@sdd-method/sdd-cli 1.1.0 → 1.3.0

package/dist/lib/catalogue/canonical-schema.yaml

@@ -58,13 +58,105 @@
 # `[finding] external`) and validated by the aggregator after merge.
 # Default for unspecified `external` is `false` (internal FK).
 #
-# Conceptual model: see docs/method/methods/catalogue-metamodel.md.
-# Builder contract: see docs/method/methods/catalogue-builder-specification.md.
-# Category taxonomy: see docs/method/methods/product-category-taxonomy.md.
+# Conceptual model: see docs/method/methods/guides/catalogue-metamodel.md.
+# Builder contract: see docs/method/methods/guides/catalogue-builder-specification.md.
+# Category taxonomy: see docs/method/methods/standards/product-category-taxonomy.md.
 
-schema_version: "3.1.0"
+schema_version: "3.2.0"
 schema_owner: "sdd-method"
 schema_status: "canonical"
+# Bump rationale (3.2.0 — additive minor, 2026-08-06, per M-ADR 0205 §4.5):
+# the rubric score registries join the catalogue metamodel. Two new catalogues
+# and four new enums; no existing column, catalogue or enum is touched.
+#
+#   1. `quality_scores` — one row per (target, rubric), derived from
+#      `orchestration/gate-registry/<rubric>-scores.yaml`. The authored surface
+#      stays YAML (a score is a judgment, authored where it asserts intent);
+#      these rows are derived and never edited.
+#   2. `quality_score_dimensions` — the per-dimension child. A child catalogue
+#      is FORCED, not stylistic: the fifteen rubrics carry fifteen disjoint
+#      dimension vocabularies (45 distinct keys measured in one estate), so no
+#      fixed column set can hold them.
+#   3. Enums `quality_gate`, `score_selection_method`, `staleness_basis`,
+#      `scoring_form`. NONE is bound via column_enums — see quality_gate for
+#      the measured reason, which is the opposite lesson to 3.1.3's: there the
+#      defect was a binding that checked nothing, here the defect would be a
+#      binding that hard-fails an estate over a value it deliberately declared
+#      in its own registry header.
+#
+# Three shapes the survey behind this bump found, recorded because a builder
+# written from the templates alone would get all three wrong (full record:
+# the Phase-B B0 survey, 2026-08-06):
+#   - The live forward-estate data is FLAT, not the nested current/reviews
+#     shape all fifteen method templates specify. Reading only the template
+#     shape catalogues 6 entries out of 204.
+#   - The registry container key is unreliable (4 of 10 drift from the method
+#     template) and non-unique (`domains` and `capabilities` each name two
+#     different rubrics), so rubric_id comes from registry_type-or-filename.
+#   - `corpus_ref` — which M-ADR 0205 §4.5 names and the coverage instrument's
+#     staleness rule depends on — is authored NOWHERE today. It is introduced
+#     here as new authoring with a computed `scored_at` fallback, and
+#     `staleness_basis` records which of the two a row can actually use. A
+#     staleness verdict whose basis is unstated is not a measurement.
+# `evidence_ref`, also named in §4.5, is deliberately NOT added: nothing
+# authors it in any registry in either estate, and shipping it would create
+# exactly the inert column that 2.48.0 deprecated `products.status` over.
+# ACTIVATION NOTE (M-ADR 0200 §4.6): additive only — no existing row changes
+# value and no existing check changes verdict. The new catalogues emit
+# headers-only in any SDD without a gate-registry directory, which is every
+# SDD in the method repo's own estate except the roots.
+# Backward-compatible; SCHEMA_COMPAT "^3.0.0".
