@sun-asterisk/sungen 3.2.35 → 3.3.0-alpha.10

package/dist/harness/gates/audit-input-hash.js

@@ -0,0 +1,124 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditInputFiles = auditInputFiles;
+exports.auditInputsHash = auditInputsHash;
+exports.auditInputsChangedReason = auditInputsChangedReason;
+/**
+ * `inputsHash` of an audit (OES-11.4, takumi T3): the hash of what the audit judged plus the
+ * `decisionsHash` it was judged under. A reader recomputes it; any difference means the report no
+ * longer describes the unit, so it counts as never audited.
+ *
+ * It is ANTI-STALENESS, NOT ANTI-FORGERY: anyone who can write audit.json can also compute this hash
+ * (the function is public). It catches a report that outlived its inputs; verdicts built by code and
+ * the git-HEAD checks on decisions are what stand against a forger.
+ *
+ * Inputs — every file whose change can move a verdict:
+ *   the unit's .feature files · requirements/spec.md · requirements/test-viewpoint.md ·
+ *   requirements/flow-contract.yaml · requirements/spec_figma.md · requirements/ui-inventory.md ·
+ *   requirements/ui/* · qa/context.md (intent focus → thresholds) · qa/capabilities.yaml (platform,
+ *   enabled drivers → gate sensors)
+ * and what it reads outside the unit (#927), as the audit reads it — not the files whole, so a
+ * re-audit is asked for only when the verdict can move:
+ *   defects     qa/defects/: the unit's `@known-defect:<id>` tags with no record, and its OPEN records
+ *               with their scenarios (defectLinkInputs — DEFECT-REF-MISSING, DEFECT-ORPHAN)
+ *   flowCredit  a SCREEN's sibling flows: the deep scenarios that can credit a gate theme
+ *               (flowCreditInputs — TQ-4, COVERED-VIA-FLOW); a flow or api unit is never credited
+ * Each is part of the hash only when it holds something, so a project with neither keeps the hash it
+ * had; a report written before #927 in a project with either reads stale once.
+ */
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const decision_identity_1 = require("../../decisions/decision-identity");
+const defects_1 = require("../defects");
+const flow_check_1 = require("../flow-check");
+const intent_1 = require("../intent");
+const unit_paths_1 = require("../unit-paths");
+const sha256 = (s) => (0, crypto_1.createHash)('sha256').update(s).digest('hex');
+function fileSha(file) {
+    try {
+        return sha256(fs.readFileSync(file));
+    }
+    catch {
+        return null;
+    }
+}
+function filesIn(dir) {
+    try {
+        return fs.readdirSync(dir, { withFileTypes: true }).filter((e) => e.isFile()).map((e) => path.join(dir, e.name)).sort();
+    }
+    catch {
+        return [];
+    }
+}
+/** The audit's input files that exist, in a stable order. */
+function auditInputFiles(unitDir, unitName) {
+    const req = path.join(unitDir, 'requirements');
+    const qa = path.join((0, intent_1.projectRootFromScreenDir)(unitDir), 'qa');
+    const candidates = [
+        ...(0, unit_paths_1.featureFilesFor)(unitDir, unitName),
+        ...['spec.md', 'test-viewpoint.md', 'flow-contract.yaml', 'spec_figma.md', 'ui-inventory.md'].map((f) => path.join(req, f)),
+        ...filesIn(path.join(req, 'ui')),
+        path.join(qa, 'context.md'),
+        path.join(qa, 'capabilities.yaml'),
+    ];
+    return candidates.filter((f) => fs.existsSync(f));
+}
+/** What the audit reads outside the unit — each key only when it holds something. */
+function crossUnitInputs(root, unitDir, unitName) {
+    const unitId = (0, unit_paths_1.catalogIdFromScreenDir)(unitDir);
+    const featureText = (0, unit_paths_1.featureFilesFor)(unitDir, unitName).map((f) => { try {
+        return fs.readFileSync(f, 'utf8');
+    }
+    catch {
+        return '';
+    } }).join('\n');
+    const defects = (0, defects_1.defectLinkInputs)(root, unitId, featureText);
