@jeger-ai/opengantry 3.2.5 → 3.3.0

package/dist/cli/lib/verify-failure.d.ts

@@ -1,7 +1,9 @@
 import type { GxtErrorCode } from "./gxt-error-codes.js";
-import type { KpiThresholdOp } from "./types.js";
+import type { DependencyFailureCode } from "./deps/deps-resolve.js";
+import type { GateAdapterId, KpiThresholdOp } from "./types.js";
 import type { TraceFailureKind } from "./trace.js";
-export type VerifyFailurePhase = "git_proof" | "gate" | "defensive" | "kpi" | "trace_pending" | "trace" | "interrogation";
+import type { VerifyFinding } from "./verify-finding.js";
+export type VerifyFailurePhase = "git_proof" | "gate" | "defensive" | "kpi" | "trace_pending" | "trace" | "interrogation" | "policy" | "dependencies";
 export type KpiFailureKind = "missing" | "invalid" | "stale" | "threshold" | "exit_code";
 interface VerifyFailureBase {
     ok: false;
@@ -17,9 +19,14 @@ export interface GateFailure extends VerifyFailureBase {
     phase: "gate";
     /** Absent only for the "mission has no gate_command" failure. */
     gateCommand?: string;
-    gateStdout?: string;
-    gateStderr?: string;
+    /** Combined gate log text (stdout+stderr as streamed to gate_log_path). */
+    gateOutput?: string;
+    gateAdapter?: GateAdapterId;
     gateExitCode?: number;
+    /** Repo-relative path when gate log was streamed to disk. */
+    gateLogPath?: string;
+    /** Coarse adapter findings when gate subprocess policy failed. */
+    adapterFindings?: VerifyFinding[];
 }
 export interface DefensiveFailure extends VerifyFailureBase {
     phase: "defensive";
@@ -49,6 +56,8 @@ export interface TraceFailure extends VerifyFailureBase {
     traceKind: TraceFailureKind;
     traceReason: string;
     traceQuote: string;
+    /** 1-based declared line from mission trace anchor when numeric; else 0. */
+    declaredLine?: number;
     attestationCommit?: string;
     stalePaths?: string[];
 }
@@ -57,7 +66,17 @@ export interface InterrogationFailure extends VerifyFailureBase {
     interrogationCode: GxtErrorCode;
     interrogationWarnings?: string[];
 }
+export interface PolicyFailure extends VerifyFailureBase {
+    phase: "policy";
+    policyCode: GxtErrorCode;
+    findings?: VerifyFinding[];
+}
+export interface DependenciesFailure extends VerifyFailureBase {
+    phase: "dependencies";
+    dependencyCode: DependencyFailureCode;
+    findings?: VerifyFinding[];
+}
 /** Discriminated on `phase` — phase-specific fields exist only on their variant. */
-export type VerifyPhaseFailure = GitProofFailure | GateFailure | DefensiveFailure | KpiFailure | TracePendingFailure | TraceFailure | InterrogationFailure;
+export type VerifyPhaseFailure = GitProofFailure | GateFailure | DefensiveFailure | KpiFailure | TracePendingFailure | TraceFailure | InterrogationFailure | PolicyFailure | DependenciesFailure;
 export {};
 //# sourceMappingURL=verify-failure.d.ts.map

package/dist/cli/lib/verify-failure.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-failure.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-failure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACjD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,MAAM,GACN,WAAW,GACX,KAAK,GACL,eAAe,GACf,OAAO,GACP,eAAe,CAAC;AAEpB,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAEzF,UAAU,iBAAiB;IACzB,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAW,SAAQ,iBAAiB;IACnD,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,iBAAiB;IACrD,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,KAAK,EAAE,eAAe,CAAC;IACvB,iBAAiB,EAAE,YAAY,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,GACV,mBAAmB,GACnB,YAAY,GACZ,oBAAoB,CAAC"}
+{"version":3,"file":"verify-failure.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-failure.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AACpE,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAChE,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,MAAM,GACN,WAAW,GACX,KAAK,GACL,eAAe,GACf,OAAO,GACP,eAAe,GACf,QAAQ,GACR,cAAc,CAAC;AAEnB,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,GAAG,WAAW,CAAC;AAEzF,UAAU,iBAAiB;IACzB,EAAE,EAAE,KAAK,CAAC;IACV,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,eAAgB,SAAQ,iBAAiB;IACxD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,WAAY,SAAQ,iBAAiB;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2EAA2E;IAC3E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,aAAa,CAAC;IAC5B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,eAAe,CAAC,EAAE,aAAa,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,UAAW,SAAQ,iBAAiB;IACnD,KAAK,EAAE,KAAK,CAAC;IACb,OAAO,EAAE,cAAc,CAAC;IACxB,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAa,SAAQ,iBAAiB;IACrD,KAAK,EAAE,OAAO,CAAC;IACf,SAAS,EAAE,gBAAgB,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,KAAK,EAAE,eAAe,CAAC;IACvB,iBAAiB,EAAE,YAAY,CAAC;IAChC,qBAAqB,CAAC,EAAE,MAAM,EAAE,CAAC;CAClC;AAED,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,KAAK,EAAE,QAAQ,CAAC;IAChB,UAAU,EAAE,YAAY,CAAC;IACzB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,KAAK,EAAE,cAAc,CAAC;IACtB,cAAc,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;CAC5B;AAED,oFAAoF;AACpF,MAAM,MAAM,kBAAkB,GAC1B,eAAe,GACf,WAAW,GACX,gBAAgB,GAChB,UAAU,GACV,mBAAmB,GACnB,YAAY,GACZ,oBAAoB,GACpB,aAAa,GACb,mBAAmB,CAAC"}

