@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.2

package/dist/harness/gates/gate-override-scope.d.ts

@@ -0,0 +1,18 @@
+export declare const OVERRIDE_SCOPE_KINDS: readonly ["screens", "flows", "api", "api/flows"];
+export type OverrideScopeKind = typeof OVERRIDE_SCOPE_KINDS[number];
+export interface OverrideScope {
+    kind: OverrideScopeKind;
+    unit: string;
+    glob: boolean;
+    text: string;
+}
+export declare function parseOverrideScope(scope: unknown): {
+    scope: OverrideScope;
+} | {
+    error: string;
+};
+/** How many of the project's units a (valid) scope reaches — 0 for an unparseable one. */
+export declare function unitsCoveredByScope(projectRoot: string, scope: string): number;
+/** Does the override scope cover the unit whose decision scope is `unitScope` (e.g. `screens/login`)? */
+export declare function overrideScopeMatches(s: OverrideScope, unitScope: string): boolean;
+//# sourceMappingURL=gate-override-scope.d.ts.map

package/dist/harness/gates/gate-override-scope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-override-scope.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/gate-override-scope.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,oBAAoB,mDAAmD,CAAC;AACrF,MAAM,MAAM,iBAAiB,GAAG,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;AAEpE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACd;AAID,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG;IAAE,KAAK,EAAE,aAAa,CAAA;CAAE,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAc/F;AAOD,0FAA0F;AAC1F,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAS9E;AAED,yGAAyG;AACzG,wBAAgB,oBAAoB,CAAC,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAKjF"}

package/dist/harness/gates/gate-override-scope.js

@@ -0,0 +1,98 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OVERRIDE_SCOPE_KINDS = void 0;
+exports.parseOverrideScope = parseOverrideScope;
+exports.unitsCoveredByScope = unitsCoveredByScope;
+exports.overrideScopeMatches = overrideScopeMatches;
+/**
+ * The `scope` of a gate override (OES-11.3, red-team #15): one unit, or a glob inside ONE kind.
+ *
+ *   screens/login       one unit                        api/flows/signup   one api flow
+ *   screens/log*        every screen whose name matches  flows/*            every flow
+ *   **  ·  screens/**   rejected — a switch that turns the gate off for everything
+ *   * /login · s*s/x    rejected — the kind must be literal, so a scope never crosses kinds
+ *
+ * Only `*` and `?` are glob characters, and neither crosses a `/`; so `api/*` never reaches an api
+ * flow (`api/flows/<f>`), which is its own kind.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+exports.OVERRIDE_SCOPE_KINDS = ['screens', 'flows', 'api', 'api/flows'];
+const UNIT_RE = /^[A-Za-z0-9._*?-]+$/;
+function parseOverrideScope(scope) {
+    if (typeof scope !== 'string' || !scope.trim())
+        return { error: 'scope is required: one unit (screens/login) or a glob inside one kind (screens/log*)' };
+    const text = scope.trim();
+    if (text.includes('**'))
+        return { error: `scope "${text}" uses \`**\` — an override covers one unit or a glob inside one kind, never everything` };
+    const kind = text.startsWith('api/flows/') ? 'api/flows' : text.split('/')[0];
+    if (/[*?]/.test(kind))
+        return { error: `scope "${text}" globs the unit kind — a scope must stay inside one kind (screens, flows, api, api/flows)` };
+    if (!exports.OVERRIDE_SCOPE_KINDS.includes(kind)) {
+        return { error: `scope "${text}" names no unit kind — start it with screens/, flows/, api/ or api/flows/` };
+    }
+    const unit = text.slice(kind.length + 1);
+    if (!unit || unit === '.' || unit === '..' || !UNIT_RE.test(unit)) {
+        return { error: `scope "${text}" must name one unit (or a glob of unit names with * and ?) after "${kind}/"` };
+    }
+    return { scope: { kind: kind, unit, glob: /[*?]/.test(unit), text } };
+}
+function globRegex(glob) {
+    const body = glob.replace(/[.+^${}()|[\]\\-]/g, '\\$&').replace(/\*/g, '[^/]*').replace(/\?/g, '[^/]');
+    return new RegExp(`^${body}$`);
+}
+/** How many of the project's units a (valid) scope reaches — 0 for an unparseable one. */
+function unitsCoveredByScope(projectRoot, scope) {
+    const parsed = parseOverrideScope(scope);
+    if ('error' in parsed)
+        return 0;
+    let names = [];
+    try {
+        names = fs.readdirSync(path.join(projectRoot, 'qa', ...parsed.scope.kind.split('/')), { withFileTypes: true })
+            .filter((e) => e.isDirectory() && !(parsed.scope.kind === 'api' && e.name === 'flows')).map((e) => e.name);
+    }
+    catch { /* the project has no unit of that kind */ }
+    return names.filter((n) => overrideScopeMatches(parsed.scope, `${parsed.scope.kind}/${n}`)).length;
+}
+/** Does the override scope cover the unit whose decision scope is `unitScope` (e.g. `screens/login`)? */
+function overrideScopeMatches(s, unitScope) {
+    const kind = unitScope.startsWith('api/flows/') ? 'api/flows' : unitScope.split('/')[0];
+    if (kind !== s.kind)
+        return false;
+    const unit = unitScope.slice(kind.length + 1);
+    return s.glob ? globRegex(s.unit).test(unit) : unit === s.unit;
+}
+//# sourceMappingURL=gate-override-scope.js.map

