@sun-asterisk/sungen 3.2.32 → 3.2.34-beta.1

package/dist/orchestrator/screen-manager.js

@@ -40,10 +40,10 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ScreenManager = void 0;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
-const test_1 = require("@playwright/test");
 const capability_1 = require("../harness/capability");
 const test_data_guide_1 = require("./test-data-guide");
 const env_qa_1 = require("../exporters/env-qa");
+const viewpoint_scaffold_1 = require("./viewpoint-scaffold");
 class ScreenManager {
     constructor() {
         this.cwd = process.cwd();
@@ -153,68 +153,11 @@ class ScreenManager {
         if (!fs.existsSync(specPath)) {
             fs.writeFileSync(specPath, this.generateSpecTemplate(options, screenName), 'utf-8');
         }
-        // Generate requirements test-viewpoint.md (only on first screen creation)
+        // Generate requirements test-viewpoint.md (only on first screen creation): the QA template,
+        // samples inside comments, so an untouched file declares nothing (see viewpoint-scaffold.ts).
         const viewpointPath = path.join(requirementsDir, 'test-viewpoint.md');
         if (!fs.existsSync(viewpointPath)) {
-            fs.writeFileSync(viewpointPath, [
-                `# ${options.name} — Test Viewpoints`,
-                '',
-                '## Edge Cases',
-                '',
-                '<!-- Sample — replace with actual edge cases for this screen:',
-                '- Paste emoji into text fields (e.g., 🎉👋) — should accept or sanitize?',
-                '- Input 10,000+ characters into free text — truncate or reject?',
-                '- Double-click Submit rapidly — should only create 1 record',
-                '- Browser back button after successful submit — should not re-submit',
-                '-->',
-                '',
-                '## Known Issues',
-                '',
-                '<!-- Sample — replace with actual known issues:',
-                '- [BUG-001] Date picker does not work on Safari < 16',
-                '- [BUG-002] File upload silently fails for files > 20MB (no error shown)',
-                '- Search does not handle Vietnamese accents correctly ("Nguyên" ≠ "Nguyen")',
-                '-->',
-                '',
-                '## Design Decisions',
-                '',
-                '<!-- Sample — replace with actual design decisions:',
-                '- Show all validation errors at once (not one at a time) — per UX review',
-                '- Cancel button resets form completely (no draft saving)',
-                '- Anonymous mode hides sender name but keeps department visible',
-                '-->',
-                '',
-                '## UI Patterns Identified',
-                '',
-                '<!-- Check applicable patterns for this screen (from sungen-viewpoint skill):',
-                '',
-                '| # | Pattern | Applicable? | Notes |',
-                '|---|---------|-------------|-------|',
-                '| 1 | Form & Inputs | ☐ | |',
-                '| 2 | Data Table | ☐ | |',
-                '| 3 | Create / Add | ☐ | |',
-                '| 4 | Update / Edit | ☐ | |',
-                '| 5 | Delete | ☐ | |',
-                '| 6 | Search | ☐ | |',
-                '| 7 | Filter | ☐ | |',
-                '| 8 | Pagination | ☐ | |',
-                '| 9 | Modal / Dialog | ☐ | |',
-                '| 10 | List / Card | ☐ | |',
-                '-->',
-                '',
-                '## Priority Viewpoints',
-                '',
-                '<!-- Rate importance for this screen (High / Medium / Low / Skip):',
-                '',
-                '| VP | Priority | Reason |',
-                '|---|----------|--------|',
-                '| VP-UI | High | Complex form with many states |',
-                '| VP-VAL | High | 14 validation rules from spec |',
-                '| VP-LOGIC | Medium | Standard CRUD, no complex business rules |',
-                '| VP-SEC | Low | Internal tool, basic auth only |',
-                '-->',
-                '',
-            ].join('\n'), 'utf-8');
+            fs.writeFileSync(viewpointPath, (0, viewpoint_scaffold_1.viewpointScaffold)(options.name, isMobile), 'utf-8');
         }
         // Auto-screenshot: capture page only when --capture is set and not mobile (requires --path)
         // Use filename (not screenName) so each feature gets its own screenshots
@@ -262,7 +205,10 @@ class ScreenManager {
         console.log(`\n📸 Capturing screenshot: ${url}`);
         let browser;
         try {
-            browser = await test_1.chromium.launch();
+            // Loaded here, not at module top: @playwright/test is a peerDependency a mobile project never
+            // installs, and `sungen add` loads this module on every platform (#865).
+            const { chromium } = await Promise.resolve().then(() => __importStar(require('@playwright/test')));
+            browser = await chromium.launch();
             const page = await browser.newPage({ viewport: { width: 1280, height: 720 } });
             await page.goto(url, { waitUntil: 'networkidle', timeout: 15000 });
             // Full-page screenshot

