@mmnto/cli 2.1.0 → 2.2.1

package/dist/commands/session-context-journal-select.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=session-context-journal-select.test.d.ts.map

package/dist/commands/session-context-journal-select.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-context-journal-select.test.d.ts","sourceRoot":"","sources":["../../src/commands/session-context-journal-select.test.ts"],"names":[],"mappings":""}

package/dist/commands/session-context-journal-select.test.js

@@ -0,0 +1,95 @@
+import path from 'node:path';
+import { pathToFileURL } from 'node:url';
+import { beforeAll, describe, expect, it } from 'vitest';
+const repoRoot = path.resolve(__dirname, '..', '..', '..', '..');
+const helperPath = path.join(repoRoot, '.claude', 'hooks', 'lib', 'select-latest-journal.mjs');
+let selectLatestJournal;
+beforeAll(async () => {
+    const mod = (await import(pathToFileURL(helperPath).href));
+    selectLatestJournal = mod.selectLatestJournal;
+});
+/** A stat function over a fixed mtime table; a missing key throws like fs would. */
+function statOf(table) {
+    return (file) => {
+        if (!(file in table)) {
+            throw new Error(`ENOENT: no such file or directory, stat '${file}'`);
+        }
+        return table[file];
+    };
+}
+const T1 = 1_000;
+const T2 = 2_000;
+const T3 = 3_000;
+describe('selectLatestJournal — the recency policy behind the hook', () => {
+    it('a conforming directory (counter order == write order) serves the lexical-newest with no drift', () => {
+        const pick = selectLatestJournal(['claude-0001-a.md', 'claude-0002-b.md', 'claude-0003-c.md'], statOf({
+            'claude-0001-a.md': T1,
+            'claude-0002-b.md': T2,
+            'claude-0003-c.md': T3,
+        }));
+        expect(pick).not.toBeNull();
+        expect(pick.latest).toBe('claude-0003-c.md');
+        expect(pick.lexicalLatest).toBe('claude-0003-c.md');
+        expect(pick.drift).toBe(false);
+        expect(pick.reason).toBe('lexical');
+        expect(pick.statFailures).toEqual([]);
+    });
+    it('a clock-named file that out-sorts a later write is naming drift: the newer write is served and named', () => {
+        // The 2026-09-07 incident shape: `claude-2315-…` (a 23:15 clock stamp) out-sorted the
+        // 01:33 signoff `claude-0132-…`; the pre-fix hook served the stale file silently.
+        const pick = selectLatestJournal(['claude-0001-first.md', 'claude-2315-clock-named.md', 'claude-0100-newest-write.md'], statOf({
+            'claude-0001-first.md': T1,
+            'claude-2315-clock-named.md': T2,
+            'claude-0100-newest-write.md': T3,
+        }));
+        expect(pick.lexicalLatest).toBe('claude-2315-clock-named.md');
+        expect(pick.mtimeLatest).toBe('claude-0100-newest-write.md');
+        expect(pick.latest).toBe('claude-0100-newest-write.md');
+        expect(pick.drift).toBe(true);
+        expect(pick.reason).toBe('newest-write');
+    });
+    it('an mtime tie keeps the lexical pick (no drift reported)', () => {
+        const pick = selectLatestJournal(['claude-0001-a.md', 'claude-0002-b.md'], statOf({
+            'claude-0001-a.md': T2,
+            'claude-0002-b.md': T2,
+        }));
+        expect(pick.latest).toBe('claude-0002-b.md');
+        expect(pick.drift).toBe(false);
+    });
+    it('a sibling whose stat throws is skipped and reported — it never drops the pick', () => {
+        // The GCA / Greptile / CodeRabbit round-1 finding: pre-fix, one dangling entry threw
+        // inside the hook's outer try and the whole journal block was lost.
