@sun-asterisk/sungen 3.2.35 → 3.3.0-alpha.10

package/dist/contract/contract-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-hash.d.ts","sourceRoot":"","sources":["../../src/contract/contract-hash.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAetE,eAAO,MAAM,aAAa,GAAI,GAAG,OAAO,KAAG,MAAsC,CAAC;AAElF,8CAA8C;AAC9C,eAAO,MAAM,QAAQ,GAAI,GAAG,OAAO,EAAE,GAAG,OAAO,KAAG,OAAgD,CAAC;AAEnG,eAAO,MAAM,SAAS,GAAI,GAAG,MAAM,KAAG,MAAsD,CAAC;AAE7F,wBAAgB,YAAY,CAAC,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,MAAM,CAE1F"}

package/dist/contract/contract-hash.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sha256Hex = exports.sameJson = exports.canonicalJson = void 0;
+exports.contractHash = contractHash;
+/**
+ * Contract hash (DOS-14.2): `sha256-12` of the normalized steps PLUS the implementation path, so
+ * retagging `@free` → none is a contract change (red-team #5).
+ *
+ * Canonical JSON is keys-sorted with absent fields dropped and NO other rewriting: a literal's
+ * whitespace is part of what the test types or expects, so two values that differ only in spaces
+ * hash apart rather than "matching" by normalization.
+ */
+const crypto_1 = require("crypto");
+function canonical(v) {
+    if (Array.isArray(v))
+        return v.map(canonical);
+    if (v && typeof v === 'object') {
+        const out = {};
+        for (const k of Object.keys(v).sort()) {
+            const x = v[k];
+            if (x !== undefined)
+                out[k] = canonical(x);
+        }
+        return out;
+    }
+    return v;
+}
+const canonicalJson = (v) => JSON.stringify(canonical(v));
+exports.canonicalJson = canonicalJson;
+/** Structural equality, key order ignored. */
+const sameJson = (a, b) => (0, exports.canonicalJson)(a) === (0, exports.canonicalJson)(b);
+exports.sameJson = sameJson;
+const sha256Hex = (s) => (0, crypto_1.createHash)('sha256').update(s).digest('hex');
+exports.sha256Hex = sha256Hex;
+function contractHash(implementation, steps) {
+    return (0, exports.sha256Hex)((0, exports.canonicalJson)({ implementation, steps })).slice(0, 12);
+}
+//# sourceMappingURL=contract-hash.js.map

package/dist/contract/contract-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-hash.js","sourceRoot":"","sources":["../../src/contract/contract-hash.ts"],"names":[],"mappings":";;;AA+BA,oCAEC;AAjCD;;;;;;;GAOG;AACH,mCAAoC;AAGpC,SAAS,SAAS,CAAC,CAAU;IAC3B,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC9C,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/B,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACtC,MAAM,CAAC,GAAI,CAA6B,CAAC,CAAC,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,SAAS;gBAAE,GAAG,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAEM,MAAM,aAAa,GAAG,CAAC,CAAU,EAAU,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAArE,QAAA,aAAa,iBAAwD;AAElF,8CAA8C;AACvC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAE,CAAU,EAAW,EAAE,CAAC,IAAA,qBAAa,EAAC,CAAC,CAAC,KAAK,IAAA,qBAAa,EAAC,CAAC,CAAC,CAAC;AAAtF,QAAA,QAAQ,YAA8E;AAE5F,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAAhF,QAAA,SAAS,aAAuE;AAE7F,SAAgB,YAAY,CAAC,cAA8B,EAAE,KAAqB;IAChF,OAAO,IAAA,iBAAS,EAAC,IAAA,qBAAa,EAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC1E,CAAC"}

package/dist/contract/contract-report-file.d.ts

@@ -0,0 +1,4 @@
+import type { ContractVerdict } from './build-contract-verdict';
+export declare const contractReportPath: (projectRoot: string, unit: string) => string;
+export declare function writeContractReport(projectRoot: string, verdict: ContractVerdict): string;
+//# sourceMappingURL=contract-report-file.d.ts.map

