@itsthelore/proofkeeper 2026.6.0

package/dist/runner/types.js

@@ -0,0 +1,10 @@
+/**
+ * The runner interface — Proofkeeper Initiative 4.
+ *
+ * A runner executes a compiled suite fast and in parallel across targets and
+ * operating systems, emitting a replayable trace per result. The interface is
+ * pluggable on purpose: the open-source local runner and the (out-of-scope for
+ * v0.0.1) hosted VM-fabric runner are two implementations of the same shape.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/runner/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/runner/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/scaffold/scaffold.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Config scaffolding — the in-scope MVP of Factory's `/install-qa`. Generates a
+ * `proofkeeper.config.json` skeleton from the published Lore graph (`rac export
+ * --graph`), the contract Proofkeeper already consumes. It reads only that
+ * contract — never product source — so it stays within the verification mandate.
+ * The user then narrows each capability's path globs and adds auth/personas.
+ */
+import type { Graph } from "../coverage/graph.js";
+import type { ProofkeeperConfig } from "../scope/config.js";
+export interface ScaffoldOptions {
+    /** Development environment URL. Defaults to http://localhost:3000. */
+    url?: string;
+}
+/**
+ * Generate a config skeleton from the graph: one capability per requirement node
+ * (unverified first), plus a starter environment, default target, and
+ * failure-learning strategy. Pure and deterministic.
+ */
+export declare function scaffoldConfig(graph: Graph, options?: ScaffoldOptions): ProofkeeperConfig;
+/** Pretty-print a scaffolded config as JSON (trailing newline). */
+export declare function renderScaffoldedConfig(config: ProofkeeperConfig): string;
+//# sourceMappingURL=scaffold.d.ts.map

package/dist/scaffold/scaffold.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold.d.ts","sourceRoot":"","sources":["../../src/scaffold/scaffold.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,EAAoB,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAE9E,MAAM,WAAW,eAAe;IAC9B,sEAAsE;IACtE,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,GAAE,eAAoB,GAAG,iBAAiB,CAe7F;AAED,mEAAmE;AACnE,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAExE"}

package/dist/scaffold/scaffold.js

@@ -0,0 +1,34 @@
+/**
+ * Config scaffolding — the in-scope MVP of Factory's `/install-qa`. Generates a
+ * `proofkeeper.config.json` skeleton from the published Lore graph (`rac export
+ * --graph`), the contract Proofkeeper already consumes. It reads only that
+ * contract — never product source — so it stays within the verification mandate.
+ * The user then narrows each capability's path globs and adds auth/personas.
+ */
+import { computeCoverage } from "../coverage/model.js";
+/**
+ * Generate a config skeleton from the graph: one capability per requirement node
+ * (unverified first), plus a starter environment, default target, and
+ * failure-learning strategy. Pure and deterministic.
+ */
+export function scaffoldConfig(graph, options = {}) {
+    const report = computeCoverage(graph);
+    // Unverified capabilities first — those most in need of a verifying test.
+    const ordered = [...report.unverified, ...report.verified];
+    const capabilities = ordered.map((c) => ({
+        id: c.id,
+        paths: ["src/**"],
+        environment: "development",
+    }));
+    return {
+        environments: { development: { url: options.url ?? "http://localhost:3000" } },
+        defaultTarget: "development",
+        failureLearning: "suggest_in_report",
+        capabilities,
+    };
+}
+/** Pretty-print a scaffolded config as JSON (trailing newline). */
+export function renderScaffoldedConfig(config) {
+    return JSON.stringify(config, null, 2) + "\n";
+}
+//# sourceMappingURL=scaffold.js.map

package/dist/scaffold/scaffold.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scaffold.js","sourceRoot":"","sources":["../../src/scaffold/scaffold.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AASvD;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,KAAY,EAAE,UAA2B,EAAE;IACxE,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,0EAA0E;IAC1E,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,UAAU,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,YAAY,GAAuB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3D,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,WAAW,EAAE,aAAa;KAC3B,CAAC,CAAC,CAAC;IACJ,OAAO;QACL,YAAY,EAAE,EAAE,WAAW,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,uBAAuB,EAAE,EAAE;QAC9E,aAAa,EAAE,aAAa;QAC5B,eAAe,EAAE,mBAAmB;QACpC,YAAY;KACb,CAAC;AACJ,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,sBAAsB,CAAC,MAAyB;IAC9D,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;AAChD,CAAC"}