package/dist/orchestrator/screen-manager.js.map

@@ -1 +1 @@
-{"version":3,"file":"screen-manager.js","sourceRoot":"","sources":["../../src/orchestrator/screen-manager.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,2CAA4C;AAC5C,sDAAyD;AACzD,uDAA6E;AAC7E,gDAAwD;AAwBxD,MAAa,aAAa;IAIxB;QACE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,OAAsB;QACpC,uBAAuB;QACvB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEtC,6EAA6E;QAC7E,MAAM,IAAI,GAAG,IAAA,6BAAgB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE5C,gEAAgE;QAChE,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CACV,iFAAiF;gBACjF,+DAA+D,CAChE,CAAC;YACF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC7C,CAAC;QAED,sCAAsC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,wFAAwF;QACxF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEzD,qEAAqE;QACrE,+EAA+E;QAC/E,qDAAqD;QACrD,IAAI,QAAgB,CAAC;QACrB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,UAAU,CAAC;QACxB,CAAC;QAED,6BAA6B;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAE3D,aAAa;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,UAAU,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;QAEhE,iDAAiD;QACjD,MAAM,WAAW,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;YAElD,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7D,CAAC;QAED,4CAA4C;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,wBAAwB,QAAQ,0BAA0B,CAAC,CAAC;YAC1E,OAAO,CAAC,KAAK,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,kCAAkC;QAClC,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAEvD,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,QAAQ;gBAC5B,CAAC,CAAC;oBACE,KAAK,OAAO,CAAC,IAAI,4BAA4B;oBAC7C,8EAA8E;oBAC9E,EAAE;iBACH;gBACH,CAAC,CAAC;oBACE,KAAK,OAAO,CAAC,IAAI,mBAAmB;oBACpC,2BAA2B;oBAC3B,EAAE;oBACF,GAAG,UAAU,GAAG;oBAChB,gBAAgB;oBAChB,aAAa,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,GAAG;oBAChD,EAAE;iBACH,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,uEAAuE;QACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAA,gCAAc,EAAC,GAAG,OAAO,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACpF,CAAC;QACD,IAAA,0CAAwB,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAExC,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;QAED,0EAA0E;QAC1E,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE;gBAC9B,KAAK,OAAO,CAAC,IAAI,oBAAoB;gBACrC,EAAE;gBACF,eAAe;gBACf,EAAE;gBACF,+DAA+D;gBAC/D,0EAA0E;gBAC1E,iEAAiE;gBACjE,6DAA6D;gBAC7D,sEAAsE;gBACtE,KAAK;gBACL,EAAE;gBACF,iBAAiB;gBACjB,EAAE;gBACF,iDAAiD;gBACjD,sDAAsD;gBACtD,0EAA0E;gBAC1E,6EAA6E;gBAC7E,KAAK;gBACL,EAAE;gBACF,qBAAqB;gBACrB,EAAE;gBACF,qDAAqD;gBACrD,0EAA0E;gBAC1E,0DAA0D;gBAC1D,iEAAiE;gBACjE,KAAK;gBACL,EAAE;gBACF,2BAA2B;gBAC3B,EAAE;gBACF,+EAA+E;gBAC/E,EAAE;gBACF,uCAAuC;gBACvC,uCAAuC;gBACvC,6BAA6B;gBAC7B,0BAA0B;gBAC1B,4BAA4B;gBAC5B,6BAA6B;gBAC7B,sBAAsB;gBACtB,sBAAsB;gBACtB,sBAAsB;gBACtB,0BAA0B;gBAC1B,8BAA8B;gBAC9B,4BAA4B;gBAC5B,KAAK;gBACL,EAAE;gBACF,wBAAwB;gBACxB,EAAE;gBACF,oEAAoE;gBACpE,EAAE;gBACF,4BAA4B;gBAC5B,2BAA2B;gBAC3B,kDAAkD;gBAClD,mDAAmD;gBACnD,kEAAkE;gBAClE,mDAAmD;gBACnD,KAAK;gBACL,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACzB,CAAC;QAED,4FAA4F;QAC5F,yEAAyE;QACzE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAC1E,CAAC;QAED,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;YACnG,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,iDAAiD,UAAU,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,0CAA0C,UAAU,qBAAqB,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;YACpG,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,iDAAiD,UAAU,2BAA2B,CAAC,CAAC;YACpG,OAAO,CAAC,GAAG,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,KAAa,EAAE,UAAkB;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QAEjD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,eAAQ,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/E,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAEnE,uBAAuB;YACvB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,UAAU,WAAW,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;YAErE,uCAAuC;YACvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,UAAU,eAAe,CAAC,CAAC;YACpE,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,+CAA+C,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,gFAAgF;QAChF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,gFAAgF;QAChF,6EAA6E;QAC7E,OAAO,IAAA,0BAAiB,EAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,OAAO,IAAI;aACR,WAAW,EAAE;aACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;aAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,uBAAuB,CAAC,UAAkB;QAChD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAEO,oBAAoB,CAAC,OAAsB,EAAE,UAAkB;QACrE,MAAM,IAAI,GAAG,IAAA,6BAAgB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE5C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC;YAC3E,OAAO,KAAK,OAAO,CAAC,IAAI;;;mBAGX,QAAQ;;;eAGZ,OAAO,CAAC,KAAK,IAAI,8GAA8G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqC7I,CAAC;QACE,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QAClD,OAAO,KAAK,OAAO,CAAC,IAAI;;;kBAGV,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDzB,CAAC;IACA,CAAC;IAEO,uBAAuB,CAAC,OAAsB,EAAE,QAAgB;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,OAAO,CAAC,IAAI,SAAS,CAAC;QAEtF,MAAM,IAAI,GAAG,IAAA,6BAAgB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE5C,IAAI,QAAQ,EAAE,CAAC;YACb,6FAA6F;YAC7F,gEAAgE;YAChE,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB;gBACpD,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe;oBAC9C,CAAC,CAAC,kBAAkB,CAAC;YAEvB,mEAAmE;YACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC;YAE3E,uCAAuC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAE7D,OAAO,GAAG,WAAW;WAChB,OAAO,CAAC,IAAI;;;cAGT,WAAW;;UAEf,QAAQ;;;;;;;EAOhB,UAAU;;kCAEsB,OAAO,CAAC,IAAI;;;CAG7C,CAAC;QACE,CAAC;QAED,mBAAmB;QACnB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QACrD,OAAO,YAAY,OAAO,CAAC,IAAI;;;cAGrB,WAAW;;UAEf,WAAW;;;wBAGG,UAAU;;;kCAGA,OAAO,CAAC,IAAI;;;CAG7C,CAAC;IACA,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,EAAU,EAAsB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5E,MAAM,GAAG,GACP,IAAI,CAAC,uEAAuE,CAAC;YAC7E,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,QAAQ,GACZ,IAAI,CAAC,yEAAyE,CAAC;YAC/E,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAAC,KAAc;QAC1C,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE,CAC5C,GAAG;aACA,IAAI,EAAE;aACN,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC;aAC7C,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;aACxB,IAAI,EAAE,CAAC;QAEZ,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;aACxB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,oFAAoF;YACpF,qFAAqF;YACrF,OAAO;gBACL,eAAe;gBACf,gFAAgF;gBAChF,iFAAiF;gBACjF,oFAAoF;gBACpF,oFAAoF;gBACpF,oEAAoE;gBACpE,2DAA2D;gBAC3D,oCAAoC;gBACpC,iEAAiE;gBACjE,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CACxB,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,CAC5D,CAAC;QACF,OAAO;YACL,eAAe;YACf,8FAA8F;YAC9F,oCAAoC;YACpC,GAAG,QAAQ;YACX,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF;AAxiBD,sCAwiBC"}
+{"version":3,"file":"screen-manager.js","sourceRoot":"","sources":["../../src/orchestrator/screen-manager.