@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.2

package/dist/harness/gates/delivery-checklist.d.ts

@@ -0,0 +1,21 @@
+import { UnitKind } from '../script-check';
+import type { InRunAcceptance } from './gate-override-report';
+export type BoxState = 'pass' | 'fail' | 'skipped';
+export interface ChecklistBox {
+    name: string;
+    state: BoxState;
+    evidence: string;
+}
+export interface ChecklistUnit {
+    label: string;
+    unitName: string;
+    unitDir: string;
+    kind: UnitKind;
+    resultsPath: string | null;
+}
+export declare function unitChecklist(projectRoot: string, u: ChecklistUnit, accepted?: InRunAcceptance): Promise<ChecklistBox[]>;
+export declare function renderChecklist(rows: Array<{
+    label: string;
+    boxes: ChecklistBox[];
+}>): string[];
+//# sourceMappingURL=delivery-checklist.d.ts.map

package/dist/harness/gates/delivery-checklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-checklist.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/delivery-checklist.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAkB,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AACnD,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACjF,MAAM,WAAW,aAAa;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAiF/H,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAE9H;AAID,wBAAgB,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,EAAE,CAAA;CAAE,CAAC,GAAG,MAAM,EAAE,CAQ/F"}

package/dist/harness/gates/delivery-checklist.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.unitChecklist = unitChecklist;
+exports.renderChecklist = renderChecklist;
+/**
+ * The delivery checklist (P0 phase 09, takumi T6) — `sungen delivery` prints one block per delivered
+ * unit, and every box is read off a result REBUILT NOW, never from a report file and never by hand:
+ *
+ *   audit           verifyAuditReport: a report that counts and its gateStatus   (`sungen audit` 0 | 2)
+ *   script-check    runScriptCheck: OK | FAIL                                    (`sungen script-check` 0 | 2)
+ *   contract check  buildContractVerdict: pass | review | fail                   (`sungen contract check` 0 | 0 | 2)
+ *   decisions       evaluateDeliveryDecisions: problems, in-run decisions        (what this delivery checks)
+ *   triage          testCaseStates: every red case classified, candidates decided
+ * A box that cannot apply is SKIPPED with its reason — never absent, never ticked. The checklist only
+ * reports: the gates before it decide whether the delivery runs, so no exit code moves because of it.
+ */
+const build_contract_verdict_1 = require("../../contract/build-contract-verdict");
+const contract_git_1 = require("../../contract/contract-git");
+const contracts_lock_file_1 = require("../../contract/contracts-lock-file");
+const test_case_satisfied_1 = require("../../graph/test-case-satisfied");
+const test_case_states_1 = require("../../graph/test-case-states");
+const script_check_1 = require("../script-check");
+const audit_report_verification_1 = require("./audit-report-verification");
+const delivery_decision_gate_1 = require("./delivery-decision-gate");
+/** `sungen contract check` judges traces with a generous deadline; the checklist states what it would say. */
+const CONTRACT_TRACE_BUDGET_MS = 120000;
+const why = (e) => (e instanceof Error ? e.message : String(e)).split('\n')[0].slice(0, 200);
+const box = (name, state, evidence) => ({ name, state, evidence });
+function auditBox(projectRoot, u) {
+    const v = (0, audit_report_verification_1.verifyAuditReport)(projectRoot, u.unitName);
+    if (!(0, audit_report_verification_1.auditCounts)(v))
+        return box('audit', 'fail', (0, audit_report_verification_1.auditNotCountedReason)(v, u.unitName));
+    const overall = v.report?.score?.overall;
+    const how = "verified against today's inputs";
+    return v.report?.gateStatus === 'PASS'
+        ? box('audit', 'pass', `PASS ${overall ?? '?'}/10 — ${how}`)
+        : box('audit', 'fail', `FAIL ${overall ?? '?'}/10 — \`sungen audit\` exits 2 (${how}); an official delivery is blocked until it passes — --preview renders a draft`);
+}
+/** The compiler prints progress on stdout; the checklist keeps the delivery output to itself. */
+async function quietly(fn) {
+    const saved = { log: console.log, info: console.info, warn: console.warn };
+    console.log = console.info = console.warn = () => undefined;
+    try {
+        return await fn();
+    }
+    finally {
+        Object.assign(console, saved);
+    }
+}
+async function scriptCheckBox(u) {
+    try {
+        const r = await quietly(() => (0, script_check_1.runScriptCheck)(u.unitDir, u.unitName, u.kind));
+        if (!r.specPath)
+            return box('script-check', 'skipped', 'no compiled spec to compare: nothing was compiled for this unit');
+        return r.status === 'OK'
+            ? box('script-check', 'pass', `OK — the spec is a 1:1 of the .feature, no drift (${r.automatedScenarios} automated)`)
+            : box('script-check', 'fail', `FAIL — ${(r.findings[0] ?? 'not faithful').split(/ → |\. /)[0].slice(0, 160)} (\`sungen script-check\` exits 2)`);
+    }
+    catch (e) {
+        return box('script-check', 'fail', `could not run: ${why(e)}`);
+    }
+}
+function contractBox(projectRoot, u) {
+    try {
+        const v = (0, build_contract_verdict_1.buildContractVerdict)(projectRoot, { name: u.unitName, dir: u.unitDir }, { traceBudgetMs: CONTRACT_TRACE_BUDGET_MS });
+        if ((0, contract_git_1.readTextOrNull)((0, contracts_lock_file_1.lockPathFor)(u.unitDir)) === null) {
+            return box('contract check', 'skipped', `no contracts.lock.yaml: ${v.scenarios.length} scenario(s) proposed, nothing approved to compare (never blocks)`);
+        }
+        const bad = v.scenarios.filter((s) => !['match', 'strengthened', 'proposed', 'nondeterministic'].includes(s.class));
+        if (v.verdict === 'pass')
+            return box('contract check', 'pass', `pass — every approved scenario holds (\`sungen contract check\` exits 0)`);
+        const first = v.uncommitted[0] ? `${v.uncommitted[0].id} lock-uncommitted` : bad[0] ? `${bad[0].id} ${bad[0].class}` : v.verdict;
+        return v.verdict === 'review'
+            ? box('contract check', 'fail', `review — ${bad.length} scenario(s), e.g. ${first}; exits 0 but blocks delivery until QA re-approves`)
+            : box('contract check', 'fail', `FAIL — ${first}${bad.length + v.uncommitted.length > 1 ? ` and ${bad.length + v.uncommitted.length - 1} more` : ''} (\`sungen contract check\` exits 2)`);
+    }
+    catch (e) {
+        return box('contract check', 'fail', `could not be built: ${why(e)} (\`sungen contract check\` exits 1)`);
+    }
+}
+function decisionsBox(projectRoot, u, accepted) {
+    try {
+        const g = (0, delivery_decision_gate_1.evaluateDeliveryDecisions)(projectRoot, [{ label: u.label, unitName: u.unitName, unitDir: u.unitDir, resultsPath: u.resultsPath }]);
+        if (g.blocking.length)
+            return box('decisions', 'fail', `${g.blocking.length} decision problem(s) — ${g.blocking[0].slice(0, 160)}`);
+        if (g.inRun.length && !accepted)
+            return box('decisions', 'fail', `${g.inRun.length} decision(s) recorded during the run (decision.in-run) — commit them through review and re-run, or a human passes --accept-in-run`);
+        const overrides = g.overridesFor(u.unitDir).length;
+        return box('decisions', 'pass', `no decision problem${g.inRun.length ? ` · ${g.inRun.length} in-run decision(s) accepted by ${accepted.by} on a terminal` : ''}${overrides ? ` · ${overrides} gate override(s) in force` : ''}`);
+    }
+    catch (e) {
+        return box('decisions', 'fail', `could not be evaluated: ${why(e)}`);
+    }
+}
+function triageBox(projectRoot, u) {
+    try {
+        const cases = (0, test_case_states_1.testCaseStates)(projectRoot, u.unitName, { unitDir: u.unitDir });
+        if (!cases.some((c) => c.result !== 'never-run'))
+            return box('triage', 'skipped', 'no run results to classify');
+        const owed = cases.filter((c) => (0, test_case_satisfied_1.testCaseNeed)(c) === 'triage');
+        const decide = cases.filter((c) => (0, test_case_satisfied_1.testCaseNeed)(c) === 'product-candidate');
+        const flag = u.kind === 'api' ? '--api' : '--screen';
+        if (owed.length)
+            return box('triage', 'fail', `${owed.length} red test case(s) not classified — run \`sungen triage ${flag} ${u.unitName}\``);
+        if (decide.length)
+            return box('triage', 'fail', `${decide.length} product-defect candidate(s) await a QA decision (\`sungen defect draft ${flag} ${u.unitName}\`)`);
+        const reds = cases.filter((c) => c.result === 'failed').length;
+        return box('triage', 'pass', reds ? `${reds} red test case(s), each classified or exempt` : 'no red test case');
+    }
+    catch (e) {
+        return box('triage', 'fail', `could not be read: ${why(e)}`);
+    }
+}
+async function unitChecklist(projectRoot, u, accepted) {
+    return [auditBox(projectRoot, u), await scriptCheckBox(u), contractBox(projectRoot, u), decisionsBox(projectRoot, u, accepted), triageBox(projectRoot, u)];
+}
+const MARK = { pass: '[x]', fail: '[ ]', skipped: '[-]' };
+function renderChecklist(rows) {
+    const out = ['⚒ Delivery checklist — each box from a real exit code or state, none ticked by hand'];
+    for (const r of rows) {
+        out.push(`  ${r.label}`);
+        for (const b of r.boxes)
+            out.push(`    ${MARK[b.state]} ${b.name.padEnd(15)} ${b.state === 'skipped' ? `skipped — ${b.evidence}` : b.evidence}`);
+    }
+    out.push('  The gates above decided this delivery; the checklist only reports what holds now.');
+    return out;
+}
+//# sourceMappingURL=delivery-checklist.js.map