+    const flowCredit = (0, unit_paths_1.isScreenUnitId)(unitId) ? (0, flow_check_1.flowCreditInputs)(root) : [];
+    return { ...(defects.missing.length || defects.open.length ? { defects } : {}), ...(flowCredit.length ? { flowCredit } : {}) };
+}
+function auditInputsHash(unitDir, unitName, decisionsHash) {
+    const root = (0, intent_1.projectRootFromScreenDir)(unitDir);
+    const inputs = auditInputFiles(unitDir, unitName)
+        .map((f) => ({ file: path.relative(root, f).split(path.sep).join('/'), sha: fileSha(f) }));
+    return sha256((0, decision_identity_1.canonicalJson)({ schema: 2, inputs, decisionsHash, ...crossUnitInputs(root, unitDir, unitName) }));
+}
+/** The stale reason when the inputsHash moved — it names every kind of input, the ones outside the unit too. */
+function auditInputsChangedReason(unitDir) {
+    const outside = (0, unit_paths_1.isScreenUnitId)((0, unit_paths_1.catalogIdFromScreenDir)(unitDir)) ? 'the defect records and sibling flows it reads' : 'the defect records it reads';
+    return `an input the audit judged (.feature, spec, viewpoint, context, design, or ${outside}) changed since this audit`;
+}
+//# sourceMappingURL=audit-input-hash.js.map

package/dist/harness/gates/audit-input-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-input-hash.js","sourceRoot":"","sources":["../../../src/harness/gates/audit-input-hash.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA6CA,0CAWC;AAWD,0CAKC;AAGD,4DAGC;AA9ED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,mCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAC7B,yEAAkE;AAClE,wCAA8C;AAC9C,8CAAiD;AACjD,sCAAqD;AACrD,8CAAwF;AAExF,MAAM,MAAM,GAAG,CAAC,CAAkB,EAAU,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE5F,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,CAAC;QAAC,OAAO,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACtE,CAAC;AAED,SAAS,OAAO,CAAC,GAAW;IAC1B,IAAI,CAAC;QACH,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1H,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AACxB,CAAC;AAED,6DAA6D;AAC7D,SAAgB,eAAe,CAAC,OAAe,EAAE,QAAgB;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IAC/C,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,IAAA,iCAAwB,EAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG;QACjB,GAAG,IAAA,4BAAe,EAAC,OAAO,EAAE,QAAQ,CAAC;QACrC,GAAG,CAAC,SAAS,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3H,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC;KACnC,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,qFAAqF;AACrF,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe,EAAE,QAAgB;IACtE,MAAM,MAAM,GAAG,IAAA,mCAAsB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,IAAA,4BAAe,EAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClJ,MAAM,OAAO,GAAG,IAAA,0BAAgB,EAAC,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,IAAA,2BAAc,EAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAA,6BAAgB,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACjI,CAAC;AAED,SAAgB,eAAe,CAAC,OAAe,EAAE,QAAgB,EAAE,aAAqB;IACtF,MAAM,IAAI,GAAG,IAAA,iCAAwB,EAAC,OAAO,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,eAAe,CAAC,OAAO,EAAE,QAAQ,CAAC;SAC9C,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7F,OAAO,MAAM,CAAC,IAAA,iCAAa,EAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,GAAG,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;AAClH,CAAC;AAED,gHAAgH;AAChH,SAAgB,wBAAwB,CAAC,OAAe;IACtD,MAAM,OAAO,GAAG,IAAA,2BAAc,EAAC,IAAA,mCAAsB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,+CAA+C,CAAC,CAAC,CAAC,6BAA6B,CAAC;IAClJ,OAAO,6EAA6E,OAAO,4BAA4B,CAAC;AAC1H,CAAC"}

package/dist/harness/gates/audit-report-verification.d.ts

@@ -0,0 +1,43 @@
+export type AuditState = 'absent' | 'verified' | 'stale' | 'invalid';
+export type AuditProblemCode = 'unreadable' | 'unknown-key' | 'bad-type' | 'partial-fields' | 'status-exit-mismatch' | 'unit-unresolved' | 'decisions-changed' | 'inputs-changed' | 'rules-changed' | 'legacy-with-overrides' | 'legacy-unverified' | 'verdict-mismatch';
