@sun-asterisk/sungen 3.0.0 → 3.1.0

package/dist/orchestrator/templates/specs-db.js

@@ -0,0 +1,171 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.db = void 0;
+/* eslint-disable */
+/**
+ * Sungen Data Driver — runtime DB-verification helper (auto-generated into specs/db.ts).
+ *
+ * Read-only by construction: it only ever issues a single parameterized SELECT, and
+ * table/column identifiers are validated against a strict allowlist pattern (identifiers
+ * can't be bound as parameters). Secrets come from .env.qa / process.env, never inline.
+ *
+ * Engines: PostgreSQL (`pg`) and SQLite (`better-sqlite3`), lazy-loaded on first use.
+ * Config: a `datasources.yaml` at the project root (or qa/), with ${VAR} resolved from env.
+ *
+ * DO NOT EDIT — regenerated by `sungen generate`.
+ */
+const test_1 = require("@playwright/test");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const ident = (s) => {
+    if (!IDENT.test(s))
+        throw new Error(`Unsafe identifier: ${JSON.stringify(s)} (allowed: [A-Za-z_][A-Za-z0-9_]*)`);
+    return s;
+};
+function loadEnvQa() {
+    for (const name of ['.env.qa', `.env.qa.${process.env.SUNGEN_ENV || ''}`]) {
+        const p = path.join(process.cwd(), name);
+        if (!name.endsWith('.') && fs.existsSync(p)) {
+            for (const line of fs.readFileSync(p, 'utf8').split('\n')) {
+                const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/);
+                if (m && process.env[m[1]] === undefined) {
+                    process.env[m[1]] = m[2].replace(/^["']|["']$/g, '');
+                }
+            }
+        }
+    }
+}
+function loadConfig() {
+    loadEnvQa();
+    const file = [
+        path.join(process.cwd(), 'datasources.yaml'),
+        path.join(process.cwd(), 'qa', 'datasources.yaml'),
+    ].find((f) => fs.existsSync(f));
+    if (!file)
+        throw new Error('Data Driver: no datasources.yaml found (project root or qa/).');
+    let raw = fs.readFileSync(file, 'utf8').replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, k) => process.env[k] ?? '');
+    const { parse } = require('yaml');
+    const doc = parse(raw) || {};
+    if (!doc.datasources || typeof doc.datasources !== 'object') {
+        throw new Error('Data Driver: datasources.yaml must define a top-level `datasources:` map.');
+    }
+    return doc.datasources;
+}
+class DataSource {
+    constructor() {
+        this.configs = null;
+        this.engines = new Map();
+    }
+    cfg(name) {
+        if (!this.configs)
+            this.configs = loadConfig();
+        const key = name || Object.keys(this.configs)[0];
+        const conf = this.configs[key];
+        if (!conf)
+            throw new Error(`Data Driver: datasource "${key}" not found in datasources.yaml`);
+        return { key, conf };
+    }
+    async engine(name) {
+        const { key, conf } = this.cfg(name);
+        if (this.engines.has(key))
+            return { engine: this.engines.get(key), conf };
+        if (!conf.url)
+            throw new Error(`Data Driver: datasource "${key}" has no url (set it in .env.qa).`);
+        let engine;
+        if (conf.engine === 'postgres') {
+            const { Pool } = require('pg');
+            const pool = new Pool({ connectionString: conf.url, max: 2, statement_timeout: conf.statement_timeout_ms ?? 4000 });
+            engine = { query: async (sql, params) => (await pool.query(sql, params)).rows };
+        }
+        else if (conf.engine === 'sqlite') {
+            const Database = require('better-sqlite3');
+            const db = new Database(conf.url.replace(/^sqlite:/, ''), { readonly: conf.readonly !== false });
+            engine = { query: async (sql, params) => db.prepare(sql).all(...params) };
+        }
+        else {