package/dist/harness/gates/gate-override-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-override-scope.js","sourceRoot":"","sources":["../../../src/harness/gates/gate-override-scope.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0BA,gDAcC;AAQD,kDASC;AAGD,oDAKC;AAjED;;;;;;;;;;GAUG;AACH,uCAAyB;AACzB,2CAA6B;AAEhB,QAAA,oBAAoB,GAAE,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,CAAU,CAAC;AAUrF,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,KAAK,EAAE,sFAAsF,EAAE,CAAC;IACzJ,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,IAAI,yFAAyF,EAAE,CAAC;IACnJ,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,IAAI,4FAA4F,EAAE,CAAC;IACpJ,IAAI,CAAE,4BAA0C,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,KAAK,EAAE,UAAU,IAAI,2EAA2E,EAAE,CAAC;IAC9G,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,KAAK,EAAE,UAAU,IAAI,sEAAsE,IAAI,IAAI,EAAE,CAAC;IACjH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAyB,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvG,OAAO,IAAI,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,0FAA0F;AAC1F,SAAgB,mBAAmB,CAAC,WAAmB,EAAE,KAAa;IACpE,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,CAAC,CAAC;IAChC,IAAI,KAAK,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,KAAK,GAAG,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC;aAC3G,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/G,CAAC;IAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;IACtD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACrG,CAAC;AAED,yGAAyG;AACzG,SAAgB,oBAAoB,CAAC,CAAgB,EAAE,SAAiB;IACtE,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAClC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAC9C,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC;AACjE,CAAC"}

package/dist/harness/gates/gate-override-validation.d.ts

@@ -0,0 +1,25 @@
+import { ReadDecision } from '../../decisions/read-decisions';
+import { ActiveOverride, OverrideSeverity } from './resolve-rule';
+export declare const OVERRIDE_SEVERITIES: readonly OverrideSeverity[];
+export declare const MIN_OVERRIDE_REASON = 15;
+export type OverrideJudgement = {
+    status: 'irrelevant';
+} | {
+    status: 'rejected';
+    reason: string;
+} | {
+    status: 'ineffective';
+    reason: string;
+    override: ActiveOverride;
+} | {
+    status: 'accepted';
+    override: ActiveOverride;
+};
+/**
+ * Everything that makes an override inadmissible regardless of the unit being judged — the checks
+ * `journey --decide gate-override` runs BEFORE the prompt, so a human never confirms a rejected one.
+ * `humanAccepted` is checked separately: the confirmation sets it, a caller never supplies it.
+ */
+export declare function overridePayloadErrors(payload: unknown, reason: string, fileScope: string): string[];
+export declare function judgeOverride(e: ReadDecision, unitScope: string | null): OverrideJudgement;
+//# sourceMappingURL=gate-override-validation.d.ts.map

