@momentiq/dark-factory-cli 0.1.0-alpha.4

package/dist/evidence/audit-trail.d.ts

@@ -0,0 +1,59 @@
+import type { TelemetryEvent } from "@momentiq/dark-factory-schemas";
+export interface TelemetrySink {
+    emit(event: TelemetryEvent): void;
+}
+export declare class FileTelemetrySink implements TelemetrySink {
+    private readonly path;
+    constructor(path: string);
+    emit(event: TelemetryEvent): void;
+}
+export declare class MemoryTelemetrySink implements TelemetrySink {
+    readonly events: TelemetryEvent[];
+    emit(event: TelemetryEvent): void;
+}
+export interface TelemetryStats {
+    totalRuns: number;
+    errorRuns: number;
+    bypasses: number;
+    blocks: number;
+    passes: number;
+    approvedCount: number;
+    changesRequestedCount: number;
+    byCritic: Record<string, CriticStats>;
+    medianDurationMs: number | null;
+    retry: RetrySummary;
+}
+export interface RetrySummary {
+    firstAttemptSuccess: number;
+    oneRetrySuccess: number;
+    twoPlusRetrySuccess: number;
+    exhaustedByErrorCode: Record<string, number>;
+    totalRetryAttempts: number;
+}
+export interface CriticStats {
+    starts: number;
+    finishes: number;
+    errors: number;
+    approved: number;
+    changesRequested: number;
+    totalFindings: number;
+    totalBlockers: number;
+    totalHigh: number;
+    medianDurationMs: number | null;
+}
+export declare function readTelemetryEvents(path: string): TelemetryEvent[];
+export declare function summarizeTelemetry(events: TelemetryEvent[]): TelemetryStats;
+export interface CriticAgreement {
+    comparedCommits: number;
+    agreedCommits: number;
+    disagreementsByPattern: Record<string, number>;
+    comparedCriticIds: string[];
+}
+export interface QuorumStats {
+    totalAggregateEvents: number;
+    byReason: Record<string, number>;
+    quorumUnmetByCritic: Record<string, number>;
+}
+export declare function computeQuorumStats(events: TelemetryEvent[]): QuorumStats;
+export declare function computeCriticAgreement(events: TelemetryEvent[]): CriticAgreement;
+//# sourceMappingURL=audit-trail.d.ts.map

package/dist/evidence/audit-trail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-trail.d.ts","sourceRoot":"","sources":["../../src/evidence/audit-trail.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAErE,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI,CAAC;CACnC;AAED,qBAAa,iBAAkB,YAAW,aAAa;IACzC,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,MAAM;IAGzC,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;CAGlC;AAED,qBAAa,mBAAoB,YAAW,aAAa;IACvD,QAAQ,CAAC,MAAM,EAAE,cAAc,EAAE,CAAM;IACvC,IAAI,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;CAGlC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACtC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAMhC,KAAK,EAAE,YAAY,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAG3B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,MAAM,CAAC;IAI5B,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAI7C,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,EAAE,CAalE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,cAAc,CAmK3E;AAuCD,MAAM,WAAW,eAAe;IAE9B,eAAe,EAAE,MAAM,CAAC;IAExB,aAAa,EAAE,MAAM,CAAC;IAMtB,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAG/C,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B;AAwBD,MAAM,WAAW,WAAW;IAE1B,oBAAoB,EAAE,MAAM,CAAC;IAG7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAQjC,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,WAAW,CAmBxE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,cAAc,EAAE,GAAG,eAAe,CAgDhF"}

