@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.1

package/dist/contract/contract-report-file.js

@@ -0,0 +1,60 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contractReportPath = void 0;
+exports.writeContractReport = writeContractReport;
+/**
+ * `.sungen/reports/<slug>-contract.json` — the contract verdict as OUTPUT (DOS-14.0, takumi T3).
+ *
+ * Written by `sungen contract check` from a verdict it just built; never read back as a source of
+ * truth. Anything that needs the verdict calls buildContractVerdict() and rebuilds it from the
+ * `.feature`, the lock and git HEAD — so editing this file to "pass" changes nothing, and the next
+ * check overwrites it. It records `inputsHash` so a reader can see the report is stale, and
+ * `exitCode` next to `verdict` (fail ⇔ exitCode ≠ 0).
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const write_atomic_1 = require("../harness/write-atomic");
+const unit_paths_1 = require("../harness/unit-paths");
+const contractReportPath = (projectRoot, unit) => path.join(projectRoot, '.sungen', 'reports', `${(0, unit_paths_1.reportSlug)(unit)}-contract.json`);
+exports.contractReportPath = contractReportPath;
+function writeContractReport(projectRoot, verdict) {
+    const file = (0, exports.contractReportPath)(projectRoot, verdict.unit);
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    const doc = { ...verdict, generatedBy: 'sungen contract check', generatedAt: new Date().toISOString() };
+    (0, write_atomic_1.writeFileAtomic)(file, `${JSON.stringify(doc, null, 2)}\n`);
+    return file;
+}
+//# sourceMappingURL=contract-report-file.js.map

package/dist/contract/contract-report-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-report-file.js","sourceRoot":"","sources":["../../src/contract/contract-report-file.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,kDAMC;AAxBD;;;;;;;;GAQG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,0DAA0D;AAC1D,sDAAmD;AAG5C,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,IAAY,EAAU,EAAE,CAC9E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAU,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AADvE,QAAA,kBAAkB,sBACqD;AAEpF,SAAgB,mBAAmB,CAAC,WAAmB,EAAE,OAAwB;IAC/E,MAAM,IAAI,GAAG,IAAA,0BAAkB,EAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACxG,IAAA,8BAAe,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/contract/contract-schema.d.ts

@@ -0,0 +1,71 @@
+export declare const IMPLEMENTATIONS: readonly ["compiled", "impl:code", "free"];
+export type Implementation = typeof IMPLEMENTATIONS[number];
+export interface ContractTarget {
+    /** The first `[Reference]` of the step, or the data path of an `expect {{x}} …` step. */
+    ref: string;
+    /** Further `[References]` in the order written (`drag [A] to [B]`, `all [Card] contain [Child]`). */
+    also?: string[];
+    /** The `in [Parent] <container>` scope, as `<container> [<Parent>]` plus its `with` tail. */
+    parent?: string;
+    nth?: number;
+}
+export interface ContractStep {
+    kind: 'action' | 'assert';
+    /** The sentence with the actor dropped, refs as `[]`, values as `{}`, lowercased — the step's exact form. */
+    verb: string;
+    target?: ContractTarget;
+    /** An action's input: `{{var}}` kept as written, a literal without its quotes; several joined by ` | `. */
+    value?: string;
+    /** An assertion's check, from the closed vocabulary in oracle-strength.ts (`unknown` when it has none). */
+    matcher?: string;
+    /** An assertion's expected value(s), same form as `value`. */
+    expected?: string;
+    negated?: true;
+    /** The step's data table, header row first. */
+    table?: string[][];
+}
+export interface ContractScenario {
+    id: string;
+    implementation: Implementation;
+    steps: ContractStep[];
+    hash: string;
+    /** Where it was read — never hashed. `outline`: a Scenario Outline, which the compiler does not support. */
+    source: {
+        file: string;
+        name: string;
+        hasId: boolean;
+        lines: number[];
+        outline: boolean;
+    };
+}
+export interface LockEntry {
+    hash: string;
+    steps: ContractStep[];
+    implementation: Implementation;
+    approvedAt: string;
+    decisionId: string;
+    humanApproved?: true;
+}
+export declare const LOCK_SCHEMA = 1;
+export interface ContractLock {
+    schema: typeof LOCK_SCHEMA;
+    scenarios: Record<string, LockEntry>;
+}
+export type LadderClass = 'match' | 'strengthened' | 'hash-changed' | 'oracle-weakened' | 'target-changed' | 'assertion-lost';
+/** Classes only a trace can produce (DOS-14.6) — free / impl:code scenarios. */
+export type TraceClass = 'opaque' | 'nondeterministic' | 'inconclusive' | 'unproven';
+export type ScenarioClass = LadderClass | 'proposed' | TraceClass;
+export type FindingClass = Exclude<LadderClass, 'match'> | 'lock-uncommitted' | TraceClass;
+/** Exit ≠ 0 (DOS-14.4, DOS-14.6). `unproven` applies to free / impl:code only. */
+export declare const HARD_CLASSES: ReadonlySet<string>;
+/** Exit 0, but delivery waits for QA (DOS-14.4): changed-not-weaker, checks no code can compare, and an
+ *  approved free scenario whose final attempt did not pass (inconclusive — review decision M6). */
+export declare const REVIEW_CLASSES: ReadonlySet<string>;
+/** The catalog rule each class is reported under (gate-rules.yaml); `strengthened` has none. */
+export declare const RULE_OF: Readonly<Partial<Record<FindingClass, string>>>;
+export declare function stepErrors(s: unknown, at: string): string[];
+/** Errors in one stored lock entry (empty = well-formed). The hash itself is checked by the reader. */
+export declare function lockEntryErrors(raw: unknown, id: string): string[];
+/** Approved by a human on a TTY — and nothing else counts (an absent field is `proposed`, T5). */
+export declare const isHumanApproved: (entry: LockEntry | undefined) => entry is LockEntry;
+//# sourceMappingURL=contract-schema.d.ts.map

