@inventarch/compliance 0.0.0-stage → 1.0.0

package/dist/fixtures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fixtures.js","sourceRoot":"","sources":["../src/fixtures.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,OAAO,EACP,WAAW,EACX,aAAa,EACb,uBAAuB,EACvB,OAAO,EACP,MAAM,EACN,KAAK,GACN,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAGpC,MAAM,CAAC,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IAC1D,UAAU;IACV,QAAQ;IACR,UAAU;IACV,SAAS;IACT,OAAO;IACP,WAAW;IACX,OAAO;IACP,YAAY;IACZ,UAAU;IACV,WAAW;IACX,OAAO;CACR,CAAC,CAAC;AAiBH,MAAM,QAAQ,GAAa,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC;AAC9G,MAAM,UAAU,kBAAkB,CAAC,OAAwB;IACzD,MAAM,QAAQ,GAAc,EAAE,EAC5B,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,CAAC,OAAe,EAAQ,EAAE;QACzC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,0BAA0B;YAChC,QAAQ,EAAE,OAAO;YACjB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE;SACvC,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,MAAe,EAAE,QAAiB,EAAE,KAAa,EAAQ,EAAE;QACxE,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,GAAG,KAAK,oCAAoC,CAAC,CAAC;IACpH,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,WAAW,GAA0B,MAAM,CAAC,WAAW,EACzD,OAAgB,CAAC;QACnB,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAChC,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;gBACpD,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;gBACjC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;oBAAE,QAAQ,CAAC,+BAA+B,CAAC,CAAC;;oBAC1E,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;YACvD,CAAC;iBAAM,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;gBAAE,QAAQ,CAAC,gCAAgC,CAAC,CAAC;;gBAClF,WAAW,GAAG,uBAAuB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9F,CAAC;aAAM,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3E,MAAM,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;gBACrD,IACE,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI;oBACxE,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC;oBAEhD,MAAM,IAAI,SAAS,CAAC,+BAA+B,CAAC,CAAC;gBACvD,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC;YAC1E,CAAC,CAAC,CAAC;YACH,MAAM,UAAU,GAAG,aAAa,CAAC,CAAC,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC;YAC5E,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;YAChG,MAAM,MAAM,GAAG,OAAO,CACpB,MAAM,CAAC,GAAG,EACV,UAAU,CAAC,QAAQ,EACnB,QAAQ,EACR,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CACtC,CAAC;YACF,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;YACzB,WAAW,GAAG;gBACZ,GAAG,UAAU,CAAC,WAAW;gBACzB,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC5C,GAAG,MAAM,CAAC,WAAW;aACtB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;QACpC,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,WAAW;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC5B,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,wCAAwC,CAAC,CAAC;YAC/E,IAAI,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS;gBACjG,QAAQ,CAAC,oCAAoC,CAAC,CAAC;YACjD,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS;gBAAE,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACrE,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS;gBAAE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAChF,CAAC;aAAM,CAAC;YACN,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;gBAAE,QAAQ,CAAC,0CAA0C,CAAC,CAAC;YACnF,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS;gBAAE,QAAQ,CAAC,gCAAgC,CAAC,CAAC;;gBAEhF,KAAK,CACH,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EACxD,OAAO,CAAC,WAAW,EACnB,aAAa,CACd,CAAC;QACN,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,QAAQ,CAAC,0BAA0B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,UAAU,EAAE,MAAM,CAAC,eAAe,EAAE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;QAC3D,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;KACnD,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,QAA2B,EAAE,OAAiC;IAC5F,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;IACjH,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,CACX,eAAe,EACf,uBAAuB,EACvB,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACrB,IAAI,EAAE,0BAA0B;QAChC,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,EAAE;QACR,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,8CAA8C,IAAI,EAAE;KAC9D,CAAC,CAAC,CACJ,CAAC;AACJ,CAAC"}

package/dist/graph-checks.d.ts

@@ -0,0 +1,27 @@
+import type { CompiledField, Diagnostic } from '@inventarch/language';
+import type { Edge, Graph, Node } from '@inventarch/graph';
+import type { ReferenceLookup } from './schema.js';
+import type { Assessment, CompCode, EvidenceCode, Finding } from './types.js';
+import type { EvaluatorCatalog } from './catalog.js';
+export { CHECK_IDS } from './check-ids.js';
+export declare function finding(code: CompCode | EvidenceCode, node: Node, message: string, line?: number, warning?: boolean): Finding;
+export declare function fields(node: Node, section: string, key: string): readonly CompiledField[];
+export declare function textField(node: Node, section: string, key: string): string | undefined;
+export declare function validateGraphSchema(record: Node, graph: Graph): Assessment;
+/** The `ref to` lookup of a graph (W0-L2): one per graph, built on first use over its admitted nodes and kept for the graph's lifetime. */
+export declare function graphLookup(graph: Graph): ReferenceLookup;
+export declare function fragmentTarget(edge: Edge, graph: Graph): Node | undefined;
+export declare function fragmentExists(edge: Edge, graph: Graph): boolean;
+export declare function validateFragments(graph: Graph): Assessment;
+export declare function validateCoverage(contract: Node, graph: Graph): Assessment;
+export declare function validateSelectors(node: Node): Assessment;
+/**
+ * COMP-CHECK (C16, C26). Without a catalog only CHECK_IDS are implemented, exactly as before. With a trusted
+ * catalog from createEvaluatorCatalog, a supported catalog id also passes; a revoked one fails and an unavailable
+ * one is not-evaluated (D5). Host-reserved ids never pass (D4). The declaration still schedules nothing.
