@sun-asterisk/sungen 3.2.34-beta.1 → 3.3.0-alpha.1

package/dist/decisions/decision-file.d.ts

@@ -0,0 +1,31 @@
+import { DecisionEntry } from './decision-schema';
+export declare const PROJECT_SCOPE = "project";
+/** A decision file's path (`/`-separated, relative to the project): `…/decisions/<name>.yaml`. One test for every reader. */
+export declare const DECISION_FILE_PATH: RegExp;
+export declare function isValidScope(scope: string): boolean;
+export declare function decisionsDirFor(projectRoot: string, scope: string): string;
+/** The unit scope for a unit name, or null when the name matches no unit or more than one. */
+export declare function unitDecisionScope(projectRoot: string, unit: string): string | null;
+/** Every decisions directory that exists, with its scope. */
+export declare function listDecisionDirs(projectRoot: string): {
+    scope: string;
+    dir: string;
+}[];
+export declare function serializeDecision(entry: DecisionEntry): string;
+/** `untrusted`: legacy approval state that differs from git HEAD (viewpoint-baseline adapter). */
+export type DecisionProblemCode = 'unreadable' | 'invalid' | 'id-mismatch' | 'hash-mismatch' | 'untrusted';
+export interface DecisionProblem {
+    path: string;
+    code: DecisionProblemCode;
+    message: string;
+}
+/**
+ * Read one decision file and verify it against itself: schema, file name = id, id = content
+ * (else `id-mismatch` → decision.id-reuse), entry_hash = entry (else `hash-mismatch` → decision.mutated).
+ * Never throws — a bad file is a problem, and the caller decides what that means.
+ */
+export declare function verifyDecisionFile(file: string, scope: string): {
+    entry?: DecisionEntry;
+    problem?: DecisionProblem;
+};
+//# sourceMappingURL=decision-file.d.ts.map

package/dist/decisions/decision-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-file.d.ts","sourceRoot":"","sources":["../../src/decisions/decision-file.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,aAAa,EAAqB,MAAM,mBAAmB,CAAC;AAGrE,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,6HAA6H;AAC7H,eAAO,MAAM,kBAAkB,QAAkC,CAAC;AAGlE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAK1E;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKlF;AAED,6DAA6D;AAC7D,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,CAkBtF;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAG9D;AAED,kGAAkG;AAClG,MAAM,MAAM,mBAAmB,GAAG,YAAY,GAAG,SAAS,GAAG,aAAa,GAAG,eAAe,GAAG,WAAW,CAAC;AAC3G,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,mBAAmB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAE7F;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG;IAAE,KAAK,CAAC,EAAE,aAAa,CAAC;IAAC,OAAO,CAAC,EAAE,eAAe,CAAA;CAAE,CAgBpH"}