package/dist/harness/gates/gate-override-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-override-validation.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/gate-override-validation.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAG9D,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAElE,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAA+B,CAAC;AAC3F,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAGtC,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,YAAY,CAAA;CAAE,GACxB;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,MAAM,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAA;CAAE,GACnE;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,EAAE,cAAc,CAAA;CAAE,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiBnG;AASD,wBAAgB,aAAa,CAAC,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,iBAAiB,CAe1F"}

package/dist/harness/gates/gate-override-validation.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MIN_OVERRIDE_REASON = exports.OVERRIDE_SEVERITIES = void 0;
+exports.overridePayloadErrors = overridePayloadErrors;
+exports.judgeOverride = judgeOverride;
+/**
+ * Is a `gate-override` decision admissible, and for which unit? (OES-11.3, red-team #15, takumi T5)
+ *
+ * Shape: payload `{rule, severity: warning|info|off, scope, humanAccepted?}` + the entry's `reason`.
+ *   rejected   (gate.override-rejected, hard) — unknown rule or key, hard rule, severity outside
+ *              warning|info|off, `off` on a rule without `offAllowed`, reason under 15 characters,
+ *              a bad scope, a unit's own decision reaching another unit, humanAccepted not `true`
+ *   ineffective — well-formed but `humanAccepted` absent: present means effective, so it relaxes
+ *              nothing; and its absence alone blocks nothing either
+ *   irrelevant — a valid scope that does not cover the unit being judged
+ * An unparseable scope cannot be placed, so it is rejected for every unit.
+ */
+const decision_file_1 = require("../../decisions/decision-file");
+const gate_rule_catalog_1 = require("./gate-rule-catalog");
+const gate_override_scope_1 = require("./gate-override-scope");
+exports.OVERRIDE_SEVERITIES = ['warning', 'info', 'off'];
+exports.MIN_OVERRIDE_REASON = 15;
+const PAYLOAD_KEYS = new Set(['rule', 'severity', 'scope', 'humanAccepted']);
+/**
+ * Everything that makes an override inadmissible regardless of the unit being judged — the checks
+ * `journey --decide gate-override` runs BEFORE the prompt, so a human never confirms a rejected one.
+ * `humanAccepted` is checked separately: the confirmation sets it, a caller never supplies it.
+ */
+function overridePayloadErrors(payload, reason, fileScope) {
+    if (!payload || typeof payload !== 'object' || Array.isArray(payload))
+        return ['payload must be {rule, severity, scope}'];
+    const p = payload;
+    const errors = [];
+    for (const k of Object.keys(p))
+        if (!PAYLOAD_KEYS.has(k))
+            errors.push(`unknown payload key "${k}" (allowed: rule, severity, scope)`);
+    const parsed = (0, gate_override_scope_1.parseOverrideScope)(p.scope);
+    if ('error' in parsed)
+        errors.push(parsed.error);
+    else if (fileScope !== decision_file_1.PROJECT_SCOPE && (parsed.scope.glob || parsed.scope.text !== fileScope)) {
+        errors.push(`a decision recorded under qa/${fileScope}/ can only override ${fileScope} (scope is "${parsed.scope.text}") — record a wider one in qa/decisions/`);
+    }
+    const rule = typeof p.rule === 'string' ? (0, gate_rule_catalog_1.findGateRule)(p.rule) : undefined;
+    if (!rule)
+        errors.push(`unknown rule "${String(p.rule)}" — it must be an id from harness/catalog/gate-rules.yaml`);
+    else if (rule.kind === 'hard')
+        errors.push(`${rule.id} is a hard rule — it can never be overridden (${rule.rationale})`);
+    if (!exports.OVERRIDE_SEVERITIES.includes(p.severity))
+        errors.push(`severity must be warning | info | off (got ${JSON.stringify(p.severity)})`);
+    else if (p.severity === 'off' && rule && rule.kind === 'soft' && !rule.offAllowed)
+        errors.push(`${rule.id} cannot be switched off (offAllowed: false) — lower it to warning or info instead`);
+    if (reason.trim().length < exports.MIN_OVERRIDE_REASON)
+        errors.push(`the reason must say why in at least ${exports.MIN_OVERRIDE_REASON} characters`);
+    return errors;
+}
+function asOverride(e, p) {
+    return {
+        decisionId: e.id, rule: String(p.rule), severity: p.severity, scope: String(p.scope).trim(),
+        reason: e.reason, visibility: e.visibility, by: e.source.by, validFrom: e.valid_from, path: e.path, committed: null,
+    };
+}
+function judgeOverride(e, unitScope) {
+    const p = (e.payload ?? {});
+    const parsed = (0, gate_override_scope_1.parseOverrideScope)(p.scope);
+    if ('scope' in parsed && (!unitScope || !(0, gate_override_scope_1.overrideScopeMatches)(parsed.scope, unitScope))) {
+        // A unit's own decision that names another unit is still that unit's problem.
+        if (e.scope === decision_file_1.PROJECT_SCOPE || e.scope !== unitScope)
+            return { status: 'irrelevant' };
+    }
+    const errors = overridePayloadErrors(p, e.reason, e.scope);
+    if (p.humanAccepted !== undefined && p.humanAccepted !== true)
+        errors.push('humanAccepted is set only by a TTY confirmation, and only to true');
+    if (errors.length)
+        return { status: 'rejected', reason: errors.join('; ') };
+    const override = asOverride(e, p);
+    if (p.humanAccepted !== true) {
+        return { status: 'ineffective', reason: 'not confirmed by a human on a TTY (humanAccepted absent) — it relaxes nothing', override };
+    }
+    return { status: 'accepted', override };
+}
+//# sourceMappingURL=gate-override-validation.js.map

