@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.2

package/dist/contract/trace/trace-zip-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-zip-reader.d.ts","sourceRoot":"","sources":["../../../src/contract/trace/trace-zip-reader.ts"],"names":[],"mappings":"AAYA,OAAO,EAAwD,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAI1G,MAAM,WAAW,UAAU;IACzB,KAAK,IAAI,MAAM,EAAE,CAAC;IAClB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;CAChC;AAkFD,qGAAqG;AACrG,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,GAAE,cAAiC,GAAG,UAAU,CAsB1F"}

package/dist/contract/trace/trace-zip-reader.js

@@ -0,0 +1,186 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.openZip = openZip;
+/**
+ * A synchronous, limit-enforcing zip reader for trace.zip files (DOS-14.7) on Node's own zlib —
+ * no dependency, and synchronous so the contract verdict (and the Claude Code guard that rebuilds
+ * it) stays a plain function.
+ *
+ * Only what a Playwright trace needs is accepted: STORE or DEFLATE entries, no encryption, no
+ * ZIP64, no duplicate names. Sizes come from the central directory and are checked against
+ * TRACE_ZIP_LIMITS before anything is inflated; inflation itself is capped at the declared size and
+ * the CRC is verified, so a header that lies is caught while reading, not after. Entry names are
+ * map keys — nothing here ever touches the filesystem.
+ */
+const zlib = __importStar(require("zlib"));
+const trace_zip_limits_1 = require("./trace-zip-limits");
+const EOCD = 0x06054b50;
+const CENTRAL = 0x02014b50;
+const LOCAL = 0x04034b50;
+/** Below this, a high ratio is just a small repetitive file; the per-entry and total caps still apply. */
+const RATIO_FLOOR_BYTES = 64 * 1024;
+const malformed = (why) => new trace_zip_limits_1.TraceRejected('zip.malformed', why);
+const CRC_TABLE = (() => {
+    const t = new Int32Array(256);
+    for (let n = 0; n < 256; n++) {
+        let c = n;
+        for (let k = 0; k < 8; k++)
+            c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+        t[n] = c;
+    }
+    return t;
+})();
+function crc32(buf) {
+    let c = -1;
+    for (let i = 0; i < buf.length; i++)
+        c = CRC_TABLE[(c ^ buf[i]) & 0xff] ^ (c >>> 8);
+    return (c ^ -1) >>> 0;
+}
+function findEocd(buf) {
+    const stop = Math.max(0, buf.length - 22 - 0xffff);
+    for (let i = buf.length - 22; i >= stop; i--)
+        if (buf.readUInt32LE(i) === EOCD)
+            return i;
+    throw malformed('no end-of-central-directory record (not a zip)');
+}
+function readEntries(buf, limits) {
+    const eocd = findEocd(buf);
+    const count = buf.readUInt16LE(eocd + 10);
+    const cdOffset = buf.readUInt32LE(eocd + 16);
+    if (count === 0xffff || cdOffset === 0xffffffff)
+        throw new trace_zip_limits_1.TraceRejected('zip.unsupported', 'ZIP64 archives are not read');
+    if (count > limits.maxEntries)
+        throw new trace_zip_limits_1.TraceRejected('zip.too-many-entries', `${count} entries > ${limits.maxEntries}`);
+    const entries = new Map();
+    let at = cdOffset;
+    let total = 0;
+    for (let i = 0; i < count; i++) {
+        if (buf.readUInt32LE(at) !== CENTRAL)
+            throw malformed(`central directory entry ${i} has a bad signature`);
+        const flags = buf.readUInt16LE(at + 8);
+        const method = buf.readUInt16LE(at + 10);
+        const crc = buf.readUInt32LE(at + 16);
+        const compressed = buf.readUInt32LE(at + 20);
+        const size = buf.readUInt32LE(at + 24);
+        const nameLen = buf.readUInt16LE(at + 28);
+        const name = buf.toString('utf8', at + 46, at + 46 + nameLen);
+        const localOffset = buf.readUInt32LE(at + 42);
+        at += 46 + nameLen + buf.readUInt16LE(at + 30) + buf.readUInt16LE(at + 32);
+        (0, trace_zip_limits_1.assertSafeEntryName)(name.replace(/\/$/, '') || name);