package/dist/scope/config.d.ts

@@ -0,0 +1,89 @@
+/**
+ * The Proofkeeper scope config — which capabilities a changed file touches.
+ *
+ * Modeled on Factory automated-qa's `path_patterns`: a config maps each
+ * capability to the source-path globs whose change implies it should be
+ * re-verified, plus optional drive overrides (start URL, goal) and the corpus
+ * artifact to write `## Verified By` back to. It is the only place Proofkeeper
+ * needs to know how product capabilities relate to source files.
+ */
+/** One capability's scoping entry. */
+export interface CapabilityConfig {
+    /** The requirement id (must be a capability node in the graph). */
+    id: string;
+    /** Source-path globs; a changed file matching any of these scopes this capability. */
+    paths: string[];
+    /** Optional start URL for the drive (overrides any environment). */
+    url?: string;
+    /** Optional named environment to target (else the config's default target). */
+    environment?: string;
+    /** Optional persona (role) to drive this capability as. */
+    persona?: string;
+    /** Optional goal for the model (else derived from the capability). */
+    goal?: string;
+    /** Optional corpus artifact path to propose the write-back to. */
+    artifact?: string;
+}
+/** A user role the drive can act as. */
+export interface PersonaConfig {
+    name: string;
+    /** Areas this role should focus on. */
+    testFocus?: string[];
+    /** Actions this role must not perform. */
+    cannotDo?: string[];
+}
+/** A named environment the drive can target. */
+export interface EnvironmentConfig {
+    url: string;
+    /** Human-readable directives the drive must respect (e.g. "read-only; never create data"). */
+    restrictions?: string[];
+}
+/** How the product authenticates — described, never the credentials themselves. */
+export interface AuthConfig {
+    method: string;
+    provider?: string;
+}
+/** How accumulated failure knowledge is surfaced (Factory automated-qa's `failure_learning`). */
+export type FailureLearningStrategy = "suggest_in_report" | "auto_commit" | "open_a_pr";
+export interface ProofkeeperConfig {
+    capabilities: CapabilityConfig[];
+    /** Named environments (e.g. development, production). */
+    environments?: Record<string, EnvironmentConfig>;
+    /** The default environment name used when a capability names none. */
+    defaultTarget?: string;
+    /** How the product authenticates. */
+    auth?: AuthConfig;
+    /** User roles a capability can be driven as. */
+    personas?: PersonaConfig[];
+    /** How failure knowledge is surfaced. Defaults to `suggest_in_report`. */
+    failureLearning?: FailureLearningStrategy;
+}
+/** A capability's resolved run target. */
+export interface ResolvedTarget {
+    name: string;
+    url: string;
+    restrictions: string[];
+}
+/** Raised when the config is not a recognizable shape. */
+export declare class ConfigParseError extends Error {
+    constructor(message: string);
+}
+/** Parse a Proofkeeper config from JSON. Strict on the shape scoping depends on. */
+export declare function parseConfig(json: string): ProofkeeperConfig;
+/**
+ * Goal context for a capability's selected persona, or undefined when it names
+ * none. Throws when the named persona is not defined in the config.
+ */
+export declare function personaContext(config: ProofkeeperConfig, cap: CapabilityConfig): string | undefined;
+/**
+ * Resolve a capability's run target: an explicit `cap.url` wins; otherwise the
+ * environment named by `cap.environment ?? config.defaultTarget`; otherwise the
+ * caller's fallback URL. Returns undefined when no URL can be determined.
+ */
+export declare function resolveTarget(config: ProofkeeperConfig, cap: CapabilityConfig, opts: {
+    fallbackUrl?: string;
+    defaultName: string;
+}): ResolvedTarget | undefined;
+/** A one-line auth context for the drive goal, or undefined when no auth is configured. */
+export declare function authContext(config: ProofkeeperConfig): string | undefined;
+//# sourceMappingURL=config.d.ts.map