+            throw new Error(`Data Driver: engine "${conf.engine}" not supported yet (postgres | sqlite).`);
+        }
+        this.engines.set(key, engine);
+        return { engine, conf };
+    }
+    build(table, filter) {
+        const cols = Object.keys(filter);
+        const where = cols.map((c, i) => `${ident(c)} = $${i + 1}`).join(' AND ');
+        const sql = `SELECT * FROM ${ident(table)}${where ? ' WHERE ' + where : ''} LIMIT 50`;
+        return { sql, params: cols.map((c) => filter[c]) };
+    }
+    /** A row matching `filter` must exist; if `expected` given, assert those columns on the first match. */
+    async assertRow(table, filter, expected, datasource) {
+        const { engine, conf } = await this.engine(datasource);
+        const { sql, params } = this.build(table, filter);
+        const rows = await engine.query(this.sqlFor(conf, sql), params);
+        (0, test_1.expect)(rows.length, `Expected a row in "${table}" where ${desc(filter)} — found ${rows.length}`).toBeGreaterThanOrEqual(1);
+        if (expected) {
+            const row = rows[0];
+            for (const [col, val] of Object.entries(expected)) {
+                ident(col);
+                (0, test_1.expect)(String(row[col]), `Column "${col}" of "${table}" where ${desc(filter)}`).toBe(String(val));
+            }
+        }
+    }
+    /** No row matching `filter` may exist. */
+    async assertNoRow(table, filter, datasource) {
+        const { engine, conf } = await this.engine(datasource);
+        const { sql, params } = this.build(table, filter);
+        const rows = await engine.query(this.sqlFor(conf, sql), params);
+        (0, test_1.expect)(rows.length, `Expected NO row in "${table}" where ${desc(filter)} — found ${rows.length}`).toBe(0);
+    }
+    /** Exactly `count` rows must match `filter`. */
+    async assertCount(table, filter, count, datasource) {
+        const { engine, conf } = await this.engine(datasource);
+        const cols = Object.keys(filter);
+        const where = cols.map((c, i) => `${ident(c)} = $${i + 1}`).join(' AND ');
+        const sql = `SELECT count(*) AS n FROM ${ident(table)}${where ? ' WHERE ' + where : ''}`;
+        const rows = await engine.query(this.sqlFor(conf, sql), cols.map((c) => filter[c]));
+        const n = Number(rows[0]?.n ?? rows[0]?.['count(*)'] ?? 0);
+        (0, test_1.expect)(n, `Expected ${count} row(s) in "${table}"${cols.length ? ' where ' + desc(filter) : ''} — found ${n}`).toBe(Number(count));
+    }
+    /** Rewrites $1/$2 placeholders to `?` for SQLite. */
+    sqlFor(conf, sql) {
+        return conf.engine === 'sqlite' ? sql.replace(/\$\d+/g, '?') : sql;
+    }
+}
+function desc(filter) {
+    return Object.entries(filter).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join(', ');
+}
+exports.db = new DataSource();
+//# sourceMappingURL=specs-db.js.map

package/dist/orchestrator/templates/specs-db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"specs-db.js","sourceRoot":"","sources":["../../../src/orchestrator/templates/specs-db.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,oBAAoB;AACpB;;;;;;;;;;;GAWG;AACH,2CAA0C;AAC1C,uCAAyB;AACzB,2CAA6B;AAE7B,MAAM,KAAK,GAAG,0BAA0B,CAAC;AACzC,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE;IAClC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;IACjH,OAAO,CAAC,CAAC;AACX,CAAC,CAAC;AAUF,SAAS,SAAS;IAChB,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,WAAW,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;QAC1E,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACrE,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;oBACzC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,UAAU;IACjB,SAAS,EAAE,CAAC;IACZ,MAAM,IAAI,GAAG;QACX,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,kBAAkB,CAAC;QAC5C,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,kBAAkB,CAAC;KACnD