package/dist/harness/gates/gate-override-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-override-validation.js","sourceRoot":"","sources":["../../../src/harness/gates/gate-override-validation.ts"],"names":[],"mappings":";;;AAiCA,sDAiBC;AASD,sCAeC;AA1ED;;;;;;;;;;;GAWG;AACH,iEAA8D;AAE9D,2DAAmD;AACnD,+DAAiF;AAGpE,QAAA,mBAAmB,GAAgC,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;AAC9E,QAAA,mBAAmB,GAAG,EAAE,CAAC;AACtC,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC;AAQ7E;;;;GAIG;AACH,SAAgB,qBAAqB,CAAC,OAAgB,EAAE,MAAc,EAAE,SAAiB;IACvF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,yCAAyC,CAAC,CAAC;IAC1H,MAAM,CAAC,GAAG,OAAkC,CAAC;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,oCAAoC,CAAC,CAAC;IACrI,MAAM,MAAM,GAAG,IAAA,wCAAkB,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,OAAO,IAAI,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;SAC5C,IAAI,SAAS,KAAK,6BAAa,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;QAC/F,MAAM,CAAC,IAAI,CAAC,gCAAgC,SAAS,uBAAuB,SAAS,eAAe,MAAM,CAAC,KAAK,CAAC,IAAI,0CAA0C,CAAC,CAAC;IACnK,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,gCAAY,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,IAAI,CAAC,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,iBAAiB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;SAC9G,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,iDAAiD,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC;IACzH,IAAI,CAAC,2BAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,QAA4B,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,8CAA8C,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;SACvJ,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,EAAE,mFAAmF,CAAC,CAAC;IAC9L,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,2BAAmB;QAAE,MAAM,CAAC,IAAI,CAAC,uCAAuC,2BAAmB,aAAa,CAAC,CAAC;IACrI,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,UAAU,CAAC,CAAe,EAAE,CAA0B;IAC7D,OAAO;QACL,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAA4B,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE;QAC/G,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI;KACpH,CAAC;AACJ,CAAC;AAED,SAAgB,aAAa,CAAC,CAAe,EAAE,SAAwB;IACrE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAA4B,CAAC;IACvD,MAAM,MAAM,GAAG,IAAA,wCAAkB,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,OAAO,IAAI,MAAM,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,IAAA,0CAAoB,EAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACxF,8EAA8E;QAC9E,IAAI,CAAC,CAAC,KAAK,KAAK,6BAAa,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC1F,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3D,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IAChJ,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5E,MAAM,QAAQ,GAAG,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClC,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,+EAA+E,EAAE,QAAQ,EAAE,CAAC;IACtI,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC"}

