@reticlehq/server 2.0.1 → 2.2.0

package/dist/flows/affected.js

@@ -0,0 +1,36 @@
+/**
+ * The file→flow reverse index — the heart of the unavoidable loop. When a file changes, which flows must
+ * re-verify? A flow persists the source files its anchors were stamped from (its "sources manifest"); a
+ * changed file that appears in a flow's manifest makes that flow affected. A flow with NO manifest
+ * (recorded before v2.2, or un-stampable) is `unknown` — and unknown always means affected, never
+ * silently skipped: the loop fails safe toward re-verifying.
+ */
+/** Normalize a path for comparison — strip a leading./ and any file:line suffix. */
+function normalize(path) {
+    return path.replace(/^\.\//, '').replace(/:\d+(:\d+)?$/, '');
+}
+/**
+ * Which flows are affected by a set of changed files. Deterministic; a flow with no sources manifest is
+ * always affected (fail-safe). `changedFiles` and flow sources are matched by normalized path suffix so
+ * a repo-relative change matches an absolute stamp and vice-versa.
+ */
+export function affectedFlows(flows, changedFiles) {
+    const changed = changedFiles.map(normalize);
+    const matchesChange = (source) => {
+        const s = normalize(source);
+        return changed.some((c) => c === s || c.endsWith(`/${s}`) || s.endsWith(`/${c}`));
+    };
+    const affected = [];
+    const unknownProvenance = [];
+    for (const flow of flows) {
+        if (flow.sources === undefined || flow.sources.length === 0) {
+            affected.push(flow.name);
+            unknownProvenance.push(flow.name);
+            continue;
+        }
+        if (flow.sources.some(matchesChange))
+            affected.push(flow.name);
+    }
+    return { affected, unknownProvenance };
+}
+//# sourceMappingURL=affected.js.map

package/dist/flows/affected.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"affected.js","sourceRoot":"","sources":["../../src/flows/affected.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAeH,oFAAoF;AACpF,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;AAC/D,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,KAA6B,EAC7B,YAA+B;IAE/B,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,aAAa,GAAG,CAAC,MAAc,EAAW,EAAE;QAChD,MAAM,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;QAC5B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5D,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzB,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClC,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC;AACzC,CAAC"}

package/dist/flows/annotate.d.ts

@@ -4,10 +4,10 @@ import { type Annotation, type AnnotateOutcome } from '@reticlehq/core';
  * the current captured-step count → an AnnotateOutcome (a result envelope + the patch to apply to
  * the AnnotationStore). No IO, no clock, unit-testable in isolation.
  *
- *   assert-signal  → step.expect.signal (+ signalData)   on the LAST step (needs ≥1 step)
- *   assert-visible → step.expect.element.testid          on the LAST step (needs ≥1 step)
- *   mark-dynamic   → flow.dynamic[] += testid            flow-level, allowed with 0 steps
- *   success-state  → flow.success = { signal | element } flow-level (signal XOR testid; both → signal)
+ * assert-signal → step.expect.signal (+ signalData) on the LAST step (needs ≥1 step)
+ * assert-visible → step.expect.element.testid on the LAST step (needs ≥1 step)
+ * mark-dynamic → flow.dynamic[] += testid flow-level, allowed with 0 steps
+ * success-state → flow.success = { signal | element } flow-level (signal XOR testid; both → signal)
  *
  * FIRST CUT: only the four structured kinds above. Free natural-language annotation → predicate
  * compilation is explicitly FUTURE — an NL string never reaches here (AnnotationSchema

package/dist/flows/annotate.js

@@ -4,10 +4,10 @@ import { AnnotationErrorCode, AnnotationKind, AnnotationTarget, COMPILED_PREDICA
  * the current captured-step count → an AnnotateOutcome (a result envelope + the patch to apply to
  * the AnnotationStore). No IO, no clock, unit-testable in isolation.
  *
- *   assert-signal  → step.expect.signal (+ signalData)   on the LAST step (needs ≥1 step)
- *   assert-visible → step.expect.element.testid          on the LAST step (needs ≥1 step)
- *   mark-dynamic   → flow.dynamic[] += testid            flow-level, allowed with 0 steps
- *   success-state  → flow.success = { signal | element } flow-level (signal XOR testid; both → signal)
+ * assert-signal → step.expect.signal (+ signalData) on the LAST step (needs ≥1 step)
+ * assert-visible → step.expect.element.testid on the LAST step (needs ≥1 step)
+ * mark-dynamic → flow.dynamic[] += testid flow-level, allowed with 0 steps
+ * success-state → flow.success = { signal | element } flow-level (signal XOR testid; both → signal)
  *
  * FIRST CUT: only the four structured kinds above. Free natural-language annotation → predicate
  * compilation is explicitly FUTURE — an NL string never reaches here (AnnotationSchema