package/dist/contract/contract-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-schema.d.ts","sourceRoot":"","sources":["../../src/contract/contract-schema.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,eAAe,4CAA6C,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,GAAG,EAAE,MAAM,CAAC;IACZ,qGAAqG;IACrG,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,6GAA6G;IAC7G,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,2GAA2G;IAC3G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2GAA2G;IAC3G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,4GAA4G;IAC5G,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3F;AAED,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,IAAI,CAAC;CACtB;AAED,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,OAAO,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CAAE;AAElG,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAC9H,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,kBAAkB,GAAG,cAAc,GAAG,UAAU,CAAC;AACrF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,kBAAkB,GAAG,UAAU,CAAC;AAE3F,kFAAkF;AAClF,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,CAAoG,CAAC;AAClJ;mGACmG;AACnG,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAAuD,CAAC;AAEvG,gGAAgG;AAChG,eAAO,MAAM,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAUnE,CAAC;AAsBF,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAU3D;AAED,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAYlE;AAED,kGAAkG;AAClG,eAAO,MAAM,eAAe,GAAI,OAAO,SAAS,GAAG,SAAS,KAAG,KAAK,IAAI,SAA0C,CAAC"}

package/dist/contract/contract-schema.js

@@ -0,0 +1,102 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isHumanApproved = exports.RULE_OF = exports.REVIEW_CLASSES = exports.HARD_CLASSES = exports.LOCK_SCHEMA = exports.IMPLEMENTATIONS = void 0;
+exports.stepErrors = stepErrors;
+exports.lockEntryErrors = lockEntryErrors;
+/**
+ * The Test Contract's data model (DOS-14.1 – 14.4) and the strict check of a stored lock entry.
+ *
+ *   step   {kind: action|assert, verb, target?:{ref, also?, parent?, nth?}, value?, matcher?, expected?, negated?, table?}
+ *   lock   qa/<kind>/<unit>/contracts.lock.yaml → {schema: 1, scenarios: {<scenario id>: LockEntry}}
+ *   entry  {hash, steps, implementation, approvedAt, decisionId, humanApproved?}
+ *
+ * A stored entry is checked the way the decision layer checks its records: a wrong type or an
+ * UNKNOWN key is an error, because a field outside the hash could carry meaning the hash does not
+ * vouch for. `humanApproved` counts only when it is literally `true` (takumi T5).
+ */
+const decision_schema_1 = require("../decisions/decision-schema");
+exports.IMPLEMENTATIONS = ['compiled', 'impl:code', 'free'];
+exports.LOCK_SCHEMA = 1;
+/** Exit ≠ 0 (DOS-14.4, DOS-14.6). `unproven` applies to free / impl:code only. */
+exports.HARD_CLASSES = new Set(['oracle-weakened', 'target-changed', 'assertion-lost', 'lock-uncommitted', 'unproven']);
+/** Exit 0, but delivery waits for QA (DOS-14.4): changed-not-weaker, checks no code can compare, and an
+ *  approved free scenario whose final attempt did not pass (inconclusive — review decision M6). */
+exports.REVIEW_CLASSES = new Set(['hash-changed', 'opaque', 'inconclusive']);
+/** The catalog rule each class is reported under (gate-rules.yaml); `strengthened` has none. */
+exports.RULE_OF = {
+    'hash-changed': 'contract.hash-changed',
+    'oracle-weakened': 'contract.oracle-weakened',
+    'target-changed': 'contract.target-changed',
+    'assertion-lost': 'contract.assertion-lost',
+    'lock-uncommitted': 'contract.lock-uncommitted',
+    opaque: 'contract.opaque-step',
+    nondeterministic: 'contract.nondeterministic',