package/dist/decisions/decision-file.js

@@ -0,0 +1,139 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DECISION_FILE_PATH = exports.PROJECT_SCOPE = void 0;
+exports.isValidScope = isValidScope;
+exports.decisionsDirFor = decisionsDirFor;
+exports.unitDecisionScope = unitDecisionScope;
+exports.listDecisionDirs = listDecisionDirs;
+exports.serializeDecision = serializeDecision;
+exports.verifyDecisionFile = verifyDecisionFile;
+/**
+ * Where decisions live and how one file reads and writes (DOS-13.1, DOS-3.9).
+ *
+ *   project scope   qa/decisions/<id>.yaml
+ *   unit scope      qa/<kind>/<unit>/decisions/<id>.yaml     scope = `<kind>/<unit>` (e.g. `screens/login`)
+ *
+ * The scope is not stored in the entry: it is where the file lives, and it is part of the id, so a
+ * file moved to another unit no longer matches its own id.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yaml_1 = require("yaml");
+const resolve_unit_1 = require("../cli/resolve-unit");
+const safe_yaml_parse_1 = require("../utils/safe-yaml-parse");
+const decision_schema_1 = require("./decision-schema");
+const decision_identity_1 = require("./decision-identity");
+exports.PROJECT_SCOPE = 'project';
+/** A decision file's path (`/`-separated, relative to the project): `…/decisions/<name>.yaml`. One test for every reader. */
+exports.DECISION_FILE_PATH = /(^|\/)decisions\/[^/]+\.yaml$/;
+const UNIT_SCOPE_RE = /^(?:(?:screens|flows|api)\/(?!\.\.?$)[^/\\]+|api\/flows\/(?!\.\.?$)[^/\\]+)$/;
+function isValidScope(scope) {
+    return scope === exports.PROJECT_SCOPE || UNIT_SCOPE_RE.test(scope);
+}
+function decisionsDirFor(projectRoot, scope) {
+    if (!isValidScope(scope))
+        throw new Error(`invalid decision scope "${scope}" (project, or <screens|flows|api>/<unit>)`);
+    return scope === exports.PROJECT_SCOPE
+        ? path.join(projectRoot, 'qa', 'decisions')
+        : path.join(projectRoot, 'qa', ...scope.split('/'), 'decisions');
+}
+/** The unit scope for a unit name, or null when the name matches no unit or more than one. */
+function unitDecisionScope(projectRoot, unit) {
+    const found = (0, resolve_unit_1.resolveUnitCandidates)(unit, projectRoot);
+    if (found.length !== 1)
+        return null;
+    const scope = path.relative(path.join(projectRoot, 'qa'), found[0].dir).split(path.sep).join('/');
+    return isValidScope(scope) ? scope : null;
+}
+/** Every decisions directory that exists, with its scope. */
+function listDecisionDirs(projectRoot) {
+    const qa = path.join(projectRoot, 'qa');
+    const out = [];
+    const add = (scope) => {
+        const dir = decisionsDirFor(projectRoot, scope);
+        if (fs.existsSync(dir))
+            out.push({ scope, dir });
+    };
+    add(exports.PROJECT_SCOPE);
+    const units = (rel) => {
+        try {
+            return fs.readdirSync(path.join(qa, rel), { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name);
+        }
+        catch {
+            return [];
+        }
+    };
+    for (const kind of ['screens', 'flows', 'api']) {
+        for (const u of units(kind))
+            if (!(kind === 'api' && u === 'flows'))
+                add(`${kind}/${u}`);
+    }
+    for (const u of units('api/flows'))
+        add(`api/flows/${u}`);
+    return out;
+}
+function serializeDecision(entry) {
+    const head = '# Sungen decision — append-only. To change it, record a new entry with `supersedes`.\n';
+    return head + (0, yaml_1.stringify)(entry, { schema: 'core', lineWidth: 0 });
+}
+/**
+ * Read one decision file and verify it against itself: schema, file name = id, id = content
+ * (else `id-mismatch` → decision.id-reuse), entry_hash = entry (else `hash-mismatch` → decision.mutated).
+ * Never throws — a bad file is a problem, and the caller decides what that means.
+ */
+function verifyDecisionFile(file, scope) {
+    const fail = (code, message) => ({ problem: { path: file, code, message } });
+    let raw;
+    try {
+        raw = (0, safe_yaml_parse_1.safeYamlParse)(fs.readFileSync(file, 'utf8'), file);
+    }
+    catch (err) {
+        return fail('unreadable', err instanceof Error ? err.message : String(err));
+    }
+    const errors = (0, decision_schema_1.storedEntryErrors)(raw);
+    if (errors.length)
+        return fail('invalid', errors.join('; '));
+    const entry = raw;
+    if (path.basename(file) !== `${entry.id}.yaml`)
+        return fail('id-mismatch', `file name does not match its id ${entry.id}`);
+    const id = (0, decision_identity_1.computeDecisionId)(entry, scope);
+    if (id !== entry.id)
+        return fail('id-mismatch', `stored id ${entry.id} but the content (in scope ${scope}) hashes to ${id}`);
+    if ((0, decision_identity_1.computeEntryHash)(entry) !== entry.entry_hash)
+        return fail('hash-mismatch', 'entry_hash no longer matches the entry');
+    return { entry };
+}
+//# sourceMappingURL=decision-file.js.map

