@sun-asterisk/sungen 3.2.34 → 3.3.0-alpha.2

package/dist/contract/build-contract-verdict.js

@@ -0,0 +1,123 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyUnit = void 0;
+exports.buildContractVerdict = buildContractVerdict;
+/**
+ * The contract verdict of one unit, BUILT BY CODE from raw inputs every time (DOS-14.0, takumi T3):
+ * the `.feature` files, the working lock, the lock and the approval decisions in git HEAD. No report
+ * file is read — the `.sungen/reports/<slug>-contract.json` that `contract check` writes is output
+ * only, so a hand-edited "pass" there changes nothing. The CLI and the Claude Code guard call this
+ * same function, so they cannot disagree.
+ *
+ *   fail    oracle-weakened / target-changed / assertion-lost, or any lock-uncommitted issue
+ *           (added · changed · removed vs HEAD, tampered, unverified), or an APPROVED free /
+ *           impl:code scenario with no admissible trace (unproven, also past the deadline) exit 2
+ *   review  any hash-changed (changed, not weaker — QA re-approves), opaque (a check no code
+ *           can compare, or a target identity that is only `low`), or inconclusive (an
+ *           approved free scenario's final attempt did not pass); blocks delivery         exit 0
+ *   pass    only match / strengthened / proposed / nondeterministic                       exit 0
+ *
+ * free / impl:code scenarios are ALSO held against their recorded traces (DOS-14.6,
+ * build-trace-conformance.ts): the worse of the Gherkin class and the trace class wins. A
+ * proposed (unapproved) one's trace problems are warnings — it is not locked yet.
+ *
+ * git failing in a checkout that has .git is not "no git": with a lock present the verdict cannot be
+ * built (GitUnavailableError → CLI exit 1, guard `ask`); without one it is only a warning.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const contract_hash_1 = require("./contract-hash");
+const contract_git_1 = require("./contract-git");
+const contract_schema_1 = require("./contract-schema");
+const classify_contract_change_1 = require("./classify-contract-change");
+const build_trace_conformance_1 = require("./build-trace-conformance");
+const classify_contract_unit_1 = require("./classify-contract-unit");
+const contracts_lock_file_1 = require("./contracts-lock-file");
+const lock_vs_git_head_1 = require("./lock-vs-git-head");
+const normalize_feature_steps_1 = require("./normalize-feature-steps");
+const verify_approval_decisions_1 = require("./verify-approval-decisions");
+var classify_contract_unit_2 = require("./classify-contract-unit");
+Object.defineProperty(exports, "classifyUnit", { enumerable: true, get: function () { return classify_contract_unit_2.classifyUnit; } });
+/** Fold a free / impl:code scenario's trace outcome into its Gherkin result: the worse class wins. */
+function withTrace(results, outcomes) {
+    return results.map((r) => {
+        const o = outcomes.get(r.id);
+        if (!o)
+            return r;
+        const cls = (0, classify_contract_change_1.severityOf)(o.class) > (0, classify_contract_change_1.severityOf)(r.class) ? o.class : r.class;
+        return { ...r, class: cls, findings: [...r.findings, ...o.findings], trace: { hashes: o.hashes, runs: o.runs } };
+    });
+}
+function buildContractVerdict(projectRoot, unit, opts = {}) {
+    const snap = opts.snapshot ?? (0, contract_git_1.headSnapshot)(projectRoot, opts.gitTimeoutMs ?? contract_git_1.CLI_GIT_TIMEOUT_MS);
+    const files = (0, normalize_feature_steps_1.contractFeatureFiles)(unit.dir, unit.name);
+    const current = (0, normalize_feature_steps_1.loadContractScenarios)(unit.dir, unit.name);
+    const lockFile = (0, contracts_lock_file_1.lockPathFor)(unit.dir);
+    const lockText = (0, contract_git_1.readTextOrNull)(lockFile);
+    if (snap.error && lockText !== null)
+        throw new contract_git_1.GitUnavailableError(snap.error);
+    const lock = lockText === null ? null : (0, contracts_lock_file_1.parseLockText)(lockText, lockFile);
+    const tampered = new Set(lock?.tampered ?? []);
+    const gherkin = (0, classify_contract_unit_1.classifyUnit)(lock, current, tampered);
+    const traced = (0, build_trace_conformance_1.traceConformanceForUnit)(projectRoot, unit, current, lock, tampered, { budgetMs: opts.traceBudgetMs });
+    const results = withTrace(gherkin.results, traced.outcomes);
+    const warnings = [...gherkin.warnings, ...traced.warnings];
+    const head = (0, lock_vs_git_head_1.compareLockWithHead)(projectRoot, lockFile, lockText, lock, snap);
+    if (head.status === 'no-git') {
+        warnings.push(snap.error
+            ? `git failed (${snap.error}); this unit has no lock, so nothing was compared with git HEAD`
+            : 'not a git checkout with a commit: the lock was not compared with git HEAD (working tree used)');
+    }
+    const uncommitted = head.status === 'compared' ? [...head.uncommitted] : [];
+    for (const id of tampered) {
+        if (!uncommitted.some((u) => u.id === id))
+            uncommitted.push({ id, change: 'tampered', detail: 'its steps no longer hash to its `hash` — edited by hand' });
+    }
+    uncommitted.push(...(0, verify_approval_decisions_1.unverifiedApprovals)(projectRoot, unit.dir, lock, new Set(uncommitted.map((u) => u.id)), snap));
+    const hard = uncommitted.length > 0 || results.some((r) => contract_schema_1.HARD_CLASSES.has(r.class));
+    const verdict = hard ? 'fail' : results.some((r) => contract_schema_1.REVIEW_CLASSES.has(r.class)) ? 'review' : 'pass';
+    const rel = (f) => path.relative(projectRoot, f).split(path.sep).join('/');
+    const inputsHash = (0, contract_hash_1.sha256Hex)((0, contract_hash_1.canonicalJson)({
+        features: files.map((f) => [rel(f), (0, contract_hash_1.sha256Hex)(fs.readFileSync(f, 'utf8'))]),
+        lock: lockText === null ? null : (0, contract_hash_1.sha256Hex)(lockText),
+        head: head.status,
+        uncommitted,
+        ...(traced.inputs === null ? {} : { trace: traced.inputs }),
+    }));
+    const scenarios = results.map((r) => (r.file ? { ...r, file: rel(r.file) } : r));
+    return { schema: 1, unit: unit.name, verdict, exitCode: verdict === 'fail' ? 2 : 0, inputsHash, scenarios, uncommitted, warnings };
+}
+//# sourceMappingURL=build-contract-verdict.js.map