package/dist/contract/contract-report-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-report-file.d.ts","sourceRoot":"","sources":["../../src/contract/contract-report-file.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAC;AAEhE,eAAO,MAAM,kBAAkB,GAAI,aAAa,MAAM,EAAE,MAAM,MAAM,KAAG,MACY,CAAC;AAEpF,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,eAAe,GAAG,MAAM,CAMzF"}

package/dist/contract/contract-report-file.js

@@ -0,0 +1,60 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.contractReportPath = void 0;
+exports.writeContractReport = writeContractReport;
+/**
+ * `.sungen/reports/<slug>-contract.json` — the contract verdict as OUTPUT (DOS-14.0, takumi T3).
+ *
+ * Written by `sungen contract check` from a verdict it just built; never read back as a source of
+ * truth. Anything that needs the verdict calls buildContractVerdict() and rebuilds it from the
+ * `.feature`, the lock and git HEAD — so editing this file to "pass" changes nothing, and the next
+ * check overwrites it. It records `inputsHash` so a reader can see the report is stale, and
+ * `exitCode` next to `verdict` (fail ⇔ exitCode ≠ 0).
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const write_atomic_1 = require("../harness/write-atomic");
+const unit_paths_1 = require("../harness/unit-paths");
+const contractReportPath = (projectRoot, unit) => path.join(projectRoot, '.sungen', 'reports', `${(0, unit_paths_1.reportSlug)(unit)}-contract.json`);
+exports.contractReportPath = contractReportPath;
+function writeContractReport(projectRoot, verdict) {
+    const file = (0, exports.contractReportPath)(projectRoot, verdict.unit);
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    const doc = { ...verdict, generatedBy: 'sungen contract check', generatedAt: new Date().toISOString() };
+    (0, write_atomic_1.writeFileAtomic)(file, `${JSON.stringify(doc, null, 2)}\n`);
+    return file;
+}
+//# sourceMappingURL=contract-report-file.js.map

package/dist/contract/contract-report-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-report-file.js","sourceRoot":"","sources":["../../src/contract/contract-report-file.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkBA,kDAMC;AAxBD;;;;;;;;GAQG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,0DAA0D;AAC1D,sDAAmD;AAG5C,MAAM,kBAAkB,GAAG,CAAC,WAAmB,EAAE,IAAY,EAAU,EAAE,CAC9E,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAU,EAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AADvE,QAAA,kBAAkB,sBACqD;AAEpF,SAAgB,mBAAmB,CAAC,WAAmB,EAAE,OAAwB;IAC/E,MAAM,IAAI,GAAG,IAAA,0BAAkB,EAAC,WAAW,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IACxG,IAAA,8BAAe,EAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/contract/contract-schema.d.ts