,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+DAA+D,CAAC,CAAC;IAC5F,IAAI,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,iCAAiC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACnH,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;IAC/F,CAAC;IACD,OAAO,GAAG,CAAC,WAAW,CAAC;AACzB,CAAC;AAID,MAAM,UAAU;IAAhB;QACU,YAAO,GAA4C,IAAI,CAAC;QACxD,YAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IA2E9C,CAAC;IAzES,GAAG,CAAC,IAAa;QACvB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,GAAG,UAAU,EAAE,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,iCAAiC,CAAC,CAAC;QAC7F,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,MAAM,CAAC,IAAa;QAChC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,EAAE,IAAI,EAAE,CAAC;QAC3E,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,GAAG,mCAAmC,CAAC,CAAC;QACnG,IAAI,MAAc,CAAC;QACnB,IAAI,IAAI,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC/B,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC/B,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,oBAAoB,IAAI,IAAI,EAAE,CAAC,CAAC;YACpH,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClF,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC3C,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC,CAAC;YACjG,MAAM,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,EAAE,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,CAAC,MAAM,0CAA0C,CAAC,CAAC;QACjG,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC9B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1B,CAAC;IAEO,KAAK,CAAC,KAAa,EAAE,MAA2B;QACtD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,iBAAiB,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC;QACtF,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,CAAC;IAED,wGAAwG;IACxG,KAAK,CAAC,SAAS,CAAC,KAAa,EAAE,MAA2B,EAAE,QAA8B,EAAE,UAAmB;QAC7G,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAA,aAAM,EAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QAC3H,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACpB,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClD,KAAK,CAAC,GAAG,CAAC,CAAC;gBACX,IAAA,aAAM,EAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,SAAS,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;YACpG,CAAC;QACH,CAAC;IACH,CAAC;IAED,0CAA0C;IAC1C,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,MAA2B,EAAE,UAAmB;QAC/E,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAChE,IAAA,aAAM,EAAC,IAAI,CAAC,MAAM,EAAE,uBAAuB,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5G,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,MAA2B,EAAE,KAAa,EAAE,UAAmB;QAC9F,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC1E,MAAM,GAAG,GAAG,6BAA6B,KAAK,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACpF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;QAC3D,IAAA,aAAM,EAAC,CAAC,EAAE,YAAY,KAAK,eAAe,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IACrI,CAAC;IAED,qDAAqD;IAC7C,MAAM,CAAC,IAAsB,EAAE,GAAW;QAChD,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACrE,CAAC;CACF;AAED,SAAS,IAAI,CAAC,MAA2B;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACxF,CAAC;AAEY,QAAA,EAAE,GAAG,IAAI,UAAU,EAAE,CAAC"}

package/dist/orchestrator/templates/specs-db.ts

@@ -0,0 +1,147 @@
+/* eslint-disable */
+/**
+ * Sungen Data Driver — runtime DB-verification helper (auto-generated into specs/db.ts).
+ *
+ * Read-only by construction: it only ever issues a single parameterized SELECT, and
+ * table/column identifiers are validated against a strict allowlist pattern (identifiers
+ * can't be bound as parameters). Secrets come from .env.qa / process.env, never inline.
+ *
+ * Engines: PostgreSQL (`pg`) and SQLite (`better-sqlite3`), lazy-loaded on first use.
+ * Config: a `datasources.yaml` at the project root (or qa/), with ${VAR} resolved from env.
+ *
+ * DO NOT EDIT — regenerated by `sungen generate`.