package/dist/contract/build-contract-verdict.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-contract-verdict.js","sourceRoot":"","sources":["../../src/contract/build-contract-verdict.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsEA,oDAqCC;AA3GD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,mDAA2D;AAC3D,iDAAqH;AACrH,uDAAiE;AACjE,yEAAwE;AACxE,uEAAoE;AAEpE,qEAAwD;AACxD,+DAAmE;AACnE,yDAA2E;AAC3E,uEAAwF;AACxF,2EAAkE;AAElE,mEAAwD;AAA/C,sHAAA,YAAY,OAAA;AAwBrB,sGAAsG;AACtG,SAAS,SAAS,CAAC,OAAyB,EAAE,QAAmC;IAC/E,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC;QACjB,MAAM,GAAG,GAAG,IAAA,qCAAU,EAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAA,qCAAU,EAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC1E,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;IACnH,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,oBAAoB,CAAC,WAAmB,EAAE,IAAkB,EAAE,OAAuB,EAAE;IACrG,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAA,2BAAY,EAAC,WAAW,EAAE,IAAI,CAAC,YAAY,IAAI,iCAAkB,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,IAAA,8CAAoB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,IAAA,+CAAqB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAA,iCAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAA,6BAAc,EAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,KAAK,IAAI,QAAQ,KAAK,IAAI;QAAE,MAAM,IAAI,kCAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/E,MAAM,IAAI,GAAG,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,mCAAa,EAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAA,qCAAY,EAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,IAAA,iDAAuB,EAAC,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IACrH,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,CAAC,GAAG,OAAO,CAAC,QAAQ,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAA,sCAAmB,EAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC9E,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACtB,CAAC,CAAC,eAAe,IAAI,CAAC,KAAK,iEAAiE;YAC5F,CAAC,CAAC,+FAA+F,CAAC,CAAC;IACvG,CAAC;IACD,MAAM,WAAW,GAAuB,IAAI,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,KAAK,MAAM,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;YAAE,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,yDAAyD,EAAE,CAAC,CAAC;IAC7J,CAAC;IACD,WAAW,CAAC,IAAI,CAAC,GAAG,IAAA,+CAAmB,EAAC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAEnH,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,MAAM,OAAO,GAAiB,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gCAAc,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IACnH,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3F,MAAM,UAAU,GAAG,IAAA,yBAAS,EAAC,IAAA,6BAAa,EAAC;QACzC,QAAQ,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAA,yBAAS,EAAC,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3E,IAAI,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAA,yBAAS,EAAC,QAAQ,CAAC;QACpD,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,WAAW;QACX,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;KAC5D,CAAC,CAAC,CAAC;IACJ,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AACrI,CAAC"}

package/dist/contract/build-trace-conformance.d.ts

@@ -0,0 +1,18 @@
+import { TraceOutcome } from './classify-trace-conformance';
+import { ContractLock, ContractScenario } from './contract-schema';
+export { OVER_BUDGET } from './trace/collect-trace-evidence';
+export interface UnitTraceConformance {
+    outcomes: Map<string, TraceOutcome>;
+    warnings: string[];
+    inputs: unknown;
+}
+export declare const MOBILE_NOT_SUPPORTED = "trace conformance is web-only: free / impl:code scenarios of a mobile project are not supported yet (not judged)";
+/** The guard path's deadline for the trace part of one unit's verdict (override: SUNGEN_TRACE_VERDICT_BUDGET_MS). */
+export declare function defaultTraceBudgetMs(env?: Record<string, string | undefined>): number;
+export declare function traceConformanceForUnit(projectRoot: string, unit: {
+    name: string;
+    dir: string;
+}, current: ContractScenario[], lock: ContractLock | null, untrusted: ReadonlySet<string>, opts?: {
+    budgetMs?: number;
+}): UnitTraceConformance;
+//# sourceMappingURL=build-trace-conformance.d.ts.map

