@slowcook-ai/cli 0.19.6 → 0.20.0

package/dist/commands/eye/plan.js

@@ -0,0 +1,81 @@
+export const VIEWPORTS = {
+    mobile: { width: 390, height: 844 },
+    desktop: { width: 1280, height: 800 },
+};
+const SCHEMES = ["light", "dark"];
+/** Full default matrix: {mobile,desktop} × {light,dark}. */
+export const DEFAULT_MATRIX = Object.entries(VIEWPORTS).flatMap(([viewport, dim]) => SCHEMES.map((scheme) => ({ viewport, scheme, ...dim })));
+/**
+ * Build the capture matrix from a spec's declared `fidelity.modes` (pure).
+ * Tokens are dimension VALUES (`light`/`dark`/`mobile`/`desktop`), expanded to
+ * the product: a dimension with no declared value defaults to its full set
+ * (so `[dark]` → dark × {mobile,desktop}; `[mobile]` → {light,dark} × mobile).
+ * Unrecognised tokens are ignored; if NONE are recognised, the full default
+ * matrix is returned (fail-open — a typo never silently checks nothing).
+ */
+export function matrixFromModes(modes) {
+    const wanted = new Set(modes.map((m) => String(m).toLowerCase().trim()));
+    const viewports = Object.keys(VIEWPORTS).filter((v) => wanted.has(v));
+    const schemes = SCHEMES.filter((s) => wanted.has(s));
+    if (!viewports.length && !schemes.length)
+        return DEFAULT_MATRIX;
+    const vps = viewports.length ? viewports : Object.keys(VIEWPORTS);
+    const schs = schemes.length ? schemes : SCHEMES;
+    return vps.flatMap((viewport) => schs.map((scheme) => ({ viewport, scheme, ...VIEWPORTS[viewport] })));
+}
+/** Narrow a matrix by explicit --viewport / --scheme flags (pure). Validates. */
+export function narrowMatrix(base, opts) {
+    let m = base;
+    if (opts.viewport) {
+        if (!VIEWPORTS[opts.viewport]) {
+            throw new Error(`eye: unknown --viewport '${opts.viewport}' (have: ${Object.keys(VIEWPORTS).join(", ")})`);
+        }
+        m = m.filter((c) => c.viewport === opts.viewport);
+    }
+    if (opts.scheme) {
+        if (opts.scheme !== "light" && opts.scheme !== "dark")
+            throw new Error("eye: --scheme must be light|dark");
+        m = m.filter((c) => c.scheme === opts.scheme);
+    }
+    return m;
+}
+function val(args, flag) {
+    const i = args.indexOf(flag);
+    return i >= 0 ? args[i + 1] : undefined;
+}
+/**
+ * Parse `slowcook eye` flags. Required: --reference <url>, --candidate <url>.
+ * Optional: --story <id> (derive the matrix from the spec's fidelity.modes),
+ * --cwd <dir>, --out <dir>, --viewport <name> + --scheme <light|dark> (narrow),
+ * --max-violations <n>, --fail-on <a,b>. The returned `matrix` is the flag-only
+ * default; when `story` is set the runner rebuilds it from the spec.
+ */
+export function parseEyeArgs(args) {
+    const referenceUrl = val(args, "--reference");
+    const candidateUrl = val(args, "--candidate");
+    if (!referenceUrl || !candidateUrl) {
+        throw new Error("eye: --reference <url> and --candidate <url> are both required");
+    }
+    const viewport = val(args, "--viewport");
+    const scheme = val(args, "--scheme");
+    const matrix = narrowMatrix(DEFAULT_MATRIX, { viewport, scheme });
+    const maxV = val(args, "--max-violations");
+    const failOn = val(args, "--fail-on");
+    const gate = {};
+    if (maxV !== undefined)
+        gate.maxViolations = Number.parseInt(maxV, 10);
+    if (failOn)
+        gate.failOnAxes = failOn.split(",").map((s) => s.trim());
+    return {
+        referenceUrl,
+        candidateUrl,
+        outDir: val(args, "--out") ?? ".brewing/eye",
+        matrix,
+        gate,
+        story: val(args, "--story"),
+        cwd: val(args, "--cwd") ?? ".",
+        viewport,
+        scheme,
+    };
+}
+//# sourceMappingURL=plan.js.map