package/dist/flows/assertion-integrity.d.ts

@@ -0,0 +1,24 @@
+import { type FlowExpect } from '@reticlehq/core';
+/**
+ * Anti-reward-hacking (research-mandated). Test-gated agents pass gates by WEAKENING assertions — the
+ * canonical documented failure. Flows are git-checked and agent-editable, so a mustHold that dropped
+ * from a consequence (signal/net/state) to presence-only since the last passing run is a downgrade the
+ * gate must flag as a first-class finding, never silently accept. This is the pure detector; the gate
+ * and flow_verify surface it.
+ */
+/** True when `after` weakened `before` — a real consequence became a fakeable presence-only check. */
+export declare function isAssertionDowngrade(before: FlowExpect | undefined, after: FlowExpect | undefined): boolean;
+export interface StepExpect {
+    step: number;
+    expect?: FlowExpect;
+}
+export interface DowngradeFinding {
+    step: number;
+}
+/**
+ * Compare a flow's steps between its last-passing version and now (matched by step index). Reports each
+ * step whose assertion tier dropped. Steps added/removed are out of scope here — deleted-flow detection
+ * lives with the affected index.
+ */
+export declare function detectDowngrades(before: readonly StepExpect[], after: readonly StepExpect[]): DowngradeFinding[];
+//# sourceMappingURL=assertion-integrity.d.ts.map

package/dist/flows/assertion-integrity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertion-integrity.d.ts","sourceRoot":"","sources":["../../src/flows/assertion-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;GAMG;AAEH,sGAAsG;AACtG,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,UAAU,GAAG,SAAS,EAC9B,KAAK,EAAE,UAAU,GAAG,SAAS,GAC5B,OAAO,CAET;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,UAAU,CAAC;CACrB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,KAAK,EAAE,SAAS,UAAU,EAAE,GAC3B,gBAAgB,EAAE,CAOpB"}

package/dist/flows/assertion-integrity.js

@@ -0,0 +1,27 @@
+import { flowExpectHasConsequence, flowExpectIsPresenceOnly, } from '@reticlehq/core';
+/**
+ * Anti-reward-hacking (research-mandated). Test-gated agents pass gates by WEAKENING assertions — the
+ * canonical documented failure. Flows are git-checked and agent-editable, so a mustHold that dropped
+ * from a consequence (signal/net/state) to presence-only since the last passing run is a downgrade the
+ * gate must flag as a first-class finding, never silently accept. This is the pure detector; the gate
+ * and flow_verify surface it.
+ */
+/** True when `after` weakened `before` — a real consequence became a fakeable presence-only check. */
+export function isAssertionDowngrade(before, after) {
+    return flowExpectHasConsequence(before) && flowExpectIsPresenceOnly(after);
+}
+/**
+ * Compare a flow's steps between its last-passing version and now (matched by step index). Reports each
+ * step whose assertion tier dropped. Steps added/removed are out of scope here — deleted-flow detection
+ * lives with the affected index.
+ */
+export function detectDowngrades(before, after) {
+    const afterByStep = new Map(after.map((s) => [s.step, s.expect]));
+    const findings = [];
+    for (const { step, expect } of before) {
+        if (isAssertionDowngrade(expect, afterByStep.get(step)))
+            findings.push({ step });
+    }
+    return findings;
+}
+//# sourceMappingURL=assertion-integrity.js.map

package/dist/flows/assertion-integrity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertion-integrity.js","sourceRoot":"","sources":["../../src/flows/assertion-integrity.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,wBAAwB,GAEzB,MAAM,iBAAiB,CAAC;AAEzB;;;;;;GAMG;AAEH,sGAAsG;AACtG,MAAM,UAAU,oBAAoB,CAClC,MAA8B,EAC9B,KAA6B;IAE7B,OAAO,wBAAwB,CAAC,MAAM,CAAC,IAAI,wBAAwB,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAWD;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAA6B,EAC7B,KAA4B;IAE5B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAuB,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACtC,IAAI,oBAAoB,CAAC,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/flows/assertion-tiers-store.d.ts

