@sun-asterisk/sungen 3.2.34-beta.1 → 3.3.0-alpha.1

package/dist/harness/gates/audit-gate-terms.d.ts

@@ -0,0 +1,41 @@
+/**
+ * The audit's gateStatus conjunction, in ONE place (OES-11.2): `runAudit` evaluates it to set
+ * gateStatus, and `verifyAuditReport` re-evaluates it from the report's own fields to catch a stored
+ * PASS the report cannot reproduce (a hand-flipped gateStatus + exitCode — tester finding m1).
+ *
+ * Each term names its catalog rule; `resolveRule` decides whether a violated one blocks. The decision
+ * layer adds three hard terms: a rejected override, a decision file that does not verify (id / hash).
+ * Re-evaluating catches casual tampering only: a forger who also rewrites every finding, gap and
+ * verdict in the report is out of scope here, as for inputsHash (anti-staleness, not anti-forgery).
+ */
+import { GateTerm } from './gate-terms';
+import { UnitGateOverrides } from './unit-gate-overrides';
+/** The report fields the conjunction reads — present in every report runAudit writes. */
+export interface AuditTermSources {
+    gate: {
+        gaps: unknown[];
+    };
+    depth: {
+        verdict: string;
+    };
+    claim: {
+        verdict: string;
+    };
+    spec: {
+        verdict: string;
+    };
+    taxonomyMismatch: boolean;
+    gateSensorError: boolean;
+    reusedScenarioIds: unknown[];
+}
+export declare function auditGateTerms(r: AuditTermSources): GateTerm[];
+export declare function decisionTerms(o: UnitGateOverrides): GateTerm[];
+/** The gateStatus a report's own terms produce under the unit's overrides — what the audit computed. */
+export declare function recomputeAuditGateStatus(sources: AuditTermSources, overrides: UnitGateOverrides): 'PASS' | 'FAIL';
+/**
+ * The term sources of a parsed audit.json. `strict` (a current report): every field must be there with
+ * its type, else null. Not strict (a legacy report, written before some fields): a missing field reads
+ * as "holds", so only a stored PASS that a present field contradicts can be caught.
+ */
+export declare function termSourcesOf(r: Record<string, unknown>, strict: boolean): AuditTermSources | null;
+//# sourceMappingURL=audit-gate-terms.d.ts.map

package/dist/harness/gates/audit-gate-terms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-gate-terms.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/audit-gate-terms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAqB,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,yFAAyF;AACzF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,EAAE,CAAA;KAAE,CAAC;IAC1B,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,KAAK,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3B,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,EAAE,CAAC;CAC9B;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,gBAAgB,GAAG,QAAQ,EAAE,CAY9D;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,iBAAiB,GAAG,QAAQ,EAAE,CAM9D;AAED,wGAAwG;AACxG,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,gBAAgB,EAAE,SAAS,EAAE,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAGjH;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,GAAG,gBAAgB,GAAG,IAAI,CAmBlG"}

