@sun-asterisk/sungen 3.2.34-beta.1 → 3.3.0-alpha.1

package/dist/contract/assertion-matcher-vocabulary.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertShapeOf = assertShapeOf;
+exports.matcherStrength = matcherStrength;
+const NEGATION = /\b(?:not|no longer|never|cannot|can't|don't|doesn't|isn't|aren't|shouldn't)\b/;
+const NOT_SEE = /^(?:do not|does not|don't|doesn't|should not|shouldn't|cannot|can't|not|never) see\b/;
+const IS_NOT_STATE = /\bis not (sorted ascending|sorted descending|unchecked|checked|hidden|visible|disabled|enabled|focused|empty|loading|selected)$/;
+const RANGE = /\b(?:at least|at most|more than|less than|greater than|fewer than|between)\b/;
+const PAGE_SUBJECT = /^see (?:the )?(?:current |page )?(url|title)\b(.*)$/;
+/** A state and its complement are one check with a negation: hidden = not visible. */
+const STATE_AS = {
+    visible: ['visible', false], hidden: ['visible', true],
+    enabled: ['enabled', false], disabled: ['enabled', true],
+    checked: ['checked', false], unchecked: ['checked', true],
+};
+function comparison(rest) {
+    if (/\bcontains?\b/.test(rest))
+        return '-contains';
+    if (/\bmatches\b/.test(rest))
+        return '-matches';
+    return /\b(?:is|equals?|with) \{\}|^ ?\{\}$/.test(rest) ? '' : null;
+}
+function baseMatcher(verb, state) {
+    if (/^expect\b/.test(verb)) {
+        if (/\bmatches schema\b/.test(verb))
+            return 'schema';
+        if (RANGE.test(verb))
+            return 'range';
+        if (/\bcontains?\b/.test(verb))
+            return 'contains';
+        if (/\bmatches\b/.test(verb))
+            return 'matches';
+        return /\b(?:is|equals?)\b/.test(verb) ? 'equals' : 'unknown';
+    }
+    if (/\bin (?:local|session) storage\b/.test(verb)) {
+        if (/\bkey matching\b/.test(verb))
+            return 'key-matching';
+        if (/\bhas length\b/.test(verb))
+            return 'count';
+        if (/\bis not empty\b/.test(verb))
+            return 'state:empty';
+        return /\b(?:exists?|exist)\b/.test(verb) ? 'exists' : 'unknown';
+    }
+    if (/^see tab order\b/.test(verb))
+        return 'tab-order';
+    if (/\bmatch data$/.test(verb))
+        return 'table-data';
+    if (!/^(?:see|is on)\b/.test(verb))
+        return 'unknown';
+    const page = verb.match(PAGE_SUBJECT);
+    if (page) {
+        const c = comparison(page[2]);
+        return c === null ? 'unknown' : `${page[1]}${c}`;
+    }
+    if (state)
+        return STATE_AS[state]?.[0] ?? `state:${state}`;
+    if (/^see all \[\] contains? \[\]/.test(verb))
+        return 'child';
+    if (RANGE.test(verb))
+        return 'range';
+    if (/\bmatches \{\}/.test(verb))
+        return 'matches';
+    if (/\b(?:contains?|includes?) \{\}/.test(verb))
+        return 'contains';
+    if (/\b(?:has|have|with) (?:text|value) \{\}|\bwith \{\}/.test(verb))
+        return 'equals';
+    if (/\b(?:has|have) (?:\d+|\{\})(?: [\w-]+)?$/.test(verb))
+        return 'count';
+    if (/^is on \[\] (?:page|screen|dialog)$|^see \[\] page$/.test(verb))
+        return 'page';
+    if (/^see (?:all )?\[\](?: [\w-]+)?$/.test(verb))
+        return 'visible';
+    return 'unknown';
+}
+/** What an assertion sentence (the normalized `verb`) checks. `state` is the parser's trailing clause. */
+function assertShapeOf(verb, parsedState) {
+    const v = verb.replace(NOT_SEE, 'see');
+    const state = parsedState ?? v.match(IS_NOT_STATE)?.[1];
+    const base = baseMatcher(v, state);
+    const flips = state ? STATE_AS[state]?.[1] === true : false;
+    const negated = NEGATION.test(verb) !== flips;
+    const all = /^see all\b/.test(v) && base !== 'unknown';
+    return { matcher: all ? `all:${base}` : base, negated };
+}
+const STRENGTH = {
+    visible: 1, exists: 1,
+    page: 2, enabled: 2, checked: 2, contains: 2, matches: 2, range: 2, 'key-matching': 2, child: 2,
+    'url-contains': 2, 'url-matches': 2, 'title-contains': 2, 'title-matches': 2,
+    equals: 3, count: 3, 'table-data': 3, 'tab-order': 3, schema: 3, url: 3, title: 3,
+};
+/** The ordinal strength of a matcher, or null when the ladder cannot judge it. */
+function matcherStrength(matcher) {
+    if (!matcher || matcher === 'unknown')
+        return null;
+    const all = matcher.startsWith('all:');
+    const base = all ? matcher.slice(4) : matcher;
+    const s = base.startsWith('state:') ? 2 : STRENGTH[base];
+    return s === undefined ? null : s + (all ? 1 : 0);
+}
+//# sourceMappingURL=assertion-matcher-vocabulary.js.map

