@mmnto/cli 1.70.0 → 1.71.0

package/dist/commands/spine-cert-persist.test.js

@@ -0,0 +1,108 @@
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { persistCertifyingOutcome } from './spine-cert-persist.js';
+// ─── Fixtures ────────────────────────────────────────
+const COMMIT = 'a'.repeat(40);
+const NOW = '2026-06-20T23:59:59.000Z';
+let tmpDir;
+beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-cert-persist-'));
+});
+afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+function provenance(mergedPr = 100) {
+    return { mergedPr, reviewThread: `pr#${mergedPr}/t1`, commitSha: COMMIT };
+}
+function makeRule(lessonHash) {
+    return {
+        lessonHash,
+        lessonHeading: `Rule ${lessonHash}`,
+        pattern: 'debugger',
+        message: 'no debugger',
+        engine: 'regex',
+        compiledAt: '2026-06-20T00:00:00.000Z',
+    };
+}
+function makeVerdict(kind) {
+    return {
+        verdict: kind,
+        precision: kind === 'PASS' ? 1.0 : null,
+        mintedRuleCount: 1,
+        culledCount: 0,
+        survivingRuleCount: 1,
+        exposureTuple: [2, 1, 1],
+        cullLedger: [],
+        nonVacuity: kind === 'PASS',
+        needsAdjudication: [],
+        diagnostics: { survivorPrecision: kind === 'PASS' ? 1.0 : null },
+    };
+}
+/** A positive-control firing for rule r1 on pr 1, so its per-rule positiveControl is true. */
+function positiveFiring() {
+    return {
+        ruleId: 'r1',
+        pr: 1,
+        filePath: 'src/a.ts',
+        matchedLine: 'debugger;',
+        controlKind: 'positive',
+        targetRuleId: 'r1',
+        labelId: 'label-r1-pos',
+    };
+}
+function baseInput(verdict) {
+    return {
+        verdict,
+        firings: [positiveFiring()],
+        mintedRuleIds: ['r1'],
+        positiveControlTargets: [{ pr: 1, targetRuleId: 'r1' }],
+        candidates: [makeRule('r1')],
+        provenanceByRule: new Map([['r1', provenance()]]),
+        certifiedRulesOutPath: path.join(tmpDir, 'gate-1', 'compiled-rules.json'),
+        reportDir: path.join(tmpDir, 'gate-1', 'run-reports'),
+        nowIso: NOW,
+        asOfCommit: COMMIT,
+    };
+}
+// ─── Tests ───────────────────────────────────────────
+describe('persistCertifyingOutcome', () => {
+    it('PASS ⟹ writes stamped PASS-survivors to the cert output + a run report', async () => {
+        const result = await persistCertifyingOutcome(baseInput(makeVerdict('PASS')));
+        expect(result.persisted).toBe(true);
+        expect(result.stampedCount).toBe(1);
+        expect(result.certifiedRulesPath).toBeDefined();
+        // The certified-rules file exists and carries the hard-stamped survivor.
+        const written = JSON.parse(fs.readFileSync(result.certifiedRulesPath, 'utf-8'));
+        expect(written.rules).toHaveLength(1);
+        expect(written.rules[0].lessonHash).toBe('r1');
+        expect(written.rules[0].ruleClass).toBe('hard');
+        expect(written.rules[0].legitimacy.positiveControl).toBe(true);
+        expect(written.rules[0].unverified).toBe(false);
+        // The transient report exists and records the PASS outcome.
+        const report = JSON.parse(fs.readFileSync(result.reportPath, 'utf-8'));
+        expect(report.kind).toBe('windtunnel-cert-run.v1');
+        expect(report.persisted).toBe(true);
+        expect(report.verdict.verdict).toBe('PASS');
+        expect(report.stampedRuleIds).toEqual(['r1']);
+    });
+    it('non-PASS ⟹ writes NO cert rules (corpus untouched) but STILL writes a report (§6 L3)', async () => {
+        const result = await persistCertifyingOutcome(baseInput(makeVerdict('HONEST-NEGATIVE')));
+        expect(result.persisted).toBe(false);
+        expect(result.stampedCount).toBe(0);
+        expect(result.certifiedRulesPath).toBeUndefined();
+        // No compiled-rules file written anywhere under the cert output dir.
+        expect(fs.existsSync(path.join(tmpDir, 'gate-1', 'compiled-rules.json'))).toBe(false);
+        // The report IS written, recording the non-terminal outcome.
+        const report = JSON.parse(fs.readFileSync(result.reportPath, 'utf-8'));
+        expect(report.persisted).toBe(false);
+        expect(report.verdict.verdict).toBe('HONEST-NEGATIVE');
+        expect(report.skips).toContainEqual({ reason: 'verdict-not-pass', verdict: 'HONEST-NEGATIVE' });
+    });
+    it('the report filename embeds the injected timestamp slug + a run-identity hash', async () => {
+        const result = await persistCertifyingOutcome(baseInput(makeVerdict('PASS')));
+        expect(path.basename(result.reportPath)).toMatch(/^run-20260620T235959-[0-9a-f]{12}\.json$/);
+    });
+});
+//# sourceMappingURL=spine-cert-persist.test.js.map