package/dist/decisions/decision-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-file.js","sourceRoot":"","sources":["../../src/decisions/decision-file.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,oCAEC;AAED,0CAKC;AAGD,8CAKC;AAGD,4CAkBC;AAED,8CAGC;AAWD,gDAgBC;AA5FD;;;;;;;;GAQG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,+BAAiC;AACjC,sDAA4D;AAC5D,8DAAyD;AACzD,uDAAqE;AACrE,2DAA0E;AAE7D,QAAA,aAAa,GAAG,SAAS,CAAC;AACvC,6HAA6H;AAChH,QAAA,kBAAkB,GAAG,+BAA+B,CAAC;AAClE,MAAM,aAAa,GAAG,8EAA8E,CAAC;AAErG,SAAgB,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,KAAK,qBAAa,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,SAAgB,eAAe,CAAC,WAAmB,EAAE,KAAa;IAChE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,4CAA4C,CAAC,CAAC;IACxH,OAAO,KAAK,KAAK,qBAAa;QAC5B,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,WAAW,CAAC;QAC3C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,WAAW,CAAC,CAAC;AACrE,CAAC;AAED,8FAA8F;AAC9F,SAAgB,iBAAiB,CAAC,WAAmB,EAAE,IAAY;IACjE,MAAM,KAAK,GAAG,IAAA,oCAAqB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClG,OAAO,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5C,CAAC;AAED,6DAA6D;AAC7D,SAAgB,gBAAgB,CAAC,WAAmB;IAClD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,GAAG,GAAqC,EAAE,CAAC;IACjD,MAAM,GAAG,GAAG,CAAC,KAAa,EAAQ,EAAE;QAClC,MAAM,GAAG,GAAG,eAAe,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;IACF,GAAG,CAAC,qBAAa,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,CAAC,GAAW,EAAY,EAAE;QACtC,IAAI,CAAC;YACH,OAAO,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACvH,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,EAAE,CAAC;QAAC,CAAC;IACxB,CAAC,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,OAAO,CAAC;gBAAE,GAAG,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IAC3F,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC;QAAE,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAoB;IACpD,MAAM,IAAI,GAAG,wFAAwF,CAAC;IACtG,OAAO,IAAI,GAAG,IAAA,gBAAS,EAAC,KAAK,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AACnE,CAAC;AAMD;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,IAAY,EAAE,KAAa;IAC5D,MAAM,IAAI,GAAG,CAAC,IAAyB,EAAE,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC1G,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAA,+BAAa,EAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC3D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,YAAY,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,mCAAiB,EAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAoB,CAAC;IACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,EAAE,OAAO;QAAE,OAAO,IAAI,CAAC,aAAa,EAAE,mCAAmC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1H,MAAM,EAAE,GAAG,IAAA,qCAAiB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC3C,IAAI,EAAE,KAAK,KAAK,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,aAAa,EAAE,aAAa,KAAK,CAAC,EAAE,8BAA8B,KAAK,eAAe,EAAE,EAAE,CAAC,CAAC;IAC7H,IAAI,IAAA,oCAAgB,EAAC,KAAK,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;IACzH,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC"}

package/dist/decisions/decision-identity.d.ts

@@ -0,0 +1,12 @@
+import { DecisionDraft, DecisionEntry } from './decision-schema';
+export declare function canonicalize(v: unknown): unknown;
+export declare const canonicalJson: (v: unknown) => string;
+/** The draft as it is stored: normalized strings, sorted anchors, absent optionals dropped. */
+export declare function normalizeDraft(d: DecisionDraft): DecisionDraft;
+export declare function computeDecisionId(d: DecisionDraft, scope: string): string;
+export declare function computeEntryHash(entry: Omit<DecisionEntry, 'entry_hash'> & {
+    entry_hash?: string;
+}): string;
+/** Normalize a draft and give it its id and entry_hash, fields in storage order. */
+export declare function sealDecision(d: DecisionDraft, scope: string): DecisionEntry;
+//# sourceMappingURL=decision-identity.d.ts.map

package/dist/decisions/decision-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-identity.d.ts","sourceRoot":"","sources":["../../src/decisions/decision-identity.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAa,MAAM,mBAAmB,CAAC;AAI5E,wBAAgB,YAAY,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAYhD;AAED,eAAO,MAAM,aAAa,GAAI,GAAG,OAAO,KAAG,MAAyC,CAAC;AAGrF,+FAA+F;AAC/F,wBAAgB,cAAc,CAAC,CAAC,EAAE,aAAa,GAAG,aAAa,CAc9D;AAED,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,aAAa,EAAE,YAAY,CAAC,GAAG;IAAE,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAG3G;AAED,oFAAoF;AACpF,wBAAgB,YAAY,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,CAI3E"}