+    inconclusive: 'contract.inconclusive',
+    unproven: 'contract.unproven',
+};
+const STEP_KEYS = new Set(['kind', 'verb', 'target', 'value', 'matcher', 'expected', 'negated', 'table']);
+const TARGET_KEYS = new Set(['ref', 'also', 'parent', 'nth']);
+const ENTRY_KEYS = new Set(['hash', 'steps', 'implementation', 'approvedAt', 'decisionId', 'humanApproved']);
+const HASH_RE = /^[0-9a-f]{12}$/;
+const isObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const isStringList = (v) => Array.isArray(v) && v.every((x) => typeof x === 'string');
+const unknownKeys = (o, allowed, at) => Object.keys(o).filter((k) => !allowed.has(k)).map((k) => `${at}: unknown key "${k}"`);
+function targetErrors(t, at) {
+    if (!isObject(t))
+        return [`${at}: target must be a mapping`];
+    const e = unknownKeys(t, TARGET_KEYS, at);
+    if (typeof t.ref !== 'string')
+        e.push(`${at}: target.ref must be a string`);
+    if (t.also !== undefined && !isStringList(t.also))
+        e.push(`${at}: target.also must be a list of strings`);
+    if (t.parent !== undefined && typeof t.parent !== 'string')
+        e.push(`${at}: target.parent must be a string`);
+    if (t.nth !== undefined && !(Number.isInteger(t.nth) && t.nth > 0))
+        e.push(`${at}: target.nth must be a positive integer`);
+    return e;
+}
+function stepErrors(s, at) {
+    if (!isObject(s))
+        return [`${at}: not a mapping`];
+    const e = unknownKeys(s, STEP_KEYS, at);
+    if (s.kind !== 'action' && s.kind !== 'assert')
+        e.push(`${at}: kind must be action|assert`);
+    if (typeof s.verb !== 'string' || !s.verb)
+        e.push(`${at}: verb is required`);
+    if (s.target !== undefined)
+        e.push(...targetErrors(s.target, at));
+    for (const k of ['value', 'matcher', 'expected'])
+        if (s[k] !== undefined && typeof s[k] !== 'string')
+            e.push(`${at}: ${k} must be a string`);
+    if (s.negated !== undefined && s.negated !== true)
+        e.push(`${at}: negated is either true or absent`);
+    if (s.table !== undefined && !(Array.isArray(s.table) && s.table.every(isStringList)))
+        e.push(`${at}: table must be rows of strings`);
+    return e;
+}
+/** Errors in one stored lock entry (empty = well-formed). The hash itself is checked by the reader. */
+function lockEntryErrors(raw, id) {
+    const at = `scenario ${id}`;
+    if (!isObject(raw))
+        return [`${at}: not a mapping`];
+    const e = unknownKeys(raw, ENTRY_KEYS, at);
+    if (typeof raw.hash !== 'string' || !HASH_RE.test(raw.hash))
+        e.push(`${at}: hash must be 12 hex characters`);
+    if (!exports.IMPLEMENTATIONS.includes(raw.implementation))
+        e.push(`${at}: implementation must be ${exports.IMPLEMENTATIONS.join('|')}`);
+    if (typeof raw.approvedAt !== 'string' || Number.isNaN(Date.parse(raw.approvedAt)))
+        e.push(`${at}: approvedAt must be an ISO-8601 timestamp`);
+    if (typeof raw.decisionId !== 'string' || !decision_schema_1.DECISION_ID_RE.test(raw.decisionId))
+        e.push(`${at}: decisionId must be D-<16 hex>`);
+    if (raw.humanApproved !== undefined && raw.humanApproved !== true)
+        e.push(`${at}: humanApproved is either true or absent`);
+    if (!Array.isArray(raw.steps))
+        e.push(`${at}: steps must be a list`);
+    else
+        raw.steps.forEach((s, i) => e.push(...stepErrors(s, `${at} step ${i + 1}`)));
+    return e;
+}
+/** Approved by a human on a TTY — and nothing else counts (an absent field is `proposed`, T5). */
+const isHumanApproved = (entry) => entry?.humanApproved === true;
+exports.isHumanApproved = isHumanApproved;
+//# sourceMappingURL=contract-schema.js.map