package/dist/commands/spine-cert-persist.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-cert-persist.test.js","sourceRoot":"","sources":["../../src/commands/spine-cert-persist.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAUrE,OAAO,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,wDAAwD;AAExD,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAC9B,MAAM,GAAG,GAAG,0BAA0B,CAAC;AAEvC,IAAI,MAAc,CAAC;AAEnB,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,SAAS,UAAU,CAAC,QAAQ,GAAG,GAAG;IAChC,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,QAAQ,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;AAC5E,CAAC;AAED,SAAS,QAAQ,CAAC,UAAkB;IAClC,OAAO;QACL,UAAU;QACV,aAAa,EAAE,QAAQ,UAAU,EAAE;QACnC,OAAO,EAAE,UAAU;QACnB,OAAO,EAAE,aAAa;QACtB,MAAM,EAAE,OAAO;QACf,UAAU,EAAE,0BAA0B;KACvC,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAA2B;IAC9C,OAAO;QACL,OAAO,EAAE,IAAI;QACb,SAAS,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;QACvC,eAAe,EAAE,CAAC;QAClB,WAAW,EAAE,CAAC;QACd,kBAAkB,EAAE,CAAC;QACrB,aAAa,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACxB,UAAU,EAAE,EAAE;QACd,UAAU,EAAE,IAAI,KAAK,MAAM;QAC3B,iBAAiB,EAAE,EAAE;QACrB,WAAW,EAAE,EAAE,iBAAiB,EAAE,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE;KACjE,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAS,cAAc;IACrB,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,EAAE,EAAE,CAAC;QACL,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,WAAW;QACxB,WAAW,EAAE,UAAU;QACvB,YAAY,EAAE,IAAI;QAClB,OAAO,EAAE,cAAc;KACxB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,OAA0B;IAC3C,OAAO;QACL,OAAO;QACP,OAAO,EAAE,CAAC,cAAc,EAAE,CAAC;QAC3B,aAAa,EAAE,CAAC,IAAI,CAAC;QACrB,sBAAsB,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QACvD,UAAU,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5B,gBAAgB,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACjD,qBAAqB,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,qBAAqB,CAAC;QACzE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,aAAa,CAAC;QACrD,MAAM,EAAE,GAAG;QACX,UAAU,EAAE,MAAM;KACnB,CAAC;AACJ,CAAC;AAED,wDAAwD;AAExD,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,wEAAwE,EAAE,KAAK,IAAI,EAAE;QACtF,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAE9E,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,WAAW,EAAE,CAAC;QAEhD,yEAAyE;QACzE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,kBAAmB,EAAE,OAAO,CAAC,CAAC,CAAC;QACjF,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/C,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEhD,4DAA4D;QAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACnD,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;QACpG,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAEzF,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,aAAa,EAAE,CAAC;QAClD,qEAAqE;QACrE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAEtF,6DAA6D;QAC7D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QACvE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,cAAc,CAAC,EAAE,MAAM,EAAE,kBAAkB,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,MAAM,GAAG,MAAM,wBAAwB,CAAC,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/spine-cert-record.d.ts

@@ -0,0 +1,118 @@
+import type { DraftClassifier, DraftExtractor, ReviewThreadSource, SplitArtifact, SplitLedger, WindtunnelLock } from '@mmnto/totem';
+import { type ReplayArtifact, type ReplayProvenance } from './spine-llm-replay.js';
+/**
+ * Minimal draft shape `certDraftRef` keys on — a structural subset of core's
+ * (intentionally non-exported, transient) `DraftCandidate`. Assignable to the
+ * `(draft: DraftCandidate) => string` resolver the Recording/Replay classifiers
+ * expect, via parameter contravariance.
+ */
+type DraftRefInput = {
+    provenance: {
+        mergedPr: number;
+    };
+    dslSource: string;
+};
+/**
+ * The shared per-draft ref resolver. MUST be byte-identical in RECORD and REPLAY
+ * so `classifierInputKey(draft, draftRef(draft))` produces the same key in both —
+ * a divergence here would make every replay a `ReplayMissError`. Keyed on the
+ * provenance PR + the DSL body (a draft is uniquely identified by its source
+ * within a PR); ordinal-free so it survives re-ordering.
+ */
+export declare function certDraftRef(d: DraftRefInput): string;
+export interface RecordReplayFixtureDeps {
+    split: SplitArtifact;
+    splitLedger: SplitLedger;
+    /** Review-thread source (live gh adapter in the record command). */
+    source: ReviewThreadSource;
+    /** Live draft extractor to record (wrapped in RecordingDraftExtractor). */
+    liveExtractor: DraftExtractor;
+    /** Live draft classifier to record (wrapped in RecordingDraftClassifier). */
+    liveClassifier: DraftClassifier;
+    /** Seed-blindness attestation (passed through to extract). */
+    seedClassesProvided: boolean;
+    /** Prompt/provider provenance bound into the frozen artifact's whole-artifact hash. */
+    provenance: ReplayProvenance;
+}
+/**
+ * Drive the extract + classify stages through the RECORDING decorators to freeze
+ * a `llm-replay.v1` fixture (A2 record path). Runs extract (records every
+ * extractor output) then classify (records every classifier output) over the
+ * train slice, then `sink.freeze(provenance)` → the artifact + its
+ * `computeArtifactHash` (the EXTERNAL expected-hash the lock's L2 `llmReplaySha`
+ * carries). Compile is NOT run here — recording captures only the non-deterministic
+ * LLM edge (extract/classify); the deterministic compile/firing replays from it.
+ */
+export declare function recordReplayFixture(deps: RecordReplayFixtureDeps): Promise<{
+    artifact: ReplayArtifact;
+    hash: string;
+}>;
+/**
+ * Construct the REPLAY-mode extractor + classifier from a frozen artifact + its
+ * external expected-hash (the lock's L2 `llmReplaySha`). Both constructors
+ * re-validate the whole-artifact integrity (assertFixtureIntegrity) before any
+ * lookup, so a tampered/stale fixture fails loud. Uses the shared `certDraftRef`
+ * so keys match what `recordReplayFixture` froze. Pure: zero LLM, zero network.
+ */
+export declare function buildReplayAdapters(artifact: ReplayArtifact, expectedHash: string): {
+    extractor: DraftExtractor;
+    classifier: DraftClassifier;
+};
+/** The injectable record deps — live in the CLI, fakes in tests. */
+export interface RecordDeps {
+    source: ReviewThreadSource;
+    liveExtractor: DraftExtractor;
+    liveClassifier: DraftClassifier;
+    provenance: ReplayProvenance;
+}
+export interface RecordCommandOptions {
+    /** Path to the wind-tunnel lock (default `.totem/spine/gate-1/windtunnel.lock.json`). */
+    lockPath?: string;
+    /** Gate-1 output dir (default: the lock's dir). */
+    outputDir?: string;
+    /**
+     * Operator attestation that seed classes were supplied to the live extract —
+     * flows into the fold-I FM-f `seedClassesProvided` ledger field. Default false
+     * (seed-blind), so an unset flag preserves the seed-blind-by-construction claim.
+     */
+    seedClassesProvided?: boolean;
+    /**
+     * Record deps. Injected in tests; in the live CLI path the caller builds them
+     * from the orchestrator config (createOrchestrator + the Live adapters + the
+     * gh ReviewThreadSource). REQUIRED — there is no safe default LLM/provider, so
+     * the command fails loud rather than guess.
+     */
+    deps: RecordDeps;
+}
+/**
+ * A2 record path — freeze the `llm-replay.v1` fixture + the review content the
+ * certifying RUN replays. Loads the lock + split, drives extract→classify
+ * through the RECORDING decorators over the train slice (capturing both the LLM
+ * outputs AND the fetched review content), writes `llm-replay.v1.json` +
+ * `review-content.json` to the gate-1 dir, and returns the artifact's
+ * `computeArtifactHash` — the EXTERNAL hash the operator wires into the lock's L2
+ * `controls.integrity.llmReplaySha`. Separate from `run` (fail-safe: `run` stays
+ * replay-only and never triggers a live record in CI).
+ */
+export declare function recordCommand(opts: RecordCommandOptions): Promise<{
+    artifactPath: string;
+    contentPath: string;
+    hash: string;
+}>;
+export interface LiveRecordConfig {
+    provider: string;
+    model: string;
+    cwd: string;
+    totemVersion: string;
+    env?: NodeJS.ProcessEnv;
+}
+/**
+ * Construct the LIVE record deps from the orchestrator config: the gh
+ * ReviewThreadSource, an `InvokeOrchestrator` (createOrchestrator), the Live
+ * extract/classify adapters (frozen prompts), and the run-level provenance.
+ * Operational — exercised by hand when freezing a real corpus, never in CI
+ * (the adapters' construction-time guards reject a CI env / missing credential).
+ */
+export declare function buildLiveRecordDeps(lock: WindtunnelLock, config: LiveRecordConfig): Promise<RecordDeps>;
+export {};
+//# sourceMappingURL=spine-cert-record.d.ts.map

