@jevitate/cli 0.23.0 → 0.25.0

package/contracts/jevitate-catalog/v2/schemas/personas.schema.json

@@ -0,0 +1,223 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://jevitate.com/schemas/catalog/v2/personas.schema.json",
+  "title": "Jevitate personas.json v2",
+  "oneOf": [
+    {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "anyOf": [
+          {
+            "required": [
+              "id"
+            ]
+          },
+          {
+            "required": [
+              "name"
+            ]
+          }
+        ],
+        "properties": {
+          "id": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+          },
+          "name": {
+            "type": "string",
+            "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+          },
+          "description": {
+            "type": "string",
+            "maxLength": 2000
+          },
+          "role": {
+            "type": "string",
+            "maxLength": 200
+          },
+          "storageState": {
+            "type": "string",
+            "maxLength": 1000
+          },
+          "login": {
+            "type": "object"
+          },
+          "approval": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": [
+              "contentHash",
+              "at"
+            ],
+            "properties": {
+              "contentHash": {
+                "type": "string",
+                "pattern": "^[0-9a-f]{64}$"
+              },
+              "at": {
+                "type": "string",
+                "minLength": 1
+              },
+              "provenance": {
+                "type": "object"
+              },
+              "acceptedFindings": {
+                "type": "object"
+              }
+            }
+          },
+          "extensions": {
+            "type": "object",
+            "maxProperties": 16
+          }
+        },
+        "additionalProperties": true
+      }
+    },
+    {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "personas"
+      ],
+      "properties": {
+        "personas": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "anyOf": [
+              {
+                "required": [
+                  "id"
+                ]
+              },
+              {
+                "required": [
+                  "name"
+                ]
+              }
+            ],
+            "properties": {
+              "id": {
+                "type": "string",
+                "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+              },
+              "name": {
+                "type": "string",
+                "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+              },
+              "description": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "role": {
+                "type": "string",
+                "maxLength": 200
+              },
+              "storageState": {
+                "type": "string",
+                "maxLength": 1000
+              },
+              "login": {
+                "type": "object"
+              },
+              "approval": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                  "contentHash",
+                  "at"
+                ],
+                "properties": {
+                  "contentHash": {
+                    "type": "string",
+                    "pattern": "^[0-9a-f]{64}$"
+                  },
+                  "at": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "provenance": {
+                    "type": "object"
+                  },
+                  "acceptedFindings": {
+                    "type": "object"
+                  }
+                }
+              },
+              "extensions": {
+                "type": "object",
+                "maxProperties": 16
+              }
+            },
+            "additionalProperties": true
+          }
+        }
+      }
+    },
+    {
+      "type": "object",
+      "propertyNames": {
+        "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$"
+      },
+      "additionalProperties": {
+        "anyOf": [
+          {
+            "type": "string",
+            "minLength": 1
+          },
+          {
+            "type": "object",
+            "properties": {
+              "description": {
+                "type": "string",
+                "maxLength": 2000
+              },
+              "role": {
+                "type": "string",
+                "maxLength": 200
+              },
+              "storageState": {
+                "type": "string",
+                "maxLength": 1000
+              },
+              "login": {
+                "type": "object"
+              },
+              "approval": {
+                "type": "object",
+                "additionalProperties": false,
+                "required": [
+                  "contentHash",
+                  "at"
+                ],
+                "properties": {
+                  "contentHash": {
+                    "type": "string",
+                    "pattern": "^[0-9a-f]{64}$"
+                  },
+                  "at": {
+                    "type": "string",
+                    "minLength": 1
+                  },
+                  "provenance": {
+                    "type": "object"
+                  },
+                  "acceptedFindings": {
+                    "type": "object"
+                  }
+                }
+              },
+              "extensions": {
+                "type": "object",
+                "maxProperties": 16
+              }
+            },
+            "additionalProperties": true
+          }
+        ]
+      }
+    }
+  ]
+}