package/dist/contract/assertion-matcher-vocabulary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"assertion-matcher-vocabulary.js","sourceRoot":"","sources":["../../src/contract/assertion-matcher-vocabulary.ts"],"names":[],"mappings":";;AAoEA,sCAQC;AAUD,0CAMC;AA1ED,MAAM,QAAQ,GAAG,+EAA+E,CAAC;AACjG,MAAM,OAAO,GAAG,sFAAsF,CAAC;AACvG,MAAM,YAAY,GAAG,iIAAiI,CAAC;AACvJ,MAAM,KAAK,GAAG,8EAA8E,CAAC;AAC7F,MAAM,YAAY,GAAG,qDAAqD,CAAC;AAC3E,sFAAsF;AACtF,MAAM,QAAQ,GAAoD;IAChE,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;IACtD,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;IACxD,OAAO,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;CAC1D,CAAC;AAEF,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IACnD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IAChD,OAAO,qCAAqC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACtE,CAAC;AAED,SAAS,WAAW,CAAC,IAAY,EAAE,KAAmB;IACpD,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,QAAQ,CAAC;QACrD,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QACrC,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,UAAU,CAAC;QAClD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,SAAS,CAAC;QAC/C,OAAO,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,CAAC;IACD,IAAI,kCAAkC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,cAAc,CAAC;QACzD,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC;QAChD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,aAAa,CAAC;QACxD,OAAO,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,CAAC;IACD,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,WAAW,CAAC;IACtD,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC;IACpD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACtC,IAAI,IAAI,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAAC,CAAC;IAC9F,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS,KAAK,EAAE,CAAC;IAC3D,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IACrC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClD,IAAI,gCAAgC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,UAAU,CAAC;IACnE,IAAI,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,QAAQ,CAAC;IACtF,IAAI,0CAA0C,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,OAAO,CAAC;IAC1E,IAAI,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC;IACpF,IAAI,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,0GAA0G;AAC1G,SAAgB,aAAa,CAAC,IAAY,EAAE,WAAyB;IACnE,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,WAAW,IAAK,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAA6B,CAAC;IACrF,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC;IAC9C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,KAAK,SAAS,CAAC;IACvD,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;AAC1D,CAAC;AAED,MAAM,QAAQ,GAA2B;IACvC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAC/F,cAAc,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,eAAe,EAAE,CAAC;IAC5E,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;CAClF,CAAC;AAEF,kFAAkF;AAClF,SAAgB,eAAe,CAAC,OAA2B;IACzD,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC9C,MAAM,CAAC,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzD,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC"}

package/dist/contract/build-contract-verdict.d.ts

@@ -0,0 +1,32 @@
+import { HeadSnapshot } from './contract-git';
+import { ScenarioResult } from './classify-contract-change';
+import { UncommittedEntry } from './lock-vs-git-head';
+export { classifyUnit } from './classify-contract-unit';
+export interface ContractUnit {
+    name: string;
+    dir: string;
+}
+export type VerdictValue = 'pass' | 'review' | 'fail';
+export interface ContractVerdict {
+    schema: 1;
+    unit: string;
+    verdict: VerdictValue;
+    exitCode: 0 | 2;
+    /** sha256 over the inputs the verdict was built from: features, working lock, lock issues. */
+    inputsHash: string;
+    scenarios: ScenarioResult[];
+    /** Every lock entry that is not what QA approved and committed (rule contract.lock-uncommitted). */
+    uncommitted: UncommittedEntry[];
+    warnings: string[];
+}
+/**
+ * `snapshot` lets a caller checking many units read HEAD once; `gitTimeoutMs` bounds each git call;
+ * `traceBudgetMs` bounds the trace part (default ~3 s for the guard; `contract check` passes more).
+ */
+export interface VerdictOptions {
+    snapshot?: HeadSnapshot;
+    gitTimeoutMs?: number;
+    traceBudgetMs?: number;
+}
+export declare function buildContractVerdict(projectRoot: string, unit: ContractUnit, opts?: VerdictOptions): ContractVerdict;
+//# sourceMappingURL=build-contract-verdict.d.ts.map

package/dist/contract/build-contract-verdict.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-contract-verdict.d.ts","sourceRoot":"","sources":["../../src/contract/build-contract-verdict.ts"],"names":[],"mappings":"AAyBA,OAAO,EAA2C,YAAY,EAAgC,MAAM,gBAAgB,CAAC;AAErH,OAAO,EAAE,cAAc,EAAc,MAAM,4BAA4B,CAAC;AAKxE,OAAO,EAAuB,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAI3E,OAAO,EAAE,YAAY,EAAE,MAAM,0BAA0B,CAAC;AAExD,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAC3D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,QAAQ,GAAG,MAAM,CAAC;AAEtD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,CAAC,CAAC;IACV,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,YAAY,CAAC;IACtB,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC;IAChB,8FAA8F;IAC9F,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,oGAAoG;IACpG,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAAG,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,aAAa,CAAC,EAAE,MAAM,CAAA;CAAE;AAY1G,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,GAAE,cAAmB,GAAG,eAAe,CAqCxH"}