package/dist/decisions/decision-identity.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.canonicalJson = void 0;
+exports.canonicalize = canonicalize;
+exports.normalizeDraft = normalizeDraft;
+exports.computeDecisionId = computeDecisionId;
+exports.computeEntryHash = computeEntryHash;
+exports.sealDecision = sealDecision;
+/**
+ * Decision identity (DOS-13.2). Two hashes answer two different questions:
+ *
+ *   id         = `D-` + first 16 hex of sha256(normalized content)
+ *                content = {kind, scope, anchors (sorted), text, reason, payload, supersedes, visibility,
+ *                evidence_hash}; excludes valid_from, source, id, entry_hash
+ *                → "what was decided, where": re-recording it later, by anyone, yields the same id
+ *   entry_hash = full sha256 of the whole stored entry in canonical form (id, valid_from, source included)
+ *                → "was this file altered": changing any field, even the date, breaks it
+ *
+ * Canonical form: keys sorted, strings NFC with LF line ends and trimmed, absent fields omitted
+ * (`null` in the id content so its key set is fixed). The stored entry IS the normalized form, so a
+ * hash over the parsed file equals a hash over what was sealed.
+ */
+const crypto_1 = require("crypto");
+const normText = (s) => s.normalize('NFC').replace(/\r\n?/g, '\n').trim();
+function canonicalize(v) {
+    if (typeof v === 'string')
+        return normText(v);
+    if (Array.isArray(v))
+        return v.map(canonicalize);
+    if (v && typeof v === 'object') {
+        const out = {};
+        for (const k of Object.keys(v).sort()) {
+            const x = v[k];
+            if (x !== undefined)
+                out[k] = canonicalize(x);
+        }
+        return out;
+    }
+    return v;
+}
+const canonicalJson = (v) => JSON.stringify(canonicalize(v));
+exports.canonicalJson = canonicalJson;
+const sha256 = (s) => (0, crypto_1.createHash)('sha256').update(s).digest('hex');
+/** The draft as it is stored: normalized strings, sorted anchors, absent optionals dropped. */
+function normalizeDraft(d) {
+    const out = {
+        kind: d.kind,
+        anchors: d.anchors.map(normText).sort(),
+        text: normText(d.text),
+        reason: normText(d.reason),
+        ...(d.payload !== undefined ? { payload: canonicalize(d.payload) } : {}),
+        source: { by: normText(d.source.by), where: normText(d.source.where) },
+        valid_from: normText(d.valid_from),
+        ...(d.supersedes !== undefined ? { supersedes: normText(d.supersedes) } : {}),
+        visibility: d.visibility,
+        ...(d.evidence_hash !== undefined ? { evidence_hash: normText(d.evidence_hash) } : {}),
+    };
+    return out;
+}
+function computeDecisionId(d, scope) {
+    const n = normalizeDraft(d);
+    const content = {
+        kind: n.kind, scope, anchors: n.anchors, text: n.text, reason: n.reason, payload: n.payload ?? null,
+        supersedes: n.supersedes ?? null, visibility: n.visibility, evidence_hash: n.evidence_hash ?? null,
+    };
+    return `D-${sha256((0, exports.canonicalJson)(content)).slice(0, 16)}`;
+}
+function computeEntryHash(entry) {
+    const { entry_hash: _ignored, ...rest } = entry;
+    return sha256((0, exports.canonicalJson)(rest));
+}
+/** Normalize a draft and give it its id and entry_hash, fields in storage order. */
+function sealDecision(d, scope) {
+    const n = normalizeDraft(d);
+    const withId = { id: computeDecisionId(n, scope), ...n };
+    return { ...withId, entry_hash: computeEntryHash(withId) };
+}
+//# sourceMappingURL=decision-identity.js.map

package/dist/decisions/decision-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-identity.js","sourceRoot":"","sources":["../../src/decisions/decision-identity.ts"],"names":[],"mappings":";;;AAmBA,oCAYC;AAMD,wCAcC;AAED,8CAOC;AAED,4CAGC;AAGD,oCAIC;AAxED;;;;;;;;;;;;;GAaG;AACH,mCAAoC;AAGpC,MAAM,QAAQ,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;AAE1F,SAAgB,YAAY,CAAC,CAAU;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAI,CAA6B,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC;QAChD,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,MAAM,aAAa,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;AAAxE,QAAA,aAAa,iBAA2D;AACrF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEnF,+FAA+F;AAC/F,SAAgB,cAAc,CAAC,CAAgB;IAC7C,MAAM,GAAG,GAAkB;QACzB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE;QACvC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAC1B,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAA8B,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrG,MAAM,EAAE,EAAE,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE;QACtE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;QAClC,GAAG,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7E,UAAU,EAAE,CAAC,CAAC,UAAU;QACxB,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACvF,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,iBAAiB,CAAC,CAAgB,EAAE,KAAa;IAC/D,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG;QACd,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,IAAI;QACnG,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,aAAa,EAAE,CAAC,CAAC,aAAa,IAAI,IAAI;KACnG,CAAC;IACF,OAAO,KAAK,MAAM,CAAC,IAAA,qBAAa,EAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,SAAgB,gBAAgB,CAAC,KAAkE;IACjG,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;IAChD,OAAO,MAAM,CAAC,IAAA,qBAAa,EAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC;AAED,oFAAoF;AACpF,SAAgB,YAAY,CAAC,CAAgB,EAAE,KAAa;IAC1D,MAAM,CAAC,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,EAAE,EAAE,EAAE,iBAAiB,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACzD,OAAO,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC;AAC7D,CAAC"}