+export interface AuditVerification {
+    state: AuditState;
+    problems: Array<{
+        code: AuditProblemCode;
+        message: string;
+    }>;
+    /** Caveats on a report that counts. */
+    notes: string[];
+    /** The parsed report — only when it counts (verified). */
+    report: Record<string, unknown> | null;
+    path: string;
+    /** Today's decisionsHash for the unit (what a fresh audit would record). */
+    currentDecisionsHash: string;
+}
+export interface RulesStamp {
+    catalogHash: string | null;
+    rulesHash: string | null;
+}
+/** rulesProblem's answer for a report that records no rules (`provenance.catalogHash` / `rulesHash`): an older sungen wrote it. */
+export declare const NO_RULES_STAMP = "audited by an older sungen, which did not record the rules it scored with";
+/**
+ * Why the rules a report was scored by (`was`) cannot be taken as this sungen's (`now`), or null when
+ * they are the same KNOWN rules. Missing or `unknown` on either side is a problem (fail closed):
+ * unknown == unknown proves nothing.
+ */
+export declare function rulesProblem(was: RulesStamp, now: RulesStamp): string | null;
+type JsonKind = 'string' | 'number' | 'boolean' | 'object' | 'array';
+/** Every top-level key `runAudit` writes (tests/gates/audit-report-trust.run.ts keeps this in step). */
+export declare const AUDIT_REPORT_KEYS: Record<string, JsonKind>;
+export declare function auditReportPath(projectRoot: string, unit: string): string;
+/** Today's decisionsHash for a unit name — what `next` compares an audit with (phase 05). */
+export declare function currentDecisionsHash(projectRoot: string, unit: string): string;
+export declare function verifyAuditReport(projectRoot: string, unit: string): AuditVerification;
+/** Whether the report may be used at all: only a verified one. */
+export declare const auditCounts: (v: AuditVerification) => boolean;
+/** Only an explicit `gateStatus: PASS` on a report that counts passes; a score never does. */
+export declare const auditPassed: (v: AuditVerification) => boolean;
+/** One line saying why the report does not count, for a needs-you item or a blocker. */
+export declare function auditNotCountedReason(v: AuditVerification, unit: string): string;
+export {};
+//# sourceMappingURL=audit-report-verification.d.ts.map

package/dist/harness/gates/audit-report-verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-report-verification.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/audit-report-verification.ts"],"names":[],"mappings":"AAoCA,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,SAAS,CAAC;AACrE,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,aAAa,GAAG,UAAU,GAAG,gBAAgB,GAAG,sBAAsB,GAChH,iBAAiB,GAAG,mBAAmB,GAAG,gBAAgB,GAAG,eAAe,GAAG,uBAAuB,GAAG,mBAAmB,GAAG,kBAAkB,CAAC;AAEtJ,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,gBAAgB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC7D,uCAAuC;IACvC,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AASD,MAAM,WAAW,UAAU;IAAG,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AACpF,mIAAmI;AACnI,eAAO,MAAM,cAAc,8EAA8E,CAAC;AAI1G;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,UAAU,GAAG,MAAM,GAAG,IAAI,CAM5E;AAOD,KAAK,QAAQ,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GAAG,OAAO,CAAC;AAErE,wGAAwG;AACxG,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAOtD,CAAC;AA+BF,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEzE;AAED,6FAA6F;AAC7F,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAI9E;AAED,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,iBAAiB,CA2CtF;AAcD,kEAAkE;AAClE,eAAO,MAAM,WAAW,GAAI,GAAG,iBAAiB,KAAG,OAAiC,CAAC;AAErF,8FAA8F;AAC9F,eAAO,MAAM,WAAW,GAAI,GAAG,iBAAiB,KAAG,OAA4D,CAAC;AAEhH,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAMhF"}

package/dist/harness/gates/audit-report-verification.js