package/dist/harness/gates/gate-rule-catalog.d.ts

@@ -0,0 +1,24 @@
+export declare const GATE_SEVERITIES: readonly ["error", "review", "warning", "info"];
+export type GateSeverity = typeof GATE_SEVERITIES[number];
+export type GateKind = 'hard' | 'soft';
+export declare const GATE_STAGES: readonly ["spec", "create", "generate", "run", "deliver"];
+export type GateStage = typeof GATE_STAGES[number];
+export interface GateRule {
+    id: string;
+    stage: GateStage;
+    severity: GateSeverity;
+    kind: GateKind;
+    rationale: string;
+    fix: string;
+    since: string;
+    offAllowed: boolean;
+}
+/** Parse and validate catalog text. Throws on the first structural defect. */
+export declare function parseGateRuleCatalog(text: string): Map<string, GateRule>;
+/** Every rule, keyed by id (loaded once per process). */
+export declare function gateRuleCatalog(): ReadonlyMap<string, GateRule>;
+export declare function findGateRule(id: string): GateRule | undefined;
+/** A rule the CODE names. An unknown id is a programming error, never user input — so it throws. */
+export declare function gateRule(id: string): GateRule;
+export declare function listRules(): GateRule[];
+//# sourceMappingURL=gate-rule-catalog.d.ts.map

package/dist/harness/gates/gate-rule-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-rule-catalog.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/gate-rule-catalog.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,eAAe,iDAAkD,CAAC;AAC/E,MAAM,MAAM,YAAY,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAC1D,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,CAAC;AACvC,eAAO,MAAM,WAAW,2DAA4D,CAAC;AACrF,MAAM,MAAM,SAAS,GAAG,OAAO,WAAW,CAAC,MAAM,CAAC,CAAC;AAEnD,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,YAAY,CAAC;IACvB,IAAI,EAAE,QAAQ,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,OAAO,CAAC;CACrB;AAKD,8EAA8E;AAC9E,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CA0BxE;AAID,yDAAyD;AACzD,wBAAgB,eAAe,IAAI,WAAW,CAAC,MAAM,EAAE,QAAQ,CAAC,CAG/D;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAE7D;AAED,oGAAoG;AACpG,wBAAgB,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,CAI7C;AAED,wBAAgB,SAAS,IAAI,QAAQ,EAAE,CAEtC"}