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,sDAAyD;AACzD,uDAA6E;AAC7E,gDAAwD;AACxD,6DAAyD;AAwBzD,MAAa,aAAa;IAIxB;QACE,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CAAC,OAAsB;QACpC,uBAAuB;QACvB,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEtC,6EAA6E;QAC7E,MAAM,IAAI,GAAG,IAAA,6BAAgB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE5C,gEAAgE;QAChE,IAAI,OAAO,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CACV,iFAAiF;gBACjF,+DAA+D,CAChE,CAAC;YACF,OAAO,GAAG,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QAC7C,CAAC;QAED,sCAAsC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,wFAAwF;QACxF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAEzD,qEAAqE;QACrE,+EAA+E;QAC/E,qDAAqD;QACrD,IAAI,QAAgB,CAAC;QACrB,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpB,QAAQ,GAAG,GAAG,UAAU,IAAI,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1E,CAAC;aAAM,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACrC,QAAQ,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,UAAU,CAAC;QACxB,CAAC;QAED,6BAA6B;QAC7B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;QACrD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;QACtD,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC7D,MAAM,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QAE3D,aAAa;QACb,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,UAAU,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;QACjE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;QAEhE,iDAAiD;QACjD,MAAM,WAAW,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAE9C,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;YAElD,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;oBACpC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACrD,CAAC;gBACD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAChD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAC/C,EAAE,CAAC,SAAS,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACrD,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;QAC7D,CAAC;QAED,4CAA4C;QAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CAAC,wBAAwB,QAAQ,0BAA0B,CAAC,CAAC;YAC1E,OAAO,CAAC,KAAK,CAAC,WAAW,WAAW,EAAE,CAAC,CAAC;YACxC,OAAO,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC9D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,kCAAkC;QAClC,MAAM,cAAc,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACvE,EAAE,CAAC,aAAa,CAAC,WAAW,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QAEvD,4EAA4E;QAC5E,6EAA6E;QAC7E,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,MAAM,aAAa,GAAG,QAAQ;gBAC5B,CAAC,CAAC;oBACE,KAAK,OAAO,CAAC,IAAI,4BAA4B;oBAC7C,8EAA8E;oBAC9E,EAAE;iBACH;gBACH,CAAC,CAAC;oBACE,KAAK,OAAO,CAAC,IAAI,mBAAmB;oBACpC,2BAA2B;oBAC3B,EAAE;oBACF,GAAG,UAAU,GAAG;oBAChB,gBAAgB;oBAChB,aAAa,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,GAAG;oBAChD,EAAE;iBACH,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,CAAC;QAED,uEAAuE;QACvE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YACjC,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAA,gCAAc,EAAC,GAAG,OAAO,CAAC,IAAI,SAAS,CAAC,EAAE,OAAO,CAAC,CAAC;QACpF,CAAC;QACD,IAAA,0CAAwB,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAExC,gEAAgE;QAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;QACvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC7B,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;QAED,4FAA4F;QAC5F,8FAA8F;QAC9F,MAAM,aAAa,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QACtE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,EAAE,CAAC,aAAa,CAAC,aAAa,EAAE,IAAA,sCAAiB,EAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;QAED,4FAA4F;QAC5F,yEAAyE;QACzE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjD,MAAM,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,EAAE,iBAAiB,EAAE,QAAQ,CAAC,CAAC;QAC1E,CAAC;QAED,kBAAkB;QAClB,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QAC9B,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QAC1D,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;YACtD,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEhB,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;YACnG,OAAO,CAAC,GAAG,CAAC,+EAA+E,CAAC,CAAC;YAC7F,OAAO,CAAC,GAAG,CAAC,iDAAiD,UAAU,EAAE,CAAC,CAAC;YAC3E,OAAO,CAAC,GAAG,CAAC,0CAA0C,UAAU,qBAAqB,CAAC,CAAC;YACvF,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,sFAAsF,CAAC,CAAC;YACpG,OAAO,CAAC,GAAG,CAAC,2EAA2E,CAAC,CAAC;YACzF,OAAO,CAAC,GAAG,CAAC,iDAAiD,UAAU,2BAA2B,CAAC,CAAC;YACpG,OAAO,CAAC,GAAG,CAAC,0CAA0C,UAAU,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAED;;OAEG;IACK,KAAK,CAAC,iBAAiB,CAAC,QAAgB,EAAE,KAAa,EAAE,UAAkB;QACjF,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,kEAAkE,CAAC,CAAC;YAChF,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC;QACxD,OAAO,CAAC,GAAG,CAAC,8BAA8B,GAAG,EAAE,CAAC,CAAC;QAEjD,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,8FAA8F;YAC9F,yEAAyE;YACzE,MAAM,EAAE,QAAQ,EAAE,GAAG,wDAAa,kBAAkB,GAAC,CAAC;YACtD,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,CAAC;YAClC,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAC/E,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YAEnE,uBAAuB;YACvB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,UAAU,WAAW,CAAC,CAAC;YAClE,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;YAChE,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,CAAC,CAAC;YAErE,uCAAuC;YACvC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,UAAU,eAAe,CAAC,CAAC;YACpE,MAAM,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YAC/D,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,EAAE,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACnE,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;gBACxD,OAAO,CAAC,GAAG,CAAC,+CAA+C,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,GAAG,CAAC,2BAA2B,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC/D,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;IAED;;OAEG;IACK,UAAU;QAChB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;QAC/D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAE5C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QACrD,gFAAgF;QAChF,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,gFAAgF;QAChF,6EAA6E;QAC7E,OAAO,IAAA,0BAAiB,EAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAEO,kBAAkB,CAAC,IAAY;QACrC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACpD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,KAAK,CAAC,qEAAqE,CAAC,CAAC;YACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,IAAY;QACtC,OAAO,IAAI;aACR,WAAW,EAAE;aACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;aAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;aACvB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,CAAC;IAEO,uBAAuB,CAAC,UAAkB;QAChD,MAAM,SAAS,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,WAAW,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;IAC/C,CAAC;IAEO,oBAAoB,CAAC,OAAsB,EAAE,UAAkB;QACrE,MAAM,IAAI,GAAG,IAAA,6BAAgB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE5C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC;YAC3E,OAAO,KAAK,OAAO,CAAC,IAAI;;;mBAGX,QAAQ;;;eAGZ,OAAO,CAAC,KAAK,IAAI,8GAA8G;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqC7I,CAAC;QACE,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QAClD,OAAO,KAAK,OAAO,CAAC,IAAI;;;kBAGV,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgDzB,CAAC;IACA,CAAC;IAEO,uBAAuB,CAAC,OAAsB,EAAE,QAAgB;QACtE,MAAM,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,OAAO,CAAC,IAAI,SAAS,CAAC;QAEtF,MAAM,IAAI,GAAG,IAAA,6BAAgB,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAE5C,IAAI,QAAQ,EAAE,CAAC;YACb,6FAA6F;YAC7F,gEAAgE;YAChE,MAAM,WAAW,GACf,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,mBAAmB;gBACpD,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe;oBAC9C,CAAC,CAAC,kBAAkB,CAAC;YAEvB,mEAAmE;YACnE,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,gBAAgB,EAAE,IAAI,cAAc,CAAC;YAE3E,uCAAuC;YACvC,MAAM,UAAU,GAAG,IAAI,CAAC,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAE7D,OAAO,GAAG,WAAW;WAChB,OAAO,CAAC,IAAI;;;cAGT,WAAW;;UAEf,QAAQ;;;;;;;EAOhB,UAAU;;kCAEsB,OAAO,CAAC,IAAI;;;CAG7C,CAAC;QACE,CAAC;QAED,mBAAmB;QACnB,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;QACrD,OAAO,YAAY,OAAO,CAAC,IAAI;;;cAGrB,WAAW;;UAEf,WAAW;;;wBAGG,UAAU;;;kCAGA,OAAO,CAAC,IAAI;;;CAG7C,CAAC;IACA,CAAC;IAED;;;;;;OAMG;IACK,gBAAgB;QACtB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC3C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,EAAU,EAAsB,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;QAC5E,MAAM,GAAG,GACP,IAAI,CAAC,uEAAuE,CAAC;YAC7E,IAAI,CAAC,kDAAkD,CAAC,CAAC;QAC3D,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,QAAQ,GACZ,IAAI,CAAC,yEAAyE,CAAC;YAC/E,IAAI,CAAC,mDAAmD,CAAC,CAAC;QAC5D,OAAO,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACK,qBAAqB,CAAC,KAAc;QAC1C,wFAAwF;QACxF,0FAA0F;QAC1F,MAAM,aAAa,GAAG,CAAC,GAAW,EAAU,EAAE,CAC5C,GAAG;aACA,IAAI,EAAE;aACN,OAAO,CAAC,gCAAgC,EAAE,EAAE,CAAC;aAC7C,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;aACxB,IAAI,EAAE,CAAC;QAEZ,MAAM,KAAK,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;aACxB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,aAAa,CAAC;aAClB,MAAM,CAAC,OAAO,CAAC,CAAC;QAEnB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,oFAAoF;YACpF,qFAAqF;YACrF,OAAO;gBACL,eAAe;gBACf,gFAAgF;gBAChF,iFAAiF;gBACjF,oFAAoF;gBACpF,oFAAoF;gBACpF,oEAAoE;gBACpE,2DAA2D;gBAC3D,oCAAoC;gBACpC,iEAAiE;gBACjE,EAAE;aACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CACxB,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,EAAE,CAC5D,CAAC;QACF,OAAO;YACL,eAAe;YACf,8FAA8F;YAC9F,oCAAoC;YACpC,GAAG,QAAQ;YACX,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;CACF;AAlfD,sCAkfC"}