package/dist/commands/eye/plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan.js","sourceRoot":"","sources":["../../../src/commands/eye/plan.ts"],"names":[],"mappings":"AAmCA,MAAM,CAAC,MAAM,SAAS,GAAsD;IAC1E,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE;IACnC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE;CACtC,CAAC;AAEF,MAAM,OAAO,GAAoC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAEnE,4DAA4D;AAC5D,MAAM,CAAC,MAAM,cAAc,GAAiB,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,EAAE,EAAE,CAChG,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC,CAAC,CACxD,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAe;IAC7C,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,SAAS,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM;QAAE,OAAO,cAAc,CAAC;IAChE,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAChD,OAAO,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,CAAE,EAAE,CAAC,CAAC,CAAC,CAAC;AAC1G,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,YAAY,CAAC,IAAkB,EAAE,IAA4C;IAC3F,IAAI,CAAC,GAAG,IAAI,CAAC;IACb,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,MAAM,IAAI,KAAK,CAAC,4BAA4B,IAAI,CAAC,QAAQ,YAAY,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7G,CAAC;QACD,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;QAC3G,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,GAAG,CAAC,IAAc,EAAE,IAAY;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAc;IACzC,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC9C,MAAM,YAAY,GAAG,GAAG,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpF,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAElE,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,kBAAkB,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACtC,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,IAAI,IAAI,KAAK,SAAS;QAAE,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACvE,IAAI,MAAM;QAAE,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAmB,CAAC;IAEvF,OAAO;QACL,YAAY;QACZ,YAAY;QACZ,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,cAAc;QAC5C,MAAM;QACN,IAAI;QACJ,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC;QAC3B,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,GAAG;QAC9B,QAAQ;QACR,MAAM;KACP,CAAC;AACJ,CAAC"}

package/dist/commands/eye/run.d.ts

@@ -0,0 +1,19 @@
+import { type FidelityGateOptions, type FidelityGateResult } from "@slowcook-ai/gates";
+import type { EyeContext } from "./plan.js";
+export interface RunEyeOptions {
+    referenceUrl: string;
+    candidateUrl: string;
+    matrix: EyeContext[];
+    /** Directory for screenshots. Files named `<label>-<viewport>-<scheme>.png`. */
+    outDir: string;
+    gate?: FidelityGateOptions;
+    /** Screenshot filename prefix (e.g. `eye-pr-123`); default none. */
+    shotPrefix?: string;
+}
+export interface RunEyeResult {
+    result: FidelityGateResult;
+    screenshots: string[];
+}
+/** Render + grade the full matrix. Launches one browser, a fresh context per cell. */
+export declare function runEyeMatrix(opts: RunEyeOptions): Promise<RunEyeResult>;
+//# sourceMappingURL=run.d.ts.map

package/dist/commands/eye/run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/commands/eye/run.ts"],"names":[],"mappings":"AAUA,OAAO,EAGL,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EAExB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,mBAAmB,CAAC;IAC3B,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,kBAAkB,CAAC;IAC3B,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,sFAAsF;AACtF,wBAAsB,YAAY,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAmC7E"}

package/dist/commands/eye/run.js

@@ -0,0 +1,47 @@
+/**
+ * design #8 — reusable eye runner. Renders a reference (mock) URL + a candidate
+ * (brewed) URL across a capture matrix in headless Chromium, screenshots each
+ * cell, and grades candidate-vs-reference with the gates fidelity engine.
+ * Shared by the `slowcook eye` command (./index.ts) and the eye-driven brew
+ * fidelity phase (../brew/fidelity-phase.ts) so both measure identically.
+ */
+import { mkdirSync } from "node:fs";
+import { join } from "node:path";
+import { chromium } from "@playwright/test";
+import { captureSnapshot, gradeFidelity, } from "@slowcook-ai/gates";
+/** Render + grade the full matrix. Launches one browser, a fresh context per cell. */
+export async function runEyeMatrix(opts) {
+    mkdirSync(opts.outDir, { recursive: true });
+    const prefix = opts.shotPrefix ? `${opts.shotPrefix}-` : "";
+    const browser = await chromium.launch();
+    const screenshots = [];
+    const captureUrl = async (url, label, ctx) => {
+        const c = await browser.newContext({
+            colorScheme: ctx.scheme,
+            viewport: { width: ctx.width, height: ctx.height },
+            deviceScaleFactor: 2,
+        });
+        const page = await c.newPage();
+        await page.goto(url, { waitUntil: "networkidle" });
+        await page.waitForTimeout(400); // let lazy / client styles settle
+        const shot = join(opts.outDir, `${prefix}${label}-${ctx.viewport}-${ctx.scheme}.png`);
+        await page.screenshot({ path: shot, fullPage: true });
+        screenshots.push(shot);
+        const snap = await captureSnapshot(page, { viewport: ctx.viewport, scheme: ctx.scheme });
+        await c.close();
+        return snap;
+    };
+    const pairs = [];
+    try {
+        for (const ctx of opts.matrix) {
+            const reference = await captureUrl(opts.referenceUrl, "reference", ctx);
+            const candidate = await captureUrl(opts.candidateUrl, "candidate", ctx);
+            pairs.push({ reference, candidate });
+        }
+    }
+    finally {
+        await browser.close();
+    }
+    return { result: gradeFidelity(pairs, opts.gate), screenshots };
+}
+//# sourceMappingURL=run.js.map