package/dist/contract/contract-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-schema.js","sourceRoot":"","sources":["../../src/contract/contract-schema.ts"],"names":[],"mappings":";;;AA4GA,gCAUC;AAGD,0CAYC;AArID;;;;;;;;;;GAUG;AACH,kEAA8D;AAEjD,QAAA,eAAe,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AA+C7D,QAAA,WAAW,GAAG,CAAC,CAAC;AAS7B,kFAAkF;AACrE,QAAA,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC;AAClJ;mGACmG;AACtF,QAAA,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AAEvG,gGAAgG;AACnF,QAAA,OAAO,GAAoD;IACtE,cAAc,EAAE,uBAAuB;IACvC,iBAAiB,EAAE,0BAA0B;IAC7C,gBAAgB,EAAE,yBAAyB;IAC3C,gBAAgB,EAAE,yBAAyB;IAC3C,kBAAkB,EAAE,2BAA2B;IAC/C,MAAM,EAAE,sBAAsB;IAC9B,gBAAgB,EAAE,2BAA2B;IAC7C,YAAY,EAAE,uBAAuB;IACrC,QAAQ,EAAE,mBAAmB;CAC9B,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1G,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,CAAC,CAAC,CAAC;AAC7G,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACxH,MAAM,YAAY,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAC9G,MAAM,WAAW,GAAG,CAAC,CAA0B,EAAE,OAAoB,EAAE,EAAU,EAAY,EAAE,CAC7F,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;AAExF,SAAS,YAAY,CAAC,CAAU,EAAE,EAAU;IAC1C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;IAC1G,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC,GAAc,GAAG,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;IACvI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,UAAU,CAAC,CAAU,EAAE,EAAU;IAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAU;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtJ,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IACtI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uGAAuG;AACvG,SAAgB,eAAe,CAAC,GAAY,EAAE,EAAU;IACtD,MAAM,EAAE,GAAG,YAAY,EAAE,EAAE,CAAC;IAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAC7G,IAAI,CAAC,uBAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAgC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4BAA4B,uBAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1I,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;IAC9I,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gCAAc,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IAC/H,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IAC3H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;;QAChE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kGAAkG;AAC3F,MAAM,eAAe,GAAG,CAAC,KAA4B,EAAsB,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;AAAtG,QAAA,eAAe,mBAAuF"}

package/dist/contract/contract-units.d.ts

@@ -0,0 +1,12 @@
+export interface ContractUnitRef {
+    name: string;
+    dir: string;
+}
+export declare function allContractUnits(root: string): ContractUnitRef[];
+/** Every unit directory `name` can mean (`pay` matches a flow `pay` and an api flow `flows/pay`). */
+export declare function contractUnitDirsNamed(root: string, name: string): ContractUnitRef[];
+/** The units `sungen delivery <name>` delivers. */
+export declare function deliveryUnitsNamed(root: string, name: string): ContractUnitRef[];
+/** The one unit a contract command names; an unknown or ambiguous name is an error, never a guess. */
+export declare function resolveContractUnit(root: string, name: string): ContractUnitRef;
+//# sourceMappingURL=contract-units.d.ts.map