package/dist/harness/gates/delivery-checklist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-checklist.js","sourceRoot":"","sources":["../../../src/harness/gates/delivery-checklist.ts"],"names":[],"mappings":";;AAyGA,sCAEC;AAID,0CAQC;AAvHD;;;;;;;;;;;GAWG;AACH,kFAA6E;AAC7E,8DAA6D;AAC7D,4EAAiE;AACjE,yEAA+D;AAC/D,mEAA8D;AAC9D,kDAA2D;AAC3D,2EAAoG;AACpG,qEAAqE;AAOrE,8GAA8G;AAC9G,MAAM,wBAAwB,GAAG,MAAO,CAAC;AACzC,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9G,MAAM,GAAG,GAAG,CAAC,IAAY,EAAE,KAAe,EAAE,QAAgB,EAAgB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AAE3G,SAAS,QAAQ,CAAC,WAAmB,EAAE,CAAgB;IACrD,MAAM,CAAC,GAAG,IAAA,6CAAiB,EAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,CAAC,IAAA,uCAAW,EAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAA,iDAAqB,EAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvF,MAAM,OAAO,GAAI,CAAC,CAAC,MAAM,EAAE,KAA0C,EAAE,OAAO,CAAC;IAC/E,MAAM,GAAG,GAAG,iCAAiC,CAAC;IAC9C,OAAO,CAAC,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM;QACpC,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,IAAI,GAAG,SAAS,GAAG,EAAE,CAAC;QAC5D,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,IAAI,GAAG,mCAAmC,GAAG,gFAAgF,CAAC,CAAC;AACzK,CAAC;AAED,iGAAiG;AACjG,KAAK,UAAU,OAAO,CAAI,EAAoB;IAC5C,MAAM,KAAK,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3E,OAAO,CAAC,GAAG,GAAG,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,GAAG,GAAG,EAAE,CAAC,SAAS,CAAC;IAC5D,IAAI,CAAC;QAAC,OAAO,MAAM,EAAE,EAAE,CAAC;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;AACvE,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,CAAgB;IAC5C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,CAAC,IAAA,6BAAc,EAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,IAAI,CAAC,CAAC,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,iEAAiE,CAAC,CAAC;QAC1H,OAAO,CAAC,CAAC,MAAM,KAAK,IAAI;YACtB,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,qDAAqD,CAAC,CAAC,kBAAkB,aAAa,CAAC;YACrH,CAAC,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,oCAAoC,CAAC,CAAC;IACrJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,cAAc,EAAE,MAAM,EAAE,kBAAkB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,WAAmB,EAAE,CAAgB;IACxD,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAA,6CAAoB,EAAC,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,EAAE,aAAa,EAAE,wBAAwB,EAAE,CAAC,CAAC;QAC/H,IAAI,IAAA,6BAAc,EAAC,IAAA,iCAAW,EAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACpD,OAAO,GAAG,CAAC,gBAAgB,EAAE,SAAS,EAAE,2BAA2B,CAAC,CAAC,SAAS,CAAC,MAAM,mEAAmE,CAAC,CAAC;QAC5J,CAAC;QACD,MAAM,GAAG,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QACpH,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,0EAA0E,CAAC,CAAC;QAC3I,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACjI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;YAC3B,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,YAAY,GAAG,CAAC,MAAM,sBAAsB,KAAK,oDAAoD,CAAC;YACtI,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,UAAU,KAAK,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,sCAAsC,CAAC,CAAC;IAC/L,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,gBAAgB,EAAE,MAAM,EAAE,uBAAuB,GAAG,CAAC,CAAC,CAAC,sCAAsC,CAAC,CAAC;IAC5G,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,WAAmB,EAAE,CAAgB,EAAE,QAA0B;IACrF,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAA,kDAAyB,EAAC,WAAW,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC7I,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,0BAA0B,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACpI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ;YAAE,OAAO,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,mIAAmI,CAAC,CAAC;QACvN,MAAM,SAAS,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QACnD,OAAO,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,sBAAsB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,MAAM,mCAAmC,QAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,MAAM,SAAS,4BAA4B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACpO,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,WAAW,EAAE,MAAM,EAAE,2BAA2B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,WAAmB,EAAE,CAAgB;IACtD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,IAAA,iCAAc,EAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC;YAAE,OAAO,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,4BAA4B,CAAC,CAAC;QAChH,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kCAAY,EAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kCAAY,EAAC,CAAC,CAAC,KAAK,mBAAmB,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QACrD,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,0DAA0D,IAAI,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;QAC9I,IAAI,MAAM,CAAC,MAAM;YAAE,OAAO,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,2EAA2E,IAAI,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC;QACpK,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;QAC/D,OAAO,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,8CAA8C,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;IAClH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,sBAAsB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAEM,KAAK,UAAU,aAAa,CAAC,WAAmB,EAAE,CAAgB,EAAE,QAA0B;IACnG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,MAAM,cAAc,CAAC,CAAC,CAAC,EAAE,WAAW,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,YAAY,CAAC,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC,EAAE,SAAS,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;AAC7J,CAAC;AAED,MAAM,IAAI,GAA6B,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAEpF,SAAgB,eAAe,CAAC,IAAqD;IACnF,MAAM,GAAG,GAAG,CAAC,qFAAqF,CAAC,CAAC;IACpG,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IACnJ,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;IAChG,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/harness/gates/delivery-decision-gate.d.ts