+ */
+import { expect } from '@playwright/test';
+import * as fs from 'fs';
+import * as path from 'path';
+
+const IDENT = /^[A-Za-z_][A-Za-z0-9_]*$/;
+const ident = (s: string): string => {
+  if (!IDENT.test(s)) throw new Error(`Unsafe identifier: ${JSON.stringify(s)} (allowed: [A-Za-z_][A-Za-z0-9_]*)`);
+  return s;
+};
+
+interface DataSourceConfig {
+  engine: 'postgres' | 'mysql' | 'sqlite';
+  url: string;
+  readonly?: boolean;
+  statement_timeout_ms?: number;
+  max_rows?: number;
+}
+
+function loadEnvQa(): void {
+  for (const name of ['.env.qa', `.env.qa.${process.env.SUNGEN_ENV || ''}`]) {
+    const p = path.join(process.cwd(), name);
+    if (!name.endsWith('.') && fs.existsSync(p)) {
+      for (const line of fs.readFileSync(p, 'utf8').split('\n')) {
+        const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)\s*=\s*(.*?)\s*$/);
+        if (m && process.env[m[1]] === undefined) {
+          process.env[m[1]] = m[2].replace(/^["']|["']$/g, '');
+        }
+      }
+    }
+  }
+}
+
+function loadConfig(): Record<string, DataSourceConfig> {
+  loadEnvQa();
+  const file = [
+    path.join(process.cwd(), 'datasources.yaml'),
+    path.join(process.cwd(), 'qa', 'datasources.yaml'),
+  ].find((f) => fs.existsSync(f));
+  if (!file) throw new Error('Data Driver: no datasources.yaml found (project root or qa/).');
+  let raw = fs.readFileSync(file, 'utf8').replace(/\$\{([A-Za-z_][A-Za-z0-9_]*)\}/g, (_, k) => process.env[k] ?? '');
+  const { parse } = require('yaml');
+  const doc = parse(raw) || {};
+  if (!doc.datasources || typeof doc.datasources !== 'object') {
+    throw new Error('Data Driver: datasources.yaml must define a top-level `datasources:` map.');
+  }
+  return doc.datasources;
+}
+
+type Engine = { query(sql: string, params: any[]): Promise<any[]>; };
+
+class DataSource {
+  private configs: Record<string, DataSourceConfig> | null = null;
+  private engines = new Map<string, Engine>();
+
+  private cfg(name?: string): { key: string; conf: DataSourceConfig } {
+    if (!this.configs) this.configs = loadConfig();
+    const key = name || Object.keys(this.configs)[0];
+    const conf = this.configs[key];
+    if (!conf) throw new Error(`Data Driver: datasource "${key}" not found in datasources.yaml`);
+    return { key, conf };
+  }
+
+  private async engine(name?: string): Promise<{ engine: Engine; conf: DataSourceConfig }> {
+    const { key, conf } = this.cfg(name);
+    if (this.engines.has(key)) return { engine: this.engines.get(key)!, conf };
+    if (!conf.url) throw new Error(`Data Driver: datasource "${key}" has no url (set it in .env.qa).`);
+    let engine: Engine;
+    if (conf.engine === 'postgres') {
+      const { Pool } = require('pg');
+      const pool = new Pool({ connectionString: conf.url, max: 2, statement_timeout: conf.statement_timeout_ms ?? 4000 });
+      engine = { query: async (sql, params) => (await pool.query(sql, params)).rows };
+    } else if (conf.engine === 'sqlite') {
+      const Database = require('better-sqlite3');
+      const db = new Database(conf.url.replace(/^sqlite:/, ''), { readonly: conf.readonly !== false });
+      engine = { query: async (sql, params) => db.prepare(sql).all(...params) };
+    } else {
+      throw new Error(`Data Driver: engine "${conf.engine}" not supported yet (postgres | sqlite).`);
+    }
+    this.engines.set(key, engine);
+    return { engine, conf };
+  }
+
+  private build(table: string, filter: Record<string, any>): { sql: string; params: any[] } {
+    const cols = Object.keys(filter);
+    const where = cols.map((c, i) => `${ident(c)} = $${i + 1}`).join(' AND ');
+    const sql = `SELECT * FROM ${ident(table)}${where ? ' WHERE ' + where : ''} LIMIT 50`;
+    return { sql, params: cols.map((c) => filter[c]) };
+  }
+
+  /** A row matching `filter` must exist; if `expected` given, assert those columns on the first match. */
