ * propose call or a PR body — which is how a signed change ended up failing the
+ * required status check, and how a sign-off silently no-opped before that.
+ *
+ * The document/event split applied to itself: **the sign-off EVENT belongs in
+ * Witness; a durable POINTER belongs in git.** Storing the authorising event in
+ * git would be the category error Witness exists to prevent. Storing a pointer
+ * is exactly the design — the commit hash tying documents to events.
+ *
+ * A trailer specifically (not a repo file):
+ *   - DIFF-NEUTRAL BY CONSTRUCTION. Commit messages are not in the tree, so the
+ *     governance diff — and therefore the finding id the sign-off references —
+ *     cannot shift because a sign-off was added. A sign-off stored in a repo
+ *     file risks perturbing the very diff it authorises.
+ *   - DURABLE. It survives PR deletion, body edits and squash (with care), and
+ *     it is visible in `git log` forever. A PR body is none of those things.
+ *   - CONVENTIONAL. Same shape as DCO `Signed-off-by:`.
+ *
+ * A repo policy file was rejected: a stale `covers: "*"` would silently
+ * authorise every future weakening — a footgun with a long fuse — and it puts
+ * the event in the wrong store.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * FORMAT — designed so the Phase 4 swap is a VALUE change, not a format change
+ *
+ *   Governance-Signoff: <finding-id> / <approver> / <proof>
+ *
+ * `proof` is the only field that changes when Phase 4 lands:
+ *
+ *   today   proof = `assertion`            → rendered "claimed by X, UNVERIFIED"
+ *   Phase 4 proof = `witness:<record-id>`  → resolvable to a sealed hitl_decision
+ *
+ * The third field is optional on parse and defaults to `assertion`, so the
+ * short two-field form stays valid and nothing needs rewriting.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ * WHAT THIS IS NOT
+ *
+ * A trailer is an ASSERTION. Anyone who can push can write any name into one.
+ * It is durable, not authenticated — strictly better than a PR body on
+ * persistence, no better on verifiability. The suite must therefore never
+ * render it as a verified check, and this module never claims it is one.
+ *
+ * Commit signing would authenticate the trailer's AUTHOR without Witness, and
+ * is worth having — but it proves who wrote the trailer, not that an authorised
+ * approver accepted a specific finding. Complementary to Witness, not a
+ * substitute. Tracked as its own decision.
+ *
+ * OFFLINE IS A HARD CONSTRAINT and this respects it: parsing needs no network
+ * and no tokens. When verification is unavailable the finding reports what
+ * could not be checked — it never fails closed on inability to verify, the same
+ * discipline as `did_unresolvable` in issuer verification.
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+export const TRAILER_KEY = 'Governance-Signoff';
+function parseProof(token) {
+    if (token === undefined || token === '' || token.toLowerCase() === 'assertion') {
+        return { kind: 'assertion' };
+    }
+    const witness = /^witness:(.+)$/i.exec(token);
+    if (witness?.[1] !== undefined)
+        return { kind: 'witness', recordId: witness[1].trim() };
+    // An unrecognised proof is treated as an assertion, NOT as a verification.
+    // Failing open on the claim while refusing to upgrade its status is the
+    // honest direction: we report what we could not check.
+    return { kind: 'assertion' };
+}
+/**
+ * Parse `Governance-Signoff:` trailers out of one or more commit messages.
+ *
+ * Tolerant on input, strict on status: a malformed or unrecognised trailer
+ * never produces a stronger claim than `assertion`.
+ */
+export function parseSignoffTrailers(commitMessages) {
+    const out = [];
+    const line = new RegExp(`^\\s*${TRAILER_KEY}\\s*:\\s*(.+)$`, 'i');
+    for (const message of commitMessages) {
+        for (const raw of message.split(/\r?\n/)) {
+            const m = line.exec(raw);
+            if (m?.[1] === undefined)
+                continue;
+            const parts = m[1].split('/').map((p) => p.trim());
+            const findingId = parts[0];
+            const approver = parts[1];
+            // A trailer without both a finding and a named approver authorises
+            // nothing — "someone signed off on something" is not a sign-off.