package/dist/decisions/decision-integrity-check.d.ts

@@ -0,0 +1,12 @@
+export declare const DECISION_INTEGRITY_RULES: {
+    readonly idReuse: "decision.id-reuse";
+    readonly mutated: "decision.mutated";
+};
+export type DecisionIntegrityRule = typeof DECISION_INTEGRITY_RULES[keyof typeof DECISION_INTEGRITY_RULES];
+export interface DecisionFinding {
+    rule: DecisionIntegrityRule;
+    path: string;
+    message: string;
+}
+export declare function checkDecisionIntegrity(projectRoot: string): DecisionFinding[];
+//# sourceMappingURL=decision-integrity-check.d.ts.map

package/dist/decisions/decision-integrity-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-integrity-check.d.ts","sourceRoot":"","sources":["../../src/decisions/decision-integrity-check.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,wBAAwB;;;CAAyE,CAAC;AAC/G,MAAM,MAAM,qBAAqB,GAAG,OAAO,wBAAwB,CAAC,MAAM,OAAO,wBAAwB,CAAC,CAAC;AAC3G,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,qBAAqB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAY/F,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,EAAE,CA4B7E"}

package/dist/decisions/decision-integrity-check.js

@@ -0,0 +1,102 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DECISION_INTEGRITY_RULES = void 0;
+exports.checkDecisionIntegrity = checkDecisionIntegrity;
+/**
+ * Append-only integrity of the decision layer (DOS-13.3). Emits the catalog's hard rules — it does
+ * not define severity; phase 04's resolver decides what a finding blocks.
+ *
+ *   decision.id-reuse   stored id ≠ id of the content (edited text, renamed file, moved to another scope)
+ *   decision.mutated    entry_hash ≠ entry, an unreadable entry, or an entry in `git show HEAD:` that
+ *                       was edited or deleted in the working tree — the only check a careful forger
+ *                       who recomputes both hashes cannot pass
+ *
+ * Outside git (or with no commit yet) the HEAD comparison is skipped; it never throws.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const safe_yaml_parse_1 = require("../utils/safe-yaml-parse");
+const decision_identity_1 = require("./decision-identity");
+const decision_file_1 = require("./decision-file");
+const git_head_trust_1 = require("./git-head-trust");
+exports.DECISION_INTEGRITY_RULES = { idReuse: 'decision.id-reuse', mutated: 'decision.mutated' };
+/** Same meaning, whatever the line endings or YAML layout: compare the parsed entries canonically. */
+function sameEntry(a, b) {
+    try {
+        return (0, decision_identity_1.canonicalJson)((0, safe_yaml_parse_1.safeYamlParse)(a)) === (0, decision_identity_1.canonicalJson)((0, safe_yaml_parse_1.safeYamlParse)(b));
+    }
+    catch {
+        return a.replace(/\r\n?/g, '\n') === b.replace(/\r\n?/g, '\n');
+    }
+}
+function checkDecisionIntegrity(projectRoot) {
+    const out = new Map();
+    const add = (rule, abs, message) => {
+        const rel = path.relative(projectRoot, abs).split(path.sep).join('/');
+        if (!out.has(`${rule} ${rel}`))
+            out.set(`${rule} ${rel}`, { rule, path: rel, message });
+    };
+    for (const { scope, dir } of (0, decision_file_1.listDecisionDirs)(projectRoot)) {
+        let names = [];
+        try {
+            names = fs.readdirSync(dir).filter((f) => f.endsWith('.yaml'));
+        }
+        catch {
+            continue;
+        }
+        for (const name of names) {
+            const file = path.join(dir, name);
+            const v = (0, decision_file_1.verifyDecisionFile)(file, scope);
+            if (!v.problem)
+                continue;
+            add(v.problem.code === 'id-mismatch' ? exports.DECISION_INTEGRITY_RULES.idReuse : exports.DECISION_INTEGRITY_RULES.mutated, file, v.problem.message);
+        }
+    }
+    const listed = (0, git_head_trust_1.gitOutput)(projectRoot, ['ls-tree', '-r', '-z', '--name-only', 'HEAD', '--', 'qa']);
+    for (const rel of (listed ?? '').split('\0').filter((p) => decision_file_1.DECISION_FILE_PATH.test(p))) {
+        const abs = path.join(projectRoot, ...rel.split('/'));
+        if (!fs.existsSync(abs)) {
+            add(exports.DECISION_INTEGRITY_RULES.mutated, abs, 'committed entry was deleted (append-only: supersede it instead)');
+            continue;
+        }
+        const head = (0, git_head_trust_1.gitOutput)(projectRoot, ['show', `HEAD:./${rel}`]);
+        if (head !== null && !sameEntry(head, fs.readFileSync(abs, 'utf8'))) {
+            add(exports.DECISION_INTEGRITY_RULES.mutated, abs, 'committed entry was edited (append-only: record a superseding entry instead)');
+        }
+    }
+    return [...out.values()];
+}
+//# sourceMappingURL=decision-integrity-check.js.map