package/dist/scope/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/scope/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,sCAAsC;AACtC,MAAM,WAAW,gBAAgB;IAC/B,mEAAmE;IACnE,EAAE,EAAE,MAAM,CAAC;IACX,sFAAsF;IACtF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sEAAsE;IACtE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kEAAkE;IAClE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,uCAAuC;IACvC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,8FAA8F;IAC9F,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,iGAAiG;AACjG,MAAM,MAAM,uBAAuB,GAAG,mBAAmB,GAAG,aAAa,GAAG,WAAW,CAAC;AAQxF,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,gBAAgB,EAAE,CAAC;IACjC,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;IACjD,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,qCAAqC;IACrC,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB,gDAAgD;IAChD,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,0EAA0E;IAC1E,eAAe,CAAC,EAAE,uBAAuB,CAAC;CAC3C;AAED,0CAA0C;AAC1C,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,0DAA0D;AAC1D,qBAAa,gBAAiB,SAAQ,KAAK;gBAC7B,OAAO,EAAE,MAAM;CAI5B;AA0ED,oFAAoF;AACpF,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAkB3D;AASD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAQnG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,iBAAiB,EACzB,GAAG,EAAE,gBAAgB,EACrB,IAAI,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAClD,cAAc,GAAG,SAAS,CAa5B;AAED,2FAA2F;AAC3F,wBAAgB,WAAW,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAGzE"}