+            if (findingId === undefined || findingId === '')
+                continue;
+            if (approver === undefined || approver === '')
+                continue;
+            out.push({ findingId, approver, proof: parseProof(parts[2]), raw: raw.trim() });
+        }
+    }
+    return out;
+}
+/** Render a trailer line. Used when authoring a commit that carries a sign-off. */
+export function formatSignoffTrailer(findingId, approver, proof = { kind: 'assertion' }) {
+    const p = proof.kind === 'witness' ? `witness:${proof.recordId}` : 'assertion';
+    return `${TRAILER_KEY}: ${findingId} / ${approver} / ${p}`;
+}
+/**
+ * Convert to the Guard's SignOff shape.
+ *
+ * NOTE the deliberate absence of a `'*'` blanket: a trailer covers exactly the
+ * finding it names. Blanket coverage is what made the policy-file route a
+ * footgun, and it is not reachable from here.
+ */
+export function toSignOffs(trailers) {
+    return trailers.map((t) => ({
+        approver: t.approver,
+        covers: [t.findingId],
+        note: t.proof.kind === 'witness'
+            ? `trailer, Witness record ${t.proof.recordId} (unresolved — no network verification in this run)`
+            : 'trailer assertion — durable in git history, NOT authenticated',
+    }));
+}
+/** How a sign-off should be described to a human, given what could be checked. */
+export function describeProof(trailer) {
+    return trailer.proof.kind === 'witness'
+        ? `claimed by ${trailer.approver}, cites Witness record ${trailer.proof.recordId} — NOT RESOLVED in this run`
+        : `claimed by ${trailer.approver}, UNVERIFIED (durable assertion in git history, not authenticated)`;
+}
+//# sourceMappingURL=signoff-trailer.js.map

package/dist/signoff-trailer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signoff-trailer.js","sourceRoot":"","sources":["../src/signoff-trailer.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2DG;AAIH,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAgBhD,SAAS,UAAU,CAAC,KAAyB;IAC3C,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,CAAC,WAAW,EAAE,KAAK,WAAW,EAAE,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACxF,2EAA2E;IAC3E,wEAAwE;IACxE,uDAAuD;IACvD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,cAAiC;IACpE,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,MAAM,CAAC,QAAQ,WAAW,gBAAgB,EAAE,GAAG,CAAC,CAAC;IAElE,KAAK,MAAM,OAAO,IAAI,cAAc,EAAE,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzB,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;gBAAE,SAAS;YACnC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACnD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,mEAAmE;YACnE,iEAAiE;YACjE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE;gBAAE,SAAS;YAC1D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE;gBAAE,SAAS;YACxD,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,oBAAoB,CAClC,SAAiB,EACjB,QAAgB,EAChB,QAAsB,EAAE,IAAI,EAAE,WAAW,EAAE;IAE3C,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;IAC/E,OAAO,GAAG,WAAW,KAAK,SAAS,MAAM,QAAQ,MAAM,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CAAC,QAAmC;IAC5D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACrB,IAAI,EACF,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;YACxB,CAAC,CAAC,2BAA2B,CAAC,CAAC,KAAK,CAAC,QAAQ,qDAAqD;YAClG,CAAC,CAAC,+DAA+D;KACtE,CAAC,CAAC,CAAC;AACN,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,OAAuB;IACnD,OAAO,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS;QACrC,CAAC,CAAC,cAAc,OAAO,CAAC,QAAQ,0BAA0B,OAAO,CAAC,KAAK,CAAC,QAAQ,6BAA6B;QAC7G,CAAC,CAAC,cAAc,OAAO,CAAC,QAAQ,oEAAoE,CAAC;AACzG,CAAC"}

package/dist/suite.d.ts

@@ -0,0 +1,44 @@
+/**
+ * runTestSuite — composes the four gates into the ONE machine-readable result.
+ *
+ *   3a schema      — the 1a contract as a gate (CONFIRMED strict, PROVISIONAL
+ *                    lenient). Blocking.
+ *   3b guard       — the Compliance Guard (runComplianceGuard). Blocking.