package/dist/orchestrator/security-overrides-catalog.d.ts

@@ -0,0 +1,39 @@
+/**
+ * npm `overrides` a sungen project needs in order to pass `npm audit`.
+ *
+ * Why this lives in the CLI instead of in `packages/core/package.json`: npm honours `overrides`
+ * ONLY in the root `package.json` of the project doing the installing. A block declared by a
+ * DEPENDENCY is inert — it is not read, not merged, and not carried in the published tarball. So
+ * the monorepo root can (and does) pin these for itself while every consumer of the published
+ * packages still resolves the vulnerable versions. Repo green, install red, and nobody working in
+ * the repo ever sees what a consumer sees. Issue #764.
+ *
+ * Sungen already writes to the consuming project's `package.json` (standard scripts on `init`,
+ * family version pinning on `update`), so the overrides go in on the same two passes. That makes
+ * the fix reachable the ordinary way: a new project is clean from its first install, an existing
+ * one becomes clean on the next `sungen update`.
+ *
+ * Every entry below is here because NOTHING ELSE CLEARS IT — the offending package is either at its
+ * latest published version already, or is hard-pinned by an unmaintained parent. Bumping sungen's
+ * own declared ranges does not move any of them: `@sungen/driver-mobile` is already on the newest
+ * appium (3.x) and webdriverio (9.x), and npm's own `fix available` for that chain is a DOWNGRADE
+ * to appium 1.22.3 / webdriverio 8.14.6, not a fix.
+ *
+ * Measured on a clean-room install of the published 3.2.32 family (2026-09-23): 25 findings
+ * (12 moderate, 13 high) without this block, 0 with it.
+ */
+export interface SecurityOverride {
+    /** Package to pin, as it appears in `overrides`. */
+    pkg: string;
+    /** Range to pin it to — the lowest published version clear of the advisory. */
+    range: string;
+    /** Advisory + the path that drags the vulnerable copy in, so a reader can re-check the entry. */
+    why: string;
+}
+/**
+ * The pinned set. Keep it MINIMAL: an entry earns its place only while a clean install is red
+ * without it. When an upstream finally ships a fix inside its own declared range, delete the entry
+ * rather than raising it — a stale override silently holds a whole subtree back.
+ */
+export declare const SECURITY_OVERRIDES: SecurityOverride[];
+//# sourceMappingURL=security-overrides-catalog.d.ts.map