@@ -0,0 +1,33 @@
+import { GateOverrideReport, InRunAcceptance } from './gate-override-report';
+import { InRunDecision } from './in-run-decision-check';
+import { TrackedGateRules } from './resolve-rule';
+export interface DeliveryUnitRef {
+    label: string;
+    unitName: string;
+    unitDir: string;
+    resultsPath: string | null;
+}
+export interface DeliveryDecisionGate {
+    blocking: string[];
+    /** Units with no trusted audit — a real delivery stops on them, --preview / --check warn. */
+    untrustedAudits: string[];
+    /** Units whose trusted audit FAILs (#935) — a real delivery stops on them, --preview / --check warn. */
+    failingAudits: string[];
+    /** The unit's audit does not let it be delivered officially (untrusted or FAIL): its render is a DRAFT. */
+    auditDraft(unitDir: string): boolean;
+    notes: string[];
+    inRun: Array<InRunDecision & {
+        unit: string;
+    }>;
+    /** The unit's tracked gate rules, for the matrix gates of its targets. */
+    rulesFor(unitDir: string): TrackedGateRules | undefined;
+    /** Every override touching the unit, with what changed an outcome (audit or matrix). */
+    overridesFor(unitDir: string): GateOverrideReport[];
+    summaryLines(): string[];
+    /** Set when a human accepted the in-run decisions on a terminal (--accept-in-run) — goes into the deliverable. */
+    acceptedInRun?: InRunAcceptance;
+}
+export declare function evaluateDeliveryDecisions(projectRoot: string, refs: DeliveryUnitRef[]): DeliveryDecisionGate;
+/** The in-run decisions, one line each, for the refusal or the TTY confirmation. */
+export declare function inRunLines(inRun: DeliveryDecisionGate['inRun']): string[];
+//# sourceMappingURL=delivery-decision-gate.d.ts.map

package/dist/harness/gates/delivery-decision-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-decision-gate.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/delivery-decision-gate.ts"],"names":[],"mappings":"AAoBA,OAAO,EAAE,kBAAkB,EAAgD,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE3H,OAAO,EAAiE,aAAa,EAA2B,MAAM,yBAAyB,CAAC;AAChJ,OAAO,EAA+B,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAG/E,MAAM,WAAW,eAAe;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AAWjH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,6FAA6F;IAC7F,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,wGAAwG;IACxG,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,2GAA2G;IAC3G,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC;IACrC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,EAAE,KAAK,CAAC,aAAa,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC/C,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAAC;IACxD,wFAAwF;IACxF,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAAC;IACpD,YAAY,IAAI,MAAM,EAAE,CAAC;IACzB,kHAAkH;IAClH,aAAa,CAAC,EAAE,eAAe,CAAC;CACjC;AAeD,wBAAgB,yBAAyB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,oBAAoB,CAgE5G;AAED,oFAAoF;AACpF,wBAAgB,UAAU,CAAC,KAAK,EAAE,oBAAoB,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAEzE"}