+        if (flags & 1)
+            throw new trace_zip_limits_1.TraceRejected('zip.unsupported', `${name} is encrypted`);
+        if (method !== 0 && method !== 8)
+            throw new trace_zip_limits_1.TraceRejected('zip.unsupported', `${name} uses compression method ${method}`);
+        if (compressed === 0xffffffff || size === 0xffffffff)
+            throw new trace_zip_limits_1.TraceRejected('zip.unsupported', `${name} needs ZIP64`);
+        if (name.endsWith('/'))
+            continue;
+        if (entries.has(name))
+            throw malformed(`duplicate entry ${name}`);
+        if (size > limits.maxEntryBytes)
+            throw new trace_zip_limits_1.TraceRejected('zip.entry-too-large', `${name}: ${size} B > ${limits.maxEntryBytes}`);
+        if (size >= RATIO_FLOOR_BYTES && compressed > 0 && size / compressed > limits.maxRatio) {
+            throw new trace_zip_limits_1.TraceRejected('zip.ratio', `${name}: ratio ${(size / compressed).toFixed(0)}:1 > ${limits.maxRatio}:1`);
+        }
+        if (size >= RATIO_FLOOR_BYTES && compressed === 0)
+            throw new trace_zip_limits_1.TraceRejected('zip.ratio', `${name}: ${size} B from 0 compressed bytes`);
+        total += size;
+        if (total > limits.maxTotalBytes)
+            throw new trace_zip_limits_1.TraceRejected('zip.total-too-large', `more than ${limits.maxTotalBytes} B uncompressed`);
+        entries.set(name, { name, method, compressed, size, crc, localOffset });
+    }
+    return entries;
+}
+function inflate(buf, e) {
+    if (buf.readUInt32LE(e.localOffset) !== LOCAL)
+        throw malformed(`${e.name}: bad local header`);
+    const start = e.localOffset + 30 + buf.readUInt16LE(e.localOffset + 26) + buf.readUInt16LE(e.localOffset + 28);
+    const data = buf.subarray(start, start + e.compressed);
+    if (data.length !== e.compressed)
+        throw malformed(`${e.name}: truncated data`);
+    let out;
+    if (e.method === 0)
+        out = data;
+    else {
+        try {
+            out = zlib.inflateRawSync(data, { maxOutputLength: Math.max(1, e.size) });
+        }
+        catch (err) {
+            throw malformed(`${e.name}: inflates past its declared ${e.size} B or is corrupt (${err.message.split('\n')[0]})`);
+        }
+    }
+    if (out.length !== e.size)
+        throw malformed(`${e.name}: ${out.length} B, header says ${e.size} B`);
+    if (crc32(out) !== e.crc)
+        throw malformed(`${e.name}: CRC mismatch`);
+    return out;
+}
+/** Open a zip held in memory. Throws TraceRejected for anything outside the limits or the format. */
+function openZip(buf, limits = trace_zip_limits_1.TRACE_ZIP_LIMITS) {
+    if (buf.length > limits.maxZipBytes)
+        throw new trace_zip_limits_1.TraceRejected('zip.too-large', `${buf.length} B > ${limits.maxZipBytes}`);
+    if (buf.length < 22)
+        throw malformed('too short to be a zip');
+    let entries;
+    try {
+        entries = readEntries(buf, limits);
+    }
+    catch (e) {
+        if (e instanceof trace_zip_limits_1.TraceRejected)
+            throw e;
+        throw malformed(`unreadable zip structure (${e.message.split('\n')[0]})`);
+    }
+    const readBuffer = (name) => {
+        const e = entries.get(name);
+        if (!e)
+            throw malformed(`no entry ${name}`);
+        try {
+            return inflate(buf, e);
+        }
+        catch (err) {
+            if (err instanceof trace_zip_limits_1.TraceRejected)
+                throw err;
+            throw malformed(`${name}: ${err.message.split('\n')[0]}`);
+        }
+    };
+    return {
+        names: () => [...entries.keys()],
+        has: (name) => entries.has(name),
+        readBuffer,
+        readText: (name) => readBuffer(name).toString('utf8'),
+    };
+}
+//# sourceMappingURL=trace-zip-reader.js.map