package/dist/harness/gates/audit-gate-terms.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditGateTerms = auditGateTerms;
+exports.decisionTerms = decisionTerms;
+exports.recomputeAuditGateStatus = recomputeAuditGateStatus;
+exports.termSourcesOf = termSourcesOf;
+/**
+ * The audit's gateStatus conjunction, in ONE place (OES-11.2): `runAudit` evaluates it to set
+ * gateStatus, and `verifyAuditReport` re-evaluates it from the report's own fields to catch a stored
+ * PASS the report cannot reproduce (a hand-flipped gateStatus + exitCode — tester finding m1).
+ *
+ * Each term names its catalog rule; `resolveRule` decides whether a violated one blocks. The decision
+ * layer adds three hard terms: a rejected override, a decision file that does not verify (id / hash).
+ * Re-evaluating catches casual tampering only: a forger who also rewrites every finding, gap and
+ * verdict in the report is out of scope here, as for inputsHash (anti-staleness, not anti-forgery).
+ */
+const gate_terms_1 = require("./gate-terms");
+const resolve_rule_1 = require("./resolve-rule");
+function auditGateTerms(r) {
+    return [
+        { rule: 'audit.viewpoint-coverage', holds: r.gate.gaps.length === 0 },
+        { rule: 'audit.assertion-depth', holds: r.depth.verdict !== 'fail' },
+        { rule: 'audit.claim-proof', holds: r.claim.verdict !== 'fail' },
+        { rule: 'audit.spec-coverage', holds: r.spec.verdict !== 'fail' },
+        { rule: 'audit.taxonomy-mismatch', holds: !r.taxonomyMismatch },
+        // An 'error' finding from a capability gate sensor (api, db, …) — the driver's own verdict.
+        { rule: 'audit.gate-sensor-error', holds: !r.gateSensorError },
+        // #694 — a reused id reaches the deliverable as two rows under one testcase id.
+        { rule: 'audit.scenario-id-reuse', holds: r.reusedScenarioIds.length === 0 },
+    ];
+}
+function decisionTerms(o) {
+    return [
+        { rule: 'gate.override-rejected', holds: o.rejected.length === 0 },
+        { rule: 'decision.id-reuse', holds: !o.problems.some((p) => p.code === 'id-mismatch') },
+        { rule: 'decision.mutated', holds: !o.problems.some((p) => p.code !== 'id-mismatch') },
+    ];
+}
+/** The gateStatus a report's own terms produce under the unit's overrides — what the audit computed. */
+function recomputeAuditGateStatus(sources, overrides) {
+    const outcome = (0, gate_terms_1.evaluateGateTerms)([...auditGateTerms(sources), ...decisionTerms(overrides)], (0, resolve_rule_1.trackGateRules)(overrides.context));
+    return outcome.pass ? 'PASS' : 'FAIL';
+}
+const isObj = (v) => !!v && typeof v === 'object' && !Array.isArray(v);
+/**
+ * The term sources of a parsed audit.json. `strict` (a current report): every field must be there with
+ * its type, else null. Not strict (a legacy report, written before some fields): a missing field reads
+ * as "holds", so only a stored PASS that a present field contradicts can be caught.
+ */
+function termSourcesOf(r, strict) {
+    const verdict = (k) => {
+        const v = r[k];
+        if (!isObj(v))
+            return strict ? null : undefined;
+        return typeof v.verdict === 'string' ? v.verdict : strict ? null : undefined;
+    };
+    const gaps = isObj(r.gate) && Array.isArray(r.gate.gaps) ? r.gate.gaps : strict ? null : [];
+    const depth = verdict('depth');
+    const claim = verdict('claim');
+    const spec = verdict('spec');
+    const flag = (k) => (typeof r[k] === 'boolean' ? r[k] : strict ? null : false);
+    const taxonomyMismatch = flag('taxonomyMismatch');
+    const gateSensorError = flag('gateSensorError');
+    const reused = Array.isArray(r.reusedScenarioIds) ? r.reusedScenarioIds : strict ? null : [];
+    if ([gaps, depth, claim, spec, taxonomyMismatch, gateSensorError, reused].some((x) => x === null))
+        return null;
+    return {
+        gate: { gaps: gaps }, depth: { verdict: depth ?? 'pass' }, claim: { verdict: claim ?? 'pass' }, spec: { verdict: spec ?? 'pass' },
+        taxonomyMismatch: taxonomyMismatch, gateSensorError: gateSensorError, reusedScenarioIds: reused,
+    };
+}
+//# sourceMappingURL=audit-gate-terms.js.map

package/dist/harness/gates/audit-gate-terms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-gate-terms.js","sourceRoot":"","sources":["../../../src/harness/gates/audit-gate-terms.ts"],"names":[],"mappings":";;AAyBA,wCAYC;AAED,sCAMC;AAGD,4DAGC;AASD,sCAmBC;AA/ED;;;;;;;;;GASG;AACH,6CAA2D;AAC3D,iDAAgD;AAchD,SAAgB,cAAc,CAAC,CAAmB;IAChD,OAAO;QACL,EAAE,IAAI,EAAE,0BAA0B,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE;QACrE,EAAE,IAAI,EAAE,uBAAuB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE;QACpE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,MAAM,EAAE;QAChE,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE;QACjE,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB,EAAE;QAC/D,4FAA4F;QAC5F,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,eAAe,EAAE;QAC9D,gFAAgF;QAChF,EAAE,IAAI,EAAE,yBAAyB,EAAE,KAAK,EAAE,CAAC,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC,EAAE;KAC7E,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa,CAAC,CAAoB;IAChD,OAAO;QACL,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE;QAClE,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE;QACvF,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,EAAE;KACvF,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,SAAgB,wBAAwB,CAAC,OAAyB,EAAE,SAA4B;IAC9F,MAAM,OAAO,GAAG,IAAA,8BAAiB,EAAC,CAAC,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC,EAAE,IAAA,6BAAc,EAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChI,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACxC,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAE9G;;;;GAIG;AACH,SAAgB,aAAa,CAAC,CAA0B,EAAE,MAAe;IACvE,MAAM,OAAO,GAAG,CAAC,CAAS,EAA6B,EAAE;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACf,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,OAAO,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,CAAC,CAAS,EAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAClH,MAAM,gBAAgB,GAAG,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAClD,MAAM,eAAe,GAAG,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/G,OAAO;QACL,IAAI,EAAE,EAAE,IAAI,EAAE,IAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,KAAK,IAAI,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE;QAC9I,gBAAgB,EAAE,gBAA2B,EAAE,eAAe,EAAE,eAA0B,EAAE,iBAAiB,EAAE,MAAmB;KACnI,CAAC;AACJ,CAAC"}

