@mmnto/totem 1.64.2 → 1.66.0

package/dist/spine/windtunnel-lock.test.js

@@ -0,0 +1,214 @@
+import { describe, expect, it } from 'vitest';
+import { firingLabelId, WindtunnelLockSchema } from './windtunnel-lock.js';
+// ─── Helpers ─────────────────────────────────────────
+const VALID_SHA = '0'.repeat(40);
+const VALID_SHA_2 = '1'.repeat(40);
+const VALID_SHA_3 = 'a'.repeat(40);
+function validLock(overrides) {
+    return {
+        schema: 'windtunnel.lock.v1',
+        canonicalPath: '.totem/spine/gate-1/windtunnel.lock.json',
+        gate: 'gate-1',
+        phase: 'harness',
+        corpus: {
+            repo: 'mmnto-ai/liquid-city',
+            selectionRule: {
+                state: 'merged',
+                predicate: 'touches-code',
+                window: { type: 'all' },
+                asOfCommit: VALID_SHA,
+            },
+            resolvedPrs: [
+                {
+                    pr: 1,
+                    mergeCommit: VALID_SHA,
+                    baseSha: VALID_SHA_2,
+                    headSha: VALID_SHA_3,
+                },
+                {
+                    pr: 2,
+                    mergeCommit: VALID_SHA_2,
+                    baseSha: VALID_SHA_3,
+                    headSha: VALID_SHA,
+                },
+            ],
+        },
+        fpDefinition: {
+            rubricRef: 'controls/rubric.md',
+            groundTruthRef: 'controls/ground-truth-labels.json',
+            adjudicator: 'operator',
+            precisionFloor: 1.0,
+        },
+        controls: {
+            positiveRef: 'controls/positive/',
+            negativeRef: 'controls/negative/',
+            integrity: {
+                mechanism: 'git-hash-object',
+                fixtureSha: VALID_SHA,
+            },
+        },
+        cullRateThreshold: 0.25,
+        exposureDenominator: {
+            activeRulesEvaluated: { floor: 2 },
+            filesTouchedInWindow: { floor: 0 },
+            positiveControlsExercised: { floor: 0 },
+        },
+        ...overrides,
+    };
+}
+// ─── Schema acceptance ───────────────────────────────
+describe('WindtunnelLockSchema acceptance', () => {
+    it('accepts a valid harness-phase lock', () => {
+        const result = WindtunnelLockSchema.safeParse(validLock());
+        expect(result.success).toBe(true);
+    });
+    it('accepts a certifying-phase lock', () => {
+        const result = WindtunnelLockSchema.safeParse(validLock({ phase: 'certifying' }));
+        expect(result.success).toBe(true);
+    });
+    it('accepts a bounded window lock', () => {
+        const lock = validLock();
+        lock.corpus.selectionRule.window = { type: 'bounded', n: 50 };
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(true);
+    });
+});
+// ─── Schema rejection invariants ─────────────────────
+describe('WindtunnelLockSchema rejection', () => {
+    it('rejects precisionFloor !== 1.0', () => {
+        const lock = validLock();
+        lock.fpDefinition.precisionFloor = 0.9;
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects non-40-hex asOfCommit', () => {
+        const lock = validLock();
+        lock.corpus.selectionRule.asOfCommit = 'notahex';
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects empty resolvedPrs', () => {
+        const lock = validLock();
+        lock.corpus.resolvedPrs = [];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects resolvedPrs entries missing mergeCommit (C4)', () => {
+        const lock = validLock();
+        lock.corpus.resolvedPrs = [
+            { pr: 1, baseSha: VALID_SHA, headSha: VALID_SHA_2 },
+        ];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects resolvedPrs entries missing baseSha (C4)', () => {
+        const lock = validLock();
+        lock.corpus.resolvedPrs = [
+            { pr: 1, mergeCommit: VALID_SHA, headSha: VALID_SHA_2 },
+        ];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects resolvedPrs entries missing headSha (C4)', () => {
+        const lock = validLock();
+        lock.corpus.resolvedPrs = [
+            { pr: 1, mergeCommit: VALID_SHA, baseSha: VALID_SHA_2 },
+        ];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects duplicate pr numbers in resolvedPrs (C4)', () => {
+        const lock = validLock();
+        lock.corpus.resolvedPrs = [
+            { pr: 1, mergeCommit: VALID_SHA, baseSha: VALID_SHA_2, headSha: VALID_SHA_3 },
+            { pr: 1, mergeCommit: VALID_SHA_2, baseSha: VALID_SHA_3, headSha: VALID_SHA },
+        ];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+        expect(JSON.stringify(result)).toContain('unique');
+    });
+    it('rejects unsorted pr numbers in resolvedPrs (C4)', () => {