+  async assertRow(table: string, filter: Record<string, any>, expected?: Record<string, any>, datasource?: string): Promise<void> {
+    const { engine, conf } = await this.engine(datasource);
+    const { sql, params } = this.build(table, filter);
+    const rows = await engine.query(this.sqlFor(conf, sql), params);
+    expect(rows.length, `Expected a row in "${table}" where ${desc(filter)} — found ${rows.length}`).toBeGreaterThanOrEqual(1);
+    if (expected) {
+      const row = rows[0];
+      for (const [col, val] of Object.entries(expected)) {
+        ident(col);
+        expect(String(row[col]), `Column "${col}" of "${table}" where ${desc(filter)}`).toBe(String(val));
+      }
+    }
+  }
+
+  /** No row matching `filter` may exist. */
+  async assertNoRow(table: string, filter: Record<string, any>, datasource?: string): Promise<void> {
+    const { engine, conf } = await this.engine(datasource);
+    const { sql, params } = this.build(table, filter);
+    const rows = await engine.query(this.sqlFor(conf, sql), params);
+    expect(rows.length, `Expected NO row in "${table}" where ${desc(filter)} — found ${rows.length}`).toBe(0);
+  }
+
+  /** Exactly `count` rows must match `filter`. */
+  async assertCount(table: string, filter: Record<string, any>, count: number, datasource?: string): Promise<void> {
+    const { engine, conf } = await this.engine(datasource);
+    const cols = Object.keys(filter);
+    const where = cols.map((c, i) => `${ident(c)} = $${i + 1}`).join(' AND ');
+    const sql = `SELECT count(*) AS n FROM ${ident(table)}${where ? ' WHERE ' + where : ''}`;
+    const rows = await engine.query(this.sqlFor(conf, sql), cols.map((c) => filter[c]));
+    const n = Number(rows[0]?.n ?? rows[0]?.['count(*)'] ?? 0);
+    expect(n, `Expected ${count} row(s) in "${table}"${cols.length ? ' where ' + desc(filter) : ''} — found ${n}`).toBe(Number(count));
+  }
+
+  /** Rewrites $1/$2 placeholders to `?` for SQLite. */
+  private sqlFor(conf: DataSourceConfig, sql: string): string {
+    return conf.engine === 'sqlite' ? sql.replace(/\$\d+/g, '?') : sql;
+  }
+}
+
+function desc(filter: Record<string, any>): string {
+  return Object.entries(filter).map(([k, v]) => `${k}=${JSON.stringify(v)}`).join(', ');
+}
+
+export const db = new DataSource();

package/docs/orchestration-spec.md

@@ -2,7 +2,7 @@
 
 > Spec triển khai cho lần refactor lớn: chuyển từ **"Context Engine + Skill" (workflow tuyến tính)** sang **Orchestration + Harness Engine**.
 > Mục tiêu chính: **nâng chất lượng testcase** (đo & gate thay vì nhờ AI). Bất biến: `generate`, auto-fix selector, `delivery`, reports.
-> Tài liệu nền: `reports/sungen_direction_solution.md`, `reports/sungen_refactor_spec.md`, `reports/sungen_home_gherkin_viewpoint_coverage_review.md`.
+> Tài liệu nền: `docs/spec/sungen_direction_solution.md`, `docs/spec/sungen_refactor_spec.md`.
 
 ---
 
@@ -153,7 +153,7 @@ Hết ngân sách repair (N vòng) mà vẫn FAIL:
 └─► KHÔNG lặp vô hạn. Ghi gap vào audit-report + đưa QA checkpoint (human-in-the-loop).
 ```
 
-**Quy tắc "khám phá thêm khi nông":** nếu assertion-depth sensor báo một viewpoint critical chỉ assert "see page/section" (vụ home: Cart/Detail/Filter), Orchestrator phải nhận diện đây là **cross-screen** → khuyến nghị chuyển sang **flow** (`add-flow`) và/hoặc cần **năng lực DSL capture biến** (xem `reports/sungen_refactor_spec.md` §5.4) — thay vì giả vờ pass bằng assertion nông.
+**Quy tắc "khám phá thêm khi nông":** nếu assertion-depth sensor báo một viewpoint critical chỉ assert "see page/section" (vụ home: Cart/Detail/Filter), Orchestrator phải nhận diện đây là **cross-screen** → khuyến nghị chuyển sang **flow** (`add-flow`) và/hoặc cần **năng lực DSL capture biến** (xem `docs/spec/sungen_refactor_spec.md` §5.4) — thay vì giả vờ pass bằng assertion nông.