package/dist/harness/gates/gate-rule-catalog.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.GATE_STAGES = exports.GATE_SEVERITIES = void 0;
+exports.parseGateRuleCatalog = parseGateRuleCatalog;
+exports.gateRuleCatalog = gateRuleCatalog;
+exports.findGateRule = findGateRule;
+exports.gateRule = gateRule;
+exports.listRules = listRules;
+/**
+ * The gate-rule catalog (OES-11.1): `harness/catalog/gate-rules.yaml`, shipped next to the code
+ * (`copy-templates` copies it into `dist/harness/catalog/`).
+ *
+ * The catalog is code-owned data — a malformed one is a build defect, so loading it throws rather
+ * than degrading to "no rules" (which would silently stop every gate from blocking).
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const yaml_1 = require("yaml");
+exports.GATE_SEVERITIES = ['error', 'review', 'warning', 'info'];
+exports.GATE_STAGES = ['spec', 'create', 'generate', 'run', 'deliver'];
+const CATALOG_FILE = path.join(__dirname, '..', 'catalog', 'gate-rules.yaml');
+const ID_RE = /^[a-z0-9]+(\.[a-z0-9]+(-[a-z0-9]+)*)+$/;
+/** Parse and validate catalog text. Throws on the first structural defect. */
+function parseGateRuleCatalog(text) {
+    const doc = (0, yaml_1.parse)(text);
+    if (!doc || !Array.isArray(doc.rules))
+        throw new Error('gate-rules.yaml: no `rules:` list');
+    const out = new Map();
+    for (const raw of doc.rules) {
+        const id = String(raw?.id ?? '');
+        const bad = (why) => { throw new Error(`gate-rules.yaml: rule "${id}" ${why}`); };
+        if (!ID_RE.test(id))
+            bad('has no dotted kebab-case id');
+        if (out.has(id))
+            bad('is declared twice');
+        if (!exports.GATE_STAGES.includes(raw.stage))
+            bad(`has an unknown stage "${raw.stage}"`);
+        if (!exports.GATE_SEVERITIES.includes(raw.severity))
+            bad(`has an unknown severity "${raw.severity}"`);
+        if (raw.kind !== 'hard' && raw.kind !== 'soft')
+            bad('kind must be hard|soft');
+        if (typeof raw.offAllowed !== 'boolean')
+            bad('offAllowed must be a boolean');
+        if (raw.kind === 'hard' && raw.offAllowed)
+            bad('is hard, so it can never be switched off');
+        out.set(id, {
+            id,
+            stage: raw.stage,
+            severity: raw.severity,
+            kind: raw.kind,
+            rationale: String(raw.rationale ?? ''),
+            fix: String(raw.fix ?? ''),
+            since: String(raw.since ?? ''),
+            offAllowed: raw.offAllowed,
+        });
+    }
+    return out;
+}
+let cached = null;
+/** Every rule, keyed by id (loaded once per process). */
+function gateRuleCatalog() {
+    if (!cached)
+        cached = parseGateRuleCatalog(fs.readFileSync(CATALOG_FILE, 'utf8'));
+    return cached;
+}
+function findGateRule(id) {
+    return gateRuleCatalog().get(id);
+}
+/** A rule the CODE names. An unknown id is a programming error, never user input — so it throws. */
+function gateRule(id) {
+    const rule = findGateRule(id);
+    if (!rule)
+        throw new Error(`gate rule "${id}" is not in harness/catalog/gate-rules.yaml`);
+    return rule;
+}
+function listRules() {
+    return [...gateRuleCatalog().values()];
+}
+//# sourceMappingURL=gate-rule-catalog.js.map