package/dist/harness/gates/audit-gate-verdict.d.ts

@@ -0,0 +1,31 @@
+import { SensorVerdict } from './gate-terms';
+import { AuditTermSources } from './audit-gate-terms';
+import { GateOverrideReport } from './gate-override-report';
+import { GateRules, TrackedGateRules } from './resolve-rule';
+import { UnitGateOverrides } from './unit-gate-overrides';
+export declare const AUDIT_EXIT_CODE: {
+    readonly PASS: 0;
+    readonly FAIL: 2;
+};
+export interface AuditGateContext {
+    projectRoot: string;
+    overrides: UnitGateOverrides;
+    rules: TrackedGateRules;
+}
+export declare function auditGateContext(unitDir: string): AuditGateContext;
+/** A depth verdict a capability computed with the catalog alone, re-levelled for this unit's rules. */
+export declare function relevelProvidedDepth<T extends {
+    verdict: SensorVerdict;
+}>(depth: T, rules: GateRules): T;
+/** Findings for the decision layer — empty when the unit has no override and no bad decision file. */
+export declare function decisionFindings(ctx: AuditGateContext): string[];
+export interface AuditGateVerdict {
+    gateStatus: 'PASS' | 'FAIL';
+    gateOverrides: GateOverrideReport[];
+    decisionsHash: string;
+    inputsHash: string;
+    exitCode: number;
+}
+/** Evaluate the gateStatus conjunction (audit-gate-terms.ts, shared with the reader) and the verifiable fields. */
+export declare function auditGateVerdict(ctx: AuditGateContext, sources: AuditTermSources, unitDir: string, unitName: string): AuditGateVerdict;
+//# sourceMappingURL=audit-gate-verdict.d.ts.map

package/dist/harness/gates/audit-gate-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-gate-verdict.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/audit-gate-verdict.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAkC,aAAa,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAkB,gBAAgB,EAAiB,MAAM,oBAAoB,CAAC;AACrF,OAAO,EAAE,kBAAkB,EAAuB,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAkB,MAAM,gBAAgB,CAAC;AAC7E,OAAO,EAAyC,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAEjG,eAAO,MAAM,eAAe;;;CAAgC,CAAC;AAE7D,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,iBAAiB,CAAC;IAC7B,KAAK,EAAE,gBAAgB,CAAC;CACzB;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,CAIlE;AAED,uGAAuG;AACvG,wBAAgB,oBAAoB,CAAC,CAAC,SAAS;IAAE,OAAO,EAAE,aAAa,CAAA;CAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,SAAS,GAAG,CAAC,CAIxG;AAED,sGAAsG;AACtG,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,GAAG,MAAM,EAAE,CAWhE;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,aAAa,EAAE,kBAAkB,EAAE,CAAC;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,mHAAmH;AACnH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,gBAAgB,CAUtI"}

package/dist/harness/gates/audit-gate-verdict.js

@@ -0,0 +1,101 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUDIT_EXIT_CODE = void 0;
+exports.auditGateContext = auditGateContext;
+exports.relevelProvidedDepth = relevelProvidedDepth;
+exports.decisionFindings = decisionFindings;
+exports.auditGateVerdict = auditGateVerdict;
+/**
+ * The audit's side of the gate registry (OES-11.2/11.4): load the unit's gate overrides, hand the
+ * tracked rules to the sensors, evaluate the gateStatus conjunction, and produce the fields the
+ * report records so readers can verify it (takumi T3):
+ *
+ *   gateOverrides[]  every override touching the unit, applied / ineffective / rejected
+ *   decisionsHash    the overrides it was judged under       (stale when they change)
+ *   inputsHash       .feature + spec + viewpoint + decisionsHash
+ *   exitCode         0 on PASS, 2 on FAIL — what `sungen audit` exits with
+ *
+ * The decision layer adds three hard terms: a rejected override (gate.override-rejected) and a
+ * decision file in the unit's reach that does not verify (decision.id-reuse / decision.mutated).
+ * With no decision at all none of this changes an outcome.
+ */
+const path = __importStar(require("path"));
+const intent_1 = require("../intent");
+const audit_input_hash_1 = require("./audit-input-hash");
+const gate_terms_1 = require("./gate-terms");
+const audit_gate_terms_1 = require("./audit-gate-terms");
+const gate_override_report_1 = require("./gate-override-report");
+const resolve_rule_1 = require("./resolve-rule");
+const unit_gate_overrides_1 = require("./unit-gate-overrides");
+exports.AUDIT_EXIT_CODE = { PASS: 0, FAIL: 2 };
+function auditGateContext(unitDir) {
+    const projectRoot = (0, intent_1.projectRootFromScreenDir)(unitDir);
+    const overrides = (0, unit_gate_overrides_1.loadUnitGateOverrides)(projectRoot, (0, unit_gate_overrides_1.unitScopeOfDir)(projectRoot, unitDir));
+    return { projectRoot, overrides, rules: (0, resolve_rule_1.trackGateRules)(overrides.context) };
+}
+/** A depth verdict a capability computed with the catalog alone, re-levelled for this unit's rules. */
+function relevelProvidedDepth(depth, rules) {
+    if (depth.verdict !== 'fail')
+        return depth;
+    const verdict = (0, gate_terms_1.ruleVerdict)(rules, 'audit.assertion-depth', true, false);
+    return verdict === 'fail' ? depth : { ...depth, verdict };
+}
+/** Findings for the decision layer — empty when the unit has no override and no bad decision file. */
+function decisionFindings(ctx) {
+    const o = ctx.overrides;
+    const rel = (p) => path.relative(ctx.projectRoot, p).split(path.sep).join('/');
+    return [
+        ...o.rejected.map((r) => `GATE-OVERRIDE-REJECTED (gate.override-rejected): ${r.decisionId} in ${r.path} cannot apply — ${r.reason}. Record a valid override that supersedes it.`),
+        ...o.ineffective.map((r) => `GATE-OVERRIDE-INEFFECTIVE: ${r.decisionId} (${r.rule ?? '?'}) in ${r.path} relaxes nothing — ${r.reason}. Record it with \`sungen journey --decide gate-override\` on a terminal.`),
+        ...o.problems.map((p) => `${p.code === 'id-mismatch' ? 'DECISION-ID-REUSED (decision.id-reuse)' : 'DECISION-UNVERIFIABLE (decision.mutated)'}: ${rel(p.path)} — ${p.message}. Restore it from git; change a decision by recording a superseding one.`),
+        ...o.inForce.map((x) => `GATE-OVERRIDDEN: ${x.rule} is ${x.severity} for ${x.scope} (catalog level lowered by ${x.decisionId}, recorded by ${x.by}) — ${x.reason}`),
+        // Review H1: it counts here so its author sees the effect; release refuses it until reviewed.
+        ...o.inForce.filter((x) => x.committed === false).map((x) => `GATE-OVERRIDE-UNCOMMITTED: ${x.decisionId} (${x.rule}) is not in git HEAD — it counts in this audit, but \`sungen gate --phase deliver\` and \`sungen delivery\` refuse it (decision.in-run) until it is committed through review.`),
+    ];
+}
+/** Evaluate the gateStatus conjunction (audit-gate-terms.ts, shared with the reader) and the verifiable fields. */
+function auditGateVerdict(ctx, sources, unitDir, unitName) {
+    const outcome = (0, gate_terms_1.evaluateGateTerms)([...(0, audit_gate_terms_1.auditGateTerms)(sources), ...(0, audit_gate_terms_1.decisionTerms)(ctx.overrides)], ctx.rules);
+    const gateStatus = outcome.pass ? 'PASS' : 'FAIL';
+    return {
+        gateStatus,
+        gateOverrides: (0, gate_override_report_1.gateOverrideReports)(ctx.overrides, ctx.rules.triggered()),
+        decisionsHash: ctx.overrides.decisionsHash,
+        inputsHash: (0, audit_input_hash_1.auditInputsHash)(unitDir, unitName, ctx.overrides.decisionsHash),
+        exitCode: exports.AUDIT_EXIT_CODE[gateStatus],
+    };
+}
+//# sourceMappingURL=audit-gate-verdict.js.map