@@ -0,0 +1,92 @@
+export declare const IMPLEMENTATIONS: readonly ["compiled", "impl:code", "free"];
+export type Implementation = typeof IMPLEMENTATIONS[number];
+export interface ContractTarget {
+    /** The first `[Reference]` of the step, or the data path of an `expect {{x}} …` step. */
+    ref: string;
+    /** Further `[References]` in the order written (`drag [A] to [B]`, `all [Card] contain [Child]`). */
+    also?: string[];
+    /** The `in [Parent] <container>` scope, as `<container> [<Parent>]` plus its `with` tail. */
+    parent?: string;
+    nth?: number;
+}
+export interface ContractStep {
+    kind: 'action' | 'assert';
+    /** The sentence with the actor dropped, refs as `[]`, values as `{}`, lowercased — the step's exact form. */
+    verb: string;
+    target?: ContractTarget;
+    /** An action's input: `{{var}}` kept as written, a literal without its quotes; several joined by ` | `. */
+    value?: string;
+    /** An assertion's check, from the closed vocabulary in oracle-strength.ts (`unknown` when it has none). */
+    matcher?: string;
+    /** An assertion's expected value(s), same form as `value`. */
+    expected?: string;
+    negated?: true;
+    /** The step's data table, header row first. */
+    table?: string[][];
+}
+export interface ContractScenario {
+    id: string;
+    implementation: Implementation;
+    steps: ContractStep[];
+    hash: string;
+    /** Where it was read — never hashed. `outline`: a Scenario Outline, which the compiler does not support. */
+    source: {
+        file: string;
+        name: string;
+        hasId: boolean;
+        lines: number[];
+        outline: boolean;
+    };
+}
+/** A reviewed opaque trace step QA accepted (#923): its 1-based position in the trace's steps and its sha (opaqueStepSha). */
+export interface AcceptedOpaqueStep {
+    step: number;
+    sha: string;
+}
+export interface LockEntry {
+    hash: string;
+    steps: ContractStep[];
+    implementation: Implementation;
+    approvedAt: string;
+    decisionId: string;
+    humanApproved?: true;
+    /** Opaque trace steps a QA accepted on a terminal (`contract approve --accept-opaque`) — vouched for by `decisionId`. */
+    acceptedOpaque?: AcceptedOpaqueStep[];
+}
+/**
+ * One opaque step of a scenario's trace(s), as `contract check` reports it and `--accept-opaque` shows it.
+ * `replaces` (impl:code): the approved step it stands in for — `step 5 "see [Title] heading"`.
+ */
+export interface OpaqueStep {
+    step: number;
+    sha: string;
+    kind: 'action' | 'assert';
+    verbatim: string;
+    where?: string;
+    replaces?: string;
+    accepted: boolean;
+}
+export declare const LOCK_SCHEMA = 1;
+export interface ContractLock {
+    schema: typeof LOCK_SCHEMA;
+    scenarios: Record<string, LockEntry>;
+}
+export type LadderClass = 'match' | 'strengthened' | 'hash-changed' | 'oracle-weakened' | 'target-changed' | 'assertion-lost';
+/** Classes only a trace can produce (DOS-14.6) — free / impl:code scenarios. */
+export type TraceClass = 'opaque' | 'nondeterministic' | 'inconclusive' | 'unproven';
+export type ScenarioClass = LadderClass | 'proposed' | TraceClass;
+export type FindingClass = Exclude<LadderClass, 'match'> | 'lock-uncommitted' | TraceClass;
+/** Exit ≠ 0 (DOS-14.4, DOS-14.6). `unproven` applies to free / impl:code only. */
+export declare const HARD_CLASSES: ReadonlySet<string>;
+/** Exit 0, but delivery waits for QA (DOS-14.4): changed-not-weaker, checks no code can compare, and an
+ *  approved free scenario whose final attempt did not pass (inconclusive — review decision M6). */
+export declare const REVIEW_CLASSES: ReadonlySet<string>;
+/** The catalog rule each class is reported under (gate-rules.yaml); `strengthened` has none. */
+export declare const RULE_OF: Readonly<Partial<Record<FindingClass, string>>>;
+export declare const OPAQUE_SHA_RE: RegExp;
+export declare function stepErrors(s: unknown, at: string): string[];
+/** Errors in one stored lock entry (empty = well-formed). The hash itself is checked by the reader. */
+export declare function lockEntryErrors(raw: unknown, id: string): string[];
+/** Approved by a human on a TTY — and nothing else counts (an absent field is `proposed`, T5). */
+export declare const isHumanApproved: (entry: LockEntry | undefined) => entry is LockEntry;
+//# sourceMappingURL=contract-schema.d.ts.map

package/dist/contract/contract-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-schema.d.ts","sourceRoot":"","sources":["../../src/contract/contract-schema.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,eAAe,4CAA6C,CAAC;AAC1E,MAAM,MAAM,cAAc,GAAG,OAAO,eAAe,CAAC,MAAM,CAAC,CAAC;AAE5D,MAAM,WAAW,cAAc;IAC7B,yFAAyF;IACzF,GAAG,EAAE,MAAM,CAAC;IACZ,qGAAqG;IACrG,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAC1B,6GAA6G;IAC7G,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,2GAA2G;IAC3G,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2GAA2G;IAC3G,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,IAAI,CAAC;IACf,+CAA+C;IAC/C,KAAK,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,cAAc,CAAC;IAC/B,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,4GAA4G;IAC5G,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC;CAC3F;AAED,8HAA8H;AAC9H,MAAM,WAAW,kBAAkB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAEjE,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,cAAc,EAAE,cAAc,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,IAAI,CAAC;IACrB,yHAAyH;IACzH,cAAc,CAAC,EAAE,kBAAkB,EAAE,CAAC;CACvC;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAA;CAAE;AAE5J,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,MAAM,WAAW,YAAY;IAAG,MAAM,EAAE,OAAO,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;CAAE;AAElG,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,cAAc,GAAG,cAAc,GAAG,iBAAiB,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAC9H,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,kBAAkB,GAAG,cAAc,GAAG,UAAU,CAAC;AACrF,MAAM,MAAM,aAAa,GAAG,WAAW,GAAG,UAAU,GAAG,UAAU,CAAC;AAClE,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,GAAG,kBAAkB,GAAG,UAAU,CAAC;AAE3F,kFAAkF;AAClF,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,MAAM,CAAoG,CAAC;AAClJ;mGACmG;AACnG,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAAuD,CAAC;AAEvG,gGAAgG;AAChG,eAAO,MAAM,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAUnE,CAAC;AAOF,eAAO,MAAM,aAAa,QAAmB,CAAC;AAiB9C,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAU3D;AAcD,uGAAuG;AACvG,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,CAgBlE;AAED,kGAAkG;AAClG,eAAO,MAAM,eAAe,GAAI,OAAO,SAAS,GAAG,SAAS,KAAG,KAAK,IAAI,SAA0C,CAAC"}