+# Bump rationale (3.1.3 — patch, 2026-08-05): `repositories.column_enums`
+# bound `service_type` — the AUTHORING field's name — but the catalogue
+# column that carries the value is `component_type` (the builder maps
+# repo-config `service_type` into it). A binding to a column the catalogue
+# does not declare validated as vacuously true from 3.0.0 on: the in-memory
+# enum validator read an absent cell as empty and skipped it. Found by the
+# M-ADR 0205 §4.3 schema-driven DDL generator, whose engine refused the
+# binding instead of skipping it. The binding key is corrected to
+# `component_type` and the service_type enum's description corrected to name
+# the real column. ACTIVATION NOTE (M-ADR 0200 §4.6): correcting the key
+# activates enum validation on values the wrong key never checked; measured
+# before shipping across both estate classes' built repository catalogues —
+# one estate carries 14 rows with an out-of-vocabulary improvised value, the
+# other none. Those 14 become error-severity findings at that estate's first
+# build on a CLI carrying this schema; the remedial route is re-declaring
+# the repo-config `service_type` inside the enum (profile already conveys
+# what the improvised value tried to say, per §7.1).
+# Bump rationale (3.1.2 — comment-only patch, 2026-08-05): records the 3.1.0
+# entry below, which shipped without one — the rationale lived only in
+# M-ADR 0204 and the cut commit. No structural change; no column, enum, or
+# catalogue touched.
+# Bump rationale (3.1.1 — comment-only patch, 2026-08-05): corrects the three
+# companion-doc pointers above, stale since the docs moved under
+# methods/guides/ and methods/standards/. No structural change; no column,
+# enum, or catalogue touched.
+# Bump rationale (3.1.0 — additive minor, 2026-08-03, per M-ADR 0204): the
+# target-locus change-set on `product_platform_dependencies`. A dependency row
+# can now declare that its target is NOT the platform:
+#   1. `target_locus` added (closed enum `platform | external | legacy`;
+#      absent/empty = platform, so every pre-3.1.0 row keeps its exact
+#      meaning). A statement about the TARGET only — never about the consuming
+#      product, and never a stability/lifecycle/quality claim. Before this
+#      column, off-platform targets had nowhere to go and corrupted other
+#      fields (external/legacy smuggled into required_stability; a product's
+#      own feature slug forced into target_capability_id).
+#   2. `target_external_system_id` added: for external|legacy rows, the
+#      M-ADR 0189 external-system entry id the dependency targets. Authored in
+#      the source file's service_id slot; the builder routes it here so the FK
+#      columns stay clean. Deliberately NOT a declared FK — corroboration
+#      against c4_external_systems is WARNING-severity at aggregation
+#      (0204 §4.2) because the C4 surface may legitimately lag discovery, and
+#      a declared FK can only fail.
+#   3. `target_capability_id` becomes conditionally nullable (0204 §4.3, the
+#      2.36.0 / M-ADR 0192 precedent): EMPTY when target_locus is
+#      external|legacy — there is no platform capability to name. A
+#      platform-locus row still requires it.
+#   4. The PK gains an off-platform form:
+#      {product_id}__{target_locus}__{target_external_system_id}, falling back
+#      to contract_path when no external-system id is named.
+# external/legacy rows skip platform resolution and the F18 realiser-join,
+# with every skip named.
 # Bump rationale (3.0.0 — BREAKING major, 2026-07-29, per M-ADR 0203): the 2.x line's
 # five deferred breaks land as one audited cut, each a complete change-set in the
 # M-ADR 0200 §4.1 sense. This entry records each break as its change-set lands:
@@ -514,6 +606,75 @@ schema_status: "canonical"
 
 enums:
 
+  quality_gate:
+    description: >
+      Gate verdict a rubric assessment records for a target, in
+      `quality_scores.gate` (per M-ADR 0205 §4.5). The vocabulary all fifteen
+      method-side gate registries declare.
+
+      DELIBERATELY NOT BOUND via `column_enums`, and the reason is measured
+      rather than assumed — do not "fix" this by binding it. These values come
+      from hand-authored score registries written by scoring runs, not from a
+      method-mandated authoring surface, and one estate's
+      `domain-architecture-scores.yaml` DECLARES AN EXTENDED VOCABULARY IN ITS
+      OWN FILE HEADER (`pass | pass-with-waiver | conditional | fail |
+      unscored`) and uses the extra value once. Binding would hard-fail that
+      estate's entire build over one deliberate, self-documented row. This
+      follows the `products.synthesis_band` precedent — the other column fed
+      from a rubric registry — where an out-of-vocabulary value is reported as
+      a convention finding and the cell left EMPTY, rather than emitting a
+      value no consumer can interpret. The builder names the file, the entry,
+      the value and the remedy, which is better diagnosis than a generic enum
+      violation could give. Contrast `service_type`, which IS bound: it comes
+      from repo-config, an authoring surface the method mandates.
