@mmnto/totem 1.18.3 → 1.20.0

package/dist/recurrence-stats.d.ts

@@ -63,7 +63,7 @@ export declare const RecurrencePatternSchema: z.ZodObject<{
     paths: string[];
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     occurrences: number;
     prs: string[];
     sampleBodies: string[];
@@ -74,7 +74,7 @@ export declare const RecurrencePatternSchema: z.ZodObject<{
     paths: string[];
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     occurrences: number;
     prs: string[];
     sampleBodies: string[];
@@ -121,7 +121,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];
@@ -132,7 +132,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];
@@ -166,7 +166,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];
@@ -177,7 +177,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];
@@ -191,7 +191,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];
@@ -207,7 +207,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];
@@ -221,7 +221,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];
@@ -237,7 +237,7 @@ export declare const RecurrenceStatsSchema: z.ZodObject<{
         paths: string[];
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif" | "mixed";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         occurrences: number;
         prs: string[];
         sampleBodies: string[];

package/dist/retrospect.d.ts

@@ -86,7 +86,7 @@ export declare const RetrospectFindingSchema: z.ZodDiscriminatedUnion<"classific
     file: string;
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     coveredByRule: boolean;
     roundNumber: number;
     bodyExcerpt: string;
@@ -98,7 +98,7 @@ export declare const RetrospectFindingSchema: z.ZodDiscriminatedUnion<"classific
     file: string;
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     coveredByRule: boolean;
     roundNumber: number;
     bodyExcerpt: string;
@@ -131,7 +131,7 @@ export declare const RetrospectFindingSchema: z.ZodDiscriminatedUnion<"classific
     file: string;
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     coveredByRule: boolean;
     roundNumber: number;
     bodyExcerpt: string;
@@ -142,7 +142,7 @@ export declare const RetrospectFindingSchema: z.ZodDiscriminatedUnion<"classific
     file: string;
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     coveredByRule: boolean;
     roundNumber: number;
     bodyExcerpt: string;
@@ -174,7 +174,7 @@ export declare const RetrospectFindingSchema: z.ZodDiscriminatedUnion<"classific
     file: string;
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     coveredByRule: boolean;
     roundNumber: number;
     bodyExcerpt: string;
@@ -185,7 +185,7 @@ export declare const RetrospectFindingSchema: z.ZodDiscriminatedUnion<"classific
     file: string;
     signature: string;
     tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-    severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+    severityBucket: "high" | "medium" | "critical" | "low" | "nit";
     coveredByRule: boolean;
     roundNumber: number;
     bodyExcerpt: string;
@@ -277,7 +277,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -289,7 +289,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -322,7 +322,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -333,7 +333,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -365,7 +365,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -376,7 +376,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -412,7 +412,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -424,7 +424,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -457,7 +457,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -468,7 +468,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -500,7 +500,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -511,7 +511,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -547,7 +547,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -559,7 +559,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -592,7 +592,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -603,7 +603,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -635,7 +635,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -646,7 +646,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -664,7 +664,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -676,7 +676,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -687,7 +687,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -718,7 +718,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -730,7 +730,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -741,7 +741,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -753,7 +753,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -765,7 +765,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -776,7 +776,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -792,7 +792,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -804,7 +804,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -815,7 +815,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -846,7 +846,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -858,7 +858,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -869,7 +869,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -881,7 +881,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -893,7 +893,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;
@@ -904,7 +904,7 @@ export declare const RetrospectReportSchema: z.ZodObject<{
         file: string;
         signature: string;
         tool: "unknown" | "override" | "coderabbit" | "gca" | "sarif";
-        severityBucket: "critical" | "high" | "medium" | "low" | "nit";
+        severityBucket: "high" | "medium" | "critical" | "low" | "nit";
         coveredByRule: boolean;
         roundNumber: number;
         bodyExcerpt: string;