package/dist/harness/gates/audit-gate-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-gate-verdict.js","sourceRoot":"","sources":["../../../src/harness/gates/audit-gate-verdict.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+BA,4CAIC;AAGD,oDAIC;AAGD,4CAWC;AAWD,4CAUC;AA7ED;;;;;;;;;;;;;GAaG;AACH,2CAA6B;AAC7B,sCAAqD;AACrD,yDAAqD;AACrD,6CAA6E;AAC7E,yDAAqF;AACrF,iEAAiF;AACjF,iDAA6E;AAC7E,+DAAiG;AAEpF,QAAA,eAAe,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAW,CAAC;AAQ7D,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,MAAM,WAAW,GAAG,IAAA,iCAAwB,EAAC,OAAO,CAAC,CAAC;IACtD,MAAM,SAAS,GAAG,IAAA,2CAAqB,EAAC,WAAW,EAAE,IAAA,oCAAc,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC3F,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,IAAA,6BAAc,EAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,uGAAuG;AACvG,SAAgB,oBAAoB,CAAuC,KAAQ,EAAE,KAAgB;IACnG,IAAI,KAAK,CAAC,OAAO,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAA,wBAAW,EAAC,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACzE,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5D,CAAC;AAED,sGAAsG;AACtG,SAAgB,gBAAgB,CAAC,GAAqB;IACpD,MAAM,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC;IACxB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/F,OAAO;QACL,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oDAAoD,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,IAAI,mBAAmB,CAAC,CAAC,MAAM,+CAA+C,CAAC;QACjL,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI,IAAI,GAAG,QAAQ,CAAC,CAAC,IAAI,sBAAsB,CAAC,CAAC,MAAM,2EAA2E,CAAC;QAChN,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC,CAAC,0CAA0C,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,0EAA0E,CAAC;QACtP,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,KAAK,8BAA8B,CAAC,CAAC,UAAU,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;QACnK,8FAA8F;QAC9F,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAA8B,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI,+KAA+K,CAAC;KACnS,CAAC;AACJ,CAAC;AAUD,mHAAmH;AACnH,SAAgB,gBAAgB,CAAC,GAAqB,EAAE,OAAyB,EAAE,OAAe,EAAE,QAAgB;IAClH,MAAM,OAAO,GAAG,IAAA,8BAAiB,EAAC,CAAC,GAAG,IAAA,iCAAc,EAAC,OAAO,CAAC,EAAE,GAAG,IAAA,gCAAa,EAAC,GAAG,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;IAC5G,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAClD,OAAO;QACL,UAAU;QACV,aAAa,EAAE,IAAA,0CAAmB,EAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACxE,aAAa,EAAE,GAAG,CAAC,SAAS,CAAC,aAAa;QAC1C,UAAU,EAAE,IAAA,kCAAe,EAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,SAAS,CAAC,aAAa,CAAC;QAC3E,QAAQ,EAAE,uBAAe,CAAC,UAAU,CAAC;KACtC,CAAC;AACJ,CAAC"}