+ */
+export declare function validateCheck(node: Node, catalog?: EvaluatorCatalog): Assessment;
+export declare function validateParse(diagnostics: readonly Diagnostic[] | undefined): Assessment;
+export declare function validateConsent(graph: Graph): Assessment;
+export declare function validateIdentity(graph: Graph): Assessment;
+//# sourceMappingURL=graph-checks.d.ts.map

package/dist/graph-checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-checks.d.ts","sourceRoot":"","sources":["../src/graph-checks.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnD,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAG9E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,wBAAgB,OAAO,CACrB,IAAI,EAAE,QAAQ,GAAG,YAAY,EAC7B,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,MAAM,EACf,IAAI,SAAmB,EACvB,OAAO,UAAQ,GACd,OAAO,CAST;AACD,wBAAgB,MAAM,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,SAAS,aAAa,EAAE,CAKzF;AACD,wBAAgB,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKtF;AACD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,UAAU,CA2D1E;AACD,2IAA2I;AAC3I,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,eAAe,CAOzD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,IAAI,GAAG,SAAS,CAGzE;AACD,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAOhE;AACD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAe1D;AACD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,GAAG,UAAU,CAkCzE;AACD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,GAAG,UAAU,CAgBxD;AACD;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,UAAU,CAwChF;AACD,wBAAgB,aAAa,CAAC,WAAW,EAAE,SAAS,UAAU,EAAE,GAAG,SAAS,GAAG,UAAU,CAcxF;AACD,wBAAgB,eAAe,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAKxD;AACD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,KAAK,GAAG,UAAU,CAMzD"}

package/dist/graph-checks.js

@@ -0,0 +1,184 @@
+import { AXES, canonicalValue, resolveTarget } from '@inventarch/language';
+import { couldMatch, matchesTarget, poolLookup, schemaReporter, schemaStructure } from './schema.js';
+import { assess } from './types.js';
+import { CHECK_IDS, isBuiltinCheck } from './check-ids.js';
+import { assertCatalog, selectEvaluator } from './catalog.js';
+export { CHECK_IDS } from './check-ids.js';
+export function finding(code, node, message, line = node.source.line, warning = false) {
+    return {
+        code,
+        severity: warning ? 'warning' : 'error',
+        path: node.source.path,
+        line,
+        identity: node.identity,
+        message: `${node.source.path}:${line}: ${node.identity}: ${message}`,
+    };
+}
+export function fields(node, section, key) {
+    return node.sections
+        .filter((s) => s.name === section)
+        .flatMap((s) => s.fields)
+        .filter((f) => 'key' in f && f.key === key);
+}
+export function textField(node, section, key) {
+    const matches = fields(node, section, key);
+    if (matches.length !== 1)
+        return undefined;
+    const value = matches[0].value;
+    return value.kind === 'scalar' || value.kind === 'string' || value.kind === 'prose' ? value.text : undefined;
+}
+export function validateGraphSchema(record, graph) {
+    const { findings, schema } = schemaStructure(record, graph.registry, graphLookup(graph)), add = schemaReporter(record, findings);
+    let unavailable = false;
+    for (const rule of schema?.edges ?? []) {
+        const refused = graph.diagnostics.some((d) => d.severity === 'error' && ['IA-GRAPH-EDGE-UNCONSENTED', 'IA-GRAPH-TARGET-AMBIGUOUS'].includes(d.code)) &&
+            [...graph.nodes.values()].some((author) => author.edges.some((edge) => edge.predicate === rule.predicate &&
+                (edge.direction === 'out'
+                    ? author.identity === record.identity
+                    : resolveTarget(edge.reference, graph.registry, [record]).kind === 'resolved') &&
+                graph.diagnostics.some((d) => d.severity === 'error' &&
+                    ['IA-GRAPH-EDGE-UNCONSENTED', 'IA-GRAPH-TARGET-AMBIGUOUS'].includes(d.code) &&
+                    d.path === author.source.path &&
+                    d.line === edge.span.line)));
+        // Admission already owns the fault. Its refused edge is neither a target nor
+        // evidence of absence: leave this dependent obligation unavailable.
+        if (refused) {
+            unavailable = true;
+            continue;
+        }
+        const targets = new Set();
+        let uncertain = false;
+        for (const edge of graph.out.get(record.identity)?.get(rule.predicate) ?? []) {
+            const target = edge.to === null ? undefined : graph.nodes.get(edge.to);
+            if (target !== undefined) {
+                if (!matchesTarget(target, rule))
+                    continue;
+                if (edge.condition !== undefined)
+                    uncertain = true;
+                else
+                    targets.add(`${target.identity}#${edge.fragmentEndpoint === 'to' ? (edge.fragment ?? '') : ''}`);
+            }
+            else if (couldMatch({ ...edge, direction: 'out', target: null, span: edge.source }, rule, graph.registry))
+                uncertain = true;
+        }
+        const minimum = rule.must && rule.cardinality !== 'optional' ? 1 : 0, maximum = rule.cardinality === 'one-or-more' ? Infinity : 1;
+        if (targets.size > maximum || (targets.size < minimum && !uncertain))
+            add('IA-COMP-EDGE-CARDINALITY', record.source, `${rule.predicate} ${rule.target} requires ${rule.must ? 'must' : 'may'} ${rule.cardinality}; found ${targets.size} definite targets`);
+        else if (uncertain && (targets.size < minimum || maximum !== Infinity))
+            add('IA-COMP-EDGE-UNRESOLVED', record.source, `${rule.predicate} ${rule.target} ${rule.cardinality} cannot be decided with unresolved targets or conditions`, true);
+    }
+    return assess('COMP-SCHEMA', record.identity, findings, unavailable);
+}
+/** The `ref to` lookup of a graph (W0-L2): one per graph, built on first use over its admitted nodes and kept for the graph's lifetime. */
+export function graphLookup(graph) {
+    let lookup = graphLookups.get(graph);
+    if (lookup === undefined) {
+        lookup = poolLookup(graph.registry, [...graph.nodes.values()]);
+        graphLookups.set(graph, lookup);
+    }
+    return lookup;
+}
+const graphLookups = new WeakMap();
+export function fragmentTarget(edge, graph) {
+    const identity = edge.fragmentEndpoint === 'from' ? edge.from : edge.to;
+    return identity === null ? undefined : graph.nodes.get(identity);
+}
+export function fragmentExists(edge, graph) {
+    const node = fragmentTarget(edge, graph);
+    return (node !== undefined &&
+        (node.requirements.some((r) => r.id === edge.fragment) ||
+            node.cells.some((c) => `${c.phase}/${c.primitive}` === edge.fragment)));
+}
+export function validateFragments(graph) {
+    const findings = [];
+    for (const edge of graph.edges) {
+        if (edge.fragment === undefined || fragmentTarget(edge, graph) === undefined || fragmentExists(edge, graph))
+            continue;
+        findings.push(finding('IA-COMP-FRAGMENT-MISSING', graph.nodes.get(edge.author), `Fragment #${edge.fragment} is absent on ${fragmentTarget(edge, graph).identity}`, edge.source.line));
+    }
+    return assess('COMP-FRAGMENT', 'graph', findings);
+}
+export function validateCoverage(contract, graph) {
+    const coverage = new Map(), kinds = new Set();
+    for (const edge of graph.in.get(contract.identity)?.get('implement') ?? []) {
+        if (edge.condition !== undefined ||
+            edge.from === null ||
+            edge.fragmentEndpoint !== 'to' ||
+            !fragmentExists(edge, graph))
+            continue;
+        const scenario = graph.nodes.get(edge.from);
+        if (scenario.discriminator !== 'case')
+            continue;
+        const cases = coverage.get(edge.fragment) ?? new Set();
+        cases.add(scenario.identity);
+        coverage.set(edge.fragment, cases);
+        const kind = textField(scenario, 'scenario', 'kind');
+        if (kind !== undefined)
+            kinds.add(kind);
+    }
+    const findings = contract.requirements
+        .filter((r) => !coverage.has(r.id))
+        .map((r) => finding('IA-COMP-COVERAGE-MISSING', contract, `Requirement ${r.id} has no unconditional implementing case`, r.span.line));
+    if (findings.length === 0 && (!kinds.has('success') || (!kinds.has('failure') && !kinds.has('refusal'))))
+        findings.push(finding('IA-COMP-COVERAGE-KIND', contract, 'Coverage requires a success case and a failure or refusal case'));
+    return assess('COMP-COVERAGE', contract.identity, findings);
+}
+export function validateSelectors(node) {
+    const findings = [];
+    for (const group of node.selectors)
+        if (group.length === 0 ||
+            new Set(group.map((t) => t.axis)).size !== group.length ||
+            group.some((t) => !AXES.includes(t.axis) || canonicalValue(t.axis, t.value) !== t.value))
+            findings.push(finding('IA-COMP-SELECTOR-INVALID', node, 'Selector group must contain unique closed routing axes and canonical values'));
+    return assess('COMP-SELECTOR', node.identity, findings);
+}
+/**
+ * COMP-CHECK (C16, C26). Without a catalog only CHECK_IDS are implemented, exactly as before. With a trusted
+ * catalog from createEvaluatorCatalog, a supported catalog id also passes; a revoked one fails and an unavailable
+ * one is not-evaluated (D5). Host-reserved ids never pass (D4). The declaration still schedules nothing.