package/dist/decisions/decision-integrity-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-integrity-check.js","sourceRoot":"","sources":["../../src/decisions/decision-integrity-check.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,wDA4BC;AA5DD;;;;;;;;;;GAUG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,8DAAyD;AACzD,2DAAoD;AACpD,mDAA2F;AAC3F,qDAAoD;AAEvC,QAAA,wBAAwB,GAAG,EAAE,OAAO,EAAE,mBAAmB,EAAE,OAAO,EAAE,kBAAkB,EAAW,CAAC;AAK/G,sGAAsG;AACtG,SAAS,SAAS,CAAC,CAAS,EAAE,CAAS;IACrC,IAAI,CAAC;QACH,OAAO,IAAA,iCAAa,EAAC,IAAA,+BAAa,EAAC,CAAC,CAAC,CAAC,KAAK,IAAA,iCAAa,EAAC,IAAA,+BAAa,EAAC,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,MAAM,GAAG,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC/C,MAAM,GAAG,GAAG,CAAC,IAA2B,EAAE,GAAW,EAAE,OAAe,EAAQ,EAAE;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1F,CAAC,CAAC;IAEF,KAAK,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,IAAA,gCAAgB,EAAC,WAAW,CAAC,EAAE,CAAC;QAC3D,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YAAC,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3F,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,CAAC,GAAG,IAAA,kCAAkB,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC1C,IAAI,CAAC,CAAC,CAAC,OAAO;gBAAE,SAAS;YACzB,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,gCAAwB,CAAC,OAAO,CAAC,CAAC,CAAC,gCAAwB,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACvI,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAA,0BAAG,EAAC,WAAW,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5F,KAAK,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kCAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,GAAG,CAAC,gCAAwB,CAAC,OAAO,EAAE,GAAG,EAAE,iEAAiE,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACrJ,MAAM,IAAI,GAAG,IAAA,0BAAG,EAAC,WAAW,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,gCAAwB,CAAC,OAAO,EAAE,GAAG,EAAE,8EAA8E,CAAC,CAAC;QAC7H,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;AAC3B,CAAC"}

package/dist/decisions/decision-schema.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Decision entry schema (DOS-13.2).
+ *
+ * `{id, kind, anchors[], text, reason, payload?, source:{by, where}, valid_from, supersedes?,
+ *   visibility: internal|client, evidence_hash?, entry_hash}`
+ *
+ * Validation is strict both ways: a draft is checked before it is written, and a stored entry is
+ * checked when read — an unknown key (a stored `superseded_by`, say) makes the entry invalid, because
+ * a field outside the id's content could carry meaning the id does not vouch for.
+ */
+export declare const DECISION_KINDS: readonly ["waiver", "gate-override", "contract-approval", "viewpoint-acceptance", "clarification"];
+export type DecisionKind = typeof DECISION_KINDS[number];
+export type DecisionVisibility = 'internal' | 'client';
+export type JsonValue = string | number | boolean | null | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+export interface DecisionSource {
+    by: string;
+    where: string;
+}
+export interface DecisionDraft {
+    kind: DecisionKind;
+    anchors: string[];
+    text: string;
+    reason: string;
+    payload?: Record<string, JsonValue>;
+    source: DecisionSource;
+    valid_from: string;
+    supersedes?: string;
+    visibility: DecisionVisibility;
+    evidence_hash?: string;
+}
+export interface DecisionEntry extends DecisionDraft {
+    id: string;
+    entry_hash: string;
+}
+export declare const DECISION_ID_RE: RegExp;
+/** Errors in a draft (empty = valid). Shared by the write boundary and the stored-entry check. */
+export declare function draftErrors(d: Record<string, unknown>): string[];
+/** A stored entry: the draft rules plus id, entry_hash and no unknown keys. */
+export declare function storedEntryErrors(raw: unknown): string[];
+//# sourceMappingURL=decision-schema.d.ts.map