+        const lock = validLock();
+        lock.corpus.resolvedPrs = [
+            { pr: 2, mergeCommit: VALID_SHA, baseSha: VALID_SHA_2, headSha: VALID_SHA_3 },
+            { pr: 1, mergeCommit: VALID_SHA_2, baseSha: VALID_SHA_3, headSha: VALID_SHA },
+        ];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+        expect(JSON.stringify(result)).toContain('sorted');
+    });
+    it('rejects absent cullRateThreshold (C5)', () => {
+        const lock = validLock();
+        delete lock['cullRateThreshold'];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects cullRateThreshold >= 1 (C5)', () => {
+        const lock = validLock({ cullRateThreshold: 1.0 });
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects negative cullRateThreshold (C5)', () => {
+        const lock = validLock({ cullRateThreshold: -0.1 });
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('accepts cullRateThreshold = 0 (boundary)', () => {
+        const lock = validLock({ cullRateThreshold: 0 });
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(true);
+    });
+    it('rejects activeRulesEvaluated.floor < 2', () => {
+        const lock = validLock();
+        lock.exposureDenominator.activeRulesEvaluated.floor = 1;
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('accepts activeRulesEvaluated.floor = 2 (boundary)', () => {
+        const lock = validLock();
+        lock.exposureDenominator.activeRulesEvaluated.floor = 2;
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(true);
+    });
+    it('rejects unknown phase', () => {
+        const lock = validLock({ phase: 'unknown' });
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+    it('rejects non-40-hex mergeCommit', () => {
+        const lock = validLock();
+        lock.corpus.resolvedPrs = [
+            { pr: 1, mergeCommit: 'short', baseSha: VALID_SHA, headSha: VALID_SHA_2 },
+        ];
+        const result = WindtunnelLockSchema.safeParse(lock);
+        expect(result.success).toBe(false);
+    });
+});
+// ─── firingLabelId ───────────────────────────────────
+describe('firingLabelId (A2)', () => {
+    it('returns a 64-char hex SHA-256', () => {
+        const id = firingLabelId('rule-abc', 42, 'src/foo.ts', 'const secret = "abc"');
+        expect(id).toMatch(/^[0-9a-f]{64}$/);
+    });
+    it('is deterministic for the same inputs', () => {
+        const a = firingLabelId('rule-abc', 42, 'src/foo.ts', 'const secret = "abc"');
+        const b = firingLabelId('rule-abc', 42, 'src/foo.ts', 'const secret = "abc"');
+        expect(a).toBe(b);
+    });
+    it('differs when ruleId differs', () => {
+        const a = firingLabelId('rule-abc', 42, 'src/foo.ts', 'line');
+        const b = firingLabelId('rule-def', 42, 'src/foo.ts', 'line');
+        expect(a).not.toBe(b);
+    });
+    it('differs when pr differs', () => {
+        const a = firingLabelId('rule-abc', 1, 'src/foo.ts', 'line');
+        const b = firingLabelId('rule-abc', 2, 'src/foo.ts', 'line');
+        expect(a).not.toBe(b);
+    });
+    it('normalizes Windows backslash paths (A3)', () => {
+        const forward = firingLabelId('rule', 1, 'src/foo.ts', 'line');
+        const backward = firingLabelId('rule', 1, 'src\\foo.ts', 'line');
+        expect(forward).toBe(backward);
+    });
+});
+//# sourceMappingURL=windtunnel-lock.test.js.map

package/dist/spine/windtunnel-lock.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windtunnel-lock.test.js","sourceRoot":"","sources":["../../src/spine/windtunnel-lock.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE3E,wDAAwD;AAExD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACjC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACnC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AAEnC,SAAS,SAAS,CAAC,SAAmC;IACpD,OAAO;QACL,MAAM,EAAE,oBAAoB;QAC5B,aAAa,EAAE,0CAA0C;QACzD,IAAI,EAAE,QAAQ;QACd,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE;YACN,IAAI,EAAE,sBAAsB;YAC5B,aAAa,EAAE;gBACb,KAAK,EAAE,QAAQ;gBACf,SAAS,EAAE,cAAc;gBACzB,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE;gBACvB,UAAU,EAAE,SAAS;aACtB;YACD,WAAW,EAAE;gBACX;oBACE,EAAE,EAAE,CAAC;oBACL,WAAW,EAAE,SAAS;oBACtB,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE,WAAW;iBACrB;gBACD;oBACE,EAAE,EAAE,CAAC;oBACL,WAAW,EAAE,WAAW;oBACxB,OAAO,EAAE,WAAW;oBACpB,OAAO,EAAE,SAAS;iBACnB;aACF;SACF;QACD,YAAY,EAAE;YACZ,SAAS,EAAE,oBAAoB;YAC/B,cAAc,EAAE,mCAAmC;YACnD,WAAW,EAAE,UAAU;YACvB,cAAc,EAAE,GAAG;SACpB;QACD,QAAQ,EAAE;YACR,WAAW,EAAE,oBAAoB;YACjC,WAAW,EAAE,oBAAoB;YACjC,SAAS,EAAE;gBACT,SAAS,EAAE,iBAAiB;gBAC5B,UAAU,EAAE,SAAS;aACtB;SACF;QACD,iBAAiB,EAAE,IAAI;QACvB,mBAAmB,EAAE;YACnB,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