package/dist/commands/eye/run.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.js","sourceRoot":"","sources":["../../../src/commands/eye/run.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EACL,eAAe,EACf,aAAa,GAId,MAAM,oBAAoB,CAAC;AAmB5B,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAmB;IACpD,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5D,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;IACxC,MAAM,WAAW,GAAa,EAAE,CAAC;IAEjC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAW,EAAE,KAAa,EAAE,GAAe,EAA0B,EAAE;QAC/F,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC;YACjC,WAAW,EAAE,GAAG,CAAC,MAAM;YACvB,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE;YAClD,iBAAiB,EAAE,CAAC;SACrB,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC;QAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QACnD,MAAM,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,kCAAkC;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,MAAM,GAAG,KAAK,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,MAAM,CAAC,CAAC;QACtF,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACtD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACzF,MAAM,CAAC,CAAC,KAAK,EAAE,CAAC;QAChB,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,KAAK,GAA6D,EAAE,CAAC;IAC3E,IAAI,CAAC;QACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9B,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YACxE,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,YAAY,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC;YACxE,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,CAAC;AAClE,CAAC"}

package/dist/commands/eye/spec-modes.d.ts

@@ -0,0 +1,5 @@
+/** Pure: extract `fidelity.modes` from a spec YAML string, or null if absent. */
+export declare function extractFidelityModes(specYaml: string): string[] | null;
+/** Load `fidelity.modes` for a story from `<repoRoot>/specs/story-<id>.yaml`. */
+export declare function loadFidelityModes(repoRoot: string, story: string): string[] | null;
+//# sourceMappingURL=spec-modes.d.ts.map

package/dist/commands/eye/spec-modes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-modes.d.ts","sourceRoot":"","sources":["../../../src/commands/eye/spec-modes.ts"],"names":[],"mappings":"AAeA,iFAAiF;AACjF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAUtE;AAED,iFAAiF;AACjF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAIlF"}

package/dist/commands/eye/spec-modes.js

@@ -0,0 +1,36 @@
+/**
+ * design #8 — read a story spec's declared fidelity modes. refine writes
+ * `fidelity.modes` on the spec (the contract for which viewport/scheme cells
+ * matter); the eye reads it here to build its matrix. Decoupled from the
+ * (not-yet-built) #7 `references` field — when that lands, `references.visual[].modes`
+ * becomes the per-source override and `fidelity.modes` the spec-level default.
+ *
+ *   # specs/story-020.yaml
+ *   fidelity:
+ *     modes: [light, dark, mobile, desktop]
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import YAML from "yaml";
+/** Pure: extract `fidelity.modes` from a spec YAML string, or null if absent. */
+export function extractFidelityModes(specYaml) {
+    let doc;
+    try {
+        doc = YAML.parse(specYaml);
+    }
+    catch {
+        return null;
+    }
+    const modes = doc?.fidelity?.modes;
+    if (Array.isArray(modes))
+        return modes.map((m) => String(m));
+    return null;
+}
+/** Load `fidelity.modes` for a story from `<repoRoot>/specs/story-<id>.yaml`. */
+export function loadFidelityModes(repoRoot, story) {
+    const p = join(repoRoot, "specs", `story-${story}.yaml`);
+    if (!existsSync(p))
+        return null;
+    return extractFidelityModes(readFileSync(p, "utf8"));
+}
+//# sourceMappingURL=spec-modes.js.map

package/dist/commands/eye/spec-modes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-modes.js","sourceRoot":"","sources":["../../../src/commands/eye/spec-modes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,iFAAiF;AACjF,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,KAAK,GAAI,GAAiD,EAAE,QAAQ,EAAE,KAAK,CAAC;IAClF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7D,OAAO,IAAI,CAAC;AACd,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,KAAa;IAC/D,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,KAAK,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,oBAAoB,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;AACvD,CAAC"}