package/dist/contract/build-trace-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-trace-conformance.d.ts","sourceRoot":"","sources":["../../src/contract/build-trace-conformance.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAgC,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC1F,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA8B,MAAM,mBAAmB,CAAC;AAO/F,OAAO,EAAE,WAAW,EAAE,MAAM,gCAAgC,CAAC;AAM7D,MAAM,WAAW,oBAAoB;IAAG,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,OAAO,CAAA;CAAE;AAMlH,eAAO,MAAM,oBAAoB,qHAAqH,CAAC;AACvJ,qHAAqH;AACrH,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GAAG,MAAM,CAGlG;AAED,wBAAgB,uBAAuB,CACrC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,EAChH,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/D,oBAAoB,CAkDtB"}

package/dist/contract/build-trace-conformance.js

@@ -0,0 +1,153 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MOBILE_NOT_SUPPORTED = exports.OVER_BUDGET = void 0;
+exports.defaultTraceBudgetMs = defaultTraceBudgetMs;
+exports.traceConformanceForUnit = traceConformanceForUnit;
+/**
+ * Trace conformance of one unit, built by code every time (DOS-14.0, 14.6; takumi T3) — the part of
+ * the contract verdict that only free / impl:code scenarios have. Synchronous and read-only, so
+ * `contract check` and the Claude Code delivery guard (both via buildContractVerdict) agree.
+ *
+ *   platform mobile        not supported yet: a warning, nothing judged, exit unaffected
+ *   no free / impl:code    nothing to do (the verdict is byte-identical to the Gherkin-only one)
+ *   otherwise              evidence (run records → reports → final attempts → bound traces) →
+ *                          identities (driver cache or low heuristic) → render → ONE batched
+ *                          fingerprint parse → the ladder
+ *
+ * Bounded (review H4, M2): a deadline (`budgetMs`; the guard's default is ~3 s) — a scenario not
+ * judged in time is `unproven` when approved, a warning while proposed: fail CLOSED. An input that
+ * cannot be read while judging (test-data, a trace) makes that scenario unproven with its reason,
+ * never a thrown verdict. A trace older than the unit's newest `.feature` / lock is refused (stale).
+ */
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const capability_1 = require("../harness/capability");
+const classify_trace_conformance_1 = require("./classify-trace-conformance");
+const contract_schema_1 = require("./contract-schema");
+const contracts_lock_file_1 = require("./contracts-lock-file");
+const data_normalize_1 = require("./data-normalize");
+const normalize_feature_steps_1 = require("./normalize-feature-steps");
+const render_free_gherkin_1 = require("./render-free-gherkin");
+const collect_trace_evidence_1 = require("./trace/collect-trace-evidence");
+var collect_trace_evidence_2 = require("./trace/collect-trace-evidence");
+Object.defineProperty(exports, "OVER_BUDGET", { enumerable: true, get: function () { return collect_trace_evidence_2.OVER_BUDGET; } });
+const identity_cache_1 = require("./trace/identity-cache");
+const trace_identity_resolution_1 = require("./trace/trace-identity-resolution");
+const trace_fingerprint_1 = require("./trace/trace-fingerprint");
+const trace_steps_1 = require("./trace/trace-steps");
+const mtimeMs = (f) => { try {
+    return fs.statSync(f).mtimeMs;
+}
+catch {
+    return 0;
+} };
+const sha = (s) => (0, crypto_1.createHash)('sha256').update(s).digest('hex');
+const why = (e) => (e instanceof Error ? e.message : String(e)).split('\n')[0].slice(0, 300);
+exports.MOBILE_NOT_SUPPORTED = 'trace conformance is web-only: free / impl:code scenarios of a mobile project are not supported yet (not judged)';
+/** The guard path's deadline for the trace part of one unit's verdict (override: SUNGEN_TRACE_VERDICT_BUDGET_MS). */
+function defaultTraceBudgetMs(env = process.env) {
+    const v = Number(env.SUNGEN_TRACE_VERDICT_BUDGET_MS);
+    return Number.isFinite(v) && v > 0 ? v : 3000;
+}
+function traceConformanceForUnit(projectRoot, unit, current, lock, untrusted, opts = {}) {
+    const deadline = Date.now() + (opts.budgetMs ?? defaultTraceBudgetMs());
+    const traced = [...new Map(current.filter((s) => s.implementation !== 'compiled').map((s) => [s.id, s])).values()];
+    if (!traced.length)
+        return { outcomes: new Map(), warnings: [], inputs: null };
+    if (((0, capability_1.readCapabilities)(projectRoot).platform ?? '').toLowerCase() === 'mobile')
+        return { outcomes: new Map(), warnings: [exports.MOBILE_NOT_SUPPORTED], inputs: { platform: 'mobile' } };
+    const approvedEntry = (id) => { const e = lock?.scenarios[id]; return (0, contract_schema_1.isHumanApproved)(e) && !untrusted.has(id) ? e : undefined; };
+    const outcomes = new Map();
+    const warnings = [];
+    let evidence = { runs: new Map(), problems: [], inputs: [] };
+    let index = { byValue: new Map() };
+    let setupError = '';
+    try {
+        const notBefore = Math.max(mtimeMs((0, contracts_lock_file_1.lockPathFor)(unit.dir)), ...(0, normalize_feature_steps_1.contractFeatureFiles)(unit.dir, unit.name).map(mtimeMs));
+        evidence = (0, collect_trace_evidence_1.collectScenarioEvidence)(projectRoot, new Set(traced.map((s) => s.id)), notBefore, deadline);
+        index = (0, data_normalize_1.loadTestDataIndex)(unit.dir, unit.name);
+    }
+    catch (e) {
+        setupError = `trace conformance could not run: ${why(e)}`;
+    }
+    const { cache, problem } = (0, identity_cache_1.readIdentityCache)(projectRoot);
+    warnings.push(...evidence.problems, ...(problem ? [problem] : []));
+    // 1. render every admissible run (deadline checked per scenario), 2. ONE fingerprint parse, 3. ladder.
+    const pending = [];
+    for (const sc of traced) {
+        if (setupError) {
+            outcomes.set(sc.id, (0, classify_trace_conformance_1.notJudged)(sc.id, !!approvedEntry(sc.id), 'unproven', [setupError]));
+            continue;
+        }
+        if (Date.now() > deadline) {
+            outcomes.set(sc.id, (0, classify_trace_conformance_1.notJudged)(sc.id, !!approvedEntry(sc.id), 'unproven', [collect_trace_evidence_1.OVER_BUDGET]));
+            continue;
+        }
+        const runs = evidence.runs.get(sc.id) ?? [];
+        const rendered = new Map();
+        try {
+            for (const run of runs.filter((r) => r.status === 'admissible' && r.trace)) {
+                const steps = (0, trace_steps_1.traceIntentSteps)(run.trace);
+                rendered.set(run, (0, render_free_gherkin_1.renderTraceSteps)(steps, (0, trace_identity_resolution_1.identitiesFor)(run.trace, steps, cache), { index, projectRoot, specFile: run.specFile, secrets: new Set() }));
+            }
+            pending.push({ sc, runs, rendered });
+        }
+        catch (e) {
+            outcomes.set(sc.id, (0, classify_trace_conformance_1.notJudged)(sc.id, !!approvedEntry(sc.id), 'unproven', [`trace conformance failed: ${why(e)}`]));
+        }
+    }
+    const items = pending.flatMap((p) => [...p.rendered.entries()].map(([run, rendered]) => ({ p, run, rendered, implementation: p.sc.implementation })));
+    let fps = [];
+    try {
+        fps = (0, trace_fingerprint_1.fingerprintsOf)(items);
+    }
+    catch (e) {
+        for (const p of pending)
+            outcomes.set(p.sc.id, (0, classify_trace_conformance_1.notJudged)(p.sc.id, !!approvedEntry(p.sc.id), 'unproven', [`trace conformance failed: ${why(e)}`]));
+    }
+    if (fps.length === items.length) {
+        for (const p of pending) {
+            const byRun = new Map(items.map((it, i) => [it, fps[i]]).filter(([it]) => it.p === p).map(([it, fp]) => [it.run, fp]));
+            outcomes.set(p.sc.id, (0, classify_trace_conformance_1.classifyTraceRuns)(p.sc.id, p.sc.implementation, approvedEntry(p.sc.id), p.runs, byRun));
+        }
+    }
+    for (const o of outcomes.values())
+        warnings.push(...o.warnings);
+    const cacheFile = (0, identity_cache_1.identityCachePath)(projectRoot);
+    const traceShas = [...evidence.runs.values()].flat().filter((r) => r.trace).map((r) => r.trace.sha256).sort();
+    return { outcomes, warnings, inputs: { runs: evidence.inputs, traces: traceShas, identities: fs.existsSync(cacheFile) ? sha(fs.readFileSync(cacheFile)) : null } };
+}
+//# sourceMappingURL=build-trace-conformance.js.map