+    values:
+      - { value: pass, description: "Meets the rubric's pass threshold with no hard gate triggered." }
+      - { value: conditional, description: "Below threshold or carrying flags — remediation required, not a failure." }
+      - { value: fail, description: "Below the fail threshold, or a hard gate triggered." }
+      - { value: unscored, description: "The entry exists but carries no assessment. Distinct from absent: an unscored row asserts that nothing has been judged, which is exactly the silence M-ADR 0205 §4.5's coverage instrument exists to make loud." }
+
+  score_selection_method:
+    description: >
+      How the effective review was chosen from a target's review history, in
+      `quality_scores.selection_method` — the `selection_policy.method` field
+      every gate registry carries. The catalogue models only the EFFECTIVE
+      score (one row per target/rubric); this column makes the row say WHICH
+      review it is rather than implying there was only one. Not bound, for the
+      same registry-authored reason as `quality_gate`.
+    values:
+      - { value: latest, description: "Most recent review by scored_at. The default and, at 2026-08-06, the only value in use across either estate." }
+      - { value: human-selected, description: "A human chose the effective review over the automatic pick." }
+      - { value: consensus, description: "Effective score reconciled across several reviews." }
+      - { value: highest-severity, description: "The most severe review wins — the conservative policy for gate-blocking rubrics." }
+
+  staleness_basis:
+    description: >
+      Which anchor a `quality_scores` row's staleness verdict can be computed
+      from, in `quality_scores.staleness_basis`. This column exists because a
+      staleness verdict whose basis is unstated is not a measurement — the
+      basis-error class that produced six wrong figures in a single day of this
+      method's own arc. The coverage predicate MUST NOT be able to emit a
+      staleness claim without naming which of these it used.
+    values:
+      - { value: corpus_ref, description: "The row carries the commit the assessment read — the precise anchor. Authored; introduced by the M-ADR 0205 §4.5 change-set, so absent from every score written before it." }
+      - { value: scored_at, description: "No corpus_ref; staleness computed from the assessment date against the target's last content change, resolved through target_path. Correct but coarser — it cannot distinguish a re-commit that changed nothing from a real edit." }
+      - { value: none, description: "Neither anchor available (no corpus_ref and no resolvable target_path). Staleness is UNKNOWN for this row and must be reported as unknown, never as fresh." }
+
+  scoring_form:
+    description: >
+      The scoring shape a rubric uses, in `quality_scores.scoring_form`.
+      Reserved by M-ADR 0205 §4.5 so the banded reverse family can arrive
+      additively without reshaping rows.
+
+      Only `weighted` is declared. The reverse estate's banded form (0-2 across
+      5-6 dimensions with strong/working/weak/not-usable bands) is real and
+      measured — 142 registry files, 501 scored units — but is NOT modelled
+      yet, so its value is deliberately absent rather than declared-and-unemitted:
+      if a builder emits a banded row before that change-set lands, it should
+      fail loudly, not pass against a vocabulary entry nothing produces.