package/dist/commands/gate/github.d.ts

@@ -0,0 +1,27 @@
+/**
+ * design #9 — map GitHub PR reviews to the Approval shape `isGateSatisfied`
+ * grades. Pure + unit-tested; the live `gh api` fetch lives in ./index.ts.
+ *
+ * The identity classification is the load-bearing bit: a review authored by a
+ * Bot account (GitHub `user.type === "Bot"`, or a login ending in `[bot]`, or a
+ * known slowcook bot handle) is marked `identityType: "bot"` so it can never
+ * satisfy a human-review gate — the automation cannot self-approve.
+ */
+import type { Approval } from "./model.js";
+/** Subset of the GitHub PR-review payload we consume. */
+export interface GhReview {
+    user?: {
+        login?: string;
+        type?: string;
+    } | null;
+    state?: string;
+}
+/** Logins always treated as bots regardless of the GitHub `type` field. */
+export declare const BOT_LOGINS: ReadonlyArray<string>;
+/**
+ * Convert raw PR reviews into Approvals. Dismissed/pending reviews are dropped.
+ * Only the latest review per author is kept (GitHub returns reviews
+ * chronologically; a later review supersedes an earlier one from the same user).
+ */
+export declare function mapReviewsToApprovals(reviews: GhReview[]): Approval[];
+//# sourceMappingURL=github.d.ts.map

package/dist/commands/gate/github.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/github.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAE3C,yDAAyD;AACzD,MAAM,WAAW,QAAQ;IACvB,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,2EAA2E;AAC3E,eAAO,MAAM,UAAU,EAAE,aAAa,CAAC,MAAM,CAAsB,CAAC;AAsBpE;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAcrE"}

package/dist/commands/gate/github.js

@@ -0,0 +1,46 @@
+/** Logins always treated as bots regardless of the GitHub `type` field. */
+export const BOT_LOGINS = ["github-actions"];
+function isBot(login, type) {
+    if (type === "Bot")
+        return true;
+    if (login.endsWith("[bot]"))
+        return true;
+    if (BOT_LOGINS.includes(login))
+        return true;
+    return false;
+}
+function mapState(state) {
+    switch (state) {
+        case "APPROVED":
+            return "approved";
+        case "CHANGES_REQUESTED":
+            return "rejected";
+        case "COMMENTED":
+            return "commented";
+        default:
+            return null; // DISMISSED / PENDING / unknown → not a signal
+    }
+}
+/**
+ * Convert raw PR reviews into Approvals. Dismissed/pending reviews are dropped.
+ * Only the latest review per author is kept (GitHub returns reviews
+ * chronologically; a later review supersedes an earlier one from the same user).
+ */
+export function mapReviewsToApprovals(reviews) {
+    const latestByAuthor = new Map();
+    for (const r of reviews) {
+        const login = (r.user?.login ?? "").toLowerCase();
+        if (!login)
+            continue;
+        const state = mapState(r.state);
+        if (!state)
+            continue;
+        latestByAuthor.set(login, {
+            byHandle: login,
+            state,
+            identityType: isBot(login, r.user?.type ?? undefined) ? "bot" : "human",
+        });
+    }
+    return [...latestByAuthor.values()];
+}
+//# sourceMappingURL=github.js.map

package/dist/commands/gate/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../src/commands/gate/github.ts"],"names":[],"mappings":"AAiBA,2EAA2E;AAC3E,MAAM,CAAC,MAAM,UAAU,GAA0B,CAAC,gBAAgB,CAAC,CAAC;AAEpE,SAAS,KAAK,CAAC,KAAa,EAAE,IAAwB;IACpD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,QAAQ,KAAK,EAAE,CAAC;QACd,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,mBAAmB;YACtB,OAAO,UAAU,CAAC;QACpB,KAAK,WAAW;YACd,OAAO,WAAW,CAAC;QACrB;YACE,OAAO,IAAI,CAAC,CAAC,+CAA+C;IAChE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAmB;IACvD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAClD,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE;YACxB,QAAQ,EAAE,KAAK;YACf,KAAK;YACL,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO;SACxE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,CAAC,GAAG,cAAc,CAAC,MAAM,EAAE,CAAC,CAAC;AACtC,CAAC"}

package/dist/commands/gate/index.d.ts

@@ -0,0 +1,2 @@
+export declare function gate(args: string[], _version: string): Promise<void>;
+//# sourceMappingURL=index.d.ts.map

package/dist/commands/gate/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAmCA,wBAAsB,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsC1E"}