package/dist/orchestrator/security-overrides-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-overrides-catalog.d.ts","sourceRoot":"","sources":["../../src/orchestrator/security-overrides-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAC;CACb;AAED;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,gBAAgB,EA6BhD,CAAC"}

package/dist/orchestrator/security-overrides-catalog.js

@@ -0,0 +1,63 @@
+"use strict";
+/**
+ * npm `overrides` a sungen project needs in order to pass `npm audit`.
+ *
+ * Why this lives in the CLI instead of in `packages/core/package.json`: npm honours `overrides`
+ * ONLY in the root `package.json` of the project doing the installing. A block declared by a
+ * DEPENDENCY is inert — it is not read, not merged, and not carried in the published tarball. So
+ * the monorepo root can (and does) pin these for itself while every consumer of the published
+ * packages still resolves the vulnerable versions. Repo green, install red, and nobody working in
+ * the repo ever sees what a consumer sees. Issue #764.
+ *
+ * Sungen already writes to the consuming project's `package.json` (standard scripts on `init`,
+ * family version pinning on `update`), so the overrides go in on the same two passes. That makes
+ * the fix reachable the ordinary way: a new project is clean from its first install, an existing
+ * one becomes clean on the next `sungen update`.
+ *
+ * Every entry below is here because NOTHING ELSE CLEARS IT — the offending package is either at its
+ * latest published version already, or is hard-pinned by an unmaintained parent. Bumping sungen's
+ * own declared ranges does not move any of them: `@sungen/driver-mobile` is already on the newest
+ * appium (3.x) and webdriverio (9.x), and npm's own `fix available` for that chain is a DOWNGRADE
+ * to appium 1.22.3 / webdriverio 8.14.6, not a fix.
+ *
+ * Measured on a clean-room install of the published 3.2.32 family (2026-09-23): 25 findings
+ * (12 moderate, 13 high) without this block, 0 with it.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECURITY_OVERRIDES = void 0;
+/**
+ * The pinned set. Keep it MINIMAL: an entry earns its place only while a clean install is red
+ * without it. When an upstream finally ships a fix inside its own declared range, delete the entry
+ * rather than raising it — a stale override silently holds a whole subtree back.
+ */
+exports.SECURITY_OVERRIDES = [
+    {
+        pkg: 'uuid',
+        range: '^11.1.1',
+        // exceljs 4.4.0 IS the latest (published 2024-12-20) and hard-declares "uuid": "^8.3.0".
+        // There is no newer exceljs to bump to, which is why npm reports fixAvailable: false.
+        why: 'GHSA-w5hq-g745-h8pq (moderate) — uuid@8.3.2 via exceljs@4.4.0, which is unmaintained and pins ^8.3.0',
+    },
+    {
+        pkg: 'morgan',
+        range: '^1.12.1',
+        // @appium/base-driver pins the exact version "1.11.0", so no resolution reaches 1.12.x on its own.
+        why: 'GHSA-jxfw-x594-9x9m (moderate) — morgan@1.11.0 exact-pinned by @appium/base-driver',
+    },
+    {
+        pkg: 'serialize-javascript',
+        range: '^7.1.2',
+        why: 'GHSA-5c6j-r48x-rmvq (high) + GHSA-qj8w-gfj5-8c6v (moderate) — serialize-javascript@6.0.2 via mocha (^6.0.2)',
+    },
+    {
+        pkg: '@puppeteer/browsers',
+        range: '^3.2.3',
+        // The vulnerable package is extract-zip, whose latest (2.0.1) IS the flagged version — there is
+        // nothing to pin it to. @puppeteer/browsers 3.x dropped extract-zip for modern-tar, so the pin
+        // goes on the parent instead. @wdio/utils asks for ^2.2.0 but imports only install, canDownload,
+        // resolveBuildId, detectBrowserPlatform, Browser, ChromeReleaseChannel and computeExecutablePath
+        // — all seven still exported by 3.2.3, verified against @wdio/utils@9.32.0.
+        why: 'GHSA-jmr9-qjv8-65gv + GHSA-7pqw-9j4j-h8q3 (high) — extract-zip@2.0.1 via @puppeteer/browsers@2.x ← @wdio/utils; extract-zip has no fixed release, 3.x replaced it with modern-tar',
+    },
+];
+//# sourceMappingURL=security-overrides-catalog.js.map

package/dist/orchestrator/security-overrides-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-overrides-catalog.js","sourceRoot":"","sources":["../../src/orchestrator/security-overrides-catalog.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;AAWH;;;;GAIG;AACU,QAAA,kBAAkB,GAAuB;IACpD;QACE,GAAG,EAAE,MAAM;QACX,KAAK,EAAE,SAAS;QAChB,yFAAyF;QACzF,sFAAsF;QACtF,GAAG,EAAE,sGAAsG;KAC5G;IACD;QACE,GAAG,EAAE,QAAQ;QACb,KAAK,EAAE,SAAS;QAChB,mGAAmG;QACnG,GAAG,EAAE,oFAAoF;KAC1F;IACD;QACE,GAAG,EAAE,sBAAsB;QAC3B,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,6GAA6G;KACnH;IACD;QACE,GAAG,EAAE,qBAAqB;QAC1B,KAAK,EAAE,QAAQ;QACf,gGAAgG;QAChG,+FAA+F;QAC/F,iGAAiG;QACjG,iGAAiG;QACjG,4EAA4E;QAC5E,GAAG,EAAE,mLAAmL;KACzL;CACF,CAAC"}