+    values:
+      - { value: weighted, description: "Weighted 1-5 dimensions rolled into a weighted_score against a pass threshold, with flags and hard gates. The forward house form; all fifteen method-side registries use it." }
+
   c4_system_kind:
     description: >
       Architectural kind of a C4 system. Derived 1:1 from the originating
@@ -556,7 +717,7 @@ enums:
   service_type:
     description: >
       Type of repository, declared in `orchestration/repo-config/*.yaml` as
-      `service_type` and surfaced in `repositories.service_type` and
+      `service_type` and surfaced in `repositories.component_type` and
       `services.component_type`. The canonical builder uses this to decide
       which repos are runtime services (api_service, worker, gateway,
       frontend, mobile) and which are non-runtime (library, infrastructure,
@@ -1077,7 +1238,7 @@ catalogues:
       - { name: doc_path, type: string, nullable: false }
       - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
     column_enums:
-      service_type: enums.service_type  # canonical builder validates against the service_type enum above
+      component_type: enums.service_type  # the repo-config `service_type` value lands in THIS column (3.1.3 — the binding previously named the authoring field and checked nothing)
 
   domain_models:
     primary_key: id
@@ -1881,3 +2042,91 @@ catalogues:
       - { name: needs_triage, type: boolean, nullable: false, description: "True when any asymmetry exists. Triage, not auto-fail (M-ADR 0180 §2.3)." }
       - { name: run_date, type: string, nullable: false, description: "ISO date of the conformance run — the snapshot stamp enabling trend over time." }
       - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }
+
+  quality_scores:
+    primary_key: id
+    description: >
+      Rubric assessment of a target artefact, one row per (target, rubric), per
+      M-ADR 0205 §4.5. Source: `orchestration/gate-registry/<rubric>-scores.yaml`
+      — the authored surface stays YAML because a score is a judgment, authored
+      where it asserts intent; these rows are DERIVED and never edited.
+
+      Models the EFFECTIVE score only — `current`, as chosen by the registry's
+      `selection_policy`. The authored `reviews[]` history is deliberately not
+      catalogued: variable-length history in a fixed-grain catalogue would give
+      two answers to "what is the score". `review_run_id` and
+      `selection_method` make each row name which review it is.
+
+      THE BUILDER MUST READ TWO AUTHORED DIALECTS. All fifteen method-side
+      templates specify a nested shape (`selection_policy` / `current` /
+      `reviews`), but the live forward-estate data is overwhelmingly FLAT —
+      `gate`/`weighted_score`/`scored_at`/`scored_by`/`scores`/`flags` directly
+      on the entry. Measured 2026-08-06: reading only the template shape would
+      catalogue 6 entries out of 204. The templates were modernised; the data
+      was not migrated, and both are legitimate.
+
+      `rubric_id` comes from the file's `registry_type` when declared, else the
+      filename stem minus `-scores` — NEVER the container key, which is
+      unreliable (4 of 10 forward registries drift from the method template)
+      and non-unique (`domains` names both domain-architecture and
+      intent-quality; `capabilities` names both feature-grounding and
+      traceability-manifest).
+
+      Scope: the weighted house form only. The banded reverse family is
+      additive later via `scoring_form` (see that enum).
+    foreign_keys:
+      - { column: sdd_id, references: products.id, nullable: true }
+    columns:
+      - { name: id, type: string, nullable: false, description: "PK: {rubric_id}__{target_kind}__{target_ref}. Composite in one slug because the natural key is a triple and the rest of this schema keys on a single `id`." }
+      - { name: rubric_id, type: string, nullable: false, description: "The rubric that produced the assessment, e.g. adr-quality, contract-quality. From the registry's `registry_type` when declared, else the filename stem minus `-scores`. A `registry_type` disagreeing with its filename is a convention finding, never a silent preference." }
+      - { name: scoring_form, type: string, nullable: false, description: "Scoring shape — see the scoring_form enum. `weighted` for every row the current builder emits." }
+      - { name: target_kind, type: string, nullable: false, description: "What kind of thing was scored: adr | contract | c4_diagram | capability | domain | feature | product | repository | persona | screen | glossary | integration | user_story | work_order | strategic_doc. Polymorphic because scored units span catalogue entities and non-catalogued artefacts (M-ADR 0205 §4.5)." }
+      - { name: target_ref, type: string, nullable: false, description: "Identifier of the scored target, in the vocabulary of its kind. For ADRs this is the prefix-stripped catalogue id (M-ADR 0186 §4.4), matching `adrs.id`." }