+ */
+export function validateCheck(node, catalog) {
+    const runner = textField(node, 'check', 'runs');
+    if (catalog === undefined)
+        return assess('COMP-CHECK', node.identity, runner !== undefined && CHECK_IDS.includes(runner)
+            ? []
+            : [
+                finding('IA-COMP-CHECK-UNKNOWN', node, `Unknown or missing check.runs '${runner ?? ''}'; implemented: ${CHECK_IDS.join(', ')}`),
+            ]);
+    assertCatalog(catalog);
+    // D4: only CHECK_IDS are built in; host-reserved ids never pass and are never catalog entries.
+    if (runner !== undefined && isBuiltinCheck(runner))
+        return assess('COMP-CHECK', node.identity, []);
+    const entry = runner === undefined ? undefined : selectEvaluator(catalog, runner);
+    if (entry?.availability.status === 'supported')
+        return assess('COMP-CHECK', node.identity, []);
+    if (entry !== undefined) {
+        const message = `check.runs '${entry.id}' names catalog evaluator ${entry.id}@${entry.implementationVersion}, which is ${entry.availability.status}: ${entry.availability.reason}`;
+        // D5: revoked is a blocking error; unavailable stays visibly not-evaluated (admission blocks required obligations).
+        return entry.availability.status === 'revoked'
+            ? assess('COMP-CHECK', node.identity, [finding('IA-COMP-EVALUATOR-REVOKED', node, message)])
+            : assess('COMP-CHECK', node.identity, [finding('IA-COMP-EVALUATOR-UNAVAILABLE', node, message, node.source.line, true)], true);
+    }
+    return assess('COMP-CHECK', node.identity, [
+        finding('IA-COMP-CHECK-UNKNOWN', node, `Unknown or missing check.runs '${runner ?? ''}'; implemented: ${CHECK_IDS.join(', ')}; catalog ${catalog.digest}: ${[...new Set(catalog.entries.map((e) => e.id))].join(', ') || 'no entries'}`),
+    ]);
+}
+export function validateParse(diagnostics) {
+    return assess('COMP-PARSE', 'sources', diagnostics ?? [
+        {
+            code: 'IA-COMP-NOT-EVALUATED',
+            severity: 'warning',
+            path: '',
+            line: 1,
+            message: 'Language source diagnostics were not supplied',
+        },
+    ]);
+}
+export function validateConsent(graph) {
+    const findings = graph.diagnostics.filter((d) => ['IA-GRAPH-EDGE-UNCONSENTED', 'IA-GRAPH-TARGET-MISSING', 'IA-GRAPH-TARGET-AMBIGUOUS'].includes(d.code));
+    return assess('COMP-CONSENT', 'graph', findings, graph.dangling.length > 0);
+}
+export function validateIdentity(graph) {
+    return assess('COMP-IDENTITY', 'graph', graph.diagnostics.filter((d) => d.code === 'IA-GRAPH-IDENTITY-TIE'));
+}
+//# sourceMappingURL=graph-checks.js.map

package/dist/graph-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-checks.js","sourceRoot":"","sources":["../src/graph-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AAG3E,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,UAAU,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAErG,OAAO,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEpC,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG9D,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3C,MAAM,UAAU,OAAO,CACrB,IAA6B,EAC7B,IAAU,EACV,OAAe,EACf,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EACvB,OAAO,GAAG,KAAK;IAEf,OAAO;QACL,IAAI;QACJ,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;QACvC,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;QACtB,IAAI;QACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,KAAK,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE;KACrE,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,MAAM,CAAC,IAAU,EAAE,OAAe,EAAE,GAAW;IAC7D,OAAO,IAAI,CAAC,QAAQ;SACjB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC;SACjC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;SACxB,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;AACpE,CAAC;AACD,MAAM,UAAU,SAAS,CAAC,IAAU,EAAE,OAAe,EAAE,GAAW;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3C,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC;IAChC,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/G,CAAC;AACD,MAAM,UAAU,mBAAmB,CAAC,MAAY,EAAE,KAAY;IAC5D,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,EACtF,GAAG,GAAG,cAAc,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACzC,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,KAAK,MAAM,IAAI,IAAI,MAAM,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,OAAO,GACX,KAAK,CAAC,WAAW,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,IAAI,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAC7G;YACD,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CACxC,MAAM,CAAC,KAAK,CAAC,IAAI,CACf,CAAC,IAAI,EAAE,EAAE,CACP,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBACjC,CAAC,IAAI,CAAC,SAAS,KAAK,KAAK;oBACvB,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBACrC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC;gBAChF,KAAK,CAAC,WAAW,CAAC,IAAI,CACpB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,QAAQ,KAAK,OAAO;oBACtB,CAAC,2BAA2B,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;oBAC3E,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,CAAC,IAAI;oBAC7B,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAC5B,CACJ,CACF,CAAC;QACJ,6EAA6E;QAC7E,oEAAoE;QACpE,IAAI,OAAO,EAAE,CAAC;YACZ,WAAW,GAAG,IAAI,CAAC;YACnB,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;YAC7E,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC;oBAAE,SAAS;gBAC3C,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;oBAAE,SAAS,GAAG,IAAI,CAAC;;oBAC9C,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxG,CAAC;iBAAM,IAAI,UAAU,CAAC,EAAE,GAAG,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC;gBACzG,SAAS,GAAG,IAAI,CAAC;QACrB,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClE,OAAO,GAAG,IAAI,CAAC,WAAW,KAAK,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,OAAO,CAAC,IAAI,GAAG,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,OAAO,IAAI,CAAC,SAAS,CAAC;YAClE,GAAG,CACD,0BAA0B,EAC1B,MAAM,CAAC,MAAM,EACb,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,aAAa,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,WAAW,OAAO,CAAC,IAAI,mBAAmB,CACtI,CAAC;aACC,IAAI,SAAS,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,OAAO,IAAI,OAAO,KAAK,QAAQ,CAAC;YACpE,GAAG,CACD,yBAAyB,EACzB,MAAM,CAAC,MAAM,EACb,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,WAAW,0DAA0D,EAC9G,IAAI,CACL,CAAC;IACN,CAAC;IACD,OAAO,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AACvE,CAAC;AACD,2IAA2I;AAC3I,MAAM,UAAU,WAAW,CAAC,KAAY;IACtC,IAAI,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QAC/D,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,YAAY,GAAG,IAAI,OAAO,EAA0B,CAAC;AAC3D,MAAM,UAAU,cAAc,CAAC,IAAU,EAAE,KAAY;IACrD,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACxE,OAAO,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnE,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,IAAU,EAAE,KAAY;IACrD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzC,OAAO,CACL,IAAI,KAAK,SAAS;QAClB,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC;YACpD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC,CACzE,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAY;IAC5C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,SAAS,IAAI,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC;YACzG,SAAS;QACX,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,0BAA0B,EAC1B,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAE,EAC7B,aAAa,IAAI,CAAC,QAAQ,iBAAiB,cAAc,CAAC,IAAI,EAAE,KAAK,CAAE,CAAC,QAAQ,EAAE,EAClF,IAAI,CAAC,MAAM,CAAC,IAAI,CACjB,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,eAAe,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,QAAc,EAAE,KAAY;IAC3D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,EAC7C,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,CAAC;QAC3E,IACE,IAAI,CAAC,SAAS,KAAK,SAAS;YAC5B,IAAI,CAAC,IAAI,KAAK,IAAI;YAClB,IAAI,CAAC,gBAAgB,KAAK,IAAI;YAC9B,CAAC,cAAc,CAAC,IAAI,EAAE,KAAK,CAAC;YAE5B,SAAS;QACX,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC;QAC7C,IAAI,QAAQ,CAAC,aAAa,KAAK,MAAM;YAAE,SAAS;QAChD,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAS,CAAC,IAAI,IAAI,GAAG,EAAU,CAAC;QAChE,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC7B,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,QAAS,EAAE,KAAK,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,SAAS,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;QACrD,IAAI,IAAI,KAAK,SAAS;YAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,CAAC;IACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY;SACnC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT,OAAO,CACL,0BAA0B,EAC1B,QAAQ,EACR,eAAe,CAAC,CAAC,EAAE,yCAAyC,EAC5D,CAAC,CAAC,IAAI,CAAC,IAAI,CACZ,CACF,CAAC;IACJ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;QACtG,QAAQ,CAAC,IAAI,CACX,OAAO,CAAC,uBAAuB,EAAE,QAAQ,EAAE,gEAAgE,CAAC,CAC7G,CAAC;IACJ,OAAO,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,IAAU;IAC1C,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,SAAS;QAChC,IACE,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,MAAM;YACvD,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAE,IAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC;YAE/G,QAAQ,CAAC,IAAI,CACX,OAAO,CACL,0BAA0B,EAC1B,IAAI,EACJ,6EAA6E,CAC9E,CACF,CAAC;IACN,OAAO,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;AAC1D,CAAC;AACD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAU,EAAE,OAA0B;IAClE,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAChD,IAAI,OAAO,KAAK,SAAS;QACvB,OAAO,MAAM,CACX,YAAY,EACZ,IAAI,CAAC,QAAQ,EACb,MAAM,KAAK,SAAS,IAAK,SAA+B,CAAC,QAAQ,CAAC,MAAM,CAAC;YACvE,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC;gBACE,OAAO,CACL,uBAAuB,EACvB,IAAI,EACJ,kCAAkC,MAAM,IAAI,EAAE,mBAAmB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACxF;aACF,CACN,CAAC;IACJ,aAAa,CAAC,OAAO,CAAC,CAAC;IACvB,+FAA+F;IAC/F,IAAI,MAAM,KAAK,SAAS,IAAI,cAAc,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAClF,IAAI,KAAK,EAAE,YAAY,CAAC,MAAM,KAAK,WAAW;QAAE,OAAO,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC/F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,OAAO,GAAG,eAAe,KAAK,CAAC,EAAE,6BAA6B,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,qBAAqB,cAAc,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QACnL,oHAAoH;QACpH,OAAO,KAAK,CAAC,YAAY,CAAC,MAAM,KAAK,SAAS;YAC5C,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,2BAA2B,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;YAC5F,CAAC,CAAC,MAAM,CACJ,YAAY,EACZ,IAAI,CAAC,QAAQ,EACb,CAAC,OAAO,CAAC,+BAA+B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EACjF,IAAI,CACL,CAAC;IACR,CAAC;IACD,OAAO,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,QAAQ,EAAE;QACzC,OAAO,CACL,uBAAuB,EACvB,IAAI,EACJ,kCAAkC,MAAM,IAAI,EAAE,mBAAmB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,MAAM,KAAK,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,YAAY,EAAE,CACjM;KACF,CAAC,CAAC;AACL,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,WAA8C;IAC1E,OAAO,MAAM,CACX,YAAY,EACZ,SAAS,EACT,WAAW,IAAI;QACb;YACE,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,SAAS;YACnB,IAAI,EAAE,EAAE;YACR,IAAI,EAAE,CAAC;YACP,OAAO,EAAE,+CAA+C;SACzD;KACF,CACF,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,KAAY;IAC1C,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAC9C,CAAC,2BAA2B,EAAE,yBAAyB,EAAE,2BAA2B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CACvG,CAAC;IACF,OAAO,MAAM,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC;AACD,MAAM,UAAU,gBAAgB,CAAC,KAAY;IAC3C,OAAO,MAAM,CACX,eAAe,EACf,OAAO,EACP,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,uBAAuB,CAAC,CACpE,CAAC;AACJ,CAAC"}

package/dist/host-plugin.d.ts

@@ -0,0 +1,23 @@
+/**
+ * docs/specs/host-plugin-distribution/README.md §6.1 (amended: rendered at apply time). A pure function:
+ * the same input always yields the same files, so the caller's digest of the output identifies the plugin.
+ */
+export declare const CLAUDE_PLUGIN = "ia";
+export declare const CLAUDE_MARKETPLACE = "inventarch";
+export declare const PLUGIN_MARKER = "<!-- Generated by ia host --user; do not edit. -->";
+export interface ClaudePluginInput {
+    /** plugin.json version: `<cli version>+<first 12 hex of the payload digest>`. */
+    readonly version: string;
+    readonly cliVersion: string;
+    readonly channel: 'checkout' | 'npm' | 'unknown';
+    /** Absolute path of the CLI entry that rendered this plugin; the hook runs it first (§8.1, amended). */
+    readonly entry: string;
+    /** §5's update instruction, which the hook repeats when `ia` cannot be found. */
+    readonly install: string;
+}
+export interface PluginFile {
+    readonly path: string;
+    readonly text: string;
+}
+export declare function renderClaudePlugin(input: ClaudePluginInput): readonly PluginFile[];
+//# sourceMappingURL=host-plugin.d.ts.map

package/dist/host-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-plugin.d.ts","sourceRoot":"","sources":["../src/host-plugin.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,aAAa,OAAO,CAAC;AAClC,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAC/C,eAAO,MAAM,aAAa,uDAAuD,CAAC;AAClF,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,UAAU,GAAG,KAAK,GAAG,SAAS,CAAC;IACjD,wGAAwG;IACxG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AACD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAyJD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,iBAAiB,GAAG,SAAS,UAAU,EAAE,CA4DlF"}

package/dist/host-plugin.js

@@ -0,0 +1,204 @@
+/**
+ * docs/specs/host-plugin-distribution/README.md §6.1 (amended: rendered at apply time). A pure function:
+ * the same input always yields the same files, so the caller's digest of the output identifies the plugin.