 
 ---
 
@@ -180,7 +180,7 @@ Bốn sensor + một gate. Input: `.feature` (qua GherkinParser) + `test-viewpoi
 - Orchestrator đưa phản hồi này lại bước sinh. **Ngân sách N vòng** (mặc định 2–3, như vòng auto-fix selector). Hết ngân sách → báo gap, không lặp vô hạn.
 
 ### 5.4 QA Checkpoint
-- QA accept/reject/edit/add viewpoint. Mọi quyết định ghi `feedback.jsonl` (xem `reports/sungen_refactor_spec.md` §8).
+- QA accept/reject/edit/add viewpoint. Mọi quyết định ghi `feedback.jsonl` (xem `docs/spec/sungen_refactor_spec.md` §8).
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sun-asterisk/sungen",
-  "version": "3.0.0",
+  "version": "3.1.0",
   "description": "Deterministic E2E Test Compiler - Gherkin + Selectors → Playwright tests",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -12,8 +12,8 @@
     "copy-templates": "mkdir -p dist/generators/test-generator/adapters/playwright/templates/steps && mkdir -p dist/generators/test-generator/templates && mkdir -p dist/orchestrator/templates && mkdir -p dist/dashboard/templates && cp -r src/generators/test-generator/adapters/playwright/templates/*.hbs dist/generators/test-generator/adapters/playwright/templates/ 2>/dev/null || true && cp -r src/generators/test-generator/adapters/playwright/templates/steps dist/generators/test-generator/adapters/playwright/templates/ && cp src/generators/test-generator/templates/*.hbs dist/generators/test-generator/templates/ 2>/dev/null || true && cp -r src/orchestrator/templates/* dist/orchestrator/templates/ && cp src/dashboard/templates/index.html dist/dashboard/templates/index.html && mkdir -p dist/harness/catalog && cp src/harness/catalog/*.yaml dist/harness/catalog/",
     "build:dashboard": "cd dashboard && npm install --silent && npm run build && cd .. && cp dashboard/dist/index.html src/dashboard/templates/index.html",
     "dev": "tsx src/cli/index.ts",
-    "test": "tsx tests/golden/run.ts && tsx tests/audit/run.ts",
-    "test:update": "tsx tests/golden/run.ts --update && tsx tests/audit/run.ts --update",
+    "test": "tsx tests/golden/run.ts && tsx tests/audit/run.ts && tsx tests/ingest/run.ts && tsx tests/eval/run.ts",
+    "test:update": "tsx tests/golden/run.ts --update && tsx tests/audit/run.ts --update && tsx tests/ingest/run.ts --update",
     "prepublishOnly": "npm run build:dashboard && npm run build"
   },
   "keywords": [
@@ -82,7 +82,7 @@
     "dist",
     "bin",
     "src",
-    "docs",
+    "docs/orchestration-spec.md",
     "README.md",
     "LICENSE"
   ]

package/src/cli/commands/audit.ts

@@ -58,6 +58,25 @@ function render(r: AuditReport): void {
   L(`  ⑥ Traceability — ${(r.trace.mappedRatio * 100).toFixed(0)}% scenarios linked to viewpoint-overview`);
   L(`      ${r.trace.note}`);
   L('');
+  if (r.spec.hasSpec && (r.spec.frTotal > 0 || r.spec.triggerGaps.length > 0 || r.spec.verdict !== 'pass')) {
+    L(`  ⑦ Spec coverage — FR ${r.spec.frCovered}/${r.spec.frTotal} covered  [${r.spec.verdict.toUpperCase()}]`);
+    for (const g of r.spec.triggerGaps) L(`      ✗ TRIGGER-UNCOVERED: "${g.constraint}"${g.code ? ` (${g.code})` : ''} mandated on [${g.required.join(', ')}], only tested on [${g.found.join(', ') || 'none'}] → missing ${g.missing.join(', ')}`);
+    for (const u of r.spec.uncoveredMust.slice(0, 6)) L(`      ✗ SPEC-UNCOVERED: ${u.id} (MUST) — "${u.text}"`);
+    if (!r.spec.triggerGaps.length && !r.spec.uncoveredMust.length) L('      ✓ every MUST FR + per-constraint trigger covered');
+    L('');
+  }
+  if (r.ledger.hasViewpoint && r.ledger.total > 0) {