+      - { name: target_path, type: string, nullable: true, description: "Repo-relative path to the scored artefact, from the entry's `file_path` where authored (7 of 15 registry shapes carry it). Doubles as the resolution anchor for `scored_at`-basis staleness — which is why its absence downgrades a row's staleness_basis to `none` rather than being cosmetic. Empty when the registry does not author it." }
+      - { name: gate, type: string, nullable: true, description: "Verdict — see the quality_gate enum, which is deliberately UNBOUND. An out-of-vocabulary value leaves this cell EMPTY and raises a convention finding naming the file, entry and value (the products.synthesis_band precedent). Empty therefore means either unauthored or out-of-vocabulary, and the finding distinguishes them." }
+      - { name: weighted_score, type: number, nullable: true, description: "The rubric's rolled-up weighted score. Empty for an unscored entry — which is a real state the registries author deliberately, not a gap." }
+      - { name: score_denominator, type: number, nullable: true, description: "Denominator the weighted_score was computed against, where the rubric records one (contract-quality does). Present so a score is never reported without its basis." }
+      - { name: scored_at, type: date, nullable: true, description: "Date of the effective assessment, from `scored_at` (the forward house form's field name — NOT `assessed_at`, which is the reverse family's file-level field). Date-typed: per the M-ADR 0205 §4.1 engine's TRY_CAST semantics, a prose value here is reported as a type nonconformance rather than aborting the load or being smoothed away — the `adrs.decision_date` case, which reverse practice already exercises." }
+      - { name: corpus_ref, type: string, nullable: true, description: "The commit the assessment read — the precise staleness anchor. NEW AUTHORING introduced by this change-set: no score written before it carries one, so this column is empty across both estates at introduction and fills forward as registries are rewritten. The reverse family already has the idea under a different name (`snapshot.source_revision`)." }
+      - { name: staleness_basis, type: string, nullable: false, description: "Which anchor this row's staleness can be computed from — see the staleness_basis enum. Emitted by the builder, never authored. Exists so no consumer can state a staleness verdict without its basis." }
+      - { name: review_run_id, type: string, nullable: true, description: "Identifier of the effective review run. Empty in the flat dialect, which records no run ids." }
+      - { name: selection_method, type: string, nullable: true, description: "How the effective review was chosen — see the score_selection_method enum. Empty in the flat dialect, which carries no selection_policy: absence means 'the only review', not 'policy unknown'." }
+      - { name: scorer_provider, type: string, nullable: true, description: "Provider of the scoring agent (e.g. anthropic), from `current.scorer.provider`. Every score in this method is agent-produced, so which agent produced a judgment is part of the judgment, not metadata about it." }
+      - { name: scorer_tool, type: string, nullable: true, description: "Tool the scoring agent ran in, from `current.scorer.tool`." }
+      - { name: scorer_model, type: string, nullable: true, description: "Model that produced the assessment, from `current.scorer.model`. In the flat dialect the whole provenance block collapses to a free-text `scored_by:`, which lands here — so a value like 'intent-quality-review — rfms-connector-library' is expected and correct for flat-dialect rows, not a parse defect." }
+      - { name: scorer_model_family, type: string, nullable: true, description: "Optional grouping field from `current.scorer.model_family`." }
+      - { name: scorer_prompt_version, type: string, nullable: true, description: "Optional prompt-wrapper version from `current.scorer.prompt_version` — the input that makes a score reproducible." }
+      - { name: flag_count, type: int, nullable: false, description: "Number of heuristic flags raised. Normalises two authored dialects: `flags: {name: bool}` (count the true ones) and `flags_raised: [names]` (count the list). A per-flag child catalogue is deliberately NOT built — it arrives when a named query needs to filter by flag name, not by accretion." }
+      - { name: hard_gate_triggered, type: boolean, nullable: false, description: "Whether any hard gate fired. Normalises `hard_gates: {triggered, reasons}` and `hard_gates_triggered: [reasons]`." }
+      - { name: required_actions_count, type: int, nullable: false, description: "Number of remediation actions the assessment recorded." }
+      - { name: sdd_id, type: string, nullable: true, description: "SDD whose gate-registry authored this row. Soft FK to products.id — nullable because a registry can score targets in an SDD that emits no product row." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134; left empty by per-SDD builders." }
+
+  quality_score_dimensions:
+    primary_key: id
+    description: >
+      One row per (target, rubric, dimension) — the per-dimension detail behind
+      a `quality_scores` row, per M-ADR 0205 §4.5.