package/dist/commands/gate/index.js

@@ -0,0 +1,68 @@
+/**
+ * design #9 — `slowcook gate check`. The dispatch-time HITL halt: refuse to let
+ * a stage proceed until a human in the required role has approved on the PR.
+ *
+ *   slowcook gate check --stage <refine|plate|brew> --pr <n> [--repo owner/name]
+ *
+ * Exit 0 = gate satisfied (advance). Exit 1 = blocked (a human in the required
+ * role(s) must approve, or a rejection must be resolved). Because approvals are
+ * classified by identity (./github.ts) and only human reviewers in the role's
+ * handle-list count (./model.ts), the automation cannot satisfy its own gate.
+ */
+import { execFileSync } from "node:child_process";
+import { loadReviewers } from "./reviewers.js";
+import { DEFAULT_GATES, isGateSatisfied } from "./model.js";
+import { mapReviewsToApprovals } from "./github.js";
+function val(args, flag) {
+    const i = args.indexOf(flag);
+    return i >= 0 ? args[i + 1] : undefined;
+}
+function fetchReviews(repo, pr) {
+    const out = execFileSync("gh", ["api", `repos/${repo}/pulls/${pr}/reviews`, "--paginate"], {
+        encoding: "utf8",
+    });
+    return JSON.parse(out);
+}
+function detectRepo() {
+    const out = execFileSync("gh", ["repo", "view", "--json", "nameWithOwner", "-q", ".nameWithOwner"], {
+        encoding: "utf8",
+    });
+    return out.trim();
+}
+export async function gate(args, _version) {
+    const sub = args[0];
+    if (sub !== "check") {
+        console.error("usage: slowcook gate check --stage <stage> --pr <n> [--repo owner/name]");
+        process.exit(64);
+    }
+    const rest = args.slice(1);
+    const stage = val(rest, "--stage");
+    const pr = val(rest, "--pr");
+    if (!stage || !pr) {
+        console.error("gate check: --stage and --pr are required");
+        process.exit(64);
+    }
+    const gateDef = DEFAULT_GATES.find((g) => g.stage === stage);
+    if (!gateDef) {
+        console.error(`gate check: no gate defined for stage '${stage}' (have: ${DEFAULT_GATES.map((g) => g.stage).join(", ")})`);
+        process.exit(64);
+    }
+    const repo = val(rest, "--repo") ?? detectRepo();
+    const reviewers = loadReviewers(process.cwd());
+    const approvals = mapReviewsToApprovals(fetchReviews(repo, pr));
+    const verdict = isGateSatisfied(gateDef, reviewers, approvals);
+    if (verdict.satisfied) {
+        console.log(`gate '${stage}' ✓ satisfied — ${verdict.reason}`);
+        return;
+    }
+    // Blocked. Name exactly who must act.
+    const need = verdict.rejected
+        ? verdict.reason
+        : verdict.missingRoles
+            .map((r) => `${r} (${reviewers.roles[r]?.join(", ") || "no reviewers configured in .brewing/reviewers.yaml"})`)
+            .join("; ");
+    console.error(`gate '${stage}' ✗ blocked-on-review — ${verdict.reason}`);
+    console.error(`  needs approval from: ${need}`);
+    process.exit(1);
+}
+//# sourceMappingURL=index.js.map

package/dist/commands/gate/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/gate/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAa,MAAM,YAAY,CAAC;AACvE,OAAO,EAAE,qBAAqB,EAAiB,MAAM,aAAa,CAAC;AAEnE,SAAS,GAAG,CAAC,IAAc,EAAE,IAAY;IACvC,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1C,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,EAAU;IAC5C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,SAAS,IAAI,UAAU,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE;QACzF,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAe,CAAC;AACvC,CAAC;AAED,SAAS,UAAU;IACjB,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAAE;QAClG,QAAQ,EAAE,MAAM;KACjB,CAAC,CAAC;IACH,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;AACpB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,IAAc,EAAE,QAAgB;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,yEAAyE,CAAC,CAAC;QACzF,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IACnC,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC;QAClB,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC;QAC3D,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAqB,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,KAAK,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,0CAA0C,KAAK,YAAY,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC1H,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;IACjD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,qBAAqB,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,eAAe,CAAC,OAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IAEhE,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,SAAS,KAAK,mBAAmB,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IACD,sCAAsC;IACtC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ;QAC3B,CAAC,CAAC,OAAO,CAAC,MAAM;QAChB,CAAC,CAAC,OAAO,CAAC,YAAY;aACjB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,oDAAoD,GAAG,CAAC;aAC9G,IAAI,CAAC,IAAI,CAAC,CAAC;IAClB,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,2BAA2B,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzE,OAAO,CAAC,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC;IAChD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC"}