+        const pick = selectLatestJournal(['claude-0001-a.md', 'claude-0002-dangling.md', 'claude-0003-c.md'], statOf({ 'claude-0001-a.md': T1, 'claude-0003-c.md': T3 }));
+        expect(pick.latest).toBe('claude-0003-c.md');
+        expect(pick.drift).toBe(false);
+        expect(pick.reason).toBe('lexical');
+        expect(pick.statFailures).toHaveLength(1);
+        expect(pick.statFailures[0].file).toBe('claude-0002-dangling.md');
+        expect(pick.statFailures[0].message).toContain('ENOENT');
+    });
+    it('when the lexical-newest itself cannot be stat-ed, the newest readable write is served and the reason says so, not drift', () => {
+        const pick = selectLatestJournal(['claude-0001-a.md', 'claude-0002-b.md', 'claude-0003-gone.md'], statOf({
+            'claude-0001-a.md': T1,
+            'claude-0002-b.md': T2,
+        }));
+        expect(pick.lexicalLatest).toBe('claude-0003-gone.md');
+        expect(pick.latest).toBe('claude-0002-b.md');
+        expect(pick.drift).toBe(false);
+        expect(pick.reason).toBe('lexical-unreadable');
+        expect(pick.statFailures.map((s) => s.file)).toEqual(['claude-0003-gone.md']);
+    });
+    it('when nothing can be stat-ed the lexical pick stands with every failure reported', () => {
+        const pick = selectLatestJournal(['claude-0001-a.md', 'claude-0002-b.md'], statOf({}));
+        expect(pick.latest).toBe('claude-0002-b.md');
+        expect(pick.reason).toBe('lexical');
+        expect(pick.drift).toBe(false);
+        expect(pick.statFailures).toHaveLength(2);
+    });
+    it('filters non-markdown entries and returns null for an empty directory', () => {
+        expect(selectLatestJournal(['legacy', 'notes.txt'], statOf({}))).toBeNull();
+        const pick = selectLatestJournal(['legacy', 'claude-0001-a.md'], statOf({ 'claude-0001-a.md': T1 }));
+        expect(pick.files).toEqual(['claude-0001-a.md']);
+        expect(pick.latest).toBe('claude-0001-a.md');
+    });
+});
+//# sourceMappingURL=session-context-journal-select.test.js.map

package/dist/commands/session-context-journal-select.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-context-journal-select.test.js","sourceRoot":"","sources":["../../src/commands/session-context-journal-select.test.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAwBzD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AACjE,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,2BAA2B,CAAC,CAAC;AAE/F,IAAI,mBAAwC,CAAC;AAE7C,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAExD,CAAC;IACF,mBAAmB,GAAG,GAAG,CAAC,mBAAmB,CAAC;AAChD,CAAC,CAAC,CAAC;AAEH,oFAAoF;AACpF,SAAS,MAAM,CAAC,KAA6B;IAC3C,OAAO,CAAC,IAAI,EAAE,EAAE;QACd,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,4CAA4C,IAAI,GAAG,CAAC,CAAC;QACvE,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAE,CAAC;IACtB,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,EAAE,GAAG,KAAK,CAAC;AACjB,MAAM,EAAE,GAAG,KAAK,CAAC;AACjB,MAAM,EAAE,GAAG,KAAK,CAAC;AAEjB,QAAQ,CAAC,0DAA0D,EAAE,GAAG,EAAE;IACxE,EAAE,CAAC,+FAA+F,EAAE,GAAG,EAAE;QACvG,MAAM,IAAI,GAAG,mBAAmB,CAC9B,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,EAC5D,MAAM,CAAC;YACL,kBAAkB,EAAE,EAAE;YACtB,kBAAkB,EAAE,EAAE;YACtB,kBAAkB,EAAE,EAAE;SACvB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC5B,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QACrD,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,IAAK,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sGAAsG,EAAE,GAAG,EAAE;QAC9G,sFAAsF;QACtF,kFAAkF;QAClF,MAAM,IAAI,GAAG,mBAAmB,CAC9B,CAAC,sBAAsB,EAAE,4BAA4B,EAAE,6BAA6B,CAAC,EACrF,MAAM,CAAC;YACL,sBAAsB,EAAE,EAAE;YAC1B,4BAA4B,EAAE,EAAE;YAChC,6BAA6B,EAAE,EAAE;SAClC,CAAC,CACH,CAAC;QACF,MAAM,CAAC,IAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC/D,MAAM,CAAC,IAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QAC9D,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACzD,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,IAAI,GAAG,mBAAmB,CAC9B,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EACxC,MAAM,CAAC;YACL,kBAAkB,EAAE,EAAE;YACtB,kBAAkB,EAAE,EAAE;SACvB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+EAA+E,EAAE,GAAG,EAAE;QACvF,qFAAqF;QACrF,oEAAoE;QACpE,MAAM,IAAI,GAAG,mBAAmB,CAC9B,CAAC,kBAAkB,EAAE,yBAAyB,EAAE,kBAAkB,CAAC,EACnE,MAAM,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CAC3D,CAAC;QACF,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,IAAK,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QAC3C,MAAM,CAAC,IAAK,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACpE,MAAM,CAAC,IAAK,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,OAAO,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yHAAyH,EAAE,GAAG,EAAE;QACjI,MAAM,IAAI,GAAG,mBAAmB,CAC9B,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,qBAAqB,CAAC,EAC/D,MAAM,CAAC;YACL,kBAAkB,EAAE,EAAE;YACtB,kBAAkB,EAAE,EAAE;SACvB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,IAAK,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QACxD,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;QAChD,MAAM,CAAC,IAAK,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,MAAM,IAAI,GAAG,mBAAmB,CAAC,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QACvF,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC9C,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACrC,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,MAAM,CAAC,IAAK,CAAC,YAAY,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sEAAsE,EAAE,GAAG,EAAE;QAC9E,MAAM,CAAC,mBAAmB,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5E,MAAM,IAAI,GAAG,mBAAmB,CAC9B,CAAC,QAAQ,EAAE,kBAAkB,CAAC,EAC9B,MAAM,CAAC,EAAE,kBAAkB,EAAE,EAAE,EAAE,CAAC,CACnC,CAAC;QACF,MAAM,CAAC,IAAK,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAClD,MAAM,CAAC,IAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/sync-labels-forms.test.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The issue-form ↔ label-canon coupling, and the `-WhatIf` dry run of
+ * `scripts/sync-labels.ps1` (mmnto-ai/totem#2792).