package/dist/harness/gates/delivery-decision-gate.js

@@ -0,0 +1,116 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateDeliveryDecisions = evaluateDeliveryDecisions;
+exports.inRunLines = inRunLines;
+/**
+ * The decision checks `sungen delivery` runs before it writes anything (OES-11.3–11.6):
+ *
+ *   hard, block   a decision in reach that does not verify or a committed one edited/deleted
+ *                 (decision.id-reuse / decision.mutated); a rejected override (gate.override-rejected);
+ *                 a decision recorded during the run (decision.in-run) — unless a human accepts it
+ *                 on a TTY with `--accept-in-run`
+ *   no trusted    no audit report, or one that does not count (stale, invalid, verdict-mismatch):
+ *   audit         a real delivery stops and asks for `sungen audit` (owner decision 2026-10-22);
+ *                 `--preview` / `--check` go on with a warning — the caller decides (`untrustedAudits`)
+ *   failing       a trusted audit whose verdict is FAIL (`sungen audit` exits 2): the same — a real
+ *   audit         delivery stops, naming the failing gate rules (#935, owner decision); `--preview`
+ *                 renders a DRAFT, `--check` reports it (`failingAudits`)
+ * It also hands each target its gate rules (catalog + overrides) for the matrix gates, and the
+ * override rows the XLSX may show. With no decision in reach nothing here changes the delivery.
+ */
+const decision_integrity_check_1 = require("../../decisions/decision-integrity-check");
+const decision_file_1 = require("../../decisions/decision-file");
+const audit_report_verification_1 = require("./audit-report-verification");
+const audit_gate_terms_1 = require("./audit-gate-terms");
+const gate_override_report_1 = require("./gate-override-report");
+const gate_override_scope_1 = require("./gate-override-scope");
+const in_run_decision_check_1 = require("./in-run-decision-check");
+const resolve_rule_1 = require("./resolve-rule");
+const unit_gate_overrides_1 = require("./unit-gate-overrides");
+const reachOf = (scope) => [`qa/decisions/`, ...(scope ? [`qa/${scope}/decisions/`] : [])];
+/** The audit gate rules a FAIL report's own terms violate under the unit's overrides, gaps named. */
+function failingGateRules(report, overrides) {
+    const sources = (0, audit_gate_terms_1.termSourcesOf)(report, true);
+    if (!sources)
+        return 'its gate terms';
+    const gaps = sources.gate.gaps
+        .map((g) => `${g.status === 'shallow' ? 'SHALLOW' : 'MISSING'}: ${String(g.theme)}`);
+    const rules = (0, audit_gate_terms_1.auditGateTerms)(sources).filter((t) => !t.holds && (0, resolve_rule_1.resolveRule)(t.rule, overrides.context).blocking)
+        .map((t) => (t.rule === 'audit.viewpoint-coverage' && gaps.length ? `${t.rule} (${gaps.join(', ')})` : t.rule));
+    return rules.join(', ') || 'its gate terms';
+}
+function evaluateDeliveryDecisions(projectRoot, refs) {
+    const blocking = [];
+    const untrustedAudits = [];
+    const failingAudits = [];
+    const draftDirs = new Set();
+    const notes = [];
+    const inRun = [];
+    const units = new Map();
+    for (const ref of refs) {
+        const known = units.get(ref.unitDir);
+        if (known) {
+            known.resultsPaths.push(ref.resultsPath);
+            continue;
+        }
+        const overrides = (0, unit_gate_overrides_1.loadUnitGateOverrides)(projectRoot, (0, unit_gate_overrides_1.unitScopeOfDir)(projectRoot, ref.unitDir));
+        const audit = (0, audit_report_verification_1.verifyAuditReport)(projectRoot, ref.unitName);
+        const auditTriggered = new Set((0, audit_report_verification_1.auditCounts)(audit) && Array.isArray(audit.report?.gateOverrides)
+            ? audit.report.gateOverrides.filter((g) => g?.triggered).map((g) => g.rule) : []);
+        units.set(ref.unitDir, { ref, resultsPaths: [ref.resultsPath], overrides, rules: (0, resolve_rule_1.trackGateRules)(overrides.context), auditTriggered });
+        for (const r of overrides.rejected)
+            blocking.push(`${ref.label}: gate.override-rejected — ${r.decisionId} (${r.path}): ${r.reason}`);
+        const flag = /[\\/]qa[\\/]api[\\/]/.test(ref.unitDir) ? '--api' : '--screen';
+        if (!(0, audit_report_verification_1.auditCounts)(audit)) {
+            const why = audit.state === 'absent' ? 'no audit report' : `the audit is ${audit.state === 'stale' ? 'stale' : 'not trusted'}: ${audit.problems.map((p) => p.message).join('; ')}`;
+            untrustedAudits.push(`${ref.label}: ${why} — re-run \`sungen audit ${flag} ${ref.unitName}\``);
+            draftDirs.add(ref.unitDir);
+        }
+        else if (audit.report?.gateStatus !== 'PASS') {
+            const overall = audit.report?.score?.overall;
+            failingAudits.push(`${ref.label}: FAIL ${overall ?? '?'}/10 on ${failingGateRules(audit.report, overrides)} — fix the suite, then re-run \`sungen audit ${flag} ${ref.unitName}\``);
+            draftDirs.add(ref.unitDir);
+        }
+        for (const n of audit.notes)
+            notes.push(`${ref.label}: ${n}`);
+    }
+    const reach = new Set([...units.values()].flatMap((u) => reachOf(u.overrides.unitScope)));
+    const integrity = (0, decision_integrity_check_1.checkDecisionIntegrity)(projectRoot).filter((f) => [...reach].some((r) => f.path.startsWith(r)));
+    for (const f of integrity)
+        if ((0, resolve_rule_1.resolveRule)(f.rule).blocking)
+            blocking.push(`${f.rule} — ${f.path}: ${f.message}`);
+    const committed = (0, in_run_decision_check_1.committedDecisionPaths)(projectRoot);
+    for (const u of units.values()) {
+        const scopes = [decision_file_1.PROJECT_SCOPE, ...(u.overrides.unitScope ? [u.overrides.unitScope] : [])];
+        const starts = u.resultsPaths.map(in_run_decision_check_1.runStartOf).filter((t) => !!t).sort((x, y) => Date.parse(x) - Date.parse(y));
+        const runStart = starts[0] ?? null;
+        if (!committed && (0, in_run_decision_check_1.hasInRunKindDecisions)(projectRoot, scopes)) {
+            notes.push(runStart
+                ? `${u.ref.label}: no git repository — ${in_run_decision_check_1.IN_RUN_RULE} is judged by the run start time only (lower confidence)`
+                : `${u.ref.label}: no git repository and no run results — ${in_run_decision_check_1.IN_RUN_RULE} cannot be judged for its decisions`);
+        }
+        for (const d of (0, in_run_decision_check_1.inRunDecisions)(projectRoot, scopes, runStart, committed)) {
+            if (!inRun.some((x) => x.id === d.id))
+                inRun.push({ ...d, unit: u.ref.label });
+        }
+    }
+    const reportsFor = (u) => (0, gate_override_report_1.gateOverrideReports)(u.overrides, new Set([...u.auditTriggered, ...u.rules.triggered()]));
+    return {
+        blocking,
+        untrustedAudits,
+        failingAudits,
+        auditDraft: (dir) => draftDirs.has(dir),
+        notes,
+        inRun,
+        rulesFor: (dir) => units.get(dir)?.rules,
+        overridesFor: (dir) => { const u = units.get(dir); return u ? reportsFor(u) : []; },
+        summaryLines: () => [...units.values()]
+            .map((u) => (0, gate_override_report_1.gateOverrideSummaryLine)(u.ref.label, reportsFor(u), (scope) => (0, gate_override_scope_1.unitsCoveredByScope)(projectRoot, scope)))
+            .filter((l) => !!l),
+    };
+}
+/** The in-run decisions, one line each, for the refusal or the TTY confirmation. */
+function inRunLines(inRun) {
+    return inRun.map((d) => `${d.unit}: ${d.kind} ${d.id} (${d.path}) — ${d.why.join('; ')}`);
+}
+//# sourceMappingURL=delivery-decision-gate.js.map