package/dist/contract/build-contract-verdict.js

@@ -0,0 +1,123 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyUnit = void 0;
+exports.buildContractVerdict = buildContractVerdict;
+/**
+ * The contract verdict of one unit, BUILT BY CODE from raw inputs every time (DOS-14.0, takumi T3):
+ * the `.feature` files, the working lock, the lock and the approval decisions in git HEAD. No report
+ * file is read — the `.sungen/reports/<slug>-contract.json` that `contract check` writes is output
+ * only, so a hand-edited "pass" there changes nothing. The CLI and the Claude Code guard call this
+ * same function, so they cannot disagree.
+ *
+ *   fail    oracle-weakened / target-changed / assertion-lost, or any lock-uncommitted issue
+ *           (added · changed · removed vs HEAD, tampered, unverified), or an APPROVED free /
+ *           impl:code scenario with no admissible trace (unproven, also past the deadline) exit 2
+ *   review  any hash-changed (changed, not weaker — QA re-approves), opaque (a check no code
+ *           can compare, or a target identity that is only `low`), or inconclusive (an
+ *           approved free scenario's final attempt did not pass); blocks delivery         exit 0
+ *   pass    only match / strengthened / proposed / nondeterministic                       exit 0
+ *
+ * free / impl:code scenarios are ALSO held against their recorded traces (DOS-14.6,
+ * build-trace-conformance.ts): the worse of the Gherkin class and the trace class wins. A
+ * proposed (unapproved) one's trace problems are warnings — it is not locked yet.
+ *
+ * git failing in a checkout that has .git is not "no git": with a lock present the verdict cannot be
+ * built (GitUnavailableError → CLI exit 1, guard `ask`); without one it is only a warning.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const contract_hash_1 = require("./contract-hash");
+const contract_git_1 = require("./contract-git");
+const contract_schema_1 = require("./contract-schema");
+const classify_contract_change_1 = require("./classify-contract-change");
+const build_trace_conformance_1 = require("./build-trace-conformance");
+const classify_contract_unit_1 = require("./classify-contract-unit");
+const contracts_lock_file_1 = require("./contracts-lock-file");
+const lock_vs_git_head_1 = require("./lock-vs-git-head");
+const normalize_feature_steps_1 = require("./normalize-feature-steps");
+const verify_approval_decisions_1 = require("./verify-approval-decisions");
+var classify_contract_unit_2 = require("./classify-contract-unit");
+Object.defineProperty(exports, "classifyUnit", { enumerable: true, get: function () { return classify_contract_unit_2.classifyUnit; } });
+/** Fold a free / impl:code scenario's trace outcome into its Gherkin result: the worse class wins. */
+function withTrace(results, outcomes) {
+    return results.map((r) => {
+        const o = outcomes.get(r.id);
+        if (!o)
+            return r;
+        const cls = (0, classify_contract_change_1.severityOf)(o.class) > (0, classify_contract_change_1.severityOf)(r.class) ? o.class : r.class;
+        return { ...r, class: cls, findings: [...r.findings, ...o.findings], trace: { hashes: o.hashes, runs: o.runs } };
+    });
+}
+function buildContractVerdict(projectRoot, unit, opts = {}) {
+    const snap = opts.snapshot ?? (0, contract_git_1.headSnapshot)(projectRoot, opts.gitTimeoutMs ?? contract_git_1.CLI_GIT_TIMEOUT_MS);
+    const files = (0, normalize_feature_steps_1.contractFeatureFiles)(unit.dir, unit.name);
+    const current = (0, normalize_feature_steps_1.loadContractScenarios)(unit.dir, unit.name);
+    const lockFile = (0, contracts_lock_file_1.lockPathFor)(unit.dir);
+    const lockText = (0, contract_git_1.readTextOrNull)(lockFile);
+    if (snap.error && lockText !== null)
+        throw new contract_git_1.GitUnavailableError(snap.error);
+    const lock = lockText === null ? null : (0, contracts_lock_file_1.parseLockText)(lockText, lockFile);
+    const tampered = new Set(lock?.tampered ?? []);
+    const gherkin = (0, classify_contract_unit_1.classifyUnit)(lock, current, tampered);
+    const traced = (0, build_trace_conformance_1.traceConformanceForUnit)(projectRoot, unit, current, lock, tampered, { budgetMs: opts.traceBudgetMs });
+    const results = withTrace(gherkin.results, traced.outcomes);
+    const warnings = [...gherkin.warnings, ...traced.warnings];
+    const head = (0, lock_vs_git_head_1.compareLockWithHead)(projectRoot, lockFile, lockText, lock, snap);
+    if (head.status === 'no-git') {
+        warnings.push(snap.error
+            ? `git failed (${snap.error}); this unit has no lock, so nothing was compared with git HEAD`
+            : 'not a git checkout with a commit: the lock was not compared with git HEAD (working tree used)');
+    }
+    const uncommitted = head.status === 'compared' ? [...head.uncommitted] : [];
+    for (const id of tampered) {
+        if (!uncommitted.some((u) => u.id === id))
+            uncommitted.push({ id, change: 'tampered', detail: 'its steps no longer hash to its `hash` — edited by hand' });
+    }
+    uncommitted.push(...(0, verify_approval_decisions_1.unverifiedApprovals)(projectRoot, unit.dir, lock, new Set(uncommitted.map((u) => u.id)), snap));
+    const hard = uncommitted.length > 0 || results.some((r) => contract_schema_1.HARD_CLASSES.has(r.class));
+    const verdict = hard ? 'fail' : results.some((r) => contract_schema_1.REVIEW_CLASSES.has(r.class)) ? 'review' : 'pass';
+    const rel = (f) => path.relative(projectRoot, f).split(path.sep).join('/');
+    const inputsHash = (0, contract_hash_1.sha256Hex)((0, contract_hash_1.canonicalJson)({
+        features: files.map((f) => [rel(f), (0, contract_hash_1.sha256Hex)(fs.readFileSync(f, 'utf8'))]),
+        lock: lockText === null ? null : (0, contract_hash_1.sha256Hex)(lockText),
+        head: head.status,
+        uncommitted,
+        ...(traced.inputs === null ? {} : { trace: traced.inputs }),
+    }));
+    const scenarios = results.map((r) => (r.file ? { ...r, file: rel(r.file) } : r));
+    return { schema: 1, unit: unit.name, verdict, exitCode: verdict === 'fail' ? 2 : 0, inputsHash, scenarios, uncommitted, warnings };
+}
+//# sourceMappingURL=build-contract-verdict.js.map