@@ -0,0 +1,80 @@
+import { z } from 'zod';
+import type { FileSystemPort } from '../project/fs-port.js';
+import type { StepExpect } from './assertion-integrity.js';
+/**
+ * The anti-reward-hacking baseline. Detecting an assertion DOWNGRADE requires knowing what the
+ * flow asserted the last time it PASSED — otherwise a weakened flow simply looks like a flow that always
+ * asserted little. Flows are git-checked and agent-editable, so we cannot trust the file itself as its own
+ * history.
+ *
+ * So: on every passing replay we record that flow's per-step assertion shape here, and the gate diffs the
+ * current file against it. Recorded only on PASS, deliberately — a failing run must never become the
+ * baseline a later weakening is measured against.
+ *
+ * Loads never throw: a missing/corrupt ledger degrades to "no baseline", which means no downgrade can be
+ * claimed. Failing OPEN is right here — accusing an agent of gaming the gate on the strength of an
+ * unreadable file would be worse than missing one downgrade.
+ */
+export declare const AssertionTiersFileSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    flows: z.ZodRecord<z.ZodString, z.ZodObject<{
+        steps: z.ZodArray<z.ZodObject<{
+            step: z.ZodNumber;
+            expect: z.ZodOptional<z.ZodUnknown>;
+        }, "strip", z.ZodTypeAny, {
+            step: number;
+            expect?: unknown;
+        }, {
+            step: number;
+            expect?: unknown;
+        }>, "many">;
+        /** Source files this flow covered when it last passed — lets the gate scope DELETION findings to
+         * the files that actually changed, instead of flagging every intentionally-removed flow. */
+        sources: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    }, "strip", z.ZodTypeAny, {
+        steps: {
+            step: number;
+            expect?: unknown;
+        }[];
+        sources: string[];
+    }, {
+        steps: {
+            step: number;
+            expect?: unknown;
+        }[];
+        sources?: string[] | undefined;
+    }>>;
+}, "strip", z.ZodTypeAny, {
+    version: 1;
+    flows: Record<string, {
+        steps: {
+            step: number;
+            expect?: unknown;
+        }[];
+        sources: string[];
+    }>;
+}, {
+    version: 1;
+    flows: Record<string, {
+        steps: {
+            step: number;
+            expect?: unknown;
+        }[];
+        sources?: string[] | undefined;
+    }>;
+}>;
+export interface FlowBaseline {
+    steps: StepExpect[];
+    sources: string[];
+}
+export type FlowTiers = Record<string, FlowBaseline>;
+export declare const ASSERTION_TIERS_VERSION = 1;
+export declare class AssertionTiersStore {
+    #private;
+    constructor(fs: FileSystemPort, root: string);
+    load(): Promise<FlowTiers>;
+    save(tiers: FlowTiers): Promise<void>;
+    /** Record one flow's assertion shape + covered sources after it PASSED. Never breaks a replay. */
+    recordPassing(name: string, steps: readonly StepExpect[], sources?: readonly string[]): Promise<void>;
+}
+//# sourceMappingURL=assertion-tiers-store.d.ts.map

package/dist/flows/assertion-tiers-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertion-tiers-store.d.ts","sourceRoot":"","sources":["../../src/flows/assertion-tiers-store.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAG5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAE3D;;;;;;;;;;;;;GAaG;AAEH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;QAK/B;oGAC4F;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAIhG,CAAC;AAEH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,UAAU,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AACD,MAAM,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;AAErD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,qBAAa,mBAAmB;;gBAIlB,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;IAKtC,IAAI,IAAI,OAAO,CAAC,SAAS,CAAC;IA6B1B,IAAI,CAAC,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ3C,kGAAkG;IAC5F,aAAa,CACjB,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,SAAS,UAAU,EAAE,EAC5B,OAAO,GAAE,SAAS,MAAM,EAAO,GAC9B,OAAO,CAAC,IAAI,CAAC;CAqBjB"}

package/dist/flows/assertion-tiers-store.js

@@ -0,0 +1,99 @@
+import { dirname } from 'node:path';
+import { z } from 'zod';
+import { reticleDirPaths } from '../project/reticle-dir.js';
+import { withFileLock } from '../project/file-lock.js';
+/**
+ * The anti-reward-hacking baseline. Detecting an assertion DOWNGRADE requires knowing what the
+ * flow asserted the last time it PASSED — otherwise a weakened flow simply looks like a flow that always
+ * asserted little. Flows are git-checked and agent-editable, so we cannot trust the file itself as its own
+ * history.
+ *
+ * So: on every passing replay we record that flow's per-step assertion shape here, and the gate diffs the
+ * current file against it. Recorded only on PASS, deliberately — a failing run must never become the
+ * baseline a later weakening is measured against.
+ *
+ * Loads never throw: a missing/corrupt ledger degrades to "no baseline", which means no downgrade can be
+ * claimed. Failing OPEN is right here — accusing an agent of gaming the gate on the strength of an
+ * unreadable file would be worse than missing one downgrade.
+ */
+export const AssertionTiersFileSchema = z.object({
+    version: z.literal(1),
+    flows: z.record(z.object({
+        steps: z.array(z.object({ step: z.number(), expect: z.unknown().optional() })),
+        /** Source files this flow covered when it last passed — lets the gate scope DELETION findings to
+         * the files that actually changed, instead of flagging every intentionally-removed flow. */
+        sources: z.array(z.string()).default([]),
+    })),
+});
+export const ASSERTION_TIERS_VERSION = 1;
+export class AssertionTiersStore {
+    #fs;
+    #path;
+    constructor(fs, root) {
+        this.#fs = fs;
+        this.#path = reticleDirPaths(root).tiers;
+    }
+    async load() {
+        let text;
+        try {
+            text = await this.#fs.readFile(this.#path);
+        }
+        catch (error) {
+            if (this.#fs.isNotFound(error))
+                return {};
+            throw error;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            return {};
+        }
+        const result = AssertionTiersFileSchema.safeParse(parsed);
+        if (!result.success)
+            return {};
+        const out = {};
+        for (const [name, entry] of Object.entries(result.data.flows)) {
+            out[name] = {
+                steps: entry.steps.map((s) => ({
+                    step: s.step,
+                    ...(s.expect === undefined ? {} : { expect: s.expect }),
+                })),
+                sources: entry.sources,
+            };
+        }
+        return out;
+    }
+    async save(tiers) {
+        await this.#fs.mkdir(dirname(this.#path));
+        const body = `${JSON.stringify({ version: ASSERTION_TIERS_VERSION, flows: tiers }, null, 2)}\n`;
+        const tmp = `${this.#path}.tmp`;
+        await this.#fs.writeFile(tmp, body);
+        await this.#fs.rename(tmp, this.#path);
+    }
+    /** Record one flow's assertion shape + covered sources after it PASSED. Never breaks a replay. */
+    async recordPassing(name, steps, sources = []) {
+        try {
+            // Serialized per file: a fresh store instance is created per flow (flow-replay-run), so parallel
+            // passing replays would otherwise each load the same baseline, add only THEIR flow, and the last
+            // save would drop every other flow's baseline — the downgrade-detection gate silently losing
+            // coverage. The lock is keyed by path, so it serializes across those distinct instances.
+            await withFileLock(this.#path, async () => {
+                const all = await this.load();
+                all[name] = {
+                    steps: steps.map((s) => ({
+                        step: s.step,
+                        ...(s.expect === undefined ? {} : { expect: s.expect }),
+                    })),
+                    sources: [...sources],
+                };
+                await this.save(all);
+            });
+        }
+        catch {
+            // a ledger write must never fail a green replay
+        }
+    }
+}
+//# sourceMappingURL=assertion-tiers-store.js.map