package/dist/evidence/audit-trail.js

@@ -0,0 +1,283 @@
+import { appendFileSync, existsSync, mkdirSync, readFileSync } from "node:fs";
+import { dirname } from "node:path";
+export class FileTelemetrySink {
+    path;
+    constructor(path) {
+        this.path = path;
+        mkdirSync(dirname(path), { recursive: true });
+    }
+    emit(event) {
+        appendFileSync(this.path, `${JSON.stringify(event)}\n`, "utf8");
+    }
+}
+export class MemoryTelemetrySink {
+    events = [];
+    emit(event) {
+        this.events.push(event);
+    }
+}
+export function readTelemetryEvents(path) {
+    if (!existsSync(path))
+        return [];
+    const out = [];
+    for (const line of readFileSync(path, "utf8").split("\n")) {
+        const t = line.trim();
+        if (!t)
+            continue;
+        try {
+            out.push(JSON.parse(t));
+        }
+        catch {
+            // skip corrupt line
+        }
+    }
+    return out;
+}
+export function summarizeTelemetry(events) {
+    const byCritic = new Map();
+    const allDurations = [];
+    let totalRuns = 0;
+    let errorRuns = 0;
+    let bypasses = 0;
+    let blocks = 0;
+    let passes = 0;
+    let approvedCount = 0;
+    let changesRequestedCount = 0;
+    // Cycle 322.1 — retry counters. Segmented on the `retryCount` field
+    // attached to terminal events (`critic_run_finished` for success;
+    // the last `critic_run_error` of a run for exhausted-retries).
+    // Intermediate `critic_run_error` events (those followed by another
+    // attempt of the SAME run) count toward `totalRetryAttempts` and
+    // are NOT counted as separate errored runs.
+    let firstAttemptSuccess = 0;
+    let oneRetrySuccess = 0;
+    let twoPlusRetrySuccess = 0;
+    const exhaustedByErrorCode = {};
+    let totalRetryAttempts = 0;
+    const errorsByRun = new Map();
+    function runKey(e) {
+        // commit is the most stable component — pre-322.1 runs without
+        // criticId or runId still group by commit. Add criticId to
+        // disambiguate the multi-critic future (Cycle 322.2/322.3).
+        return `${e.criticId ?? "?"}|${e.commit ?? "?"}`;
+    }
+    for (const e of events) {
+        if (e.event === "critic_run_started" && e.criticId) {
+            const stats = ensureStats(byCritic, e.criticId);
+            stats.starts++;
+            totalRuns++;
+        }
+        else if (e.event === "critic_run_finished" && e.criticId) {
+            const stats = ensureStats(byCritic, e.criticId);
+            stats.finishes++;
+            if (e.verdict === "APPROVED") {
+                stats.approved++;
+                approvedCount++;
+            }
+            else if (e.verdict === "CHANGES_REQUESTED") {
+                stats.changesRequested++;
+                changesRequestedCount++;
+            }
+            stats.totalFindings += e.findingCount ?? 0;
+            stats.totalBlockers += e.blockerCount ?? 0;
+            stats.totalHigh += e.highCount ?? 0;
+            if (typeof e.durationMs === "number") {
+                allDurations.push(e.durationMs);
+            }
+            const rc = typeof e.retryCount === "number" ? e.retryCount : 0;
+            if (rc === 0)
+                firstAttemptSuccess++;
+            else if (rc === 1)
+                oneRetrySuccess++;
+            else
+                twoPlusRetrySuccess++;
+            // NOTE: do NOT increment `totalRetryAttempts` here. The
+            // second-pass bucket loop derives the retry count from the
+            // intermediate-error events themselves (one per real retry).
+            // Adding `rc` here would double-count those same retries. See
+            // the bucket loop below for the single source of truth.
+        }
+        else if (e.event === "critic_run_error" && e.criticId) {
+            const key = runKey(e);
+            const bucket = errorsByRun.get(key) ?? [];
+            bucket.push(e);
+            errorsByRun.set(key, bucket);
+        }
+        else if (e.event === "gate_blocked") {
+            blocks++;
+        }
+        else if (e.event === "gate_passed") {
+            passes++;
+        }
+        else if (e.event === "gate_bypassed") {
+            bypasses++;
+        }
+    }
+    // Second pass: turn per-run error buckets into terminal-error stats
+    // without double-counting intermediate retry events. The terminal
+    // event for a run is the one with the highest `retryCount` (or the
+    // sole event for pre-322.1 runs without retryCount).
+    for (const [key, bucket] of errorsByRun) {
+        // Sort by retryCount asc; the terminal failure is the last one
+        // when retries are exhausted (because the loop never produced a
+        // critic_run_finished for this key).
+        const criticId = key.split("|", 1)[0];
+        const finishedForKey = events.some((e) => e.event === "critic_run_finished" && runKey(e) === key);
+        if (finishedForKey) {
+            // A finished event exists — every error in this bucket was
+            // intermediate (followed by another attempt that succeeded).
+            // Count those as retry attempts, NOT errored runs.
+            totalRetryAttempts += bucket.length;
+            continue;
+        }
+        // No finished event — the LAST error in the bucket is the
+        // terminal failure. Earlier errors are retry attempts.