package/dist/harness/gates/gate-rule-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-rule-catalog.js","sourceRoot":"","sources":["../../../src/harness/gates/gate-rule-catalog.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAgCA,oDA0BC;AAKD,0CAGC;AAED,oCAEC;AAGD,4BAIC;AAED,8BAEC;AAjFD;;;;;;GAMG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,+BAA6B;AAEhB,QAAA,eAAe,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AAGlE,QAAA,WAAW,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,CAAU,CAAC;AAcrF,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;AAC9E,MAAM,KAAK,GAAG,wCAAwC,CAAC;AAEvD,8EAA8E;AAC9E,SAAgB,oBAAoB,CAAC,IAAY;IAC/C,MAAM,GAAG,GAAG,IAAA,YAAK,EAAC,IAAI,CAA+B,CAAC;IACtD,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,IAAI,GAAG,EAAoB,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAuC,EAAE,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,CAAC,GAAW,EAAS,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,KAAK,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,6BAA6B,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,mBAAmB,CAAC,CAAC;QAC1C,IAAI,CAAC,mBAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAkB,CAAC;YAAE,GAAG,CAAC,yBAAyB,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC;QAC9F,IAAI,CAAC,uBAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAwB,CAAC;YAAE,GAAG,CAAC,4BAA4B,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC;QAC9G,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM;YAAE,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAC9E,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,SAAS;YAAE,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC7E,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,IAAI,GAAG,CAAC,UAAU;YAAE,GAAG,CAAC,0CAA0C,CAAC,CAAC;QAC3F,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE;YACV,EAAE;YACF,KAAK,EAAE,GAAG,CAAC,KAAkB;YAC7B,QAAQ,EAAE,GAAG,CAAC,QAAwB;YACtC,IAAI,EAAE,GAAG,CAAC,IAAgB;YAC1B,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;YACtC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;YAC1B,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;YAC9B,UAAU,EAAE,GAAG,CAAC,UAAqB;SACtC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,IAAI,MAAM,GAAyC,IAAI,CAAC;AAExD,yDAAyD;AACzD,SAAgB,eAAe;IAC7B,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,oBAAoB,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAClF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAgB,YAAY,CAAC,EAAU;IACrC,OAAO,eAAe,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,oGAAoG;AACpG,SAAgB,QAAQ,CAAC,EAAU;IACjC,MAAM,IAAI,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC;IAC9B,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,EAAE,6CAA6C,CAAC,CAAC;IAC1F,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,SAAS;IACvB,OAAO,CAAC,GAAG,eAAe,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/harness/gates/gate-terms.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Turning a gate CONDITION into an outcome through `resolveRule` — the only shapes a gate site uses,
+ * so no site writes a severity literal of its own (OES-11.2).
+ *
+ *   evaluateGateTerms  a conjunction (audit gateStatus, script-check status): each term names its
+ *                      rule and whether its condition holds; a violated term blocks only when its
+ *                      resolved severity blocks
+ *   ruleVerdict        a sensor verdict (pass | warn | fail) for one rule
+ *   sensorSeverityOf   a per-finding sensor severity (fail | warn | info), or null when switched off
+ */
+import { GateRules, ResolvedRule } from './resolve-rule';
+export interface GateTerm {
+    rule: string;
+    /** The condition the rule wants to see — `true` means the term passes. */
+    holds: boolean;
+}
+export interface GateTermsOutcome {
+    pass: boolean;
+    /** Violated rules whose resolved severity blocks. */
+    blocking: string[];
+    /** Violated rules an override lowered to advisory. */
+    relaxed: string[];
+}
+export declare function evaluateGateTerms(terms: GateTerm[], rules: GateRules): GateTermsOutcome;
+export type SensorVerdict = 'pass' | 'warn' | 'fail';
+/**
+ * A sensor verdict for one rule. `advisoryAnyway` is a reason the miss can never block that is not
+ * a severity (the `smoke` focus, or no failing row) — the rule is then not consulted at all.
+ */
+export declare function ruleVerdict(rules: GateRules, id: string, conditionMet: boolean, advisoryAnyway: boolean): SensorVerdict;
+export type SensorSeverity = 'fail' | 'warn' | 'info';
+export declare function sensorSeverityOf(r: ResolvedRule): SensorSeverity | null;
+//# sourceMappingURL=gate-terms.d.ts.map

package/dist/harness/gates/gate-terms.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-terms.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/gate-terms.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEzD,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,0EAA0E;IAC1E,KAAK,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,OAAO,CAAC;IACd,qDAAqD;IACrD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,sDAAsD;IACtD,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,SAAS,GAAG,gBAAgB,CAUvF;AAED,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE,OAAO,GAAG,aAAa,CAMvH;AAED,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAEtD,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,IAAI,CAIvE"}

package/dist/harness/gates/gate-terms.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateGateTerms = evaluateGateTerms;
+exports.ruleVerdict = ruleVerdict;
+exports.sensorSeverityOf = sensorSeverityOf;
+function evaluateGateTerms(terms, rules) {
+    const blocking = [];
+    const relaxed = [];
+    for (const t of terms) {
+        if (t.holds)
+            continue;
+        const r = rules.resolve(t.rule);
+        if (r.blocking)
+            blocking.push(t.rule);
+        else if (r.overriddenBy)
+            relaxed.push(t.rule);
+    }
+    return { pass: blocking.length === 0, blocking, relaxed };
+}
+/**
+ * A sensor verdict for one rule. `advisoryAnyway` is a reason the miss can never block that is not
+ * a severity (the `smoke` focus, or no failing row) — the rule is then not consulted at all.
+ */
+function ruleVerdict(rules, id, conditionMet, advisoryAnyway) {
+    if (!conditionMet)
+        return 'pass';
+    if (advisoryAnyway)
+        return 'warn';
+    const r = rules.resolve(id);
+    if (r.severity === 'off')
+        return 'pass';
+    return r.blocking ? 'fail' : 'warn';
+}
+function sensorSeverityOf(r) {
+    if (r.severity === 'off')
+        return null;
+    if (r.blocking)
+        return 'fail';
+    return r.severity === 'info' ? 'info' : 'warn';
+}
+//# sourceMappingURL=gate-terms.js.map