package/dist/contract/build-contract-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-contract-verdict.js","sourceRoot":"","sources":["../../src/contract/build-contract-verdict.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsEA,oDAqCC;AA3GD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,mDAA2D;AAC3D,iDAAqH;AACrH,uDAAiE;AACjE,yEAAwE;AACxE,uEAAoE;AAEpE,qEAAwD;AACxD,+DAAmE;AACnE,yDAA2E;AAC3E,uEAAwF;AACxF,2EAAkE;AAElE,mEAAwD;AAA/C,sHAAA,YAAY,OAAA;AAwBrB,sGAAsG;AACtG,SAAS,SAAS,CAAC,OAAyB,EAAE,QAAmC;IAC/E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAA,qCAAU,EAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAA,qCAAU,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1E,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACnH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,oBAAoB,CAAC,WAAmB,EAAE,IAAkB,EAAE,OAAuB,EAAE;IACrG,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAA,2BAAY,EAAC,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,iCAAkB,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,IAAA,8CAAoB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAA,+CAAqB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAA,iCAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAA,6BAAc,EAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,kCAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,mCAAa,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAA,qCAAY,EAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAA,iDAAuB,EAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAA,sCAAmB,EAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACtB,CAAC,CAAC,eAAe,IAAI,CAAC,KAAK,iEAAiE;YAC5F,CAAC,CAAC,+FAA+F,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,WAAW,GAAuB,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC;IAC7J,CAAC;IACD,WAAW,CAAC,IAAI,CAAC,GAAG,IAAA,+CAAmB,EAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAEnH,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,MAAM,OAAO,GAAiB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IACnH,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,IAAA,yBAAS,EAAC,IAAA,6BAAa,EAAC;QACzC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAA,yBAAS,EAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,yBAAS,EAAC,QAAQ,CAAC;QACpD,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;KAC5D,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AACrI,CAAC"}

package/dist/contract/build-trace-conformance.d.ts

@@ -0,0 +1,18 @@
+import { TraceOutcome } from './classify-trace-conformance';
+import { ContractLock, ContractScenario } from './contract-schema';
+export { OVER_BUDGET } from './trace/collect-trace-evidence';
+export interface UnitTraceConformance {
+    outcomes: Map<string, TraceOutcome>;
+    warnings: string[];
+    inputs: unknown;
+}
+export declare const MOBILE_NOT_SUPPORTED = "trace conformance is web-only: free / impl:code scenarios of a mobile project are not supported yet (not judged)";
+/** The guard path's deadline for the trace part of one unit's verdict (override: SUNGEN_TRACE_VERDICT_BUDGET_MS). */
+export declare function defaultTraceBudgetMs(env?: Record<string, string | undefined>): number;
+export declare function traceConformanceForUnit(projectRoot: string, unit: {
+    name: string;
+    dir: string;
+}, current: ContractScenario[], lock: ContractLock | null, untrusted: ReadonlySet<string>, opts?: {
+    budgetMs?: number;
+}): UnitTraceConformance;
+//# sourceMappingURL=build-trace-conformance.d.ts.map

package/dist/contract/build-trace-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-trace-conformance.d.ts","sourceRoot":"","sources":["../../src/contract/build-trace-conformance.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAgC,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA8B,MAAM,mBAAmB,CAAC;AAO/F,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAM7D,MAAM,WAAW,oBAAoB;IAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE;AAMlH,eAAO,MAAM,oBAAoB,qHAAqH,CAAC;AACvJ,qHAAqH;AACrH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAGlG;AAED,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,EAChH,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,oBAAoB,CAkDtB"}