+        bucket.sort((a, b) => (a.retryCount ?? 0) - (b.retryCount ?? 0));
+        const terminal = bucket[bucket.length - 1];
+        if (!terminal)
+            continue;
+        const intermediates = bucket.length - 1;
+        if (intermediates > 0)
+            totalRetryAttempts += intermediates;
+        if (criticId) {
+            const stats = ensureStats(byCritic, criticId);
+            stats.errors++;
+        }
+        errorRuns++;
+        const codeKey = typeof terminal.errorCode === "string" && terminal.errorCode.length > 0
+            ? terminal.errorCode
+            : "unknown";
+        exhaustedByErrorCode[codeKey] = (exhaustedByErrorCode[codeKey] ?? 0) + 1;
+    }
+    for (const [criticId, stats] of byCritic) {
+        // Per-critic median: filter durations to events from THIS critic only.
+        // Earlier loop body destructured `[, stats]` and dropped the criticId,
+        // so `durs` collected every critic's durations and assigned the same
+        // global median to each entry. (Cycle 3 #10)
+        const durs = events
+            .filter((e) => e.event === "critic_run_finished" &&
+            e.criticId === criticId &&
+            typeof e.durationMs === "number")
+            .map((e) => e.durationMs);
+        stats.medianDurationMs = median(durs);
+    }
+    return {
+        totalRuns,
+        errorRuns,
+        bypasses,
+        blocks,
+        passes,
+        approvedCount,
+        changesRequestedCount,
+        byCritic: Object.fromEntries(byCritic),
+        medianDurationMs: median(allDurations),
+        retry: {
+            firstAttemptSuccess,
+            oneRetrySuccess,
+            twoPlusRetrySuccess,
+            exhaustedByErrorCode,
+            totalRetryAttempts,
+        },
+    };
+}
+function ensureStats(map, key) {
+    let s = map.get(key);
+    if (!s) {
+        s = {
+            starts: 0,
+            finishes: 0,
+            errors: 0,
+            approved: 0,
+            changesRequested: 0,
+            totalFindings: 0,
+            totalBlockers: 0,
+            totalHigh: 0,
+            medianDurationMs: null,
+        };
+        map.set(key, s);
+    }
+    return s;
+}
+function median(values) {
+    if (values.length === 0)
+        return null;
+    const sorted = [...values].sort((a, b) => a - b);
+    const mid = Math.floor(sorted.length / 2);
+    if (sorted.length % 2 === 0) {
+        return Math.round(((sorted[mid - 1] ?? 0) + (sorted[mid] ?? 0)) / 2);
+    }
+    return sorted[mid] ?? null;
+}
+export function computeQuorumStats(events) {
+    let totalAggregateEvents = 0;
+    const byReason = {};
+    const quorumUnmetByCritic = {};
+    for (const e of events) {
+        if (e.event !== "review_finished")
+            continue;
+        const reason = e.aggregateReason;
+        if (!reason)
+            continue;
+        totalAggregateEvents++;
+        byReason[reason] = (byReason[reason] ?? 0) + 1;
+        if (reason === "quorum_unmet" && e.criticCompletionStates) {
+            for (const [id, state] of Object.entries(e.criticCompletionStates)) {
+                if (state === "errored" || state === "pending") {
+                    quorumUnmetByCritic[id] = (quorumUnmetByCritic[id] ?? 0) + 1;
+                }
+            }
+        }
+    }
+    return { totalAggregateEvents, byReason, quorumUnmetByCritic };
+}
+export function computeCriticAgreement(events) {
+    // Group `critic_run_finished` events by commit. Within each commit,
+    // dedupe on criticId so a retry-success (which may emit one finished
+    // event after retries) doesn't double-weight that critic.
+    const finishedByCommit = new Map();
+    for (const e of events) {
+        if (e.event !== "critic_run_finished")
+            continue;
+        if (!e.commit || !e.criticId || !e.verdict)
+            continue;
+        let m = finishedByCommit.get(e.commit);
+        if (!m) {
+            m = new Map();
+            finishedByCommit.set(e.commit, m);
+        }
+        // The LAST verdict wins per (commit, criticId) — successful retries
+        // may produce earlier failed-error events, but only the success is
+        // tagged with a verdict (failed events have no verdict field).
+        m.set(e.criticId, e.verdict);
+    }
+    let comparedCommits = 0;
+    let agreedCommits = 0;
+    const disagreementsByPattern = {};
+    const allCriticIds = new Set();
+    for (const verdicts of finishedByCommit.values()) {
+        if (verdicts.size < 2)
+            continue;
+        comparedCommits++;
+        for (const id of verdicts.keys())
+            allCriticIds.add(id);
+        const distinct = new Set(verdicts.values());
+        if (distinct.size === 1) {
+            agreedCommits++;
+            continue;
+        }
+        // Build a sorted-by-criticId pattern string so the same disagreement
+        // (regardless of stream-order) hashes into the same bucket.
+        const pattern = [...verdicts.entries()]
+            .sort((a, b) => a[0].localeCompare(b[0]))
+            .map(([id, v]) => `${id}:${v}`)
+            .join(" / ");
+        disagreementsByPattern[pattern] = (disagreementsByPattern[pattern] ?? 0) + 1;
+    }
+    return {
+        comparedCommits,
+        agreedCommits,
+        disagreementsByPattern,
+        comparedCriticIds: [...allCriticIds].sort(),
+    };
+}
+//# sourceMappingURL=audit-trail.js.map