package/dist/harness/gates/delivery-decision-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-decision-gate.js","sourceRoot":"","sources":["../../../src/harness/gates/delivery-decision-gate.ts"],"names":[],"mappings":";;AAqEA,8DAgEC;AAGD,gCAEC;AA1ID;;;;;;;;;;;;;;;GAeG;AACH,uFAAmG;AACnG,iEAA8D;AAC9D,2EAA6E;AAC7E,yDAAmE;AACnE,iEAA2H;AAC3H,+DAA4D;AAC5D,mEAAgJ;AAChJ,iDAA+E;AAC/E,+DAAiG;AAgCjG,MAAM,OAAO,GAAG,CAAC,KAAoB,EAAY,EAAE,CAAC,CAAC,eAAe,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEpH,qGAAqG;AACrG,SAAS,gBAAgB,CAAC,MAA+B,EAAE,SAA4B;IACrF,MAAM,OAAO,GAAG,IAAA,gCAAa,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,OAAO;QAAE,OAAO,gBAAgB,CAAC;IACtC,MAAM,IAAI,GAAI,OAAO,CAAC,IAAI,CAAC,IAAqD;SAC7E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvF,MAAM,KAAK,GAAG,IAAA,iCAAc,EAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,IAAA,0BAAW,EAAC,CAAC,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC;SAC7G,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,0BAA0B,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAClH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC;AAC9C,CAAC;AAED,SAAgB,yBAAyB,CAAC,WAAmB,EAAE,IAAuB;IACpF,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAkC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACrC,IAAI,KAAK,EAAE,CAAC;YAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClE,MAAM,SAAS,GAAG,IAAA,2CAAqB,EAAC,WAAW,EAAE,IAAA,oCAAc,EAAC,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/F,MAAM,KAAK,GAAG,IAAA,6CAAiB,EAAC,WAAW,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,IAAA,uCAAW,EAAC,KAAK,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE,aAAa,CAAC;YAC7F,CAAC,CAAE,KAAK,CAAC,MAAO,CAAC,aAAsC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/G,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,IAAA,6BAAc,EAAC,SAAS,CAAC,OAAO,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC;QACtI,KAAK,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,8BAA8B,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACrI,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7E,IAAI,CAAC,IAAA,uCAAW,EAAC,KAAK,CAAC,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,gBAAgB,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,KAAK,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACnL,eAAe,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,KAAK,GAAG,4BAA4B,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;YAC/F,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,EAAE,CAAC;YAC/C,MAAM,OAAO,GAAI,KAAK,CAAC,MAAM,EAAE,KAA0C,EAAE,OAAO,CAAC;YACnF,aAAa,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,UAAU,OAAO,IAAI,GAAG,UAAU,gBAAgB,CAAC,KAAK,CAAC,MAAO,EAAE,SAAS,CAAC,gDAAgD,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,CAAC,CAAC;YACrL,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,SAAS,GAAsB,IAAA,iDAAsB,EAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrI,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,IAAI,IAAA,0BAAW,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAElH,MAAM,SAAS,GAAG,IAAA,8CAAsB,EAAC,WAAW,CAAC,CAAC;IACtD,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,CAAC,6BAAa,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,kCAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5H,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACnC,IAAI,CAAC,SAAS,IAAI,IAAA,6CAAqB,EAAC,WAAW,EAAE,MAAM,CAAC,EAAE,CAAC;YAC7D,KAAK,CAAC,IAAI,CAAC,QAAQ;gBACjB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,yBAAyB,mCAAW,0DAA0D;gBAC9G,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,4CAA4C,mCAAW,qCAAqC,CAAC,CAAC;QAClH,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,IAAA,sCAAc,EAAC,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC;YACzE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,CAAC,CAAY,EAAwB,EAAE,CACxD,IAAA,0CAAmB,EAAC,CAAC,CAAC,SAAS,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO;QACL,QAAQ;QACR,eAAe;QACf,aAAa;QACb,UAAU,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CAAC;QACvC,KAAK;QACL,KAAK;QACL,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,KAAK;QACxC,YAAY,EAAE,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACnF,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;aACpC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,8CAAuB,EAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,yCAAmB,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;aACnH,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;KACnC,CAAC;AACJ,CAAC;AAED,oFAAoF;AACpF,SAAgB,UAAU,CAAC,KAAoC;IAC7D,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5F,CAAC"}

package/dist/harness/gates/delivery-decision-step.d.ts

@@ -0,0 +1,19 @@
+import { ConfirmationIO } from '../../decisions/human-confirmation';
+import { DeliveryDecisionGate, DeliveryUnitRef } from './delivery-decision-gate';
+export interface DeliveryDecisionStepInput {
+    projectRoot: string;
+    refs: DeliveryUnitRef[];
+    acceptInRun: boolean;
+    /** The delivery command line to print for a human, without `--accept-in-run`. */
+    argv: string[];
+    io: ConfirmationIO;
+    log: (line: string) => void;
+    /**
+     * A real export needs, per unit, a trusted audit (owner decision 2026-10-22) that PASSes (#935);
+     * false for --preview / --check, which go on with a warning (a DRAFT render / a report).
+     */
+    requireTrustedAudit: boolean;
+}
+/** The gate when the delivery may proceed; null when it must stop (already explained on `log`). */
+export declare function runDeliveryDecisionStep(i: DeliveryDecisionStepInput): Promise<DeliveryDecisionGate | null>;
+//# sourceMappingURL=delivery-decision-step.d.ts.map

package/dist/harness/gates/delivery-decision-step.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-decision-step.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/delivery-decision-step.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,cAAc,EAAqE,MAAM,oCAAoC,CAAC;AACvI,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAyC,MAAM,0BAA0B,CAAC;AAGxH,MAAM,WAAW,yBAAyB;IACxC,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,eAAe,EAAE,CAAC;IACxB,WAAW,EAAE,OAAO,CAAC;IACrB,iFAAiF;IACjF,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,EAAE,EAAE,cAAc,CAAC;IACnB,GAAG,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B;;;OAGG;IACH,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,mGAAmG;AACnG,wBAAsB,uBAAuB,CAAC,CAAC,EAAE,yBAAyB,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CA8DhH"}