package/dist/contract/build-trace-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"build-trace-conformance.js","sourceRoot":"","sources":["../../src/contract/build-trace-conformance.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyCA,oDAGC;AAED,0DAqDC;AAnGD;;;;;;;;;;;;;;;GAeG;AACH,mCAAoC;AACpC,uCAAyB;AACzB,sDAAyD;AACzD,6EAA0F;AAC1F,uDAA+F;AAC/F,+DAAoD;AACpD,qDAAoE;AACpE,uEAAiE;AACjE,+DAAuE;AACvE,2EAAkH;AAElH,yEAA6D;AAApD,qHAAA,WAAW,OAAA;AACpB,2DAA8E;AAC9E,iFAAkE;AAClE,iEAA6E;AAC7E,qDAAuD;AAIvD,MAAM,OAAO,GAAG,CAAC,CAAS,EAAU,EAAE,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAAC,CAAC;AAAC,MAAM,CAAC;IAAC,OAAO,CAAC,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC;AACtG,MAAM,GAAG,GAAG,CAAC,CAAkB,EAAU,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACzF,MAAM,GAAG,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AAEjG,QAAA,oBAAoB,GAAG,kHAAkH,CAAC;AACvJ,qHAAqH;AACrH,SAAgB,oBAAoB,CAAC,MAA0C,OAAO,CAAC,GAAG;IACxF,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAK,CAAC;AACjD,CAAC;AAED,SAAgB,uBAAuB,CACrC,WAAmB,EAAE,IAAmC,EAAE,OAA2B,EAAE,IAAyB,EAChH,SAA8B,EAAE,OAA8B,EAAE;IAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACxE,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,KAAK,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACnH,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAI,CAAC,IAAA,6BAAgB,EAAC,WAAW,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC,4BAAoB,CAAC,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,CAAC;IAEhL,MAAM,aAAa,GAAG,CAAC,EAAU,EAAyB,EAAE,GAAG,MAAM,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,IAAA,iCAAe,EAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACjK,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAwB,CAAC;IACjD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,QAAQ,GAAqB,EAAE,IAAI,EAAE,IAAI,GAAG,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IAC/E,IAAI,KAAK,GAAkB,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC;IAClD,IAAI,UAAU,GAAG,EAAE,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,IAAA,iCAAW,EAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,IAAA,8CAAoB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACtH,QAAQ,GAAG,IAAA,gDAAuB,EAAC,WAAW,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvG,KAAK,GAAG,IAAA,kCAAiB,EAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAAC,UAAU,GAAG,oCAAoC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAAC,CAAC;IAC1E,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,IAAA,kCAAiB,EAAC,WAAW,CAAC,CAAC;IAC1D,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEnE,uGAAuG;IACvG,MAAM,OAAO,GAA+F,EAAE,CAAC;IAC/G,KAAK,MAAM,EAAE,IAAI,MAAM,EAAE,CAAC;QACxB,IAAI,UAAU,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACtH,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,oCAAW,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAClI,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;QACrD,IAAI,CAAC;YACH,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC3E,MAAM,KAAK,GAAG,IAAA,8BAAgB,EAAC,GAAG,CAAC,KAAM,CAAC,CAAC;gBAC3C,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,IAAA,sCAAgB,EAAC,KAAK,EAAE,IAAA,yCAAa,EAAC,GAAG,CAAC,KAAM,EAAE,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;YAC1J,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IACrI,CAAC;IACD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC;IACtJ,IAAI,GAAG,GAAuB,EAAE,CAAC;IACjC,IAAI,CAAC;QAAC,GAAG,GAAG,IAAA,kCAAc,EAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QAC9C,KAAK,MAAM,CAAC,IAAI,OAAO;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,sCAAS,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,6BAA6B,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACpJ,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAU,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;YAChI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,IAAA,8CAAiB,EAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,cAAc,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAChH,CAAC;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,SAAS,GAAG,IAAA,kCAAiB,EAAC,WAAW,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/G,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACrK,CAAC"}