package/dist/contract/contract-units.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-units.d.ts","sourceRoot":"","sources":["../../src/contract/contract-units.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAM9D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAQhE;AAED,qGAAqG;AACrG,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAEnF;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAIhF;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,CAK/E"}

package/dist/contract/contract-units.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.allContractUnits = allContractUnits;
+exports.contractUnitDirsNamed = contractUnitDirsNamed;
+exports.deliveryUnitsNamed = deliveryUnitsNamed;
+exports.resolveContractUnit = resolveContractUnit;
+/**
+ * Which units a contract command or a `sungen delivery` call touches — the same units `delivery`
+ * enumerates (cli/commands/delivery.ts `listAllTargets` / `resolveTargetsFromArg`), restated here
+ * so the guard does not load the whole delivery command; a test pins the two enumerations together.
+ *
+ *   every unit       qa/screens/*, qa/flows/*, qa/api/* (not `flows`), and qa/api/flows/* as `flows/<name>`
+ *   a name           EVERY directory it can mean (a screen and a flow of one name are both checked);
+ *                    for delivery only, a name that is no unit falls back to the units hosting a
+ *                    feature file of that basename
+ *
+ * Names come from untrusted input (a Bash command): they are only compared with enumerated directory
+ * names, never joined into a path.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const unit_paths_1 = require("../harness/unit-paths");
+function subdirs(dir) {
+    try {
+        return fs.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
+    }
+    catch {
+        return [];
+    }
+}
+function allContractUnits(root) {
+    const qa = path.join(root, 'qa');
+    const out = [];
+    for (const kind of ['screens', 'flows', 'api']) {
+        for (const name of subdirs(path.join(qa, kind)))
+            if (!(kind === 'api' && name === 'flows'))
+                out.push({ name, dir: path.join(qa, kind, name) });
+    }
+    for (const name of subdirs(path.join(qa, 'api', 'flows')))
+        out.push({ name: `flows/${name}`, dir: path.join(qa, 'api', 'flows', name) });
+    return out;
+}
+/** Every unit directory `name` can mean (`pay` matches a flow `pay` and an api flow `flows/pay`). */
+function contractUnitDirsNamed(root, name) {
+    return allContractUnits(root).filter((u) => u.name === name || u.name === `flows/${name}`);
+}
+/** The units `sungen delivery <name>` delivers. */
+function deliveryUnitsNamed(root, name) {
+    const direct = contractUnitDirsNamed(root, name);
+    if (direct.length)
+        return direct;
+    return allContractUnits(root).filter((u) => (0, unit_paths_1.featureFilesFor)(u.dir, u.name).some((f) => path.basename(f, '.feature') === name && fs.existsSync(f)));
+}
+/** The one unit a contract command names; an unknown or ambiguous name is an error, never a guess. */
+function resolveContractUnit(root, name) {
+    const found = contractUnitDirsNamed(root, name);
+    if (found.length === 1)
+        return found[0];
+    if (!found.length)
+        throw new Error(`Not found: qa/screens/${name}, qa/flows/${name}, qa/api/${name} or qa/api/flows/${name}`);
+    throw new Error(`"${name}" names ${found.length} units (${found.map((u) => path.relative(root, u.dir)).join(', ')}) — rename one so the contract knows which`);
+}
+//# sourceMappingURL=contract-units.js.map

package/dist/contract/contract-units.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-units.js","sourceRoot":"","sources":["../../src/contract/contract-units.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,4CAQC;AAGD,sDAEC;AAGD,gDAIC;AAGD,kDAKC;AAnDD;;;;;;;;;;;;GAYG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,sDAAwD;AAIxD,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC5I,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACjJ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACzI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,SAAgB,qBAAqB,CAAC,IAAY,EAAE,IAAY;IAC9D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,mDAAmD;AACnD,SAAgB,kBAAkB,CAAC,IAAY,EAAE,IAAY;IAC3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IACjC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,4BAAe,EAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrJ,CAAC;AAED,sGAAsG;AACtG,SAAgB,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,cAAc,IAAI,YAAY,IAAI,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC9H,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,WAAW,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;AACjK,CAAC"}