package/dist/evidence/audit-trail.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-trail.js","sourceRoot":"","sources":["../../src/evidence/audit-trail.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAQpC,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,IAAY;QAAZ,SAAI,GAAJ,IAAI,CAAQ;QACvC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,KAAqB;QACxB,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;CACF;AAED,MAAM,OAAO,mBAAmB;IACrB,MAAM,GAAqB,EAAE,CAAC;IACvC,IAAI,CAAC,KAAqB;QACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;CACF;AAgDD,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAmB,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAChD,MAAM,YAAY,GAAa,EAAE,CAAC;IAClC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,IAAI,qBAAqB,GAAG,CAAC,CAAC;IAE9B,oEAAoE;IACpE,kEAAkE;IAClE,+DAA+D;IAC/D,oEAAoE;IACpE,iEAAiE;IACjE,4CAA4C;IAC5C,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAC5B,MAAM,oBAAoB,GAA2B,EAAE,CAAC;IACxD,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAgB3B,MAAM,WAAW,GAAG,IAAI,GAAG,EAA4B,CAAC;IAExD,SAAS,MAAM,CAAC,CAAiB;QAC/B,+DAA+D;QAC/D,2DAA2D;QAC3D,4DAA4D;QAC5D,OAAO,GAAG,CAAC,CAAC,QAAQ,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;IACnD,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,oBAAoB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACnD,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChD,KAAK,CAAC,MAAM,EAAE,CAAC;YACf,SAAS,EAAE,CAAC;QACd,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,qBAAqB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YAC3D,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;YAChD,KAAK,CAAC,QAAQ,EAAE,CAAC;YACjB,IAAI,CAAC,CAAC,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC7B,KAAK,CAAC,QAAQ,EAAE,CAAC;gBACjB,aAAa,EAAE,CAAC;YAClB,CAAC;iBAAM,IAAI,CAAC,CAAC,OAAO,KAAK,mBAAmB,EAAE,CAAC;gBAC7C,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBACzB,qBAAqB,EAAE,CAAC;YAC1B,CAAC;YACD,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC3C,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC;YAC3C,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC;YACpC,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,EAAE,CAAC;gBACrC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;YAClC,CAAC;YACD,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/D,IAAI,EAAE,KAAK,CAAC;gBAAE,mBAAmB,EAAE,CAAC;iBAC/B,IAAI,EAAE,KAAK,CAAC;gBAAE,eAAe,EAAE,CAAC;;gBAChC,mBAAmB,EAAE,CAAC;YAC3B,wDAAwD;YACxD,2DAA2D;YAC3D,6DAA6D;YAC7D,8DAA8D;YAC9D,wDAAwD;QAC1D,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,kBAAkB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;YACxD,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;YACtB,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1C,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC/B,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,cAAc,EAAE,CAAC;YACtC,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;YACrC,MAAM,EAAE,CAAC;QACX,CAAC;aAAM,IAAI,CAAC,CAAC,KAAK,KAAK,eAAe,EAAE,CAAC;YACvC,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,oEAAoE;IACpE,kEAAkE;IAClE,mEAAmE;IACnE,qDAAqD;IACrD,KAAK,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QACxC,+DAA+D;QAC/D,gEAAgE;QAChE,qCAAqC;QACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAChC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,qBAAqB,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAC9D,CAAC;QACF,IAAI,cAAc,EAAE,CAAC;YACnB,2DAA2D;YAC3D,6DAA6D;YAC7D,mDAAmD;YACnD,kBAAkB,IAAI,MAAM,CAAC,MAAM,CAAC;YACpC,SAAS;QACX,CAAC;QACD,0DAA0D;QAC1D,uDAAuD;QACvD,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,QAAQ;YAAE,SAAS;QACxB,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