+ *
+ * Two contracts are locked here, both DERIVED from the real script rather than
+ * mirrored (Tenet 20 — the same discipline `parity-label-canon.test.ts` applies
+ * to the canon itself):
+ *
+ *   1. Every `.github/ISSUE_TEMPLATE/*.yml` form parses and applies exactly its
+ *      own `type: <basename>` label, a name the script defines. A space-less
+ *      `type:bug` would leave the canon's type label missing on every issue the
+ *      form creates (whether GitHub drops the unknown label or mints a stray
+ *      one); here it fails the suite instead.
+ *   2. Every form's `Tier` and `Scope` dropdowns offer exactly the canon's
+ *      `tier-*` names and its `scope: ` names with the namespace stripped. Both
+ *      option sets are computed from the parsed script — never hand-listed — so
+ *      a new scope in the script is a failing test until the forms carry it.
+ *      The scope derivation reads ONLY names starting with `scope: `, so the
+ *      `disposition: ` namespace can never leak into the dropdown.
+ *
+ * The last two cases spawn `pwsh` against the real script. The first proves the
+ * `-WhatIf` shadow prints every `gh` call and executes none (a stub `gh` sits on
+ * PATH and must stay untouched); the second proves the shadow does NOT leak into
+ * a normal run — the same stub, no `-WhatIf`, must receive the whole canon. Both
+ * run against `-Repo example/stub`; neither can reach GitHub, because `gh` on the
+ * child's PATH is a log-appending stub.
+ *
+ * Every case skips when the repo-root files are absent (a packaged install
+ * carries neither the script nor `.github/`), and the spawning ones skip when
+ * `pwsh` is not on PATH.
+ */
+export {};
+//# sourceMappingURL=sync-labels-forms.test.d.ts.map

package/dist/commands/sync-labels-forms.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-labels-forms.test.d.ts","sourceRoot":"","sources":["../../src/commands/sync-labels-forms.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG"}

package/dist/commands/sync-labels-forms.test.js

@@ -0,0 +1,325 @@
+/**
+ * The issue-form ↔ label-canon coupling, and the `-WhatIf` dry run of
+ * `scripts/sync-labels.ps1` (mmnto-ai/totem#2792).
+ *
+ * Two contracts are locked here, both DERIVED from the real script rather than
+ * mirrored (Tenet 20 — the same discipline `parity-label-canon.test.ts` applies
+ * to the canon itself):
+ *
+ *   1. Every `.github/ISSUE_TEMPLATE/*.yml` form parses and applies exactly its
+ *      own `type: <basename>` label, a name the script defines. A space-less
+ *      `type:bug` would leave the canon's type label missing on every issue the
+ *      form creates (whether GitHub drops the unknown label or mints a stray
+ *      one); here it fails the suite instead.
+ *   2. Every form's `Tier` and `Scope` dropdowns offer exactly the canon's
+ *      `tier-*` names and its `scope: ` names with the namespace stripped. Both
+ *      option sets are computed from the parsed script — never hand-listed — so
+ *      a new scope in the script is a failing test until the forms carry it.
+ *      The scope derivation reads ONLY names starting with `scope: `, so the
+ *      `disposition: ` namespace can never leak into the dropdown.