+ *   3c scenarios   — ACP governance-level adversarial scenarios. Blocking on the
+ *                    certain (structural) findings; heuristic ones warn.
+ *   3c sandbox     — agent-behavioral eval, delegated to Onboarding Phase 5.
+ *                    Honest stub → skip/not_available. Non-blocking until live.
+ *   3d impact      — deterministic impact analysis. Informational.
+ *
+ * Provider-free: it takes before/after governance SETS (file contents), so it
+ * runs as a lightweight step in the customer's own CI with no git, no network,
+ * no tokens. The CLI adapter sources the sets from plain git.
+ */
+import { type GovernanceSet } from '@getvda/governance-schema';
+import { type GuardPolicy, type SignOff } from '@getvda/compliance-guard';
+import { type TestSuiteMeta, type TestSuiteResult } from './types.js';
+import { type ScenarioPolicy } from './scenarios.js';
+import { type EnvironmentRegistry } from './impact.js';
+import { type SandboxEvaluator } from './sandbox.js';
+import { type TrailerSignoff } from './signoff-trailer.js';
+export interface RunSuiteInput {
+    readonly before: GovernanceSet;
+    readonly after: GovernanceSet;
+}
+export interface RunSuiteOptions {
+    readonly policy?: GuardPolicy;
+    readonly signOffs?: readonly SignOff[];
+    /**
+     * Trailer-sourced sign-offs, carried so the report can state exactly WHAT
+     * KIND of sign-off was found. A trailer is a durable assertion, never a
+     * verified check, and the rendering must say so.
+     */
+    readonly signoffTrailers?: readonly TrailerSignoff[];
+    readonly scenarioPolicy?: ScenarioPolicy;
+    readonly registry?: EnvironmentRegistry;
+    /** Agent-behavioral sandbox. Defaults to the honest Onboarding stub. */
+    readonly sandbox?: SandboxEvaluator;
+    readonly meta?: Partial<TestSuiteMeta>;
+}
+export declare function runTestSuite(input: RunSuiteInput, options?: RunSuiteOptions): Promise<TestSuiteResult>;
+//# sourceMappingURL=suite.d.ts.map

package/dist/suite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite.d.ts","sourceRoot":"","sources":["../src/suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAKL,KAAK,aAAa,EACnB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAGL,KAAK,WAAW,EAChB,KAAK,OAAO,EACb,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAIL,KAAK,aAAa,EAClB,KAAK,eAAe,EACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAgB,KAAK,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAiB,KAAK,mBAAmB,EAAuB,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE1E,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACrD,QAAQ,CAAC,cAAc,CAAC,EAAE,cAAc,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CACxC;AAWD,wBAAsB,YAAY,CAChC,KAAK,EAAE,aAAa,EACpB,OAAO,GAAE,eAAoB,GAC5B,OAAO,CAAC,eAAe,CAAC,CAwH1B"}

package/dist/suite.js

@@ -0,0 +1,161 @@
+/**
+ * runTestSuite — composes the four gates into the ONE machine-readable result.
+ *
+ *   3a schema      — the 1a contract as a gate (CONFIRMED strict, PROVISIONAL
+ *                    lenient). Blocking.
+ *   3b guard       — the Compliance Guard (runComplianceGuard). Blocking.
+ *   3c scenarios   — ACP governance-level adversarial scenarios. Blocking on the
+ *                    certain (structural) findings; heuristic ones warn.
+ *   3c sandbox     — agent-behavioral eval, delegated to Onboarding Phase 5.
+ *                    Honest stub → skip/not_available. Non-blocking until live.
+ *   3d impact      — deterministic impact analysis. Informational.
+ *
+ * Provider-free: it takes before/after governance SETS (file contents), so it
+ * runs as a lightweight step in the customer's own CI with no git, no network,
+ * no tokens. The CLI adapter sources the sets from plain git.