package/dist/contract/contracts-lock-file.d.ts

@@ -0,0 +1,24 @@
+import { ContractLock, ContractScenario, LockEntry } from './contract-schema';
+export declare const LOCK_FILE_NAME = "contracts.lock.yaml";
+export declare const lockPathFor: (unitDir: string) => string;
+export declare class ContractLockError extends Error {
+    readonly source: string;
+    readonly problems: string[];
+    constructor(source: string, problems: string[]);
+}
+/**
+ * A lock as read. `tampered`: well-formed entries whose steps no longer hash to their `hash` — edited
+ * by hand. They are not a read error: they are a hard finding (`contract.lock-uncommitted`), so the
+ * delivery guard denies instead of asking.
+ */
+export interface ReadLock extends ContractLock {
+    tampered: string[];
+}
+export declare function parseLockText(text: string, source: string): ReadLock;
+/** The lock at `file`, or null when there is none. Throws ContractLockError when it cannot be read as a lock. */
+export declare function readLockFile(file: string): ReadLock | null;
+export declare function serializeLock(lock: ContractLock): string;
+export declare function writeLockFile(file: string, lock: ContractLock): void;
+/** The entry a TTY approval writes for one scenario. Only the approve path sets `humanApproved`. */
+export declare function lockEntryFor(sc: ContractScenario, decisionId: string, approvedAt: string): LockEntry;
+//# sourceMappingURL=contracts-lock-file.d.ts.map

package/dist/contract/contracts-lock-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts-lock-file.d.ts","sourceRoot":"","sources":["../../src/contract/contracts-lock-file.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA6B,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAE1H,eAAO,MAAM,cAAc,wBAAwB,CAAC;AACpD,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,MAA4C,CAAC;AAK3F,qBAAa,iBAAkB,SAAQ,KAAK;aACd,MAAM,EAAE,MAAM;aAAkB,QAAQ,EAAE,MAAM,EAAE;gBAAlD,MAAM,EAAE,MAAM,EAAkB,QAAQ,EAAE,MAAM,EAAE;CAI/E;AAID;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,YAAY;IAAG,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE;AAErE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAiBpE;AAED,iHAAiH;AACjH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAO1D;AASD,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAWxD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAGpE;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,CAEpG"}