package/dist/flows/assertion-tiers-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertion-tiers-store.js","sourceRoot":"","sources":["../../src/flows/assertion-tiers-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAGvD;;;;;;;;;;;;;GAaG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,CAAC,CAAC,MAAM,CACb,CAAC,CAAC,MAAM,CAAC;QACP,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC9E;oGAC4F;QAC5F,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KACzC,CAAC,CACH;CACF,CAAC,CAAC;AAQH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,MAAM,OAAO,mBAAmB;IACrB,GAAG,CAAiB;IACpB,KAAK,CAAS;IAEvB,YAAY,EAAkB,EAAE,IAAY;QAC1C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,EAAE,CAAC;YAC1C,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,MAAe,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QACD,MAAM,MAAM,GAAG,wBAAwB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAc,EAAE,CAAC;QAC1B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9D,GAAG,CAAC,IAAI,CAAC,GAAG;gBACV,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAoB,EAAE,CAAC;iBACtE,CAAC,CAAC;gBACH,OAAO,EAAE,KAAK,CAAC,OAAO;aACvB,CAAC;QACJ,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAgB;QACzB,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,uBAAuB,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;QAChG,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,MAAM,CAAC;QAChC,MAAM,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,kGAAkG;IAClG,KAAK,CAAC,aAAa,CACjB,IAAY,EACZ,KAA4B,EAC5B,UAA6B,EAAE;QAE/B,IAAI,CAAC;YACH,iGAAiG;YACjG,iGAAiG;YACjG,6FAA6F;YAC7F,yFAAyF;YACzF,MAAM,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,IAAI,EAAE;gBACxC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC9B,GAAG,CAAC,IAAI,CAAC,GAAG;oBACV,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;wBACvB,IAAI,EAAE,CAAC,CAAC,IAAI;wBACZ,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;qBACxD,CAAC,CAAC;oBACH,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC;iBACtB,CAAC;gBACF,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,gDAAgD;QAClD,CAAC;IACH,CAAC;CACF"}

package/dist/flows/buddy-status.d.ts

@@ -0,0 +1,25 @@
+/**
+ * The buddy channel. The co-dev experience for the HUMAN: a single ambient line they can park in
+ * a statusline or terminal and glance at — never a wall of output, never something they have to ask for.
+ *
+ * The rule this encodes: say the reassuring thing briefly and the alarming thing specifically. "41 flows
+ * nominal" needs no detail; a deviation needs its name, because a status line that says only "1 deviation"
+ * forces the human to go digging, which is exactly the work the buddy exists to remove.
+ */
+export interface BuddyStatusInput {
+    /** Every saved flow. */
+    total: number;
+    /** Flows with a passing artifact. */
+    passing: number;
+    /** Flows that changed files put at risk and that have NO passing artifact — the actionable set. */
+    deviations: readonly string[];
+    /** Flows quarantined as flaky — surfaced, never blocking. */
+    quarantined: readonly string[];
+}
+/**
+ * One line, safe to print on every save. Shape:
+ * `✓ 41 flows nominal`
+ * `✗ 2 deviations: checkout, billing · 39 nominal · 1 flaky quarantined`
+ */
+export declare function formatBuddyStatus(input: BuddyStatusInput): string;
+//# sourceMappingURL=buddy-status.d.ts.map

package/dist/flows/buddy-status.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buddy-status.d.ts","sourceRoot":"","sources":["../../src/flows/buddy-status.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,wBAAwB;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAKD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,gBAAgB,GAAG,MAAM,CAmBjE"}