+
+      A child catalogue rather than columns, and this is forced rather than
+      stylistic: the fifteen rubrics carry FIFTEEN DISJOINT dimension
+      vocabularies (`A1`-`A8`, `C1`-`C8`, `G1`-`G7`, `T1`-`T7`, `D1`-`D6`,
+      `S1`-`S6`, `I1`-`I6`, plus five fully-named sets such as
+      `definition_precision` and `intent_fidelity`) — 45 distinct keys measured
+      in one estate alone. No fixed column set can hold them; serialised JSON in
+      a cell would be unjoinable and break the relational metamodel; generic
+      `d1..d8` columns would be lossy and re-create the positional-index failure
+      class. A child table is what this metamodel already does for every
+      one-to-many, and it joins natively on the M-ADR 0205 §4.1 engine.
+    foreign_keys:
+      - { column: quality_score_id, references: quality_scores.id, nullable: false }
+    columns:
+      - { name: id, type: string, nullable: false, description: "PK: {quality_score_id}__{dimension_key}." }
+      - { name: quality_score_id, type: string, nullable: false, description: "The assessment this dimension belongs to." }
+      - { name: rubric_id, type: string, nullable: false, description: "Denormalised from the parent so per-rubric dimension queries need no join." }
+      - { name: target_kind, type: string, nullable: false, description: "Denormalised from the parent." }
+      - { name: target_ref, type: string, nullable: false, description: "Denormalised from the parent." }
+      - { name: dimension_key, type: string, nullable: false, description: "The rubric's own dimension identifier, verbatim — `A1` where the rubric uses codes, `definition_precision` where it uses names. NOT normalised into a method-wide vocabulary: the key is how the rubric and its registry refer to the dimension, and rewriting it here would make the row untraceable to the rubric that produced it." }
+      - { name: dimension_score, type: number, nullable: true, description: "Score on that dimension. Empty for an unscored entry (the templates author explicit nulls)." }
+      - { name: dimension_weight, type: number, nullable: true, description: "Weight the rubric assigns the dimension, where discoverable. Usually EMPTY: weights live in the rubric document and the registry header comment, not per entry — so this column is honest about the fact that a weighted_score cannot currently be recomputed from these rows alone." }
+      - { name: source_sdd_id, type: string, nullable: true, description: "Originating SDD slug. Populated by the aggregator per M-ADR 0134." }

package/dist/lib/catalogue/coverage-predicates.d.ts

@@ -0,0 +1,176 @@
+/**
+ * Coverage predicates as SQL — M-ADR 0205 §4.4 (engine-evolution Phase A3).
+ *
+ * Declarative re-expressions of the participation-constraint predicates —
+ * the four catalogue-classics:
+ *
+ *   - repo_capability   (M-ADR 0188): every catalogued repository resolves
+ *     to a capability or declares an exemption; orphans classified by
+ *     whether the capability_service ⋈ services.primary_repo_id derivation
+ *     COULD have fired (shape a / claimed-but-unresolved / shape b).
+ *   - service_capability (M-ADR 0133 §4.2b): every catalogued service is
+ *     claimed or exempt; tier is explicit and asymmetric per M-ADR 0196
+ *     §4.3 (`orphaned` is aggregate-only; member tier reports
+ *     `unresolved-locally`, cause-agnostic); the Path-X leverage axis is
+ *     reported separately and only when repo_capability.csv exists.
+ *   - event_coverage    (WS3): every catalogued event is attributed to a
+ *     runtime — service_event edge or resolving publisher column — with
+ *     the contract-twin alternative route, the column-vs-edge disagreement
+ *     controls, and the chain-readout/consumer-enumerability metric lines
+ *     that are never verdicts.
+ *   - contract_coverage (WS2): every catalogued contract is reachable —
+ *     capability_contract or service_contract — with the three computed
+ *     exclusions (deprecated / provider-surface / not-an-interface, the
+ *     last a positive READ of the spec file), the covered-as-event
+ *     alternative route, and the M-ADR 0202 availability-manifest info
+ *     surface. File and YAML ingestion stay host-side; set logic is SQL.