package/dist/orchestrator/security-overrides.d.ts

@@ -0,0 +1,51 @@
+import { SecurityOverride } from './security-overrides-catalog';
+/**
+ * Merge the security-override catalog into a consuming project's `package.json`.
+ *
+ * The catalog itself — which packages, which ranges, and why each one cannot be cleared any other
+ * way — lives in `security-overrides-catalog.ts`. That is the file to edit when an advisory moves;
+ * this one holds only the merge, the write and the reporting, which do not change when it does.
+ */
+export { SECURITY_OVERRIDES } from './security-overrides-catalog';
+export type { SecurityOverride } from './security-overrides-catalog';
+export interface OverridePlan {
+    /** Entries missing from the project, to be written. */
+    add: SecurityOverride[];
+    /** Entries the project already pins itself — left untouched, reported so the user can judge. */
+    existing: Array<{
+        pkg: string;
+        declared: string;
+        wanted: string;
+    }>;
+    /** Set when the pins were needed but the write failed — `add` is then empty, nothing was applied. */
+    writeFailed?: boolean;
+    /** Lockfile of a package manager that ignores `overrides`, when the project has one. */
+    foreignLockfile?: 'yarn' | 'pnpm';
+}
+/**
+ * Decide what a project's `overrides` block is missing. Pure — no I/O, so the tests and `--dry-run`
+ * can plan without touching anything.
+ *
+ * A pin the project already declares is NEVER rewritten, even when it differs from ours. Someone who
+ * typed a range into their own `package.json` had a reason (a private mirror, a pinned fork, a
+ * downgrade forced by another tool), and silently overwriting it would be the more surprising bug.
+ * It is reported instead, so a still-vulnerable pin is visible rather than swallowed.
+ */
+export declare function planSecurityOverrides(pkgJson: Record<string, any>): OverridePlan;
+/**
+ * Write the missing overrides into a project's `package.json`.
+ *
+ * Best-effort by design, exactly like the rest of the project-file touching in `init` / `update`: an
+ * unreadable or malformed `package.json` means we skip silently rather than fail the command the
+ * user actually ran. The audit gate is not worth losing a scaffold over.
+ *
+ * Must run BEFORE the project's `npm install`, or the first resolution pass writes a lockfile that
+ * already pins the vulnerable versions.
+ *
+ * @param dryRun plan only — report what would change and write nothing
+ * @returns the plan that was applied, or null when there was no `package.json` to apply it to
+ */
+export declare function ensureSecurityOverrides(packageJsonPath: string, dryRun?: boolean): OverridePlan | null;
+/** Print what `ensureSecurityOverrides` did, in the voice the surrounding commands already use. */
+export declare function reportSecurityOverrides(plan: OverridePlan | null, dryRun?: boolean): void;
+//# sourceMappingURL=security-overrides.d.ts.map

package/dist/orchestrator/security-overrides.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-overrides.d.ts","sourceRoot":"","sources":["../../src/orchestrator/security-overrides.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAEpF;;;;;;GAMG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,YAAY,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAErE,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,GAAG,EAAE,gBAAgB,EAAE,CAAC;IACxB,gGAAgG;IAChG,QAAQ,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnE,qGAAqG;IACrG,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,wFAAwF;IACxF,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACnC;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,YAAY,CAuBhF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,uBAAuB,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,UAAQ,GAAG,YAAY,GAAG,IAAI,CA2BpG;AAeD,mGAAmG;AACnG,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,YAAY,GAAG,IAAI,EAAE,MAAM,UAAQ,GAAG,IAAI,CAgCvF"}