package/dist/contract/contract-schema.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isHumanApproved = exports.OPAQUE_SHA_RE = exports.RULE_OF = exports.REVIEW_CLASSES = exports.HARD_CLASSES = exports.LOCK_SCHEMA = exports.IMPLEMENTATIONS = void 0;
+exports.stepErrors = stepErrors;
+exports.lockEntryErrors = lockEntryErrors;
+/**
+ * The Test Contract's data model (DOS-14.1 – 14.4) and the strict check of a stored lock entry.
+ *
+ *   step   {kind: action|assert, verb, target?:{ref, also?, parent?, nth?}, value?, matcher?, expected?, negated?, table?}
+ *   lock   qa/<kind>/<unit>/contracts.lock.yaml → {schema: 1, scenarios: {<scenario id>: LockEntry}}
+ *   entry  {hash, steps, implementation, approvedAt, decisionId, humanApproved?, acceptedOpaque?}
+ *
+ * A stored entry is checked the way the decision layer checks its records: a wrong type or an
+ * UNKNOWN key is an error, because a field outside the hash could carry meaning the hash does not
+ * vouch for. `humanApproved` counts only when it is literally `true` (takumi T5).
+ */
+const decision_schema_1 = require("../decisions/decision-schema");
+exports.IMPLEMENTATIONS = ['compiled', 'impl:code', 'free'];
+exports.LOCK_SCHEMA = 1;
+/** Exit ≠ 0 (DOS-14.4, DOS-14.6). `unproven` applies to free / impl:code only. */
+exports.HARD_CLASSES = new Set(['oracle-weakened', 'target-changed', 'assertion-lost', 'lock-uncommitted', 'unproven']);
+/** Exit 0, but delivery waits for QA (DOS-14.4): changed-not-weaker, checks no code can compare, and an
+ *  approved free scenario whose final attempt did not pass (inconclusive — review decision M6). */
+exports.REVIEW_CLASSES = new Set(['hash-changed', 'opaque', 'inconclusive']);
+/** The catalog rule each class is reported under (gate-rules.yaml); `strengthened` has none. */
+exports.RULE_OF = {
+    'hash-changed': 'contract.hash-changed',
+    'oracle-weakened': 'contract.oracle-weakened',
+    'target-changed': 'contract.target-changed',
+    'assertion-lost': 'contract.assertion-lost',
+    'lock-uncommitted': 'contract.lock-uncommitted',
+    opaque: 'contract.opaque-step',
+    nondeterministic: 'contract.nondeterministic',
+    inconclusive: 'contract.inconclusive',
+    unproven: 'contract.unproven',
+};
+const STEP_KEYS = new Set(['kind', 'verb', 'target', 'value', 'matcher', 'expected', 'negated', 'table']);
+const TARGET_KEYS = new Set(['ref', 'also', 'parent', 'nth']);
+const ENTRY_KEYS = new Set(['hash', 'steps', 'implementation', 'approvedAt', 'decisionId', 'humanApproved', 'acceptedOpaque']);
+const ACCEPTED_KEYS = new Set(['step', 'sha']);
+const HASH_RE = /^[0-9a-f]{12}$/;
+exports.OPAQUE_SHA_RE = /^[0-9a-f]{16}$/;
+const isObject = (v) => typeof v === 'object' && v !== null && !Array.isArray(v);
+const isStringList = (v) => Array.isArray(v) && v.every((x) => typeof x === 'string');
+const unknownKeys = (o, allowed, at) => Object.keys(o).filter((k) => !allowed.has(k)).map((k) => `${at}: unknown key "${k}"`);
+function targetErrors(t, at) {
+    if (!isObject(t))
+        return [`${at}: target must be a mapping`];
+    const e = unknownKeys(t, TARGET_KEYS, at);
+    if (typeof t.ref !== 'string')
+        e.push(`${at}: target.ref must be a string`);
+    if (t.also !== undefined && !isStringList(t.also))
+        e.push(`${at}: target.also must be a list of strings`);
+    if (t.parent !== undefined && typeof t.parent !== 'string')