+ *
+ * The shell scripts in sdd-method's orchestration/scripts/ remain the
+ * REFERENCE implementations until A4 cutover: any semantic change lands
+ * there first and here second, and the dual-run driver compares the two
+ * as structured findings — (kind, subject, classification, leverage) plus
+ * every metric integer — never as prose.
+ *
+ * The relations live in SQL; the classification branching mirrors the
+ * reference implementations statement-for-statement, including their
+ * duplicate-row semantics (a duplicated id is counted and reported per
+ * ROW, never deduplicated away).
+ */
+import type { EngineSession } from "./engine-validator.js";
+export type CoverageTier = "member" | "aggregate";
+export interface CoverageFinding {
+    readonly predicate: "repo_capability" | "service_capability" | "event_coverage" | "contract_coverage";
+    /**
+     * M-ADR 0132 §4.3 vocabulary member — plus `report`, which mirrors the
+     * event predicate's member-tier `[report]` lines (deliberately NOT a
+     * finding in the reference implementation, per M-ADR 0199 §4.3).
+     */
+    readonly kind: "orphan" | "divergence" | "coverage" | "report";
+    readonly subjectId: string;
+    /**
+     * repo_capability: conflict | shape_a | claimed_unresolved | shape_b.
+     * service_capability: conflict | orphaned | unresolved-locally.
+     */
+    readonly classification: string;
+    /** service_capability unresolved rows only, when the axis is computable. */
+    readonly leverage?: "yes" | "no" | "na";
+    /** Rendering ingredients (A4): the prose the reference lines carry. */
+    readonly exemptionReason?: string;
+    /** shape_a only: sorted unclaimed service ids (first three) + the full count. */
+    readonly unclaimedServices?: readonly string[];
+    readonly unclaimedCount?: number;
+    /** service_capability unresolved rows: the row's primary_repo_id. */
+    readonly primaryRepo?: string;
+}
+export interface RepoCapabilityMetrics {
+    readonly total: number;
+    readonly byCapability: number;
+    readonly byExemption: number;
+    readonly conflicting: number;
+    readonly unresolved: number;
+    readonly shapeA: number;
+    readonly shapeB: number;
+    readonly other: number;
+}
+export interface ServiceCapabilityMetrics {
+    readonly total: number;
+    readonly claimed: number;
+    readonly exempt: number;
+    readonly conflicting: number;
+    readonly unresolved: number;
+    readonly leverage?: {
+        readonly yes: number;
+        readonly no: number;
+        readonly na: number;
+    };
+}
+export declare function runRepoCapabilityCoverage(session: EngineSession): Promise<{
+    findings: readonly CoverageFinding[];
+    metrics: RepoCapabilityMetrics;
+}>;
+export interface ServiceCoverageOptions {
+    readonly tier: CoverageTier;
+    /**
+     * True when repo_capability.csv EXISTS for this catalogue set (even
+     * empty) — file-level presence, exactly as the reference implementation
+     * keys the leverage axis. An empty present file means every unresolved
+     * service with a primary repo reads leverage=yes; an absent file means
+     * the axis is omitted entirely, metric included.
+     */
+    readonly repoCapabilityAvailable: boolean;
+}
+export declare function runServiceCapabilityCoverage(session: EngineSession, options: ServiceCoverageOptions): Promise<{
+    findings: readonly CoverageFinding[];
+    metrics: ServiceCapabilityMetrics;
+}>;
+export interface EventCoverageOptions {
+    readonly tier: CoverageTier;
+}
+export interface EventCoverageControls {
+    /** publisher column set but unresolving against services. */
+    readonly colUnresolving: readonly {
+        eventId: string;
+        publisher: string;
+    }[];
+    /** publisher resolves but no publishes/produces edge exists. */
+    readonly colNoEdge: readonly string[];
+    /** publishes edge exists but the row's publisher column is empty. */
+    readonly edgeNoCol: readonly string[];
+}
+export interface EventCoverageMetrics {
+    readonly total: number;
+    readonly covered: number;
+    readonly viaContract: number;
+    readonly unresolved: number;
+    /** Chain readout, never a verdict (M-ADR 0199 §4.1). */
+    readonly capReach: number;
+    /** M-ADR 0057 analogue, never a verdict. */
+    readonly consumerEnum: number;
+}
+export interface EventCoverageResult {
+    /** True when the unit holds no event rows — a recorded state, not a rate. */
+    readonly na: boolean;
+    readonly findings: readonly CoverageFinding[];
+    readonly metrics?: EventCoverageMetrics;
+    readonly controls?: EventCoverageControls;
+}
+export declare function runEventCoverage(session: EngineSession, options: EventCoverageOptions): Promise<EventCoverageResult>;
+export interface ContractCoverageOptions {
+    readonly tier: CoverageTier;
+    /**
+     * The SDD root spec_path values are relative to. At aggregate tier a
+     * member's spec_path is relative to ITS OWN root, so the file is
+     * legitimately absent under the aggregate's root — the not-an-interface
+     * scope-out then simply does not fire, exactly as in the reference.