+ *
+ * The last two cases spawn `pwsh` against the real script. The first proves the
+ * `-WhatIf` shadow prints every `gh` call and executes none (a stub `gh` sits on
+ * PATH and must stay untouched); the second proves the shadow does NOT leak into
+ * a normal run — the same stub, no `-WhatIf`, must receive the whole canon. Both
+ * run against `-Repo example/stub`; neither can reach GitHub, because `gh` on the
+ * child's PATH is a log-appending stub.
+ *
+ * Every case skips when the repo-root files are absent (a packaged install
+ * carries neither the script nor `.github/`), and the spawning ones skip when
+ * `pwsh` is not on PATH.
+ */
+import { spawnSync } from 'node:child_process';
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { describe, expect, it } from 'vitest';
+import { parse as parseYaml } from 'yaml';
+import { parseLabelCanon } from '@mmnto/totem';
+/** packages/cli/src/commands → the repo root. */
+const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..', '..', '..', '..');
+const SCRIPT_PATH = path.join(ROOT, 'scripts', 'sync-labels.ps1');
+const TEMPLATE_DIR = path.join(ROOT, '.github', 'ISSUE_TEMPLATE');
+const CONFIG_PATH = path.join(TEMPLATE_DIR, 'config.yml');
+const ONBOARDING_PATH = path.join(TEMPLATE_DIR, 'onboarding.md');
+const REPO_FILES_PRESENT = fs.existsSync(SCRIPT_PATH) && fs.existsSync(TEMPLATE_DIR);
+/** `pwsh` on PATH and runnable — absent on a minimal container, present on every GitHub runner. */
+function pwshRunnable() {
+    const probe = spawnSync('pwsh', ['-NoProfile', '-Command', 'exit 0'], { encoding: 'utf8' });
+    return probe.error === undefined && probe.status === 0;
+}
+const PWSH_PRESENT = REPO_FILES_PRESENT && pwshRunnable();
+/** The form files, `config.yml` excluded (it is not a form). */
+function formFiles() {
+    return fs
+        .readdirSync(TEMPLATE_DIR)
+        .filter((file) => file.endsWith('.yml') && file !== 'config.yml')
+        .sort();
+}
+function readForm(file) {
+    return parseYaml(fs.readFileSync(path.join(TEMPLATE_DIR, file), 'utf8'));
+}
+/** The canon of record, parsed from the real script exactly as the sensor parses it. */
+function realCanon() {
+    return parseLabelCanon(fs.readFileSync(SCRIPT_PATH, 'utf8'));
+}
+/** The `tier-*` canonical names — the Tier dropdown's option set, derived. */
+function tierOptionsFromCanon(names) {
+    return names.filter((name) => name.startsWith('tier-')).sort();
+}
+/**
+ * The `scope: ` canonical names with the namespace stripped — the Scope
+ * dropdown's option set, derived. The `scope: ` prefix is the ONLY source, so a
+ * `disposition: ` (or any other namespace) entry can never enter this set.
+ */
+function scopeOptionsFromCanon(names) {
+    const prefix = 'scope: ';
+    return names
+        .filter((name) => name.startsWith(prefix))
+        .map((name) => name.slice(prefix.length))
+        .sort();
+}
+/** The one dropdown in `form.body` whose rendered label is `label`. */
+function dropdownByLabel(form, label) {
+    return (form.body ?? []).find((field) => field.type === 'dropdown' && field.attributes?.label === label);
+}
+// ─── Forms ↔ canon ───────────────────────────────────────
+describe.skipIf(!REPO_FILES_PRESENT)('issue forms', () => {
+    it('ships one form per canonical type, each parsing as YAML with a name and a description', () => {
+        const files = formFiles();
+        expect(files).toEqual([
+            'bug.yml',
+            'chore.yml',
+            'docs.yml',
+            'epic.yml',
+            'feature.yml',
+            'security.yml',
+        ]);
+        for (const file of files) {
+            const form = readForm(file);
+            expect(typeof form.name, file).toBe('string');
+            expect(typeof form.description, file).toBe('string');
+            expect(Array.isArray(form.body), file).toBe(true);
+            // Titles stay free-form — no `title:` prefix is imposed on the author.
+            expect(Object.keys(form), file).not.toContain('title');
+        }
+    });
+    it('applies exactly its own type: label, one the script defines (the space in `type: bug` is load-bearing)', () => {
+        const canonNames = new Set(realCanon().labels.map((label) => label.name));
+        // The canon must be non-empty, or this assertion would pass vacuously the
+        // moment the script's grammar changed (the readers' own empty-canon refusal).