@@ -0,0 +1,241 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.auditPassed = exports.auditCounts = exports.AUDIT_REPORT_KEYS = exports.NO_RULES_STAMP = void 0;
+exports.rulesProblem = rulesProblem;
+exports.auditReportPath = auditReportPath;
+exports.currentDecisionsHash = currentDecisionsHash;
+exports.verifyAuditReport = verifyAuditReport;
+exports.auditNotCountedReason = auditNotCountedReason;
+/**
+ * Reading `audit.json` back without trusting it (takumi T3, DOS-14.0, OES-11.4). The report is an
+ * OUTPUT of `sungen audit`; every reader (journey/gate, delivery, and `next` via this module) checks:
+ *
+ *   schema       a JSON object; only the keys the audit writes; known keys have their type
+ *   status       `gateStatus` is PASS|FAIL and agrees with the integer `exitCode` (0 | 2)
+ *   inputs       `inputsHash` equals the hash of today's inputs + decisions (audit-input-hash.ts)
+ *   decisions    `decisionsHash` equals today's — otherwise the audit is stale: re-audit
+ *   rules        `provenance.catalogHash` and `provenance.rulesHash` are the running sungen's — other
+ *                catalogs or another AUDIT_RULES_VERSION scored it (a 3.2 PASS can be a 3.3 FAIL on the
+ *                same files): stale, re-audit. Missing → stale (fail closed). The package VERSION
+ *                alone is not a reason: a newer sungen with the same rules gives the same verdict (W4)
+ *   verdict      gateStatus re-evaluated from the report's own terms (audit-gate-terms.ts) under the
+ *                overrides in force — a flipped gateStatus + exitCode is `verdict-mismatch` (tester m1)
+ * Anything else counts as NEVER AUDITED, not as clean; only an explicit `gateStatus: PASS` passes.
+ * These checks are anti-STALENESS and anti-casual-tamper, NOT anti-forgery: a writer of audit.json can
+ * recompute the hashes, and one who rewrites every finding, gap and verdict is out of scope here.
+ *
+ * Legacy (DOS-11.4, #933): a report written before these fields existed carries none of exitCode /
+ * inputsHash / decisionsHash / gateOverrides, so nothing in it can vouch for today's inputs. It reads
+ * STALE — one `sungen audit` records a current one. (It used to count while no input file was newer:
+ * a fresh checkout gives every file the checkout's mtime, so that proved nothing and an old PASS was
+ * trusted.) A legacy report claiming a PASS its own fields contradict is invalid. A report carrying
+ * SOME of the fields is malformed.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const resolve_unit_1 = require("../../cli/resolve-unit");
+const unit_paths_1 = require("../unit-paths");
+const provenance_1 = require("../provenance");
+const audit_input_hash_1 = require("./audit-input-hash");
+const audit_gate_verdict_1 = require("./audit-gate-verdict");
+const audit_gate_terms_1 = require("./audit-gate-terms");
+const decisions_hash_1 = require("./decisions-hash");
+const unit_gate_overrides_1 = require("./unit-gate-overrides");
+/** A string field of the report's provenance, or null when it does not say. */
+function provenanceField(r, key) {
+    const v = r.provenance && typeof r.provenance === 'object' ? r.provenance[key] : undefined;
+    return typeof v === 'string' && v ? v : null;
+}
+const writtenBy = (r) => provenanceField(r, 'sungenVersion');
+/** rulesProblem's answer for a report that records no rules (`provenance.catalogHash` / `rulesHash`): an older sungen wrote it. */
+exports.NO_RULES_STAMP = 'audited by an older sungen, which did not record the rules it scored with';
+/** What getProvenance writes when it could not read a catalog — never a match, on either side. */
+const UNKNOWN = 'unknown';
+/**
+ * Why the rules a report was scored by (`was`) cannot be taken as this sungen's (`now`), or null when
+ * they are the same KNOWN rules. Missing or `unknown` on either side is a problem (fail closed):
+ * unknown == unknown proves nothing.