package/dist/harness/gates/audit-input-hash.d.ts

@@ -0,0 +1,4 @@
+/** The audit's input files that exist, in a stable order. */
+export declare function auditInputFiles(unitDir: string, unitName: string): string[];
+export declare function auditInputsHash(unitDir: string, unitName: string, decisionsHash: string): string;
+//# sourceMappingURL=audit-input-hash.d.ts.map

package/dist/harness/gates/audit-input-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-input-hash.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/audit-input-hash.ts"],"names":[],"mappings":"AAmCA,6DAA6D;AAC7D,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,EAAE,CAW3E;AAED,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,MAAM,CAKhG"}

package/dist/harness/gates/audit-input-hash.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditInputFiles = auditInputFiles;
+exports.auditInputsHash = auditInputsHash;
+/**
+ * `inputsHash` of an audit (OES-11.4, takumi T3): the hash of what the audit judged plus the
+ * `decisionsHash` it was judged under. A reader recomputes it; any difference means the report no
+ * longer describes the unit, so it counts as never audited.
+ *
+ * It is ANTI-STALENESS, NOT ANTI-FORGERY: anyone who can write audit.json can also compute this hash
+ * (the function is public). It catches a report that outlived its inputs; verdicts built by code and
+ * the git-HEAD checks on decisions are what stand against a forger.
+ *
+ * Inputs — every file whose change can move a verdict:
+ *   the unit's .feature files · requirements/spec.md · requirements/test-viewpoint.md ·
+ *   requirements/flow-contract.yaml · requirements/spec_figma.md · requirements/ui-inventory.md ·
+ *   requirements/ui/* · qa/context.md (intent focus → thresholds) · qa/capabilities.yaml (platform,
+ *   enabled drivers → gate sensors)
+ * Not yet (phase 05 follow-ups): qa/defects/ and the sibling flows credited to a screen.
+ */
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const decision_identity_1 = require("../../decisions/decision-identity");
+const intent_1 = require("../intent");
+const unit_paths_1 = require("../unit-paths");
+const sha256 = (s) => (0, crypto_1.createHash)('sha256').update(s).digest('hex');
+function fileSha(file) {
+    try {
+        return sha256(fs.readFileSync(file));
+    }
+    catch {
+        return null;
+    }
+}
+function filesIn(dir) {
+    try {
+        return fs.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => path.join(dir, e.name)).sort();
+    }
+    catch {
+        return [];
+    }
+}
+/** The audit's input files that exist, in a stable order. */
+function auditInputFiles(unitDir, unitName) {
+    const req = path.join(unitDir, 'requirements');
+    const qa = path.join((0, intent_1.projectRootFromScreenDir)(unitDir), 'qa');
+    const candidates = [
+        ...(0, unit_paths_1.featureFilesFor)(unitDir, unitName),
+        ...['spec.md', 'test-viewpoint.md', 'flow-contract.yaml', 'spec_figma.md', 'ui-inventory.md'].map((f) => path.join(req, f)),
+        ...filesIn(path.join(req, 'ui')),
+        path.join(qa, 'context.md'),
+        path.join(qa, 'capabilities.yaml'),
+    ];
+    return candidates.filter((f) => fs.existsSync(f));
+}
+function auditInputsHash(unitDir, unitName, decisionsHash) {
+    const root = (0, intent_1.projectRootFromScreenDir)(unitDir);
+    const inputs = auditInputFiles(unitDir, unitName)
+        .map((f) => ({ file: path.relative(root, f).split(path.sep).join('/'), sha: fileSha(f) }));
+    return sha256((0, decision_identity_1.canonicalJson)({ schema: 2, inputs, decisionsHash }));
+}
+//# sourceMappingURL=audit-input-hash.js.map

package/dist/harness/gates/audit-input-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-input-hash.js","sourceRoot":"","sources":["../../../src/harness/gates/audit-input-hash.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoCA,0CAWC;AAED,0CAKC;AAtDD;;;;;;;;;;;;;;;GAeG;AACH,mCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAC7B,yEAAkE;AAClE,sCAAqD;AACrD,8CAAgD;AAEhD,MAAM,MAAM,GAAG,CAAC,CAAkB,EAAU,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE5F,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1H,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,6DAA6D;AAC7D,SAAgB,eAAe,CAAC,OAAe,EAAE,QAAgB;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,iCAAwB,EAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG;QACjB,GAAG,IAAA,4BAAe,EAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,GAAG,CAAC,SAAS,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3H,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC;KACnC,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,eAAe,CAAC,OAAe,EAAE,QAAgB,EAAE,aAAqB;IACtF,MAAM,IAAI,GAAG,IAAA,iCAAwB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,IAAA,iCAAa,EAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;AACrE,CAAC"}