package/dist/contract/build-trace-conformance.js

@@ -0,0 +1,153 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MOBILE_NOT_SUPPORTED = exports.OVER_BUDGET = void 0;
+exports.defaultTraceBudgetMs = defaultTraceBudgetMs;
+exports.traceConformanceForUnit = traceConformanceForUnit;
+/**
+ * Trace conformance of one unit, built by code every time (DOS-14.0, 14.6; takumi T3) — the part of
+ * the contract verdict that only free / impl:code scenarios have. Synchronous and read-only, so
+ * `contract check` and the Claude Code delivery guard (both via buildContractVerdict) agree.
+ *
+ *   platform mobile        not supported yet: a warning, nothing judged, exit unaffected
+ *   no free / impl:code    nothing to do (the verdict is byte-identical to the Gherkin-only one)
+ *   otherwise              evidence (run records → reports → final attempts → bound traces) →
+ *                          identities (driver cache or low heuristic) → render → ONE batched
+ *                          fingerprint parse → the ladder
+ *
+ * Bounded (review H4, M2): a deadline (`budgetMs`; the guard's default is ~3 s) — a scenario not
+ * judged in time is `unproven` when approved, a warning while proposed: fail CLOSED. An input that
+ * cannot be read while judging (test-data, a trace) makes that scenario unproven with its reason,
+ * never a thrown verdict. A trace older than the unit's newest `.feature` / lock is refused (stale).
+ */
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const capability_1 = require("../harness/capability");
+const classify_trace_conformance_1 = require("./classify-trace-conformance");
+const contract_schema_1 = require("./contract-schema");
+const contracts_lock_file_1 = require("./contracts-lock-file");
+const data_normalize_1 = require("./data-normalize");
+const normalize_feature_steps_1 = require("./normalize-feature-steps");
+const render_free_gherkin_1 = require("./render-free-gherkin");
+const collect_trace_evidence_1 = require("./trace/collect-trace-evidence");
+var collect_trace_evidence_2 = require("./trace/collect-trace-evidence");
+Object.defineProperty(exports, "OVER_BUDGET", { enumerable: true, get: function () { return collect_trace_evidence_2.OVER_BUDGET; } });
+const identity_cache_1 = require("./trace/identity-cache");
+const trace_identity_resolution_1 = require("./trace/trace-identity-resolution");
+const trace_fingerprint_1 = require("./trace/trace-fingerprint");
+const trace_steps_1 = require("./trace/trace-steps");
+const mtimeMs = (f) => { try {
+    return fs.statSync(f).mtimeMs;
+}
+catch {
+    return 0;
+} };
+const sha = (s) => (0, crypto_1.createHash)('sha256').update(s).digest('hex');
+const why = (e) => (e instanceof Error ? e.message : String(e)).split('\n')[0].slice(0, 300);
+exports.MOBILE_NOT_SUPPORTED = 'trace conformance is web-only: free / impl:code scenarios of a mobile project are not supported yet (not judged)';
+/** The guard path's deadline for the trace part of one unit's verdict (override: SUNGEN_TRACE_VERDICT_BUDGET_MS). */
+function defaultTraceBudgetMs(env = process.env) {
+    const v = Number(env.SUNGEN_TRACE_VERDICT_BUDGET_MS);
+    return Number.isFinite(v) && v > 0 ? v : 3000;
+}
+function traceConformanceForUnit(projectRoot, unit, current, lock, untrusted, opts = {}) {
+    const deadline = Date.now() + (opts.budgetMs ?? defaultTraceBudgetMs());
+    const traced = [...new Map(current.filter((s) => s.implementation !== 'compiled').map((s) => [s.id, s])).values()];
+    if (!traced.length)
+        return { outcomes: new Map(), warnings: [], inputs: null };
+    if (((0, capability_1.readCapabilities)(projectRoot).platform ?? '').toLowerCase() === 'mobile')
+        return { outcomes: new Map(), warnings: [exports.MOBILE_NOT_SUPPORTED], inputs: { platform: 'mobile' } };
+    const approvedEntry = (id) => { const e = lock?.scenarios[id]; return (0, contract_schema_1.isHumanApproved)(e) && !untrusted.has(id) ? e : undefined; };
+    const outcomes = new Map();
+    const warnings = [];
+    let evidence = { runs: new Map(), problems: [], inputs: [] };
+    let index = { byValue: new Map() };
+    let setupError = '';
+    try {
+        const notBefore = Math.max(mtimeMs((0, contracts_lock_file_1.lockPathFor)(unit.dir)), ...(0, normalize_feature_steps_1.contractFeatureFiles)(unit.dir, unit.name).map(mtimeMs));
+        evidence = (0, collect_trace_evidence_1.collectScenarioEvidence)(projectRoot, new Set(traced.map((s) => s.id)), notBefore, deadline);
+        index = (0, data_normalize_1.loadTestDataIndex)(unit.dir, unit.name);
+    }
+    catch (e) {
+        setupError = `trace conformance could not run: ${why(e)}`;
+    }
+    const { cache, problem } = (0, identity_cache_1.readIdentityCache)(projectRoot);
+    warnings.push(...evidence.problems, ...(problem ? [problem] : []));
+    // 1. render every admissible run (deadline checked per scenario), 2. ONE fingerprint parse, 3. ladder.
+    const pending = [];
+    for (const sc of traced) {
+        if (setupError) {
+            outcomes.set(sc.id, (0, classify_trace_conformance_1.notJudged)(sc.id, !!approvedEntry(sc.id), 'unproven', [setupError]));
+            continue;
+        }
+        if (Date.now() > deadline) {
+            outcomes.set(sc.id, (0, classify_trace_conformance_1.notJudged)(sc.id, !!approvedEntry(sc.id), 'unproven', [collect_trace_evidence_1.OVER_BUDGET]));
+            continue;
+        }
+        const runs = evidence.runs.get(sc.id) ?? [];
+        const rendered = new Map();
+        try {
+            for (const run of runs.filter((r) => r.status === 'admissible' && r.trace)) {
+                const steps = (0, trace_steps_1.traceIntentSteps)(run.trace);
+                rendered.set(run, (0, render_free_gherkin_1.renderTraceSteps)(steps, (0, trace_identity_resolution_1.identitiesFor)(run.trace, steps, cache), { index, projectRoot, specFile: run.specFile, secrets: new Set() }));
+            }
+            pending.push({ sc, runs, rendered });
+        }
+        catch (e) {
+            outcomes.set(sc.id, (0, classify_trace_conformance_1.notJudged)(sc.id, !!approvedEntry(sc.id), 'unproven', [`trace conformance failed: ${why(e)}`]));
+        }
+    }
+    const items = pending.flatMap((p) => [...p.rendered.entries()].map(([run, rendered]) => ({ p, run, rendered, implementation: p.sc.implementation })));
+    let fps = [];
+    try {
+        fps = (0, trace_fingerprint_1.fingerprintsOf)(items);
+    }
+    catch (e) {
+        for (const p of pending)
+            outcomes.set(p.sc.id, (0, classify_trace_conformance_1.notJudged)(p.sc.id, !!approvedEntry(p.sc.id), 'unproven', [`trace conformance failed: ${why(e)}`]));
+    }
+    if (fps.length === items.length) {
+        for (const p of pending) {
+            const byRun = new Map(items.map((it, i) => [it, fps[i]]).filter(([it]) => it.p === p).map(([it, fp]) => [it.run, fp]));
+            outcomes.set(p.sc.id, (0, classify_trace_conformance_1.classifyTraceRuns)(p.sc.id, p.sc.implementation, approvedEntry(p.sc.id), p.runs, byRun));
+        }
+    }
+    for (const o of outcomes.values())
+        warnings.push(...o.warnings);
+    const cacheFile = (0, identity_cache_1.identityCachePath)(projectRoot);
+    const traceShas = [...evidence.runs.values()].flat().filter((r) => r.trace).map((r) => r.trace.sha256).sort();
+    return { outcomes, warnings, inputs: { runs: evidence.inputs, traces: traceShas, identities: fs.existsSync(cacheFile) ? sha(fs.readFileSync(cacheFile)) : null } };
+}
+//# sourceMappingURL=build-trace-conformance.js.map