package/dist/contract/trace/trace-zip-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trace-zip-reader.js","sourceRoot":"","sources":["../../../src/contract/trace/trace-zip-reader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAwGA,0BAsBC;AA9HD;;;;;;;;;;GAUG;AACH,2CAA6B;AAC7B,yDAA0G;AAW1G,MAAM,IAAI,GAAG,UAAU,CAAC;AACxB,MAAM,OAAO,GAAG,UAAU,CAAC;AAC3B,MAAM,KAAK,GAAG,UAAU,CAAC;AACzB,0GAA0G;AAC1G,MAAM,iBAAiB,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC,MAAM,SAAS,GAAG,CAAC,GAAW,EAAiB,EAAE,CAAC,IAAI,gCAAa,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;AAE1F,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;IACtB,MAAM,CAAC,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAAC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAChI,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AACL,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACpF,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,QAAQ,CAAC,GAAW;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IACnD,KAAK,IAAI,CAAC,GAAG,GAAG,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;QAAE,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,CAAC,CAAC;IACzF,MAAM,SAAS,CAAC,gDAAgD,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,GAAW,EAAE,MAAsB;IACtD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;IAC7C,IAAI,KAAK,KAAK,MAAM,IAAI,QAAQ,KAAK,UAAU;QAAE,MAAM,IAAI,gCAAa,CAAC,iBAAiB,EAAE,6BAA6B,CAAC,CAAC;IAC3H,IAAI,KAAK,GAAG,MAAM,CAAC,UAAU;QAAE,MAAM,IAAI,gCAAa,CAAC,sBAAsB,EAAE,GAAG,KAAK,cAAc,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC;IAC1H,MAAM,OAAO,GAAG,IAAI,GAAG,EAAiB,CAAC;IACzC,IAAI,EAAE,GAAG,QAAQ,CAAC;IAClB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QAC/B,IAAI,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,OAAO;YAAE,MAAM,SAAS,CAAC,2BAA2B,CAAC,sBAAsB,CAAC,CAAC;QAC1G,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACtC,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,CAAC;QAC9D,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC9C,EAAE,IAAI,EAAE,GAAG,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC3E,IAAA,sCAAmB,EAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC;QACrD,IAAI,KAAK,GAAG,CAAC;YAAE,MAAM,IAAI,gCAAa,CAAC,iBAAiB,EAAE,GAAG,IAAI,eAAe,CAAC,CAAC;QAClF,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,gCAAa,CAAC,iBAAiB,EAAE,GAAG,IAAI,4BAA4B,MAAM,EAAE,CAAC,CAAC;QAC1H,IAAI,UAAU,KAAK,UAAU,IAAI,IAAI,KAAK,UAAU;YAAE,MAAM,IAAI,gCAAa,CAAC,iBAAiB,EAAE,GAAG,IAAI,cAAc,CAAC,CAAC;QACxH,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,SAAS;QACjC,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,SAAS,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,IAAI,GAAG,MAAM,CAAC,aAAa;YAAE,MAAM,IAAI,gCAAa,CAAC,qBAAqB,EAAE,GAAG,IAAI,KAAK,IAAI,QAAQ,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC;QAChI,IAAI,IAAI,IAAI,iBAAiB,IAAI,UAAU,GAAG,CAAC,IAAI,IAAI,GAAG,UAAU,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC;YACvF,MAAM,IAAI,gCAAa,CAAC,WAAW,EAAE,GAAG,IAAI,WAAW,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC;QACpH,CAAC;QACD,IAAI,IAAI,IAAI,iBAAiB,IAAI,UAAU,KAAK,CAAC;YAAE,MAAM,IAAI,gCAAa,CAAC,WAAW,EAAE,GAAG,IAAI,KAAK,IAAI,4BAA4B,CAAC,CAAC;QACtI,KAAK,IAAI,IAAI,CAAC;QACd,IAAI,KAAK,GAAG,MAAM,CAAC,aAAa;YAAE,MAAM,IAAI,gCAAa,CAAC,qBAAqB,EAAE,aAAa,MAAM,CAAC,aAAa,iBAAiB,CAAC,CAAC;QACrI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,GAAW,EAAE,CAAQ;IACpC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,KAAK;QAAE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,oBAAoB,CAAC,CAAC;IAC9F,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;IAC/G,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC;IACvD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,UAAU;QAAE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,kBAAkB,CAAC,CAAC;IAC/E,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,GAAG,GAAG,IAAI,CAAC;SAC1B,CAAC;QACJ,IAAI,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAC9F,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,gCAAgC,CAAC,CAAC,IAAI,qBAAsB,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChI,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI;QAAE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,MAAM,mBAAmB,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IAClG,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG;QAAE,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,gBAAgB,CAAC,CAAC;IACrE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,SAAgB,OAAO,CAAC,GAAW,EAAE,SAAyB,mCAAgB;IAC5E,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW;QAAE,MAAM,IAAI,gCAAa,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,MAAM,QAAQ,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IACzH,IAAI,GAAG,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,SAAS,CAAC,uBAAuB,CAAC,CAAC;IAC9D,IAAI,OAA2B,CAAC;IAChC,IAAI,CAAC;QAAC,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACrD,IAAI,CAAC,YAAY,gCAAa;YAAE,MAAM,CAAC,CAAC;QACxC,MAAM,SAAS,CAAC,6BAA8B,CAAW,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACvF,CAAC;IACD,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE;QAC1C,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC5B,IAAI,CAAC,CAAC;YAAE,MAAM,SAAS,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,CAAC;YAAC,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YAC3C,IAAI,GAAG,YAAY,gCAAa;gBAAE,MAAM,GAAG,CAAC;YAC5C,MAAM,SAAS,CAAC,GAAG,IAAI,KAAM,GAAa,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC;QAChC,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAChC,UAAU;QACV,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;KACtD,CAAC;AACJ,CAAC"}