+ */
+export const CLAUDE_PLUGIN = 'ia';
+export const CLAUDE_MARKETPLACE = 'inventarch';
+export const PLUGIN_MARKER = '<!-- Generated by ia host --user; do not edit. -->';
+const json = (value) => JSON.stringify(value, null, 2) + '\n';
+const skill = (name, description, body) => `---\nname: ${name}\ndescription: ${JSON.stringify(description)}\n---\n\n${PLUGIN_MARKER}\n\n${body}`;
+const INIT = skill('init', "Offer to initialize an InventArch workspace in this repository, or record the user's answer. Use only when the user's request involves InventArch, .ia records or their governance.", [
+    "1. Run `ia doctor --json --host claude` and read its `session` field. If this directory is already a workspace, say so and stop. If the session context reports that the user declined initialization here, today or forever, do not offer to initialize: continue with the user's request, and initialize only if the user explicitly asks to in this conversation.",
+    '2. Ask the user one question with three choices: initialize now; not today; never for this repository.',
+    '3. Initialize now: run `ia init "<repository root>" --host claude` and show the plan, where `<repository root>` is the absolute path of this project, not the shell\'s current directory. Only after the user confirms it, run `ia init "<repository root>" --apply --yes --host claude`.',
+    '4. Not today: run `ia init "<repository root>" --decline today --host claude`, then continue with the user\'s request without offering again.',
+    '5. Never: run `ia init "<repository root>" --decline forever --host claude`. Do not offer again.',
+    '6. Never search the drive, parent directories or other repositories for `.ia` trees or IA tooling. If `ia` is not found, say so and repeat the install instruction from the session context.',
+    '',
+].join('\n'));
+const DOCTOR = skill('doctor', 'Report and explain the InventArch state of this environment and workspace.', [
+    "Run `ia doctor` and explain each row that is not ok. A row's remedy is a command: offer to run it, never run a remedy that changes files without the user's confirmation. `ia doctor` never repairs anything itself.",
+    '',
+].join('\n'));
+const AUTHORING = skill('authoring', 'How to author or check .ia records in an initialized workspace: find vocabulary, validate records and inspect an admitted record.', [
+    "Find a word and its schema in the language catalogue with `ia vocabulary <word> --schema`. Check this workspace's records with `ia validate`. Inspect an admitted record with `ia inspect <identity>`. Validation establishes conformance to the declared schemas, not design quality. When the workspace names a steward for the system you are changing, hand the change to that steward.",
+    '',
+].join('\n'));
+// Operator decision 2026-09-24: this agent is active in every repository once the plugin is installed, so it is pinned
+// to reading and proposing. A subagent cannot start another one, so it names the steward rather than handing off.
+const AUTHOR = `---\nname: ia-author\ndescription: ${JSON.stringify("Delegate a multi-step .ia record review or change proposal in an initialized InventArch workspace, grounded only in what ia reports for it. For a change to one system's records, use that system's steward instead.")}\nmodel: inherit\ntools: Read, Glob, Grep, Bash\n---\n\n${PLUGIN_MARKER}\n\nYou review \`.ia\` records and propose changes to them; you do not edit files. Ground every statement in \`ia vocabulary\` (the installed language catalogue), \`ia validate\` and \`ia inspect\` output for this workspace, and cite records by path and line. If the workspace defines a steward for the system being changed, return the proposed change and that steward's name to the caller. If \`ia doctor\` reports no workspace, stop and say so.\n`;
+const HOOK = [
+    '// Generated by ia host --user; do not edit. docs/specs/host-plugin-distribution/README.md §8.',
+    "import { spawn, spawnSync } from 'node:child_process';",
+    "import { accessSync, constants, existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';",
+    "import { homedir } from 'node:os';",
+    "import { delimiter, dirname, isAbsolute, join, parse } from 'node:path';",
+    "import { fileURLToPath } from 'node:url';",
+    'const here = dirname(fileURLToPath(import.meta.url));',
+    '// Only fully qualified PATH entries count. An empty or relative entry names the project directory, which the',
+    '// repository controls, and on Windows a rooted entry without a drive or share depends on the current drive (LKI-41).',
+    'function qualified(path) {',
+    "  return isAbsolute(path) && (process.platform !== 'win32' || parse(path).root.length > 1);",
+    '}',
+    '// PATH entries that count: qualified ones only. Windows allows an entry in quotes and no quote in a file name, so the',
+    '// quotes go there; on POSIX a quote is part of a directory name and every entry stays as written.',
+    'function pathEntries() {',
+    "  const entries = (process.env.PATH || '').split(delimiter);",
+    "  return (process.platform === 'win32' ? entries.map((entry) => entry.replace(/\"/g, '')) : entries).filter(qualified);",
+    '}',
+    '// The hook looks ia up itself on every platform: cmd.exe reports an unknown command only as a localized message',
+    '// with exit 1, the status a real ia doctor failure can have, so no shell is ever asked to fail (LKI-40). Only the four',
+    '// types cmd.exe starts as programs count; the PATHEXT script types would start through Windows Script Host.',
+    'function findOnPath(name) {',
+    "  const windows = process.platform === 'win32';",
+    "  const names = windows ? ['.com', '.exe', '.bat', '.cmd'].map((extension) => name + extension) : [name];",
+    '  for (const dir of pathEntries()) {',
+    '    try {',
+    '      if (!statSync(dir).isDirectory()) continue;',
+    '    } catch { continue; /* a missing directory costs one check, not one per name */ }',
+    '    for (const candidate of names) {',
+    '      const file = join(dir, candidate);',
+    "      if (windows && file.includes('%')) continue; // cmd.exe would expand %NAME% even inside quotes",
+    '      try {',
+    '        if (!statSync(file).isFile()) continue;',
+    '        if (!windows) accessSync(file, constants.X_OK);',