YAClC,oBAAoB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;YAClC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;SACxC;QACD,GAAG,SAAS;KACb,CAAC;AACJ,CAAC;AAED,wDAAwD;AAExD,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,CAAC;QAC3D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,aAAyC,CAAC,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC;QAC3F,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,wDAAwD;AAExD,QAAQ,CAAC,gCAAgC,EAAE,GAAG,EAAE;IAC9C,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,YAAwC,CAAC,cAAc,GAAG,GAAG,CAAC;QACpE,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,aAAyC,CAAC,UAAU,GAAG,SAAS,CAAC;QAC9E,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAkC,CAAC,WAAW,GAAG,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAkC,CAAC,WAAW,GAAG;YACrD,EAAE,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;SACpD,CAAC;QACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAkC,CAAC,WAAW,GAAG;YACrD,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;SACxD,CAAC;QACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAkC,CAAC,WAAW,GAAG;YACrD,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;SACxD,CAAC;QACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAkC,CAAC,WAAW,GAAG;YACrD,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;YAC7E,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE;SAC9E,CAAC;QACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;QACzD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAkC,CAAC,WAAW,GAAG;YACrD,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE;YAC7E,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE;SAC9E,CAAC;QACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,OAAQ,IAAgC,CAAC,mBAAmB,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;QACjD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,KAAK,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACzB,IAAI,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,KAAK,GAAG,CAAC,CAAC;QACxD,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7C,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;QACxB,IAAI,CAAC,MAAkC,CAAC,WAAW,GAAG;YACrD,EAAE,EAAE,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;SAC1E,CAAC;QACF,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QACpD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,wDAAwD;AAExD,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,EAAE,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;QAC/E,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;QAC9E,MAAM,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,sBAAsB,CAAC,CAAC;QAC9E,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACrC,MAAM,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,EAAE,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,CAAC,GAAG,aAAa,CAAC,UAAU,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC7D,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/spine/windtunnel-parity.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=windtunnel-parity.test.d.ts.map

package/dist/spine/windtunnel-parity.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"windtunnel-parity.test.d.ts","sourceRoot":"","sources":["../../src/spine/windtunnel-parity.test.ts"],"names":[],"mappings":""}

package/dist/spine/windtunnel-parity.test.js

@@ -0,0 +1,192 @@
+import * as fs from 'node:fs';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { afterEach, beforeEach, describe, expect, it } from 'vitest';
+import { enrichWithAstContext } from '../ast-gate.js';
+import { applyAstRulesToAdditions, applyRulesToAdditions } from '../rule-engine.js';
+import { cleanTmpDir, makeRuleEngineCtx } from '../test-utils.js';
+/**
+ * Bidirectional firing-parity test for the wind-tunnel readStrategy seam
+ * (S1+C1, .totem/specs/2188.md Invariants).
+ *
+ * The wind-tunnel replays each PR's diff against the rule engine and must
+ * observe the SAME firings production `totem lint` would observe — otherwise
+ * it measures a different engine than Gate 2 arms. The seam that makes this
+ * exact is the post-image `readStrategy` injected into BOTH
+ * `enrichWithAstContext` (regex `astContext` classification) and
+ * `applyAstRulesToAdditions` (whole-file AST parsing). This file proves parity
+ * is bidirectional:
+ *
+ *   - OVER-FIRE (C1): a regex match that lands inside a comment/string must NOT
+ *     become a violation. Production suppresses it via `astContext`; the replay,
+ *     fed the same post-image content through the same seam, must suppress it
+ *     identically. Caught by comparing readStrategy-fed firings to disk-fed
+ *     firings (the production baseline) — they must be equal.