package/dist/contract/verify-approval-decisions.d.ts

@@ -0,0 +1,5 @@
+import { HeadSnapshot } from './contract-git';
+import { ContractLock } from './contract-schema';
+import type { UncommittedEntry } from './lock-vs-git-head';
+export declare function unverifiedApprovals(projectRoot: string, unitDir: string, lock: ContractLock | null, skip: ReadonlySet<string>, snap: HeadSnapshot): UncommittedEntry[];
+//# sourceMappingURL=verify-approval-decisions.d.ts.map

package/dist/contract/verify-approval-decisions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-approval-decisions.d.ts","sourceRoot":"","sources":["../../src/contract/verify-approval-decisions.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAA0C,MAAM,gBAAgB,CAAC;AACtF,OAAO,EAAE,YAAY,EAA8B,MAAM,mBAAmB,CAAC;AAC7E,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AA6B3D,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,YAAY,GAC7G,gBAAgB,EAAE,CAWpB"}

package/dist/contract/verify-approval-decisions.js

@@ -0,0 +1,104 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unverifiedApprovals = unverifiedApprovals;
+/**
+ * Every approved lock entry must be vouched for by its decision (DOS-13.2, DOS-14.4, review M1):
+ * `qa/<kind>/<unit>/decisions/<decisionId>.yaml`, COMMITTED in git HEAD (outside git: on disk),
+ * intact (schema, id = content, entry_hash = entry), of kind `contract-approval`, whose payload lists
+ * this scenario at this hash, and whose `valid_from` is the entry's `approvedAt`. A lock line copied
+ * from elsewhere, re-pointed at another decision, or backdated fails here — `unverified`, reported
+ * under contract.lock-uncommitted (hard).
+ *
+ * Only entries that are otherwise identical to HEAD are checked: an entry already added, changed or
+ * tampered is a hard finding on its own.
+ */
+const path = __importStar(require("path"));
+const decision_identity_1 = require("../decisions/decision-identity");
+const decision_schema_1 = require("../decisions/decision-schema");
+const safe_yaml_parse_1 = require("../utils/safe-yaml-parse");
+const contract_git_1 = require("./contract-git");
+const contract_schema_1 = require("./contract-schema");
+function loadDecision(projectRoot, unitDir, id, snap) {
+    const file = path.join(unitDir, 'decisions', `${id}.yaml`);
+    const rel = (0, contract_git_1.posixRel)(projectRoot, file);
+    const working = (0, contract_git_1.readTextOrNull)(file);
+    const text = snap.blobs === null ? working : (0, contract_git_1.headFileText)(snap, rel, working);
+    if (text === null)
+        return { problem: snap.blobs === null ? `decision ${id} does not exist` : `decision ${id} is not in git HEAD (not committed through review)` };
+    let raw;
+    try {
+        raw = (0, safe_yaml_parse_1.safeYamlParse)(text, rel);
+    }
+    catch (e) {
+        return { problem: `decision ${id} is unreadable: ${e instanceof Error ? e.message : e}` };
+    }
+    const errors = (0, decision_schema_1.storedEntryErrors)(raw);
+    if (errors.length)
+        return { problem: `decision ${id} is invalid: ${errors[0]}` };
+    const entry = raw;
+    const scope = (0, contract_git_1.posixRel)(path.join(projectRoot, 'qa'), unitDir);
+    if (entry.id !== id || (0, decision_identity_1.computeDecisionId)(entry, scope) !== id)
+        return { problem: `decision ${id} does not hash to its id in ${scope}` };
+    if ((0, decision_identity_1.computeEntryHash)(entry) !== entry.entry_hash)
+        return { problem: `decision ${id} was altered (entry_hash)` };
+    return { entry };
+}
+function mismatch(scenario, lockEntry, d) {
+    if (d.kind !== 'contract-approval')
+        return `decision ${d.id} is a ${d.kind}, not a contract-approval`;
+    const listed = Array.isArray(d.payload?.scenarios) ? d.payload.scenarios : [];