package/dist/flows/buddy-status.js

@@ -0,0 +1,33 @@
+/**
+ * The buddy channel. The co-dev experience for the HUMAN: a single ambient line they can park in
+ * a statusline or terminal and glance at — never a wall of output, never something they have to ask for.
+ *
+ * The rule this encodes: say the reassuring thing briefly and the alarming thing specifically. "41 flows
+ * nominal" needs no detail; a deviation needs its name, because a status line that says only "1 deviation"
+ * forces the human to go digging, which is exactly the work the buddy exists to remove.
+ */
+/** How many deviation names to spell out before collapsing to a count (a status line must stay one line). */
+const MAX_NAMED = 2;
+/**
+ * One line, safe to print on every save. Shape:
+ * `✓ 41 flows nominal`
+ * `✗ 2 deviations: checkout, billing · 39 nominal · 1 flaky quarantined`
+ */
+export function formatBuddyStatus(input) {
+    const parts = [];
+    const deviations = input.deviations.length;
+    if (deviations === 0) {
+        parts.push(`✓ ${String(input.passing)}/${String(input.total)} flows nominal`);
+    }
+    else {
+        const named = input.deviations.slice(0, MAX_NAMED).join(', ');
+        const rest = deviations - Math.min(MAX_NAMED, deviations);
+        parts.push(`✗ ${String(deviations)} deviation${deviations === 1 ? '' : 's'}: ${named}${rest > 0 ? ` +${String(rest)} more` : ''}`);
+        parts.push(`${String(input.passing)} nominal`);
+    }
+    if (input.quarantined.length > 0) {
+        parts.push(`${String(input.quarantined.length)} flaky quarantined`);
+    }
+    return parts.join(' · ');
+}
+//# sourceMappingURL=buddy-status.js.map

package/dist/flows/buddy-status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buddy-status.js","sourceRoot":"","sources":["../../src/flows/buddy-status.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,6GAA6G;AAC7G,MAAM,SAAS,GAAG,CAAC,CAAC;AAEpB;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAuB;IACvD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;IAE3C,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAChF,CAAC;SAAM,CAAC;QACN,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CACR,KAAK,MAAM,CAAC,UAAU,CAAC,aAAa,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACvH,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,KAAK,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC3B,CAAC"}

package/dist/flows/coverage.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Verified-surface coverage — the buddy channel's honest answer to "is EVERYTHING working?". A green on
+ * three flows says nothing about the twelve testids never exercised. This measures the declared surface
+ * (contract testids/signals/flows) actually touched by passing verification, so "everything" is honest
+ * about what everything means. Pure set math; the deviation report + gate carry the number.
+ */
+export interface DeclaredSurface {
+    testids: readonly string[];
+    signals: readonly string[];
+    flows: readonly string[];
+}
+export interface CoverageDimension {
+    total: number;
+    covered: number;
+    /** Percent covered, rounded; 100 when nothing is declared (vacuously complete). */
+    pct: number;
+    /** Declared-but-never-exercised members — what "everything" is silently missing. */
+    uncovered: string[];
+}
+export interface Coverage {
+    testids: CoverageDimension;
+    signals: CoverageDimension;
+    flows: CoverageDimension;
+    /** Overall percent across all three dimensions combined. */
+    overallPct: number;
+}
+export declare function computeCoverage(declared: DeclaredSurface, exercised: DeclaredSurface): Coverage;
+//# sourceMappingURL=coverage.d.ts.map

package/dist/flows/coverage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.d.ts","sourceRoot":"","sources":["../../src/flows/coverage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,mFAAmF;IACnF,GAAG,EAAE,MAAM,CAAC;IACZ,oFAAoF;IACpF,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAED,MAAM,WAAW,QAAQ;IACvB,OAAO,EAAE,iBAAiB,CAAC;IAC3B,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,iBAAiB,CAAC;IACzB,4DAA4D;IAC5D,UAAU,EAAE,MAAM,CAAC;CACpB;AASD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,eAAe,GAAG,QAAQ,CAQ/F"}

package/dist/flows/coverage.js

@@ -0,0 +1,22 @@
+/**
+ * Verified-surface coverage — the buddy channel's honest answer to "is EVERYTHING working?". A green on
+ * three flows says nothing about the twelve testids never exercised. This measures the declared surface
+ * (contract testids/signals/flows) actually touched by passing verification, so "everything" is honest
+ * about what everything means. Pure set math; the deviation report + gate carry the number.
+ */
+function dimension(declared, exercised) {
+    const uncovered = declared.filter((d) => !exercised.has(d));
+    const covered = declared.length - uncovered.length;
+    const pct = declared.length === 0 ? 100 : Math.round((covered / declared.length) * 100);
+    return { total: declared.length, covered, pct, uncovered };
+}
+export function computeCoverage(declared, exercised) {
+    const testids = dimension(declared.testids, new Set(exercised.testids));
+    const signals = dimension(declared.signals, new Set(exercised.signals));
+    const flows = dimension(declared.flows, new Set(exercised.flows));
+    const total = testids.total + signals.total + flows.total;
+    const covered = testids.covered + signals.covered + flows.covered;
+    const overallPct = total === 0 ? 100 : Math.round((covered / total) * 100);
+    return { testids, signals, flows, overallPct };
+}
+//# sourceMappingURL=coverage.js.map