package/dist/decisions/decision-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-schema.d.ts","sourceRoot":"","sources":["../../src/decisions/decision-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,eAAO,MAAM,cAAc,oGAAqG,CAAC;AACjI,MAAM,MAAM,YAAY,GAAG,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;AACzD,MAAM,MAAM,kBAAkB,GAAG,UAAU,GAAG,QAAQ,CAAC;AACvD,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,EAAE,GAAG;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEtG,MAAM,WAAW,cAAc;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAE7D,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,YAAY,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,EAAE,cAAc,CAAC;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAc,SAAQ,aAAa;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE;AAEvF,eAAO,MAAM,cAAc,QAAqB,CAAC;AAgBjD,kGAAkG;AAClG,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,EAAE,CAgBhE;AAED,+EAA+E;AAC/E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,EAAE,CAOxD"}

package/dist/decisions/decision-schema.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DECISION_ID_RE = exports.DECISION_KINDS = void 0;
+exports.draftErrors = draftErrors;
+exports.storedEntryErrors = storedEntryErrors;
+/**
+ * Decision entry schema (DOS-13.2).
+ *
+ * `{id, kind, anchors[], text, reason, payload?, source:{by, where}, valid_from, supersedes?,
+ *   visibility: internal|client, evidence_hash?, entry_hash}`
+ *
+ * Validation is strict both ways: a draft is checked before it is written, and a stored entry is
+ * checked when read — an unknown key (a stored `superseded_by`, say) makes the entry invalid, because
+ * a field outside the id's content could carry meaning the id does not vouch for.
+ */
+exports.DECISION_KINDS = ['waiver', 'gate-override', 'contract-approval', 'viewpoint-acceptance', 'clarification'];
+exports.DECISION_ID_RE = /^D-[0-9a-f]{16}$/;
+const ENTRY_HASH_RE = /^[0-9a-f]{64}$/;
+const ISO_RE = /^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:\d{2})$/;
+const STORED_KEYS = new Set(['id', 'kind', 'anchors', 'text', 'reason', 'payload', 'source', 'valid_from', 'supersedes', 'visibility', 'evidence_hash', 'entry_hash']);
+const isObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const nonEmpty = (v) => typeof v === 'string' && v.trim().length > 0;
+function isJson(v, depth = 0) {
+    if (depth > 20)
+        return false;
+    if (v === null || typeof v === 'string' || typeof v === 'boolean')
+        return true;
+    if (typeof v === 'number')
+        return Number.isFinite(v);
+    if (Array.isArray(v))
+        return v.every((x) => isJson(x, depth + 1));
+    return isObject(v) && Object.values(v).every((x) => isJson(x, depth + 1));
+}
+/** Errors in a draft (empty = valid). Shared by the write boundary and the stored-entry check. */
+function draftErrors(d) {
+    const e = [];
+    if (!exports.DECISION_KINDS.includes(d.kind))
+        e.push(`kind must be one of ${exports.DECISION_KINDS.join('|')}`);
+    if (!Array.isArray(d.anchors) || !d.anchors.every(nonEmpty))
+        e.push('anchors must be a list of non-empty strings');
+    if (!nonEmpty(d.text))
+        e.push('text is required');
+    if (!nonEmpty(d.reason))
+        e.push('reason is required');
+    if (d.payload !== undefined && !(isObject(d.payload) && isJson(d.payload)))
+        e.push('payload must be a JSON object');
+    const src = d.source;
+    if (!isObject(src) || typeof src.by !== 'string' || !nonEmpty(src.where) || Object.keys(src).some((k) => k !== 'by' && k !== 'where')) {
+        e.push('source must be {by, where}');
+    }
+    if (typeof d.valid_from !== 'string' || !ISO_RE.test(d.valid_from) || Number.isNaN(Date.parse(d.valid_from)))
+        e.push('valid_from must be an ISO-8601 timestamp');
+    if (d.supersedes !== undefined && (typeof d.supersedes !== 'string' || !exports.DECISION_ID_RE.test(d.supersedes)))
+        e.push('supersedes must be a decision id D-<16 hex>');
+    if (d.visibility !== 'internal' && d.visibility !== 'client')
+        e.push('visibility must be internal|client');
+    if (d.evidence_hash !== undefined && typeof d.evidence_hash !== 'string')
+        e.push('evidence_hash must be a string');
+    return e;
+}
+/** A stored entry: the draft rules plus id, entry_hash and no unknown keys. */
+function storedEntryErrors(raw) {
+    if (!isObject(raw))
+        return ['not a mapping'];
+    const e = draftErrors(raw);
+    for (const k of Object.keys(raw))
+        if (!STORED_KEYS.has(k))
+            e.push(`unknown key "${k}"`);
+    if (typeof raw.id !== 'string' || !exports.DECISION_ID_RE.test(raw.id))
+        e.push('id must be D-<16 hex>');
+    if (typeof raw.entry_hash !== 'string' || !ENTRY_HASH_RE.test(raw.entry_hash))
+        e.push('entry_hash must be 64 hex');
+    return e;
+}
+//# sourceMappingURL=decision-schema.js.map