+ */
+import { CONTRACT_VERSION, GOVERNANCE_FILE_NAMES, validateSet, } from '@getvda/governance-schema';
+import { runComplianceGuard, } from '@getvda/compliance-guard';
+import { statusOf, } from './types.js';
+import { runScenarios } from './scenarios.js';
+import { computeImpact } from './impact.js';
+import { onboardingSandboxStub } from './sandbox.js';
+import { describeProof } from './signoff-trailer.js';
+function sourcesOf(set) {
+    const out = {};
+    for (const name of GOVERNANCE_FILE_NAMES) {
+        const entry = set.files[name];
+        if (entry)
+            out[name] = entry.source;
+    }
+    return out;
+}
+export async function runTestSuite(input, options = {}) {
+    const { before, after } = input;
+    const steps = [];
+    // ── 3a schema ──────────────────────────────────────────────────────────────
+    const validation = validateSet(sourcesOf(after));
+    const schemaFindings = validation.issues.map((i) => ({
+        severity: i.severity === 'error' ? 'error' : 'warning',
+        code: i.code,
+        message: i.message,
+        ...(i.file ? { file: i.file } : {}),
+    }));
+    steps.push({
+        id: 'schema',
+        title: 'Schema validation (contract 1a)',
+        blocking: true,
+        status: statusOf(true, schemaFindings),
+        findings: schemaFindings,
+    });
+    // ── 3b guard ───────────────────────────────────────────────────────────────
+    const guard = runComplianceGuard(before, after, {
+        ...(options.signOffs ? { signOffs: options.signOffs } : {}),
+        ...(options.policy ? { policy: options.policy } : {}),
+    });
+    const trailersById = new Map((options.signoffTrailers ?? []).map((t) => [t.findingId, t]));
+    const guardFindings = [
+        ...guard.unsignedBlocking.map((f) => ({
+            severity: 'error',
+            code: f.code,
+            message: `${f.headline} — requires a named sign-off`,
+            ...(f.detail ? { detail: f.detail } : {}),
+            file: f.file,
+        })),
+        ...guard.acknowledged.map((f) => {
+            // Never render an unverified claim as a verified check. If the sign-off
+            // came from a trailer we can say precisely what backs it — and what does
+            // not. Absent a trailer we still refuse to imply verification.
+            const trailer = trailersById.get(f.id);
+            return {
+                severity: 'info',
+                code: `${f.code}_signed_off`,
+                message: trailer
+                    ? `${f.headline} — sign-off ${describeProof(trailer)}`
+                    : `${f.headline} — sign-off claimed, UNVERIFIED`,
+                ...(trailer ? { detail: `Trailer: ${trailer.raw}` } : {}),
+                file: f.file,
+            };
+        }),
+    ];
+    const diff = guard.diff;
+    steps.push({
+        id: 'guard',
+        title: 'Compliance Guard',
+        blocking: true,
+        status: statusOf(true, guardFindings),
+        findings: guardFindings,
+    });
+    // ── 3c scenarios (ACP governance-level) ──────────────────────────────────────
+    const scenarioFindings = runScenarios(before, after, options.scenarioPolicy);
+    steps.push({
+        id: 'scenarios',
+        title: 'Adversarial scenarios (governance-level)',
+        blocking: true,
+        status: statusOf(true, scenarioFindings),
+        findings: scenarioFindings,
+    });
+    // ── 3c sandbox (agent-behavioral, delegated) ─────────────────────────────────
+    const sandbox = options.sandbox ?? onboardingSandboxStub;
+    const sandboxResult = await sandbox.evaluate({
+        changedFiles: diff.files.map((f) => f.file),
+        ...(after.files['AGENTS.md']?.parsed.frontmatter.environment
+            ? { environment: String(after.files['AGENTS.md']?.parsed.frontmatter.environment) }
+            : {}),