package/dist/contract/build-trace-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-trace-conformance.js","sourceRoot":"","sources":["../../src/contract/build-trace-conformance.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,oDAGC;AAED,0DAqDC;AAnGD;;;;;;;;;;;;;;;GAeG;AACH,mCAAoC;AACpC,uCAAyB;AACzB,sDAAyD;AACzD,6EAA0F;AAC1F,uDAA+F;AAC/F,+DAAoD;AACpD,qDAAoE;AACpE,uEAAiE;AACjE,+DAAuE;AACvE,2EAAkH;AAElH,yEAA6D;AAApD,qHAAA,WAAW,OAAA;AACpB,2DAA8E;AAC9E,iFAAkE;AAClE,iEAA6E;AAC7E,qDAAuD;AAIvD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,CAAC,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC;AACtG,MAAM,GAAG,GAAG,CAAC,CAAkB,EAAU,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAEjG,QAAA,oBAAoB,GAAG,kHAAkH,CAAC;AACvJ,qHAAqH;AACrH,SAAgB,oBAAoB,CAAC,MAA0C,OAAO,CAAC,GAAG;IACxF,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC;AACjD,CAAC;AAED,SAAgB,uBAAuB,CACrC,WAAmB,EAAE,IAAmC,EAAE,OAA2B,EAAE,IAAyB,EAChH,SAA8B,EAAE,OAA8B,EAAE;IAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACnH,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAI,CAAC,IAAA,6BAAgB,EAAC,WAAW,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,4BAAoB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;IAEhL,MAAM,aAAa,GAAG,CAAC,EAAU,EAAyB,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAA,iCAAe,EAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjK,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAQ,GAAqB,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC/E,IAAI,KAAK,GAAkB,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAClD,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAA,iCAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAA,8CAAoB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACtH,QAAQ,GAAG,IAAA,gDAAuB,EAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvG,KAAK,GAAG,IAAA,kCAAiB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,UAAU,GAAG,oCAAoC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;IAC1E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAA,kCAAiB,EAAC,WAAW,CAAC,CAAC;IAC1D,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnE,uGAAuG;IACvG,MAAM,OAAO,GAA+F,EAAE,CAAC;IAC/G,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,UAAU,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,oCAAW,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClI,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;QACrD,IAAI,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3E,MAAM,KAAK,GAAG,IAAA,8BAAgB,EAAC,GAAG,CAAC,KAAM,CAAC,CAAC;gBAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAA,sCAAgB,EAAC,KAAK,EAAE,IAAA,yCAAa,EAAC,GAAG,CAAC,KAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1J,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrI,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IACtJ,IAAI,GAAG,GAAuB,EAAE,CAAC;IACjC,IAAI,CAAC;QAAC,GAAG,GAAG,IAAA,kCAAc,EAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAChI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,8CAAiB,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAA,kCAAiB,EAAC,WAAW,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/G,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACrK,CAAC"}