package/dist/scope/config.js

@@ -0,0 +1,172 @@
+/**
+ * The Proofkeeper scope config — which capabilities a changed file touches.
+ *
+ * Modeled on Factory automated-qa's `path_patterns`: a config maps each
+ * capability to the source-path globs whose change implies it should be
+ * re-verified, plus optional drive overrides (start URL, goal) and the corpus
+ * artifact to write `## Verified By` back to. It is the only place Proofkeeper
+ * needs to know how product capabilities relate to source files.
+ */
+const FAILURE_LEARNING_STRATEGIES = [
+    "suggest_in_report",
+    "auto_commit",
+    "open_a_pr",
+];
+/** Raised when the config is not a recognizable shape. */
+export class ConfigParseError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ConfigParseError";
+    }
+}
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseCapability(raw, index) {
+    if (!isObject(raw))
+        throw new ConfigParseError(`capabilities[${index}] is not an object`);
+    const id = raw["id"];
+    if (typeof id !== "string" || id === "") {
+        throw new ConfigParseError(`capabilities[${index}].id must be a non-empty string`);
+    }
+    const paths = raw["paths"];
+    if (!Array.isArray(paths) || paths.length === 0 || !paths.every((p) => typeof p === "string")) {
+        throw new ConfigParseError(`capabilities[${index}].paths must be a non-empty array of glob strings`);
+    }
+    const cap = { id, paths: paths };
+    if (typeof raw["url"] === "string")
+        cap.url = raw["url"];
+    if (typeof raw["environment"] === "string")
+        cap.environment = raw["environment"];
+    if (typeof raw["persona"] === "string")
+        cap.persona = raw["persona"];
+    if (typeof raw["goal"] === "string")
+        cap.goal = raw["goal"];
+    if (typeof raw["artifact"] === "string")
+        cap.artifact = raw["artifact"];
+    return cap;
+}
+function stringArray(value, where) {
+    if (!Array.isArray(value) || !value.every((v) => typeof v === "string")) {
+        throw new ConfigParseError(`${where} must be an array of strings`);
+    }
+    return value;
+}
+function parsePersonas(raw) {
+    if (!Array.isArray(raw))
+        throw new ConfigParseError("`personas` must be an array");
+    return raw.map((value, index) => {
+        if (!isObject(value) || typeof value["name"] !== "string" || value["name"] === "") {
+            throw new ConfigParseError(`personas[${index}].name must be a non-empty string`);
+        }
+        const persona = { name: value["name"] };
+        if (value["testFocus"] !== undefined)
+            persona.testFocus = stringArray(value["testFocus"], `personas[${index}].testFocus`);
+        if (value["cannotDo"] !== undefined)
+            persona.cannotDo = stringArray(value["cannotDo"], `personas[${index}].cannotDo`);
+        return persona;
+    });
+}
+function parseEnvironments(raw) {
+    if (!isObject(raw))
+        throw new ConfigParseError("`environments` must be an object");
+    const out = {};
+    for (const [name, value] of Object.entries(raw)) {
+        if (!isObject(value) || typeof value["url"] !== "string") {
+            throw new ConfigParseError(`environment '${name}' must have a string url`);
+        }
+        const env = { url: value["url"] };
+        const restrictions = value["restrictions"];
+        if (restrictions !== undefined) {
+            if (!Array.isArray(restrictions) || !restrictions.every((r) => typeof r === "string")) {
+                throw new ConfigParseError(`environment '${name}'.restrictions must be an array of strings`);
+            }
+            env.restrictions = restrictions;
+        }
+        out[name] = env;
+    }
+    return out;
+}
+function parseAuth(raw) {
+    if (!isObject(raw) || typeof raw["method"] !== "string") {
+        throw new ConfigParseError("`auth` must have a string method");
+    }
+    const auth = { method: raw["method"] };
+    if (typeof raw["provider"] === "string")
+        auth.provider = raw["provider"];
+    return auth;
+}
+/** Parse a Proofkeeper config from JSON. Strict on the shape scoping depends on. */
+export function parseConfig(json) {
+    let raw;
+    try {
+        raw = JSON.parse(json);
+    }
+    catch (err) {
+        throw new ConfigParseError(`config is not valid JSON: ${err.message}`);
+    }
+    if (!isObject(raw) || !Array.isArray(raw["capabilities"])) {
+        throw new ConfigParseError("config must be an object with a `capabilities` array");
+    }
+    const config = { capabilities: raw["capabilities"].map(parseCapability) };
+    if (raw["environments"] !== undefined)
+        config.environments = parseEnvironments(raw["environments"]);
+    if (typeof raw["defaultTarget"] === "string")
+        config.defaultTarget = raw["defaultTarget"];
+    if (raw["auth"] !== undefined)
+        config.auth = parseAuth(raw["auth"]);
+    if (raw["personas"] !== undefined)
+        config.personas = parsePersonas(raw["personas"]);
+    config.failureLearning =
+        raw["failureLearning"] !== undefined ? parseFailureLearning(raw["failureLearning"]) : "suggest_in_report";
+    return config;
+}
+function parseFailureLearning(raw) {
+    if (typeof raw !== "string" || !FAILURE_LEARNING_STRATEGIES.includes(raw)) {
+        throw new ConfigParseError(`failureLearning must be one of: ${FAILURE_LEARNING_STRATEGIES.join(", ")}`);
+    }
+    return raw;
+}
+/**
+ * Goal context for a capability's selected persona, or undefined when it names
+ * none. Throws when the named persona is not defined in the config.
+ */
+export function personaContext(config, cap) {
+    if (cap.persona === undefined)
+        return undefined;
+    const persona = config.personas?.find((p) => p.name === cap.persona);
+    if (!persona)
+        throw new ConfigParseError(`capability '${cap.id}' references undefined persona '${cap.persona}'`);
+    const parts = [`Act as the ${persona.name} persona.`];
+    if (persona.testFocus && persona.testFocus.length > 0)
+        parts.push(`Focus on: ${persona.testFocus.join(", ")}.`);
+    if (persona.cannotDo && persona.cannotDo.length > 0)
+        parts.push(`Do not: ${persona.cannotDo.join(", ")}.`);
+    return parts.join(" ");
+}
+/**
+ * Resolve a capability's run target: an explicit `cap.url` wins; otherwise the
+ * environment named by `cap.environment ?? config.defaultTarget`; otherwise the
+ * caller's fallback URL. Returns undefined when no URL can be determined.
+ */
+export function resolveTarget(config, cap, opts) {
+    if (cap.url !== undefined) {
+        return { name: opts.defaultName, url: cap.url, restrictions: [] };
+    }
+    const envName = cap.environment ?? config.defaultTarget;
+    const env = envName !== undefined ? config.environments?.[envName] : undefined;
+    if (env) {
+        return { name: envName, url: env.url, restrictions: env.restrictions ?? [] };
+    }
+    if (opts.fallbackUrl !== undefined) {
+        return { name: opts.defaultName, url: opts.fallbackUrl, restrictions: [] };
+    }
+    return undefined;
+}
+/** A one-line auth context for the drive goal, or undefined when no auth is configured. */
+export function authContext(config) {
+    if (!config.auth)
+        return undefined;
+    return `Authentication: ${config.auth.method}${config.auth.provider ? ` via ${config.auth.provider}` : ""}.`;
+}
+//# sourceMappingURL=config.js.map