package/dist/orchestrator/security-overrides.js

@@ -0,0 +1,165 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SECURITY_OVERRIDES = void 0;
+exports.planSecurityOverrides = planSecurityOverrides;
+exports.ensureSecurityOverrides = ensureSecurityOverrides;
+exports.reportSecurityOverrides = reportSecurityOverrides;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const security_overrides_catalog_1 = require("./security-overrides-catalog");
+/**
+ * Merge the security-override catalog into a consuming project's `package.json`.
+ *
+ * The catalog itself — which packages, which ranges, and why each one cannot be cleared any other
+ * way — lives in `security-overrides-catalog.ts`. That is the file to edit when an advisory moves;
+ * this one holds only the merge, the write and the reporting, which do not change when it does.
+ */
+var security_overrides_catalog_2 = require("./security-overrides-catalog");
+Object.defineProperty(exports, "SECURITY_OVERRIDES", { enumerable: true, get: function () { return security_overrides_catalog_2.SECURITY_OVERRIDES; } });
+/**
+ * Decide what a project's `overrides` block is missing. Pure — no I/O, so the tests and `--dry-run`
+ * can plan without touching anything.
+ *
+ * A pin the project already declares is NEVER rewritten, even when it differs from ours. Someone who
+ * typed a range into their own `package.json` had a reason (a private mirror, a pinned fork, a
+ * downgrade forced by another tool), and silently overwriting it would be the more surprising bug.
+ * It is reported instead, so a still-vulnerable pin is visible rather than swallowed.
+ */
+function planSecurityOverrides(pkgJson) {
+    const current = pkgJson.overrides && typeof pkgJson.overrides === 'object' ? pkgJson.overrides : {};
+    const add = [];
+    const existing = [];
+    for (const entry of security_overrides_catalog_1.SECURITY_OVERRIDES) {
+        const declared = current[entry.pkg];
+        if (typeof declared === 'string') {
+            if (declared !== entry.range)
+                existing.push({ pkg: entry.pkg, declared, wanted: entry.range });
+            continue;
+        }
+        // A nested override object ({ "uuid": { ".": "^11" } }) is a deliberate, more specific shape —
+        // treat it as the project's own decision and leave it alone.
+        if (declared !== undefined) {
+            existing.push({ pkg: entry.pkg, declared: JSON.stringify(declared), wanted: entry.range });
+            continue;
+        }
+        add.push(entry);
+    }
+    return { add, existing };
+}
+/**
+ * Write the missing overrides into a project's `package.json`.
+ *
+ * Best-effort by design, exactly like the rest of the project-file touching in `init` / `update`: an
+ * unreadable or malformed `package.json` means we skip silently rather than fail the command the
+ * user actually ran. The audit gate is not worth losing a scaffold over.
+ *
+ * Must run BEFORE the project's `npm install`, or the first resolution pass writes a lockfile that
+ * already pins the vulnerable versions.
+ *
+ * @param dryRun plan only — report what would change and write nothing
+ * @returns the plan that was applied, or null when there was no `package.json` to apply it to
+ */
+function ensureSecurityOverrides(packageJsonPath, dryRun = false) {
+    let pkgJson;
+    try {
+        pkgJson = JSON.parse(fs.readFileSync(packageJsonPath, 'utf-8'));
+    }
+    catch {
+        return null;
+    }
+    const plan = planSecurityOverrides(pkgJson);
+    plan.foreignLockfile = detectForeignLockfile(path.dirname(packageJsonPath));
+    if (plan.add.length && !dryRun) {
+        const overrides = pkgJson.overrides && typeof pkgJson.overrides === 'object' ? pkgJson.overrides : {};
+        for (const entry of plan.add)
+            overrides[entry.pkg] = entry.range;
+        pkgJson.overrides = overrides;
+        try {
+            fs.writeFileSync(packageJsonPath, JSON.stringify(pkgJson, null, 2) + '\n', 'utf-8');
+        }
+        catch {
+            // Read-only checkout, root-owned file, read-only container mount. `sungen update` in
+            // particular has ALREADY reinstalled globally by the time it gets here, so throwing would
+            // abandon the AI-rules refresh and the family sync over a hardening step. Report and move on.
+            return { add: [], existing: plan.existing, foreignLockfile: plan.foreignLockfile, writeFailed: true };
+        }
+    }
+    return plan;
+}
+/**
+ * npm is the only package manager that reads a top-level `overrides` block. Yarn wants
+ * `resolutions`, pnpm wants `pnpm.overrides` — so on those projects the block we write is inert and
+ * the install stays vulnerable. We do NOT guess at the equivalent field (getting a resolutions
+ * pattern subtly wrong is worse than not writing one), but silence would be the same class of bug
+ * as #764 itself: a fix that looks applied and is not. So: say so.
+ */
+function detectForeignLockfile(dir) {
+    if (fs.existsSync(path.join(dir, 'pnpm-lock.yaml')))
+        return 'pnpm';
+    if (fs.existsSync(path.join(dir, 'yarn.lock')))
+        return 'yarn';
+    return undefined;
+}
+/** Print what `ensureSecurityOverrides` did, in the voice the surrounding commands already use. */
+function reportSecurityOverrides(plan, dryRun = false) {
+    if (!plan)
+        return;
+    if (plan.writeFailed) {
+        console.warn('⚠️  Could not write the security overrides into package.json (read-only file?). Nothing else\n' +
+            '   failed. Add this block by hand to keep `npm audit` clean:\n' +
+            `       "overrides": ${JSON.stringify(Object.fromEntries(security_overrides_catalog_1.SECURITY_OVERRIDES.map((o) => [o.pkg, o.range])), null, 2).replace(/\n/g, '\n       ')}\n`);
+        return;
+    }
+    if (plan.add.length) {
+        const verb = dryRun ? '[dry-run] would add' : 'Added';
+        console.log(`🔒 ${verb} ${plan.add.length} security override(s) to package.json — npm honours these only here, not from sungen's own manifest:`);
+        for (const entry of plan.add)
+            console.log(`   • ${entry.pkg}@${entry.range}  — ${entry.why}`);
+        console.log('');
+    }
+    if (plan.existing.length) {
+        console.log('🔒 Left your own overrides alone (sungen never rewrites a pin you declared):');
+        for (const e of plan.existing)
+            console.log(`   – ${e.pkg}: ${e.declared}  (sungen would use ${e.wanted})`);
+        console.log('   If `npm audit` still flags one of these, raise it by hand.\n');
+    }
+    if (plan.foreignLockfile && (plan.add.length || plan.existing.length)) {
+        const field = plan.foreignLockfile === 'pnpm' ? '"pnpm": { "overrides": … }' : '"resolutions"';
+        console.warn(`⚠️  This project has a ${plan.foreignLockfile} lockfile. ${plan.foreignLockfile} ignores npm's "overrides" —\n` +
+            `   mirror the block into ${field} as well, or the pins do nothing here.\n`);
+    }
+}
+//# sourceMappingURL=security-overrides.js.map

package/dist/orchestrator/security-overrides.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-overrides.js","sourceRoot":"","sources":["../../src/orchestrator/security-overrides.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmCA,sDAuBC;AAeD,0DA2BC;AAgBD,0DAgCC;AApJD,uCAAyB;AACzB,2CAA6B;AAC7B,6EAAoF;AAEpF;;;;;;GAMG;AAEH,2EAAkE;AAAzD,gIAAA,kBAAkB,OAAA;AAc3B;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CAAC,OAA4B;IAChE,MAAM,OAAO,GACX,OAAO,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAEtF,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAA6B,EAAE,CAAC;IAE9C,KAAK,MAAM,KAAK,IAAI,+CAAkB,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACjC,IAAI,QAAQ,KAAK,KAAK,CAAC,KAAK;gBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC/F,SAAS;QACX,CAAC;QACD,+FAA+F;QAC/F,6DAA6D;QAC7D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAgB,uBAAuB,CAAC,eAAuB,EAAE,MAAM,GAAG,KAAK;IAC7E,IAAI,OAA4B,CAAC;IACjC,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,OAAO,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,eAAe,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;IAE5E,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,SAAS,GACb,OAAO,CAAC,SAAS,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QACtF,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG;YAAE,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;QACjE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC;QAC9B,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,CAAC;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,qFAAqF;YACrF,0FAA0F;YAC1F,8FAA8F;YAC9F,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACxG,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAAC,GAAW;IACxC,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACnE,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,mGAAmG;AACnG,SAAgB,uBAAuB,CAAC,IAAyB,EAAE,MAAM,GAAG,KAAK;IAC/E,IAAI,CAAC,IAAI;QAAE,OAAO;IAElB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,gGAAgG;YAChG,gEAAgE;YAChE,uBAAuB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC,+CAAkB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,IAAI,CACpJ,CAAC;QACF,OAAO;IACT,CAAC;IAED,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,sGAAsG,CAAC,CAAC;QACjJ,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,GAAG;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,OAAO,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QAC9F,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzB,OAAO,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;QAC5F,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,QAAQ,uBAAuB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;QAC3G,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;IACjF,CAAC;IAED,IAAI,IAAI,CAAC,eAAe,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,eAAe,KAAK,MAAM,CAAC,CAAC,CAAC,4BAA4B,CAAC,CAAC,CAAC,eAAe,CAAC;QAC/F,OAAO,CAAC,IAAI,CACV,0BAA0B,IAAI,CAAC,eAAe,cAAc,IAAI,CAAC,eAAe,gCAAgC;YAChH,4BAA4B,KAAK,0CAA0C,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/orchestrator/templates/ai-src/agents/discovery.md

