@rasensio/aidlc 1.81.0 → 1.83.0

package/dist/verify/gate-criterion.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Receipt gate criterion, computed at the command layer after `evaluateGate`.
+ *
+ * Follows the `gate-criterion.ts` convention of `traceability/`, `tasks/` and
+ * `compliance/`: an evaluator plus a message helper, registered in `commands/gate.ts`
+ * and `commands/transition.ts`. It returns `null` outside the testing phase and in
+ * solo mode, so a project that never opted in gets no field, no warning and no git
+ * call (tool-written-test-receipts/AC-19, AC-23).
+ *
+ * `test-results.md` is never read here. That is what makes AC-12 hold: no prose can
+ * pass a receipt whose exit code is not 0.
+ *
+ * Requirements: tool-written-test-receipts/AC-11 to AC-19, AC-23
+ */
+export type ReceiptStatus = 'ok' | 'not-configured' | 'missing' | 'unreadable' | 'command-changed' | 'failed' | 'dirty' | 'stale';
+export interface ReceiptResult {
+    mode: 'verified';
+    status: ReceiptStatus;
+    /** The receipt's commit, when one was read. */
+    commit: string | null;
+    exit_code: number | null;
+    /** The first paths that made the receipt stale, at most `MAX_CHANGED`. */
+    changed: string[];
+    warnings: string[];
+}
+export declare function evaluateReceiptCriterion(projectRoot: string, instance: string, phase: string): ReceiptResult | null;
+/** One line naming why the receipt was refused (AC-18). */
+export declare function receiptMessage(r: ReceiptResult, instance: string): string;
+//# sourceMappingURL=gate-criterion.d.ts.map

package/dist/verify/gate-criterion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-criterion.d.ts","sourceRoot":"","sources":["../../src/verify/gate-criterion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAMH,MAAM,MAAM,aAAa,GACrB,IAAI,GACJ,gBAAgB,GAChB,SAAS,GACT,YAAY,GACZ,iBAAiB,GACjB,QAAQ,GACR,OAAO,GACP,OAAO,CAAC;AAEZ,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,MAAM,EAAE,aAAa,CAAC;IACtB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,0EAA0E;IAC1E,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAID,wBAAgB,wBAAwB,CACtC,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GACZ,aAAa,GAAG,IAAI,CA4CtB;AAED,2DAA2D;AAC3D,wBAAgB,cAAc,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAqBzE"}

package/dist/verify/gate-criterion.js

@@ -0,0 +1,86 @@
+/**
+ * Receipt gate criterion, computed at the command layer after `evaluateGate`.
+ *
+ * Follows the `gate-criterion.ts` convention of `traceability/`, `tasks/` and
+ * `compliance/`: an evaluator plus a message helper, registered in `commands/gate.ts`
+ * and `commands/transition.ts`. It returns `null` outside the testing phase and in
+ * solo mode, so a project that never opted in gets no field, no warning and no git
+ * call (tool-written-test-receipts/AC-19, AC-23).
+ *
+ * `test-results.md` is never read here. That is what makes AC-12 hold: no prose can
+ * pass a receipt whose exit code is not 0.
+ *
+ * Requirements: tool-written-test-receipts/AC-11 to AC-19, AC-23
+ */
+import { readAssurance, readVerifyCommand } from './config.js';
+import { changedOutside } from './git.js';
+import { hashCommand, readReceipt } from './receipt.js';
+const MAX_CHANGED = 10;
+export function evaluateReceiptCriterion(projectRoot, instance, phase) {
+    if (phase !== 'testing')
+        return null;
+    const assurance = readAssurance(projectRoot);
+    if (assurance.mode !== 'verified')
+        return null;
+    const warnings = assurance.unrecognised === null
+        ? []
+        : [
+            `assurance.default '${assurance.unrecognised}' is not 'solo' or 'verified' — ` +
+                'treated as verified, so the receipt check stays on.',
+        ];
+    const result = (status, extra = {}) => ({
+        mode: 'verified',
+        status,
+        commit: extra.commit ?? null,
+        exit_code: extra.exit_code ?? null,
+        changed: extra.changed ?? [],
+        warnings,
+    });
+    const command = readVerifyCommand(projectRoot);
+    if (command === null)
+        return result('not-configured');
+    const read = readReceipt(projectRoot, instance);
+    if (!read.ok)
+        return result(read.reason);
+    const { receipt } = read;
+    const seen = { commit: receipt.commit, exit_code: receipt.exit_code };
+    if (receipt.command_sha256 !== hashCommand(command))
+        return result('command-changed', seen);
+    if (receipt.exit_code !== 0)
+        return result('failed', seen);
+    if (receipt.dirty)
+        return result('dirty', seen);
+    // No shortcut on HEAD === commit: the working tree can differ from HEAD, and an
+    // uncommitted edit made after the run is as untested as a committed one (AC-13).
+    const changed = changedOutside(projectRoot, instance, receipt.commit);
+    if (!changed.ok)
+        return result('stale', { ...seen, changed: [`(${changed.reason})`] });
+    if (changed.paths.length > 0) {
+        return result('stale', { ...seen, changed: changed.paths.slice(0, MAX_CHANGED) });
+    }
+    return result('ok', seen);
+}
+/** One line naming why the receipt was refused (AC-18). */
+export function receiptMessage(r, instance) {
+    const file = `.aidlc/state/${instance}/receipt.json`;
+    const short = r.commit?.slice(0, 7) ?? '';
+    switch (r.status) {
+        case 'ok':
+            return `receipt ${short} matches`;
+        case 'not-configured':
+            return 'verified mode needs a test command: set verify.command in .aidlc/config.yaml';
+        case 'missing':
+            return `no test receipt: ${file} does not exist`;
+        case 'unreadable':
+            return `test receipt unreadable: ${file} is not a receipt aidlc verify wrote`;
+        case 'command-changed':
+            return `test receipt ${short} ran a different command than verify.command now names`;
+        case 'failed':
+            return `test receipt ${short} records exit code ${r.exit_code} — the tests failed`;
+        case 'dirty':
+            return `test receipt ${short} was taken with uncommitted changes outside the instance state directory`;
+        case 'stale':
+            return `test receipt ${short} is stale — changed since: ${r.changed.join(', ')}`;
+    }
+}
+//# sourceMappingURL=gate-criterion.js.map