package/dist/scope/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/scope/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AA6CH,MAAM,2BAA2B,GAAuC;IACtE,mBAAmB;IACnB,aAAa;IACb,WAAW;CACZ,CAAC;AAuBF,0DAA0D;AAC1D,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACzC,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,eAAe,CAAC,GAAY,EAAE,KAAa;IAClD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,KAAK,oBAAoB,CAAC,CAAC;IAC1F,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACrB,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,KAAK,iCAAiC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QAC9F,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,KAAK,mDAAmD,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,GAAG,GAAqB,EAAE,EAAE,EAAE,KAAK,EAAE,KAAiB,EAAE,CAAC;IAC/D,IAAI,OAAO,GAAG,CAAC,KAAK,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC;IACzD,IAAI,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,aAAa,CAAC,CAAC;IACjF,IAAI,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IACrE,IAAI,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5D,IAAI,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACxE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAa;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;QACxE,MAAM,IAAI,gBAAgB,CAAC,GAAG,KAAK,8BAA8B,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAiB,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,6BAA6B,CAAC,CAAC;IACnF,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YAClF,MAAM,IAAI,gBAAgB,CAAC,YAAY,KAAK,mCAAmC,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,OAAO,GAAkB,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;QACvD,IAAI,KAAK,CAAC,WAAW,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,YAAY,KAAK,aAAa,CAAC,CAAC;QAC1H,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,UAAU,CAAC,EAAE,YAAY,KAAK,YAAY,CAAC,CAAC;QACtH,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;IACnF,MAAM,GAAG,GAAsC,EAAE,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,EAAE,CAAC;YACzD,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,IAAI,0BAA0B,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,GAAG,GAAsB,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,YAAY,GAAG,KAAK,CAAC,cAAc,CAAC,CAAC;QAC3C,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;gBACtF,MAAM,IAAI,gBAAgB,CAAC,gBAAgB,IAAI,4CAA4C,CAAC,CAAC;YAC/F,CAAC;YACD,GAAG,CAAC,YAAY,GAAG,YAAwB,CAAC;QAC9C,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ,EAAE,CAAC;QACxD,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,IAAI,GAAe,EAAE,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;IACnD,IAAI,OAAO,GAAG,CAAC,UAAU,CAAC,KAAK,QAAQ;QAAE,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC;IACzE,OAAO,IAAI,CAAC;AACd,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,gBAAgB,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,gBAAgB,CAAC,sDAAsD,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAsB,EAAE,YAAY,EAAE,GAAG,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;IAC7F,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,SAAS;QAAE,MAAM,CAAC,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC;IACpG,IAAI,OAAO,GAAG,CAAC,eAAe,CAAC,KAAK,QAAQ;QAAE,MAAM,CAAC,aAAa,GAAG,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1F,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IACpE,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,SAAS;QAAE,MAAM,CAAC,QAAQ,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,eAAe;QACpB,GAAG,CAAC,iBAAiB,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,oBAAoB,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC;IAC5G,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAY;IACxC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,GAA8B,CAAC,EAAE,CAAC;QACrG,MAAM,IAAI,gBAAgB,CAAC,mCAAmC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,OAAO,GAA8B,CAAC;AACxC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,MAAyB,EAAE,GAAqB;IAC7E,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,gBAAgB,CAAC,eAAe,GAAG,CAAC,EAAE,mCAAmC,GAAG,CAAC,OAAO,GAAG,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,CAAC,cAAc,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChH,IAAI,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3G,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAyB,EACzB,GAAqB,EACrB,IAAmD;IAEnD,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,aAAa,CAAC;IACxD,MAAM,GAAG,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,GAAG,EAAE,CAAC;QACR,OAAO,EAAE,IAAI,EAAE,OAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACnC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,EAAE,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,MAAyB;IACnD,IAAI,CAAC,MAAM,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,mBAAmB,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;AAC/G,CAAC"}