+    if (!listed.some((s) => s && s.id === scenario && s.hash === lockEntry.hash))
+        return `decision ${d.id} does not approve ${scenario} at hash ${lockEntry.hash}`;
+    if (Date.parse(lockEntry.approvedAt) !== Date.parse(d.valid_from))
+        return `approvedAt ${lockEntry.approvedAt} is not decision ${d.id}'s valid_from ${d.valid_from}`;
+    return null;
+}
+function unverifiedApprovals(projectRoot, unitDir, lock, skip, snap) {
+    const cache = new Map();
+    const out = [];
+    for (const [id, entry] of Object.entries(lock?.scenarios ?? {})) {
+        if (!(0, contract_schema_1.isHumanApproved)(entry) || skip.has(id))
+            continue;
+        if (!cache.has(entry.decisionId))
+            cache.set(entry.decisionId, loadDecision(projectRoot, unitDir, entry.decisionId, snap));
+        const loaded = cache.get(entry.decisionId);
+        const problem = 'problem' in loaded ? loaded.problem : mismatch(id, entry, loaded.entry);
+        if (problem)
+            out.push({ id, change: 'unverified', detail: problem });
+    }
+    return out;
+}
+//# sourceMappingURL=verify-approval-decisions.js.map

package/dist/contract/verify-approval-decisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-approval-decisions.js","sourceRoot":"","sources":["../../src/contract/verify-approval-decisions.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA8CA,kDAaC;AA3DD;;;;;;;;;;GAUG;AACH,2CAA6B;AAC7B,sEAAqF;AACrF,kEAAgF;AAChF,8DAAyD;AACzD,iDAAsF;AACtF,uDAA6E;AAK7E,SAAS,YAAY,CAAC,WAAmB,EAAE,OAAe,EAAE,EAAU,EAAE,IAAkB;IACxF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAA,uBAAQ,EAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACxC,MAAM,OAAO,GAAG,IAAA,6BAAc,EAAC,IAAI,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAA,2BAAY,EAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IAC9E,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC,CAAC,YAAY,EAAE,oDAAoD,EAAE,CAAC;IAClK,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QAAC,GAAG,GAAG,IAAA,+BAAa,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,mBAAmB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAAC,CAAC;IAChJ,MAAM,MAAM,GAAG,IAAA,mCAAiB,EAAC,GAAG,CAAC,CAAC;IACtC,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,gBAAgB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,GAAoB,CAAC;IACnC,MAAM,KAAK,GAAG,IAAA,uBAAQ,EAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,IAAA,qCAAiB,EAAC,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,+BAA+B,KAAK,EAAE,EAAE,CAAC;IACxI,IAAI,IAAA,oCAAgB,EAAC,KAAK,CAAC,KAAK,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,2BAA2B,EAAE,CAAC;IAChH,OAAO,EAAE,KAAK,EAAE,CAAC;AACnB,CAAC;AAED,SAAS,QAAQ,CAAC,QAAgB,EAAE,SAAoB,EAAE,CAAgB;IACxE,IAAI,CAAC,CAAC,IAAI,KAAK,mBAAmB;QAAE,OAAO,YAAY,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,2BAA2B,CAAC;IACtG,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAQ,CAAC,SAAoD,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1H,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,YAAY,CAAC,CAAC,EAAE,qBAAqB,QAAQ,YAAY,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/J,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;QAAE,OAAO,cAAc,SAAS,CAAC,UAAU,oBAAoB,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,UAAU,EAAE,CAAC;IACpK,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,mBAAmB,CACjC,WAAmB,EAAE,OAAe,EAAE,IAAyB,EAAE,IAAyB,EAAE,IAAkB;IAE9G,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QAChE,IAAI,CAAC,IAAA,iCAAe,EAAC,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QACtD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,YAAY,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1H,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/decisions/append-decision.d.ts