package/dist/commands/gate/model.d.ts

@@ -0,0 +1,55 @@
+/**
+ * design #9 — HITL role gates: the gate-integrity core.
+ *
+ * Decides whether a pipeline stage may proceed past a human-review gate.
+ * The load-bearing security property: an approval only counts if it
+ * comes from a HUMAN identity that is in the configured handle-list for
+ * the required role. A bot/agent approval, or an approval from someone
+ * not assigned that role, NEVER satisfies a gate. This is what makes the
+ * halt unforgeable by the automation driving the pipeline.
+ */
+import { type ReviewersConfig } from "./reviewers.js";
+export type Role = "pm" | "designer" | "qa";
+export type Stage = "refine" | "plate" | "brew" | string;
+export interface Gate {
+    stage: Stage;
+    requiredRoles: Role[];
+    approvalSignal: "review" | "comment";
+    onRejectTarget: Stage;
+}
+export interface Approval {
+    /** GitHub handle of the approver. */
+    byHandle: string;
+    state: "approved" | "rejected" | "commented";
+    /** bot = slowcook-*[bot] / the driving agent; human = a real reviewer. */
+    identityType: "human" | "bot";
+}
+export interface GateVerdict {
+    satisfied: boolean;
+    /** required roles lacking a valid human approval. */
+    missingRoles: Role[];
+    /** a valid human reviewer for a required role rejected. */
+    rejected: boolean;
+    /** human-readable summary. */
+    reason: string;
+}
+/**
+ * The standard pipeline gates. refine is signed off by a PM, plate by a
+ * designer, and brew needs BOTH qa and designer before code ships.
+ */
+export declare const DEFAULT_GATES: Gate[];
+/**
+ * Evaluate a gate against the reviewer roster and the observed approvals.
+ *
+ * - A valid approval for role R = human + state 'approved' + handle in
+ *   the role's configured list.
+ * - A valid rejection for role R = same, but state 'rejected'.
+ * - `rejected` is true if ANY required role has a valid rejection; a
+ *   rejected gate is never satisfied (and routes back to onRejectTarget,
+ *   handled by the caller).
+ * - `missingRoles` lists required roles with no valid approval.
+ * - `satisfied` requires every required role to have a valid approval
+ *   AND no valid rejection.
+ */
+export declare function isGateSatisfied(gate: Gate, reviewers: ReviewersConfig, approvals: Approval[]): GateVerdict;
+//# sourceMappingURL=model.d.ts.map

package/dist/commands/gate/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAe,KAAK,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEnE,MAAM,MAAM,IAAI,GAAG,IAAI,GAAG,UAAU,GAAG,IAAI,CAAC;AAC5C,MAAM,MAAM,KAAK,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzD,MAAM,WAAW,IAAI;IACnB,KAAK,EAAE,KAAK,CAAC;IACb,aAAa,EAAE,IAAI,EAAE,CAAC;IACtB,cAAc,EAAE,QAAQ,GAAG,SAAS,CAAC;IACrC,cAAc,EAAE,KAAK,CAAC;CACvB;AAED,MAAM,WAAW,QAAQ;IACvB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,UAAU,GAAG,UAAU,GAAG,WAAW,CAAC;IAC7C,0EAA0E;IAC1E,YAAY,EAAE,OAAO,GAAG,KAAK,CAAC;CAC/B;AAED,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,OAAO,CAAC;IACnB,qDAAqD;IACrD,YAAY,EAAE,IAAI,EAAE,CAAC;IACrB,2DAA2D;IAC3D,QAAQ,EAAE,OAAO,CAAC;IAClB,8BAA8B;IAC9B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,EAAE,IAAI,EAI/B,CAAC;AAwBF;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,IAAI,EAAE,IAAI,EACV,SAAS,EAAE,eAAe,EAC1B,SAAS,EAAE,QAAQ,EAAE,GACpB,WAAW,CAoBb"}