+    });
+    const sandboxStatus = sandboxResult.status === 'not_available'
+        ? 'skip'
+        : sandboxResult.status === 'passed'
+            ? 'pass'
+            : 'fail';
+    steps.push({
+        id: 'sandbox',
+        title: 'Adversarial sandbox (agent-behavioral, via Onboarding)',
+        blocking: sandboxResult.status !== 'not_available',
+        status: sandboxStatus,
+        findings: [
+            {
+                severity: sandboxResult.status === 'failed' ? 'error' : 'info',
+                code: `sandbox_${sandboxResult.status}`,
+                message: sandboxResult.reason,
+                ...(sandboxResult.passRate !== undefined
+                    ? { detail: `pass rate ${sandboxResult.passRate}` }
+                    : {}),
+            },
+        ],
+    });
+    // ── 3d impact (informational) ────────────────────────────────────────────────
+    const impact = computeImpact(before, after, diff, options.registry);
+    steps.push({
+        id: 'impact',
+        title: 'Impact analysis',
+        blocking: false,
+        status: 'info',
+        findings: impactFindings(impact),
+    });
+    const ok = steps.every((s) => s.status !== 'fail');
+    const meta = {
+        contractVersion: CONTRACT_VERSION,
+        source: 'in-memory',
+        ...options.meta,
+    };
+    return { ok, exitCode: ok ? 0 : 1, steps, diff, impact, meta };
+}
+function impactFindings(impact) {
+    const out = [];
+    out.push({
+        severity: 'info',
+        code: 'impact_scope',
+        message: `Affects ${impact.changedFiles.length} file(s), ` +
+            `${impact.environments.length} environment(s), ` +
+            `${impact.agents.agents.length} known agent(s) (${impact.agents.source}${impact.agents.complete ? '' : ', incomplete'})`,
+        ...(impact.capabilitiesAffected.length
+            ? { detail: `capabilities affected: ${impact.capabilitiesAffected.join(', ')}` }
+            : {}),
+    });
+    for (const note of impact.notes) {
+        out.push({ severity: 'info', code: 'impact_note', message: note });
+    }
+    return out;
+}
+//# sourceMappingURL=suite.js.map

package/dist/suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"suite.js","sourceRoot":"","sources":["../src/suite.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,gBAAgB,EAChB,qBAAqB,EACrB,WAAW,GAGZ,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,GAInB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,QAAQ,GAKT,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,YAAY,EAAuB,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,aAAa,EAAiD,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,qBAAqB,EAAyB,MAAM,cAAc,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAuB,MAAM,sBAAsB,CAAC;AAuB1E,SAAS,SAAS,CAAC,GAAkB;IACnC,MAAM,GAAG,GAAgD,EAAE,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,qBAAqB,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACtC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAoB,EACpB,UAA2B,EAAE;IAE7B,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAChC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAE/B,8EAA8E;IAC9E,MAAM,UAAU,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,MAAM,cAAc,GAAmB,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACnE,QAAQ,EAAE,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS;QACtD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpC,CAAC,CAAC,CAAC;IACJ,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,iCAAiC;QACxC,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;QACtC,QAAQ,EAAE,cAAc;KACzB,CAAC,CAAC;IAEH,8EAA8E;IAC9E,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,EAAE,KAAK,EAAE;QAC9C,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,OAAO,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAU,CAAC,CACtE,CAAC;IACF,MAAM,aAAa,GAAmB;QACpC,GAAG,KAAK,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAgB,EAAE,CAAC,CAAC;YAClD,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,OAAO,EAAE,GAAG,CAAC,CAAC,QAAQ,8BAA8B;YACpD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC;QACH,GAAG,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAgB,EAAE;YAC5C,wEAAwE;YACxE,yEAAyE;YACzE,+DAA+D;YAC/D,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,MAAM;gBAChB,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,aAAa;gBAC5B,OAAO,EAAE,OAAO;oBACd,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,eAAe,aAAa,CAAC,OAAO,CAAC,EAAE;oBACtD,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,iCAAiC;gBAClD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,YAAY,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,IAAI,EAAE,CAAC,CAAC,IAAI;aACb,CAAC;QACJ,CAAC,CAAC;KACH,CAAC;IACF,MAAM,IAAI,GAAmB,KAAK,CAAC,IAAI,CAAC;IACxC,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,OAAO;QACX,KAAK,EAAE,kBAAkB;QACzB,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;QACrC,QAAQ,EAAE,aAAa;KACxB,CAAC,CAAC;IAEH,gFAAgF;IAChF,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,0CAA0C;QACjD,QAAQ,EAAE,IAAI;QACd,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;QACxC,QAAQ,EAAE,gBAAgB;KAC3B,CAAC,CAAC;IAEH,gFAAgF;IAChF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,qBAAqB,CAAC;IACzD,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC;QAC3C,YAAY,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3C,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW;YAC1D,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE;YACnF,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,MAAM,aAAa,GACjB,aAAa,CAAC,MAAM,KAAK,eAAe;QACtC,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,aAAa,CAAC,MAAM,KAAK,QAAQ;YACjC,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,MAAM,CAAC;IACf,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,wDAAwD;QAC/D,QAAQ,EAAE,aAAa,CAAC,MAAM,KAAK,eAAe;QAClD,MAAM,EAAE,aAAa;QACrB,QAAQ,EAAE;YACR;gBACE,QAAQ,EAAE,aAAa,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM;gBAC9D,IAAI,EAAE,WAAW,aAAa,CAAC,MAAM,EAAE;gBACvC,OAAO,EAAE,aAAa,CAAC,MAAM;gBAC7B,GAAG,CAAC,aAAa,CAAC,QAAQ,KAAK,SAAS;oBACtC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,aAAa,CAAC,QAAQ,EAAE,EAAE;oBACnD,CAAC,CAAC,EAAE,CAAC;aACR;SACF;KACF,CAAC,CAAC;IAEH,gFAAgF;IAChF,MAAM,MAAM,GAAmB,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC;QACT,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,iBAAiB;QACxB,QAAQ,EAAE,KAAK;QACf,MAAM,EAAE,MAAM;QACd,QAAQ,EAAE,cAAc,CAAC,MAAM,CAAC;KACjC,CAAC,CAAC;IAEH,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACnD,MAAM,IAAI,GAAkB;QAC1B,eAAe,EAAE,gBAAgB;QACjC,MAAM,EAAE,WAAW;QACnB,GAAG,OAAO,CAAC,IAAI;KAChB,CAAC;IAEF,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,SAAS,cAAc,CAAC,MAAsB;IAC5C,MAAM,GAAG,GAAmB,EAAE,CAAC;IAC/B,GAAG,CAAC,IAAI,CAAC;QACP,QAAQ,EAAE,MAAM;QAChB,IAAI,EAAE,cAAc;QACpB,OAAO,EACL,WAAW,MAAM,CAAC,YAAY,CAAC,MAAM,YAAY;YACjD,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,mBAAmB;YAChD,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,oBAAoB,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,GAAG;QAC1H,GAAG,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM;YACpC,CAAC,CAAC,EAAE,MAAM,EAAE,0BAA0B,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YAChF,CAAC,CAAC,EAAE,CAAC;KACR,CAAC,CAAC;IACH,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The CI test-suite output contract.
+ *
+ * ONE machine-readable result (`TestSuiteResult`) and ONE renderer over it (see
+ * render.ts). The overall verdict and the human summary both read the SAME
+ * normalized `StepResult[]` — no second implementation of "did it pass", no
+ * second renderer. Every step normalizes its native findings into
+ * `SuiteFinding`, so adding a step never touches the renderer or the verdict.