package/dist/harness/gates/audit-report-verification.d.ts

@@ -0,0 +1,32 @@
+export type AuditState = 'absent' | 'verified' | 'legacy' | 'stale' | 'invalid';
+export type AuditProblemCode = 'unreadable' | 'unknown-key' | 'bad-type' | 'partial-fields' | 'status-exit-mismatch' | 'unit-unresolved' | 'decisions-changed' | 'inputs-changed' | 'legacy-with-overrides' | 'legacy-inputs-newer' | 'verdict-mismatch';
+export interface AuditVerification {
+    state: AuditState;
+    problems: Array<{
+        code: AuditProblemCode;
+        message: string;
+    }>;
+    /** Caveats on a report that counts (a legacy report's inputs are unverified). */
+    notes: string[];
+    /** The parsed report — only when it counts (verified or legacy). */
+    report: Record<string, unknown> | null;
+    path: string;
+    /** Today's decisionsHash for the unit (what a fresh audit would record). */
+    currentDecisionsHash: string;
+}
+export declare const LEGACY_AUDIT_NOTE = "legacy audit, inputs unverified \u2014 written before inputsHash existed; re-run `sungen audit` to record it";
+type JsonKind = 'string' | 'number' | 'boolean' | 'object' | 'array';
+/** Every top-level key `runAudit` writes (tests/gates/audit-report-trust.run.ts keeps this in step). */
+export declare const AUDIT_REPORT_KEYS: Record<string, JsonKind>;
+export declare function auditReportPath(projectRoot: string, unit: string): string;
+/** Today's decisionsHash for a unit name — what `next` compares an audit with (phase 05). */
+export declare function currentDecisionsHash(projectRoot: string, unit: string): string;
+export declare function verifyAuditReport(projectRoot: string, unit: string): AuditVerification;
+/** Whether the report may be used at all (verified, or a legacy report no override touches). */
+export declare const auditCounts: (v: AuditVerification) => boolean;
+/** Only an explicit `gateStatus: PASS` on a report that counts passes; a score never does. */
+export declare const auditPassed: (v: AuditVerification) => boolean;
+/** One line saying why the report does not count, for a needs-you item or a blocker. */
+export declare function auditNotCountedReason(v: AuditVerification, unit: string): string;
+export {};
+//# sourceMappingURL=audit-report-verification.d.ts.map

package/dist/harness/gates/audit-report-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-report-verification.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/audit-report-verification.ts"],"names":[],"mappings":"AA6BA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,OAAO,GAAG,SAAS,CAAC;AAChF,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,aAAa,GAAG,UAAU,GAAG,gBAAgB,GAAG,sBAAsB,GAChH,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,uBAAuB,GAAG,qBAAqB,GAAG,kBAAkB,CAAC;AAEtI,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,iFAAiF;IACjF,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,eAAO,MAAM,iBAAiB,iHAA4G,CAAC;AAS3I,KAAK,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAErE,wGAAwG;AACxG,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAOtD,CAAC;AA+BF,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAI9E;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,CAuCtF;AAcD,gGAAgG;AAChG,eAAO,MAAM,WAAW,GAAI,GAAG,iBAAiB,KAAG,OAAyD,CAAC;AAE7G,8FAA8F;AAC9F,eAAO,MAAM,WAAW,GAAI,GAAG,iBAAiB,KAAG,OAA4D,CAAC;AAEhH,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMhF"}