package/dist/commands/gate/model.js

@@ -0,0 +1,64 @@
+/**
+ * design #9 — HITL role gates: the gate-integrity core.
+ *
+ * Decides whether a pipeline stage may proceed past a human-review gate.
+ * The load-bearing security property: an approval only counts if it
+ * comes from a HUMAN identity that is in the configured handle-list for
+ * the required role. A bot/agent approval, or an approval from someone
+ * not assigned that role, NEVER satisfies a gate. This is what makes the
+ * halt unforgeable by the automation driving the pipeline.
+ */
+import { resolveRole } from "./reviewers.js";
+/**
+ * The standard pipeline gates. refine is signed off by a PM, plate by a
+ * designer, and brew needs BOTH qa and designer before code ships.
+ */
+export const DEFAULT_GATES = [
+    { stage: "refine", requiredRoles: ["pm"], approvalSignal: "review", onRejectTarget: "refine" },
+    { stage: "plate", requiredRoles: ["designer"], approvalSignal: "review", onRejectTarget: "plate" },
+    { stage: "brew", requiredRoles: ["qa", "designer"], approvalSignal: "review", onRejectTarget: "brew" },
+];
+/**
+ * True when `approvals` contains an approval in `state` for role `role`
+ * that is BOTH human-authored AND from a handle configured for that role
+ * in `reviewers`. Handle matching is case-insensitive (both sides
+ * lowercased). This is the single chokepoint enforcing the integrity
+ * property — a bot identity or an unconfigured handle can never pass.
+ */
+function hasValidSignal(reviewers, approvals, role, state) {
+    const allowed = new Set(resolveRole(reviewers, role)); // already lowercased on load
+    return approvals.some((a) => a.identityType === "human" &&
+        a.state === state &&
+        allowed.has(a.byHandle.toLowerCase()));
+}
+/**
+ * Evaluate a gate against the reviewer roster and the observed approvals.
+ *
+ * - A valid approval for role R = human + state 'approved' + handle in
+ *   the role's configured list.
+ * - A valid rejection for role R = same, but state 'rejected'.
+ * - `rejected` is true if ANY required role has a valid rejection; a
+ *   rejected gate is never satisfied (and routes back to onRejectTarget,
+ *   handled by the caller).
+ * - `missingRoles` lists required roles with no valid approval.
+ * - `satisfied` requires every required role to have a valid approval
+ *   AND no valid rejection.
+ */
+export function isGateSatisfied(gate, reviewers, approvals) {
+    const rejectingRoles = gate.requiredRoles.filter((role) => hasValidSignal(reviewers, approvals, role, "rejected"));
+    const missingRoles = gate.requiredRoles.filter((role) => !hasValidSignal(reviewers, approvals, role, "approved"));
+    const rejected = rejectingRoles.length > 0;
+    const satisfied = !rejected && missingRoles.length === 0;
+    let reason;
+    if (rejected) {
+        reason = `rejected by ${rejectingRoles.join(", ")}`;
+    }
+    else if (missingRoles.length > 0) {
+        reason = `blocked: missing ${missingRoles.join(", ")} approval`;
+    }
+    else {
+        reason = "satisfied";
+    }
+    return { satisfied, missingRoles, rejected, reason };
+}
+//# sourceMappingURL=model.js.map

package/dist/commands/gate/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/commands/gate/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,WAAW,EAAwB,MAAM,gBAAgB,CAAC;AA8BnE;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAW;IACnC,EAAE,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE;IAC9F,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,UAAU,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,OAAO,EAAE;IAClG,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,cAAc,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE;CACvG,CAAC;AAEF;;;;;;GAMG;AACH,SAAS,cAAc,CACrB,SAA0B,EAC1B,SAAqB,EACrB,IAAU,EACV,KAA8B;IAE9B,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,6BAA6B;IACpF,OAAO,SAAS,CAAC,IAAI,CACnB,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,YAAY,KAAK,OAAO;QAC1B,CAAC,CAAC,KAAK,KAAK,KAAK;QACjB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CACxC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,eAAe,CAC7B,IAAU,EACV,SAA0B,EAC1B,SAAqB;IAErB,MAAM,cAAc,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CACxD,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CACvD,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,MAAM,CAC5C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,CAAC,CAClE,CAAC;IACF,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,CAAC,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,CAAC;IAEzD,IAAI,MAAc,CAAC;IACnB,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,eAAe,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACtD,CAAC;SAAM,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,oBAAoB,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC;IAClE,CAAC;SAAM,CAAC;QACN,MAAM,GAAG,WAAW,CAAC;IACvB,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AACvD,CAAC"}

package/dist/commands/gate/reviewers.d.ts

@@ -0,0 +1,24 @@
+import { z } from "zod";
+declare const ReviewersConfigSchema: z.ZodObject<{
+    schema_version: z.ZodLiteral<1>;
+    roles: z.ZodPipe<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>, z.ZodTransform<Record<string, string[]>, Record<string, string[]>>>;
+}, z.core.$strip>;
+export type ReviewersConfig = z.infer<typeof ReviewersConfigSchema>;
+declare const EMPTY_DEFAULT: ReviewersConfig;
+/**
+ * Load `.brewing/reviewers.yaml`. Returns an empty roster
+ * (`{ schema_version: 1, roles: {} }`) when the file is absent — a repo
+ * with no roster has no configured reviewers, so every role gate is
+ * unsatisfiable until one is authored (fail-closed). Throws on parse
+ * error / schema violation so a mis-authored roster surfaces loudly
+ * rather than silently granting or denying approvals.
+ */
+export declare function loadReviewers(repoRoot: string): ReviewersConfig;
+/**
+ * Returns the configured handles for a role (already lowercased), or an
+ * empty array when the role is unset. An empty array means the role can
+ * never be satisfied — fail-closed by design.
+ */
+export declare function resolveRole(cfg: ReviewersConfig, role: string): string[];
+export { EMPTY_DEFAULT };
+//# sourceMappingURL=reviewers.d.ts.map