+        e.push(`${at}: target.parent must be a string`);
+    if (t.nth !== undefined && !(Number.isInteger(t.nth) && t.nth > 0))
+        e.push(`${at}: target.nth must be a positive integer`);
+    return e;
+}
+function stepErrors(s, at) {
+    if (!isObject(s))
+        return [`${at}: not a mapping`];
+    const e = unknownKeys(s, STEP_KEYS, at);
+    if (s.kind !== 'action' && s.kind !== 'assert')
+        e.push(`${at}: kind must be action|assert`);
+    if (typeof s.verb !== 'string' || !s.verb)
+        e.push(`${at}: verb is required`);
+    if (s.target !== undefined)
+        e.push(...targetErrors(s.target, at));
+    for (const k of ['value', 'matcher', 'expected'])
+        if (s[k] !== undefined && typeof s[k] !== 'string')
+            e.push(`${at}: ${k} must be a string`);
+    if (s.negated !== undefined && s.negated !== true)
+        e.push(`${at}: negated is either true or absent`);
+    if (s.table !== undefined && !(Array.isArray(s.table) && s.table.every(isStringList)))
+        e.push(`${at}: table must be rows of strings`);
+    return e;
+}
+function acceptedOpaqueErrors(v, at) {
+    if (!Array.isArray(v) || !v.length)
+        return [`${at}: acceptedOpaque must be a non-empty list`];
+    return v.flatMap((a, i) => {
+        const where = `${at} acceptedOpaque ${i + 1}`;
+        if (!isObject(a))
+            return [`${where}: not a mapping`];
+        const e = unknownKeys(a, ACCEPTED_KEYS, where);
+        if (!(Number.isInteger(a.step) && a.step > 0))
+            e.push(`${where}: step must be a positive integer`);
+        if (typeof a.sha !== 'string' || !exports.OPAQUE_SHA_RE.test(a.sha))
+            e.push(`${where}: sha must be 16 hex characters`);
+        return e;
+    });
+}
+/** Errors in one stored lock entry (empty = well-formed). The hash itself is checked by the reader. */
+function lockEntryErrors(raw, id) {
+    const at = `scenario ${id}`;
+    if (!isObject(raw))
+        return [`${at}: not a mapping`];
+    const e = unknownKeys(raw, ENTRY_KEYS, at);
+    if (typeof raw.hash !== 'string' || !HASH_RE.test(raw.hash))
+        e.push(`${at}: hash must be 12 hex characters`);
+    if (!exports.IMPLEMENTATIONS.includes(raw.implementation))
+        e.push(`${at}: implementation must be ${exports.IMPLEMENTATIONS.join('|')}`);
+    if (typeof raw.approvedAt !== 'string' || Number.isNaN(Date.parse(raw.approvedAt)))
+        e.push(`${at}: approvedAt must be an ISO-8601 timestamp`);
+    if (typeof raw.decisionId !== 'string' || !decision_schema_1.DECISION_ID_RE.test(raw.decisionId))
+        e.push(`${at}: decisionId must be D-<16 hex>`);
+    if (raw.humanApproved !== undefined && raw.humanApproved !== true)
+        e.push(`${at}: humanApproved is either true or absent`);
+    if (raw.acceptedOpaque !== undefined) {
+        e.push(...acceptedOpaqueErrors(raw.acceptedOpaque, at));
+        if (raw.humanApproved !== true)
+            e.push(`${at}: acceptedOpaque needs humanApproved: true`);
+    }
+    if (!Array.isArray(raw.steps))
+        e.push(`${at}: steps must be a list`);
+    else
+        raw.steps.forEach((s, i) => e.push(...stepErrors(s, `${at} step ${i + 1}`)));
+    return e;
+}
+/** Approved by a human on a TTY — and nothing else counts (an absent field is `proposed`, T5). */
+const isHumanApproved = (entry) => entry?.humanApproved === true;
+exports.isHumanApproved = isHumanApproved;
+//# sourceMappingURL=contract-schema.js.map