package/dist/harness/gates/delivery-decision-step.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runDeliveryDecisionStep = runDeliveryDecisionStep;
+/**
+ * The `sungen delivery` step for decisions (OES-11.5): evaluate, print, and either stop or go.
+ * In-run decisions stop the delivery unless a human passes `--accept-in-run` AND confirms on a TTY
+ * (DOS-13.4) — without a TTY the refusal prints the exact command for a human to run.
+ */
+const decision_source_1 = require("../../decisions/decision-source");
+const human_confirmation_1 = require("../../decisions/human-confirmation");
+const delivery_decision_gate_1 = require("./delivery-decision-gate");
+const in_run_decision_check_1 = require("./in-run-decision-check");
+/** The gate when the delivery may proceed; null when it must stop (already explained on `log`). */
+async function runDeliveryDecisionStep(i) {
+    const gate = (0, delivery_decision_gate_1.evaluateDeliveryDecisions)(i.projectRoot, i.refs);
+    for (const n of gate.notes)
+        i.log(`  · ${n}`);
+    if (gate.blocking.length) {
+        i.log(`✗ Delivery blocked by ${gate.blocking.length} decision problem(s) (hard rules):`);
+        for (const b of gate.blocking)
+            i.log(`  - ${b}`);
+        return null;
+    }
+    // Every reason to stop is listed before stopping, so one run names all of them (audit and in-run).
+    let blocked = false;
+    if (gate.untrustedAudits.length) {
+        i.log(i.requireTrustedAudit
+            ? `✗ Delivery blocked — ${gate.untrustedAudits.length} unit(s) without a trusted audit (a delivery stands on an audit that matches today's suite):`
+            : `⚠ Rendering ${gate.untrustedAudits.length} unit(s) without a trusted audit — a draft, not an official delivery:`);
+        for (const u of gate.untrustedAudits)
+            i.log(`  - ${u}`);
+        if (i.requireTrustedAudit) {
+            i.log('  Or render a watermarked draft with --preview.');
+            blocked = true;
+        }
+    }
+    if (gate.failingAudits.length) {
+        i.log(i.requireTrustedAudit
+            ? `✗ Delivery blocked — ${gate.failingAudits.length} unit(s) whose audit FAILs (\`sungen audit\` exits 2; an official delivery stands on a passing audit):`
+            : `⚠ Rendering ${gate.failingAudits.length} unit(s) whose audit FAILs — a draft, not an official delivery:`);
+        for (const u of gate.failingAudits)
+            i.log(`  - ${u}`);
+        if (i.requireTrustedAudit) {
+            i.log('  Fix the suite and re-run the audit, or render a watermarked draft with --preview.');
+            blocked = true;
+        }
+    }
+    if (gate.inRun.length === 0)
+        return blocked ? null : gate;
+    const acceptCommand = (0, human_confirmation_1.formatCommand)([...i.argv, '--accept-in-run']);
+    if (!i.acceptInRun) {
+        i.log(`✗ Delivery blocked — ${gate.inRun.length} decision(s) recorded during the run (${in_run_decision_check_1.IN_RUN_RULE}, hard):`);
+        for (const l of (0, delivery_decision_gate_1.inRunLines)(gate.inRun))
+            i.log(`  - ${l}`);
+        i.log('  Commit them through review and re-run the tests, or have a human accept them on a terminal:');
+        i.log(`    ${acceptCommand}`);
+        return null;
+    }
+    if (blocked)
+        return null; // nothing to accept on top of a delivery the audit already stops
+    try {
+        await (0, human_confirmation_1.requireTypedConfirmation)({
+            what: `deliver with ${gate.inRun.length} decision(s) recorded during the run (${in_run_decision_check_1.IN_RUN_RULE})`,
+            phrase: 'accept-in-run',
+            command: acceptCommand,
+            summary: [...(0, delivery_decision_gate_1.inRunLines)(gate.inRun), `accepted by: ${(0, decision_source_1.gitUserName)(i.projectRoot)}`],
+            io: i.io,
+        });
+    }
+    catch (err) {
+        if (!(err instanceof human_confirmation_1.HumanConfirmationRefused))
+            throw err;
+        i.log(`✗ ${err.message}`);
+        return null;
+    }
+    const by = (0, decision_source_1.gitUserName)(i.projectRoot);
+    i.log(`  ✓ ${gate.inRun.length} in-run decision(s) accepted by ${by} on a terminal.`);
+    // Persisted into the deliverable's manifest (L5): who, when, which — internal ones only counted.
+    gate.acceptedInRun = {
+        by, at: new Date().toISOString(),
+        ids: gate.inRun.filter((d) => d.visibility === 'client').map((d) => d.id),
+        internalCount: gate.inRun.filter((d) => d.visibility !== 'client').length,
+    };
+    return gate;
+}
+//# sourceMappingURL=delivery-decision-step.js.map

package/dist/harness/gates/delivery-decision-step.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-decision-step.js","sourceRoot":"","sources":["../../../src/harness/gates/delivery-decision-step.ts"],"names":[],"mappings":";;AA0BA,0DA8DC;AAxFD;;;;GAIG;AACH,qEAA8D;AAC9D,2EAAuI;AACvI,qEAAwH;AACxH,mEAAsD;AAiBtD,mGAAmG;AAC5F,KAAK,UAAU,uBAAuB,CAAC,CAA4B;IACxE,MAAM,IAAI,GAAG,IAAA,kDAAyB,EAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC9D,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK;QAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9C,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC,CAAC,GAAG,CAAC,yBAAyB,IAAI,CAAC,QAAQ,CAAC,MAAM,oCAAoC,CAAC,CAAC;QACzF,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,mGAAmG;IACnG,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,CAAC;QAChC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB;YACzB,CAAC,CAAC,wBAAwB,IAAI,CAAC,eAAe,CAAC,MAAM,8FAA8F;YACnJ,CAAC,CAAC,eAAe,IAAI,CAAC,eAAe,CAAC,MAAM,uEAAuE,CAAC,CAAC;QACvH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,eAAe;YAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACxD,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YAC1B,CAAC,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;YACzD,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC;QAC9B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB;YACzB,CAAC,CAAC,wBAAwB,IAAI,CAAC,aAAa,CAAC,MAAM,wGAAwG;YAC3J,CAAC,CAAC,eAAe,IAAI,CAAC,aAAa,CAAC,MAAM,iEAAiE,CAAC,CAAC;QAC/G,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,aAAa;YAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YAC1B,CAAC,CAAC,GAAG,CAAC,qFAAqF,CAAC,CAAC;YAC7F,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1D,MAAM,aAAa,GAAG,IAAA,kCAAa,EAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACpE,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACnB,CAAC,CAAC,GAAG,CAAC,wBAAwB,IAAI,CAAC,KAAK,CAAC,MAAM,yCAAyC,mCAAW,UAAU,CAAC,CAAC;QAC/G,KAAK,MAAM,CAAC,IAAI,IAAA,mCAAU,EAAC,IAAI,CAAC,KAAK,CAAC;YAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC1D,CAAC,CAAC,GAAG,CAAC,+FAA+F,CAAC,CAAC;QACvG,CAAC,CAAC,GAAG,CAAC,OAAO,aAAa,EAAE,CAAC,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO;QAAE,OAAO,IAAI,CAAC,CAAG,iEAAiE;IAC7F,IAAI,CAAC;QACH,MAAM,IAAA,6CAAwB,EAAC;YAC7B,IAAI,EAAE,gBAAgB,IAAI,CAAC,KAAK,CAAC,MAAM,yCAAyC,mCAAW,GAAG;YAC9F,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,aAAa;YACtB,OAAO,EAAE,CAAC,GAAG,IAAA,mCAAU,EAAC,IAAI,CAAC,KAAK,CAAC,EAAE,gBAAgB,IAAA,6BAAW,EAAC,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC;YAClF,EAAE,EAAE,CAAC,CAAC,EAAE;SACT,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,CAAC,GAAG,YAAY,6CAAwB,CAAC;YAAE,MAAM,GAAG,CAAC;QAC1D,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,EAAE,GAAG,IAAA,6BAAW,EAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACtC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,mCAAmC,EAAE,iBAAiB,CAAC,CAAC;IACtF,iGAAiG;IACjG,IAAI,CAAC,aAAa,GAAG;QACnB,EAAE,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QAChC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,MAAM;KAC1E,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/harness/gates/gate-override-report.d.ts