+    '        return file;',
+    '      } catch { /* absent or not executable: keep looking, as the shell would */ }',
+    '    }',
+    '  }',
+    '  return null;',
+    '}',
+    '// cmd.exe by absolute path, since a bare cmd.exe would itself be looked up in the current directory first, and never',
+    "// ComSpec: Node gives a shell cmd.exe's switches only when its path matches cmd.exe with backslashes, so it would pass",
+    '// -c to another program or to cmd.exe spelled with forward slashes. The hook passes the switches itself (LKI-41).',
+    'function windowsShell() {',
+    "  const root = process.env.SystemRoot || '';",
+    "  return join(qualified(root) ? root : 'C:/Windows', 'System32', 'cmd.exe');",
+    '}',
+    "// cmd.exe's switches, passed verbatim: /d skips AutoRun commands, /v:off stops a delayed expansion that the registry",
+    '// turns on from reading a ! in the path, and /s /c runs the line inside the outer quotes as written.',
+    'function windowsArgs(file, args) {',
+    "  return ['/d', '/v:off', '/s', '/c', '\"\"' + file + '\" ' + args.join(' ') + '\"'];",
+    '}',
+    '// Every child the hook starts (doctor, an ia launcher, the update refresh) sees only the qualified entries and, on',
+    "// Windows, no implicit current directory, so its own lookups (npm's ia.cmd runs node by name; doctor runs git) cannot",
+    '// reach the project either (LKI-41).',
+    'function childEnv() {',
+    '  const env = {};',
+    "  for (const [key, value] of Object.entries(process.env)) if (key.toUpperCase() !== 'PATH') env[key] = value;",
+    '  const entries = pathEntries();',
+    '  // POSIX reads an empty PATH as the current directory, so a PATH with no qualified entry becomes the system one.',
+    "  env.PATH = entries.length > 0 || process.platform === 'win32' ? entries.join(delimiter) : '/usr/bin:/bin';",
+    "  if (process.platform === 'win32') env.NoDefaultCurrentDirectoryInExePath = '1';",
+    '  return env;',
+    '}',
+    'function main() {',
+    '  try {',
+    "    const meta = JSON.parse(readFileSync(join(here, '..', 'ia-plugin.json'), 'utf8'));",
+    "    const notFound = { context: 'InventArch: the ia CLI was not found. ' + meta.install + ' Do not search the filesystem for IA tooling.', notice: 'IA: the ia CLI was not found; see the session context.' };",
+    '    const project = process.env.CLAUDE_PROJECT_DIR || process.cwd();',
+    "    const args = ['doctor', '--json', '--host', 'claude'];",
+    "    const options = { cwd: project, encoding: 'utf8', timeout: 5000, windowsHide: true };",
+    '    const hasEntry = existsSync(meta.entry);',
+    "    const found = hasEntry ? null : findOnPath('ia');",
+    '    if (!hasEntry && found === null) return notFound;',
+    '    // The file found runs by its absolute path, on Windows through cmd.exe (a .cmd launcher needs it), so no step of',
+    '    // the launch searches the project directory (LKI-41). Not found is decided here, before anything starts.',
+    '    const run = hasEntry',
+    '      ? spawnSync(process.execPath, [meta.entry].concat(args), Object.assign({}, options, { env: childEnv() }))',
+    "      : process.platform === 'win32'",
+    '        ? spawnSync(windowsShell(), windowsArgs(found, args), Object.assign({}, options, { env: childEnv(), windowsVerbatimArguments: true }))',
+    '        : spawnSync(found, args, Object.assign({}, options, { env: childEnv() }));',
+    "    if (run.error && run.error.code === 'ETIMEDOUT') return { context: 'IA status unavailable: ia doctor timed out.', notice: null };",
+    '    if (!run.stdout) {',
+    '      const outcome = run.status ?? run.signal;',
+    "      if (outcome === null || outcome === undefined) return { context: 'IA status unavailable: ia doctor did not run.', notice: null };",
+    "      return { context: 'IA status unavailable: ia doctor exited ' + outcome + '.', notice: null };",
+    '    }',
+    '    const session = JSON.parse(run.stdout).session;',
+    "    if (!session) return { context: 'IA status unavailable: this ia does not report session state. ' + meta.install, notice: null };",
+    '    let notice = session.notice;',
+    "    if (notice && session.nudge === 'update' && process.env.CLAUDE_PLUGIN_DATA) {",
+    '      try {',
+    "        const file = join(process.env.CLAUDE_PLUGIN_DATA, 'nudged-on'), today = new Date().toLocaleDateString('en-CA');",
+    "        if (existsSync(file) && readFileSync(file, 'utf8') === today) notice = null;",
+    '        else { mkdirSync(process.env.CLAUDE_PLUGIN_DATA, { recursive: true }); writeFileSync(file, today); }',
+    '      } catch { /* the nudge file is best-effort; never let it block the briefing */ }',
+    '    }',
+    '    if (Array.isArray(session.refresh) && session.refresh.length > 0) {',
+    '      try {',
+    "        const child = spawn(session.refresh[0], session.refresh.slice(1), { cwd: homedir(), env: childEnv(), detached: true, stdio: 'ignore', windowsHide: true });",
+    "        child.on('error', () => {});",
+    '        child.unref();',
+    '      } catch { /* the refresh is best-effort; never let it block the briefing */ }',
+    '    }',
+    "    return { context: session.context.join('\\n'), notice };",
+    '  } catch (error) {',
+    "    return { context: 'IA status unavailable: ' + (error && error.code ? error.code : 'unexpected error') + '.', notice: null };",
+    '  }',
+    '}',
+    'const result = main();',
+    "process.stdout.write(JSON.stringify(Object.assign(result.notice ? { systemMessage: result.notice } : {}, { hookSpecificOutput: { hookEventName: 'SessionStart', additionalContext: result.context } })) + '\\n');",
+    'process.exitCode = 0;',
+    '',
+].join('\n');
+export function renderClaudePlugin(input) {
+    const files = [
+        {
+            path: '.claude-plugin/marketplace.json',
+            text: json({
+                name: CLAUDE_MARKETPLACE,
+                owner: { name: 'InventArch' },
+                description: 'InventArch: session state from ia doctor, and init, doctor and authoring skills for .ia workspaces.',
+                plugins: [
+                    {
+                        name: CLAUDE_PLUGIN,
+                        source: './plugins/ia',