+ */
+import type { GovernanceFileName } from '@getvda/governance-schema';
+import type { GovernanceDiff } from '@getvda/compliance-guard';
+import type { ImpactAnalysis } from './impact.js';
+export type StepId = 'schema' | 'guard' | 'scenarios' | 'sandbox' | 'impact';
+export type FindingSeverity = 'error' | 'warning' | 'info';
+/** Normalized finding — the single shape the renderer and verdict consume. */
+export interface SuiteFinding {
+    readonly severity: FindingSeverity;
+    /** Stable machine code, e.g. "sop_no_clauses", "unconditioned_capability". */
+    readonly code: string;
+    readonly message: string;
+    readonly detail?: string;
+    readonly file?: GovernanceFileName | string;
+    /** True when the finding is a heuristic best-effort (not a proof). */
+    readonly heuristic?: boolean;
+}
+export type StepStatus = 'pass' | 'fail' | 'warn' | 'skip' | 'info';
+export interface StepResult {
+    readonly id: StepId;
+    readonly title: string;
+    /** A fail here fails the suite. Informational steps are non-blocking. */
+    readonly blocking: boolean;
+    readonly status: StepStatus;
+    readonly findings: readonly SuiteFinding[];
+}
+export interface TestSuiteMeta {
+    readonly contractVersion: string;
+    readonly baseRef?: string;
+    readonly headRef?: string;
+    /** How before/after were sourced (git refs, in-memory, files). */
+    readonly source: string;
+}
+export interface TestSuiteResult {
+    /** true iff no blocking step failed. The CI gate. */
+    readonly ok: boolean;
+    /** 0 = pass, 1 = failed. For `process.exit`. */
+    readonly exitCode: number;
+    readonly steps: readonly StepResult[];
+    /** The honest governance diff (from the guard step) for the approver surface. */
+    readonly diff: GovernanceDiff;
+    readonly impact: ImpactAnalysis;
+    readonly meta: TestSuiteMeta;
+}
+/** Derive a step's status from its normalized findings. Only a blocking step
+ *  with an error FAILS; errors on a non-blocking step and any warning surface as
+ *  `warn` (which never fails the suite). */
+export declare function statusOf(blocking: boolean, findings: readonly SuiteFinding[], informational?: boolean): StepStatus;
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,MAAM,MAAM,GAAG,QAAQ,GAAG,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,CAAC;AAE7E,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAE3D,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,8EAA8E;IAC9E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC;IAC5C,sEAAsE;IACtE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEpE,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;CAC5C;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,gDAAgD;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,SAAS,UAAU,EAAE,CAAC;IACtC,iFAAiF;IACjF,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED;;4CAE4C;AAC5C,wBAAgB,QAAQ,CACtB,QAAQ,EAAE,OAAO,EACjB,QAAQ,EAAE,SAAS,YAAY,EAAE,EACjC,aAAa,UAAQ,GACpB,UAAU,CAOZ"}

package/dist/types.js

@@ -0,0 +1,24 @@
+/**
+ * The CI test-suite output contract.
+ *
+ * ONE machine-readable result (`TestSuiteResult`) and ONE renderer over it (see
+ * render.ts). The overall verdict and the human summary both read the SAME
+ * normalized `StepResult[]` — no second implementation of "did it pass", no
+ * second renderer. Every step normalizes its native findings into
+ * `SuiteFinding`, so adding a step never touches the renderer or the verdict.
+ */
+/** Derive a step's status from its normalized findings. Only a blocking step
+ *  with an error FAILS; errors on a non-blocking step and any warning surface as
+ *  `warn` (which never fails the suite). */
+export function statusOf(blocking, findings, informational = false) {
+    if (informational)
+        return 'info';
+    const hasError = findings.some((f) => f.severity === 'error');
+    const hasWarning = findings.some((f) => f.severity === 'warning');
+    if (hasError)
+        return blocking ? 'fail' : 'warn';
+    if (hasWarning)
+        return 'warn';
+    return 'pass';
+}
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAqDH;;4CAE4C;AAC5C,MAAM,UAAU,QAAQ,CACtB,QAAiB,EACjB,QAAiC,EACjC,aAAa,GAAG,KAAK;IAErB,IAAI,aAAa;QAAE,OAAO,MAAM,CAAC;IACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC;IAClE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,UAAU;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@getvda/test-suite",
+  "version": "0.1.0",
+  "private": false,
+  "type": "module",
+  "description": "The ACP governance CI test suite — schema validation, Compliance Guard, governance-level adversarial scenarios, and deterministic impact analysis. Provider-free; invocable as a step in the customer's own CI (GitHub Action / GitLab component / plain CLI).",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "acp-test": "dist/cli.js"
+  },
+  "scripts": {
+    "build": "tsc --build",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  },
+  "dependencies": {
+    "@getvda/governance-schema": "^0.2.0",
+    "@getvda/compliance-guard": "^0.1.0"
+  },
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/getvda-ai/acp-agent.git",
+    "directory": "packages/test-suite"
+  },
+  "homepage": "https://getvda.ai"
+}