package/dist/contract/contract-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-schema.js","sourceRoot":"","sources":["../../src/contract/contract-schema.ts"],"names":[],"mappings":";;;AAyHA,gCAUC;AAeD,0CAgBC;AAlKD;;;;;;;;;;GAUG;AACH,kEAA8D;AAEjD,QAAA,eAAe,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,MAAM,CAAU,CAAC;AA0D7D,QAAA,WAAW,GAAG,CAAC,CAAC;AAS7B,kFAAkF;AACrE,QAAA,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,UAAU,CAAC,CAAC,CAAC;AAClJ;mGACmG;AACtF,QAAA,cAAc,GAAwB,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AAEvG,gGAAgG;AACnF,QAAA,OAAO,GAAoD;IACtE,cAAc,EAAE,uBAAuB;IACvC,iBAAiB,EAAE,0BAA0B;IAC7C,gBAAgB,EAAE,yBAAyB;IAC3C,gBAAgB,EAAE,yBAAyB;IAC3C,kBAAkB,EAAE,2BAA2B;IAC/C,MAAM,EAAE,sBAAsB;IAC9B,gBAAgB,EAAE,2BAA2B;IAC7C,YAAY,EAAE,uBAAuB;IACrC,QAAQ,EAAE,mBAAmB;CAC9B,CAAC;AAEF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1G,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AAC9D,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAC/H,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAC/C,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACpB,QAAA,aAAa,GAAG,gBAAgB,CAAC;AAE9C,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACxH,MAAM,YAAY,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;AAC9G,MAAM,WAAW,GAAG,CAAC,CAA0B,EAAE,OAAoB,EAAE,EAAU,EAAY,EAAE,CAC7F,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,kBAAkB,CAAC,GAAG,CAAC,CAAC;AAExF,SAAS,YAAY,CAAC,CAAU,EAAE,EAAU;IAC1C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,4BAA4B,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,+BAA+B,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;IAC1G,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAC5G,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAK,CAAC,CAAC,GAAc,GAAG,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,yCAAyC,CAAC,CAAC;IACvI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAgB,UAAU,CAAC,CAAU,EAAE,EAAU;IAC/C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAClD,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,8BAA8B,CAAC,CAAC;IAC5F,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAC7E,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAClE,KAAK,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,UAAU,CAAU;QAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACtJ,IAAI,CAAC,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,oCAAoC,CAAC,CAAC;IACrG,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IACtI,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAU,EAAE,EAAU;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,CAAC,GAAG,EAAE,2CAA2C,CAAC,CAAC;IAC9F,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,KAAK,GAAG,GAAG,EAAE,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,GAAG,KAAK,iBAAiB,CAAC,CAAC;QACrD,MAAM,CAAC,GAAG,WAAW,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;QAC/C,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAK,CAAC,CAAC,IAAe,GAAG,CAAC,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,mCAAmC,CAAC,CAAC;QAC/G,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,qBAAa,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;YAAE,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,iCAAiC,CAAC,CAAC;QAC/G,OAAO,CAAC,CAAC;IACX,CAAC,CAAC,CAAC;AACL,CAAC;AAED,uGAAuG;AACvG,SAAgB,eAAe,CAAC,GAAY,EAAE,EAAU;IACtD,MAAM,EAAE,GAAG,YAAY,EAAE,EAAE,CAAC;IAC5B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IACpD,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC;IAC3C,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAC7G,IAAI,CAAC,uBAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,cAAgC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4BAA4B,uBAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC1I,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;IAC9I,IAAI,OAAO,GAAG,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,gCAAc,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,iCAAiC,CAAC,CAAC;IAC/H,IAAI,GAAG,CAAC,aAAa,KAAK,SAAS,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,0CAA0C,CAAC,CAAC;IAC3H,IAAI,GAAG,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACrC,CAAC,CAAC,IAAI,CAAC,GAAG,oBAAoB,CAAC,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG,CAAC,aAAa,KAAK,IAAI;YAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,4CAA4C,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;;QAChE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,kGAAkG;AAC3F,MAAM,eAAe,GAAG,CAAC,KAA4B,EAAsB,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;AAAtG,QAAA,eAAe,mBAAuF"}