package/dist/commands/spine-cert-record.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-cert-record.d.ts","sourceRoot":"","sources":["../../src/commands/spine-cert-record.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EAEd,kBAAkB,EAClB,aAAa,EACb,WAAW,EACX,cAAc,EACf,MAAM,cAAc,CAAC;AAEtB,OAAO,EAIL,KAAK,cAAc,EAGnB,KAAK,gBAAgB,EAGtB,MAAM,uBAAuB,CAAC;AAE/B;;;;;GAKG;AACH,KAAK,aAAa,GAAG;IAAE,UAAU,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,aAAa,GAAG,MAAM,CAErD;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,aAAa,CAAC;IACrB,WAAW,EAAE,WAAW,CAAC;IACzB,oEAAoE;IACpE,MAAM,EAAE,kBAAkB,CAAC;IAC3B,2EAA2E;IAC3E,aAAa,EAAE,cAAc,CAAC;IAC9B,6EAA6E;IAC7E,cAAc,EAAE,eAAe,CAAC;IAChC,8DAA8D;IAC9D,mBAAmB,EAAE,OAAO,CAAC;IAC7B,uFAAuF;IACvF,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC;IAAE,QAAQ,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAgBrD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,cAAc,EACxB,YAAY,EAAE,MAAM,GACnB;IAAE,SAAS,EAAE,cAAc,CAAC;IAAC,UAAU,EAAE,eAAe,CAAA;CAAE,CAK5D;AAID,oEAAoE;AACpE,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,aAAa,EAAE,cAAc,CAAC;IAC9B,cAAc,EAAE,eAAe,CAAC;IAChC,UAAU,EAAE,gBAAgB,CAAC;CAC9B;AAED,MAAM,WAAW,oBAAoB;IACnC,yFAAyF;IACzF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;OAKG;IACH,IAAI,EAAE,UAAU,CAAC;CAClB;AAgBD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CA0EtE;AASD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,MAAM,CAAC;IACrB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB;AAED;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,cAAc,EACpB,MAAM,EAAE,gBAAgB,GACvB,OAAO,CAAC,UAAU,CAAC,CAuErB"}