package/dist/scope/diff-scope.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Scope verification to a change — Proofkeeper's PR-triggered QA.
+ *
+ * Given the files a pull request changed, the scope config, and the coverage
+ * graph, decide which capabilities the change touches and which of those still
+ * lack a verifying test. Pure: no git, no I/O. The CLI supplies the changed
+ * paths (from `--changed` or a `git diff`); this decides what to drive.
+ */
+import type { Graph } from "../coverage/graph.js";
+import type { CapabilityConfig, ProofkeeperConfig } from "./config.js";
+/** A capability the change touched, with how it matched and its verified state. */
+export interface ScopedCapability {
+    id: string;
+    title: string;
+    config: CapabilityConfig;
+    /** True when the graph already has a verifying test for it. */
+    verified: boolean;
+    /** The changed paths that matched this capability's globs. */
+    matchedPaths: string[];
+}
+export interface ScopeResult {
+    /** Capabilities whose source paths intersect the diff. */
+    scoped: ScopedCapability[];
+    /** The subset of `scoped` that is currently unverified — the drive targets. */
+    toVerify: ScopedCapability[];
+    /** Config ids that matched the diff but are not capability nodes in the graph. */
+    unknown: string[];
+}
+/** Decide which capabilities a set of changed paths touches, and which need verifying. */
+export declare function scopeCapabilities(changedPaths: string[], config: ProofkeeperConfig, graph: Graph): ScopeResult;
+//# sourceMappingURL=diff-scope.d.ts.map

package/dist/scope/diff-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-scope.d.ts","sourceRoot":"","sources":["../../src/scope/diff-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGvE,mFAAmF;AACnF,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,gBAAgB,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,0DAA0D;IAC1D,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,+EAA+E;IAC/E,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IAC7B,kFAAkF;IAClF,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,0FAA0F;AAC1F,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EAAE,EACtB,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,KAAK,GACX,WAAW,CA8Bb"}

package/dist/scope/diff-scope.js

@@ -0,0 +1,42 @@
+/**
+ * Scope verification to a change — Proofkeeper's PR-triggered QA.
+ *
+ * Given the files a pull request changed, the scope config, and the coverage
+ * graph, decide which capabilities the change touches and which of those still
+ * lack a verifying test. Pure: no git, no I/O. The CLI supplies the changed
+ * paths (from `--changed` or a `git diff`); this decides what to drive.
+ */
+import { computeCoverage } from "../coverage/model.js";
+import { matchesAnyGlob } from "./glob.js";
+/** Decide which capabilities a set of changed paths touches, and which need verifying. */
+export function scopeCapabilities(changedPaths, config, graph) {
+    const report = computeCoverage(graph);
+    const titleById = new Map();
+    const verifiedIds = new Set();
+    for (const c of report.verified) {
+        titleById.set(c.id, c.title);
+        verifiedIds.add(c.id);
+    }
+    for (const c of report.unverified)
+        titleById.set(c.id, c.title);
+    const scoped = [];
+    const unknown = [];
+    for (const cap of config.capabilities) {
+        const matchedPaths = changedPaths.filter((p) => matchesAnyGlob(p, cap.paths));
+        if (matchedPaths.length === 0)
+            continue;
+        if (!titleById.has(cap.id)) {
+            unknown.push(cap.id);
+            continue;
+        }
+        scoped.push({
+            id: cap.id,
+            title: titleById.get(cap.id),
+            config: cap,
+            verified: verifiedIds.has(cap.id),
+            matchedPaths,
+        });
+    }
+    return { scoped, toVerify: scoped.filter((s) => !s.verified), unknown };
+}
+//# sourceMappingURL=diff-scope.js.map

package/dist/scope/diff-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-scope.js","sourceRoot":"","sources":["../../src/scope/diff-scope.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAsB3C,0FAA0F;AAC1F,MAAM,UAAU,iBAAiB,CAC/B,YAAsB,EACtB,MAAyB,EACzB,KAAY;IAEZ,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC5C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QAChC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;QAC7B,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU;QAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAEhE,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,OAAO,GAAa,EAAE,CAAC;IAE7B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QACD,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,GAAG,CAAC,EAAE;YACV,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAE;YAC7B,MAAM,EAAE,GAAG;YACX,QAAQ,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACjC,YAAY;SACb,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;AAC1E,CAAC"}

package/dist/scope/glob.d.ts

@@ -0,0 +1,17 @@
+/**
+ * A tiny, dependency-free glob matcher for scoping capabilities by changed
+ * files (Factory automated-qa's `path_patterns`). Proofkeeper bundles no glob
+ * library; this covers the patterns a path map needs:
+ *
+ *  - `*`  matches within a path segment (any run of non-`/` characters)
+ *  - `**` matches across segments (any characters, including `/`)
+ *  - `**​/` matches zero or more leading directories
+ *  - `?`  matches a single non-`/` character
+ *
+ * Everything else is matched literally. Patterns are anchored to the full path.
+ */
+/** Compile a glob to an anchored RegExp. Pure and deterministic. */
+export declare function globToRegExp(glob: string): RegExp;
+/** True when `path` matches any of the globs. */
+export declare function matchesAnyGlob(path: string, globs: string[]): boolean;
+//# sourceMappingURL=glob.d.ts.map