;QACxC,IAAI,aAAa,GAAG,CAAC;YAAE,kBAAkB,IAAI,aAAa,CAAC;QAE3D,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YAC9C,KAAK,CAAC,MAAM,EAAE,CAAC;QACjB,CAAC;QACD,SAAS,EAAE,CAAC;QACZ,MAAM,OAAO,GACX,OAAO,QAAQ,CAAC,SAAS,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;YACrE,CAAC,CAAC,QAAQ,CAAC,SAAS;YACpB,CAAC,CAAC,SAAS,CAAC;QAChB,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzC,uEAAuE;QACvE,uEAAuE;QACvE,qEAAqE;QACrE,6CAA6C;QAC7C,MAAM,IAAI,GAAG,MAAM;aAChB,MAAM,CACL,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,KAAK,KAAK,qBAAqB;YACjC,CAAC,CAAC,QAAQ,KAAK,QAAQ;YACvB,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CACnC;aACA,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAoB,CAAC,CAAC;QACtC,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACxC,CAAC;IAED,OAAO;QACL,SAAS;QACT,SAAS;QACT,QAAQ;QACR,MAAM;QACN,MAAM;QACN,aAAa;QACb,qBAAqB;QACrB,QAAQ,EAAE,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC;QACtC,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC;QACtC,KAAK,EAAE;YACL,mBAAmB;YACnB,eAAe;YACf,mBAAmB;YACnB,oBAAoB;YACpB,kBAAkB;SACnB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAA6B,EAAE,GAAW;IAC7D,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,CAAC,GAAG;YACF,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,CAAC;YACT,QAAQ,EAAE,CAAC;YACX,gBAAgB,EAAE,CAAC;YACnB,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,CAAC;YAChB,SAAS,EAAE,CAAC;YACZ,gBAAgB,EAAE,IAAI;SACvB,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,MAAgB;IAC9B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;AAC7B,CAAC;AAgED,MAAM,UAAU,kBAAkB,CAAC,MAAwB;IACzD,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,MAAM,mBAAmB,GAA2B,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,iBAAiB;YAAE,SAAS;QAC5C,MAAM,MAAM,GAAG,CAAC,CAAC,eAAe,CAAC;QACjC,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,oBAAoB,EAAE,CAAC;QACvB,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/C,IAAI,MAAM,KAAK,cAAc,IAAI,CAAC,CAAC,sBAAsB,EAAE,CAAC;YAC1D,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,sBAAsB,CAAC,EAAE,CAAC;gBACnE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBAC/C,mBAAmB,CAAC,EAAE,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,oEAAoE;IACpE,qEAAqE;IACrE,0DAA0D;IAC1D,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAyD,CAAC;IAC1F,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,KAAK,KAAK,qBAAqB;YAAE,SAAS;QAChD,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,OAAO;YAAE,SAAS;QACrD,IAAI,CAAC,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QACvC,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,IAAI,GAAG,EAAE,CAAC;YACd,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACpC,CAAC;QACD,oEAAoE;QACpE,mEAAmE;QACnE,+DAA+D;QAC/D,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,aAAa,GAAG,CAAC,CAAC;IACtB,MAAM,sBAAsB,GAA2B,EAAE,CAAC;IAC1D,MAAM,YAAY,GAAG,IAAI,GAAG,EAAU,CAAC;IAEvC,KAAK,MAAM,QAAQ,IAAI,gBAAgB,CAAC,MAAM,EAAE,EAAE,CAAC;QACjD,IAAI,QAAQ,CAAC,IAAI,GAAG,CAAC;YAAE,SAAS;QAChC,eAAe,EAAE,CAAC;QAClB,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,IAAI,EAAE;YAAE,YAAY,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5C,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACxB,aAAa,EAAE,CAAC;YAChB,SAAS;QACX,CAAC;QACD,qEAAqE;QACrE,4DAA4D;QAC5D,MAAM,OAAO,GAAG,CAAC,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC;aACpC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACxC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;aAC9B,IAAI,CAAC,KAAK,CAAC,CAAC;QACf,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/E,CAAC;IAED,OAAO;QACL,eAAe;QACf,aAAa;QACb,sBAAsB;QACtB,iBAAiB,EAAE,CAAC,GAAG,YAAY,CAAC,CAAC,IAAI,EAAE;KAC5C,CAAC;AACJ,CAAC"}