+                        description: 'InventArch front door: session state from ia doctor, and init, doctor and authoring skills.',
+                    },
+                ],
+            }),
+        },
+        {
+            path: 'plugins/ia/.claude-plugin/plugin.json',
+            text: json({
+                name: CLAUDE_PLUGIN,
+                version: input.version,
+                description: 'InventArch front door. Reports ia doctor state at session start and offers init, doctor and authoring skills. No engine and no MCP server; workspace registration is ia host claude.',
+                author: { name: 'InventArch' },
+            }),
+        },
+        { path: 'plugins/ia/agents/ia-author.md', text: AUTHOR },
+        {
+            path: 'plugins/ia/hooks/hooks.json',
+            text: json({
+                hooks: {
+                    SessionStart: [
+                        {
+                            matcher: 'startup|clear',
+                            hooks: [
+                                { type: 'command', command: 'node "${CLAUDE_PLUGIN_ROOT}/hooks/session-start.mjs"', timeout: 10 },
+                            ],
+                        },
+                    ],
+                },
+            }),
+        },
+        { path: 'plugins/ia/hooks/session-start.mjs', text: HOOK },
+        {
+            path: 'plugins/ia/ia-plugin.json',
+            text: json({
+                format: 'ia.claude-plugin.v1',
+                cli: input.cliVersion,
+                channel: input.channel,
+                entry: input.entry,
+                install: input.install,
+            }),
+        },
+        { path: 'plugins/ia/skills/authoring/SKILL.md', text: AUTHORING },
+        { path: 'plugins/ia/skills/doctor/SKILL.md', text: DOCTOR },
+        { path: 'plugins/ia/skills/init/SKILL.md', text: INIT },
+    ];
+    return Object.freeze(files.map((file) => Object.freeze(file)));
+}
+//# sourceMappingURL=host-plugin.js.map

package/dist/host-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-plugin.js","sourceRoot":"","sources":["../src/host-plugin.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,IAAI,CAAC;AAClC,MAAM,CAAC,MAAM,kBAAkB,GAAG,YAAY,CAAC;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,oDAAoD,CAAC;AAelF,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAC/E,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,WAAmB,EAAE,IAAY,EAAU,EAAE,CACxE,cAAc,IAAI,kBAAkB,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,YAAY,aAAa,OAAO,IAAI,EAAE,CAAC;AAExG,MAAM,IAAI,GAAG,KAAK,CAChB,MAAM,EACN,qLAAqL,EACrL;IACE,sWAAsW;IACtW,wGAAwG;IACxG,2RAA2R;IAC3R,+IAA+I;IAC/I,kGAAkG;IAClG,8LAA8L;IAC9L,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACF,MAAM,MAAM,GAAG,KAAK,CAClB,QAAQ,EACR,4EAA4E,EAC5E;IACE,sNAAsN;IACtN,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACF,MAAM,SAAS,GAAG,KAAK,CACrB,WAAW,EACX,mIAAmI,EACnI;IACE,6XAA6X;IAC7X,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACF,uHAAuH;AACvH,kHAAkH;AAClH,MAAM,MAAM,GAAG,sCAAsC,IAAI,CAAC,SAAS,CAAC,sNAAsN,CAAC,2DAA2D,aAAa,kcAAkc,CAAC;AACtyB,MAAM,IAAI,GAAG;IACX,gGAAgG;IAChG,wDAAwD;IACxD,gHAAgH;IAChH,oCAAoC;IACpC,0EAA0E;IAC1E,2CAA2C;IAC3C,uDAAuD;IACvD,+GAA+G;IAC/G,uHAAuH;IACvH,4BAA4B;IAC5B,6FAA6F;IAC7F,GAAG;IACH,wHAAwH;IACxH,oGAAoG;IACpG,0BAA0B;IAC1B,8DAA8D;IAC9D,yHAAyH;IACzH,GAAG;IACH,kHAAkH;IAClH,yHAAyH;IACzH,8GAA8G;IAC9G,6BAA6B;IAC7B,iDAAiD;IACjD,2GAA2G;IAC3G,sCAAsC;IACtC,WAAW;IACX,mDAAmD;IACnD,uFAAuF;IACvF,sCAAsC;IACtC,0CAA0C;IAC1C,sGAAsG;IACtG,aAAa;IACb,iDAAiD;IACjD,yDAAyD;IACzD,sBAAsB;IACtB,oFAAoF;IACpF,OAAO;IACP,KAAK;IACL,gBAAgB;IAChB,GAAG;IACH,uHAAuH;IACvH,yHAAyH;IACzH,oHAAoH;IACpH,2BAA2B;IAC3B,8CAA8C;IAC9C,8EAA8E;IAC9E,GAAG;IACH,uHAAuH;IACvH,uGAAuG;IACvG,oCAAoC;IACpC,uFAAuF;IACvF,GAAG;IACH,qHAAqH;IACrH,wHAAwH;IACxH,uCAAuC;IACvC,uBAAuB;IACvB,mBAAmB;IACnB,+GAA+G;IAC/G,kCAAkC;IAClC,oHAAoH;IACpH,8GAA8G;IAC9G,mFAAmF;IACnF,eAAe;IACf,GAAG;IACH,mBAAmB;IACnB,SAAS;IACT,wFAAwF;IACxF,gNAAgN;IAChN,sEAAsE;IACtE,4DAA4D;IAC5D,2FAA2F;IAC3F,8CAA8C;IAC9C,uDAAuD;IACvD,uDAAuD;IACvD,uHAAuH;IACvH,+GAA+G;IAC/G,0BAA0B;IAC1B,iHAAiH;IACjH,sCAAsC;IACtC,gJAAgJ;IAChJ,oFAAoF;IACpF,uIAAuI;IACvI,wBAAwB;IACxB,iDAAiD;IACjD,yIAAyI;IACzI,qGAAqG;IACrG,OAAO;IACP,qDAAqD;IACrD,sIAAsI;IACtI,kCAAkC;IAClC,mFAAmF;IACnF,aAAa;IACb,yHAAyH;IACzH,sFAAsF;IACtF,8GAA8G;IAC9G,wFAAwF;IACxF,OAAO;IACP,yEAAyE;IACzE,aAAa;IACb,qKAAqK;IACrK,sCAAsC;IACtC,wBAAwB;IACxB,qFAAqF;IACrF,OAAO;IACP,8DAA8D;IAC9D,qBAAqB;IACrB,kIAAkI;IAClI,KAAK;IACL,GAAG;IACH,wBAAwB;IACxB,mNAAmN;IACnN,uBAAuB;IACvB,EAAE;CACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,kBAAkB,CAAC,KAAwB;IACzD,MAAM,KAAK,GAAiB;QAC1B;YACE,IAAI,EAAE,iCAAiC;YACvC,IAAI,EAAE,IAAI,CAAC;gBACT,IAAI,EAAE,kBAAkB;gBACxB,KAAK,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;gBAC7B,WAAW,EACT,qGAAqG;gBACvG,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,aAAa;wBACnB,MAAM,EAAE,cAAc;wBACtB,WAAW,EAAE,6FAA6F;qBAC3G;iBACF;aACF,CAAC;SACH;QACD;YACE,IAAI,EAAE,uCAAuC;YAC7C,IAAI,EAAE,IAAI,CAAC;gBACT,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,WAAW,EACT,sLAAsL;gBACxL,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE;aAC/B,CAAC;SACH;QACD,EAAE,IAAI,EAAE,gCAAgC,EAAE,IAAI,EAAE,MAAM,EAAE;QACxD;YACE,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,IAAI,CAAC;gBACT,KAAK,EAAE;oBACL,YAAY,EAAE;wBACZ;4BACE,OAAO,EAAE,eAAe;4BACxB,KAAK,EAAE;gCACL,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,sDAAsD,EAAE,OAAO,EAAE,EAAE,EAAE;6BAClG;yBACF;qBACF;iBACF;aACF,CAAC;SACH;QACD,EAAE,IAAI,EAAE,oCAAoC,EAAE,IAAI,EAAE,IAAI,EAAE;QAC1D;YACE,IAAI,EAAE,2BAA2B;YACjC,IAAI,EAAE,IAAI,CAAC;gBACT,MAAM,EAAE,qBAAqB;gBAC7B,GAAG,EAAE,KAAK,CAAC,UAAU;gBACrB,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,KAAK,EAAE,KAAK,CAAC,KAAK;gBAClB,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;SACH;QACD,EAAE,IAAI,EAAE,sCAAsC,EAAE,IAAI,EAAE,SAAS,EAAE;QACjE,EAAE,IAAI,EAAE,mCAAmC,EAAE,IAAI,EAAE,MAAM,EAAE;QAC3D,EAAE,IAAI,EAAE,iCAAiC,EAAE,IAAI,EAAE,IAAI,EAAE;KACxD,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACjE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,31 @@
+export { poolLookup, validateSchema } from './schema.js';
+export type { ReferenceLookup } from './schema.js';
+export { fieldTypeText } from '@inventarch/language';
+export { matchesForm, matchesType } from './values.js';
+export { COMP_CODES, EVIDENCE_CODES, verdict } from './types.js';