package/dist/acceptance-audit-approval-script.d.ts

@@ -0,0 +1,6 @@
+export interface ApprovalInput {
+    readonly path: string;
+    readonly content: string;
+}
+/** #686 — emits a reviewable shell proposal only; it never executes approval, network, or promotion. */
+export declare function renderHashBoundApprovalScript(inputs: readonly ApprovalInput[]): string;

package/dist/acceptance-audit-approval-script.js

@@ -0,0 +1,20 @@
+import { createHash } from "node:crypto";
+/** #686 — emits a reviewable shell proposal only; it never executes approval, network, or promotion. */
+export function renderHashBoundApprovalScript(inputs) {
+    const rows = inputs.map(({ path, content }) => ({ path, hash: createHash("sha256").update(content).digest("hex") }));
+    return [
+        "#!/usr/bin/env sh",
+        "set -eu",
+        "# Generated approval proposal. Default mode only prints the bound evidence.",
+        'if [ "${1:-}" != "--apply" ]; then',
+        '  echo "dry run: inspect hashes; rerun with --apply to recheck them locally"',
+        ...rows.map((r) => `  echo '${r.hash}  ${r.path}'`),
+        "  exit 0",
+        "fi",
+        "# Apply mode rechecks every file and stops at the first mismatch; it performs no approval or promotion.",
+        ...rows.map((r) => `[ "$(sha256sum '${r.path}' | awk '{print $1}')" = '${r.hash}' ] || { echo 'hash mismatch: ${r.path}' >&2; exit 1; }`),
+        "echo 'all hashes match; human approval remains an external explicit action'",
+        "",
+    ].join("\n");
+}
+//# sourceMappingURL=acceptance-audit-approval-script.js.map

package/dist/acceptance-audit-approval-script.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-audit-approval-script.js","sourceRoot":"","sources":["../src/acceptance-audit-approval-script.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAIzC,wGAAwG;AACxG,MAAM,UAAU,6BAA6B,CAAC,MAAgC;IAC5E,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IACrH,OAAO;QACL,mBAAmB;QACnB,SAAS;QACT,6EAA6E;QAC7E,oCAAoC;QACpC,8EAA8E;QAC9E,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC;QACnD,UAAU;QACV,IAAI;QACJ,yGAAyG;QACzG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,IAAI,6BAA6B,CAAC,CAAC,IAAI,iCAAiC,CAAC,CAAC,IAAI,kBAAkB,CAAC;QACzI,6EAA6E;QAC7E,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/acceptance-audit-cli.d.ts

@@ -0,0 +1,2 @@
+import type { Command } from "commander";
+export declare function registerAcceptanceAuditCommands(program: Command): void;

package/dist/acceptance-audit-cli.js

@@ -0,0 +1,34 @@
+import { readFile, mkdir, writeFile } from "node:fs/promises";
+import { auditCoreAcceptanceAssets } from "./acceptance-audit.js";
+import { acceptanceAuditResult } from "./acceptance-audit-schema.js";
+import { auditSuiteIntegrity } from "./acceptance-audit-suite.js";
+import { renderAcceptanceAuditJunit, renderAcceptanceAuditMarkdown, renderAcceptanceAuditSarif } from "./acceptance-audit-render.js";
+import { emitEnvelope } from "./cli-output.js";
+import { ok, fail } from "./envelope.js";
+export function registerAcceptanceAuditCommands(program) {
+    const acceptance = program.command("acceptance").description("read-only acceptance evidence tools");
+    acceptance.command("audit").description("audit release acceptance evidence and emit CI artifacts")
+        .requiredOption("--requirements <file>")
+        .requiredOption("--suite <file>")
+        .option("--persona <file>").option("--journey <file>").option("--approval <file>").option("--verify <file>").option("--review <file>")
+        .option("--out <dir>").option("--json")
+        .action(async function () {
+        const o = this.opts();
+        try {
+            const core = await auditCoreAcceptanceAssets({ requirements: o.requirements, persona: o.persona, sourceJourney: o.journey, approvedHash: o.approval, verifyFix: o.verify, strictReview: o.review });
+            const entries = JSON.parse(await readFile(o.suite, "utf8"));
+            if (!Array.isArray(entries))
+                throw new Error("suite must be a JSON array of acceptance entries");
+            const result = acceptanceAuditResult({ requirementsFile: o.requirements, suiteFile: o.suite, strict: true }, [...core, ...auditSuiteIntegrity(entries)]);
+            if (o.out !== undefined) {
+                await mkdir(o.out, { recursive: true });
+                await Promise.all([writeFile(`${o.out}/acceptance-audit.md`, renderAcceptanceAuditMarkdown(result)), writeFile(`${o.out}/acceptance-audit.junit.xml`, renderAcceptanceAuditJunit(result)), writeFile(`${o.out}/acceptance-audit.sarif`, renderAcceptanceAuditSarif(result)), writeFile(`${o.out}/acceptance-audit.json`, `${JSON.stringify(result, null, 2)}\n`)]);
+            }
+            emitEnvelope(program, ok(result), { json: o.json === true, exitCode: result.exitCode, command: "acceptance audit", human: (r) => renderAcceptanceAuditMarkdown(r) });
+        }
+        catch (err) {
+            emitEnvelope(program, fail("E_ACCEPTANCE_AUDIT", err instanceof Error ? err.message : String(err)), { json: o.json === true, command: "acceptance audit" });
+        }
+    });
+}
+//# sourceMappingURL=acceptance-audit-cli.js.map