package/dist/contract/classify-contract-change.d.ts

@@ -0,0 +1,23 @@
+import { ContractScenario, FindingClass, LadderClass, LockEntry, ScenarioClass, TraceClass } from './contract-schema';
+export interface ContractFinding {
+    class: FindingClass;
+    rule?: string;
+    detail: string;
+    step?: number;
+}
+/** What a free / impl:code scenario's traces fingerprinted to (DOS-14.6) — output only. */
+export interface TraceSummary {
+    hashes: string[];
+    runs: string[];
+}
+export interface ScenarioResult {
+    id: string;
+    class: ScenarioClass;
+    findings: ContractFinding[];
+    file?: string;
+    trace?: TraceSummary;
+}
+export declare const severityOf: (c: ScenarioClass) => number;
+export declare const finding: (cls: Exclude<LadderClass, "match"> | TraceClass, detail: string, step?: number) => ContractFinding;
+export declare function classifyScenario(id: string, entry: LockEntry, current: ContractScenario | undefined): ScenarioResult;
+//# sourceMappingURL=classify-contract-change.d.ts.map

package/dist/contract/classify-contract-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-change.d.ts","sourceRoot":"","sources":["../../src/contract/classify-contract-change.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,gBAAgB,EAAgB,YAAY,EAAE,WAAW,EAAE,SAAS,EAAW,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG7I,MAAM,WAAW,eAAe;IAAG,KAAK,EAAE,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AACtG,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE;AAClE,MAAM,WAAW,cAAc;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,YAAY,CAAA;CAAE;AAMtI,eAAO,MAAM,UAAU,GAAI,GAAG,aAAa,KAAG,MAAqB,CAAC;AAEpE,eAAO,MAAM,OAAO,GAAI,KAAK,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,UAAU,EAAE,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,eACH,CAAC;AA0CvG,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,cAAc,CAkBpH"}