package/dist/scope/glob.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.d.ts","sourceRoot":"","sources":["../../src/scope/glob.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,oEAAoE;AACpE,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAyBjD;AAED,iDAAiD;AACjD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAErE"}

package/dist/scope/glob.js

@@ -0,0 +1,50 @@
+/**
+ * A tiny, dependency-free glob matcher for scoping capabilities by changed
+ * files (Factory automated-qa's `path_patterns`). Proofkeeper bundles no glob
+ * library; this covers the patterns a path map needs:
+ *
+ *  - `*`  matches within a path segment (any run of non-`/` characters)
+ *  - `**` matches across segments (any characters, including `/`)
+ *  - `**​/` matches zero or more leading directories
+ *  - `?`  matches a single non-`/` character
+ *
+ * Everything else is matched literally. Patterns are anchored to the full path.
+ */
+const REGEX_SPECIAL = new Set("\\^$.|+()[]{}".split(""));
+/** Compile a glob to an anchored RegExp. Pure and deterministic. */
+export function globToRegExp(glob) {
+    let re = "";
+    for (let i = 0; i < glob.length; i++) {
+        const c = glob[i];
+        if (c === "*") {
+            if (glob[i + 1] === "*") {
+                i++; // consume the second '*'
+                if (glob[i + 1] === "/") {
+                    i++; // consume the '/'
+                    re += "(?:.*/)?"; // '**/' → zero or more directories
+                }
+                else {
+                    re += ".*"; // '**' → anything, across separators
+                }
+            }
+            else {
+                re += "[^/]*"; // '*' → within a segment
+            }
+        }
+        else if (c === "?") {
+            re += "[^/]";
+        }
+        else if (REGEX_SPECIAL.has(c)) {
+            re += "\\" + c;
+        }
+        else {
+            re += c;
+        }
+    }
+    return new RegExp("^" + re + "$");
+}
+/** True when `path` matches any of the globs. */
+export function matchesAnyGlob(path, globs) {
+    return globs.some((g) => globToRegExp(g).test(path));
+}
+//# sourceMappingURL=glob.js.map