package/dist/contract/classify-contract-change.d.ts

@@ -0,0 +1,23 @@
+import { ContractScenario, FindingClass, LadderClass, LockEntry, ScenarioClass, TraceClass } from './contract-schema';
+export interface ContractFinding {
+    class: FindingClass;
+    rule?: string;
+    detail: string;
+    step?: number;
+}
+/** What a free / impl:code scenario's traces fingerprinted to (DOS-14.6) — output only. */
+export interface TraceSummary {
+    hashes: string[];
+    runs: string[];
+}
+export interface ScenarioResult {
+    id: string;
+    class: ScenarioClass;
+    findings: ContractFinding[];
+    file?: string;
+    trace?: TraceSummary;
+}
+export declare const severityOf: (c: ScenarioClass) => number;
+export declare const finding: (cls: Exclude<LadderClass, "match"> | TraceClass, detail: string, step?: number) => ContractFinding;
+export declare function classifyScenario(id: string, entry: LockEntry, current: ContractScenario | undefined): ScenarioResult;
+//# sourceMappingURL=classify-contract-change.d.ts.map

package/dist/contract/classify-contract-change.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-change.d.ts","sourceRoot":"","sources":["../../src/contract/classify-contract-change.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,gBAAgB,EAAgB,YAAY,EAAE,WAAW,EAAE,SAAS,EAAW,aAAa,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAG7I,MAAM,WAAW,eAAe;IAAG,KAAK,EAAE,YAAY,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE;AACtG,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE;AAClE,MAAM,WAAW,cAAc;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,YAAY,CAAA;CAAE;AAMtI,eAAO,MAAM,UAAU,GAAI,GAAG,aAAa,KAAG,MAAqB,CAAC;AAEpE,eAAO,MAAM,OAAO,GAAI,KAAK,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,UAAU,EAAE,QAAQ,MAAM,EAAE,OAAO,MAAM,KAAG,eACH,CAAC;AA0CvG,wBAAgB,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,gBAAgB,GAAG,SAAS,GAAG,cAAc,CAkBpH"}