package/dist/commands/spine-cert-record.js

@@ -0,0 +1,194 @@
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { computeArtifactHash, RecordingDraftClassifier, RecordingDraftExtractor, ReplayDraftClassifier, ReplayDraftExtractor, ReplayRecordSink, serializeReplayArtifact, } from './spine-llm-replay.js';
+/**
+ * The shared per-draft ref resolver. MUST be byte-identical in RECORD and REPLAY
+ * so `classifierInputKey(draft, draftRef(draft))` produces the same key in both —
+ * a divergence here would make every replay a `ReplayMissError`. Keyed on the
+ * provenance PR + the DSL body (a draft is uniquely identified by its source
+ * within a PR); ordinal-free so it survives re-ordering.
+ */
+export function certDraftRef(d) {
+    return `cand-${d.provenance.mergedPr}-${d.dslSource}`;
+}
+/**
+ * Drive the extract + classify stages through the RECORDING decorators to freeze
+ * a `llm-replay.v1` fixture (A2 record path). Runs extract (records every
+ * extractor output) then classify (records every classifier output) over the
+ * train slice, then `sink.freeze(provenance)` → the artifact + its
+ * `computeArtifactHash` (the EXTERNAL expected-hash the lock's L2 `llmReplaySha`
+ * carries). Compile is NOT run here — recording captures only the non-deterministic
+ * LLM edge (extract/classify); the deterministic compile/firing replays from it.
+ */
+export async function recordReplayFixture(deps) {
+    const { runExtractStage, runClassifyStage } = await import('@mmnto/totem');
+    const sink = new ReplayRecordSink();
+    const recExtractor = new RecordingDraftExtractor(deps.liveExtractor, sink);
+    const recClassifier = new RecordingDraftClassifier(deps.liveClassifier, sink, certDraftRef);
+    const extract = await runExtractStage(deps.split, {
+        source: deps.source,
+        extractor: recExtractor,
+        seedClassesProvided: deps.seedClassesProvided,
+    });
+    await runClassifyStage(extract, deps.splitLedger, { classifier: recClassifier });
+    const artifact = sink.freeze(deps.provenance);
+    return { artifact, hash: computeArtifactHash(artifact) };
+}
+/**
+ * Construct the REPLAY-mode extractor + classifier from a frozen artifact + its
+ * external expected-hash (the lock's L2 `llmReplaySha`). Both constructors
+ * re-validate the whole-artifact integrity (assertFixtureIntegrity) before any
+ * lookup, so a tampered/stale fixture fails loud. Uses the shared `certDraftRef`
+ * so keys match what `recordReplayFixture` froze. Pure: zero LLM, zero network.
+ */
+export function buildReplayAdapters(artifact, expectedHash) {
+    return {
+        extractor: new ReplayDraftExtractor(artifact, expectedHash),
+        classifier: new ReplayDraftClassifier(artifact, expectedHash, certDraftRef),
+    };
+}
+/** Wrap a source so every fetched review-thread content is captured for freezing. */
+function capturingSource(inner, captured) {
+    return {
+        async fetch(pr) {
+            const result = await inner.fetch(pr);
+            if (result.kind === 'ok')
+                captured.push(result.content);
+            return result;
+        },
+    };
+}
+/**
+ * A2 record path — freeze the `llm-replay.v1` fixture + the review content the
+ * certifying RUN replays. Loads the lock + split, drives extract→classify
+ * through the RECORDING decorators over the train slice (capturing both the LLM
+ * outputs AND the fetched review content), writes `llm-replay.v1.json` +
+ * `review-content.json` to the gate-1 dir, and returns the artifact's
+ * `computeArtifactHash` — the EXTERNAL hash the operator wires into the lock's L2
+ * `controls.integrity.llmReplaySha`. Separate from `run` (fail-safe: `run` stays
+ * replay-only and never triggers a live record in CI).
+ */
+export async function recordCommand(opts) {
+    const { WindtunnelLockSchema, SplitArtifactSchema, TotemError } = await import('@mmnto/totem');
+    const cwd = process.cwd();
+    const lockPath = opts.lockPath
+        ? path.resolve(cwd, opts.lockPath)
+        : path.resolve(cwd, '.totem/spine/gate-1/windtunnel.lock.json');
+    const gate1Dir = opts.outputDir ? path.resolve(cwd, opts.outputDir) : path.dirname(lockPath);
+    // Guard the two critical reads: a missing file or malformed JSON surfaces as a
+    // structured TotemError (original error attached as cause), not a cryptic crash.
+    const readJsonFile = (p) => {
+        let raw;
+        try {
+            raw = fs.readFileSync(p, 'utf-8');
+        }
+        catch (err) {
+            throw new TotemError('CONFIG_INVALID', `Record: required file not found at ${p}`, 'Ensure the gate-1 lock and split.json exist before recording.', err);
+        }
+        try {
+            return JSON.parse(raw);
+        }
+        catch (err) {
+            throw new TotemError('CONFIG_INVALID', `Record: ${p} is not valid JSON`, 'Fix the JSON syntax and retry.', err);
+        }
+    };