package/dist/evidence/index.d.ts

@@ -0,0 +1,4 @@
+export { parseCommitTrailers, getTrailer, perShaQualityGatePath, collectChangedPaths, QUALITY_GATES_SUBDIR, type CommitTrailers, } from "./per-sha.js";
+export { runQualityGates, readQualityGateEvidence, type QualityGateRunOptions, type ReadEvidenceResult, } from "./quality-gates.js";
+export { FileTelemetrySink, MemoryTelemetrySink, readTelemetryEvents, summarizeTelemetry, computeQuorumStats, computeCriticAgreement, type TelemetrySink, type TelemetryStats, type RetrySummary, type CriticStats, type CriticAgreement, type QuorumStats, } from "./audit-trail.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/evidence/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/evidence/index.ts"],"names":[],"mappings":"AAeA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,KAAK,cAAc,GACpB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,eAAe,EACf,uBAAuB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,GACxB,MAAM,oBAAoB,CAAC;AAa5B,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,EACtB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACpB,KAAK,WAAW,GACjB,MAAM,kBAAkB,CAAC"}

package/dist/evidence/index.js

@@ -0,0 +1,29 @@
+// Service #4 — Per-SHA Evidence Store
+// Service #8 — Audit / Compliance Trail
+//
+// Phase C boundary added service #4 (per-SHA quality-gate evidence
+// path helpers + the quality-gates runner). Phase D boundary adds
+// service #8 (the `_runs.ndjson` audit/compliance trail) — the
+// runtime telemetry sink + the read/summarize helpers that back
+// `make agent-review-stats` / `df audit stats`.
+//
+// Note: `per-sha.ts` currently also exports `parseCommitTrailers` and
+// `collectChangedPaths` which logically belong under `policy/` and `git/`
+// respectively. Whole-file move is intentional per Phase C extraction
+// brief (preserve behavior + minimize import churn). Tracked for cleanup
+// in a follow-up tech-debt issue.
+export { parseCommitTrailers, getTrailer, perShaQualityGatePath, collectChangedPaths, QUALITY_GATES_SUBDIR, } from "./per-sha.js";
+export { runQualityGates, readQualityGateEvidence, } from "./quality-gates.js";
+// Service #8 — Audit / Compliance Trail (Phase D boundary).
+//
+// `_runs.ndjson` is the structural audit log: every critic run, every
+// gate verdict, every bypass invocation appends here. Operators read
+// it via `df audit stats` (or the legacy `make agent-review-stats`).
+//
+// The sink classes (FileTelemetrySink, MemoryTelemetrySink) are the
+// write side; readTelemetryEvents + summarizeTelemetry +
+// computeQuorumStats + computeCriticAgreement are the read/analyze
+// side. Keeping them in the same module ensures the schema cannot
+// drift between writer and reader.
+export { FileTelemetrySink, MemoryTelemetrySink, readTelemetryEvents, summarizeTelemetry, computeQuorumStats, computeCriticAgreement, } from "./audit-trail.js";
+//# sourceMappingURL=index.js.map

package/dist/evidence/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/evidence/index.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,wCAAwC;AACxC,EAAE;AACF,mEAAmE;AACnE,kEAAkE;AAClE,+DAA+D;AAC/D,gEAAgE;AAChE,gDAAgD;AAChD,EAAE;AACF,sEAAsE;AACtE,0EAA0E;AAC1E,sEAAsE;AACtE,yEAAyE;AACzE,kCAAkC;AAElC,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,GAErB,MAAM,cAAc,CAAC;AAEtB,OAAO,EACL,eAAe,EACf,uBAAuB,GAGxB,MAAM,oBAAoB,CAAC;AAE5B,4DAA4D;AAC5D,EAAE;AACF,sEAAsE;AACtE,qEAAqE;AACrE,qEAAqE;AACrE,EAAE;AACF,oEAAoE;AACpE,yDAAyD;AACzD,mEAAmE;AACnE,kEAAkE;AAClE,mCAAmC;AACnC,OAAO,EACL,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,GAOvB,MAAM,kBAAkB,CAAC"}

package/dist/evidence/per-sha.d.ts

@@ -0,0 +1,13 @@
+export interface CommitTrailers {
+    readonly trailers: Record<string, string>;
+    readonly hasTrailerBlock: boolean;
+}
+export declare function parseCommitTrailers(message: string): CommitTrailers;
+export declare function getTrailer(trailers: CommitTrailers, key: string): string | undefined;
+export declare function perShaQualityGatePath(artifactRoot: string, artifactDir: string, sha: string): string;
+export declare const QUALITY_GATES_SUBDIR = "quality-gates";
+export declare function collectChangedPaths(files: ReadonlyArray<{
+    path: string;
+    oldPath?: string;
+}>): string[];
+//# sourceMappingURL=per-sha.d.ts.map

