@sdd-method/verify-cli 5.5.0 → 5.5.1

package/dist/lib/validate/behaviour-store.js

@@ -273,6 +273,25 @@ async function gitShow(repo, commit, path) {
         return null;
     }
 }
+/** Files under a directory on disk, relative to it, sorted. */
+async function filesUnder(root, rel = "") {
+    const out = [];
+    let entries;
+    try {
+        entries = await readdir(join(root, rel), { withFileTypes: true });
+    }
+    catch {
+        return out;
+    }
+    for (const e of entries) {
+        const p = rel ? `${rel}/${e.name}` : e.name;
+        if (e.isDirectory())
+            out.push(...(await filesUnder(root, p)));
+        else
+            out.push(p);
+    }
+    return out.sort();
+}
 /** Paths under a directory at a commit, relative to that directory. */
 async function gitFiles(repo, commit, dir) {
     try {
@@ -1133,6 +1152,46 @@ export async function checkBehaviourStore(repo, options = {}) {
         lines.push(`open baselines: ${openBaselines.length}, asked the archive's questions as warnings`);
     const unseen = servedBy === null ? "" : `; repositories with no catalogue contracts: ${[...new Set(await observedInAll(repo, archiveRel, order))].filter((r) => (servedBy.get(r)?.served ?? []).length === 0).join(", ") || "none"}`;
     lines.push(baselines === 0 ? "surfaces: vacuous (no baseline)" : `surfaces: ${baselines} baseline(s), ${surfacesChecked} served contract(s) checked against catalogues/repo_contract.csv less what service_contract records only consumed${unseen}${structureOnly ? `; ${structureOnly} structure-only baseline(s) admitting no behaviour, Surfaces: none` : ""}${generatedBaselines ? `; ${generatedBaselines} generator baseline(s) serving no contract, Surfaces: generated` : ""}${noneServedBaselines ? `; ${noneServedBaselines} baseline(s) of services serving no contract, Surfaces: none served` : ""}${historical.size ? `; ${historical.size} historical baseline(s) not checked (every requirement they baselined has left the living specs)` : ""}`);
+    // Archive integrity (sdm-9sk1): what MERGED is not edited. An archived change's spec deltas and structural deltas
+    // (specs/**, structure/** with applied.yaml) are what entered the living model and what the history catalogues are
+    // derived from (requirement_lineage, revisions, change_effects); editing one after it archived makes the history
+    // claim something entered that never did. A mistake there is fixed by a new change (a corrective baseline, for a
+    // baseline). Every other file of an archived change is bookkeeping (evidence notes, errata, tasks, a deferral) and may
+    // be corrected; git is the record of who changed what. Each archived change is compared with its tree at the commit
+    // that added it; without git history the check is unresolved, never a pass.
+    if (history) {
+        let checkedArchives = 0;
+        let payloadFiles = 0;
+        let bookkeepingEdits = 0;
+        const payload = (f) => f.startsWith("specs/") || f.startsWith("structure/");
+        for (const name of order) {
+            const dir = `${archiveRel}/${name}`;
+            const at = await integratedAt(repo, dir);
+            if (at === null)
+                continue; // not yet committed: nothing archived to compare with
+            checkedArchives++;
+            const then = new Set(await gitFiles(repo, at, dir));
+            const now = new Set(await filesUnder(join(repo, dir)));
+            for (const f of [...new Set([...then, ...now])].sort()) {
+                const before = then.has(f) ? await gitShow(repo, at, `${dir}/${f}`) : null;
+                const after = now.has(f) ? await readText(join(repo, dir, f)) : null;
+                if (payload(f))
+                    payloadFiles++;
+                if (before === after)
+                    continue;
+                if (!payload(f)) {
+                    bookkeepingEdits++;
+                    continue;
+                }
+                const what = before === null ? "added to" : after === null ? "removed from" : "edited in";
+                failures.push(`${dir}/${f}: ${what} an archived change after it archived (at ${at.slice(0, 12)}); its spec and structural deltas are what merged into the living model, so a mistake there is fixed by a new change (a corrective baseline, for a baseline), not by editing the archive`);
+            }
+        }
+        lines.push(`archive integrity: ${checkedArchives} archived change(s), ${payloadFiles} merged delta file(s) compared with the commit that archived them${bookkeepingEdits ? `; ${bookkeepingEdits} later correction(s) to bookkeeping files (evidence, tasks, notes), which may be corrected` : ""}`);
+    }
+    else if (archived.length > 0) {
+        lines.push("archive integrity: not checked (no git history: run from a clone)");
+    }
     lines.push(scopeChecked === 0 ? "scope: vacuous (no baseline removes, modifies or renames a requirement)" : `scope: ${scopeChecked} requirement(s) a baseline removes, modifies or renames, checked against their lineage`);
     if (!history && archived.length > 0)
         lines.push("order: no git history (not a git work tree, or git log failed), so same-day archives cannot be ordered");

package/dist/maintain-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "0.19.0",
-  "built_against_sdd_cli": "5.5.0"
+  "version": "0.19.1",
+  "built_against_sdd_cli": "5.5.1"
 }

package/dist/verify-version.json

@@ -1,4 +1,4 @@
 {
-  "version": "5.5.0",
-  "built_against_sdd_cli": "5.5.0"
+  "version": "5.5.1",
+  "built_against_sdd_cli": "5.5.1"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@sdd-method/verify-cli",
-  "version": "5.5.0",
-  "sddCliVersion": "5.5.0",
+  "version": "5.5.1",
+  "sddCliVersion": "5.5.1",
   "description": "Verify an SDD repository without changing it — validate, list, and read-only catalogue and pack checks. Ships only the code those verbs reach; it cannot write to the repository it is pointed at. Authoring and maintenance are in @sdd-method/sdd-cli.",
   "license": "UNLICENSED",
   "type": "module",