+    const lock = WindtunnelLockSchema.parse(readJsonFile(lockPath));
+    const split = SplitArtifactSchema.parse(readJsonFile(path.join(gate1Dir, 'split.json')));
+    const splitLedger = {
+        split,
+        corpus: lock.corpus.resolvedPrs.map((p) => p.pr),
+        corpusMergeCommits: lock.corpus.resolvedPrs.map((p) => ({
+            pr: p.pr,
+            mergeCommit: p.mergeCommit,
+        })),
+    };
+    const capturedContent = [];
+    const { artifact, hash } = await recordReplayFixture({
+        split,
+        splitLedger,
+        source: capturingSource(opts.deps.source, capturedContent),
+        liveExtractor: opts.deps.liveExtractor,
+        liveClassifier: opts.deps.liveClassifier,
+        seedClassesProvided: opts.seedClassesProvided ?? false,
+        provenance: opts.deps.provenance,
+    });
+    fs.mkdirSync(gate1Dir, { recursive: true });
+    const artifactPath = path.join(gate1Dir, 'llm-replay.v1.json');
+    const contentPath = path.join(gate1Dir, 'review-content.json');
+    fs.writeFileSync(artifactPath, serializeReplayArtifact(artifact), 'utf-8');
+    fs.writeFileSync(contentPath, JSON.stringify(capturedContent, null, 2), 'utf-8');
+    console.error(`[WindtunnelRecord] Froze ${artifactPath}`);
+    console.error(`[WindtunnelRecord] Froze ${contentPath} (${capturedContent.length} PR(s))`);
+    console.error(`[WindtunnelRecord] llm-replay hash (wire into lock controls.integrity.llmReplaySha):`);
+    console.log(hash);
+    return { artifactPath, contentPath, hash };
+}
+/** Env var carrying each provider's credential (presence check, never read). */
+const PROVIDER_CREDENTIAL_ENV = {
+    anthropic: 'ANTHROPIC_API_KEY',
+    gemini: 'GEMINI_API_KEY',
+    openai: 'OPENAI_API_KEY',
+};
+/**
+ * Construct the LIVE record deps from the orchestrator config: the gh
+ * ReviewThreadSource, an `InvokeOrchestrator` (createOrchestrator), the Live
+ * extract/classify adapters (frozen prompts), and the run-level provenance.
+ * Operational — exercised by hand when freezing a real corpus, never in CI
+ * (the adapters' construction-time guards reject a CI env / missing credential).
+ */
+export async function buildLiveRecordDeps(lock, config) {
+    const { createOrchestrator } = await import('../orchestrators/orchestrator.js');
+    const { TotemError } = await import('@mmnto/totem');
+    const { LiveDraftExtractor, LiveDraftClassifier, buildReplayProvenance, MINER_EXTRACT_SYSTEM_PROMPT, MINER_CLASSIFY_SYSTEM_PROMPT, } = await import('./spine-llm-adapters.js');
+    const { ReviewThreadSourceAdapter } = await import('./spine-review-thread-source.js');
+    const [owner, name] = lock.corpus.repo.split('/');
+    if (!owner || !name) {
+        throw new TotemError('CONFIG_INVALID', `Record: lock.corpus.repo "${lock.corpus.repo}" is not "owner/name".`, 'Set corpus.repo in the lock to the "owner/name" form.');
+    }
+    const env = config.env ?? process.env;
+    const credentialPresent = Boolean(env[PROVIDER_CREDENTIAL_ENV[config.provider] ?? '']);
+    // Build a fully-typed OrchestratorConfig — no `as` cast. The live record path
+    // supports only the API-key providers (see PROVIDER_CREDENTIAL_ENV); `shell`
+    // and `ollama` carry required fields (command / baseUrl) the record path does
+    // not model, so the prior cast silently passed `command: undefined` for shell.
+    let invoke;
+    switch (config.provider) {
+        case 'anthropic':
+            invoke = createOrchestrator({ provider: 'anthropic' });
+            break;
+        case 'gemini':
+            invoke = createOrchestrator({ provider: 'gemini' });
+            break;
+        case 'openai':
+            invoke = createOrchestrator({ provider: 'openai' });
+            break;
+        default:
+            throw new TotemError('CONFIG_INVALID', `Record: unsupported provider "${config.provider}" for the live record path.`, 'Use --provider with anthropic, gemini, or openai.');
+    }
+    const totemDir = `${config.cwd}/.totem`;
+    const adapterDeps = {
+        invoke,
+        model: config.model,
+        cwd: config.cwd,
+        totemDir,
+        provider: config.provider,
+        credentialPresent,
+        temperature: 0,
+        env,
+    };
+    return {
+        source: new ReviewThreadSourceAdapter({ owner, name, cwd: config.cwd }),
+        liveExtractor: new LiveDraftExtractor(adapterDeps),
+        liveClassifier: new LiveDraftClassifier(adapterDeps),
+        provenance: buildReplayProvenance({
+            extractSystemPrompt: MINER_EXTRACT_SYSTEM_PROMPT,
+            classifySystemPrompt: MINER_CLASSIFY_SYSTEM_PROMPT,
+            provider: config.provider,
+            model: config.model,
+            temperature: 0,
+            orchestratorVersion: config.totemVersion,
+            totemVersion: config.totemVersion,
+        }),
+    };
+}
+//# sourceMappingURL=spine-cert-record.js.map