package/dist/evidence/per-sha.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-sha.d.ts","sourceRoot":"","sources":["../../src/evidence/per-sha.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,cAAc;IAM7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAI1C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;CACnC;AAID,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,CAqDnE;AAID,wBAAgB,UAAU,CACxB,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,MAAM,GACV,MAAM,GAAG,SAAS,CAEpB;AAOD,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,MAAM,EACnB,GAAG,EAAE,MAAM,GACV,MAAM,CAER;AAED,eAAO,MAAM,oBAAoB,kBAAkB,CAAC;AASpD,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,aAAa,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,GACvD,MAAM,EAAE,CAOV"}

package/dist/evidence/per-sha.js

@@ -0,0 +1,97 @@
+// Commit-trailer parsing and per-SHA evidence file path helpers.
+// Trailers (per git-interpret-trailers semantics) carry human-supplied
+// overrides into the gate: a developer who deliberately ships a
+// production-only change can attach `Tdd-Justification: <reason>` and the
+// TDD classifier returns `justified` instead of `block`. The keys are
+// case-insensitive; whitespace around values is trimmed.
+import { resolve } from "node:path";
+const TRAILER_LINE = /^([A-Za-z][A-Za-z0-9._-]*)\s*:\s*(.*)$/;
+export function parseCommitTrailers(message) {
+    const trailers = {};
+    if (!message)
+        return { trailers, hasTrailerBlock: false };
+    // Normalize line endings and trim trailing whitespace so a message
+    // ending with "\n\n" still surfaces its trailer block.
+    const lines = message.replace(/\r\n?/g, "\n").split("\n");
+    while (lines.length > 0 && (lines[lines.length - 1] ?? "").trim() === "") {
+        lines.pop();
+    }
+    if (lines.length === 0)
+        return { trailers, hasTrailerBlock: false };
+    // Walk backwards from the end, collecting consecutive lines that look
+    // like trailers. The block ends at the first blank line OR the first
+    // non-trailer line. This matches git-interpret-trailers' behavior: the
+    // last paragraph is treated as a trailer block iff every line in it is
+    // a trailer or a continuation (line starting with whitespace).
+    const collected = [];
+    for (let i = lines.length - 1; i >= 0; i--) {
+        const line = lines[i] ?? "";
+        if (line.trim() === "")
+            break;
+        collected.unshift(line);
+    }
+    if (collected.length === 0)
+        return { trailers, hasTrailerBlock: false };
+    // Every non-continuation line in the candidate block must match the
+    // trailer pattern; otherwise this is a regular paragraph and trailers
+    // are NOT extracted. This guards against parsing free-prose paragraphs
+    // (e.g., "Reviewed by Alice. Tested locally.") as trailers.
+    let hasAnyTrailer = false;
+    for (const line of collected) {
+        if (line.startsWith(" ") || line.startsWith("\t"))
+            continue;
+        if (TRAILER_LINE.test(line)) {
+            hasAnyTrailer = true;
+            continue;
+        }
+        // First non-trailer, non-continuation line invalidates the block.
+        return { trailers, hasTrailerBlock: false };
+    }
+    if (!hasAnyTrailer)
+        return { trailers, hasTrailerBlock: false };
+    for (const line of collected) {
+        const match = line.match(TRAILER_LINE);
+        if (!match)
+            continue;
+        const rawKey = match[1] ?? "";
+        const value = (match[2] ?? "").trim();
+        const key = rawKey.toLowerCase();
+        if (key in trailers)
+            continue; // first occurrence wins
+        if (value.length === 0)
+            continue; // empty value is no override
+        trailers[key] = value;
+    }
+    return { trailers, hasTrailerBlock: true };
+}
+// Return a recognized trailer value by case-insensitive key, or undefined.
+// Callers should compare against the canonical lowercased key.
+export function getTrailer(trailers, key) {
+    return trailers.trailers[key.toLowerCase()];
+}
+// Per-SHA evidence file path under <artifactRoot>/<artifactDir>/quality-gates/<sha>.json.
+// Centralized so quality-gates.ts, gate.ts, and the runner all agree on the
+// canonical layout. The legacy `validation.resultFile` ("latest.json") is
+// maintained as a back-compat write target during the 318.2 → 318.4
+// migration window, but consumers should prefer the per-SHA path.
+export function perShaQualityGatePath(artifactRoot, artifactDir, sha) {
+    return resolve(artifactRoot, artifactDir, "quality-gates", `${sha}.json`);
+}
+export const QUALITY_GATES_SUBDIR = "quality-gates";
+// Flatten `ChangedFile[]` (or anything shaped like `{path, oldPath?}`)
+// into a path list that includes both the new `path` and (when present)
+// the rename/copy `oldPath`. Used by every gate-time path consumer so a
+// route-classified or TDD-classified file matches on EITHER side of a
+// rename. Centralized here (no git/runner/cli dependencies) so the
+// three former inline loops in runner.ts / gate.ts / cli.ts cannot
+// drift. (Codex P2 follow-up on d46b8be7.)
+export function collectChangedPaths(files) {
+    const out = [];
+    for (const f of files) {
+        out.push(f.path);
+        if (f.oldPath && f.oldPath !== f.path)
+            out.push(f.oldPath);
+    }
+    return out;
+}
+//# sourceMappingURL=per-sha.js.map