package/dist/contract/contracts-lock-file.js

@@ -0,0 +1,140 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ContractLockError = exports.lockPathFor = exports.LOCK_FILE_NAME = void 0;
+exports.parseLockText = parseLockText;
+exports.readLockFile = readLockFile;
+exports.serializeLock = serializeLock;
+exports.writeLockFile = writeLockFile;
+exports.lockEntryFor = lockEntryFor;
+/**
+ * `qa/<kind>/<unit>/contracts.lock.yaml` — read, check, write (DOS-14.3, DOS-13.8).
+ *
+ *   read   safe YAML (core schema, few aliases, no duplicate keys, byte cap); every entry checked
+ *          strictly. A structural problem throws ContractLockError — a lock that cannot be read is
+ *          not "nothing locked" (CLI exit 1, guard `ask`). An entry whose steps no longer hash to its
+ *          `hash` was edited by hand: it is returned in `tampered` and judged as a hard finding.
+ *   write  scenario ids sorted, one block per scenario, written atomically.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yaml_1 = require("yaml");
+const write_atomic_1 = require("../harness/write-atomic");
+const safe_yaml_parse_1 = require("../utils/safe-yaml-parse");
+const contract_hash_1 = require("./contract-hash");
+const contract_schema_1 = require("./contract-schema");
+exports.LOCK_FILE_NAME = 'contracts.lock.yaml';
+const lockPathFor = (unitDir) => path.join(unitDir, exports.LOCK_FILE_NAME);
+exports.lockPathFor = lockPathFor;
+const HEADER = '# Sungen Test Contract lock (DOS-14.3) — written only by `sungen contract approve` on a terminal.\n'
+    + '# One block per scenario id. Commit it through review: `sungen contract check` compares it with git HEAD.\n';
+class ContractLockError extends Error {
+    constructor(source, problems) {
+        super(`${source} cannot be trusted: ${problems.slice(0, 5).join('; ')}${problems.length > 5 ? ` (+${problems.length - 5} more)` : ''}. Restore it from git, or delete it and approve again on a terminal.`);
+        this.source = source;
+        this.problems = problems;
+        this.name = 'ContractLockError';
+    }
+}
+exports.ContractLockError = ContractLockError;
+const isObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+function parseLockText(text, source) {
+    let raw;
+    try {
+        raw = (0, safe_yaml_parse_1.safeYamlParse)(text, source);
+    }
+    catch (e) {
+        throw new ContractLockError(source, [e instanceof Error ? e.message : String(e)]);
+    }
+    if (!isObject(raw))
+        throw new ContractLockError(source, ['not a mapping']);
+    const problems = Object.keys(raw).filter((k) => k !== 'schema' && k !== 'scenarios').map((k) => `unknown key "${k}"`);
+    if (raw.schema !== contract_schema_1.LOCK_SCHEMA)
+        problems.push(`schema must be ${contract_schema_1.LOCK_SCHEMA}`);
+    if (!isObject(raw.scenarios))
+        problems.push('scenarios must be a mapping');
+    const scenarios = isObject(raw.scenarios) ? raw.scenarios : {};
+    const tampered = [];
+    for (const [id, entry] of Object.entries(scenarios)) {
+        const errors = (0, contract_schema_1.lockEntryErrors)(entry, id);
+        problems.push(...errors);
+        const e = entry;
+        if (!errors.length && (0, contract_hash_1.contractHash)(e.implementation, e.steps) !== e.hash)
+            tampered.push(id);
+    }
+    if (problems.length)
+        throw new ContractLockError(source, problems);
+    return { schema: contract_schema_1.LOCK_SCHEMA, scenarios: scenarios, tampered };
+}
+/** The lock at `file`, or null when there is none. Throws ContractLockError when it cannot be read as a lock. */
+function readLockFile(file) {
+    let text;
+    try {
+        text = fs.readFileSync(file, 'utf8');
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return null;
+        throw new ContractLockError(file, [e instanceof Error ? e.message : String(e)]);
+    }
+    return parseLockText(text, file);
+}
+/** The steps in their written key order, so the YAML reads the way DOS-14.1 lists the fields. */
+function orderedStep(s) {
+    const t = s.target && { ref: s.target.ref, also: s.target.also, parent: s.target.parent, nth: s.target.nth };
+    const o = { kind: s.kind, verb: s.verb, target: t, value: s.value, matcher: s.matcher, expected: s.expected, negated: s.negated, table: s.table };
+    return JSON.parse(JSON.stringify(o)); // drops the undefined fields
+}
+function serializeLock(lock) {
+    const scenarios = {};
+    for (const id of Object.keys(lock.scenarios).sort((a, b) => a.localeCompare(b, 'en'))) {
+        const e = lock.scenarios[id];
+        scenarios[id] = {
+            hash: e.hash, implementation: e.implementation, approvedAt: e.approvedAt, decisionId: e.decisionId,
+            ...(e.humanApproved === true ? { humanApproved: true } : {}),
+            steps: e.steps.map(orderedStep),
+        };
+    }
+    return HEADER + (0, yaml_1.stringify)({ schema: contract_schema_1.LOCK_SCHEMA, scenarios }, { schema: 'core', lineWidth: 0 });
+}
+function writeLockFile(file, lock) {
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    (0, write_atomic_1.writeFileAtomic)(file, serializeLock(lock));
+}
+/** The entry a TTY approval writes for one scenario. Only the approve path sets `humanApproved`. */
+function lockEntryFor(sc, decisionId, approvedAt) {
+    return { hash: sc.hash, steps: sc.steps, implementation: sc.implementation, approvedAt, decisionId, humanApproved: true };
+}
+//# sourceMappingURL=contracts-lock-file.js.map