package/dist/verify/gate-criterion.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-criterion.js","sourceRoot":"","sources":["../../src/verify/gate-criterion.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAuBxD,MAAM,WAAW,GAAG,EAAE,CAAC;AAEvB,MAAM,UAAU,wBAAwB,CACtC,WAAmB,EACnB,QAAgB,EAChB,KAAa;IAEb,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,SAAS,GAAG,aAAa,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,QAAQ,GACZ,SAAS,CAAC,YAAY,KAAK,IAAI;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;YACE,sBAAsB,SAAS,CAAC,YAAY,kCAAkC;gBAC5E,qDAAqD;SACxD,CAAC;IACR,MAAM,MAAM,GAAG,CACb,MAAqB,EACrB,QAA0E,EAAE,EAC7D,EAAE,CAAC,CAAC;QACnB,IAAI,EAAE,UAAU;QAChB,MAAM;QACN,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,IAAI;QAC5B,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,IAAI;QAClC,OAAO,EAAE,KAAK,CAAC,OAAO,IAAI,EAAE;QAC5B,QAAQ;KACT,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAC/C,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC,gBAAgB,CAAC,CAAC;IAEtD,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;IAEtE,IAAI,OAAO,CAAC,cAAc,KAAK,WAAW,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,SAAS,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3D,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAEhD,gFAAgF;IAChF,iFAAiF;IACjF,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;IACvF,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAAC,CAAgB,EAAE,QAAgB;IAC/D,MAAM,IAAI,GAAG,gBAAgB,QAAQ,eAAe,CAAC;IACrD,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,IAAI;YACP,OAAO,WAAW,KAAK,UAAU,CAAC;QACpC,KAAK,gBAAgB;YACnB,OAAO,8EAA8E,CAAC;QACxF,KAAK,SAAS;YACZ,OAAO,oBAAoB,IAAI,iBAAiB,CAAC;QACnD,KAAK,YAAY;YACf,OAAO,4BAA4B,IAAI,sCAAsC,CAAC;QAChF,KAAK,iBAAiB;YACpB,OAAO,gBAAgB,KAAK,wDAAwD,CAAC;QACvF,KAAK,QAAQ;YACX,OAAO,gBAAgB,KAAK,sBAAsB,CAAC,CAAC,SAAS,qBAAqB,CAAC;QACrF,KAAK,OAAO;YACV,OAAO,gBAAgB,KAAK,0EAA0E,CAAC;QACzG,KAAK,OAAO;YACV,OAAO,gBAAgB,KAAK,8BAA8B,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/verify/git.d.ts