package/dist/contract/classify-contract-change.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.finding = exports.severityOf = void 0;
+exports.classifyScenario = classifyScenario;
+/**
+ * One approved lock entry against the scenario as it reads now → its class on the strength ladder
+ * (DOS-14.4) and the findings behind it.
+ *
+ *   same hash                         match
+ *   assertions, paired in three passes:
+ *     1. identical                    nothing to say
+ *     2. same target (ref + scope)    compareAsserts against the WORST candidate: weakened · strengthened · review
+ *     3. same sentence, other target  target-changed
+ *     left over in the lock           assertion-lost        left over now     strengthened (new check)
+ *   actions changed · implementation retagged · only reordered    hash-changed (review)
+ *
+ * The scenario's class is its most severe finding. A change that produced no finding at all is
+ * still `hash-changed`: equal hashes are the only road to `match`.
+ */
+const contract_hash_1 = require("./contract-hash");
+const contract_schema_1 = require("./contract-schema");
+const oracle_strength_1 = require("./oracle-strength");
+const SEVERITY = {
+    proposed: 0, match: 0, strengthened: 1, nondeterministic: 1, 'hash-changed': 2, opaque: 2, inconclusive: 2,
+    'target-changed': 3, 'oracle-weakened': 3, 'assertion-lost': 3, unproven: 3,
+};
+const severityOf = (c) => SEVERITY[c];
+exports.severityOf = severityOf;
+const finding = (cls, detail, step) => ({ class: cls, ...(contract_schema_1.RULE_OF[cls] ? { rule: contract_schema_1.RULE_OF[cls] } : {}), detail, ...(step ? { step } : {}) });
+exports.finding = finding;
+const asserts = (steps) => steps.map((step, i) => ({ step, at: i + 1 })).filter((x) => x.step.kind === 'assert');
+const targetKey = (s) => s.target ? `${s.target.ref}\u0000${s.target.parent ?? ''}` : `\u0001${s.verb}`;
+const label = (s) => s.target ? `[${s.target.ref}]${s.target.parent ? ` in ${s.target.parent}` : ''}` : `"${s.verb}"`;
+function compareAssertions(locked, current) {
+    const out = [];
+    const was = asserts(locked);
+    const now = asserts(current);
+    const used = new Set();
+    const take = (pred) => {
+        const hit = now.find((c) => !used.has(c.at) && pred(c));
+        if (hit)
+            used.add(hit.at);
+        return hit;
+    };
+    const open = [];
+    for (const l of was)
+        if (!take((c) => (0, contract_hash_1.sameJson)(c.step, l.step)))
+            open.push(l);
+    const unpaired = [];
+    for (const l of open) {
+        const candidates = now.filter((c) => !used.has(c.at) && targetKey(c.step) === targetKey(l.step));
+        if (!candidates.length) {
+            unpaired.push(l);
+            continue;
+        }
+        // The WORST replacement is the one judged: picking the kindest let `see [X]` → `is hidden` +
+        // `is empty` read as strengthened, the inversion hiding behind a harmless extra check.
+        const judged = candidates.map((c) => ({ c, r: (0, oracle_strength_1.compareAsserts)(l.step, c.step) }));
+        const rank = (k) => (k === 'oracle-weakened' ? 2 : k === 'review' ? 1 : 0);
+        const worst = judged.sort((a, b) => rank(b.r.class) - rank(a.r.class))[0];
+        used.add(worst.c.at);
+        const cls = worst.r.class === 'review' ? 'hash-changed' : worst.r.class;
+        out.push((0, exports.finding)(cls, `${label(l.step)}: ${worst.r.detail}`, worst.c.at));
+    }
+    for (const l of unpaired) {
+        const moved = take((c) => c.step.verb === l.step.verb && !!l.step.target && !!c.step.target);
+        out.push(moved
+            ? (0, exports.finding)('target-changed', `the check "${l.step.verb}" moved from ${label(l.step)} to ${label(moved.step)}`, moved.at)
+            : (0, exports.finding)('assertion-lost', `the approved check ${label(l.step)} "${l.step.verb}" (step ${l.at}) is gone`));
+    }
+    for (const c of now)
+        if (!used.has(c.at))
+            out.push((0, exports.finding)('strengthened', `new check ${label(c.step)} "${c.step.verb}"`, c.at));
+    return out;
+}
+function classifyScenario(id, entry, current) {
+    if (!current) {
+        return { id, class: 'assertion-lost', findings: [(0, exports.finding)('assertion-lost', 'the approved scenario is no longer in the feature (removed, its ID changed, or made @manual)')] };
+    }
+    const base = { id, file: current.source.file };
+    if (current.hash === entry.hash)
+        return { ...base, class: 'match', findings: [] };
+    const findings = compareAssertions(entry.steps, current.steps);
+    if (entry.implementation !== current.implementation) {
+        findings.push((0, exports.finding)('hash-changed', `implementation path changed: ${entry.implementation} → ${current.implementation} (retag)`));
+    }
+    const actionsOf = (steps) => steps.filter((s) => s.kind === 'action');
+    if (!(0, contract_hash_1.sameJson)(actionsOf(entry.steps), actionsOf(current.steps)))
+        findings.push((0, exports.finding)('hash-changed', 'the actions changed (what the test does before it checks)'));
+    if (!findings.length)
+        findings.push((0, exports.finding)('hash-changed', 'the steps changed without a weaker or stronger check (e.g. reordered)'));
+    const worst = findings.reduce((acc, f) => {
+        const c = f.class;
+        return (0, exports.severityOf)(c) > (0, exports.severityOf)(acc) ? c : acc;
+    }, 'match');
+    return { ...base, class: worst, findings };
+}
+//# sourceMappingURL=classify-contract-change.js.map