+ */
+function rulesProblem(was, now) {
+    if (!was.catalogHash || !was.rulesHash)
+        return exports.NO_RULES_STAMP;
+    if ([was.catalogHash, was.rulesHash].includes(UNKNOWN))
+        return 'the rules that scored it are unknown (provenance says "unknown")';
+    if (!now.catalogHash || !now.rulesHash || [now.catalogHash, now.rulesHash].includes(UNKNOWN))
+        return 'this sungen cannot read its own rules (catalog or rules hash unknown), so it trusts no report';
+    if (was.catalogHash === now.catalogHash && was.rulesHash === now.rulesHash)
+        return null;
+    return `scored by other rules (catalog ${was.catalogHash} · rules ${was.rulesHash}) than this sungen's (catalog ${now.catalogHash} · rules ${now.rulesHash})`;
+}
+/** Why a current-format report was judged by other rules than this sungen's, or null when the same. */
+function otherRules(r) {
+    return rulesProblem({ catalogHash: provenanceField(r, 'catalogHash'), rulesHash: provenanceField(r, 'rulesHash') }, (0, provenance_1.getProvenance)());
+}
+const OBJ = 'object';
+/** Every top-level key `runAudit` writes (tests/gates/audit-report-trust.run.ts keeps this in step). */
+exports.AUDIT_REPORT_KEYS = {
+    screen: 'string', scenarioCount: 'number', gate: OBJ, depth: OBJ, claim: OBJ, taxonomy: OBJ, balance: OBJ,
+    duplicates: OBJ, trace: OBJ, taxonomyMismatch: 'boolean', reusedScenarioIds: 'array', downstream: OBJ,
+    manualOracle: OBJ, automatableManual: OBJ, flowDepth: OBJ, oracle: OBJ, ledger: OBJ, viewpointBaseline: OBJ,
+    flowQuality: OBJ, flowInventory: OBJ, uiInventory: OBJ, calibration: OBJ, score: OBJ, gateStatus: 'string',
+    findings: 'array', intent: OBJ, provenance: OBJ, spec: OBJ,
+    gateOverrides: 'array', decisionsHash: 'string', inputsHash: 'string', exitCode: 'number', gateSensorError: 'boolean',
+};
+const P0_KEYS = ['exitCode', 'inputsHash', 'decisionsHash', 'gateOverrides', 'gateSensorError'];
+const HASH_RE = /^[0-9a-f]{64}$/;
+const kindOf = (v) => (v === null ? 'null' : Array.isArray(v) ? 'array' : typeof v);
+/** Structural problems of a parsed report, independent of the unit's current inputs. */
+function schemaProblems(r) {
+    const out = [];
+    for (const [k, v] of Object.entries(r)) {
+        const want = exports.AUDIT_REPORT_KEYS[k];
+        if (!want)
+            out.push({ code: 'unknown-key', message: `unknown key "${k}" — the audit never writes it` });
+        else if (kindOf(v) !== want)
+            out.push({ code: 'bad-type', message: `"${k}" must be ${want}, got ${kindOf(v)}` });
+    }
+    if (r.gateStatus !== 'PASS' && r.gateStatus !== 'FAIL')
+        out.push({ code: 'bad-type', message: 'gateStatus must be PASS or FAIL' });
+    if (Array.isArray(r.findings) && !r.findings.every((f) => typeof f === 'string'))
+        out.push({ code: 'bad-type', message: 'findings must be strings' });
+    const present = P0_KEYS.filter((k) => k in r);
+    if (present.length > 0 && present.length < P0_KEYS.length) {