package/dist/flows/coverage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage.js","sourceRoot":"","sources":["../../src/flows/coverage.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAyBH,SAAS,SAAS,CAAC,QAA2B,EAAE,SAA8B;IAC5E,MAAM,SAAS,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;IACnD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC;IACxF,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,QAAyB,EAAE,SAA0B;IACnF,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,OAAO,GAAG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACxE,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAClE,MAAM,UAAU,GAAG,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;IAC3E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;AACjD,CAAC"}

package/dist/flows/decision.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../src/flows/decision.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EAErB,KAAK,cAAc,EAEnB,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AA0BzB,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,cAAc,CAyDvF;AAQD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAC,GACjE,YAAY,CAuBd"}
+{"version":3,"file":"decision.d.ts","sourceRoot":"","sources":["../../src/flows/decision.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,gBAAgB,EAErB,KAAK,cAAc,EAEnB,KAAK,YAAY,EAClB,MAAM,iBAAiB,CAAC;AAoCzB,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,cAAc,CAyDvF;AAQD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,aAAa,CAAC;IAAE,MAAM,EAAE,gBAAgB,CAAC;IAAC,IAAI,CAAC,EAAE,QAAQ,CAAA;CAAE,CAAC,GACjE,YAAY,CAuBd"}

package/dist/flows/decision.js

@@ -1,24 +1,33 @@
 import { AnchorKind, ReplayStatus, } from '@reticlehq/core';
 import { classifyFlowAssertions } from './flow-classify.js';
+import { SUCCESS_STEP_TOOL } from './flow-success.js';
 /**
  * Turn a replay result into the autonomy DECISION envelope — the judgement a human reviewer used to
  * make, expressed so a coding agent can act on it without one. Pure: no IO, no clock.
  *
- *   pass  → intent held; next action is none (or "add a consequence oracle" if the flow asserts nothing).
- *   drift → a locator/anchor missed; point at WHERE (file:line from the source anchor) + a rebind hint.
- *   fail  → an action ran but its consequence/success oracle didn't fire (green-but-wrong) — check the handler.
+ * pass → intent held; next action is none (or "add a consequence oracle" if the flow asserts nothing).
+ * drift → a locator/anchor missed; point at WHERE (file:line from the source anchor) + a rebind hint.
+ * fail → an action ran but its consequence/success oracle didn't fire (green-but-wrong) — check the handler.
  */
 /** The first step that drifted or failed (drift takes precedence as the legible cause). */
 function failingStep(steps) {
     return steps.find((s) => s.drift !== undefined) ?? steps.find((s) => !s.ok);
 }
-/** `file:line` for a step, preferring the recorded component anchor's source, else the live page. */
+/**
+ * `file:line` for a step, from whichever anchor recorded provenance — or nothing.
+ *
+ * It used to fall back to `step.page`, which meant a field named "whereInSource" could return
+ * "/checkout". The report writer renders it as **Where:** `<value>`, so a route arrived looking
+ * exactly like a file path. A locator that is sometimes a route cannot be trusted when it genuinely
+ * is a path, which costs more than the fallback ever added — the page is already reported separately
+ * on the step.
+ */
 function whereInSource(step, flow) {
     const anchor = flow?.steps[step.step]?.anchor;
-    if (anchor?.kind === AnchorKind.COMPONENT && anchor.source !== undefined) {
-        return `${anchor.source.file}:${anchor.source.line}`;
-    }
-    return step.page;
+    const source = anchor?.kind === AnchorKind.COMPONENT || anchor?.kind === AnchorKind.TESTID
+        ? anchor.source
+        : undefined;
+    return source === undefined ? undefined : `${source.file}:${String(source.line)}`;
 }
 export function buildDecision(result, flow) {
     const { name, status, steps } = result;
@@ -60,7 +69,7 @@ export function buildDecision(result, flow) {
     }
     // status error: an action failed, or the success oracle was not satisfied (green-but-wrong).
     const message = result.error?.message ?? step?.error ?? 'the flow failed';
-    const isSuccessOracle = step?.tool === 'success';
+    const isSuccessOracle = step?.tool === SUCCESS_STEP_TOOL;
     return {
         verdict: 'fail',
         summary: `"${name}" failed${step !== undefined ? ` at step ${step.step} (${step.anchor})` : ''}.`,