package/dist/cli/lib/verify-finding-fingerprint.d.ts

@@ -0,0 +1,26 @@
+import type { VerifyFailedGate, VerifyFinding } from "./verify-finding.js";
+export declare const EVIDENCE_BYTE_LIMIT: 2048;
+export declare const EVIDENCE_TRUNCATION_SENTINEL: "\n[...truncated]";
+export declare const DIGEST_RING_CAP: 4;
+/** Byte-safe UTF-8 truncation at newline or code-point boundary, then sentinel. */
+export declare function truncateEvidenceBytes(text: string): string;
+/** Normalize evidence for semantic fingerprint (NFC, whitespace, strip diff hunk headers). */
+export declare function normalizeEvidenceForSemantic(text: string): string;
+export interface FingerprintInput {
+    failed_gate: VerifyFailedGate;
+    offending_file: string;
+    line: number;
+    end_line?: number;
+    start_column?: number;
+    end_column?: number;
+    rule_id?: string;
+    evidence?: string;
+}
+export declare function computeExactFingerprint(input: FingerprintInput): string;
+export declare function computeSemanticFingerprint(input: FingerprintInput): string;
+export declare function finalizeVerifyFinding(finding: Omit<VerifyFinding, "fingerprint" | "semantic_fingerprint">): VerifyFinding;
+export declare function finalizeVerifyFindings(findings: VerifyFinding[]): VerifyFinding[];
+export declare function computeFindingsDigest(findings: readonly VerifyFinding[]): string;
+export declare function appendDigestToRing(ring: readonly string[], digest: string): string[];
+export declare function digestRecurredInRing(ring: readonly string[], digest: string): boolean;
+//# sourceMappingURL=verify-finding-fingerprint.d.ts.map

package/dist/cli/lib/verify-finding-fingerprint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-finding-fingerprint.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding-fingerprint.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE3E,eAAO,MAAM,mBAAmB,EAAG,IAAa,CAAC;AACjD,eAAO,MAAM,4BAA4B,EAAG,kBAA2B,CAAC;AACxE,eAAO,MAAM,eAAe,EAAG,CAAU,CAAC;AAE1C,mFAAmF;AACnF,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB1D;AAED,8FAA8F;AAC9F,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAIjE;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAMD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAavE;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAgB1E;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,aAAa,GAAG,sBAAsB,CAAC,GACnE,aAAa,CAsBf;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,aAAa,EAAE,CAejF;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,CAKhF;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAOpF;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAErF"}

package/dist/cli/lib/verify-finding-fingerprint.js

@@ -0,0 +1,117 @@
+import crypto from "node:crypto";
+import { canonicalJson } from "./canonical-json.js";
+export const EVIDENCE_BYTE_LIMIT = 2048;
+export const EVIDENCE_TRUNCATION_SENTINEL = "\n[...truncated]";
+export const DIGEST_RING_CAP = 4;
+/** Byte-safe UTF-8 truncation at newline or code-point boundary, then sentinel. */
+export function truncateEvidenceBytes(text) {
+    const encoded = Buffer.from(text, "utf8");
+    if (encoded.length <= EVIDENCE_BYTE_LIMIT)
+        return text;
+    let end = EVIDENCE_BYTE_LIMIT;
+    let slice = encoded.subarray(0, end);
+    let decoded = slice.toString("utf8");
+    const lastNewline = decoded.lastIndexOf("\n");
+    if (lastNewline > 0) {
+        decoded = decoded.slice(0, lastNewline);
+    }
+    else {
+        while (decoded.length > 0 && decoded.endsWith("\uFFFD")) {
+            end -= 1;
+            slice = encoded.subarray(0, end);
+            decoded = slice.toString("utf8");
+        }
+    }
+    return `${decoded}${EVIDENCE_TRUNCATION_SENTINEL}`;
+}
+/** Normalize evidence for semantic fingerprint (NFC, whitespace, strip diff hunk headers). */
+export function normalizeEvidenceForSemantic(text) {
+    const nfc = text.normalize("NFC");
+    const withoutHunks = nfc.replace(/^@@.*@@\s*$/gm, "");
+    return withoutHunks.replace(/\s+/g, " ").trim();
+}
+function sha256Hex(payload) {
+    return crypto.createHash("sha256").update(canonicalJson(payload), "utf8").digest("hex");
+}
+export function computeExactFingerprint(input) {
+    const evidence = input.evidence !== undefined ? truncateEvidenceBytes(input.evidence) : undefined;
+    return sha256Hex({
+        failed_gate: input.failed_gate,
+        offending_file: input.offending_file,
+        line: input.line,
+        ...(input.end_line !== undefined ? { end_line: input.end_line } : {}),
+        ...(input.start_column !== undefined ? { start_column: input.start_column } : {}),
+        ...(input.end_column !== undefined ? { end_column: input.end_column } : {}),
+        ...(input.rule_id !== undefined && input.rule_id !== "" ? { rule_id: input.rule_id } : {}),
+        ...(evidence !== undefined && evidence !== "" ? { evidence } : {}),
+    });
+}
+export function computeSemanticFingerprint(input) {
+    const evidence = input.evidence !== undefined && input.evidence !== ""
+        ? normalizeEvidenceForSemantic(input.evidence)
+        : undefined;
+    const base = {
+        failed_gate: input.failed_gate,
+        offending_file: input.offending_file,
+    };
+    if (input.rule_id !== undefined && input.rule_id !== "") {
+        base.rule_id = input.rule_id;
+    }
+    if (evidence !== undefined && evidence !== "") {
+        base.evidence_normalized = evidence;
+    }
+    return sha256Hex(base);
+}
+export function finalizeVerifyFinding(finding) {
+    const evidence = finding.evidence !== undefined ? truncateEvidenceBytes(finding.evidence) : undefined;
+    const withEvidence = evidence !== undefined && evidence !== finding.evidence
+        ? { ...finding, evidence }
+        : finding;
+    const fpInput = {
+        failed_gate: withEvidence.failed_gate,
+        offending_file: withEvidence.offending_file,
+        line: withEvidence.line,
+        ...(withEvidence.end_line !== undefined ? { end_line: withEvidence.end_line } : {}),
+        ...(withEvidence.start_column !== undefined ? { start_column: withEvidence.start_column } : {}),
+        ...(withEvidence.end_column !== undefined ? { end_column: withEvidence.end_column } : {}),
+        ...(withEvidence.rule_id !== undefined ? { rule_id: withEvidence.rule_id } : {}),
+        ...(withEvidence.evidence !== undefined ? { evidence: withEvidence.evidence } : {}),
+    };
+    return {
+        ...withEvidence,
+        fingerprint: computeExactFingerprint(fpInput),
+        semantic_fingerprint: computeSemanticFingerprint(fpInput),
+    };
+}
+export function finalizeVerifyFindings(findings) {
+    return findings.map((f) => finalizeVerifyFinding({
+        failed_gate: f.failed_gate,
+        offending_file: f.offending_file,
+        line: f.line,
+        severity: f.severity,
+        resolution_hint: f.resolution_hint,
+        ...(f.end_line !== undefined ? { end_line: f.end_line } : {}),
+        ...(f.start_column !== undefined ? { start_column: f.start_column } : {}),
+        ...(f.end_column !== undefined ? { end_column: f.end_column } : {}),
+        ...(f.rule_id !== undefined ? { rule_id: f.rule_id } : {}),
+        ...(f.evidence !== undefined ? { evidence: f.evidence } : {}),
+    }));
+}
+export function computeFindingsDigest(findings) {
+    const semantic = [
+        ...new Set(findings.map((f) => f.semantic_fingerprint).filter((s) => s.length > 0)),
+    ].sort();
+    return sha256Hex(semantic);
+}
+export function appendDigestToRing(ring, digest) {
+    const next = ring.filter((d) => d !== digest);
+    next.push(digest);
+    while (next.length > DIGEST_RING_CAP) {
+        next.shift();
+    }
+    return next;
+}
+export function digestRecurredInRing(ring, digest) {
+    return ring.includes(digest);
+}
+//# sourceMappingURL=verify-finding-fingerprint.js.map