package/dist/acceptance-audit-cli.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-audit-cli.js","sourceRoot":"","sources":["../src/acceptance-audit-cli.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AACrE,OAAO,EAAE,mBAAmB,EAA6B,MAAM,6BAA6B,CAAC;AAC7F,OAAO,EAAE,0BAA0B,EAAE,6BAA6B,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AACrI,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,eAAe,CAAC;AAEzC,MAAM,UAAU,+BAA+B,CAAC,OAAgB;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,WAAW,CAAC,qCAAqC,CAAC,CAAC;IACpG,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,yDAAyD,CAAC;SAC/F,cAAc,CAAC,uBAAuB,CAAC;SACvC,cAAc,CAAC,gBAAgB,CAAC;SAChC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC;SACrI,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,KAAK;QACX,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAkK,CAAC;QACtL,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,yBAAyB,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,YAAY,EAAE,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YACpM,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAA2B,CAAC;YACtF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;YACjG,MAAM,MAAM,GAAG,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YACzJ,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;gBAAC,MAAM,KAAK,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,6BAA6B,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,6BAA6B,EAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,yBAAyB,EAAE,0BAA0B,CAAC,MAAM,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,wBAAwB,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,CAAC;YACza,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,6BAA6B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvK,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAAC,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAAC,CAAC;IAChL,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/acceptance-audit-render.d.ts

@@ -0,0 +1,4 @@
+import type { AcceptanceAuditResult } from "./acceptance-audit-schema.js";
+export declare function renderAcceptanceAuditMarkdown(result: AcceptanceAuditResult): string;
+export declare function renderAcceptanceAuditJunit(result: AcceptanceAuditResult): string;
+export declare function renderAcceptanceAuditSarif(result: AcceptanceAuditResult): string;

package/dist/acceptance-audit-render.js

@@ -0,0 +1,12 @@
+const xml = (value) => value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/"/g, "&quot;");
+export function renderAcceptanceAuditMarkdown(result) {
+    return `# Acceptance audit\n\n${result.passed ? "Passed" : "Failed"} (exit ${result.exitCode}).\n\n| asset | state | reason |\n| --- | --- | --- |\n${result.findings.map((f) => `| ${f.asset} | ${f.state} | ${f.reason ?? ""} |`).join("\n")}\n`;
+}
+export function renderAcceptanceAuditJunit(result) {
+    const failures = result.findings.filter((f) => f.state !== "complete");
+    return `<?xml version="1.0" encoding="UTF-8"?><testsuite name="jevitate.acceptance-audit" tests="${result.findings.length}" failures="${failures.length}">${result.findings.map((f) => `<testcase name="${xml(f.asset)}">${f.state === "complete" ? "" : `<failure message="${xml(f.state)}">${xml(f.reason ?? "")}</failure>`}</testcase>`).join("")}</testsuite>\n`;
+}
+export function renderAcceptanceAuditSarif(result) {
+    return `${JSON.stringify({ version: "2.1.0", runs: [{ tool: { driver: { name: "jevitate acceptance audit", rules: result.findings.map((f) => ({ id: f.asset })) } }, results: result.findings.filter((f) => f.state !== "complete").map((f) => ({ ruleId: f.asset, level: "error", message: { text: f.reason ?? f.state } })) }] }, null, 2)}\n`;
+}
+//# sourceMappingURL=acceptance-audit-render.js.map