package/dist/commands/spine-cert-record.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-cert-record.js","sourceRoot":"","sources":["../../src/commands/spine-cert-record.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAYlC,OAAO,EACL,mBAAmB,EACnB,wBAAwB,EACxB,uBAAuB,EAEvB,qBAAqB,EACrB,oBAAoB,EAEpB,gBAAgB,EAChB,uBAAuB,GACxB,MAAM,uBAAuB,CAAC;AAU/B;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,CAAgB;IAC3C,OAAO,QAAQ,CAAC,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;AACxD,CAAC;AAiBD;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAA6B;IAE7B,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAE3E,MAAM,IAAI,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACpC,MAAM,YAAY,GAAG,IAAI,uBAAuB,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC3E,MAAM,aAAa,GAAG,IAAI,wBAAwB,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAE5F,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE;QAChD,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,YAAY;QACvB,mBAAmB,EAAE,IAAI,CAAC,mBAAmB;KAC9C,CAAC,CAAC;IACH,MAAM,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC;IAEjF,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAC3D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CACjC,QAAwB,EACxB,YAAoB;IAEpB,OAAO;QACL,SAAS,EAAE,IAAI,oBAAoB,CAAC,QAAQ,EAAE,YAAY,CAAC;QAC3D,UAAU,EAAE,IAAI,qBAAqB,CAAC,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC;KAC5E,CAAC;AACJ,CAAC;AAgCD,qFAAqF;AACrF,SAAS,eAAe,CACtB,KAAyB,EACzB,QAA+B;IAE/B,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,EAAU;YACpB,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;gBAAE,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACxD,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAA0B;IAE1B,MAAM,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAE/F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ;QAC5B,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC;QAClC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAE7F,+EAA+E;IAC/E,iFAAiF;IACjF,MAAM,YAAY,GAAG,CAAC,CAAS,EAAW,EAAE;QAC1C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,gBAAgB,EAChB,sCAAsC,CAAC,EAAE,EACzC,+DAA+D,EAC/D,GAAG,CACJ,CAAC;QACJ,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,UAAU,CAClB,gBAAgB,EAChB,WAAW,CAAC,oBAAoB,EAChC,gCAAgC,EAChC,GAAG,CACJ,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,IAAI,GAAmB,oBAAoB,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChF,MAAM,KAAK,GAAkB,mBAAmB,CAAC,KAAK,CACpD,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAChD,CAAC;IAEF,MAAM,WAAW,GAAgB;QAC/B,KAAK;QACL,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,kBAAkB,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtD,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,WAAW,EAAE,CAAC,CAAC,WAAW;SAC3B,CAAC,CAAC;KACJ,CAAC;IAEF,MAAM,eAAe,GAA0B,EAAE,CAAC;IAClD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,MAAM,mBAAmB,CAAC;QACnD,KAAK;QACL,WAAW;QACX,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC;QAC1D,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa;QACtC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc;QACxC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,KAAK;QACtD,UAAU,EAAE,IAAI,CAAC,IAAI,CAAC,UAAU;KACjC,CAAC,CAAC;IAEH,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC;IAC/D,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;IAC/D,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,uBAAuB,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;IAC3E,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAEjF,OAAO,CAAC,KAAK,CAAC,4BAA4B,YAAY,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,4BAA4B,WAAW,KAAK,eAAe,CAAC,MAAM,SAAS,CAAC,CAAC;IAC3F,OAAO,CAAC,KAAK,CACX,sFAAsF,CACvF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAElB,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,gFAAgF;AAChF,MAAM,uBAAuB,GAA2B;IACtD,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,MAAM,EAAE,gBAAgB;CACzB,CAAC;AAUF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,IAAoB,EACpB,MAAwB;IAExB,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,kCAAkC,CAAC,CAAC;IAChF,MAAM,EAAE,UAAU,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IACpD,MAAM,EACJ,kBAAkB,EAClB,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC3B,4BAA4B,GAC7B,GAAG,MAAM,MAAM,CAAC,yBAAyB,CAAC,CAAC;IAC5C,MAAM,EAAE,yBAAyB,EAAE,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC,CAAC;IAEtF,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,IAAI,UAAU,CAClB,gBAAgB,EAChB,6BAA6B,IAAI,CAAC,MAAM,CAAC,IAAI,wBAAwB,EACrE,uDAAuD,CACxD,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACtC,MAAM,iBAAiB,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAEvF,8EAA8E;IAC9E,6EAA6E;IAC7E,8EAA8E;IAC9E,+EAA+E;IAC/E,IAAI,MAA6C,CAAC;IAClD,QAAQ,MAAM,CAAC,QAAQ,EAAE,CAAC;QACxB,KAAK,WAAW;YACd,MAAM,GAAG,kBAAkB,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC;YACvD,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,GAAG,kBAAkB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpD,MAAM;QACR,KAAK,QAAQ;YACX,MAAM,GAAG,kBAAkB,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACpD,MAAM;QACR;YACE,MAAM,IAAI,UAAU,CAClB,gBAAgB,EAChB,iCAAiC,MAAM,CAAC,QAAQ,6BAA6B,EAC7E,mDAAmD,CACpD,CAAC;IACN,CAAC;IACD,MAAM,QAAQ,GAAG,GAAG,MAAM,CAAC,GAAG,SAAS,CAAC;IACxC,MAAM,WAAW,GAAG;QAClB,MAAM;QACN,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,QAAQ;QACR,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,iBAAiB;QACjB,WAAW,EAAE,CAAC;QACd,GAAG;KACJ,CAAC;IAEF,OAAO;QACL,MAAM,EAAE,IAAI,yBAAyB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;QACvE,aAAa,EAAE,IAAI,kBAAkB,CAAC,WAAW,CAAC;QAClD,cAAc,EAAE,IAAI,mBAAmB,CAAC,WAAW,CAAC;QACpD,UAAU,EAAE,qBAAqB,CAAC;YAChC,mBAAmB,EAAE,2BAA2B;YAChD,oBAAoB,EAAE,4BAA4B;YAClD,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,CAAC;YACd,mBAAmB,EAAE,MAAM,CAAC,YAAY;YACxC,YAAY,EAAE,MAAM,CAAC,YAAY;SAClC,CAAC;KACH,CAAC;AACJ,CAAC"}