+ *   - UNDER-FIRE (S1): an AST/ast-grep rule needs the whole post-image file, not
+ *     just the additions. The readStrategy supplying that post-image must fire
+ *     identically to the same content read from disk.
+ */
+// ─── Named constants ─────────────────────────────────
+const SRC_FILE = 'src/app.ts';
+const DEBUGGER_RULE = {
+    lessonHash: 'wt-parity-debugger',
+    lessonHeading: 'No debugger statements',
+    // Matches the literal token `debugger` — appears in both code and a comment
+    // in the fixture below, so astContext is what decides over-firing.
+    pattern: 'debugger',
+    message: 'debugger statement',
+    engine: 'regex',
+    compiledAt: '2026-06-17T00:00:00.000Z',
+};
+const CONSOLE_LOG_AST_RULE = {
+    lessonHash: 'wt-parity-console-log',
+    lessonHeading: 'No console.log',
+    pattern: '',
+    message: 'console.log call',
+    engine: 'ast-grep',
+    astGrepPattern: 'console.log($$$)',
+    compiledAt: '2026-06-17T00:00:00.000Z',
+};
+// Post-image fixture: the trigger token appears on a real code line (line 2)
+// AND inside a comment (line 3). A faithful replay fires a *violation* only on
+// the code line; the comment line is telemetry-only.
+//
+// The inline `// totem-ignore` markers below keep Totem's own corpus rules from
+// flagging the intentional `debugger` / `console.log` fixture tokens in this
+// test file — same pattern as ast-gate.test.ts and the pack-agent-security
+// fixtures. Bare (no ticket-ref) per the established test-fixture convention.
+const POST_IMAGE = [
+    'function run() {', // 1
+    '  debugger;', // 2 — real code → violation // totem-ignore
+    '  // debugger; left in by mistake — but this is a comment // totem-ignore', // 3 — comment → suppressed
+    '  console.log("hi");', // 4
+    '}', // 5
+].join('\n');
+const CODE_LINE = '  debugger;'; // totem-ignore
+const COMMENT_LINE = '  // debugger; left in by mistake — but this is a comment // totem-ignore';
+const CONSOLE_LINE = '  console.log("hi");';
+// ─── Helpers ─────────────────────────────────────────
+let tmpDir;
+beforeEach(() => {
+    tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'totem-wt-parity-'));
+    fs.mkdirSync(path.join(tmpDir, 'src'), { recursive: true });
+});
+afterEach(() => {
+    cleanTmpDir(tmpDir);
+});
+function additionsForDebugger() {
+    // Both the code line and the comment line are "added" in this PR. The replay
+    // must classify each from the post-image and fire only on the code line.
+    return [
+        { file: SRC_FILE, line: CODE_LINE, lineNumber: 2, precedingLine: 'function run() {' },
+        { file: SRC_FILE, line: COMMENT_LINE, lineNumber: 3, precedingLine: CODE_LINE },
+    ];
+}
+/** Normalize a violation list into a comparable, order-independent shape. */
+function fingerprint(violations) {
+    return violations
+        .map((v) => `${v.rule.lessonHash}|${v.file}|${v.lineNumber}|${v.line}`)
+        .sort()
+        .join('\n');
+}
+// ─── Assertion 1: over-fire suppression + disk/readStrategy parity (C1) ─
+describe('bidirectional parity — over-fire suppression (C1)', () => {
+    it('a regex match inside a comment does NOT become a violation when classified from the post-image', async () => {
+        const additions = additionsForDebugger();
+        // Inject the post-image content through the readStrategy seam (the path the
+        // wind-tunnel uses): line 2 classifies as code, line 3 as comment.
+        await enrichWithAstContext(additions, {
+            cwd: tmpDir,
+            readStrategy: async () => POST_IMAGE,
+        });
+        expect(additions[0].astContext).toBe('code');
+        expect(additions[1].astContext).toBe('comment');
+        const ctx = makeRuleEngineCtx();
+        const violations = applyRulesToAdditions(ctx, [DEBUGGER_RULE], additions);
+        // Only the real code line fires; the comment match is telemetry-only.