package/dist/stage4-verifier.d.ts

@@ -0,0 +1,133 @@
+/**
+ * ADR-091 Stage 4 Verify-Against-Codebase verifier (mmnto-ai/totem#1682).
+ *
+ * Runs a compiled rule deterministically (zero LLM) against the consumer's
+ * existing codebase before promoting it to Active status. Catches the class
+ * of false positive that Layer 3 (ADR-088) cannot — Layer 3 verifies the
+ * pattern matches the lesson's authored `badExample` (internal consistency);
+ * Stage 4 verifies the pattern doesn't accidentally fire on legitimate code
+ * (global false-positive safety).
+ *
+ * Four outcomes per ADR-091 §"Stage 4: Verify-Against-Codebase":
+ *
+ *   - **No matches** (`outcome: 'no-matches'`) — the verifier ran, found zero
+ *     hits in the codebase. Caller sets `status: 'untested-against-codebase'`;
+ *     subsequent compile cycles in a populated repo can re-run Stage 4 and
+ *     promote.
+ *   - **Out-of-scope baseline match** (`outcome: 'out-of-scope'`) — the rule
+ *     fired on at least one file in the verification baseline (test files,
+ *     fixture directories, or files outside the rule's `fileGlobs` scope).
+ *     The pattern is over-broad. Caller archives the rule with
+ *     `reasonCode: 'stage4-out-of-scope-match'` and the offending paths.
+ *   - **In-scope `badExample`-shape match** (`outcome: 'in-scope-bad-example'`)
+ *     — the rule fired only on in-scope files AND every in-scope match line is
+ *     structurally equivalent to the rule's `badExample`. The rule fires on
+ *     real code in the exact authored shape. Caller sets `status: 'active'`
+ *     with `confidence: 'high'`.
+ *   - **Candidate Debt** (`outcome: 'candidate-debt'`) — the rule fired only
+ *     on in-scope files but at least one match line differs from the
+ *     `badExample` shape. The rule may be catching real debt, or producing
+ *     false positives the LLM-generated pattern overshoots into. Caller
+ *     accepts as `status: 'active'` and forces `severity: 'warning'` so it
+ *     never breaks CI on first run; `totem doctor` (mmnto-ai/totem#1685)
+ *     surfaces the candidate-debt sites for human confirmation.
+ *
+ * Bootstrap modes: T1 ships local-compile fully (the verifier runs against
+ * the consumer's working tree before `totem lesson compile` serializes the
+ * rule). Pack install→lint promotion lands in T3 (mmnto-ai/totem#1684).
+ * Consumer baseline overrides land in T2 (mmnto-ai/totem#1683). Perf
+ * optimizations (single-pass, file-tree caching, streaming short-circuit)
+ * land in T5 (mmnto-ai/totem#1686). T1 walks per-rule, no caching.
+ *
+ * Architecture: callback-based filesystem. The verifier accepts `listFiles`
+ * + `readFile` callbacks instead of touching `fs` directly so core stays
+ * orchestration-only. CLI implementations back the callbacks with `git
+ * ls-files` and `fs.readFile`; tests stub them with synthetic file maps.
+ */
+import type { CompiledRule } from './compiler-schema.js';
+import type { RuleEngineContext } from './rule-engine.js';
+export interface Stage4Baseline {
+    /**
+     * Glob patterns the rule MUST NOT fire on. Files matching any of these
+     * globs are part of the verification baseline — a match on one of them
+     * is evidence the pattern is over-broad. T1 ships with `DEFAULT_BASELINE_GLOBS`
+     * (test + fixture patterns); T2 (mmnto-ai/totem#1683) layers consumer
+     * `extend` / `exclude` overrides via `review.stage4Baseline` config.
+     *
+     * Files outside the rule's `fileGlobs` scope are implicitly in the baseline
+     * — no need to list them here. The verifier computes the implicit case
+     * from `rule.fileGlobs` at evaluation time.
+     */
+    readonly excludeFileGlobs: readonly string[];
+}
+export type Stage4Outcome = 'no-matches' | 'out-of-scope' | 'in-scope-bad-example' | 'candidate-debt';
+export interface Stage4VerificationResult {
+    outcome: Stage4Outcome;
+    /** Repo-relative paths where the rule fired AND the file is in the baseline. */
+    readonly baselineMatches: readonly string[];
+    /** Repo-relative paths where the rule fired AND the file is in scope. */
+    readonly inScopeMatches: readonly string[];
+    /**
+     * Match lines from in-scope hits that did NOT match the `badExample`