package/dist/commands/gate/reviewers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewers.d.ts","sourceRoot":"","sources":["../../../src/commands/gate/reviewers.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,QAAA,MAAM,qBAAqB;;;iBAazB,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,QAAA,MAAM,aAAa,EAAE,eAGpB,CAAC;AAEF;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,CAa/D;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAExE;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}

package/dist/commands/gate/reviewers.js

@@ -0,0 +1,69 @@
+/**
+ * design #9 — HITL role gates: reviewer roster.
+ *
+ * Reads `.brewing/reviewers.yaml` to map review roles (pm, designer, qa,
+ * …) to the GitHub handles authorised to satisfy that role's gate. This
+ * roster is the trust anchor for the gate-integrity core: an approval
+ * only counts if its author is a configured handle for the required
+ * role (see `./model.js`).
+ *
+ * Handles are lowercased on load so downstream matching against the
+ * (also lowercased) approver handle is case-insensitive — GitHub login
+ * comparison is case-insensitive and a gate must not be bypassable by a
+ * casing mismatch.
+ *
+ * Single source of truth: nothing else should hard-code the roster
+ * location or shape.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import YAML from "yaml";
+import { z } from "zod";
+const ReviewersConfigSchema = z.object({
+    schema_version: z.literal(1),
+    // role -> list of GitHub handles. Lowercased on load (see transform).
+    roles: z
+        .record(z.string(), z.array(z.string()))
+        .default({})
+        .transform((roles) => {
+        const out = {};
+        for (const [role, handles] of Object.entries(roles)) {
+            out[role] = handles.map((h) => h.toLowerCase());
+        }
+        return out;
+    }),
+});
+const EMPTY_DEFAULT = {
+    schema_version: 1,
+    roles: {},
+};
+/**
+ * Load `.brewing/reviewers.yaml`. Returns an empty roster
+ * (`{ schema_version: 1, roles: {} }`) when the file is absent — a repo
+ * with no roster has no configured reviewers, so every role gate is
+ * unsatisfiable until one is authored (fail-closed). Throws on parse
+ * error / schema violation so a mis-authored roster surfaces loudly
+ * rather than silently granting or denying approvals.
+ */
+export function loadReviewers(repoRoot) {
+    const p = join(repoRoot, ".brewing", "reviewers.yaml");
+    if (!existsSync(p)) {
+        return { schema_version: 1, roles: {} };
+    }
+    const raw = YAML.parse(readFileSync(p, "utf8"));
+    const parsed = ReviewersConfigSchema.safeParse(raw);
+    if (!parsed.success) {
+        throw new Error(`Invalid .brewing/reviewers.yaml: ${parsed.error.issues.map((i) => i.message).join("; ")}`);
+    }
+    return parsed.data;
+}
+/**
+ * Returns the configured handles for a role (already lowercased), or an
+ * empty array when the role is unset. An empty array means the role can
+ * never be satisfied — fail-closed by design.
+ */
+export function resolveRole(cfg, role) {
+    return cfg.roles[role] ?? [];
+}
+export { EMPTY_DEFAULT };
+//# sourceMappingURL=reviewers.js.map

package/dist/commands/gate/reviewers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reviewers.js","sourceRoot":"","sources":["../../../src/commands/gate/reviewers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,cAAc,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5B,sEAAsE;IACtE,KAAK,EAAE,CAAC;SACL,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;SACvC,OAAO,CAAC,EAAE,CAAC;SACX,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;QACnB,MAAM,GAAG,GAA6B,EAAE,CAAC;QACzC,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACpD,GAAG,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;CACL,CAAC,CAAC;AAIH,MAAM,aAAa,GAAoB;IACrC,cAAc,EAAE,CAAC;IACjB,KAAK,EAAE,EAAE;CACV,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,EAAE,UAAU,EAAE,gBAAgB,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QACnB,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC1C,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CACb,oCAAoC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC3F,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAoB,EAAE,IAAY;IAC5D,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,CAAC"}