package/dist/contract/contract-units.d.ts

@@ -0,0 +1,12 @@
+export interface ContractUnitRef {
+    name: string;
+    dir: string;
+}
+export declare function allContractUnits(root: string): ContractUnitRef[];
+/** Every unit directory `name` can mean (`pay` matches a flow `pay` and an api flow `flows/pay`). */
+export declare function contractUnitDirsNamed(root: string, name: string): ContractUnitRef[];
+/** The units `sungen delivery <name>` delivers. */
+export declare function deliveryUnitsNamed(root: string, name: string): ContractUnitRef[];
+/** The one unit a contract command names; an unknown or ambiguous name is an error, never a guess. */
+export declare function resolveContractUnit(root: string, name: string): ContractUnitRef;
+//# sourceMappingURL=contract-units.d.ts.map

package/dist/contract/contract-units.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-units.d.ts","sourceRoot":"","sources":["../../src/contract/contract-units.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,eAAe;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE;AAM9D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAQhE;AAED,qGAAqG;AACrG,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAEnF;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,EAAE,CAIhF;AAED,sGAAsG;AACtG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,eAAe,CAK/E"}

package/dist/contract/contract-units.js

@@ -0,0 +1,96 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.allContractUnits = allContractUnits;
+exports.contractUnitDirsNamed = contractUnitDirsNamed;
+exports.deliveryUnitsNamed = deliveryUnitsNamed;
+exports.resolveContractUnit = resolveContractUnit;
+/**
+ * Which units a contract command or a `sungen delivery` call touches — the same units `delivery`
+ * enumerates (cli/commands/delivery.ts `listAllTargets` / `resolveTargetsFromArg`), restated here
+ * so the guard does not load the whole delivery command; a test pins the two enumerations together.
+ *
+ *   every unit       qa/screens/*, qa/flows/*, qa/api/* (not `flows`), and qa/api/flows/* as `flows/<name>`
+ *   a name           EVERY directory it can mean (a screen and a flow of one name are both checked);
+ *                    for delivery only, a name that is no unit falls back to the units hosting a
+ *                    feature file of that basename
+ *
+ * Names come from untrusted input (a Bash command): they are only compared with enumerated directory
+ * names, never joined into a path.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const unit_paths_1 = require("../harness/unit-paths");
+function subdirs(dir) {
+    try {
+        return fs.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => e.name).sort();
+    }
+    catch {
+        return [];
+    }
+}
+function allContractUnits(root) {
+    const qa = path.join(root, 'qa');
+    const out = [];
+    for (const kind of ['screens', 'flows', 'api']) {
+        for (const name of subdirs(path.join(qa, kind)))
+            if (!(kind === 'api' && name === 'flows'))
+                out.push({ name, dir: path.join(qa, kind, name) });
+    }
+    for (const name of subdirs(path.join(qa, 'api', 'flows')))
+        out.push({ name: `flows/${name}`, dir: path.join(qa, 'api', 'flows', name) });
+    return out;
+}
+/** Every unit directory `name` can mean (`pay` matches a flow `pay` and an api flow `flows/pay`). */
+function contractUnitDirsNamed(root, name) {
+    return allContractUnits(root).filter((u) => u.name === name || u.name === `flows/${name}`);
+}
+/** The units `sungen delivery <name>` delivers. */
+function deliveryUnitsNamed(root, name) {
+    const direct = contractUnitDirsNamed(root, name);
+    if (direct.length)
+        return direct;
+    return allContractUnits(root).filter((u) => (0, unit_paths_1.featureFilesFor)(u.dir, u.name).some((f) => path.basename(f, '.feature') === name && fs.existsSync(f)));
+}
+/** The one unit a contract command names; an unknown or ambiguous name is an error, never a guess. */
+function resolveContractUnit(root, name) {
+    const found = contractUnitDirsNamed(root, name);
+    if (found.length === 1)
+        return found[0];
+    if (!found.length)
+        throw new Error(`Not found: qa/screens/${name}, qa/flows/${name}, qa/api/${name} or qa/api/flows/${name}`);
+    throw new Error(`"${name}" names ${found.length} units (${found.map((u) => path.relative(root, u.dir)).join(', ')}) — rename one so the contract knows which`);
+}
+//# sourceMappingURL=contract-units.js.map