@@ -0,0 +1,28 @@
+/**
+ * The git reads behind a receipt: which commit was tested, and what has changed since.
+ *
+ * Paths are compared relative to the repository's top level, and the instance's state
+ * directory is expressed the same way, so a project nested inside a larger repository
+ * still recognises its own state files.
+ *
+ * Requirements: tool-written-test-receipts/AC-6, AC-13, AC-14
+ */
+export type ChangedResult = {
+    ok: true;
+    paths: string[];
+} | {
+    ok: false;
+    reason: string;
+};
+/** HEAD's full sha; null outside a repository or before the first commit (AC-9). */
+export declare function headCommit(projectRoot: string): string | null;
+/**
+ * Paths outside `.aidlc/state/<instance>/` that differ.
+ *
+ * With `since` null: from the working tree's status — the dirty check before a run
+ * (AC-6). With a commit: that commit against the working tree, so committed, staged
+ * and unstaged changes all count, plus untracked files (AC-13, AC-14). A commit git
+ * cannot resolve — a shallow CI clone — is a failure, which reads as stale.
+ */
+export declare function changedOutside(projectRoot: string, instance: string, since: string | null): ChangedResult;
+//# sourceMappingURL=git.d.ts.map

package/dist/verify/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../src/verify/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,MAAM,MAAM,aAAa,GAAG;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAW1F,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAM7D;AAyBD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,GAAG,IAAI,GACnB,aAAa,CAgBf"}

package/dist/verify/git.js

@@ -0,0 +1,76 @@
+/**
+ * The git reads behind a receipt: which commit was tested, and what has changed since.
+ *
+ * Paths are compared relative to the repository's top level, and the instance's state
+ * directory is expressed the same way, so a project nested inside a larger repository
+ * still recognises its own state files.
+ *
+ * Requirements: tool-written-test-receipts/AC-6, AC-13, AC-14
+ */
+import { execFileSync } from 'node:child_process';
+import { realpathSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+function git(projectRoot, args) {
+    return execFileSync('git', args, {
+        cwd: projectRoot,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+        maxBuffer: 64 * 1024 * 1024,
+    });
+}
+/** HEAD's full sha; null outside a repository or before the first commit (AC-9). */
+export function headCommit(projectRoot) {
+    try {
+        return git(projectRoot, ['rev-parse', '--verify', '--quiet', 'HEAD']).trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The instance state directory as a top-level-relative prefix ending in `/`. */
+function instancePrefix(projectRoot, instance) {
+    const top = realpathSync(git(projectRoot, ['rev-parse', '--show-toplevel']).trim());
+    const dir = join(realpathSync(projectRoot), '.aidlc', 'state', instance);
+    return relative(top, dir).split(sep).join('/') + '/';
+}
+function splitZ(out) {
+    return out.split('\0').filter((p) => p !== '');
+}
+/** Porcelain v1 -z: `XY path\0`, with a rename's source as one extra entry after it. */
+function statusPaths(out) {
+    const entries = splitZ(out);
+    const paths = [];
+    for (let i = 0; i < entries.length; i++) {
+        const entry = entries[i];
+        paths.push(entry.slice(3));
+        if (entry[0] === 'R' || entry[0] === 'C')
+            paths.push(entries[++i] ?? '');
+    }
+    return paths.filter((p) => p !== '');
+}
+/**
+ * Paths outside `.aidlc/state/<instance>/` that differ.
+ *
+ * With `since` null: from the working tree's status — the dirty check before a run
+ * (AC-6). With a commit: that commit against the working tree, so committed, staged
+ * and unstaged changes all count, plus untracked files (AC-13, AC-14). A commit git
+ * cannot resolve — a shallow CI clone — is a failure, which reads as stale.
+ */
+export function changedOutside(projectRoot, instance, since) {
+    try {
+        const prefix = instancePrefix(projectRoot, instance);
+        const paths = since === null
+            ? statusPaths(git(projectRoot, ['status', '--porcelain=v1', '-z', '--untracked-files=all']))
+            : [
+                ...splitZ(git(projectRoot, ['diff', '--name-only', '-z', '--no-renames', since, '--'])),
+                ...splitZ(git(projectRoot, ['ls-files', '--others', '--exclude-standard', '-z', '--full-name'])),
+            ];
+        // `git diff` and `status` print top-level-relative paths; `ls-files` does with --full-name.
+        return { ok: true, paths: [...new Set(paths)].filter((p) => !p.startsWith(prefix)) };
+    }
+    catch (err) {
+        const stderr = err.stderr?.trim();
+        return { ok: false, reason: stderr || err.message };
+    }
+}
+//# sourceMappingURL=git.js.map