+        expect(canonNames.size).toBeGreaterThan(0);
+        for (const file of formFiles()) {
+            const form = readForm(file);
+            // Charter § 4c(ii): one template per `type:` value, applying THAT label —
+            // derived from the filename, so `docs.yml` cannot ship `type: bug`, an
+            // empty list, or two type labels and still pass.
+            const expected = `type: ${file.replace(/\.yml$/, '')}`;
+            expect(form.labels, file).toEqual([expected]);
+            expect(canonNames.has(expected), `${file} applies ${expected}`).toBe(true);
+        }
+    });
+    it("carries a required Tier dropdown whose options are the canon's tier-* names", () => {
+        const expected = tierOptionsFromCanon(realCanon().labels.map((label) => label.name));
+        expect(expected.length).toBeGreaterThan(0);
+        for (const file of formFiles()) {
+            const form = readForm(file);
+            const tier = dropdownByLabel(form, 'Tier');
+            expect(tier, `${file} has a Tier dropdown`).toBeDefined();
+            // The id and the label are BOTH a contract with the rung-1 body sensor.
+            expect(tier?.id, file).toBe('tier');
+            expect(tier?.validations?.required, file).toBe(true);
+            expect([...(tier?.attributes?.options ?? [])].sort(), file).toEqual(expected);
+        }
+    });
+    it("carries a required multi-select Scope dropdown whose options are the canon's scope: names, namespace stripped", () => {
+        const expected = scopeOptionsFromCanon(realCanon().labels.map((label) => label.name));
+        expect(expected.length).toBeGreaterThan(0);
+        // Derived from `scope: ` alone — never "every label that is not a tier".
+        expect(expected.some((option) => option.includes('disposition'))).toBe(false);
+        for (const file of formFiles()) {
+            const form = readForm(file);
+            const scope = dropdownByLabel(form, 'Scope');
+            expect(scope, `${file} has a Scope dropdown`).toBeDefined();
+            expect(scope?.id, file).toBe('scope');
+            expect(scope?.attributes?.multiple, file).toBe(true);
+            expect(scope?.validations?.required, file).toBe(true);
+            expect([...(scope?.attributes?.options ?? [])].sort(), file).toEqual(expected);
+        }
+    });
+    it('renders every field under a distinct heading (the body sensor keys on heading text, never on ids)', () => {
+        // The epic form once carried a `Scope` textarea beside the `Scope` dropdown:
+        // two `### Scope` headings in one rendered body, and a heading-keyed parser
+        // cannot tell them apart. Labels are the contract; ids never render.
+        for (const file of formFiles()) {
+            const form = readForm(file);
+            const labels = (form.body ?? [])
+                .map((field) => field.attributes?.label)
+                .filter((label) => typeof label === 'string');
+            expect(new Set(labels).size, `${file} field labels: ${labels.join(' | ')}`).toBe(labels.length);
+        }
+    });
+    it('routes an exploitable vulnerability out of the public security form', () => {
+        const form = readForm('security.yml');
+        const first = (form.body ?? [])[0];
+        expect(first?.type).toBe('markdown');
+        expect(first?.attributes?.value ?? '').toMatch(/advisor/i);
+    });
+    it('disables blank issues and leaves the onboarding template in place', () => {
+        const config = parseYaml(fs.readFileSync(CONFIG_PATH, 'utf8'));
+        expect(config.blank_issues_enabled).toBe(false);
+        expect(fs.existsSync(ONBOARDING_PATH)).toBe(true);
+        // Untouched by mmnto-ai/totem#2792: still the front-matter markdown template it was.
+        expect(fs.readFileSync(ONBOARDING_PATH, 'utf8').startsWith('---')).toBe(true);
+    });
+});
+// ─── The pwsh dry run ────────────────────────────────────
+/**
+ * A temp dir holding a `gh` stub that appends its whole argument line to a log
+ * and exits 0. Prepended to the child's PATH, it satisfies the script's `gh`
+ * presence check and its `gh auth status` preflight while making a real GitHub
+ * call impossible.
+ */
+function makeGhStub() {
+    const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-gh-stub-'));
+    const logPath = path.join(dir, 'gh-calls.log');
+    // With TOTEM_GH_STUB_FAIL set in the child's environment the stub still logs
+    // every call but exits 1 on `label edit` — the failure path of the script's
+    // mutation tally (Greptile P1 on mmnto-ai/totem#2827).