package/dist/commands/spine-cert-record.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=spine-cert-record.test.d.ts.map

package/dist/commands/spine-cert-record.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-cert-record.test.d.ts","sourceRoot":"","sources":["../../src/commands/spine-cert-record.test.ts"],"names":[],"mappings":""}

package/dist/commands/spine-cert-record.test.js

@@ -0,0 +1,129 @@
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { recordCommand } from './spine-cert-record.js';
+import { computeArtifactHash, } from './spine-llm-replay.js';
+const sha = (n) => String(n).padStart(40, '0');
+const REGEX_DSL = ['**Pattern:** `forbiddenCall\\(`', '**Engine:** regex'].join('\n');
+const PROVENANCE = {
+    promptTemplateHash: sha(11),
+    systemPromptHash: sha(12),
+    provider: 'anthropic',
+    model: 'claude-test',
+    temperature: 0,
+    orchestratorVersion: '0.0.0-test',
+    adapterKind: 'extractor+classifier',
+    keyVersion: 'v1',
+    totemVersion: '0.0.0-test',
+};
+function content(pr) {
+    return {
+        pr,
+        mergeCommitSha: sha(pr),
+        threads: [
+            {
+                path: 'src/a.ts',
+                comments: [{ author: 'Jane', body: 'note' }],
+                isResolved: false,
+                isOutdated: false,
+            },
+        ],
+    };
+}
+function fakeDeps() {
+    return {
+        source: {
+            async fetch(pr) {
+                return { kind: 'ok', content: content(pr) };
+            },
+        },
+        liveExtractor: {
+            async draft() {
+                return [REGEX_DSL];
+            },
+        },
+        liveClassifier: {
+            async classify() {
+                return { disposition: 'structural', dispositionSource: 'classified' };
+            },
+        },
+        provenance: PROVENANCE,
+    };
+}
+function validLock() {
+    return {
+        schema: 'windtunnel.lock.v1',
+        canonicalPath: '.totem/spine/gate-1/windtunnel.lock.json',
+        gate: 'gate-1',
+        phase: 'certifying',
+        corpus: {
+            repo: 'mmnto-ai/liquid-city',
+            selectionRule: {
+                state: 'merged',
+                predicate: 'touches-code',
+                window: { type: 'all' },
+                asOfCommit: sha(100),
+            },
+            resolvedPrs: [{ pr: 1, mergeCommit: sha(1), baseSha: sha(2), headSha: sha(3) }],
+        },
+        fpDefinition: {
+            rubricRef: 'controls/rubric.md',
+            groundTruthRef: 'controls/gt.json',
+            adjudicator: 'operator',
+            precisionFloor: 1.0,
+        },
+        controls: {
+            positiveRef: 'controls/positive/',
+            negativeRef: 'controls/negative/',
+            integrity: { mechanism: 'git-hash-object', fixtureSha: sha(0) },
+        },
+        cullRateThreshold: 0.25,
+        exposureDenominator: {
+            activeRulesEvaluated: { floor: 2 },
+            filesTouchedInWindow: { floor: 0 },
+            positiveControlsExercised: { floor: 0 },
+        },
+    };
+}
+const SPLIT = {
+    asOfCommit: sha(100),
+    trainPrs: [1],
+    heldOutPrs: [],
+    excludedPrs: [],
+    positiveControlPrs: [],
+    negativeControlPrs: [],
+    splitRule: { predicate: 'code-touching non-bot', cutIndex: 1 },
+};
+let tmpDir;
+let gate1Dir;
+let lockPath;
+beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-record-cmd-'));
+    gate1Dir = path.join(tmpDir, 'gate-1');
+    fs.mkdirSync(gate1Dir, { recursive: true });
+    lockPath = path.join(gate1Dir, 'windtunnel.lock.json');
+    fs.writeFileSync(lockPath, JSON.stringify(validLock()), 'utf-8');
+    fs.writeFileSync(path.join(gate1Dir, 'split.json'), JSON.stringify(SPLIT), 'utf-8');
+});
+afterEach(() => {
+    fs.rmSync(tmpDir, { recursive: true, force: true });
+});
+describe('recordCommand (A2 record path)', () => {
+    it('freezes the llm-replay artifact + review content and returns the integrity hash', async () => {
+        const result = await recordCommand({ lockPath, deps: fakeDeps() });
+        expect(fs.existsSync(result.artifactPath)).toBe(true);
+        expect(fs.existsSync(result.contentPath)).toBe(true);
+        // The returned hash matches computeArtifactHash over the written artifact.
+        const artifact = JSON.parse(fs.readFileSync(result.artifactPath, 'utf-8'));
+        expect(result.hash).toBe(computeArtifactHash(artifact));
+        // The frozen content carries the fetched train PR.
+        const frozenContent = JSON.parse(fs.readFileSync(result.contentPath, 'utf-8'));
+        expect(frozenContent).toHaveLength(1);
+        expect(frozenContent[0].pr).toBe(1);
+        // The artifact recorded both extractor + classifier outputs.
+        expect(Object.keys(artifact.records.extractor).length).toBeGreaterThan(0);
+        expect(Object.keys(artifact.records.classifier).length).toBeGreaterThan(0);
+    });
+});
+//# sourceMappingURL=spine-cert-record.test.js.map

package/dist/commands/spine-cert-record.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-cert-record.test.js","sourceRoot":"","sources":["../../src/commands/spine-cert-record.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAWrE,OAAO,EAAE,aAAa,EAAmB,MAAM,wBAAwB,CAAC;AACxE,OAAO,EACL,mBAAmB,GAGpB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AAE/D,MAAM,SAAS,GAAG,CAAC,iCAAiC,EAAE,mBAAmB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEtF,MAAM,UAAU,GAAqB;IACnC,kBAAkB,EAAE,GAAG,CAAC,EAAE,CAAC;IAC3B,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC;IACzB,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,aAAa;IACpB,WAAW,EAAE,CAAC;IACd,mBAAmB,EAAE,YAAY;IACjC,WAAW,EAAE,sBAAsB;IACnC,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,YAAY;CAC3B,CAAC;AAEF,SAAS,OAAO,CAAC,EAAU;IACzB,OAAO;QACL,EAAE;QACF,cAAc,EAAE,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;gBAC5C,UAAU,EAAE,KAAK;gBACjB,UAAU,EAAE,KAAK;aAClB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ;IACf,OAAO;QACL,MAAM,EAAE;YACN,KAAK,CAAC,KAAK,CAAC,EAAU;gBACpB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9C,CAAC;SAC2B;QAC9B,aAAa,EAAE;YACb,KAAK,CAAC,KAAK;gBACT,OAAO,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;SACuB;QAC1B,cAAc,EAAE;YACd,KAAK,CAAC,QAAQ;gBACZ,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,YAAY,EAAE,CAAC;YACxE,CAAC;SACwB;QAC3B,UAAU,EAAE,UAAU;KACvB,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IAChB,OAAO;QACL,MAAM,EAAE,oBAAoB;QAC5B,aAAa,EAAE,0CAA0C;QACzD,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,YAAY;QACnB,MAAM,EAAE;YACN,IAAI,EAAE,sBAAsB;YAC5B,aAAa,EAAE;gBACb,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,cAAc;gBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACvB,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC;aACrB;YACD,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;SAChF;QACD,YAAY,EAAE;YACZ,SAAS,EAAE,oBAAoB;YAC/B,cAAc,EAAE,kBAAkB;YAClC,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,GAAG;SACpB;QACD,QAAQ,EAAE;YACR,WAAW,EAAE,oBAAoB;YACjC,WAAW,EAAE,oBAAoB;YACjC,SAAS,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE;SAChE;QACD,iBAAiB,EAAE,IAAI;QACvB,mBAAmB,EAAE;YACnB,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YAClC,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YAClC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;SACxC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,KAAK,GAAG;IACZ,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC;IACpB,QAAQ,EAAE,CAAC,CAAC,CAAC;IACb,UAAU,EAAE,EAAE;IACd,WAAW,EAAE,EAAE;IACf,kBAAkB,EAAE,EAAE;IACtB,kBAAkB,EAAE,EAAE;IACtB,SAAS,EAAE,EAAE,SAAS,EAAE,uBAAuB,EAAE,QAAQ,EAAE,CAAC,EAAE;CAC/D,CAAC;AAEF,IAAI,MAAc,CAAC;AACnB,IAAI,QAAgB,CAAC;AACrB,IAAI,QAAgB,CAAC;AAErB,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACrE,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACvC,EAAE,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,sBAAsB,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IACjE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;AACtF,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACtD,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,iFAAiF,EAAE,KAAK,IAAI,EAAE;QAC/F,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAEnE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAErD,2EAA2E;QAC3E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,CAAmB,CAAC;QAC7F,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAExD,mDAAmD;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;QAC/E,MAAM,CAAC,aAAa,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAEpC,6DAA6D;QAC7D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC1E,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/spine-cert-run-corpus.d.ts