+        out.push({ code: 'partial-fields', message: `carries ${present.join(', ')} but not ${P0_KEYS.filter((k) => !(k in r)).join(', ')}` });
+    }
+    if (present.length === P0_KEYS.length) {
+        if (!Number.isInteger(r.exitCode))
+            out.push({ code: 'bad-type', message: 'exitCode must be an integer' });
+        else if (r.gateStatus === 'PASS' || r.gateStatus === 'FAIL') {
+            if (r.exitCode !== audit_gate_verdict_1.AUDIT_EXIT_CODE[r.gateStatus])
+                out.push({ code: 'status-exit-mismatch', message: `gateStatus ${r.gateStatus} with exitCode ${r.exitCode} — a ${r.gateStatus} audit exits ${audit_gate_verdict_1.AUDIT_EXIT_CODE[r.gateStatus]}` });
+        }
+        for (const k of ['inputsHash', 'decisionsHash'])
+            if (typeof r[k] !== 'string' || !HASH_RE.test(r[k]))
+                out.push({ code: 'bad-type', message: `${k} must be 64 hex characters` });
+        if (Array.isArray(r.gateOverrides) && !r.gateOverrides.every((g) => kindOf(g) === 'object'))
+            out.push({ code: 'bad-type', message: 'gateOverrides must be objects' });
+    }
+    return out;
+}
+function auditReportPath(projectRoot, unit) {
+    return path.join(projectRoot, '.sungen', 'reports', `${(0, unit_paths_1.reportSlug)(unit)}-audit.json`);
+}
+/** Today's decisionsHash for a unit name — what `next` compares an audit with (phase 05). */
+function currentDecisionsHash(projectRoot, unit) {
+    const found = (0, resolve_unit_1.resolveUnitCandidates)(unit, projectRoot);
+    const scope = found.length === 1 ? (0, unit_gate_overrides_1.unitScopeOfDir)(projectRoot, found[0].dir) : null;
+    return (0, unit_gate_overrides_1.loadUnitGateOverrides)(projectRoot, scope).decisionsHash;
+}
+function verifyAuditReport(projectRoot, unit) {
+    const file = auditReportPath(projectRoot, unit);
+    const found = (0, resolve_unit_1.resolveUnitCandidates)(unit, projectRoot);
+    const unitDir = found.length === 1 ? found[0].dir : null;
+    const overrides = (0, unit_gate_overrides_1.loadUnitGateOverrides)(projectRoot, unitDir ? (0, unit_gate_overrides_1.unitScopeOfDir)(projectRoot, unitDir) : null);
+    const current = overrides.decisionsHash;
+    const result = (state, problems, report = null, notes = []) => ({ state, problems, notes, report, path: file, currentDecisionsHash: current });
+    if (!fs.existsSync(file))
+        return result('absent', []);
+    let parsed;
+    try {
+        parsed = JSON.parse(fs.readFileSync(file, 'utf8').replace(/^/, ''));
+    }
+    catch (err) {
+        return result('invalid', [{ code: 'unreadable', message: err instanceof Error ? err.message : String(err) }]);
+    }
+    if (kindOf(parsed) !== 'object')
+        return result('invalid', [{ code: 'unreadable', message: 'not a JSON object' }]);
+    const r = parsed;
+    const schema = schemaProblems(r);
+    if (schema.length)
+        return result('invalid', schema);
+    if (!P0_KEYS.some((k) => k in r)) {
+        // A legacy report predates gateSensorError, so only a stored PASS its own fields contradict is caught.