package/dist/cli/lib/verify-finding-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-finding-fingerprint.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding-fingerprint.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAGpD,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAa,CAAC;AACjD,MAAM,CAAC,MAAM,4BAA4B,GAAG,kBAA2B,CAAC;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAU,CAAC;AAE1C,mFAAmF;AACnF,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,MAAM,IAAI,mBAAmB;QAAE,OAAO,IAAI,CAAC;IAEvD,IAAI,GAAG,GAAG,mBAAmB,CAAC;IAC9B,IAAI,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAErC,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;QACpB,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACxD,GAAG,IAAI,CAAC,CAAC;YACT,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACjC,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACnC,CAAC;IACH,CAAC;IAED,OAAO,GAAG,OAAO,GAAG,4BAA4B,EAAE,CAAC;AACrD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,YAAY,GAAG,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IACtD,OAAO,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;AAClD,CAAC;AAaD,SAAS,SAAS,CAAC,OAAgB;IACjC,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,KAAuB;IAC7D,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,OAAO,SAAS,CAAC;QACf,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1F,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAuB;IAChE,MAAM,QAAQ,GACZ,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,EAAE;QACnD,CAAC,CAAC,4BAA4B,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC9C,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAA2B;QACnC,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,cAAc,EAAE,KAAK,CAAC,cAAc;KACrC,CAAC;IACF,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC/B,CAAC;IACD,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC9C,IAAI,CAAC,mBAAmB,GAAG,QAAQ,CAAC;IACtC,CAAC;IACD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,qBAAqB,CACnC,OAAoE;IAEpE,MAAM,QAAQ,GACZ,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,MAAM,YAAY,GAChB,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,OAAO,CAAC,QAAQ;QACrD,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,QAAQ,EAAE;QAC1B,CAAC,CAAC,OAAO,CAAC;IACd,MAAM,OAAO,GAAqB;QAChC,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,cAAc,EAAE,YAAY,CAAC,cAAc;QAC3C,IAAI,EAAE,YAAY,CAAC,IAAI;QACvB,GAAG,CAAC,YAAY,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,YAAY,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,GAAG,CAAC,YAAY,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,YAAY,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzF,GAAG,CAAC,YAAY,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,GAAG,CAAC,YAAY,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC;IACF,OAAO;QACL,GAAG,YAAY;QACf,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC;QAC7C,oBAAoB,EAAE,0BAA0B,CAAC,OAAO,CAAC;KAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,QAAyB;IAC9D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACxB,qBAAqB,CAAC;QACpB,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,cAAc,EAAE,CAAC,CAAC,cAAc;QAChC,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7D,GAAG,CAAC,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,CAAC,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC9D,CAAC,CACH,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAkC;IACtE,MAAM,QAAQ,GAAG;QACf,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;KACpF,CAAC,IAAI,EAAE,CAAC;IACT,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,IAAuB,EAAE,MAAc;IACxE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAClB,OAAO,IAAI,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAuB,EAAE,MAAc;IAC1E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC"}

package/dist/cli/lib/verify-finding-gate-projector.d.ts

@@ -0,0 +1,4 @@
+import { type VerifyFinding } from "./verify-finding.js";
+import type { GateFailure } from "./verify-failure.js";
+export declare function projectGateFindings(root: string, failure: GateFailure): VerifyFinding[] | null;
+//# sourceMappingURL=verify-finding-gate-projector.d.ts.map

package/dist/cli/lib/verify-finding-gate-projector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-finding-gate-projector.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding-gate-projector.ts"],"names":[],"mappings":"AAGA,OAAO,EAAiB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,WAAW,GACnB,aAAa,EAAE,GAAG,IAAI,CA8BxB"}

package/dist/cli/lib/verify-finding-gate-projector.js

@@ -0,0 +1,31 @@
+import { parseBannedImportGateOutput } from "./banned-import-violation.js";
+import { extractImportLayerGateReport } from "./surgeon.js";
+import { readEvidenceSnippet } from "./verify-evidence-snippet.js";
+import { verifyFinding } from "./verify-finding.js";
+export function projectGateFindings(root, failure) {
+    const combined = failure.gateOutput ?? "";
+    const stdout = combined;
+    const stderr = "";
+    const importReport = extractImportLayerGateReport(stdout, stderr);
+    if (importReport && importReport.ok === false && importReport.violations.length > 0) {
+        return importReport.violations.map((v) => {
+            const evidence = readEvidenceSnippet(root, v.file, v.line, v.column);
+            return verifyFinding("gate", `${v.rule_id}: ${v.module_specifier}`, {
+                offending_file: v.file,
+                line: v.line,
+                start_column: v.column,
+                rule_id: v.rule_id,
+                ...(evidence !== undefined ? { evidence } : {}),
+            });
+        });
+    }
+    const banned = parseBannedImportGateOutput(combined);
+    if (banned.length > 0) {
+        return banned.map((v) => verifyFinding("gate", `banned import "${v.specifier}"`, {
+            offending_file: v.file,
+            rule_id: "banned-import",
+        }));
+    }
+    return null;
+}
+//# sourceMappingURL=verify-finding-gate-projector.js.map

package/dist/cli/lib/verify-finding-gate-projector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-finding-gate-projector.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding-gate-projector.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,2BAA2B,EAAE,MAAM,8BAA8B,CAAC;AAC3E,OAAO,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,aAAa,EAAsB,MAAM,qBAAqB,CAAC;AAGxE,MAAM,UAAU,mBAAmB,CACjC,IAAY,EACZ,OAAoB;IAEpB,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC;IACxB,MAAM,MAAM,GAAG,EAAE,CAAC;IAElB,MAAM,YAAY,GAAG,4BAA4B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClE,IAAI,YAAY,IAAI,YAAY,CAAC,EAAE,KAAK,KAAK,IAAI,YAAY,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpF,OAAO,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACvC,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;YACrE,OAAO,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,gBAAgB,EAAE,EAAE;gBAClE,cAAc,EAAE,CAAC,CAAC,IAAI;gBACtB,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,YAAY,EAAE,CAAC,CAAC,MAAM;gBACtB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC;IAED,MAAM,MAAM,GAAG,2BAA2B,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACtB,aAAa,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,SAAS,GAAG,EAAE;YACtD,cAAc,EAAE,CAAC,CAAC,IAAI;YACtB,OAAO,EAAE,eAAe;SACzB,CAAC,CACH,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/cli/lib/verify-finding.d.ts