+        expect(violations).toHaveLength(1);
+        expect(violations[0].lineNumber).toBe(2);
+        expect(violations[0].line).toBe(CODE_LINE);
+    });
+    it('readStrategy-injected content fires identically to the same content on disk (replay == production)', async () => {
+        // ── Production baseline: content on disk, NO readStrategy ──
+        fs.writeFileSync(path.join(tmpDir, SRC_FILE), POST_IMAGE, 'utf-8');
+        const diskAdditions = additionsForDebugger();
+        await enrichWithAstContext(diskAdditions, { cwd: tmpDir });
+        const diskCtx = makeRuleEngineCtx();
+        const diskViolations = applyRulesToAdditions(diskCtx, [DEBUGGER_RULE], diskAdditions);
+        // ── Replay: identical content fed via readStrategy (file may differ on disk) ──
+        const replayAdditions = additionsForDebugger();
+        await enrichWithAstContext(replayAdditions, {
+            cwd: tmpDir,
+            readStrategy: async () => POST_IMAGE,
+        });
+        const replayCtx = makeRuleEngineCtx();
+        const replayViolations = applyRulesToAdditions(replayCtx, [DEBUGGER_RULE], replayAdditions);
+        // Parity: the two firing sets are byte-identical.
+        expect(fingerprint(replayViolations)).toBe(fingerprint(diskViolations));
+        expect(replayViolations).toHaveLength(1);
+        expect(replayViolations[0].lineNumber).toBe(2);
+    });
+    it('proves the seam matters: stale on-disk content would mis-suppress without the post-image', async () => {
+        // On disk the file has the debugger ON A CODE LINE (no comment); but the PR
+        // post-image moved it into a comment. Without the readStrategy seam, the
+        // replay would classify against the wrong tree. Feeding the post-image makes
+        // line 3 a comment (suppressed) — exactly what production sees for this PR.
+        const staleDisk = [
+            'function run() {',
+            '  debugger;', // totem-ignore
+            '  debugger;', // totem-ignore — on disk this is CODE
+            '  console.log("hi");',
+            '}',
+        ].join('\n');
+        fs.writeFileSync(path.join(tmpDir, SRC_FILE), staleDisk, 'utf-8');
+        const additions = additionsForDebugger();
+        await enrichWithAstContext(additions, {
+            cwd: tmpDir,
+            readStrategy: async () => POST_IMAGE, // the PR's actual post-image
+        });
+        // Line 3 is a comment in the post-image, so it is suppressed despite being
+        // code on disk — the seam decided correctly.
+        expect(additions[1].astContext).toBe('comment');
+        const ctx = makeRuleEngineCtx();
+        const violations = applyRulesToAdditions(ctx, [DEBUGGER_RULE], additions);
+        expect(violations).toHaveLength(1);
+        expect(violations[0].lineNumber).toBe(2);
+    });
+});
+// ─── Assertion 2: AST whole-file seam parity (S1) ────
+describe('bidirectional parity — AST whole-file seam (S1)', () => {
+    it('applyAstRulesToAdditions fires identically via readStrategy and via disk (parity)', async () => {
+        const additions = [
+            { file: SRC_FILE, line: CONSOLE_LINE, lineNumber: 4, precedingLine: COMMENT_LINE },
+        ];
+        // ── Production baseline: content on disk, no readStrategy ──
+        fs.writeFileSync(path.join(tmpDir, SRC_FILE), POST_IMAGE, 'utf-8');
+        const diskCtx = makeRuleEngineCtx();
+        const diskViolations = await applyAstRulesToAdditions(diskCtx, [CONSOLE_LOG_AST_RULE], additions, tmpDir);
+        // ── Replay: identical post-image fed via readStrategy ──
+        const replayCtx = makeRuleEngineCtx();
+        const replayViolations = await applyAstRulesToAdditions(replayCtx, [CONSOLE_LOG_AST_RULE], additions, tmpDir, undefined, undefined, async () => POST_IMAGE);
+        // The AST engine parses the WHOLE post-image in both cases — firings match.
+        expect(fingerprint(replayViolations)).toBe(fingerprint(diskViolations));
+        expect(replayViolations).toHaveLength(1);
+        expect(replayViolations[0].lineNumber).toBe(4);
+    });
+    it('the post-image readStrategy lets the AST engine see whole-file context an additions-only feed lacks (under-fire guard)', async () => {
+        // The addition we evaluate is line 4 (console.log). The AST engine parses
+        // the full post-image (functions, braces) to resolve it as a call
+        // expression. A readStrategy returning ONLY the bare addition line would
+        // still parse, but the point of S1 is that the engine receives the full
+        // post-image — proven by feeding the whole file and getting the fire.