+export type { Assessment, CompCode, EvidenceCode, Finding, Verdict } from './types.js';
+export { validateSystems } from './systems.js';
+export type { SystemFolder } from './systems.js';
+export { CHECK_IDS, graphLookup, validateGraphSchema, validateFragments, validateCoverage, validateSelectors, validateCheck, validateParse, validateConsent, validateIdentity, } from './graph-checks.js';
+export { validateVariants } from './variants.js';
+export { validateAdoption } from './adoption.js';
+export type { AdoptionEvaluators, ClauseContext, ClauseEvaluator, ClauseResult } from './adoption.js';
+export { EVALUATOR_CATALOG_FORMAT, EVALUATOR_CONTRACT_MAJORS, bindEvaluators, createEvaluatorCatalog, isEvaluatorCatalog, selectEvaluator, } from './catalog.js';
+export type { CatalogInput, CatalogOptions, CatalogResult, EnvironmentProfile, EvaluatorAvailability, EvaluatorBinding, EvaluatorCatalog, EvaluatorCodec, EvaluatorEntry, EvaluatorLimits, EvidencePolicy, } from './catalog.js';
+export { RESOLUTION_FORMAT, inspectObligations, resolutionDigest, resolveObligations } from './obligations.js';
+export type { Applicability, ApplicabilityPredicate, Obligation, ObligationAdoption, ObligationEvaluator, ObligationExplanation, ObligationInput, ObligationOccurrence, ObligationResolution, ObligationRow, PackageDirective, ScopeFact, ScopeFacts, } from './obligations.js';
+export { EVALUATION_PROFILES, profileOccurrences } from './profiles.js';
+export type { EvaluationProfile, ProfileBinding } from './profiles.js';
+export { EVIDENCE_RECEIPT_FORMAT, EVIDENCE_RESULTS, acceptEvaluatorOutput, adaptBuiltinVerdict, admitTransition, evidenceDigest, evidenceKey, validateReceipt, } from './evidence.js';
+export type { AdmissionContext, CandidateDigests, EnvironmentIdentity, EvaluatorIdentity, EvaluatorObservation, EvaluatorOutcome, EvidenceReceipt, EvidenceResult, ObligationDecision, ReceiptContext, ReceiptExpectation, ReceiptTrust, ReceiptValidation, TransitionDecision, } from './evidence.js';
+export { evaluate } from './report.js';
+export type { Report, ReportOptions } from './report.js';
+export { runLanguageFixture, fixtureCoverage } from './fixtures.js';
+export type { FixtureResult, LanguageFixture } from './fixtures.js';
+export { renderHostArtifacts, PROJECTION_MARKER, LEGACY_STEWARD_TOOLS, REQUIRE_STEWARD_PROFILES, STEWARD_HOST_TABLE, } from './projections.js';
+export type { HostArtifact, HostArtifacts, ProjectionMembership, RenderOptions } from './projections.js';
+export { renderWorkspaceProjection, WORKSPACE_PROJECTION_MARKER } from './workspace-projection.js';
+export type { WorkspaceProjectionInput } from './workspace-projection.js';
+export { CLAUDE_MARKETPLACE, CLAUDE_PLUGIN, PLUGIN_MARKER, renderClaudePlugin } from './host-plugin.js';
+export type { ClaudePluginInput, PluginFile } from './host-plugin.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACjE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EACL,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,eAAe,EACf,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AACtG,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,YAAY,EACZ,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,EAChB,cAAc,EACd,cAAc,EACd,eAAe,EACf,cAAc,GACf,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC/G,YAAY,EACV,aAAa,EACb,sBAAsB,EACtB,UAAU,EACV,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,aAAa,EACb,gBAAgB,EAChB,SAAS,EACT,UAAU,GACX,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACxE,YAAY,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AACvE,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,kBAAkB,EAClB,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACzG,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AACnG,YAAY,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACxG,YAAY,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/index.js

@@ -0,0 +1,18 @@
+export { poolLookup, validateSchema } from './schema.js';
+export { fieldTypeText } from '@inventarch/language';
+export { matchesForm, matchesType } from './values.js';
+export { COMP_CODES, EVIDENCE_CODES, verdict } from './types.js';
+export { validateSystems } from './systems.js';
+export { CHECK_IDS, graphLookup, validateGraphSchema, validateFragments, validateCoverage, validateSelectors, validateCheck, validateParse, validateConsent, validateIdentity, } from './graph-checks.js';
+export { validateVariants } from './variants.js';
+export { validateAdoption } from './adoption.js';
+export { EVALUATOR_CATALOG_FORMAT, EVALUATOR_CONTRACT_MAJORS, bindEvaluators, createEvaluatorCatalog, isEvaluatorCatalog, selectEvaluator, } from './catalog.js';
+export { RESOLUTION_FORMAT, inspectObligations, resolutionDigest, resolveObligations } from './obligations.js';
+export { EVALUATION_PROFILES, profileOccurrences } from './profiles.js';
+export { EVIDENCE_RECEIPT_FORMAT, EVIDENCE_RESULTS, acceptEvaluatorOutput, adaptBuiltinVerdict, admitTransition, evidenceDigest, evidenceKey, validateReceipt, } from './evidence.js';
+export { evaluate } from './report.js';
+export { runLanguageFixture, fixtureCoverage } from './fixtures.js';
+export { renderHostArtifacts, PROJECTION_MARKER, LEGACY_STEWARD_TOOLS, REQUIRE_STEWARD_PROFILES, STEWARD_HOST_TABLE, } from './projections.js';
+export { renderWorkspaceProjection, WORKSPACE_PROJECTION_MARKER } from './workspace-projection.js';
+export { CLAUDE_MARKETPLACE, CLAUDE_PLUGIN, PLUGIN_MARKER, renderClaudePlugin } from './host-plugin.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EACL,SAAS,EACT,WAAW,EACX,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,iBAAiB,EACjB,aAAa,EACb,aAAa,EACb,eAAe,EACf,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEjD,OAAO,EACL,wBAAwB,EACxB,yBAAyB,EACzB,cAAc,EACd,sBAAsB,EACtB,kBAAkB,EAClB,eAAe,GAChB,MAAM,cAAc,CAAC;AActB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAgB/G,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAExE,OAAO,EACL,uBAAuB,EACvB,gBAAgB,EAChB,qBAAqB,EACrB,mBAAmB,EACnB,eAAe,EACf,cAAc,EACd,WAAW,EACX,eAAe,GAChB,MAAM,eAAe,CAAC;AAiBvB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEvC,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEpE,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,oBAAoB,EACpB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAEnG,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC"}