@@ -1,16 +1,29 @@
-export declare const VERIFY_ENVELOPE_SCHEMA_VERSION: 2;
+export declare const VERIFY_ENVELOPE_SCHEMA_VERSION: 3;
 export type VerifyFindingSeverity = "error" | "warning";
-export type VerifyFailedGate = "gate" | "trace" | "git_proof" | "defensive" | "kpi" | "init" | "arch" | "interrogation";
+export type VerifyFailedGate = "gate" | "trace" | "git_proof" | "defensive" | "kpi" | "init" | "arch" | "interrogation" | "policy" | "dependencies";
 export interface VerifyFinding {
     failed_gate: VerifyFailedGate;
     offending_file: string;
     line: number;
     severity: VerifyFindingSeverity;
     resolution_hint: string;
+    end_line?: number;
+    start_column?: number;
+    end_column?: number;
+    rule_id?: string;
+    evidence?: string;
+    fingerprint: string;
+    semantic_fingerprint: string;
 }
-export declare function verifyFinding(failed_gate: VerifyFailedGate, resolution_hint: string, opts?: {
+export interface VerifyFindingInput {
     offending_file?: string;
     line?: number;
+    end_line?: number;
+    start_column?: number;
+    end_column?: number;
     severity?: VerifyFindingSeverity;
-}): VerifyFinding;
+    rule_id?: string;
+    evidence?: string;
+}
+export declare function verifyFinding(failed_gate: VerifyFailedGate, resolution_hint: string, opts?: VerifyFindingInput): VerifyFinding;
 //# sourceMappingURL=verify-finding.d.ts.map

package/dist/cli/lib/verify-finding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-finding.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,8BAA8B,EAAG,CAAU,CAAC;AAEzD,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,SAAS,CAAC;AAExD,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,OAAO,GACP,WAAW,GACX,WAAW,GACX,KAAK,GACL,MAAM,GACN,MAAM,GACN,eAAe,CAAC;AAEpB,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,qBAAqB,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,aAAa,CAC3B,WAAW,EAAE,gBAAgB,EAC7B,eAAe,EAAE,MAAM,EACvB,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAA;CAAO,GACtF,aAAa,CAQf"}
+{"version":3,"file":"verify-finding.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,8BAA8B,EAAG,CAAU,CAAC;AAEzD,MAAM,MAAM,qBAAqB,GAAG,OAAO,GAAG,SAAS,CAAC;AAExD,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,OAAO,GACP,WAAW,GACX,WAAW,GACX,KAAK,GACL,MAAM,GACN,MAAM,GACN,eAAe,GACf,QAAQ,GACR,cAAc,CAAC;AAEnB,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,gBAAgB,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,qBAAqB,CAAC;IAChC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAgB,aAAa,CAC3B,WAAW,EAAE,gBAAgB,EAC7B,eAAe,EAAE,MAAM,EACvB,IAAI,GAAE,kBAAuB,GAC5B,aAAa,CAaf"}

package/dist/cli/lib/verify-finding.js

@@ -1,11 +1,17 @@
-export const VERIFY_ENVELOPE_SCHEMA_VERSION = 2;
+import { finalizeVerifyFinding } from "./verify-finding-fingerprint.js";
+export const VERIFY_ENVELOPE_SCHEMA_VERSION = 3;
 export function verifyFinding(failed_gate, resolution_hint, opts = {}) {
-    return {
+    return finalizeVerifyFinding({
         failed_gate,
         offending_file: opts.offending_file ?? "",
         line: opts.line ?? 0,
         severity: opts.severity ?? "error",
         resolution_hint,
-    };
+        ...(opts.end_line !== undefined ? { end_line: opts.end_line } : {}),
+        ...(opts.start_column !== undefined ? { start_column: opts.start_column } : {}),
+        ...(opts.end_column !== undefined ? { end_column: opts.end_column } : {}),
+        ...(opts.rule_id !== undefined ? { rule_id: opts.rule_id } : {}),
+        ...(opts.evidence !== undefined ? { evidence: opts.evidence } : {}),
+    });
 }
 //# sourceMappingURL=verify-finding.js.map

package/dist/cli/lib/verify-finding.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-finding.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAU,CAAC;AAsBzD,MAAM,UAAU,aAAa,CAC3B,WAA6B,EAC7B,eAAuB,EACvB,OAAqF,EAAE;IAEvF,OAAO;QACL,WAAW;QACX,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;QACzC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC;QACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;QAClC,eAAe;KAChB,CAAC;AACJ,CAAC"}
+{"version":3,"file":"verify-finding.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-finding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,iCAAiC,CAAC;AAExE,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAU,CAAC;AA0CzD,MAAM,UAAU,aAAa,CAC3B,WAA6B,EAC7B,eAAuB,EACvB,OAA2B,EAAE;IAE7B,OAAO,qBAAqB,CAAC;QAC3B,WAAW;QACX,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,EAAE;QACzC,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,CAAC;QACpB,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;QAClC,eAAe;QACf,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/lib/verify-hints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-hints.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-hints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAYzD,OAAO,KAAK,EASV,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACrC;AAED,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAmKD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,cAAc,GACnB,iBAAiB,CAqBnB"}
+{"version":3,"file":"verify-hints.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-hints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAYzD,OAAO,KAAK,EASV,kBAAkB,EACnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACrC;AAED,8FAA8F;AAC9F,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAkKD,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,cAAc,GACnB,iBAAiB,CAiCnB"}