@@ -0,0 +1,59 @@
+/**
+ * How gate overrides are SHOWN (OES-11.6, red-team #14): `audit.json` `gateOverrides[]`, the
+ * delivery's one-line summary, the XLSX "Gate overrides" sheet and the CSV manifest line, with the
+ * `PASS (overridden)` status. A `visibility: internal` decision is counted everywhere and exported
+ * nowhere (XLSX/CSV) — not even its id.
+ */
+import { GateSeverity } from './gate-rule-catalog';
+import { UnitGateOverrides } from './unit-gate-overrides';
+export type GateOverrideStatus = 'applied' | 'ineffective' | 'rejected';
+export interface GateOverrideReport {
+    decisionId: string;
+    rule: string;
+    severity: string;
+    catalogSeverity: GateSeverity | null;
+    scope: string;
+    reason: string;
+    visibility: 'internal' | 'client';
+    by: string;
+    validFrom: string;
+    status: GateOverrideStatus;
+    /** An applied override that changed an outcome here (it lowered a condition that was met). */
+    triggered: boolean;
+    /** In git HEAD when this was written; null outside git. False = counted here, refused at release. */
+    committed: boolean | null;
+    detail?: string;
+}
+/** Every override that touches the unit, in a stable order: applied, then ineffective, then rejected. */
+export declare function gateOverrideReports(o: UnitGateOverrides, triggered: ReadonlySet<string>): GateOverrideReport[];
+/** `PASS (overridden)` when a pass leaned on at least one applied override. */
+export declare function gateStatusLabel(status: 'PASS' | 'FAIL', reports: GateOverrideReport[]): string;
+/** What a deliverable may carry: client-visible rows only, plus how many internal ones were withheld. */
+export declare function exportableOverrides(reports: GateOverrideReport[]): {
+    rows: GateOverrideReport[];
+    internalCount: number;
+};
+/**
+ * One line for the delivery summary, or null when nothing touches the unit. With `unitsCovered`, each
+ * applied glob override also says how many units it reaches (L1) — a glob is easy to underestimate.
+ */
+export declare function gateOverrideSummaryLine(unit: string, reports: GateOverrideReport[], unitsCovered?: (scope: string) => number): string | null;
+/** Who accepted in-run decisions on a terminal for this delivery (L5) — ids of client-visible ones only. */
+export interface InRunAcceptance {
+    by: string;
+    at: string;
+    ids: string[];
+    internalCount: number;
+}
+/** What a matrix deliverable carries about overrides: client rows only, the internal count, and the status. */
+export interface DeliverableGateOverrides {
+    status: string;
+    rows: GateOverrideReport[];
+    internalCount: number;
+    acceptedInRun?: InRunAcceptance;
+}
+/** The XLSX sheet / CSV manifest payload, or undefined when nothing touches the unit (no sheet at all). */
+export declare function deliverableGateOverrides(reports: GateOverrideReport[], reviewPending: boolean, acceptedInRun?: InRunAcceptance): DeliverableGateOverrides | undefined;
+/** The CSV manifest lines (L4/L5): a CSV-only reader still learns what the delivery leaned on. */
+export declare function overrideManifestLines(o: DeliverableGateOverrides | undefined): string[];
+//# sourceMappingURL=gate-override-report.d.ts.map

package/dist/harness/gates/gate-override-report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-override-report.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/gate-override-report.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,YAAY,EAAgB,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAiB,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAGzE,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,aAAa,GAAG,UAAU,CAAC;AAExE,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,YAAY,GAAG,IAAI,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,UAAU,GAAG,QAAQ,CAAC;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,8FAA8F;IAC9F,SAAS,EAAE,OAAO,CAAC;IACnB,qGAAqG;IACrG,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAkBD,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,CAAC,EAAE,iBAAiB,EAAE,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,kBAAkB,EAAE,CAM9G;AAED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAE9F;AAED,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,kBAAkB,EAAE,GAAG;IAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAKxH;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,MAAM,GAAG,IAAI,CAU5I;AAED,4GAA4G;AAC5G,MAAM,WAAW,eAAe;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AAEjG,+GAA+G;AAC/G,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,kBAAkB,EAAE,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,eAAe,CAAC;CACjC;AAED,2GAA2G;AAC3G,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,kBAAkB,EAAE,EAAE,aAAa,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,eAAe,GAAG,wBAAwB,GAAG,SAAS,CAOrK;AAED,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,wBAAwB,GAAG,SAAS,GAAG,MAAM,EAAE,CAOvF"}