package/dist/contract/classify-contract-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-change.js","sourceRoot":"","sources":["../../src/contract/classify-contract-change.ts"],"names":[],"mappings":";;;AAyEA,4CAkBC;AA3FD;;;;;;;;;;;;;;GAcG;AACH,mDAA2C;AAC3C,uDAA6I;AAC7I,uDAAmD;AAOnD,MAAM,QAAQ,GAAkC;IAC9C,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1G,gBAAgB,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC5E,CAAC;AACK,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAAvD,QAAA,UAAU,cAA6C;AAE7D,MAAM,OAAO,GAAG,CAAC,GAA+C,EAAE,MAAc,EAAE,IAAa,EAAmB,EAAE,CACzH,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,yBAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAD1F,QAAA,OAAO,WACmF;AAGvG,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAa,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC5I,MAAM,SAAS,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9H,MAAM,KAAK,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;AAE5I,SAAS,iBAAiB,CAAC,MAAsB,EAAE,OAAuB;IACxE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,IAA6B,EAAuB,EAAE;QAClE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,wBAAQ,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvD,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAA,gCAAc,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7F,GAAG,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YACvH,CAAC,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,sBAAsB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,aAAa,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,gBAAgB,CAAC,EAAU,EAAE,KAAgB,EAAE,OAAqC;IAClG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,8FAA8F,CAAC,CAAC,EAAE,CAAC;IAChL,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,gCAAgC,KAAK,CAAC,cAAc,MAAM,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACtF,IAAI,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,2DAA2D,CAAC,CAAC,CAAC;IACrK,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,uEAAuE,CAAC,CAAC,CAAC;IACtI,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAsB,CAAC;QACnC,OAAO,IAAA,kBAAU,EAAC,CAAC,CAAC,GAAG,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC"}

package/dist/contract/classify-contract-unit.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Every scenario id of a unit, locked or current, with its ladder class (DOS-14.3, DOS-14.4).
+ *
+ *   approved entry, one current copy      classifyScenario (the ladder)
+ *   approved entry, no current copy       assertion-lost
+ *   approved entry, several copies        assertion-lost — the lock can no longer tell which copy QA
+ *                                         approved, and picking one would let the others hide (M7)
+ *   no approved entry                     proposed (never blocks); a tampered entry counts as none
+ *   Scenario Outline (any lock state)     at least hash-changed: the compiler does not support the
+ *                                         construct, so the contract cannot judge its Examples
+ */
+import { ScenarioResult } from './classify-contract-change';
+import { ContractLock, ContractScenario } from './contract-schema';
+export declare function classifyUnit(lock: ContractLock | null, current: ContractScenario[], untrusted?: ReadonlySet<string>): {
+    results: ScenarioResult[];
+    warnings: string[];
+};
+//# sourceMappingURL=classify-contract-unit.d.ts.map

package/dist/contract/classify-contract-unit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-unit.d.ts","sourceRoot":"","sources":["../../src/contract/classify-contract-unit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAA6B,cAAc,EAAc,MAAM,4BAA4B,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AASpF,wBAAgB,YAAY,CAC1B,IAAI,EAAE,YAAY,GAAG,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,SAAS,GAAE,WAAW,CAAC,MAAM,CAAa,GACjG;IAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAuBnD"}

package/dist/contract/classify-contract-unit.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyUnit = classifyUnit;
+/**
+ * Every scenario id of a unit, locked or current, with its ladder class (DOS-14.3, DOS-14.4).
+ *
+ *   approved entry, one current copy      classifyScenario (the ladder)
+ *   approved entry, no current copy       assertion-lost
+ *   approved entry, several copies        assertion-lost — the lock can no longer tell which copy QA
+ *                                         approved, and picking one would let the others hide (M7)
+ *   no approved entry                     proposed (never blocks); a tampered entry counts as none
+ *   Scenario Outline (any lock state)     at least hash-changed: the compiler does not support the
+ *                                         construct, so the contract cannot judge its Examples
+ */
+const classify_contract_change_1 = require("./classify-contract-change");
+const contract_schema_1 = require("./contract-schema");
+const OUTLINE = 'Scenario Outline is not supported by the compiler — the contract cannot judge its Examples rows; rewrite it as @cases data';
+function withOutlineFinding(r) {
+    const findings = [...r.findings, (0, classify_contract_change_1.finding)('hash-changed', OUTLINE)];
+    return { ...r, class: (0, classify_contract_change_1.severityOf)(r.class) >= (0, classify_contract_change_1.severityOf)('hash-changed') ? r.class : 'hash-changed', findings };
+}
+function classifyUnit(lock, current, untrusted = new Set()) {
+    const groups = new Map();
+    for (const sc of current)
+        groups.set(sc.id, [...(groups.get(sc.id) ?? []), sc]);
+    const approvedIds = Object.entries(lock?.scenarios ?? {}).filter(([id, e]) => (0, contract_schema_1.isHumanApproved)(e) && !untrusted.has(id)).map(([id]) => id);
+    const results = [];
+    const warnings = [];
+    for (const id of [...new Set([...approvedIds, ...groups.keys()])].sort((a, b) => a.localeCompare(b, 'en'))) {
+        const entry = lock?.scenarios[id];
+        const copies = groups.get(id) ?? [];
+        const approved = (0, contract_schema_1.isHumanApproved)(entry) && !untrusted.has(id);
+        let mine;
+        if (!approved) {
+            if (copies.length > 1)
+                warnings.push(`scenario id ${id} is used by ${copies.length} scenarios — give each its own ID before approving`);
+            mine = copies.map((c) => ({ id, class: 'proposed', findings: [], file: c.source.file }));
+        }
+        else if (copies.length > 1) {
+            mine = [{ id, class: 'assertion-lost', file: copies[0].source.file, findings: [(0, classify_contract_change_1.finding)('assertion-lost', `the approved id ${id} is now carried by ${copies.length} scenarios — the lock cannot tell which one QA approved; give each its own ID`)] }];
+        }
+        else {
+            mine = [(0, classify_contract_change_1.classifyScenario)(id, entry, copies[0])];
+        }
+        results.push(...(copies.some((c) => c.source.outline) ? mine.map(withOutlineFinding) : mine));
+    }
+    return { results, warnings };
+}
+//# sourceMappingURL=classify-contract-unit.js.map