package/dist/cli/lib/verify-hints.js

@@ -40,9 +40,8 @@ function hintsForGatePhase(failure, meta) {
     const mission = meta.missionPath;
     const verifyCmdStr = verifyCmd(mission);
     const gate = failure.gateCommand ?? "<gate>";
-    const combined = `${failure.gateStderr ?? ""}\n${failure.gateStdout ?? ""}`;
-    const errorCode = gateOutputIndicatesImportLayer(failure.gateStdout ?? "")
-        || gateOutputIndicatesImportLayer(failure.gateStderr ?? "")
+    const combined = failure.gateOutput ?? "";
+    const errorCode = gateOutputIndicatesImportLayer(combined)
         ? GXT_ERROR.IMPORT_LAYER_VIOLATION
         : gateOutputIndicatesBannedImport(combined)
             ? GXT_ERROR.BANNED_IMPORT_DETECTED
@@ -167,6 +166,18 @@ export function hintsForVerifyPhase(failure, meta) {
             return hintsForTracePhase(failure, meta);
         case "interrogation":
             return hintsForInterrogationPhase(failure, meta);
+        case "policy":
+            return {
+                error_code: failure.policyCode,
+                fix_hints: [failure.message, "gantry policy pull", "gantry policy status --json"],
+                next_actions: [`gantry policy pull`, verifyCmd(meta.missionPath)],
+            };
+        case "dependencies":
+            return {
+                error_code: failure.dependencyCode,
+                fix_hints: [failure.message, "gantry deps fetch --mission <yaml>"],
+                next_actions: [`gantry deps fetch --mission ${meta.missionPath}`, verifyCmd(meta.missionPath)],
+            };
         default: {
             const _exhaustive = failure;
             return _exhaustive;