+    L(`  ⑧ Viewpoint atomic coverage — ${r.ledger.covered}/${r.ledger.total} items (${(r.ledger.ratio * 100).toFixed(0)}%)`);
+    for (const m of r.ledger.missing.slice(0, 8)) L(`      ○ missing: ${m.id ? m.id + ' — ' : ''}${m.text.slice(0, 70)}`);
+    if (r.ledger.missing.length > 8) L(`      … +${r.ledger.missing.length - 8} more`);
+    L('');
+  }
+  if (r.calibration) {
+    const ax = Object.entries(r.calibration.axes).map(([k, v]) => `${k}=${(v * 100).toFixed(0)}%`).join(' · ');
+    L(`  ⑨ Calibration — ${ax}`);
+    L(`      weakest: ${r.calibration.weakest.axis} ${(r.calibration.weakest.value * 100).toFixed(0)}%${r.calibration.inflated ? '  ⚠ SCORE-INFLATED-BY-BREADTH' : ''}`);
+    L('');
+  }
   L('  ── Findings (Repair targets) ──');
   if (r.findings.length === 0) L('      ✓ none — output passes the harness');
   for (const f of r.findings) L(`      • ${f}`);

package/src/cli/commands/delivery.ts

@@ -20,7 +20,7 @@ import {
   renderCsv,
   writeCsv,
 } from '../../exporters/csv-exporter';
-import { renderXlsx, renderXlsxMultiSheet, writeXlsx } from '../../exporters/xlsx-exporter';
+import { renderXlsxMultiSheet, writeXlsx } from '../../exporters/xlsx-exporter';
 import { EnvironmentInfo, PreflightCheck, ScreenSummary, TestCaseRow } from '../../exporters/types';
 
 const COLOR = {
@@ -421,7 +421,14 @@ async function exportTarget(
       const tempSummary = buildSummary(label, rows, '');
       const csv = renderCsv(tempSummary, rows, specLink);
       const csvPath = writeCsv(cwd, target.featureBaseName, csv);
-      const wb = renderXlsx(tempSummary, rows, specLink);
+      // XLSX: two sheets — "Auto" (automatable: Auto + Not compiled) and "Manual" (@manual) —
+      // so QA manages the automated vs manual test-case sets separately. (CSV keeps every row.)
+      const autoRows = rows.filter((r) => r.testcaseType !== 'Manual');
+      const manualRows = rows.filter((r) => r.testcaseType === 'Manual');
+      const wb = renderXlsxMultiSheet([
+        { sheetName: 'Auto', summary: buildSummary(label, autoRows, ''), rows: autoRows, specLink },
+        { sheetName: 'Manual', summary: buildSummary(label, manualRows, ''), rows: manualRows, specLink },
+      ]);
       await writeXlsx(cwd, target.featureBaseName, wb);
       return buildSummary(label, rows, path.relative(cwd, csvPath));
     }
@@ -429,7 +436,12 @@ async function exportTarget(
     const variants = discoverLocaleVariants(cwd, target);
     let primarySummary: ScreenSummary | null = null;
     let primaryCsvPath = '';
-    const sheets: { sheetName: string; summary: ScreenSummary; rows: TestCaseRow[]; specLink: string }[] = [];
+    // XLSX is split by automation type: an "Auto" sheet (automatable TCs, results differ per
+    // locale) and a single shared "Manual" sheet (@manual TCs don't execute and are the same
+    // across locales). With multiple locales, Auto sheets are prefixed by locale code.
+    const autoSheets: { sheetName: string; summary: ScreenSummary; rows: TestCaseRow[]; specLink: string }[] = [];
+    let manualRows: TestCaseRow[] = [];
+    const multiLocale = variants.length > 1;
 
     for (const variant of variants) {
       // For the base variant the overlay merge is skipped (`locale: null`);
@@ -446,33 +458,37 @@ async function exportTarget(
         env,
         selectorKeyMap,
       });
-      const variantSummary = buildSummary(label, variantRows, '');
 
-      // CSV: always one file per locale (CSV has no sheet concept).