package/dist/verify/git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.js","sourceRoot":"","sources":["../../src/verify/git.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAIhD,SAAS,GAAG,CAAC,WAAmB,EAAE,IAAc;IAC9C,OAAO,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE;QAC/B,GAAG,EAAE,WAAW;QAChB,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;QACjC,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,UAAU,CAAC,WAAmB;IAC5C,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACvF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iFAAiF;AACjF,SAAS,cAAc,CAAC,WAAmB,EAAE,QAAgB;IAC3D,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACzE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;AACvD,CAAC;AAED,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AACjD,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;YAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,WAAmB,EACnB,QAAgB,EAChB,KAAoB;IAEpB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,cAAc,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;QACrD,MAAM,KAAK,GACT,KAAK,KAAK,IAAI;YACZ,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,gBAAgB,EAAE,IAAI,EAAE,uBAAuB,CAAC,CAAC,CAAC;YAC5F,CAAC,CAAC;gBACE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,MAAM,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;gBACvF,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,UAAU,EAAE,oBAAoB,EAAE,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC;aACjG,CAAC;QACR,4FAA4F;QAC5F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;IACvF,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAK,GAAa,CAAC,OAAO,EAAE,CAAC;IACjE,CAAC;AACH,CAAC"}

package/dist/verify/receipt.d.ts

@@ -0,0 +1,39 @@
+/**
+ * `receipt.json` — the record `aidlc verify` writes after running the test command.
+ *
+ * It holds hashes and metadata only. Test output can print tokens and the receipt is
+ * committed, so the output itself is never stored (tool-written-test-receipts/AC-7).
+ * A read that finds any field of the wrong type is `unreadable`, never a pass (AC-16).
+ *
+ * Requirements: tool-written-test-receipts/AC-5, AC-7, AC-16
+ */
+export declare const RECEIPT_FILE = "receipt.json";
+export interface Receipt {
+    version: 1;
+    /** HEAD when the run started. */
+    commit: string;
+    /** Whether any path outside the instance's state directory had changed (AC-6). */
+    dirty: boolean;
+    command_sha256: string;
+    /** A signal is recorded as 128 + its number (AC-10). */
+    exit_code: number;
+    /** sha256 of stdout and stderr bytes in arrival order. */
+    output_sha256: string;
+    duration_ms: number;
+    cli_version: string;
+    /** ISO 8601 UTC. */
+    finished_at: string;
+}
+export type ReadReceiptResult = {
+    ok: true;
+    receipt: Receipt;
+} | {
+    ok: false;
+    reason: 'missing' | 'unreadable';
+};
+export declare function sha256(data: string | Buffer): string;
+export declare function hashCommand(command: string): string;
+export declare function receiptPath(projectRoot: string, instance: string): string;
+export declare function readReceipt(projectRoot: string, instance: string): ReadReceiptResult;
+export declare function writeReceipt(projectRoot: string, instance: string, receipt: Receipt): string;
+//# sourceMappingURL=receipt.d.ts.map

package/dist/verify/receipt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.d.ts","sourceRoot":"","sources":["../../src/verify/receipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,eAAO,MAAM,YAAY,iBAAiB,CAAC;AAE3C,MAAM,WAAW,OAAO;IACtB,OAAO,EAAE,CAAC,CAAC;IACX,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,oBAAoB;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC9B;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,YAAY,CAAA;CAAE,CAAC;AASpD,wBAAgB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEpD;AAED,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEzE;AAkBD,wBAAgB,WAAW,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,iBAAiB,CASpF;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,MAAM,CAI5F"}