package/dist/cli/lib/verify-hints.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-hints.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-hints.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,gBAAgB,CAAC;AAgCxB,SAAS,OAAO,CAAC,QAAwB,EAAE,IAAY;IACrD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,2BAA2B,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwB,EAAE,IAAoB;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,OAAO;QACpB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,OAAO,CAAC,eAAe,CAAC;QAC3E,cAAc,EAAE,OAAO;KACxB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9D,MAAM,WAAW,GACf,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,sCAAsC;QAC1E,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,EAAE,+CAA+C,EAAE,YAAY,CAAC;QACvF,CAAC,CAAC,CAAC,+CAA+C,EAAE,YAAY,CAAC,CAAC;IACtE,MAAM,YAAY,GAAyB;QACzC,OAAO,CAAC,SAAS,EAAE,+CAA+C,CAAC;QACnE,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;KAClC,CAAC;IACF,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,sCAAsC,EAAE,CAAC;QACjF,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB;QAC3E,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,YAAY,EAAE,WAAW;QACzB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAoB,EAAE,IAAoB;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,KAAK,OAAO,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;IAC5E,MAAM,SAAS,GAAG,8BAA8B,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;WACrE,8BAA8B,CAAC,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;QAC3D,CAAC,CAAC,SAAS,CAAC,sBAAsB;QAClC,CAAC,CAAC,+BAA+B,CAAC,QAAQ,CAAC;YACzC,CAAC,CAAC,SAAS,CAAC,sBAAsB;YAClC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAC5B,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpC,YAAY,EAAE,CAAC,gBAAgB,IAAI,EAAE,EAAE,YAAY,CAAC;QACpD,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,gBAAgB,IAAI,EAAE,CAAC;YAC3C,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAoB;IAC/C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC,kBAAkB,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC,kBAAkB,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,gBAAgB,CAAC;QACpC,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC,eAAe,CAAC;QACnC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC;YAChC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAyB,EAAE,IAAoB;IAC7E,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,sBAAsB;QAC5C,SAAS,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,yEAAyE,CAAC;QAC/G,YAAY,EAAE,CAAC,YAAY,CAAC;QAC5B,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,yCAAyC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;KAClH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAmB,EAAE,IAAoB;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO;QACL,UAAU,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;QAChD,SAAS,EAAE;YACT,yBAAyB,OAAO,EAAE;YAClC,gDAAgD;YAChD,YAAY;SACb;QACD,YAAY,EAAE,CAAC,yBAAyB,OAAO,EAAE,EAAE,YAAY,CAAC;QAChE,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,yBAAyB,OAAO,EAAE,CAAC;YACvD,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,OAA4B,EAAE,IAAoB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3F,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,aAAa;QACnC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,YAAY,EAAE,KAAK;QACnB,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC;YAC9B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC;YAC9B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC;YAC9B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAqB,EAAE,IAAoB;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAa;QACtB,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC;KAC1F,CAAC;IACF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,WAAW;QAC/B,CAAC,CAAC,SAAS,CAAC,eAAe;QAC3B,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,gBAAgB;YACtC,CAAC,CAAC,SAAS,CAAC,WAAW;YACvB,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC;IAChC,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,CAAC,YAAY,EAAE,2BAA2B,OAAO,QAAQ,CAAC;QACxE,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;YACjC,OAAO,CAAC,UAAU,EAAE,2BAA2B,OAAO,QAAQ,CAAC;SAChE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,OAA6B,EAAE,IAAoB;IACrF,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,iBAAiB;QACrC,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,4EAA4E,CAAC;QAC1G,YAAY,EAAE;YACZ,uCAAuC,IAAI,CAAC,KAAK,IAAI,UAAU,qBAAqB;YACpF,YAAY;SACb;QACD,YAAY,EAAE;YACZ,OAAO,CAAC,SAAS,EAAE,gEAAgE,CAAC;YACpF,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,IAAoB;IAEpB,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,KAAK,WAAW;YACd,OAAO,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,KAAK,KAAK;YACR,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,eAAe;YAClB,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,OAAO;YACV,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,KAAK,eAAe;YAClB,OAAO,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnD,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,OAAO,CAAC;YACnC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}
+{"version":3,"file":"verify-hints.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-hints.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAC/E,OAAO,EAAE,8BAA8B,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,EACL,gBAAgB,EAChB,QAAQ,EACR,YAAY,EACZ,qBAAqB,EACrB,iBAAiB,EACjB,6BAA6B,GAC9B,MAAM,gBAAgB,CAAC;AAgCxB,SAAS,OAAO,CAAC,QAAwB,EAAE,IAAY;IACrD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,2BAA2B,OAAO,EAAE,CAAC;AAC9C,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAwB,EAAE,IAAoB;IAC3E,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,iBAAiB,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG;QACb,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,WAAW,EAAE,OAAO;QACpB,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,OAAO,CAAC,eAAe,CAAC;QAC3E,cAAc,EAAE,OAAO;KACxB,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;IAC9D,MAAM,WAAW,GACf,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,sCAAsC;QAC1E,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,EAAE,+CAA+C,EAAE,YAAY,CAAC;QACvF,CAAC,CAAC,CAAC,+CAA+C,EAAE,YAAY,CAAC,CAAC;IACtE,MAAM,YAAY,GAAyB;QACzC,OAAO,CAAC,SAAS,EAAE,+CAA+C,CAAC;QACnE,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;KAClC,CAAC;IACF,IAAI,IAAI,KAAK,gBAAgB,IAAI,IAAI,KAAK,sCAAsC,EAAE,CAAC;QACjF,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB;QAC3E,SAAS,EAAE,CAAC,IAAI,CAAC;QACjB,YAAY,EAAE,WAAW;QACzB,YAAY;KACb,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAoB,EAAE,IAAoB;IACnE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1C,MAAM,SAAS,GAAG,8BAA8B,CAAC,QAAQ,CAAC;QACxD,CAAC,CAAC,SAAS,CAAC,sBAAsB;QAClC,CAAC,CAAC,+BAA+B,CAAC,QAAQ,CAAC;YACzC,CAAC,CAAC,SAAS,CAAC,sBAAsB;YAClC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC;IAC5B,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACpC,YAAY,EAAE,CAAC,gBAAgB,IAAI,EAAE,EAAE,YAAY,CAAC;QACpD,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,gBAAgB,IAAI,EAAE,CAAC;YAC3C,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAoB;IAC/C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC,kBAAkB,CAAC;QACtC,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC,kBAAkB,CAAC;QACtC,KAAK,OAAO;YACV,OAAO,SAAS,CAAC,gBAAgB,CAAC;QACpC,KAAK,WAAW,CAAC;QACjB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC,eAAe,CAAC;QACnC,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,IAAI,CAAC;YAChC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,OAAyB,EAAE,IAAoB;IAC7E,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,sBAAsB;QAC5C,SAAS,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,yEAAyE,CAAC;QAC/G,YAAY,EAAE,CAAC,YAAY,CAAC;QAC5B,YAAY,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,yCAAyC,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;KAClH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAmB,EAAE,IAAoB;IACjE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,OAAO;QACL,UAAU,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC;QAChD,SAAS,EAAE;YACT,yBAAyB,OAAO,EAAE;YAClC,gDAAgD;YAChD,YAAY;SACb;QACD,YAAY,EAAE,CAAC,yBAAyB,OAAO,EAAE,EAAE,YAAY,CAAC;QAChE,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,yBAAyB,OAAO,EAAE,CAAC;YACvD,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,OAA4B,EAAE,IAAoB;IACnF,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,KAAK,GAAG,qBAAqB,CAAC,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;IAC3F,OAAO;QACL,UAAU,EAAE,SAAS,CAAC,aAAa;QACnC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QAC5B,YAAY,EAAE,KAAK;QACnB,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC;YAC9B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC;YAC9B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC;YAC9B,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,CAAC;SACpD;KACF,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,OAAqB,EAAE,IAAoB;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC;IACjC,MAAM,YAAY,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,KAAK,GAAa;QACtB,gBAAgB,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC;KAC1F,CAAC;IACF,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,KAAK,WAAW;QAC/B,CAAC,CAAC,SAAS,CAAC,eAAe;QAC3B,CAAC,CAAC,OAAO,CAAC,SAAS,KAAK,gBAAgB;YACtC,CAAC,CAAC,SAAS,CAAC,WAAW;YACvB,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC;IAChC,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,SAAS,EAAE,KAAK;QAChB,YAAY,EAAE,CAAC,YAAY,EAAE,2BAA2B,OAAO,QAAQ,CAAC;QACxE,YAAY,EAAE;YACZ,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;YACjC,OAAO,CAAC,UAAU,EAAE,2BAA2B,OAAO,QAAQ,CAAC;SAChE;KACF,CAAC;AACJ,CAAC;AAED,SAAS,0BAA0B,CAAC,OAA6B,EAAE,IAAoB;IACrF,MAAM,YAAY,GAAG,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,OAAO;QACL,UAAU,EAAE,OAAO,CAAC,iBAAiB;QACrC,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,4EAA4E,CAAC;QAC1G,YAAY,EAAE;YACZ,uCAAuC,IAAI,CAAC,KAAK,IAAI,UAAU,qBAAqB;YACpF,YAAY;SACb;QACD,YAAY,EAAE;YACZ,OAAO,CAAC,SAAS,EAAE,gEAAgE,CAAC;YACpF,OAAO,CAAC,UAAU,EAAE,YAAY,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,OAA2B,EAC3B,IAAoB;IAEpB,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,WAAW;YACd,OAAO,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC9C,KAAK,MAAM;YACT,OAAO,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC1C,KAAK,WAAW;YACd,OAAO,sBAAsB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC/C,KAAK,KAAK;YACR,OAAO,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACzC,KAAK,eAAe;YAClB,OAAO,yBAAyB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAClD,KAAK,OAAO;YACV,OAAO,kBAAkB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3C,KAAK,eAAe;YAClB,OAAO,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QACnD,KAAK,QAAQ;YACX,OAAO;gBACL,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,CAAC;gBACjF,YAAY,EAAE,CAAC,oBAAoB,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;aAClE,CAAC;QACJ,KAAK,cAAc;YACjB,OAAO;gBACL,UAAU,EAAE,OAAO,CAAC,cAAc;gBAClC,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,oCAAoC,CAAC;gBAClE,YAAY,EAAE,CAAC,+BAA+B,IAAI,CAAC,WAAW,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;aAC/F,CAAC;QACJ,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,WAAW,GAAU,OAAO,CAAC;YACnC,OAAO,WAAW,CAAC;QACrB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/cli/lib/verify-options.d.ts