package/dist/acceptance-audit-render.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-audit-render.js","sourceRoot":"","sources":["../src/acceptance-audit-render.ts"],"names":[],"mappings":"AAEA,MAAM,GAAG,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAElH,MAAM,UAAU,6BAA6B,CAAC,MAA6B;IACzE,OAAO,yBAAyB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,UAAU,MAAM,CAAC,QAAQ,0DAA0D,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACrP,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAA6B;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACvE,OAAO,4FAA4F,MAAM,CAAC,QAAQ,CAAC,MAAM,eAAe,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,qBAAqB,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,YAAY,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,gBAAgB,CAAC;AACxW,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,MAA6B;IACtE,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACnV,CAAC"}

package/dist/acceptance-audit-schema.d.ts

@@ -0,0 +1,32 @@
+/** #686 — the read-only contract shared by the acceptance-audit engine, renderers, and CLI. */
+export declare const ACCEPTANCE_AUDIT_SCHEMA_VERSION: 1;
+export declare const ACCEPTANCE_AUDIT_ASSETS: readonly ["requirements", "persona", "source-journey", "approved-hash", "verify-fix", "strict-review", "suite-sidecar", "negative-control", "partition", "exact-revision"];
+export type AcceptanceAuditAsset = (typeof ACCEPTANCE_AUDIT_ASSETS)[number];
+export type AcceptanceAuditState = "complete" | "missing" | "stale" | "inconclusive";
+export type AcceptanceAuditExitCode = 0 | 1 | 64;
+/** All input paths are local files; the audit neither invokes a model nor mutates project state. */
+export interface AcceptanceAuditRequest {
+    readonly requirementsFile: string;
+    readonly suiteFile: string;
+    readonly strict?: boolean;
+}
+/** One independently inspectable asset result; `reason` is mandatory whenever it does not pass. */
+export interface AcceptanceAuditFinding {
+    readonly asset: AcceptanceAuditAsset;
+    readonly state: AcceptanceAuditState;
+    readonly path?: string;
+    readonly reason?: string;
+}
+/**
+ * A deterministic audit result. `exitCode` is semantic: 0 means every required asset is complete,
+ * 1 means an audit finding exists, and 64 means the request itself was invalid. No result grants
+ * approval, promotion, credential, network, or execution authority.
+ */
+export interface AcceptanceAuditResult {
+    readonly schemaVersion: typeof ACCEPTANCE_AUDIT_SCHEMA_VERSION;
+    readonly request: AcceptanceAuditRequest;
+    readonly findings: readonly AcceptanceAuditFinding[];
+    readonly passed: boolean;
+    readonly exitCode: AcceptanceAuditExitCode;
+}
+export declare function acceptanceAuditResult(request: AcceptanceAuditRequest, findings: readonly AcceptanceAuditFinding[]): AcceptanceAuditResult;

package/dist/acceptance-audit-schema.js

@@ -0,0 +1,19 @@
+/** #686 — the read-only contract shared by the acceptance-audit engine, renderers, and CLI. */
+export const ACCEPTANCE_AUDIT_SCHEMA_VERSION = 1;
+export const ACCEPTANCE_AUDIT_ASSETS = [
+    "requirements",
+    "persona",
+    "source-journey",
+    "approved-hash",
+    "verify-fix",
+    "strict-review",
+    "suite-sidecar",
+    "negative-control",
+    "partition",
+    "exact-revision",
+];
+export function acceptanceAuditResult(request, findings) {
+    const passed = findings.every((finding) => finding.state === "complete");
+    return { schemaVersion: ACCEPTANCE_AUDIT_SCHEMA_VERSION, request, findings, passed, exitCode: passed ? 0 : 1 };
+}
+//# sourceMappingURL=acceptance-audit-schema.js.map