@@ -9,7 +9,9 @@ You are a **test-design context explorer**. You run in an **isolated context** s
 ## Explore (do NOT ask the user to pick a source — read all that exist)
 - `requirements/spec.md` — primary behavior source.
 - `requirements/spec_figma.md` — Figma supplement (if present; do NOT call Figma MCP when this exists).
-- `requirements/ui/*` images — layout/visual context.
+- `requirements/ui/*` images — read **every** image (group primary vs states/variants when there are many, but open them all).
+- `requirements/ui/figma-meta.md` — Figma MCP capture: `## Components`, `## Text Content`.
+- `requirements/ui-inventory.md` — an existing Design Inventory: keep its `UI-NNN` ids.
 - Live page — only if a base URL is configured and reachable: `browser_navigate` + `browser_snapshot` for real element roles/names. Fall back gracefully if it requires login / fails.
 
 ## Cross-check
@@ -20,7 +22,13 @@ Flag any **conflicts** between sources (field names, labels, behavior, states th
 SOURCES: spec=<yes/no, completeness high|med|low> | figma=<...> | ui=<n images> | live=<reached|offline>
 PAGE TYPE: <e.g. ecommerce-list / form / auth / ...>
 RECOMMENDED ROUTE: <spec-first | source-first | ...> — authoritative source: <which>
-CONFLICTS: <list, or "none">
+CONFLICTS: <list, or "none"> — each conflict on a design item also appears in UI INVENTORY with source `conflict`
+UI INVENTORY: images read: <read>/<total> · figma-meta.md: <read|absent> · spec_figma.md: <read|absent>
+  | UI-001 | <item> | <component|column|button|field|state|annotation> | spec+design | <image> |
+  | UI-014 | <item> | column | design-only | <image> |
+  | UI-015 | <item> | column | conflict — <how spec and design disagree> | <image> |
+  → one row per item the design shows (format and id rules: `sungen-tc-generation` § Design Inventory);
+    omit the block only when the unit has no design source
 KEY FACTS (condensed):
   - Sections: <list>
   - Fields/validation: <key constraints + exact error messages>
@@ -29,4 +37,4 @@ KEY FACTS (condensed):
 ASSUMPTIONS / MISSING INFO: <what's unknown — to be marked in output>
 ```
 
-Keep it tight. Do not generate test cases — that is the orchestrator's job. Do not write files.
+Keep it tight — except UI INVENTORY, which is listed in full: it is the checklist the orchestrator writes to `ui-inventory.md`. Do not generate test cases — that is the orchestrator's job. Do not write files.

package/dist/orchestrator/templates/ai-src/agents/reviewer.md

@@ -10,6 +10,8 @@ You are an **independent Senior QA Reviewer**. You did **not** write these tests
 - `qa/<screens|flows>/<name>/features/<name>.feature` — the scenarios under review.
 - `qa/<screens|flows>/<name>/requirements/test-viewpoint.md` — the viewpoint overview (priority).
 - `qa/<screens|flows>/<name>/requirements/spec.md` — source of truth for behavior.
+- `qa/<screens|flows>/<name>/requirements/ui/*` images, `ui/figma-meta.md`, `spec_figma.md` — the design, when present. Open **every** image.
+- `qa/<screens|flows>/<name>/requirements/ui-inventory.md` — the Design Inventory create-test wrote (`UI-NNN` rows).
 - `.sungen/reports/<name>-audit.json` — the deterministic findings (don't repeat them; go deeper).
 
 ## What to judge (semantic — the gate misses these)
@@ -25,6 +27,7 @@ You are an **independent Senior QA Reviewer**. You did **not** write these tests
    - **Flows self-clean.** A CRUD/auth chain deletes what it created (final `@api:delete_*`) or is `@cleanup`-tagged.
    - **Idempotency uses the DB oracle.** A "no double-charge / exactly once" claim is proven by `@concurrent` + a `@query` count, not HTTP status alone (status can lie under a race).
    - **Auth negatives** exist for protected mutations (401/403), not just the happy path.
+7. **Design ↔ Feature** (only when the unit holds design sources). Read the design yourself — do not trust the inventory to be complete. Report: items the design shows that are **missing from `ui-inventory.md`**; inventory items **mislabelled** `spec+design` that `spec.md` never names (design-only) or names differently (conflict); and `design-only`/`conflict` items whose `@ui:` scenario does not actually prove them, or whose `# UI-DEFERRED:` reason does not hold. The audit only sees what the inventory lists — you are the check on the inventory itself.
 
 ## Output (do NOT edit any file)
 Return a concise verdict:
@@ -38,6 +41,11 @@ ISSUES (most important first):
    FIX: <the exact Gherkin step(s) to add/change>
 2. ...
 
+DESIGN DIFF (omit when the unit has no design source):
+  - not inventoried: <item> (<image>)
+  - mislabelled: UI-NNN <item> — is <design-only|conflict>, not spec+design
+  - unproven: UI-NNN <item> — <why the @ui scenario / deferral does not hold>
+
 STRENGTHS: <1-2 lines, what is genuinely good>
 ```