package/dist/harness/gates/gate-override-report.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gateOverrideReports = gateOverrideReports;
+exports.gateStatusLabel = gateStatusLabel;
+exports.exportableOverrides = exportableOverrides;
+exports.gateOverrideSummaryLine = gateOverrideSummaryLine;
+exports.deliverableGateOverrides = deliverableGateOverrides;
+exports.overrideManifestLines = overrideManifestLines;
+/**
+ * How gate overrides are SHOWN (OES-11.6, red-team #14): `audit.json` `gateOverrides[]`, the
+ * delivery's one-line summary, the XLSX "Gate overrides" sheet and the CSV manifest line, with the
+ * `PASS (overridden)` status. A `visibility: internal` decision is counted everywhere and exported
+ * nowhere (XLSX/CSV) — not even its id.
+ */
+const gate_rule_catalog_1 = require("./gate-rule-catalog");
+const fromActive = (o, triggered) => ({
+    decisionId: o.decisionId, rule: o.rule, severity: o.severity, catalogSeverity: (0, gate_rule_catalog_1.findGateRule)(o.rule)?.severity ?? null,
+    scope: o.scope, reason: o.reason, visibility: o.visibility, by: o.by, validFrom: o.validFrom, status: 'applied', triggered,
+    committed: o.committed,
+});
+function fromIssue(i, status) {
+    const p = (i.entry.payload ?? {});
+    const rule = typeof p.rule === 'string' ? p.rule : String(p.rule ?? '');
+    return {
+        decisionId: i.decisionId, rule, severity: String(p.severity ?? ''), catalogSeverity: (0, gate_rule_catalog_1.findGateRule)(rule)?.severity ?? null,
+        scope: String(p.scope ?? ''), reason: i.entry.reason, visibility: i.entry.visibility, by: i.entry.source.by,
+        validFrom: i.entry.valid_from, status, triggered: false, committed: i.committed, detail: i.reason,
+    };
+}
+/** Every override that touches the unit, in a stable order: applied, then ineffective, then rejected. */
+function gateOverrideReports(o, triggered) {
+    return [
+        ...o.inForce.map((x) => fromActive(x, triggered.has(x.rule))),
+        ...o.ineffective.map((x) => fromIssue(x, 'ineffective')),
+        ...o.rejected.map((x) => fromIssue(x, 'rejected')),
+    ];
+}
+/** `PASS (overridden)` when a pass leaned on at least one applied override. */
+function gateStatusLabel(status, reports) {
+    return status === 'PASS' && reports.some((r) => r.status === 'applied' && r.triggered) ? 'PASS (overridden)' : status;
+}
+/** What a deliverable may carry: client-visible rows only, plus how many internal ones were withheld. */
+function exportableOverrides(reports) {
+    return {
+        rows: reports.filter((r) => r.visibility === 'client'),
+        internalCount: reports.filter((r) => r.visibility !== 'client').length,
+    };
+}
+/**
+ * One line for the delivery summary, or null when nothing touches the unit. With `unitsCovered`, each
+ * applied glob override also says how many units it reaches (L1) — a glob is easy to underestimate.
+ */
+function gateOverrideSummaryLine(unit, reports, unitsCovered) {
+    if (reports.length === 0)
+        return null;
+    const count = (s) => reports.filter((r) => r.status === s).length;
+    const { rows, internalCount } = exportableOverrides(reports);
+    const globs = unitsCovered
+        ? reports.filter((r) => r.status === 'applied' && /[*?]/.test(r.scope)).map((r) => ` · ${r.decisionId} (${r.scope}) covers ${unitsCovered(r.scope)} units`)
+        : [];
+    return `${unit}: gate overrides — ${count('applied')} applied (${reports.filter((r) => r.triggered).length} changed an outcome), `
+        + `${count('ineffective')} ineffective, ${count('rejected')} rejected · ${rows.length} client-visible, ${internalCount} internal (counted, never exported)`
+        + globs.join('');
+}
+/** The XLSX sheet / CSV manifest payload, or undefined when nothing touches the unit (no sheet at all). */
+function deliverableGateOverrides(reports, reviewPending, acceptedInRun) {
+    if (reports.length === 0 && !acceptedInRun)
+        return undefined;
+    const { rows, internalCount } = exportableOverrides(reports);
+    return {
+        status: reviewPending ? 'REVIEW PENDING (draft)' : gateStatusLabel('PASS', reports), rows, internalCount,
+        ...(acceptedInRun ? { acceptedInRun } : {}),
+    };
+}
+/** The CSV manifest lines (L4/L5): a CSV-only reader still learns what the delivery leaned on. */
+function overrideManifestLines(o) {
+    if (!o)
+        return [];
+    const rows = o.rows.map((r) => `${r.rule} ${r.catalogSeverity ?? '?'} → ${r.severity} (${r.decisionId}, ${r.scope})`).join('; ');
+    const lines = [`# gate overrides: ${o.status}${rows ? ` · ${rows}` : ''} · ${o.internalCount} internal not listed`];
+    const a = o.acceptedInRun;
+    if (a)
+        lines.push(`# accepted in-run decisions: by ${a.by} at ${a.at}${a.ids.length ? ` — ${a.ids.join(', ')}` : ''}${a.internalCount ? ` (${a.internalCount} internal, ids withheld)` : ''}`);
+    return lines;
+}
+//# sourceMappingURL=gate-override-report.js.map

package/dist/harness/gates/gate-override-report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-override-report.js","sourceRoot":"","sources":["../../../src/harness/gates/gate-override-report.ts"],"names":[],"mappings":";;AA+CA,kDAMC;AAGD,0CAEC;AAGD,kDAKC;AAMD,0DAUC;AAcD,4DAOC;AAGD,sDAOC;AAjHD;;;;;GAKG;AACH,2DAAiE;AAwBjE,MAAM,UAAU,GAAG,CAAC,CAAiB,EAAE,SAAkB,EAAsB,EAAE,CAAC,CAAC;IACjF,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,IAAA,gCAAY,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,IAAI,IAAI;IACrH,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS;IAC1H,SAAS,EAAE,CAAC,CAAC,SAAS;CACvB,CAAC,CAAC;AAEH,SAAS,SAAS,CAAC,CAAgB,EAAE,MAA0B;IAC7D,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IACxE,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,eAAe,EAAE,IAAA,gCAAY,EAAC,IAAI,CAAC,EAAE,QAAQ,IAAI,IAAI;QACzH,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE;QAC3G,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;KAClG,CAAC;AACJ,CAAC;AAED,yGAAyG;AACzG,SAAgB,mBAAmB,CAAC,CAAoB,EAAE,SAA8B;IACtF,OAAO;QACL,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,GAAG,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QACxD,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;KACnD,CAAC;AACJ,CAAC;AAED,+EAA+E;AAC/E,SAAgB,eAAe,CAAC,MAAuB,EAAE,OAA6B;IACpF,OAAO,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,MAAM,CAAC;AACxH,CAAC;AAED,yGAAyG;AACzG,SAAgB,mBAAmB,CAAC,OAA6B;IAC/D,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC;QACtD,aAAa,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,MAAM;KACvE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,uBAAuB,CAAC,IAAY,EAAE,OAA6B,EAAE,YAAwC;IAC3H,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,KAAK,GAAG,CAAC,CAAqB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACtF,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,YAAY;QACxB,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,YAAY,YAAY,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;QAC3J,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,GAAG,IAAI,sBAAsB,KAAK,CAAC,SAAS,CAAC,aAAa,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,wBAAwB;UAC9H,GAAG,KAAK,CAAC,aAAa,CAAC,iBAAiB,KAAK,CAAC,UAAU,CAAC,eAAe,IAAI,CAAC,MAAM,oBAAoB,aAAa,qCAAqC;UACzJ,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrB,CAAC;AAaD,2GAA2G;AAC3G,SAAgB,wBAAwB,CAAC,OAA6B,EAAE,aAAsB,EAAE,aAA+B;IAC7H,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,aAAa;QAAE,OAAO,SAAS,CAAC;IAC7D,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC7D,OAAO;QACL,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa;QACxG,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,SAAgB,qBAAqB,CAAC,CAAuC;IAC3E,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,eAAe,IAAI,GAAG,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjI,MAAM,KAAK,GAAG,CAAC,qBAAqB,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,aAAa,sBAAsB,CAAC,CAAC;IACpH,MAAM,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;IAC1B,IAAI,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,0BAA0B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/L,OAAO,KAAK,CAAC;AACf,CAAC"}