+        const additions = [
+            { file: SRC_FILE, line: CONSOLE_LINE, lineNumber: 4, precedingLine: COMMENT_LINE },
+        ];
+        const ctx = makeRuleEngineCtx();
+        const violations = await applyAstRulesToAdditions(ctx, [CONSOLE_LOG_AST_RULE], additions, tmpDir, undefined, undefined, async () => POST_IMAGE);
+        expect(violations).toHaveLength(1);
+        expect(violations[0].lineNumber).toBe(4);
+        expect(violations[0].rule.lessonHash).toBe(CONSOLE_LOG_AST_RULE.lessonHash);
+    });
+});
+//# sourceMappingURL=windtunnel-parity.test.js.map

package/dist/spine/windtunnel-parity.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windtunnel-parity.test.js","sourceRoot":"","sources":["../../src/spine/windtunnel-parity.test.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEtD,OAAO,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,wDAAwD;AAExD,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,aAAa,GAAiB;IAClC,UAAU,EAAE,oBAAoB;IAChC,aAAa,EAAE,wBAAwB;IACvC,4EAA4E;IAC5E,mEAAmE;IACnE,OAAO,EAAE,UAAU;IACnB,OAAO,EAAE,oBAAoB;IAC7B,MAAM,EAAE,OAAO;IACf,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF,MAAM,oBAAoB,GAAiB;IACzC,UAAU,EAAE,uBAAuB;IACnC,aAAa,EAAE,gBAAgB;IAC/B,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,UAAU;IAClB,cAAc,EAAE,kBAAkB;IAClC,UAAU,EAAE,0BAA0B;CACvC,CAAC;AAEF,6EAA6E;AAC7E,+EAA+E;AAC/E,qDAAqD;AACrD,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAC7E,2EAA2E;AAC3E,8EAA8E;AAC9E,MAAM,UAAU,GAAG;IACjB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,4CAA4C;IAC3D,2EAA2E,EAAE,2BAA2B;IACxG,sBAAsB,EAAE,IAAI;IAC5B,GAAG,EAAE,IAAI;CACV,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,SAAS,GAAG,aAAa,CAAC,CAAC,eAAe;AAChD,MAAM,YAAY,GAAG,2EAA2E,CAAC;AACjG,MAAM,YAAY,GAAG,sBAAsB,CAAC;AAE5C,wDAAwD;AAExD,IAAI,MAAc,CAAC;AAEnB,UAAU,CAAC,GAAG,EAAE;IACd,MAAM,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACpE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9D,CAAC,CAAC,CAAC;AAEH,SAAS,CAAC,GAAG,EAAE;IACb,WAAW,CAAC,MAAM,CAAC,CAAC;AACtB,CAAC,CAAC,CAAC;AAEH,SAAS,oBAAoB;IAC3B,6EAA6E;IAC7E,yEAAyE;IACzE,OAAO;QACL,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE;QACrF,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE;KAChF,CAAC;AACJ,CAAC;AAED,6EAA6E;AAC7E,SAAS,WAAW,CAAC,UAAuB;IAC1C,OAAO,UAAU;SACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;SACtE,IAAI,EAAE;SACN,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,2EAA2E;AAE3E,QAAQ,CAAC,mDAAmD,EAAE,GAAG,EAAE;IACjE,EAAE,CAAC,gGAAgG,EAAE,KAAK,IAAI,EAAE;QAC9G,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;QAEzC,4EAA4E;QAC5E,mEAAmE;QACnE,MAAM,oBAAoB,CAAC,SAAS,EAAE;YACpC,GAAG,EAAE,MAAM;YACX,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU;SACrC,CAAC,CAAC;QAEH,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC9C,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAEjD,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,CAAC;QAE1E,sEAAsE;QACtE,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oGAAoG,EAAE,KAAK,IAAI,EAAE;QAClH,8DAA8D;QAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,aAAa,GAAG,oBAAoB,EAAE,CAAC;QAC7C,MAAM,oBAAoB,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;QAC3D,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,qBAAqB,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,CAAC;QAEtF,iFAAiF;QACjF,MAAM,eAAe,GAAG,oBAAoB,EAAE,CAAC;QAC/C,MAAM,oBAAoB,CAAC,eAAe,EAAE;YAC1C,GAAG,EAAE,MAAM;YACX,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU;SACrC,CAAC,CAAC;QACH,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC,SAAS,EAAE,CAAC,aAAa,CAAC,EAAE,eAAe,CAAC,CAAC;QAE5F,kDAAkD;QAClD,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,gBAAgB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0FAA0F,EAAE,KAAK,IAAI,EAAE;QACxG,4EAA4E;QAC5E,yEAAyE;QACzE,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,SAAS,GAAG;YAChB,kBAAkB;YAClB,aAAa,EAAE,eAAe;YAC9B,aAAa,EAAE,sCAAsC;YACrD,sBAAsB;YACtB,GAAG;SACJ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAElE,MAAM,SAAS,GAAG,oBAAoB,EAAE,CAAC;QACzC,MAAM,oBAAoB,CAAC,SAAS,EAAE;YACpC,GAAG,EAAE,MAAM;YACX,YAAY,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU,EAAE,6BAA6B;SACpE,CAAC,CAAC;QAEH,2EAA2E;QAC3E,6CAA6C;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,qBAAqB,CAAC,GAAG,EAAE,CAAC,aAAa,CAAC,EAAE,SAAS,CAAC,CAAC;QAC1E,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,wDAAwD;AAExD,QAAQ,CAAC,iDAAiD,EAAE,GAAG,EAAE;IAC/D,EAAE,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;QACjG,MAAM,SAAS,GAAmB;YAChC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE;SACnF,CAAC;QAEF,8DAA8D;QAC9D,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,iBAAiB,EAAE,CAAC;QACpC,MAAM,cAAc,GAAG,MAAM,wBAAwB,CACnD,OAAO,EACP,CAAC,oBAAoB,CAAC,EACtB,SAAS,EACT,MAAM,CACP,CAAC;QAEF,0DAA0D;QAC1D,MAAM,SAAS,GAAG,iBAAiB,EAAE,CAAC;QACtC,MAAM,gBAAgB,GAAG,MAAM,wBAAwB,CACrD,SAAS,EACT,CAAC,oBAAoB,CAAC,EACtB,SAAS,EACT,MAAM,EACN,SAAS,EACT,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,UAAU,CACvB,CAAC;QAEF,4EAA4E;QAC5E,MAAM,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,cAAc,CAAC,CAAC,CAAC;QACxE,MAAM,CAAC,gBAAgB,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACzC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wHAAwH,EAAE,KAAK,IAAI,EAAE;QACtI,0EAA0E;QAC1E,kEAAkE;QAClE,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,MAAM,SAAS,GAAmB;YAChC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC,EAAE,aAAa,EAAE,YAAY,EAAE;SACnF,CAAC;QAEF,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;QAChC,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAC/C,GAAG,EACH,CAAC,oBAAoB,CAAC,EACtB,SAAS,EACT,MAAM,EACN,SAAS,EACT,SAAS,EACT,KAAK,IAAI,EAAE,CAAC,UAAU,CACvB,CAAC;QAEF,MAAM,CAAC,UAAU,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1C,MAAM,CAAC,UAAU,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/spine/windtunnel-scorer.d.ts

@@ -0,0 +1,93 @@
+export type WindtunnelVerdictKind = 'PASS' | 'HONEST-NEGATIVE' | 'FAIL';
+export type GroundTruthLabel = 'TP' | 'FP';
+export interface CullLedgerEntry {
+    ruleId: string;
+    pr: number;
+    filePath: string;
+    matchedLine: string;
+    reason: 'negative-control-fired';
+}
+export interface WindtunnelDiagnostics {
+    /**
+     * Precision (TP/(TP+FP)) over labeled, surviving (non-culled,
+     * non-negative-control) firings. DESCRIPTIVE ONLY — informative even on
+     * no-claim verdicts ("culled 8/10, the 2 survivors were clean"). NEVER
+     * consulted for the gate decision and never mistakable for the certifying
+     * `precision`. null when no surviving firing is labeled.
+     */
+    survivorPrecision: number | null;
+}
+export interface WindtunnelVerdict {
+    verdict: WindtunnelVerdictKind;
+    /**
+     * Certifying precision claim. A real value ONLY on verdicts that make a
+     * precision claim: PASS (1.0) and confirmed-FP FAIL (the breaching value,
+     * which IS the evidence). `null` on every no-claim verdict (exposure-floor /
+     * cull-rate / needs-adjudication HONEST-NEGATIVE, and vacuous-control FAIL).
+     * `null` ⟺ no precision claim; `0` is reserved for a real all-FP measurement
+     * and NEVER means "not computed" (#2189 ruling, strategy-claude 2026-06-17).