@@ -0,0 +1,12 @@
+import { DecisionDraft, DecisionEntry } from './decision-schema';
+export interface AppendResult {
+    status: 'created' | 'already-recorded';
+    entry: DecisionEntry;
+    path: string;
+}
+export declare class DecisionConflictError extends Error {
+    readonly path: string;
+    constructor(path: string, detail: string);
+}
+export declare function appendDecision(projectRoot: string, scope: string, draft: DecisionDraft): AppendResult;
+//# sourceMappingURL=append-decision.d.ts.map

package/dist/decisions/append-decision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"append-decision.d.ts","sourceRoot":"","sources":["../../src/decisions/append-decision.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAe,MAAM,mBAAmB,CAAC;AAI9E,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,SAAS,GAAG,kBAAkB,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAE5G,qBAAa,qBAAsB,SAAQ,KAAK;aAClB,IAAI,EAAE,MAAM;gBAAZ,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM;CAIzD;AAED,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,aAAa,GAAG,YAAY,CAYrG"}

package/dist/decisions/append-decision.js

@@ -0,0 +1,73 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DecisionConflictError = void 0;
+exports.appendDecision = appendDecision;
+/**
+ * Append one decision: one file per entry, named by its content id, created exclusively
+ * (DOS-13.1, red-team #13). The file appears complete or not at all (createFileExclusive), so two
+ * writers can race freely: same content → same name → the second sees "already recorded"; different
+ * content → different names → both land. Nothing is sequential, so nothing can collide.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const exclusive_file_create_1 = require("./exclusive-file-create");
+const decision_schema_1 = require("./decision-schema");
+const decision_identity_1 = require("./decision-identity");
+const decision_file_1 = require("./decision-file");
+class DecisionConflictError extends Error {
+    constructor(path, detail) {
+        super(`${path} already exists but does not verify (${detail}). Restore it from git; record a new entry instead.`);
+        this.path = path;
+        this.name = 'DecisionConflictError';
+    }
+}
+exports.DecisionConflictError = DecisionConflictError;
+function appendDecision(projectRoot, scope, draft) {
+    const errors = (0, decision_schema_1.draftErrors)(draft);
+    if (errors.length)
+        throw new Error(`invalid decision: ${errors.join('; ')}`);
+    const dir = (0, decision_file_1.decisionsDirFor)(projectRoot, scope);
+    const entry = (0, decision_identity_1.sealDecision)(draft, scope);
+    fs.mkdirSync(dir, { recursive: true });
+    const file = path.join(dir, `${entry.id}.yaml`);
+    if ((0, exclusive_file_create_1.createFileExclusive)(file, (0, decision_file_1.serializeDecision)(entry)))
+        return { status: 'created', entry, path: file };
+    const existing = (0, decision_file_1.verifyDecisionFile)(file, scope);
+    if (existing.entry)
+        return { status: 'already-recorded', entry: existing.entry, path: file };
+    throw new DecisionConflictError(file, `${existing.problem?.code}: ${existing.problem?.message}`);
+}
+//# sourceMappingURL=append-decision.js.map