+      // CSV: always one file per locale, every row (CSV has no sheet concept).
       const csvLocale = variant.locale || null; // '' or 'en' → '' / 'en'
-      const csv = renderCsv(variantSummary, variantRows, specLink);
+      const csv = renderCsv(buildSummary(label, variantRows, ''), variantRows, specLink);
       const csvPath = writeCsv(cwd, target.featureBaseName, csv, csvLocale);
 
-      sheets.push({
-        sheetName: `${target.featureBaseName}-${variant.displayCode}`,
-        summary: variantSummary,
-        rows: variantRows,
+      const autoRows = variantRows.filter((r) => r.testcaseType !== 'Manual');
+      autoSheets.push({
+        sheetName: multiLocale ? `${variant.displayCode} Auto` : 'Auto',
+        summary: buildSummary(label, autoRows, ''),
+        rows: autoRows,
         specLink,
       });
 
-      // Use the base variant's summary as the "primary" return value so the
-      // top-level reporter rolls up base-locale numbers.
+      // Use the base variant for the shared Manual sheet + the rolled-up "primary" summary.
       if (variant.locale === '') {
+        manualRows = variantRows.filter((r) => r.testcaseType === 'Manual');
         primarySummary = buildSummary(label, variantRows, path.relative(cwd, csvPath));
         primaryCsvPath = csvPath;
       }
     }
 
-    // XLSX: single-sheet when only base, multi-sheet when 2+ locales found.
-    const wb = sheets.length >= 2 ? renderXlsxMultiSheet(sheets) : renderXlsx(sheets[0].summary, sheets[0].rows, specLink);
+    // All Auto sheets, then one "Manual" sheet — always present for a predictable structure.
+    const sheets = [
+      ...autoSheets,
+      { sheetName: 'Manual', summary: buildSummary(label, manualRows, ''), rows: manualRows, specLink },
+    ];
+    const wb = renderXlsxMultiSheet(sheets);
     await writeXlsx(cwd, target.featureBaseName, wb);
 
-    return primarySummary ?? buildSummary(label, sheets[0].rows, primaryCsvPath);
+    return primarySummary ?? buildSummary(label, (autoSheets[0]?.rows ?? []).concat(manualRows), primaryCsvPath);
   } catch (err) {
     console.error(`${COLOR.red}Error exporting ${label}:${COLOR.reset} ${err instanceof Error ? err.message : err}`);
     return null;

package/src/cli/commands/eval.ts

@@ -0,0 +1,28 @@
+import { Command } from 'commander';
+import { lintSkills, defaultSkillDir } from '../../harness/eval/skill-lint';
+
+export function registerEvalCommand(program: Command): void {
+  program
+    .command('eval')
+    .description('Eval harness: quality checks on Sungen\'s own skills/instructions (dev/CI)')
+    .option('--skills', 'Static skill-lint: frontmatter, line budget, claude↔github sync, registration')
+    .option('--dir <path>', 'Templates dir to lint (default: bundled ai-instructions)')
+    .option('--json', 'Output the raw findings JSON')
+    .action((options) => {
+      try {
+        if (!options.skills) throw new Error('Provide --skills (the only eval mode today)');
+        const dir = options.dir || defaultSkillDir();
+        const r = lintSkills(dir);
+        if (options.json) { console.log(JSON.stringify(r, null, 2)); process.exit(r.errors > 0 ? 2 : 0); }
+        console.log('');
+        console.log(`━━━ Skill-lint: ${r.checked} skill template(s) ━━━`);
+        if (!r.findings.length) console.log('  ✓ all skills pass (frontmatter · line-budget · variant-sync · registration)');
+        for (const f of r.findings) console.log(`  ${f.level === 'error' ? '✗' : '⚠'} [${f.rule}] ${f.file} — ${f.detail}`);
+        console.log('');
+        process.exit(r.errors > 0 ? 2 : 0);
+      } catch (error) {
+        console.error('Error:', error instanceof Error ? error.message : error);
+        process.exit(1);
+      }
+    });
+}