package/dist/contract/contracts-lock-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts-lock-file.js","sourceRoot":"","sources":["../../src/contract/contracts-lock-file.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuCA,sCAiBC;AAGD,oCAOC;AASD,sCAWC;AAED,sCAGC;AAGD,oCAEC;AAhGD;;;;;;;;GAQG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,+BAAiC;AACjC,0DAA0D;AAC1D,8DAAyD;AACzD,mDAA+C;AAC/C,uDAA0H;AAE7G,QAAA,cAAc,GAAG,qBAAqB,CAAC;AAC7C,MAAM,WAAW,GAAG,CAAC,OAAe,EAAU,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,sBAAc,CAAC,CAAC;AAA9E,QAAA,WAAW,eAAmE;AAE3F,MAAM,MAAM,GAAG,qGAAqG;MAChH,6GAA6G,CAAC;AAElH,MAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAA4B,MAAc,EAAkB,QAAkB;QAC5E,KAAK,CAAC,GAAG,MAAM,uBAAuB,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,sEAAsE,CAAC,CAAC;QADlL,WAAM,GAAN,MAAM,CAAQ;QAAkB,aAAQ,GAAR,QAAQ,CAAU;QAE5E,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AALD,8CAKC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AASxH,SAAgB,aAAa,CAAC,IAAY,EAAE,MAAc;IACxD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAA,+BAAa,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC3I,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtH,IAAI,GAAG,CAAC,MAAM,KAAK,6BAAW;QAAE,QAAQ,CAAC,IAAI,CAAC,kBAAkB,6BAAW,EAAE,CAAC,CAAC;IAC/E,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC;QACzB,MAAM,CAAC,GAAG,KAA6B,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,IAAA,4BAAY,EAAC,CAAC,CAAC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI;YAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM;QAAE,MAAM,IAAI,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnE,OAAO,EAAE,MAAM,EAAE,6BAAW,EAAE,SAAS,EAAE,SAAsC,EAAE,QAAQ,EAAE,CAAC;AAC9F,CAAC;AAED,iHAAiH;AACjH,SAAgB,YAAY,CAAC,IAAY;IACvC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QAAC,IAAI,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,IAAI,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,iGAAiG;AACjG,SAAS,WAAW,CAAC,CAAe;IAClC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC7G,MAAM,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAClJ,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAiB,CAAC,CAAG,6BAA6B;AACvF,CAAC;AAED,SAAgB,aAAa,CAAC,IAAkB;IAC9C,MAAM,SAAS,GAA8B,EAAE,CAAC;IAChD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QACtF,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC7B,SAAS,CAAC,EAAE,CAAC,GAAG;YACd,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU;YAClG,GAAG,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC;SAChC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,GAAG,IAAA,gBAAS,EAAC,EAAE,MAAM,EAAE,6BAAW,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;AAClG,CAAC;AAED,SAAgB,aAAa,CAAC,IAAY,EAAE,IAAkB;IAC5D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,IAAA,8BAAe,EAAC,IAAI,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,oGAAoG;AACpG,SAAgB,YAAY,CAAC,EAAoB,EAAE,UAAkB,EAAE,UAAkB;IACvF,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;AAC5H,CAAC"}

package/dist/contract/data-normalize.d.ts

@@ -0,0 +1,10 @@
+export interface TestDataIndex {
+    byValue: Map<string, string>;
+}
+/** The unit's base test-data file (environment overlays are not the contract's business). */
+export declare function loadTestDataIndex(unitDir: string, unit: string): TestDataIndex;
+/** Replace the dynamic parts of a value; whole-value test-data matches win. */
+export declare function normalizeValue(value: string, index: TestDataIndex): string;
+/** Names and texts the page shows: only the dynamic parts move (a name is never a test-data key). */
+export declare function normalizeShownText(text: string): string;
+//# sourceMappingURL=data-normalize.d.ts.map

package/dist/contract/data-normalize.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-normalize.d.ts","sourceRoot":"","sources":["../../src/contract/data-normalize.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE;AAsB/D,6FAA6F;AAC7F,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,aAAa,CAU9E;AAED,+EAA+E;AAC/E,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,MAAM,CAM1E;AAED,qGAAqG;AACrG,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD"}