package/dist/verify/receipt.js

@@ -0,0 +1,60 @@
+/**
+ * `receipt.json` — the record `aidlc verify` writes after running the test command.
+ *
+ * It holds hashes and metadata only. Test output can print tokens and the receipt is
+ * committed, so the output itself is never stored (tool-written-test-receipts/AC-7).
+ * A read that finds any field of the wrong type is `unreadable`, never a pass (AC-16).
+ *
+ * Requirements: tool-written-test-receipts/AC-5, AC-7, AC-16
+ */
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+export const RECEIPT_FILE = 'receipt.json';
+/**
+ * A full git object id. Checked before the commit reaches `git diff`, so a crafted
+ * receipt cannot pass an option where a revision belongs.
+ */
+const COMMIT_RE = /^(?:[0-9a-f]{40}|[0-9a-f]{64})$/;
+const SHA256_RE = /^[0-9a-f]{64}$/;
+export function sha256(data) {
+    return createHash('sha256').update(data).digest('hex');
+}
+export function hashCommand(command) {
+    return sha256(Buffer.from(command, 'utf8'));
+}
+export function receiptPath(projectRoot, instance) {
+    return join(projectRoot, '.aidlc', 'state', instance, RECEIPT_FILE);
+}
+function isReceipt(raw) {
+    if (typeof raw !== 'object' || raw === null || Array.isArray(raw))
+        return false;
+    const r = raw;
+    return (r.version === 1 &&
+        typeof r.commit === 'string' && COMMIT_RE.test(r.commit) &&
+        typeof r.dirty === 'boolean' &&
+        typeof r.command_sha256 === 'string' && SHA256_RE.test(r.command_sha256) &&
+        typeof r.exit_code === 'number' && Number.isInteger(r.exit_code) &&
+        typeof r.output_sha256 === 'string' && SHA256_RE.test(r.output_sha256) &&
+        typeof r.duration_ms === 'number' && r.duration_ms >= 0 &&
+        typeof r.cli_version === 'string' &&
+        typeof r.finished_at === 'string');
+}
+export function readReceipt(projectRoot, instance) {
+    const path = receiptPath(projectRoot, instance);
+    if (!existsSync(path))
+        return { ok: false, reason: 'missing' };
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf8'));
+        return isReceipt(parsed) ? { ok: true, receipt: parsed } : { ok: false, reason: 'unreadable' };
+    }
+    catch {
+        return { ok: false, reason: 'unreadable' };
+    }
+}
+export function writeReceipt(projectRoot, instance, receipt) {
+    const path = receiptPath(projectRoot, instance);
+    writeFileSync(path, JSON.stringify(receipt, null, 2) + '\n', 'utf8');
+    return path;
+}
+//# sourceMappingURL=receipt.js.map

package/dist/verify/receipt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receipt.js","sourceRoot":"","sources":["../../src/verify/receipt.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAuB3C;;;GAGG;AACH,MAAM,SAAS,GAAG,iCAAiC,CAAC;AACpD,MAAM,SAAS,GAAG,gBAAgB,CAAC;AAEnC,MAAM,UAAU,MAAM,CAAC,IAAqB;IAC1C,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,QAAgB;IAC/D,OAAO,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;AACtE,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,CAAC,GAAG,GAA8B,CAAC;IACzC,OAAO,CACL,CAAC,CAAC,OAAO,KAAK,CAAC;QACf,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;QACxD,OAAO,CAAC,CAAC,KAAK,KAAK,SAAS;QAC5B,OAAO,CAAC,CAAC,cAAc,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC;QACxE,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QAChE,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;QACtE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,IAAI,CAAC;QACvD,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ;QACjC,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAClC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,WAAmB,EAAE,QAAgB;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/D,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACjG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,WAAmB,EAAE,QAAgB,EAAE,OAAgB;IAClF,MAAM,IAAI,GAAG,WAAW,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IACrE,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/verify/run.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Run `verify.command` and write the receipt.
+ *
+ * The command runs through the platform shell because it is a string a person wrote
+ * for one (`pnpm test && pnpm lint` must work). Output is shown live and hashed as it
+ * arrives; it is never stored (AC-7). The receipt is written whether the command
+ * passed or failed, so a failing run replaces an older passing one (AC-10).
+ *
+ * Requirements: tool-written-test-receipts/AC-4, AC-5, AC-6, AC-10
+ */
+import type { Writable } from 'node:stream';
+import type { Receipt } from './receipt.js';
+export interface VerifyOutput {
+    stdout: Writable;
+    stderr: Writable;
+}
+/**
+ * @param commit HEAD, already resolved by the caller (which refuses when there is none).
+ */
+export declare function runVerify(projectRoot: string, instance: string, command: string, commit: string, out?: VerifyOutput): Promise<{
+    receipt: Receipt;
+    path: string;
+}>;
+//# sourceMappingURL=run.d.ts.map

package/dist/verify/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../src/verify/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAKH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAK5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAE5C,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,QAAQ,CAAC;CAClB;AAQD;;GAEG;AACH,wBAAsB,SAAS,CAC7B,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,GAAG,GAAE,YAAiE,GACrE,OAAO,CAAC;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAmC7C"}