package/dist/evidence/per-sha.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"per-sha.js","sourceRoot":"","sources":["../../src/evidence/per-sha.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,uEAAuE;AACvE,gEAAgE;AAChE,0EAA0E;AAC1E,sEAAsE;AACtE,yDAAyD;AAEzD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAepC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AAE9D,MAAM,UAAU,mBAAmB,CAAC,OAAe;IACjD,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAE1D,mEAAmE;IACnE,uDAAuD;IACvD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACzE,KAAK,CAAC,GAAG,EAAE,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAEpE,sEAAsE;IACtE,qEAAqE;IACrE,uEAAuE;IACvE,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3C,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM;QAC9B,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAExE,oEAAoE;IACpE,sEAAsE;IACtE,uEAAuE;IACvE,4DAA4D;IAC5D,IAAI,aAAa,GAAG,KAAK,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,SAAS;QAC5D,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5B,aAAa,GAAG,IAAI,CAAC;YACrB,SAAS;QACX,CAAC;QACD,kEAAkE;QAClE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,aAAa;QAAE,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC;IAEhE,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,GAAG,IAAI,QAAQ;YAAE,SAAS,CAAC,wBAAwB;QACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS,CAAC,6BAA6B;QAC/D,QAAQ,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC;AAC7C,CAAC;AAED,2EAA2E;AAC3E,+DAA+D;AAC/D,MAAM,UAAU,UAAU,CACxB,QAAwB,EACxB,GAAW;IAEX,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,0FAA0F;AAC1F,4EAA4E;AAC5E,0EAA0E;AAC1E,oEAAoE;AACpE,kEAAkE;AAClE,MAAM,UAAU,qBAAqB,CACnC,YAAoB,EACpB,WAAmB,EACnB,GAAW;IAEX,OAAO,OAAO,CAAC,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,GAAG,GAAG,OAAO,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,eAAe,CAAC;AAEpD,uEAAuE;AACvE,wEAAwE;AACxE,wEAAwE;AACxE,sEAAsE;AACtE,mEAAmE;AACnE,mEAAmE;AACnE,2CAA2C;AAC3C,MAAM,UAAU,mBAAmB,CACjC,KAAwD;IAExD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACjB,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/evidence/quality-gates.d.ts

@@ -0,0 +1,19 @@
+import type { LoadedConfig } from "../policy/config.js";
+import { type QualityGateEvidence } from "@momentiq/dark-factory-schemas";
+export interface QualityGateRunOptions {
+    loaded: LoadedConfig;
+    commit: string;
+    cwd?: string;
+    commands?: string[];
+    signal?: AbortSignal;
+    excerptLines?: number;
+    routeId?: string;
+}
+export declare function runQualityGates(options: QualityGateRunOptions): Promise<QualityGateEvidence>;
+export interface ReadEvidenceResult {
+    evidence: QualityGateEvidence | null;
+    path: string;
+    stale: boolean;
+}
+export declare function readQualityGateEvidence(loaded: LoadedConfig, commit: string): Promise<ReadEvidenceResult>;
+//# sourceMappingURL=quality-gates.d.ts.map

package/dist/evidence/quality-gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"quality-gates.d.ts","sourceRoot":"","sources":["../../src/evidence/quality-gates.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAiBxD,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,gCAAgC,CAAC;AAIxC,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IAMtB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,wBAAsB,eAAe,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA2DlG;AAgBD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,YAAY,EACpB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,kBAAkB,CAAC,CA4B7B"}