+     * shape (after trimming). Empty when `outcome === 'in-scope-bad-example'`.
+     * Populated when `outcome === 'candidate-debt'` to feed the `totem doctor`
+     * UX surface in T4 (mmnto-ai/totem#1685).
+     */
+    readonly candidateDebtLines: readonly string[];
+}
+export interface Stage4VerifierDeps {
+    /**
+     * Returns repo-relative paths of all files to verify against. CLI
+     * implementation calls `git ls-files --recurse-submodules`. Tests pass
+     * a synthetic list. Empty array is valid input — the verifier returns
+     * `outcome: 'no-matches'` (the zero-files case is indistinguishable from
+     * the no-hits case at the API level; both produce `untested-against-codebase`
+     * status downstream).
+     */
+    listFiles: () => Promise<readonly string[]>;
+    /**
+     * Returns the file content as a string. CLI implementation reads from
+     * the working tree (`fs.readFile`). MUST throw if the file is missing —
+     * Stage 4 is a fail-loud contract per Tenet 4.
+     */
+    readFile: (file: string) => Promise<string>;
+    /**
+     * Optional working directory absolute path. Required when the verifier
+     * encounters ast / ast-grep rules — `applyAstRulesToAdditions` resolves
+     * file content against this root. Regex-only verification does not need
+     * it. T1 callers always pass the repo root.
+     */
+    workingDirectory?: string;
+    /** Optional rule-engine context. Defaults to a no-op logger. */
+    ruleCtx?: RuleEngineContext;
+}
+/**
+ * Glob shapes the test-contract scope classifier (mmnto-ai/totem#1626 /
+ * mmnto-ai/totem#1652) promotes-to-test-inclusive when emitting LLM scope.
+ * Stage 4 mirrors them as the default baseline so any rule that fires on a
+ * test or fixture file is treated as out-of-scope by default. T2
+ * (mmnto-ai/totem#1683) lets consumers `exclude` from this list when their
+ * project legitimately treats `tests/` as production.
+ */
+export declare const DEFAULT_BASELINE_GLOBS: readonly string[];
+export declare function getDefaultBaseline(): Stage4Baseline;
+/**
+ * Run Stage 4 verification for a single compiled rule against the consumer's
+ * codebase. Caller decides what to do with the returned outcome:
+ *
+ *   - `'no-matches'`           → set rule.status = 'untested-against-codebase'
+ *   - `'out-of-scope'`         → archive rule with reasonCode 'stage4-out-of-scope-match'
+ *   - `'in-scope-bad-example'` → set rule.status = 'active', confidence = 'high'
+ *   - `'candidate-debt'`       → set rule.status = 'active', force severity = 'warning'
+ *
+ * The verifier itself does NOT mutate the rule. Mutation happens at the
+ * compileLesson integration site so the trace event and lifecycle field
+ * preservation remain centralized.
+ *
+ * For Pipeline 1 manual rules, the integration site bypasses Stage 4
+ * entirely — those rules are human-authored and Stage 4 is a safety net
+ * for LLM-generated patterns. The verifier itself is engine-agnostic and
+ * will run on any rule it's handed.
+ */
+export declare function verifyAgainstCodebase(rule: CompiledRule, baseline: Stage4Baseline, deps: Stage4VerifierDeps): Promise<Stage4VerificationResult>;
+//# sourceMappingURL=stage4-verifier.d.ts.map

package/dist/stage4-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stage4-verifier.d.ts","sourceRoot":"","sources":["../src/stage4-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6CG;AAEH,OAAO,KAAK,EAAE,YAAY,EAA2B,MAAM,sBAAsB,CAAC;AAClF,OAAO,KAAK,EAAc,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAKtE,MAAM,WAAW,cAAc;IAC7B;;;;;;;;;;OAUG;IACH,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,MAAM,MAAM,aAAa,GACrB,YAAY,GACZ,cAAc,GACd,sBAAsB,GACtB,gBAAgB,CAAC;AAErB,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,aAAa,CAAC;IACvB,gFAAgF;IAChF,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,kBAAkB;IACjC;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;IAC5C;;;;OAIG;IACH,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,gEAAgE;IAChE,OAAO,CAAC,EAAE,iBAAiB,CAAC;CAC7B;AAID;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,EAAE,SAAS,MAAM,EAOnD,CAAC;AAEF,wBAAgB,kBAAkB,IAAI,cAAc,CAMnD;AAsMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,YAAY,EAClB,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,wBAAwB,CAAC,CA2FnC"}