package/dist/harness/gates/audit-report-verification.js

@@ -0,0 +1,207 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditPassed = exports.auditCounts = exports.AUDIT_REPORT_KEYS = exports.LEGACY_AUDIT_NOTE = void 0;
+exports.auditReportPath = auditReportPath;
+exports.currentDecisionsHash = currentDecisionsHash;
+exports.verifyAuditReport = verifyAuditReport;
+exports.auditNotCountedReason = auditNotCountedReason;
+/**
+ * Reading `audit.json` back without trusting it (takumi T3, DOS-14.0, OES-11.4). The report is an
+ * OUTPUT of `sungen audit`; every reader (journey/gate, delivery, and `next` via this module) checks:
+ *
+ *   schema       a JSON object; only the keys the audit writes; known keys have their type
+ *   status       `gateStatus` is PASS|FAIL and agrees with the integer `exitCode` (0 | 2)
+ *   inputs       `inputsHash` equals the hash of today's inputs + decisions (audit-input-hash.ts)
+ *   decisions    `decisionsHash` equals today's — otherwise the audit is stale: re-audit
+ *   verdict      gateStatus re-evaluated from the report's own terms (audit-gate-terms.ts) under the
+ *                overrides in force — a flipped gateStatus + exitCode is `verdict-mismatch` (tester m1)
+ * Anything else counts as NEVER AUDITED, not as clean; only an explicit `gateStatus: PASS` passes.
+ * These checks are anti-STALENESS and anti-casual-tamper, NOT anti-forgery: a writer of audit.json can
+ * recompute the hashes, and one who rewrites every finding, gap and verdict is out of scope here.
+ *
+ * Legacy (DOS-11.4): a report written before these fields existed carries none of exitCode /
+ * inputsHash / decisionsHash / gateOverrides. It is still read — with the note "legacy audit, inputs
+ * unverified" — while no gate-override can apply to the unit and no input file is newer than it
+ * (mtime, review M1); otherwise it is stale. A report carrying SOME of the fields is malformed.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const resolve_unit_1 = require("../../cli/resolve-unit");
+const unit_paths_1 = require("../unit-paths");
+const audit_input_hash_1 = require("./audit-input-hash");
+const audit_gate_verdict_1 = require("./audit-gate-verdict");
+const audit_gate_terms_1 = require("./audit-gate-terms");
+const decisions_hash_1 = require("./decisions-hash");
+const unit_gate_overrides_1 = require("./unit-gate-overrides");
+exports.LEGACY_AUDIT_NOTE = 'legacy audit, inputs unverified — written before inputsHash existed; re-run `sungen audit` to record it';
+/** A legacy report is stale once an input it judged is newer than the report itself (mtime). */
+function newerLegacyInput(reportFile, unitDir, unit) {
+    if (!unitDir)
+        return null;
+    const at = fs.statSync(reportFile).mtimeMs;
+    return (0, audit_input_hash_1.auditInputFiles)(unitDir, unit).find((f) => fs.statSync(f).mtimeMs > at) ?? null;
+}
+const OBJ = 'object';
+/** Every top-level key `runAudit` writes (tests/gates/audit-report-trust.run.ts keeps this in step). */
+exports.AUDIT_REPORT_KEYS = {
+    screen: 'string', scenarioCount: 'number', gate: OBJ, depth: OBJ, claim: OBJ, taxonomy: OBJ, balance: OBJ,
+    duplicates: OBJ, trace: OBJ, taxonomyMismatch: 'boolean', reusedScenarioIds: 'array', downstream: OBJ,
+    manualOracle: OBJ, automatableManual: OBJ, flowDepth: OBJ, oracle: OBJ, ledger: OBJ, viewpointBaseline: OBJ,
+    flowQuality: OBJ, flowInventory: OBJ, uiInventory: OBJ, calibration: OBJ, score: OBJ, gateStatus: 'string',
+    findings: 'array', intent: OBJ, provenance: OBJ, spec: OBJ,
+    gateOverrides: 'array', decisionsHash: 'string', inputsHash: 'string', exitCode: 'number', gateSensorError: 'boolean',
+};
+const P0_KEYS = ['exitCode', 'inputsHash', 'decisionsHash', 'gateOverrides', 'gateSensorError'];
+const HASH_RE = /^[0-9a-f]{64}$/;
+const kindOf = (v) => (v === null ? 'null' : Array.isArray(v) ? 'array' : typeof v);
+/** Structural problems of a parsed report, independent of the unit's current inputs. */
+function schemaProblems(r) {
+    const out = [];
+    for (const [k, v] of Object.entries(r)) {
+        const want = exports.AUDIT_REPORT_KEYS[k];
+        if (!want)
+            out.push({ code: 'unknown-key', message: `unknown key "${k}" — the audit never writes it` });
+        else if (kindOf(v) !== want)
+            out.push({ code: 'bad-type', message: `"${k}" must be ${want}, got ${kindOf(v)}` });
+    }
+    if (r.gateStatus !== 'PASS' && r.gateStatus !== 'FAIL')
+        out.push({ code: 'bad-type', message: 'gateStatus must be PASS or FAIL' });
+    if (Array.isArray(r.findings) && !r.findings.every((f) => typeof f === 'string'))
+        out.push({ code: 'bad-type', message: 'findings must be strings' });
+    const present = P0_KEYS.filter((k) => k in r);
+    if (present.length > 0 && present.length < P0_KEYS.length) {
+        out.push({ code: 'partial-fields', message: `carries ${present.join(', ')} but not ${P0_KEYS.filter((k) => !(k in r)).join(', ')}` });
+    }
+    if (present.length === P0_KEYS.length) {
+        if (!Number.isInteger(r.exitCode))
+            out.push({ code: 'bad-type', message: 'exitCode must be an integer' });
+        else if (r.gateStatus === 'PASS' || r.gateStatus === 'FAIL') {
+            if (r.exitCode !== audit_gate_verdict_1.AUDIT_EXIT_CODE[r.gateStatus])
+                out.push({ code: 'status-exit-mismatch', message: `gateStatus ${r.gateStatus} with exitCode ${r.exitCode} — a ${r.gateStatus} audit exits ${audit_gate_verdict_1.AUDIT_EXIT_CODE[r.gateStatus]}` });
+        }
+        for (const k of ['inputsHash', 'decisionsHash'])
+            if (typeof r[k] !== 'string' || !HASH_RE.test(r[k]))