@@ -1,5 +1,6 @@
 import type { OutputAudience } from "./audience-output.js";
 import type { VerifyExportFormat } from "./verify-export.js";
+import type { GateExecAdapter } from "./gate-adapters/gate-adapter-types.js";
 /** High-level verify execution mode — sinks derive from this + export format. */
 export type VerifyMode = "normal" | "pre_push" | "break_glass" | "fix" | "json";
 export interface VerifyOptions {
@@ -24,6 +25,8 @@ export interface VerifyOptions {
     skipStaleEvidence?: boolean;
     /** Emit a single structured JSON document on stdout (no human logs). */
     json?: boolean;
+    /** Write structured JSON payload to a file (pipe-safe; used by kernel sync shim). */
+    jsonOut?: string;
     /** Structured export format (json default when --json). */
     format?: VerifyExportFormat;
     /** Verify every mission file changed vs base ref on current branch. */
@@ -42,5 +45,8 @@ export interface VerifyOptions {
     exportPath?: string;
     /** Require interrogation block on mission (CI hard mode). */
     requireInterrogation?: boolean;
+    /** Override gate subprocess execution (default: generic spawn adapter). */
+    gateExecAdapter?: GateExecAdapter;
 }
+export type { GateExecAdapter, GateExecContext, GateExecutionResult } from "./gate-adapters/gate-adapter-types.js";
 //# sourceMappingURL=verify-options.d.ts.map

package/dist/cli/lib/verify-options.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-options.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAE7D,iFAAiF;AACjF,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,KAAK,GAAG,MAAM,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wFAAwF;IACxF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,2DAA2D;IAC3D,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,uEAAuE;IACvE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mGAAmG;IACnG,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,qGAAqG;IACrG,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC"}
+{"version":3,"file":"verify-options.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uCAAuC,CAAC;AAE7E,iFAAiF;AACjF,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,aAAa,GAAG,KAAK,GAAG,MAAM,CAAC;AAEhF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wFAAwF;IACxF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,+CAA+C;IAC/C,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,6CAA6C;IAC7C,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B,0EAA0E;IAC1E,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B,wEAAwE;IACxE,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,qFAAqF;IACrF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,uEAAuE;IACvE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,sFAAsF;IACtF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mGAAmG;IACnG,OAAO,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC3B,qGAAqG;IACrG,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6DAA6D;IAC7D,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,2EAA2E;IAC3E,eAAe,CAAC,EAAE,eAAe,CAAC;CACnC;AAED,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC"}

package/dist/cli/lib/verify-org-phases.d.ts

@@ -0,0 +1,18 @@
+import { type OrgPolicyResolveResult } from "./policy/policy-resolve.js";
+import type { DependenciesFailure, PolicyFailure } from "./verify-failure.js";
+import type { PhaseContext } from "./verify-phase-steps.js";
+export type PolicyPhaseOutcome = {
+    kind: "ok";
+} | {
+    kind: "fail";
+    failure: PolicyFailure;
+};
+export type DependenciesPhaseOutcome = {
+    kind: "ok";
+} | {
+    kind: "fail";
+    failure: DependenciesFailure;
+};
+export declare function evaluatePolicyPhase(input: PhaseContext, resolve?: (root: string) => OrgPolicyResolveResult): PolicyPhaseOutcome;
+export declare function evaluateDependenciesPhase(input: PhaseContext): DependenciesPhaseOutcome;
+//# sourceMappingURL=verify-org-phases.d.ts.map

package/dist/cli/lib/verify-org-phases.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-org-phases.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-org-phases.ts"],"names":[],"mappings":"AAGA,OAAO,EAIL,KAAK,sBAAsB,EAC5B,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE9E,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE5D,MAAM,MAAM,kBAAkB,GAAG;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,CAAC;AAE3F,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,mBAAmB,CAAA;CAAE,CAAC;AAmBnD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,sBAAyC,GACnE,kBAAkB,CAcpB;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,YAAY,GAAG,wBAAwB,CAwBvF"}

package/dist/cli/lib/verify-org-phases.js

@@ -0,0 +1,61 @@
+import { GXT_ERROR } from "./gxt-error-codes.js";
+import { REL_POLICY_POINTER } from "./constants.js";
+import { checkMissionDependencies } from "./deps/deps-resolve.js";
+import { configFloorViolations, localConfigFloor, resolveOrgPolicy, } from "./policy/policy-resolve.js";
+import { verifyFinding } from "./verify-finding.js";
+function policyFailure(input, code, message) {
+    return {
+        ok: false,
+        phase: "policy",
+        message: code === GXT_ERROR.POLICY_FLOOR_VIOLATION ? `${code}: ${message}` : message,
+        exitCode: 1,
+        executorLogPath: input.executorLogPath,
+        policyCode: code,
+        findings: [
+            verifyFinding("policy", message, {
+                offending_file: REL_POLICY_POINTER,
+                rule_id: code,
+            }),
+        ],
+    };
+}
+export function evaluatePolicyPhase(input, resolve = resolveOrgPolicy) {
+    const resolved = resolve(input.root);
+    if (!resolved.ok) {
+        return { kind: "fail", failure: policyFailure(input, resolved.code, resolved.message) };
+    }
+    if (!resolved.present || !resolved.bundle)
+        return { kind: "ok" };
+    const violations = configFloorViolations(resolved.bundle.config_floor ?? {}, localConfigFloor(input.root));
+    if (violations.length > 0) {
+        return {
+            kind: "fail",
+            failure: policyFailure(input, GXT_ERROR.POLICY_FLOOR_VIOLATION, violations[0]),
+        };
+    }
+    return { kind: "ok" };
+}
+export function evaluateDependenciesPhase(input) {
+    const results = checkMissionDependencies(input.root, input.mission);
+    const failed = results.find((r) => r.code !== "ok");
+    if (!failed)
+        return { kind: "ok" };
+    return {
+        kind: "fail",
+        failure: {
+            ok: false,
+            phase: "dependencies",
+            message: `${failed.code}: ${failed.message}`,
+            exitCode: 1,
+            executorLogPath: input.executorLogPath,
+            dependencyCode: failed.code,
+            findings: [
+                verifyFinding("dependencies", failed.message, {
+                    offending_file: input.mission.rawPath,
+                    rule_id: failed.code,
+                }),
+            ],
+        },
+    };
+}
+//# sourceMappingURL=verify-org-phases.js.map