+    if (process.platform === 'win32') {
+        fs.writeFileSync(path.join(dir, 'gh.cmd'), [
+            '@echo off',
+            `>>"${logPath}" echo %*`,
+            'if "%TOTEM_GH_STUB_FAIL%"=="" exit /b 0',
+            'echo %* | findstr /C:"label edit" >nul',
+            'if %errorlevel%==0 exit /b 1',
+            'exit /b 0',
+            '',
+        ].join('\r\n'), 'utf8');
+    }
+    else {
+        const stub = path.join(dir, 'gh');
+        fs.writeFileSync(stub, [
+            '#!/bin/sh',
+            `printf '%s\\n' "$*" >> "${logPath}"`,
+            'if [ -n "$TOTEM_GH_STUB_FAIL" ]; then',
+            '  case "$*" in *"label edit"*) exit 1 ;; esac',
+            'fi',
+            'exit 0',
+            '',
+        ].join('\n'), { encoding: 'utf8', mode: 0o755 });
+        fs.chmodSync(stub, 0o755);
+    }
+    return { dir, logPath };
+}
+/** `process.env` with `dir` prepended to PATH, whatever case the platform spells it. */
+function envWithPathPrefix(dir) {
+    const env = {};
+    let currentPath = '';
+    for (const [key, value] of Object.entries(process.env)) {
+        if (key.toUpperCase() === 'PATH') {
+            currentPath = value ?? '';
+            continue;
+        }
+        env[key] = value;
+    }
+    env.PATH = dir + path.delimiter + currentPath;
+    return env;
+}
+function runScript(args, stubDir, extraEnv = {}) {
+    return spawnSync('pwsh', ['-NoProfile', '-File', SCRIPT_PATH, ...args], {
+        cwd: ROOT,
+        encoding: 'utf8',
+        env: { ...envWithPathPrefix(stubDir), ...extraEnv },
+    });
+}
+describe.skipIf(!PWSH_PRESENT)('scripts/sync-labels.ps1 dry run', () => {
+    it('-WhatIf prints every gh call and executes none', () => {
+        const stub = makeGhStub();
+        try {
+            const run = runScript(['-WhatIf', '-Repo', 'example/stub'], stub.dir);
+            expect(run.error).toBeUndefined();
+            expect(run.status, run.stderr).toBe(0);
+            const stdout = run.stdout;
+            expect(stdout).toContain('[WhatIf] gh label edit "disposition: done"');
+            const labelLines = stdout
+                .split(/\r?\n/)
+                .filter((line) => line.startsWith('[WhatIf] gh label'));
+            // One line per would-be call, derived from the canon rather than pinned:
+            // an `edit` per canonical label, a `create` per disposition label, and a
+            // `delete` per Merge-Label retirement.
+            const canon = realCanon();
+            const creates = canon.labels.filter((label) => label.name.startsWith('disposition: ')).length;
+            expect(labelLines.length).toBe(canon.labels.length + creates + canon.merges.length);
+            // The shadow replaces the executable, so the stub on PATH never ran: no
+            // log file at all. This is the "-WhatIf touches nothing" invariant.
+            expect(fs.existsSync(stub.logPath)).toBe(false);
+        }
+        finally {
+            fs.rmSync(stub.dir, { recursive: true, force: true });
+        }
+    });
+    it('a normal run reaches gh for the whole canon — the -WhatIf shadow never leaks', () => {
+        const stub = makeGhStub();
+        try {
+            const run = runScript(['-Repo', 'example/stub'], stub.dir);
+            expect(run.error).toBeUndefined();
+            expect(run.status, run.stderr).toBe(0);
+            expect(run.stdout).not.toContain('[WhatIf]');
+            expect(fs.existsSync(stub.logPath), 'the stub gh was invoked').toBe(true);
+            const calls = fs
+                .readFileSync(stub.logPath, 'utf8')
+                .split(/\r?\n/)
+                .map((line) => line.trim())
+                .filter((line) => line.length > 0);
+            // The preflight ran (the unauthenticated silent no-op is now a hard stop).
+            expect(calls.some((call) => call.startsWith('auth status'))).toBe(true);
+            // Every canonical label was edited, by name, exactly once — the set and
+            // the count both derive from the real script (CodeRabbit on mmnto-ai/totem#2827).