package/dist/flows/decision.js.map

@@ -1 +1 @@
-{"version":3,"file":"decision.js","sourceRoot":"","sources":["../../src/flows/decision.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,GAOb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAE5D;;;;;;;GAOG;AAEH,2FAA2F;AAC3F,SAAS,WAAW,CAAC,KAAuB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,qGAAqG;AACrG,SAAS,aAAa,CAAC,IAAoB,EAAE,IAA0B;IACrE,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9C,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACzE,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IACvD,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAwB,EAAE,IAAe;IACrE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAEvC,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;QAC/B,kGAAkG;QAClG,mDAAmD;QACnD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,eAAe,GAAG,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,MAAM;YACf,OAAO,EACL,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,IAAI,IAAI,sBAAsB,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,GAAG;gBAC3F,CAAC,CAAC,IAAI,IAAI,aAAa,KAAK,CAAC,MAAM,UAAU;YACjD,UAAU,EAAE,eAAe;gBACzB,CAAC,CAAC,wDAAwD;gBAC1D,CAAC,CAAC,4GAA4G;SACjH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzE,IAAI,MAAM,KAAK,YAAY,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,GAAG,GACP,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAChD,CAAC,CAAC,yBAAyB,KAAK,CAAC,OAAO,sBAAsB;YAC9D,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI;gBACtB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,4CAA4C;gBACtF,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI,IAAI,qBAAqB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI;YACnE,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,UAAU,EACR,GAAG,KAAK,SAAS;gBACf,CAAC,CAAC,GAAG,GAAG,kDAAkD;gBAC1D,CAAC,CAAC,WAAW,KAAK,IAAI,UAAU,6DAA6D;SAClG,CAAC;IACJ,CAAC;IAED,6FAA6F;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,KAAK,IAAI,iBAAiB,CAAC;IAC1E,MAAM,eAAe,GAAG,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC;IACjD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,IAAI,IAAI,WAAW,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;QACjG,WAAW,EAAE,OAAO;QACpB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,UAAU,EAAE,eAAe;YACzB,CAAC,CAAC,mHAAmH;YACrH,CAAC,CAAC,4FAA4F;KACjG,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc,CAAC,MAAoB;IAC1C,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9C,OAAO,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAkE;IAElE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,GAAG,GAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAC/E,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;QACrF,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,OAAO,GACX,MAAM,KAAK,CAAC;QACV,CAAC,CAAC,OAAO,KAAK,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO;QACnD,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,iBAAiB,MAAM,oBAAoB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5G,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"decision.js","sourceRoot":"","sources":["../../src/flows/decision.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,YAAY,GAOb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD;;;;;;;GAOG;AAEH,2FAA2F;AAC3F,SAAS,WAAW,CAAC,KAAuB;IAC1C,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CAAC,IAAoB,EAAE,IAA0B;IACrE,MAAM,MAAM,GAAG,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAC9C,MAAM,MAAM,GACV,MAAM,EAAE,IAAI,KAAK,UAAU,CAAC,SAAS,IAAI,MAAM,EAAE,IAAI,KAAK,UAAU,CAAC,MAAM;QACzE,CAAC,CAAC,MAAM,CAAC,MAAM;QACf,CAAC,CAAC,SAAS,CAAC;IAChB,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,MAAwB,EAAE,IAAe;IACrE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC;IAEvC,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;QAC/B,kGAAkG;QAClG,mDAAmD;QACnD,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC5E,MAAM,eAAe,GAAG,KAAK,EAAE,uBAAuB,KAAK,IAAI,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,CAAC;QAC5B,OAAO;YACL,OAAO,EAAE,MAAM;YACf,OAAO,EACL,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,IAAI,IAAI,sBAAsB,MAAM,KAAK,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,GAAG;gBAC3F,CAAC,CAAC,IAAI,IAAI,aAAa,KAAK,CAAC,MAAM,UAAU;YACjD,UAAU,EAAE,eAAe;gBACzB,CAAC,CAAC,wDAAwD;gBAC1D,CAAC,CAAC,4GAA4G;SACjH,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAEzE,IAAI,MAAM,KAAK,YAAY,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/D,MAAM,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QACvB,MAAM,GAAG,GACP,KAAK,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,KAAK,IAAI;YAChD,CAAC,CAAC,yBAAyB,KAAK,CAAC,OAAO,sBAAsB;YAC9D,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,IAAI;gBACtB,CAAC,CAAC,2BAA2B,KAAK,CAAC,OAAO,4CAA4C;gBACtF,CAAC,CAAC,SAAS,CAAC;QAClB,OAAO;YACL,OAAO,EAAE,OAAO;YAChB,OAAO,EAAE,IAAI,IAAI,qBAAqB,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI;YACnE,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxD,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,UAAU,EACR,GAAG,KAAK,SAAS;gBACf,CAAC,CAAC,GAAG,GAAG,kDAAkD;gBAC1D,CAAC,CAAC,WAAW,KAAK,IAAI,UAAU,6DAA6D;SAClG,CAAC;IACJ,CAAC;IAED,6FAA6F;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,OAAO,IAAI,IAAI,EAAE,KAAK,IAAI,iBAAiB,CAAC;IAC1E,MAAM,eAAe,GAAG,IAAI,EAAE,IAAI,KAAK,iBAAiB,CAAC;IACzD,OAAO;QACL,OAAO,EAAE,MAAM;QACf,OAAO,EAAE,IAAI,IAAI,WAAW,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG;QACjG,WAAW,EAAE,OAAO;QACpB,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,UAAU,EAAE,eAAe;YACzB,CAAC,CAAC,mHAAmH;YACrH,CAAC,CAAC,4FAA4F;KACjG,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,SAAS,cAAc,CAAC,MAAoB;IAC1C,IAAI,MAAM,KAAK,YAAY,CAAC,EAAE;QAAE,OAAO,MAAM,CAAC;IAC9C,OAAO,MAAM,KAAK,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC1D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAkE;IAElE,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,MAAM,KAAK,YAAY,CAAC,EAAE,EAAE,CAAC;YACtC,MAAM,IAAI,CAAC,CAAC;YACZ,SAAS;QACX,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChE,MAAM,GAAG,GAAoB,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,IAAI,QAAQ,CAAC,WAAW,KAAK,SAAS;YAAE,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;QAC/E,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;QACrF,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;QACrC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC;IAC1B,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,OAAO,GACX,MAAM,KAAK,CAAC;QACV,CAAC,CAAC,OAAO,KAAK,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,OAAO;QACnD,CAAC,CAAC,GAAG,MAAM,IAAI,KAAK,iBAAiB,MAAM,oBAAoB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5G,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC9D,CAAC"}