+     */
+    precision: number | null;
+    mintedRuleCount: number;
+    culledCount: number;
+    survivingRuleCount: number;
+    /** 3-tuple: [activeRulesEvaluated, filesTouchedInWindow, positiveControlsExercised]. Never collapsed to a product. */
+    exposureTuple: [number, number, number];
+    cullLedger: CullLedgerEntry[];
+    /** True when all positive controls fired their target rule. */
+    nonVacuity: boolean;
+    /** Label ids of firings with no ground-truth label (operator adjudication required). */
+    needsAdjudication: string[];
+    /** Separately-namespaced descriptive diagnostics — never part of the gate decision. */
+    diagnostics: WindtunnelDiagnostics;
+}
+export interface RuleFiring {
+    ruleId: string;
+    pr: number;
+    filePath: string;
+    matchedLine: string;
+    controlKind: 'corpus' | 'positive' | 'negative';
+    /** For positive controls: the rule that MUST fire to prove non-vacuousness. */
+    targetRuleId?: string;
+    /** Content-based label id (A2). Compute via firingLabelId from windtunnel-lock. */
+    labelId: string;
+}
+export interface ScorerInput {
+    firings: RuleFiring[];
+    /** Maps firingLabelId → TP/FP label. Unlabeled firings ⇒ needsAdjudication. */
+    groundTruth: Map<string, GroundTruthLabel>;
+    positiveControlTargets: Array<{
+        pr: number;
+        targetRuleId: string;
+    }>;
+    mintedRuleIds: string[];
+    cullRateThreshold: number;
+    exposureFloors: {
+        activeRulesEvaluated: number;
+        filesTouchedInWindow: number;
+        positiveControlsExercised: number;
+    };
+    actualExposure: {
+        activeRulesEvaluated: number;
+        filesTouchedInWindow: number;
+        positiveControlsExercised: number;
+    };
+}
+/**
+ * Score a wind-tunnel run. Pure function: no IO, no clock, no randomness.
+ * Implements ADR-110 §4/§5 done-criterion exactly per spec invariants.
+ *
+ * Verdict ordering (highest precedence first) — #2189 ruling:
+ *   1. Any firing labeled FP → FAIL (confirmed FP is a claim; precision = breaching value)
+ *   2. Positive control does not fire its target → FAIL (vacuous pass; precision = null)
+ *   3. Exposure floor below minimum → HONEST-NEGATIVE (masquerade guard; precision = null)
+ *   4. Cull rate exceeds threshold → HONEST-NEGATIVE (cull-laundering guard; precision = null)
+ *   5. Any unlabeled firing → HONEST-NEGATIVE (needs adjudication, not PASS; precision = null)
+ *   6. All labeled TP → PASS (precision = 1.0)
+ *
+ * The FAIL tier (1–2) outranks the masquerade guards (3–4): a guard may only
+ * DEMOTE a would-be PASS, never UPGRADE a FAIL. survivorPrecision (diagnostics)
+ * carries the informative survivor ratio distinct from the certifying precision.
+ */
+export declare function scoreWindtunnel(input: ScorerInput): WindtunnelVerdict;
+//# sourceMappingURL=windtunnel-scorer.d.ts.map

package/dist/spine/windtunnel-scorer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"windtunnel-scorer.d.ts","sourceRoot":"","sources":["../../src/spine/windtunnel-scorer.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,iBAAiB,GAAG,MAAM,CAAC;AACxE,MAAM,MAAM,gBAAgB,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,wBAAwB,CAAC;CAClC;AAED,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,qBAAqB,CAAC;IAC/B;;;;;;;OAOG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,sHAAsH;IACtH,aAAa,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACxC,UAAU,EAAE,eAAe,EAAE,CAAC;IAC9B,+DAA+D;IAC/D,UAAU,EAAE,OAAO,CAAC;IACpB,wFAAwF;IACxF,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,uFAAuF;IACvF,WAAW,EAAE,qBAAqB,CAAC;CACpC;AAED,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,QAAQ,GAAG,UAAU,GAAG,UAAU,CAAC;IAChD,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,mFAAmF;IACnF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,UAAU,EAAE,CAAC;IACtB,+EAA+E;IAC/E,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IAC3C,sBAAsB,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpE,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE;QACd,oBAAoB,EAAE,MAAM,CAAC;QAC7B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,yBAAyB,EAAE,MAAM,CAAC;KACnC,CAAC;IACF,cAAc,EAAE;QACd,oBAAoB,EAAE,MAAM,CAAC;QAC7B,oBAAoB,EAAE,MAAM,CAAC;QAC7B,yBAAyB,EAAE,MAAM,CAAC;KACnC,CAAC;CACH;AAID;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,WAAW,GAAG,iBAAiB,CAoMrE"}