@@ -0,0 +1,42 @@
+import type { GroundTruthLabel, MinerLedgers, ResolvedPrDiff, ReviewThreadContent, Stage4VerifierDeps } from '@mmnto/totem';
+import { type ReplayArtifact } from './spine-llm-replay.js';
+import type { CertifyingCorpusProvider } from './spine-windtunnel.js';
+export interface CertRunFixtureInputs {
+    split: import('@mmnto/totem').SplitArtifact;
+    artifact: ReplayArtifact;
+    content: ReviewThreadContent[];
+    prDiffs: ResolvedPrDiff[];
+    groundTruth: Map<string, GroundTruthLabel>;
+}
+/**
+ * Load + validate the committed cert-run fixture inputs from the gate-1 dir.
+ * Async so the `@mmnto/totem` runtime values (schema + error class) are
+ * dynamically imported per the CLI lazy-import convention, not pulled in at
+ * module load.
+ */
+export declare function loadCertRunFixtures(gate1Dir: string): Promise<CertRunFixtureInputs>;
+export interface ReplayCorpusProviderOptions {
+    /** The `.totem/spine/gate-1` dir holding the committed cert-run fixtures. */
+    gate1Dir: string;
+    /** Stage-4 verifier deps (listFiles/readFile) — injected so the run is testable. */
+    stage4: Stage4VerifierDeps;
+    /** Injected timestamp (Tenet 15 determinism). */
+    now: string;
+    /** Seed-blindness attestation (fold-I §7). */
+    seedClassesProvided?: boolean;
+    /** Optional sink for the fold-I miner ledgers (defaults to gate1Dir/miner-ledgers.json). */
+    onLedgers?: (ledgers: MinerLedgers) => void;
+}
+/**
+ * Build the REPLAY-mode `CertifyingCorpusProvider` the certifying run injects.
+ *
+ * Loads the committed cert-run fixtures (split, frozen `llm-replay.v1` artifact,
+ * frozen review content, resolved-PR diffs, ground-truth labels) from the gate-1
+ * dir, constructs the zero-network replay adapters (gated on the lock's L2
+ * `llmReplaySha`) + a frozen review-thread source, then composes them through
+ * `buildCertifyingCorpus`. fold-I ledgers are emitted (default: written to
+ * `miner-ledgers.json`) for §7 observability. Throws loud if the lock lacks the
+ * L2 replay hash (no safe default for an integrity gate).
+ */
+export declare function buildReplayCorpusProvider(opts: ReplayCorpusProviderOptions): CertifyingCorpusProvider;
+//# sourceMappingURL=spine-cert-run-corpus.d.ts.map

package/dist/commands/spine-cert-run-corpus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spine-cert-run-corpus.d.ts","sourceRoot":"","sources":["../../src/commands/spine-cert-run-corpus.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACd,mBAAmB,EAGnB,kBAAkB,EAEnB,MAAM,cAAc,CAAC;AAItB,OAAO,EAAE,KAAK,cAAc,EAAwB,MAAM,uBAAuB,CAAC;AAClF,OAAO,KAAK,EAAoB,wBAAwB,EAAE,MAAM,uBAAuB,CAAC;AAiDxF,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,cAAc,EAAE,aAAa,CAAC;IAC5C,QAAQ,EAAE,cAAc,CAAC;IACzB,OAAO,EAAE,mBAAmB,EAAE,CAAC;IAC/B,OAAO,EAAE,cAAc,EAAE,CAAC;IAC1B,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;CAC5C;AAED;;;;;GAKG;AACH,wBAAsB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAoCzF;AAiBD,MAAM,WAAW,2BAA2B;IAC1C,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,MAAM,EAAE,kBAAkB,CAAC;IAC3B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,8CAA8C;IAC9C,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,4FAA4F;IAC5F,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,KAAK,IAAI,CAAC;CAC7C;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,2BAA2B,GAChC,wBAAwB,CA6C1B"}