package/dist/harness/gates/gate-terms.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-terms.js","sourceRoot":"","sources":["../../../src/harness/gates/gate-terms.ts"],"names":[],"mappings":";;AA0BA,8CAUC;AAQD,kCAMC;AAID,4CAIC;AAhCD,SAAgB,iBAAiB,CAAC,KAAiB,EAAE,KAAgB;IACnE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,KAAK;YAAE,SAAS;QACtB,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,CAAC,QAAQ;YAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;aACjC,IAAI,CAAC,CAAC,YAAY;YAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC5D,CAAC;AAID;;;GAGG;AACH,SAAgB,WAAW,CAAC,KAAgB,EAAE,EAAU,EAAE,YAAqB,EAAE,cAAuB;IACtG,IAAI,CAAC,YAAY;QAAE,OAAO,MAAM,CAAC;IACjC,IAAI,cAAc;QAAE,OAAO,MAAM,CAAC;IAClC,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,MAAM,CAAC;IACxC,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACtC,CAAC;AAID,SAAgB,gBAAgB,CAAC,CAAe;IAC9C,IAAI,CAAC,CAAC,QAAQ,KAAK,KAAK;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,MAAM,CAAC;IAC9B,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;AACjD,CAAC"}

package/dist/harness/gates/in-run-decision-check.d.ts

@@ -0,0 +1,21 @@
+import { DecisionVisibility } from '../../decisions/decision-schema';
+export declare const IN_RUN_KINDS: readonly ["gate-override", "waiver", "contract-approval"];
+export declare const IN_RUN_RULE = "decision.in-run";
+export interface InRunDecision {
+    id: string;
+    kind: string;
+    path: string;
+    visibility: DecisionVisibility;
+    why: string[];
+}
+/** Paths (relative to the project, `/`-separated) of decision files in git HEAD; null outside git. */
+export declare function committedDecisionPaths(projectRoot: string): Set<string> | null;
+/** When the delivered run started: Playwright's `stats.startTime`; null when there is no readable run. */
+export declare function runStartOf(resultsPath: string | null): string | null;
+/** In-run decisions among `scopes`, judged against one run start (null: HEAD membership only) and the committed set. */
+export declare function inRunDecisions(projectRoot: string, scopes: string[], runStart: string | null, committed: Set<string> | null): InRunDecision[];
+/** Release decisions (override / waiver / approval) in reach that git HEAD does not hold — what `gate deliver` refuses. */
+export declare function uncommittedReleaseDecisions(projectRoot: string, scopes: string[]): InRunDecision[];
+/** Whether any decision of an in-run kind is in reach at all — the no-git notes are printed only then. */
+export declare function hasInRunKindDecisions(projectRoot: string, scopes: string[]): boolean;
+//# sourceMappingURL=in-run-decision-check.d.ts.map

package/dist/harness/gates/in-run-decision-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-run-decision-check.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/in-run-decision-check.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAKrE,eAAO,MAAM,YAAY,2DAA4D,CAAC;AACtF,eAAO,MAAM,WAAW,oBAAoB,CAAC;AAE7C,MAAM,WAAW,aAAa;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,kBAAkB,CAAC;IAAC,GAAG,EAAE,MAAM,EAAE,CAAA;CAAE;AAExH,sGAAsG;AACtG,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAI9E;AAQD,0GAA0G;AAC1G,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CASpE;AAID,wHAAwH;AACxH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,aAAa,EAAE,CA6B7I;AAED,2HAA2H;AAC3H,wBAAgB,2BAA2B,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAElG;AAED,0GAA0G;AAC1G,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAEpF"}