+                out.push({ code: 'bad-type', message: `${k} must be 64 hex characters` });
+        if (Array.isArray(r.gateOverrides) && !r.gateOverrides.every((g) => kindOf(g) === 'object'))
+            out.push({ code: 'bad-type', message: 'gateOverrides must be objects' });
+    }
+    return out;
+}
+function auditReportPath(projectRoot, unit) {
+    return path.join(projectRoot, '.sungen', 'reports', `${(0, unit_paths_1.reportSlug)(unit)}-audit.json`);
+}
+/** Today's decisionsHash for a unit name — what `next` compares an audit with (phase 05). */
+function currentDecisionsHash(projectRoot, unit) {
+    const found = (0, resolve_unit_1.resolveUnitCandidates)(unit, projectRoot);
+    const scope = found.length === 1 ? (0, unit_gate_overrides_1.unitScopeOfDir)(projectRoot, found[0].dir) : null;
+    return (0, unit_gate_overrides_1.loadUnitGateOverrides)(projectRoot, scope).decisionsHash;
+}
+function verifyAuditReport(projectRoot, unit) {
+    const file = auditReportPath(projectRoot, unit);
+    const found = (0, resolve_unit_1.resolveUnitCandidates)(unit, projectRoot);
+    const unitDir = found.length === 1 ? found[0].dir : null;
+    const overrides = (0, unit_gate_overrides_1.loadUnitGateOverrides)(projectRoot, unitDir ? (0, unit_gate_overrides_1.unitScopeOfDir)(projectRoot, unitDir) : null);
+    const current = overrides.decisionsHash;
+    const result = (state, problems, report = null, notes = []) => ({ state, problems, notes, report, path: file, currentDecisionsHash: current });
+    if (!fs.existsSync(file))
+        return result('absent', []);
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(file, 'utf8').replace(/^/, ''));
+    }
+    catch (err) {
+        return result('invalid', [{ code: 'unreadable', message: err instanceof Error ? err.message : String(err) }]);
+    }
+    if (kindOf(parsed) !== 'object')
+        return result('invalid', [{ code: 'unreadable', message: 'not a JSON object' }]);
+    const r = parsed;
+    const schema = schemaProblems(r);
+    if (schema.length)
+        return result('invalid', schema);
+    if (!P0_KEYS.some((k) => k in r)) {
+        if (current !== decisions_hash_1.EMPTY_DECISIONS_HASH) {
+            return result('stale', [{ code: 'legacy-with-overrides', message: 'written by an earlier sungen (no decisionsHash) and a gate-override now applies to this unit' }]);
+        }
+        const newer = newerLegacyInput(file, unitDir, unit);
+        if (newer)
+            return result('stale', [{ code: 'legacy-inputs-newer', message: `written by an earlier sungen and ${path.basename(newer)} changed after it` }]);
+        // A legacy report predates gateSensorError, so only a stored PASS its own fields contradict is caught.
+        const sources = (0, audit_gate_terms_1.termSourcesOf)(r, false);
+        if (r.gateStatus === 'PASS' && sources && (0, audit_gate_terms_1.recomputeAuditGateStatus)(sources, overrides) === 'FAIL')
+            return result('invalid', [verdictMismatch(r)]);
+        return result('legacy', [], r, [exports.LEGACY_AUDIT_NOTE]);
+    }
+    const stale = [];
+    if (r.decisionsHash !== current)
+        stale.push({ code: 'decisions-changed', message: 'the gate-override decisions changed since this audit' });
+    if (!unitDir)
+        return result('invalid', [{ code: 'unit-unresolved', message: `"${unit}" does not name exactly one unit, so the audit's inputs cannot be checked` }]);
+    if (r.inputsHash !== (0, audit_input_hash_1.auditInputsHash)(unitDir, unit, r.decisionsHash)) {
+        stale.push({ code: 'inputs-changed', message: 'an input the audit judged (.feature, spec, viewpoint, context, design) changed since this audit' });
+    }
+    if (stale.length)
+        return result('stale', stale);
+    const tampered = verdictProblem(r, overrides);
+    return tampered ? result('invalid', [tampered]) : result('verified', [], r);
+}
+const verdictMismatch = (r) => ({
+    code: 'verdict-mismatch',
+    message: `verdict mismatch — gateStatus ${String(r.gateStatus)} is not what the report's own findings produce under today's overrides (edited by hand)`,
+});
+/** A current report re-evaluated from its own terms (audit-gate-terms.ts): missing terms or another verdict = not trusted. */
+function verdictProblem(r, overrides) {
+    const sources = (0, audit_gate_terms_1.termSourcesOf)(r, true);
+    if (!sources)
+        return { code: 'bad-type', message: 'the gate terms (gate.gaps, depth/claim/spec verdicts, taxonomyMismatch, gateSensorError, reusedScenarioIds) are incomplete' };
+    return (0, audit_gate_terms_1.recomputeAuditGateStatus)(sources, overrides) === r.gateStatus ? null : verdictMismatch(r);
+}
+/** Whether the report may be used at all (verified, or a legacy report no override touches). */
+const auditCounts = (v) => v.state === 'verified' || v.state === 'legacy';
+exports.auditCounts = auditCounts;
+/** Only an explicit `gateStatus: PASS` on a report that counts passes; a score never does. */
+const auditPassed = (v) => (0, exports.auditCounts)(v) && v.report?.gateStatus === 'PASS';
+exports.auditPassed = auditPassed;
+/** One line saying why the report does not count, for a needs-you item or a blocker. */
+function auditNotCountedReason(v, unit) {
+    const why = v.problems.map((p) => p.message).join('; ');
+    const rerun = `re-run \`sungen audit --screen ${unit}\``;
+    if (v.state === 'stale')
+        return `Audit report is stale (${why}) — ${rerun}.`;
+    if (v.state === 'invalid')
+        return `Audit report is not trusted (${why}) — treated as never audited; ${rerun}.`;
+    return `No audit report yet — ${rerun}.`;
+}
+//# sourceMappingURL=audit-report-verification.js.map