package/dist/cli/lib/verify-org-phases.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-org-phases.js","sourceRoot":"","sources":["../../../src/cli/lib/verify-org-phases.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAqB,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,EAAE,wBAAwB,EAA8B,MAAM,wBAAwB,CAAC;AAC9F,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAChB,gBAAgB,GAEjB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AASpD,SAAS,aAAa,CAAC,KAAmB,EAAE,IAAkB,EAAE,OAAe;IAC7E,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,IAAI,KAAK,SAAS,CAAC,sBAAsB,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO;QACpF,QAAQ,EAAE,CAAC;QACX,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,UAAU,EAAE,IAAI;QAChB,QAAQ,EAAE;YACR,aAAa,CAAC,QAAQ,EAAE,OAAO,EAAE;gBAC/B,cAAc,EAAE,kBAAkB;gBAClC,OAAO,EAAE,IAAI;aACd,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,mBAAmB,CACjC,KAAmB,EACnB,UAAoD,gBAAgB;IAEpE,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1F,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACjE,MAAM,UAAU,GAAG,qBAAqB,CAAC,QAAQ,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,EAAE,gBAAgB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3G,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,aAAa,CAAC,KAAK,EAAE,SAAS,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC,CAAE,CAAC;SAChF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAmB;IAC3D,MAAM,OAAO,GAAG,wBAAwB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACpE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CACzB,CAAC,CAAC,EAA+F,EAAE,CACjG,CAAC,CAAC,IAAI,KAAK,IAAI,CAClB,CAAC;IACF,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACnC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE;YACP,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,cAAc;YACrB,OAAO,EAAE,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE;YAC5C,QAAQ,EAAE,CAAC;YACX,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,cAAc,EAAE,MAAM,CAAC,IAAI;YAC3B,QAAQ,EAAE;gBACR,aAAa,CAAC,cAAc,EAAE,MAAM,CAAC,OAAO,EAAE;oBAC5C,cAAc,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;oBACrC,OAAO,EAAE,MAAM,CAAC,IAAI;iBACrB,CAAC;aACH;SACF;KACF,CAAC;AACJ,CAAC"}

package/dist/cli/lib/verify-payload.d.ts

@@ -39,6 +39,7 @@ export interface VerifyFailedPayload {
     exit_code: number;
     envelope_schema_version: typeof VERIFY_ENVELOPE_SCHEMA_VERSION;
     findings: VerifyFinding[];
+    findings_digest?: string;
     mission_file_path?: string;
     mission_source?: "flag" | "pin";
     receipt_path?: string;
@@ -47,10 +48,10 @@ export interface VerifyFailedPayload {
     failures?: string[];
 }
 export type VerifyResultPayload = VerifyPassedPayload | VerifyFailedPayload;
-export declare function buildFindingsForFailure(normalized: NormalizedVerifyFailure, failure?: VerifyPhaseFailure): VerifyFinding[];
-export declare function toVerifyFailedPayload(normalized: NormalizedVerifyFailure, failure?: VerifyPhaseFailure): VerifyFailedPayload;
+export declare function buildFindingsForFailure(root: string, normalized: NormalizedVerifyFailure, failure?: VerifyPhaseFailure): VerifyFinding[];
+export declare function toVerifyFailedPayload(normalized: NormalizedVerifyFailure, failure: VerifyPhaseFailure | undefined, findings: VerifyFinding[]): VerifyFailedPayload;
 export declare function buildBreakGlassPayload(root: string, mission: ParsedMission, options: VerifyOptions): VerifyResultPayload;
 export declare function initFailurePayload(e: unknown): VerifyFailedPayload;
-export declare function buildVerifyResultPayloadFromPhaseResult(root: string, mission: ParsedMission, options: VerifyOptions, result: VerifyPhaseResult): VerifyResultPayload;
-export declare function buildVerifyResultPayload(root: string, manifest: Manifest, mission: ParsedMission, options: VerifyOptions): VerifyResultPayload;
+export declare function buildVerifyResultPayloadFromPhaseResult(root: string, mission: ParsedMission, _options: VerifyOptions, result: VerifyPhaseResult): VerifyResultPayload;
+export declare function buildVerifyResultPayload(root: string, manifest: Manifest, mission: ParsedMission, options: VerifyOptions): Promise<VerifyResultPayload>;
 //# sourceMappingURL=verify-payload.d.ts.map

package/dist/cli/lib/verify-payload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-payload.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-payload.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAIL,KAAK,uBAAuB,EAC7B,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEzD,OAAO,EACL,8BAA8B,EAE9B,KAAK,aAAa,EAEnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,aAAa,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,kCAAkC,CAAC,EAAE,MAAM,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,OAAO,8BAA8B,CAAC;IAC/D,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAE5E,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,uBAAuB,EACnC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,aAAa,EAAE,CAkCjB;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,uBAAuB,EACnC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,mBAAmB,CAgBrB;AA2DD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,GACrB,mBAAmB,CAcrB;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAElE;AAED,wBAAgB,uCAAuC,CACrD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,EACtB,MAAM,EAAE,iBAAiB,GACxB,mBAAmB,CAgBrB;AAED,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,GACrB,mBAAmB,CAGrB"}
+{"version":3,"file":"verify-payload.d.ts","sourceRoot":"","sources":["../../../src/cli/lib/verify-payload.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EAEL,KAAK,iBAAiB,EAEvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,kBAAkB,EAAe,MAAM,qBAAqB,CAAC;AAC3E,OAAO,EAGL,KAAK,uBAAuB,EAC7B,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGzD,OAAO,EACL,8BAA8B,EAE9B,KAAK,aAAa,EAEnB,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,aAAa,CAAC;IAChD,SAAS,EAAE,CAAC,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,cAAc,CAAC,EAAE,sBAAsB,EAAE,CAAC;IAC1C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,QAAQ,CAAC,EAAE,aAAa,EAAE,CAAC;IAC3B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,kCAAkC,CAAC,EAAE,MAAM,CAAC;CAC7C;AAED,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,QAAQ,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,YAAY,CAAC;IACzB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,OAAO,8BAA8B,CAAC;IAC/D,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,GAAG,KAAK,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,MAAM,mBAAmB,GAAG,mBAAmB,GAAG,mBAAmB,CAAC;AAyC5E,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,uBAAuB,EACnC,OAAO,CAAC,EAAE,kBAAkB,GAC3B,aAAa,EAAE,CASjB;AAED,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,uBAAuB,EACnC,OAAO,EAAE,kBAAkB,GAAG,SAAS,EACvC,QAAQ,EAAE,aAAa,EAAE,GACxB,mBAAmB,CAerB;AA2DD,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,GACrB,mBAAmB,CAcrB;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,OAAO,GAAG,mBAAmB,CAIlE;AAED,wBAAgB,uCAAuC,CACrD,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,aAAa,EACtB,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,iBAAiB,GACxB,mBAAmB,CAerB;AAED,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,QAAQ,EAClB,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC,mBAAmB,CAAC,CAO9B"}