package/dist/flows/flake-store.d.ts

@@ -0,0 +1,20 @@
+import type { FileSystemPort } from '../project/fs-port.js';
+import { type FlakeLedger } from './flake.js';
+export declare const FLAKE_FILE_VERSION = 1;
+/**
+ * Persists the per-flow flake ledger at `.reticle/flake.json`. Local single-project memory (stays OSS —
+ * OSS-VS-SERVER). Loads never throw: missing/malformed/wrong-version degrades to an empty ledger, so
+ * a bad file never blocks a gate — it just re-learns flakiness. `record` accrues one unchanged-code
+ * replay outcome; `flakyFlows` is what the gate quarantines.
+ */
+export declare class FlakeStore {
+    #private;
+    constructor(fs: FileSystemPort, root: string);
+    load(): Promise<FlakeLedger>;
+    save(ledger: FlakeLedger): Promise<void>;
+    /** Accrue one unchanged-code replay outcome for a flow and persist. */
+    record(flow: string, passed: boolean): Promise<void>;
+    /** The flows currently quarantined as flaky — what the gate excludes from blocking. */
+    flakyFlows(): Promise<string[]>;
+}
+//# sourceMappingURL=flake-store.d.ts.map

package/dist/flows/flake-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"flake-store.d.ts","sourceRoot":"","sources":["../../src/flows/flake-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D,OAAO,EAAwD,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAEpG,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC;;;;;GAKG;AACH,qBAAa,UAAU;;gBAIT,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;IAKtC,IAAI,IAAI,OAAO,CAAC,WAAW,CAAC;IAkB5B,IAAI,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC;IAQ9C,uEAAuE;IACjE,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IAM1D,uFAAuF;IACjF,UAAU,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;CAMtC"}

package/dist/flows/flake-store.js

@@ -0,0 +1,59 @@
+import { dirname } from 'node:path';
+import { reticleDirPaths } from '../project/reticle-dir.js';
+import { FlakeFileSchema, emptyRecord, isFlaky, recordOutcome } from './flake.js';
+export const FLAKE_FILE_VERSION = 1;
+/**
+ * Persists the per-flow flake ledger at `.reticle/flake.json`. Local single-project memory (stays OSS —
+ * OSS-VS-SERVER). Loads never throw: missing/malformed/wrong-version degrades to an empty ledger, so
+ * a bad file never blocks a gate — it just re-learns flakiness. `record` accrues one unchanged-code
+ * replay outcome; `flakyFlows` is what the gate quarantines.
+ */
+export class FlakeStore {
+    #fs;
+    #path;
+    constructor(fs, root) {
+        this.#fs = fs;
+        this.#path = reticleDirPaths(root).flake;
+    }
+    async load() {
+        let text;
+        try {
+            text = await this.#fs.readFile(this.#path);
+        }
+        catch (error) {
+            if (this.#fs.isNotFound(error))
+                return {};
+            throw error;
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(text);
+        }
+        catch {
+            return {};
+        }
+        const result = FlakeFileSchema.safeParse(parsed);
+        return result.success ? result.data.flows : {};
+    }
+    async save(ledger) {
+        await this.#fs.mkdir(dirname(this.#path));
+        const body = `${JSON.stringify({ version: FLAKE_FILE_VERSION, flows: ledger }, null, 2)}\n`;
+        const tmp = `${this.#path}.tmp`;
+        await this.#fs.writeFile(tmp, body);
+        await this.#fs.rename(tmp, this.#path);
+    }
+    /** Accrue one unchanged-code replay outcome for a flow and persist. */
+    async record(flow, passed) {
+        const ledger = await this.load();
+        ledger[flow] = recordOutcome(ledger[flow] ?? emptyRecord(), passed);
+        await this.save(ledger);
+    }
+    /** The flows currently quarantined as flaky — what the gate excludes from blocking. */
+    async flakyFlows() {
+        const ledger = await this.load();
+        return Object.entries(ledger)
+            .filter(([, record]) => isFlaky(record))
+            .map(([flow]) => flow);
+    }
+}
+//# sourceMappingURL=flake-store.js.map