package/dist/verify/run.js

@@ -0,0 +1,59 @@
+/**
+ * Run `verify.command` and write the receipt.
+ *
+ * The command runs through the platform shell because it is a string a person wrote
+ * for one (`pnpm test && pnpm lint` must work). Output is shown live and hashed as it
+ * arrives; it is never stored (AC-7). The receipt is written whether the command
+ * passed or failed, so a failing run replaces an older passing one (AC-10).
+ *
+ * Requirements: tool-written-test-receipts/AC-4, AC-5, AC-6, AC-10
+ */
+import { spawn } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { constants } from 'node:os';
+import { VERSION } from '../core/version.js';
+import { changedOutside } from './git.js';
+import { hashCommand, writeReceipt } from './receipt.js';
+/** Exit code for a run killed by a signal: the shell convention, 128 + its number. */
+function signalExitCode(signal) {
+    const n = signal ? constants.signals[signal] : undefined;
+    return n === undefined ? 1 : 128 + n;
+}
+/**
+ * @param commit HEAD, already resolved by the caller (which refuses when there is none).
+ */
+export async function runVerify(projectRoot, instance, command, commit, out = { stdout: process.stdout, stderr: process.stderr }) {
+    // Measured before the run, so what the run itself writes cannot make it dirty. An
+    // unanswerable status counts as dirty: unknown is not clean (AC-6).
+    const changed = changedOutside(projectRoot, instance, null);
+    const dirty = !changed.ok || changed.paths.length > 0;
+    const hash = createHash('sha256');
+    const started = Date.now();
+    const exitCode = await new Promise((resolve) => {
+        const child = spawn(command, { shell: true, cwd: projectRoot, stdio: ['inherit', 'pipe', 'pipe'] });
+        child.stdout.on('data', (chunk) => {
+            hash.update(chunk);
+            out.stdout.write(chunk);
+        });
+        child.stderr.on('data', (chunk) => {
+            hash.update(chunk);
+            out.stderr.write(chunk);
+        });
+        // A shell that cannot start is the shell's "command not found".
+        child.on('error', () => resolve(127));
+        child.on('close', (code, signal) => resolve(code ?? signalExitCode(signal)));
+    });
+    const receipt = {
+        version: 1,
+        commit,
+        dirty,
+        command_sha256: hashCommand(command),
+        exit_code: exitCode,
+        output_sha256: hash.digest('hex'),
+        duration_ms: Date.now() - started,
+        cli_version: VERSION,
+        finished_at: new Date().toISOString(),
+    };
+    return { receipt, path: writeReceipt(projectRoot, instance, receipt) };
+}
+//# sourceMappingURL=run.js.map

package/dist/verify/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../src/verify/run.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAGpC,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAQzD,sFAAsF;AACtF,SAAS,cAAc,CAAC,MAA6B;IACnD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,SAAS,CAAC,OAAkC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACrF,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,WAAmB,EACnB,QAAgB,EAChB,OAAe,EACf,MAAc,EACd,MAAoB,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE;IAEtE,kFAAkF;IAClF,oEAAoE;IACpE,MAAM,OAAO,GAAG,cAAc,CAAC,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAEtD,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,QAAQ,GAAG,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACpG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnB,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC,CAAC,CAAC;QACH,gEAAgE;QAChE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QACtC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/E,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAY;QACvB,OAAO,EAAE,CAAC;QACV,MAAM;QACN,KAAK;QACL,cAAc,EAAE,WAAW,CAAC,OAAO,CAAC;QACpC,SAAS,EAAE,QAAQ;QACnB,aAAa,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QACjC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO;QACjC,WAAW,EAAE,OAAO;QACpB,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;AACzE,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rasensio/aidlc",
-  "version": "1.81.0",
+  "version": "1.83.0",
   "description": "AI Development Lifecycle Framework — structured lifecycle guidance for AI coding agents across platforms",
   "homepage": "https://aidlc.rodrigoasensio.com",
   "repository": {
@@ -31,7 +31,7 @@
     "commander": "15.0.0",
     "picomatch": "4.0.5",
     "yaml": "2.9.0",
-    "@rasensio/aidlc-content": "1.81.0"
+    "@rasensio/aidlc-content": "1.83.0"
   },
   "devDependencies": {
     "@types/node": "22.15.32",