+            const edited = calls
+                .map((call) => /^label edit "?(.+?)"? --color /.exec(call)?.[1])
+                .filter((name) => name !== undefined)
+                .sort();
+            const expectedEdited = realCanon()
+                .labels.map((label) => label.name)
+                .sort();
+            expect(edited).toEqual(expectedEdited);
+            const created = calls
+                .map((call) => /^label create "?(disposition: [a-z-]+)"?/.exec(call)?.[1])
+                .filter((name) => name !== undefined)
+                .sort();
+            const expectedCreated = realCanon()
+                .labels.map((label) => label.name)
+                .filter((name) => name.startsWith('disposition: '))
+                .sort();
+            expect(expectedCreated).toHaveLength(6);
+            expect(created).toEqual(expectedCreated);
+        }
+        finally {
+            fs.rmSync(stub.dir, { recursive: true, force: true });
+        }
+    });
+    it('a failed label edit fails the run — mutation errors never reach "sync complete"', () => {
+        // Authenticated but without write access, or an API failure: the literal
+        // lines suppress stderr by design, so only the exit CODE can carry the
+        // failure. The stub exits 1 on every `label edit`; the tally must name each
+        // canonical label and the script must exit non-zero (Greptile P1).
+        const stub = makeGhStub();
+        try {
+            const run = runScript(['-Repo', 'example/stub'], stub.dir, { TOTEM_GH_STUB_FAIL: '1' });
+            expect(run.error).toBeUndefined();
+            expect(run.status, run.stdout).toBe(1);
+            expect(run.stdout).toContain('label mutation(s) failed');
+            expect(run.stdout).not.toContain('sync complete');
+            const tallied = run.stdout
+                .split(/\r?\n/)
+                .filter((line) => line.includes('[Error] gh label edit')).length;
+            expect(tallied).toBe(realCanon().labels.length);
+        }
+        finally {
+            fs.rmSync(stub.dir, { recursive: true, force: true });
+        }
+    });
+});
+//# sourceMappingURL=sync-labels-forms.test.js.map

package/dist/commands/sync-labels-forms.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-labels-forms.test.js","sourceRoot":"","sources":["../../src/commands/sync-labels-forms.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,KAAK,IAAI,SAAS,EAAE,MAAM,MAAM,CAAC;AAE1C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,iDAAiD;AACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAChG,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAClE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;AAClE,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;AAC1D,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;AAEjE,MAAM,kBAAkB,GAAG,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAErF,mGAAmG;AACnG,SAAS,YAAY;IACnB,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5F,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;AACzD,CAAC;AACD,MAAM,YAAY,GAAG,kBAAkB,IAAI,YAAY,EAAE,CAAC;AAuB1D,gEAAgE;AAChE,SAAS,SAAS;IAChB,OAAO,EAAE;SACN,WAAW,CAAC,YAAY,CAAC;SACzB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,KAAK,YAAY,CAAC;SAChE,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAc,CAAC;AACxF,CAAC;AAED,wFAAwF;AACxF,SAAS,SAAS;IAChB,OAAO,eAAe,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,8EAA8E;AAC9E,SAAS,oBAAoB,CAAC,KAAwB;IACpD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,SAAS,qBAAqB,CAAC,KAAwB;IACrD,MAAM,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,KAAK;SACT,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;SACxC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,IAAe,EAAE,KAAa;IACrD,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,CAC3B,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,KAAK,KAAK,CAC1E,CAAC;AACJ,CAAC;AAED,4DAA4D;AAE5D,QAAQ,CAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,aAAa,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,uFAAuF,EAAE,GAAG,EAAE;QAC/F,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC;YACpB,SAAS;YACT,WAAW;YACX,UAAU;YACV,UAAU;YACV,aAAa;YACb,cAAc;SACf,CAAC,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC9C,MAAM,CAAC,OAAO,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClD,uEAAuE;YACvE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAA+B,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wGAAwG,EAAE,GAAG,EAAE;QAChH,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1E,0EAA0E;QAC1E,8EAA8E;QAC9E,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,0EAA0E;YAC1E,uEAAuE;YACvE,iDAAiD;YACjD,MAAM,QAAQ,GAAG,SAAS,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,CAAC;YACvD,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9C,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,YAAY,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,QAAQ,GAAG,oBAAoB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3C,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC3C,MAAM,CAAC,IAAI,EAAE,GAAG,IAAI,sBAAsB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC1D,wEAAwE;YACxE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YACpC,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAChF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+GAA+G,EAAE,GAAG,EAAE;QACvH,MAAM,QAAQ,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACtF,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;QAC3C,yEAAyE;QACzE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9E,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,uBAAuB,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5D,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrD,MAAM,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtD,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mGAAmG,EAAE,GAAG,EAAE;QAC3G,6EAA6E;QAC7E,4EAA4E;QAC5E,qEAAqE;QACrE,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;iBAC7B,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC;iBACvC,MAAM,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC;YACjE,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,GAAG,IAAI,kBAAkB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAC9E,MAAM,CAAC,MAAM,CACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,IAAI,GAAG,QAAQ,CAAC,cAAc,CAAC,CAAC;QACtC,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACrC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,MAAM,GAAG,SAAS,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAE5D,CAAC;QACF,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChD,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClD,qFAAqF;QACrF,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,4DAA4D;AAE5D;;;;;GAKG;AACH,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC/C,6EAA6E;IAC7E,4EAA4E;IAC5E,uDAAuD;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,EAAE,CAAC,aAAa,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EACxB;YACE,WAAW;YACX,MAAM,OAAO,WAAW;YACxB,yCAAyC;YACzC,wCAAwC;YACxC,8BAA8B;YAC9B,WAAW;YACX,EAAE;SACH,CAAC,IAAI,CAAC,MAAM,CAAC,EACd,MAAM,CACP,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAClC,EAAE,CAAC,aAAa,CACd,IAAI,EACJ;YACE,WAAW;YACX,2BAA2B,OAAO,GAAG;YACrC,uCAAuC;YACvC,+CAA+C;YAC/C,IAAI;YACJ,QAAQ;YACR,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,EACZ,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAClC,CAAC;QACF,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC1B,CAAC;AAED,wFAAwF;AACxF,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,MAAM,EAAE,CAAC;YACjC,WAAW,GAAG,KAAK,IAAI,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,GAAG,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC;IAC9C,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,IAAc,EAAE,OAAe,EAAE,WAA8B,EAAE;IAClF,OAAO,SAAS,CAAC,MAAM,EAAE,CAAC,YAAY,EAAE,OAAO,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,EAAE;QACtE,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,MAAM;QAChB,GAAG,EAAE,EAAE,GAAG,iBAAiB,CAAC,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE;KACpD,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,iCAAiC,EAAE,GAAG,EAAE;IACrE,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACtE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;YAC1B,MAAM,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,4CAA4C,CAAC,CAAC;YACvE,MAAM,UAAU,GAAG,MAAM;iBACtB,KAAK,CAAC,OAAO,CAAC;iBACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC,CAAC;YAC1D,yEAAyE;YACzE,yEAAyE;YACzE,uCAAuC;YACvC,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;YAC1B,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC;YAC9F,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YACpF,wEAAwE;YACxE,oEAAoE;YACpE,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3D,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YAC7C,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,yBAAyB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1E,MAAM,KAAK,GAAG,EAAE;iBACb,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;iBAClC,KAAK,CAAC,OAAO,CAAC;iBACd,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;iBAC1B,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YACrC,2EAA2E;YAC3E,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxE,wEAAwE;YACxE,kFAAkF;YAClF,MAAM,MAAM,GAAG,KAAK;iBACjB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;iBAC/D,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;iBACpD,IAAI,EAAE,CAAC;YACV,MAAM,cAAc,GAAG,SAAS,EAAE;iBAC/B,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBACjC,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,KAAK;iBAClB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;iBACzE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;iBACpD,IAAI,EAAE,CAAC;YACV,MAAM,eAAe,GAAG,SAAS,EAAE;iBAChC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;iBACjC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;iBAClD,IAAI,EAAE,CAAC;YACV,MAAM,CAAC,eAAe,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YACxC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3C,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iFAAiF,EAAE,GAAG,EAAE;QACzF,yEAAyE;QACzE,uEAAuE;QACvE,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,SAAS,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,CAAC;YACxF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,0BAA0B,CAAC,CAAC;YACzD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM;iBACvB,KAAK,CAAC,OAAO,CAAC;iBACd,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAAC,CAAC,MAAM,CAAC;YACnE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC;gBAAS,CAAC;YACT,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.js

@@ -1429,8 +1429,8 @@ gateCmd
     .command('check')
     .description('Evaluate a gate predicate; emit a GateVerdict (allow|warn|deny) as JSON to stdout')
     .requiredOption('--event <type>', 'Gate event type (e.g. freeze-check)')
-    .requiredOption('--payload <json>', 'Gate-specific JSON payload')
-    .addHelpText('after', `\nExample:\n  $ totem gate check --event freeze-check --payload '{"subsystem":"rule-compilation"}'\n`)
+    .requiredOption('--payload <json>', 'Gate-specific JSON payload, or - to read it from stdin')
+    .addHelpText('after', `\nExamples:\n  $ totem gate check --event freeze-check --payload '{"subsystem":"rule-compilation"}'\n  $ echo '{"tool":"Bash","command":"git status","platform":"win32"}' | totem gate check --event transport-shield --payload -\n`)
     .action(async (opts) => {
     try {
         const { gateCheckCommand } = await import('./commands/gate.js');