package/dist/acceptance-audit-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-audit-schema.js","sourceRoot":"","sources":["../src/acceptance-audit-schema.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAU,CAAC;AAE1D,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,cAAc;IACd,SAAS;IACT,gBAAgB;IAChB,eAAe;IACf,YAAY;IACZ,eAAe;IACf,eAAe;IACf,kBAAkB;IAClB,WAAW;IACX,gBAAgB;CACR,CAAC;AAkCX,MAAM,UAAU,qBAAqB,CAAC,OAA+B,EAAE,QAA2C;IAChH,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IACzE,OAAO,EAAE,aAAa,EAAE,+BAA+B,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACjH,CAAC"}

package/dist/acceptance-audit-suite.d.ts

@@ -0,0 +1,14 @@
+import type { AcceptanceAuditFinding } from "./acceptance-audit-schema.js";
+/** Normalized suite evidence supplied by the CLI reader; this module performs no filesystem or network I/O. */
+export interface AcceptanceSuiteEntry {
+    readonly id: string;
+    readonly revision: string;
+    readonly partition: string;
+    readonly sidecar: boolean;
+    readonly negativeControl: boolean;
+}
+/**
+ * #686 deterministic integrity checks. Each invariant is reported separately so consumers can
+ * render a precise JUnit/SARIF finding; no entry is matched to a requirement by heuristic.
+ */
+export declare function auditSuiteIntegrity(entries: readonly AcceptanceSuiteEntry[]): AcceptanceAuditFinding[];

package/dist/acceptance-audit-suite.js

@@ -0,0 +1,34 @@
+/**
+ * #686 deterministic integrity checks. Each invariant is reported separately so consumers can
+ * render a precise JUnit/SARIF finding; no entry is matched to a requirement by heuristic.
+ */
+export function auditSuiteIntegrity(entries) {
+    const duplicates = entries.filter((entry, index) => entries.findIndex((other) => other.id === entry.id) !== index).map((entry) => entry.id);
+    const missingSidecar = entries.filter((entry) => !entry.sidecar).map((entry) => entry.id);
+    const missingPartition = entries.filter((entry) => entry.partition.trim() === "").map((entry) => entry.id);
+    const missingRevision = entries.filter((entry) => entry.revision.trim() === "").map((entry) => entry.id);
+    const hasNegativeControl = entries.some((entry) => entry.negativeControl);
+    return [
+        {
+            asset: "suite-sidecar",
+            state: missingSidecar.length === 0 ? "complete" : "missing",
+            ...(missingSidecar.length === 0 ? {} : { reason: `missing sidecar: ${missingSidecar.join(", ")}` }),
+        },
+        {
+            asset: "negative-control",
+            state: hasNegativeControl ? "complete" : "missing",
+            ...(hasNegativeControl ? {} : { reason: "suite has no declared negative control" }),
+        },
+        {
+            asset: "partition",
+            state: duplicates.length === 0 && missingPartition.length === 0 ? "complete" : "inconclusive",
+            ...(duplicates.length === 0 && missingPartition.length === 0 ? {} : { reason: [...(duplicates.length === 0 ? [] : [`duplicate ids: ${duplicates.join(", ")}`]), ...(missingPartition.length === 0 ? [] : [`unpartitioned: ${missingPartition.join(", ")}`])].join("; ") }),
+        },
+        {
+            asset: "exact-revision",
+            state: missingRevision.length === 0 ? "complete" : "stale",
+            ...(missingRevision.length === 0 ? {} : { reason: `missing exact revision: ${missingRevision.join(", ")}` }),
+        },
+    ];
+}
+//# sourceMappingURL=acceptance-audit-suite.js.map