package/dist/contract/classify-contract-change.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.finding = exports.severityOf = void 0;
+exports.classifyScenario = classifyScenario;
+/**
+ * One approved lock entry against the scenario as it reads now → its class on the strength ladder
+ * (DOS-14.4) and the findings behind it.
+ *
+ *   same hash                         match
+ *   assertions, paired in three passes:
+ *     1. identical                    nothing to say
+ *     2. same target (ref + scope)    compareAsserts against the WORST candidate: weakened · strengthened · review
+ *     3. same sentence, other target  target-changed
+ *     left over in the lock           assertion-lost        left over now     strengthened (new check)
+ *   actions changed · implementation retagged · only reordered    hash-changed (review)
+ *
+ * The scenario's class is its most severe finding. A change that produced no finding at all is
+ * still `hash-changed`: equal hashes are the only road to `match`.
+ */
+const contract_hash_1 = require("./contract-hash");
+const contract_schema_1 = require("./contract-schema");
+const oracle_strength_1 = require("./oracle-strength");
+const SEVERITY = {
+    proposed: 0, match: 0, strengthened: 1, nondeterministic: 1, 'hash-changed': 2, opaque: 2, inconclusive: 2,
+    'target-changed': 3, 'oracle-weakened': 3, 'assertion-lost': 3, unproven: 3,
+};
+const severityOf = (c) => SEVERITY[c];
+exports.severityOf = severityOf;
+const finding = (cls, detail, step) => ({ class: cls, ...(contract_schema_1.RULE_OF[cls] ? { rule: contract_schema_1.RULE_OF[cls] } : {}), detail, ...(step ? { step } : {}) });
+exports.finding = finding;
+const asserts = (steps) => steps.map((step, i) => ({ step, at: i + 1 })).filter((x) => x.step.kind === 'assert');
+const targetKey = (s) => s.target ? `${s.target.ref}\u0000${s.target.parent ?? ''}` : `\u0001${s.verb}`;
+const label = (s) => s.target ? `[${s.target.ref}]${s.target.parent ? ` in ${s.target.parent}` : ''}` : `"${s.verb}"`;
+function compareAssertions(locked, current) {
+    const out = [];
+    const was = asserts(locked);
+    const now = asserts(current);
+    const used = new Set();
+    const take = (pred) => {
+        const hit = now.find((c) => !used.has(c.at) && pred(c));
+        if (hit)
+            used.add(hit.at);
+        return hit;
+    };
+    const open = [];
+    for (const l of was)
+        if (!take((c) => (0, contract_hash_1.sameJson)(c.step, l.step)))
+            open.push(l);
+    const unpaired = [];
+    for (const l of open) {
+        const candidates = now.filter((c) => !used.has(c.at) && targetKey(c.step) === targetKey(l.step));
+        if (!candidates.length) {
+            unpaired.push(l);
+            continue;
+        }
+        // The WORST replacement is the one judged: picking the kindest let `see [X]` → `is hidden` +
+        // `is empty` read as strengthened, the inversion hiding behind a harmless extra check.
+        const judged = candidates.map((c) => ({ c, r: (0, oracle_strength_1.compareAsserts)(l.step, c.step) }));
+        const rank = (k) => (k === 'oracle-weakened' ? 2 : k === 'review' ? 1 : 0);
+        const worst = judged.sort((a, b) => rank(b.r.class) - rank(a.r.class))[0];
+        used.add(worst.c.at);
+        const cls = worst.r.class === 'review' ? 'hash-changed' : worst.r.class;
+        out.push((0, exports.finding)(cls, `${label(l.step)}: ${worst.r.detail}`, worst.c.at));
+    }
+    for (const l of unpaired) {
+        const moved = take((c) => c.step.verb === l.step.verb && !!l.step.target && !!c.step.target);
+        out.push(moved
+            ? (0, exports.finding)('target-changed', `the check "${l.step.verb}" moved from ${label(l.step)} to ${label(moved.step)}`, moved.at)
+            : (0, exports.finding)('assertion-lost', `the approved check ${label(l.step)} "${l.step.verb}" (step ${l.at}) is gone`));
+    }
+    for (const c of now)
+        if (!used.has(c.at))
+            out.push((0, exports.finding)('strengthened', `new check ${label(c.step)} "${c.step.verb}"`, c.at));
+    return out;
+}
+function classifyScenario(id, entry, current) {
+    if (!current) {
+        return { id, class: 'assertion-lost', findings: [(0, exports.finding)('assertion-lost', 'the approved scenario is no longer in the feature (removed, its ID changed, or made @manual)')] };
+    }
+    const base = { id, file: current.source.file };
+    if (current.hash === entry.hash)
+        return { ...base, class: 'match', findings: [] };
+    const findings = compareAssertions(entry.steps, current.steps);
+    if (entry.implementation !== current.implementation) {
+        findings.push((0, exports.finding)('hash-changed', `implementation path changed: ${entry.implementation} → ${current.implementation} (retag)`));
+    }
+    const actionsOf = (steps) => steps.filter((s) => s.kind === 'action');
+    if (!(0, contract_hash_1.sameJson)(actionsOf(entry.steps), actionsOf(current.steps)))
+        findings.push((0, exports.finding)('hash-changed', 'the actions changed (what the test does before it checks)'));
+    if (!findings.length)
+        findings.push((0, exports.finding)('hash-changed', 'the steps changed without a weaker or stronger check (e.g. reordered)'));
+    const worst = findings.reduce((acc, f) => {
+        const c = f.class;
+        return (0, exports.severityOf)(c) > (0, exports.severityOf)(acc) ? c : acc;
+    }, 'match');
+    return { ...base, class: worst, findings };
+}
+//# sourceMappingURL=classify-contract-change.js.map

package/dist/contract/classify-contract-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-change.js","sourceRoot":"","sources":["../../src/contract/classify-contract-change.ts"],"names":[],"mappings":";;;AAyEA,4CAkBC;AA3FD;;;;;;;;;;;;;;GAcG;AACH,mDAA2C;AAC3C,uDAA6I;AAC7I,uDAAmD;AAOnD,MAAM,QAAQ,GAAkC;IAC9C,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1G,gBAAgB,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC5E,CAAC;AACK,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAAvD,QAAA,UAAU,cAA6C;AAE7D,MAAM,OAAO,GAAG,CAAC,GAA+C,EAAE,MAAc,EAAE,IAAa,EAAmB,EAAE,CACzH,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,yBAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAD1F,QAAA,OAAO,WACmF;AAGvG,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAa,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC5I,MAAM,SAAS,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9H,MAAM,KAAK,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;AAE5I,SAAS,iBAAiB,CAAC,MAAsB,EAAE,OAAuB;IACxE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,IAA6B,EAAuB,EAAE;QAClE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,wBAAQ,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvD,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAA,gCAAc,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7F,GAAG,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YACvH,CAAC,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,sBAAsB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,aAAa,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,gBAAgB,CAAC,EAAU,EAAE,KAAgB,EAAE,OAAqC;IAClG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,8FAA8F,CAAC,CAAC,EAAE,CAAC;IAChL,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,gCAAgC,KAAK,CAAC,cAAc,MAAM,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACtF,IAAI,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,2DAA2D,CAAC,CAAC,CAAC;IACrK,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,uEAAuE,CAAC,CAAC,CAAC;IACtI,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAsB,CAAC;QACnC,OAAO,IAAA,kBAAU,EAAC,CAAC,CAAC,GAAG,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC"}