package/dist/decisions/decision-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-schema.js","sourceRoot":"","sources":["../../src/decisions/decision-schema.ts"],"names":[],"mappings":";;;AAiDA,kCAgBC;AAGD,8CAOC;AA3ED;;;;;;;;;GASG;AACU,QAAA,cAAc,GAAG,CAAC,QAAQ,EAAE,eAAe,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,eAAe,CAAU,CAAC;AAsBpH,QAAA,cAAc,GAAG,kBAAkB,CAAC;AACjD,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,MAAM,GAAG,qEAAqE,CAAC;AACrF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC;AAEvK,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACxH,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAW,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAEvF,SAAS,MAAM,CAAC,CAAU,EAAE,KAAK,GAAG,CAAC;IACnC,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IAAI,CAAC,KAAK,IAAI,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAClE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,kGAAkG;AAClG,SAAgB,WAAW,CAAC,CAA0B;IACpD,MAAM,CAAC,GAAa,EAAE,CAAC;IACvB,IAAI,CAAC,sBAAc,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAoB,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,sBAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IACnH,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClD,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACpH,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACrB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;QACtI,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;IACvC,CAAC;IACD,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACjK,IAAI,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,sBAAc,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,6CAA6C,CAAC,CAAC;IAClK,IAAI,CAAC,CAAC,UAAU,KAAK,UAAU,IAAI,CAAC,CAAC,UAAU,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC3G,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,aAAa,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;IACnH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,+EAA+E;AAC/E,SAAgB,iBAAiB,CAAC,GAAY;IAC5C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC7C,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACxF,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,sBAAc,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAChG,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACnH,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/decisions/decision-source.d.ts

@@ -0,0 +1,2 @@
+export declare function gitUserName(cwd: string): string;
+//# sourceMappingURL=decision-source.d.ts.map

package/dist/decisions/decision-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-source.d.ts","sourceRoot":"","sources":["../../src/decisions/decision-source.ts"],"names":[],"mappings":"AAMA,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAO/C"}

package/dist/decisions/decision-source.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gitUserName = gitUserName;
+/**
+ * Who recorded a decision: `git config user.name` — a name, never the email (DOS-13.2, security
+ * considerations). Best-effort: no git, no name → 'unknown'.
+ */
+const child_process_1 = require("child_process");
+function gitUserName(cwd) {
+    try {
+        const name = (0, child_process_1.execFileSync)('git', ['config', 'user.name'], { cwd, stdio: ['ignore', 'pipe', 'ignore'], timeout: 5000 }).toString('utf8').trim();
+        return name || 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+//# sourceMappingURL=decision-source.js.map

package/dist/decisions/decision-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decision-source.js","sourceRoot":"","sources":["../../src/decisions/decision-source.ts"],"names":[],"mappings":";;AAMA,kCAOC;AAbD;;;GAGG;AACH,iDAA6C;AAE7C,SAAgB,WAAW,CAAC,GAAW;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/I,OAAO,IAAI,IAAI,SAAS,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/decisions/exclusive-file-create.d.ts

@@ -0,0 +1,3 @@
+/** true = created, false = the name was already taken. Any other failure throws. */
+export declare function createFileExclusive(file: string, text: string): boolean;
+//# sourceMappingURL=exclusive-file-create.d.ts.map

package/dist/decisions/exclusive-file-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exclusive-file-create.d.ts","sourceRoot":"","sources":["../../src/decisions/exclusive-file-create.ts"],"names":[],"mappings":"AAcA,oFAAoF;AACpF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CA0BvE"}