package/dist/decisions/append-decision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"append-decision.js","sourceRoot":"","sources":["../../src/decisions/append-decision.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBA,wCAYC;AAlCD;;;;;GAKG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,mEAA8D;AAC9D,uDAA8E;AAC9E,2DAAmD;AACnD,mDAAyF;AAIzF,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAA4B,IAAY,EAAE,MAAc;QACtD,KAAK,CAAC,GAAG,IAAI,wCAAwC,MAAM,qDAAqD,CAAC,CAAC;QADxF,SAAI,GAAJ,IAAI,CAAQ;QAEtC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,SAAgB,cAAc,CAAC,WAAmB,EAAE,KAAa,EAAE,KAAoB;IACrF,MAAM,MAAM,GAAG,IAAA,6BAAW,EAAC,KAA2C,CAAC,CAAC;IACxE,IAAI,MAAM,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,IAAA,+BAAe,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAA,gCAAY,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,IAAA,2CAAmB,EAAC,IAAI,EAAE,IAAA,iCAAiB,EAAC,KAAK,CAAC,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAEzG,MAAM,QAAQ,GAAG,IAAA,kCAAkB,EAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACjD,IAAI,QAAQ,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,kBAAkB,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC7F,MAAM,IAAI,qBAAqB,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,OAAO,EAAE,IAAI,KAAK,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACnG,CAAC"}

package/dist/decisions/confirmed-decision-commands.d.ts

@@ -0,0 +1,41 @@
+import { JourneyReport } from '../harness/journey';
+import { AppendResult } from './append-decision';
+import { DecisionKind } from './decision-schema';
+import { ConfirmationIO } from './human-confirmation';
+export interface WaiveInput {
+    projectRoot: string;
+    unit: string;
+    obligation: string;
+    reason: string;
+    io: ConfirmationIO;
+}
+export declare function waiveWithConfirmation(i: WaiveInput): Promise<JourneyReport>;
+export interface SignoffInput {
+    projectRoot: string;
+    unit: string;
+    by?: string;
+    io: ConfirmationIO;
+}
+/**
+ * The single human gate (DOS §3.4, S5), typed by a person on a terminal: the gate suggests it, so an
+ * agent must not be able to give it. Refused before the prompt when the board cannot be signed off.
+ */
+export declare function signoffWithConfirmation(i: SignoffInput): Promise<JourneyReport>;
+/** Kinds `--decide` records. The others have a command of their own that computes their payload. */
+export declare const DECIDE_KINDS: readonly DecisionKind[];
+export interface DecideInput {
+    projectRoot: string;
+    unit?: string;
+    kind: string;
+    text?: string;
+    reason?: string;
+    anchors?: string[];
+    payload?: string;
+    visibility?: string;
+    supersedes?: string;
+    io: ConfirmationIO;
+}
+export declare function decideWithConfirmation(i: DecideInput): Promise<AppendResult>;
+/** A sentinel left by a killed migration: ask REVERT/KEEP on a TTY, refuse without one. null = none pending. */
+export declare function answerPendingMigration(projectRoot: string, unit: string, io: ConfirmationIO): Promise<string[] | null>;
+//# sourceMappingURL=confirmed-decision-commands.d.ts.map

package/dist/decisions/confirmed-decision-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"confirmed-decision-commands.d.ts","sourceRoot":"","sources":["../../src/decisions/confirmed-decision-commands.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAoC,aAAa,EAA6C,MAAM,oBAAoB,CAAC;AAEhI,OAAO,EAAkB,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjE,OAAO,EAAiB,YAAY,EAA0B,MAAM,mBAAmB,CAAC;AAExF,OAAO,EAAsB,cAAc,EAA+D,MAAM,sBAAsB,CAAC;AAIvI,MAAM,WAAW,UAAU;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,cAAc,CAAA;CAAE;AAEzH,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAWjF;AAED,MAAM,WAAW,YAAY;IAAG,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,cAAc,CAAA;CAAE;AAEpG;;;GAGG;AACH,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,aAAa,CAAC,CAarF;AAED,oGAAoG;AACpG,eAAO,MAAM,YAAY,EAAE,SAAS,YAAY,EAAuC,CAAC;AAOxF,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACrG,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,cAAc,CAAC;CAChF;AAqCD,wBAAsB,sBAAsB,CAAC,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CAgBlF;AAMD,gHAAgH;AAChH,wBAAsB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAY5H"}