package/dist/contract/contract-units.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-units.js","sourceRoot":"","sources":["../../src/contract/contract-units.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBA,4CAQC;AAGD,sDAEC;AAGD,gDAIC;AAGD,kDAKC;AAnDD;;;;;;;;;;;;GAYG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,sDAAwD;AAIxD,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC5I,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACjJ,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;IACzI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,qGAAqG;AACrG,SAAgB,qBAAqB,CAAC,IAAY,EAAE,IAAY;IAC9D,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC;AAC7F,CAAC;AAED,mDAAmD;AACnD,SAAgB,kBAAkB,CAAC,IAAY,EAAE,IAAY;IAC3D,MAAM,MAAM,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC;IACjC,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,4BAAe,EAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,IAAI,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrJ,CAAC;AAED,sGAAsG;AACtG,SAAgB,mBAAmB,CAAC,IAAY,EAAE,IAAY;IAC5D,MAAM,KAAK,GAAG,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACxC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,cAAc,IAAI,YAAY,IAAI,oBAAoB,IAAI,EAAE,CAAC,CAAC;IAC9H,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,WAAW,KAAK,CAAC,MAAM,WAAW,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;AACjK,CAAC"}

package/dist/contract/contracts-lock-file.d.ts

@@ -0,0 +1,24 @@
+import { ContractLock, ContractScenario, LockEntry } from './contract-schema';
+export declare const LOCK_FILE_NAME = "contracts.lock.yaml";
+export declare const lockPathFor: (unitDir: string) => string;
+export declare class ContractLockError extends Error {
+    readonly source: string;
+    readonly problems: string[];
+    constructor(source: string, problems: string[]);
+}
+/**
+ * A lock as read. `tampered`: well-formed entries whose steps no longer hash to their `hash` — edited
+ * by hand. They are not a read error: they are a hard finding (`contract.lock-uncommitted`), so the
+ * delivery guard denies instead of asking.
+ */
+export interface ReadLock extends ContractLock {
+    tampered: string[];
+}
+export declare function parseLockText(text: string, source: string): ReadLock;
+/** The lock at `file`, or null when there is none. Throws ContractLockError when it cannot be read as a lock. */
+export declare function readLockFile(file: string): ReadLock | null;
+export declare function serializeLock(lock: ContractLock): string;
+export declare function writeLockFile(file: string, lock: ContractLock): void;
+/** The entry a TTY approval writes for one scenario. Only the approve path sets `humanApproved`. */
+export declare function lockEntryFor(sc: ContractScenario, decisionId: string, approvedAt: string): LockEntry;
+//# sourceMappingURL=contracts-lock-file.d.ts.map

package/dist/contract/contracts-lock-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contracts-lock-file.d.ts","sourceRoot":"","sources":["../../src/contract/contracts-lock-file.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAA6B,SAAS,EAAmB,MAAM,mBAAmB,CAAC;AAE1H,eAAO,MAAM,cAAc,wBAAwB,CAAC;AACpD,eAAO,MAAM,WAAW,GAAI,SAAS,MAAM,KAAG,MAA4C,CAAC;AAK3F,qBAAa,iBAAkB,SAAQ,KAAK;aACd,MAAM,EAAE,MAAM;aAAkB,QAAQ,EAAE,MAAM,EAAE;gBAAlD,MAAM,EAAE,MAAM,EAAkB,QAAQ,EAAE,MAAM,EAAE;CAI/E;AAID;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,YAAY;IAAG,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE;AAErE,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,QAAQ,CAiBpE;AAED,iHAAiH;AACjH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CAO1D;AASD,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,MAAM,CAYxD;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,IAAI,CAGpE;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS,CAEpG"}