package/dist/scope/glob.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"glob.js","sourceRoot":"","sources":["../../src/scope/glob.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAEzD,oEAAoE;AACpE,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACd,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;gBACxB,CAAC,EAAE,CAAC,CAAC,yBAAyB;gBAC9B,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;oBACxB,CAAC,EAAE,CAAC,CAAC,kBAAkB;oBACvB,EAAE,IAAI,UAAU,CAAC,CAAC,mCAAmC;gBACvD,CAAC;qBAAM,CAAC;oBACN,EAAE,IAAI,IAAI,CAAC,CAAC,qCAAqC;gBACnD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,EAAE,IAAI,OAAO,CAAC,CAAC,yBAAyB;YAC1C,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACrB,EAAE,IAAI,MAAM,CAAC;QACf,CAAC;aAAM,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChC,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,EAAE,IAAI,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;AACpC,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,cAAc,CAAC,IAAY,EAAE,KAAe;IAC1D,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/writeback/comment.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Pull-request comment renderers — Proofkeeper Initiative 5.
+ *
+ * Two informational comments, both behind the human-review boundary (ADR-065):
+ * Proofkeeper never merges or approves; it only reports.
+ *
+ *  - {@link renderWriteBackComment}: a confirmation on the write-back PR it
+ *    raises — the linked evidence plus the fidelity result.
+ *  - {@link renderCoverageComment}: a verification-coverage status for a
+ *    developer's feature PR, driven by the coverage read-model.
+ *
+ * Pure string builders (no I/O) so they are unit-testable; the gateway posts.
+ */
+import type { CoverageReport } from "../coverage/model.js";
+import type { RepoGateway } from "./proposer.js";
+import type { VerificationLink } from "./verified-by.js";
+/**
+ * Hidden, namespaced markers identifying each Proofkeeper comment kind. Embedded
+ * as invisible HTML comments at the top of a body so a pull request carries one
+ * canonical comment per kind that {@link upsertComment} finds and updates in
+ * place, regardless of how the prose is reformatted.
+ */
+export declare const SCOPED_QA_MARKER = "<!-- proofkeeper:scoped-qa -->";
+export declare const WRITE_BACK_MARKER = "<!-- proofkeeper:write-back -->";
+export declare const COVERAGE_MARKER = "<!-- proofkeeper:coverage -->";
+/** Outcome of the fidelity gate, as summarized in a comment. */
+export interface FidelitySummary {
+    attempts: number;
+    passed: number;
+    stable: boolean;
+}
+/** Confirmation comment for the write-back PR Proofkeeper raises. */
+export declare function renderWriteBackComment(input: {
+    capabilityId: string;
+    links: VerificationLink[];
+    fidelity?: FidelitySummary;
+    /** Readable step summary of the driven flow. */
+    steps?: string[];
+    /** The Markdown test plan the model wrote before driving. */
+    plan?: string;
+}): string;
+export interface CoverageCommentOptions {
+    /** Optional heading override. */
+    title?: string;
+}
+/** Verification-coverage status comment for a developer's feature PR. */
+export declare function renderCoverageComment(report: CoverageReport, options?: CoverageCommentOptions): string;
+/** One driven capability's outcome, as summarized in the scoped-QA comment. */
+export interface ScopedQaCommentRow {
+    id: string;
+    title: string;
+    stable?: boolean;
+    writeBackUrl?: string;
+    /** Set when the capability could not be driven. */
+    error?: string;
+}
+export interface ScopedQaCommentInput {
+    changedCount: number;
+    driven: ScopedQaCommentRow[];
+    /** Scoped capabilities already verified — not re-driven. */
+    alreadyVerified: {
+        id: string;
+        title: string;
+    }[];
+    /** Config ids that matched the diff but are not capability nodes. */
+    unknown: string[];
+    /** Recorded failure reasons per failed capability (suggest-in-report strategy). */
+    failureSuggestions?: {
+        id: string;
+        title: string;
+        reasons: string[];
+    }[];
+}
+/** Scoped-QA evidence comment for the feature PR that triggered the run. */
+export declare function renderScopedQaComment(input: ScopedQaCommentInput): string;
+/**
+ * Maintain exactly one comment per kind on a pull request: find the existing
+ * comment whose body carries `marker` and update it in place; otherwise create
+ * one (the body itself carries the marker, so it is self-identifying next time).
+ * Keys only on the marker, never on prose.
+ */
+export declare function upsertComment(gateway: RepoGateway, input: {
+    number: number;
+    marker: string;
+    body: string;
+}): Promise<{
+    url: string;
+    updated: boolean;
+}>;
+/**
+ * Post (or update in place) a verification-coverage status comment on a feature
+ * pull request. The report comes from the coverage read-model (`computeCoverage`).
+ * Informational only — it never approves or merges.
+ */
+export declare function commentCoverageStatus(gateway: RepoGateway, input: {
+    prNumber: number;
+    report: CoverageReport;
+    options?: CoverageCommentOptions;
+}): Promise<{
+    url: string;
+    updated: boolean;
+}>;
+//# sourceMappingURL=comment.d.ts.map

package/dist/writeback/comment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"comment.d.ts","sourceRoot":"","sources":["../../src/writeback/comment.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAKzD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,mCAAmC,CAAC;AACjE,eAAO,MAAM,iBAAiB,oCAAoC,CAAC;AACnE,eAAO,MAAM,eAAe,kCAAkC,CAAC;AAE/D,gEAAgE;AAChE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB;AAMD,qEAAqE;AACrE,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,QAAQ,CAAC,EAAE,eAAe,CAAC;IAC3B,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IACjB,6DAA6D;IAC7D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,MAAM,CA4BT;AAED,MAAM,WAAW,sBAAsB;IACrC,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,yEAAyE;AACzE,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,GAAE,sBAA2B,GAAG,MAAM,CA4B1G;AAED,+EAA+E;AAC/E,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,oBAAoB;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,4DAA4D;IAC5D,eAAe,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACjD,qEAAqE;IACrE,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,mFAAmF;IACnF,kBAAkB,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAA;KAAE,EAAE,CAAC;CACzE;AAED,4EAA4E;AAC5E,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,oBAAoB,GAAG,MAAM,CAkCzE;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAS5C;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,OAAO,CAAC,EAAE,sBAAsB,CAAA;CAAE,GACpF,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAM5C"}