+     */
+    readonly sddRoot: string;
+}
+export interface ContractCoverageMetrics {
+    readonly total: number;
+    readonly covered: number;
+    readonly viaEvent: number;
+    readonly excluded: number;
+    readonly conflicting: number;
+    readonly unresolved: number;
+    readonly byExclusion: Readonly<Record<string, number>>;
+    /** M-ADR 0057 property — reported, never verdicted. May exceed the ids in contracts.csv. */
+    readonly consumersNamed: number;
+    readonly ownedOnly: number;
+    readonly attrOnly: number;
+    readonly both: number;
+}
+export interface ContractAvailabilityInfo {
+    readonly attested: number;
+    /** Manifest order, duplicates preserved — mirror of the reference list. */
+    readonly unmodelled: readonly string[];
+}
+export interface ContractCoverageResult {
+    readonly na: boolean;
+    readonly findings: readonly CoverageFinding[];
+    readonly metrics?: ContractCoverageMetrics;
+    /** Informational, never verdict-changing (M-ADR 0202). */
+    readonly availability?: ContractAvailabilityInfo;
+    readonly availabilityWarning?: string;
+}
+export declare function runContractCoverage(session: EngineSession, options: ContractCoverageOptions): Promise<ContractCoverageResult>;
+//# sourceMappingURL=coverage-predicates.d.ts.map

package/dist/lib/catalogue/coverage-predicates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverage-predicates.d.ts","sourceRoot":"","sources":["../../../src/lib/catalogue/coverage-predicates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAKH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAElD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,SAAS,EACd,iBAAiB,GACjB,oBAAoB,GACpB,gBAAgB,GAChB,mBAAmB,CAAC;IACxB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4EAA4E;IAC5E,QAAQ,CAAC,QAAQ,CAAC,EAAE,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC;IACxC,uEAAuE;IACvE,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,iFAAiF;IACjF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,qEAAqE;IACrE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE;QAClB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;QACpB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAwCD,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,aAAa,GACrB,OAAO,CAAC;IACT,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IACrC,OAAO,EAAE,qBAAqB,CAAC;CAChC,CAAC,CAiFD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B;;;;;;OAMG;IACH,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;CAC3C;AA+BD,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,sBAAsB,GAC9B,OAAO,CAAC;IACT,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IACrC,OAAO,EAAE,wBAAwB,CAAC;CACnC,CAAC,CAkFD;AAID,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,qBAAqB;IACpC,6DAA6D;IAC7D,QAAQ,CAAC,cAAc,EAAE,SAAS;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3E,gEAAgE;IAChE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,qEAAqE;IACrE,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,4CAA4C;IAC5C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,mBAAmB;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CAC3C;AAoDD,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CA4E9B;AAID,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACvD,4FAA4F;IAC5F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAC;IAC9C,QAAQ,CAAC,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAC3C,0DAA0D;IAC1D,QAAQ,CAAC,YAAY,CAAC,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;CACvC;AA+FD,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,aAAa,EACtB,OAAO,EAAE,uBAAuB,GAC/B,OAAO,CAAC,sBAAsB,CAAC,CAiJjC"}