package/dist/contract/classify-contract-unit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-unit.js","sourceRoot":"","sources":["../../src/contract/classify-contract-unit.ts"],"names":[],"mappings":";;AAqBA,oCAyBC;AA9CD;;;;;;;;;;GAUG;AACH,yEAAmG;AACnG,uDAAoF;AAEpF,MAAM,OAAO,GAAG,4HAA4H,CAAC;AAE7I,SAAS,kBAAkB,CAAC,CAAiB;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAA,kCAAO,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAA,qCAAU,EAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAA,qCAAU,EAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;AACjH,CAAC;AAED,SAAgB,YAAY,CAC1B,IAAyB,EAAE,OAA2B,EAAE,YAAiC,IAAI,GAAG,EAAE;IAElG,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,KAAK,MAAM,EAAE,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iCAAe,EAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1I,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3G,MAAM,KAAK,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,MAAM,CAAC,MAAM,oDAAoD,CAAC,CAAC;YACxI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,IAAA,kCAAO,EAAC,gBAAgB,EACrG,mBAAmB,EAAE,sBAAsB,MAAM,CAAC,MAAM,+EAA+E,CAAC,CAAC,EAAE,CAAC,CAAC;QACjJ,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,IAAA,2CAAgB,EAAC,EAAE,EAAE,KAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/contract/classify-trace-conformance.d.ts

@@ -0,0 +1,32 @@
+/**
+ * A free / impl:code scenario's traces against its approved lock entry (DOS-14.5 – 14.6) — the SAME
+ * strength ladder as the Gherkin check (DOS-14.4, oracle-strength.ts), fed from the trace fingerprint.
+ *
+ *   free        classifyScenario(lock entry, fingerprint): equal hash → match, else the ladder
+ *   impl:code   group by group: each approved step must be realized inside the `test.step` titled
+ *               with that step — identically (fine), weaker (hard), stronger (strengthened), changed
+ *               (review); an approved check with no group or no check in its group → assertion-lost
+ *   overlays    a step whose target identity is `low` → opaque (review, never match, red-team #4);
+ *               an opaque step → opaque with its verbatim text and file:line (contract.opaque-step)
+ *   runs        no admissible trace → unproven (all inconclusive → inconclusive) when APPROVED, a
+ *               warning while proposed (M5, M6); a trace refused beside an admissible one → a warning;
+ *               several admissible traces that fingerprint differently → nondeterministic (worst wins)
+ */
+import { ContractFinding } from './classify-contract-change';
+import type { Implementation, LockEntry, ScenarioClass } from './contract-schema';
+import type { TraceRun } from './trace/collect-trace-evidence';
+import type { TraceFingerprint } from './trace/trace-fingerprint';
+/** `warnings` never change the verdict: a not-yet-approved scenario's trace problems, unused traces. */
+export interface TraceOutcome {
+    class: ScenarioClass;
+    findings: ContractFinding[];
+    hashes: string[];
+    runs: string[];
+    warnings: string[];
+}
+/** What an unjudgeable scenario becomes: hard when QA locked it (approved), a warning while it is proposed. */
+export declare function notJudged(id: string, approved: boolean, cls: 'unproven' | 'inconclusive', reasons: string[]): TraceOutcome;
+/** How a low target identity opens its finding — `next` reads it to offer `contract check --trace`. */
+export declare const LOW_IDENTITY_FINDING = "target identity is low";
+export declare function classifyTraceRuns(id: string, implementation: Implementation, entry: LockEntry | undefined, runs: TraceRun[], fingerprints: Map<TraceRun, TraceFingerprint>): TraceOutcome;
+//# sourceMappingURL=classify-trace-conformance.d.ts.map

package/dist/contract/classify-trace-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-trace-conformance.d.ts","sourceRoot":"","sources":["../../src/contract/classify-trace-conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAoB,eAAe,EAAuC,MAAM,4BAA4B,CAAC;AAEpH,OAAO,KAAK,EAAgB,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEhG,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE,wGAAwG;AACxG,MAAM,WAAW,YAAY;IAAG,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE;AAEzI,+GAA+G;AAC/G,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,CAI1H;AAED,uGAAuG;AACvG,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AA6D7D,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,GACxI,YAAY,CAoBd"}