package/dist/acceptance-audit-suite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-audit-suite.js","sourceRoot":"","sources":["../src/acceptance-audit-suite.ts"],"names":[],"mappings":"AAWA;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAwC;IAC1E,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC5I,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,gBAAgB,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC3G,MAAM,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACzG,MAAM,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAC1E,OAAO;QACL;YACE,KAAK,EAAE,eAAe;YACtB,KAAK,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAC3D,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,oBAAoB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;SACpG;QACD;YACE,KAAK,EAAE,kBAAkB;YACzB,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;YAClD,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAC;SACpF;QACD;YACE,KAAK,EAAE,WAAW;YAClB,KAAK,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc;YAC7F,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SAC3Q;QACD;YACE,KAAK,EAAE,gBAAgB;YACvB,KAAK,EAAE,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO;YAC1D,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,2BAA2B,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;SAC7G;KACF,CAAC;AACJ,CAAC"}

package/dist/acceptance-audit.d.ts

@@ -0,0 +1,16 @@
+import type { AcceptanceAuditFinding } from "./acceptance-audit-schema.js";
+/** Explicit local paths for core acceptance evidence; absent paths are never guessed or inferred. */
+export interface CoreAcceptanceAssets {
+    readonly requirements?: string;
+    readonly persona?: string;
+    readonly sourceJourney?: string;
+    readonly approvedHash?: string;
+    readonly verifyFix?: string;
+    readonly strictReview?: string;
+}
+/**
+ * Read-only presence/content audit for core evidence. This intentionally validates no relationship
+ * between files: mapping a persona, approval, or verification to a Journey belongs to a later,
+ * explicit check and is never inferred from filenames or content (#686).
+ */
+export declare function auditCoreAcceptanceAssets(assets: CoreAcceptanceAssets): Promise<AcceptanceAuditFinding[]>;

package/dist/acceptance-audit.js

@@ -0,0 +1,36 @@
+import { access, readFile } from "node:fs/promises";
+const CORE = [
+    ["requirements", "requirements"],
+    ["persona", "persona"],
+    ["source-journey", "sourceJourney"],
+    ["approved-hash", "approvedHash"],
+    ["verify-fix", "verifyFix"],
+    ["strict-review", "strictReview"],
+];
+async function finding(asset, path) {
+    if (path === undefined || path === "")
+        return { asset, state: "missing", reason: "no explicit local path supplied" };
+    try {
+        await access(path);
+    }
+    catch {
+        return { asset, state: "missing", path, reason: "local file does not exist" };
+    }
+    try {
+        if ((await readFile(path, "utf8")).trim() === "")
+            return { asset, state: "inconclusive", path, reason: "local file is empty" };
+    }
+    catch {
+        return { asset, state: "inconclusive", path, reason: "local file cannot be read as text" };
+    }
+    return { asset, state: "complete", path };
+}
+/**
+ * Read-only presence/content audit for core evidence. This intentionally validates no relationship
+ * between files: mapping a persona, approval, or verification to a Journey belongs to a later,
+ * explicit check and is never inferred from filenames or content (#686).
+ */
+export async function auditCoreAcceptanceAssets(assets) {
+    return Promise.all(CORE.map(([asset, key]) => finding(asset, assets[key])));
+}
+//# sourceMappingURL=acceptance-audit.js.map

package/dist/acceptance-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-audit.js","sourceRoot":"","sources":["../src/acceptance-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAapD,MAAM,IAAI,GAAkE;IAC1E,CAAC,cAAc,EAAE,cAAc,CAAC;IAChC,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,gBAAgB,EAAE,eAAe,CAAC;IACnC,CAAC,eAAe,EAAE,cAAc,CAAC;IACjC,CAAC,YAAY,EAAE,WAAW,CAAC;IAC3B,CAAC,eAAe,EAAE,cAAc,CAAC;CAClC,CAAC;AAEF,KAAK,UAAU,OAAO,CAAC,KAA2B,EAAE,IAAwB;IAC1E,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC;IACrH,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IACjI,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IAC7F,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,MAA4B;IAC1E,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC"}