+        const sources = (0, audit_gate_terms_1.termSourcesOf)(r, false);
+        if (r.gateStatus === 'PASS' && sources && (0, audit_gate_terms_1.recomputeAuditGateStatus)(sources, overrides) === 'FAIL')
+            return result('invalid', [verdictMismatch(r)]);
+        const by = `written by ${writtenBy(r) ? `sungen ${writtenBy(r)}` : 'an earlier sungen'}`;
+        if (current !== decisions_hash_1.EMPTY_DECISIONS_HASH) {
+            return result('stale', [{ code: 'legacy-with-overrides', message: `${by} (no decisionsHash) and a gate-override now applies to this unit` }]);
+        }
+        return result('stale', [{ code: 'legacy-unverified', message: `${by}, before inputsHash existed — its inputs cannot be verified` }]);
+    }
+    const stale = [];
+    const rules = otherRules(r);
+    // A report from before the rules stamp reads in plain words, with the one command that clears it (#966).
+    if (rules)
+        stale.push({ code: 'rules-changed', message: rules === exports.NO_RULES_STAMP
+                ? `audited by an older sungen${writtenBy(r) ? ` (${writtenBy(r)})` : ''} — run \`sungen audit --screen ${unit}\` once`
+                : `${writtenBy(r) ? `written by sungen ${writtenBy(r)}, ` : ''}${rules}` });
+    if (r.decisionsHash !== current)
+        stale.push({ code: 'decisions-changed', message: 'the gate-override decisions changed since this audit' });
+    if (!unitDir)
+        return result('invalid', [{ code: 'unit-unresolved', message: `"${unit}" does not name exactly one unit, so the audit's inputs cannot be checked` }]);
+    if (r.inputsHash !== (0, audit_input_hash_1.auditInputsHash)(unitDir, unit, r.decisionsHash)) {
+        stale.push({ code: 'inputs-changed', message: (0, audit_input_hash_1.auditInputsChangedReason)(unitDir) });
+    }
+    if (stale.length)
+        return result('stale', stale);
+    const tampered = verdictProblem(r, overrides);
+    return tampered ? result('invalid', [tampered]) : result('verified', [], r);
+}
+const verdictMismatch = (r) => ({
+    code: 'verdict-mismatch',
+    message: `verdict mismatch — gateStatus ${String(r.gateStatus)} is not what the report's own findings produce under today's overrides (edited by hand)`,
+});
+/** A current report re-evaluated from its own terms (audit-gate-terms.ts): missing terms or another verdict = not trusted. */
+function verdictProblem(r, overrides) {
+    const sources = (0, audit_gate_terms_1.termSourcesOf)(r, true);
+    if (!sources)
+        return { code: 'bad-type', message: 'the gate terms (gate.gaps, depth/claim/spec verdicts, taxonomyMismatch, gateSensorError, reusedScenarioIds) are incomplete' };
+    return (0, audit_gate_terms_1.recomputeAuditGateStatus)(sources, overrides) === r.gateStatus ? null : verdictMismatch(r);
+}
+/** Whether the report may be used at all: only a verified one. */
+const auditCounts = (v) => v.state === 'verified';
+exports.auditCounts = auditCounts;
+/** Only an explicit `gateStatus: PASS` on a report that counts passes; a score never does. */
+const auditPassed = (v) => (0, exports.auditCounts)(v) && v.report?.gateStatus === 'PASS';
+exports.auditPassed = auditPassed;
+/** One line saying why the report does not count, for a needs-you item or a blocker. */
+function auditNotCountedReason(v, unit) {
+    const why = v.problems.map((p) => p.message).join('; ');
+    const rerun = `re-run \`sungen audit --screen ${unit}\``;
+    if (v.state === 'stale')
+        return `Audit report is stale (${why}) — ${rerun}.`;
+    if (v.state === 'invalid')
+        return `Audit report is not trusted (${why}) — treated as never audited; ${rerun}.`;
+    return `No audit report yet — ${rerun}.`;
+}
+//# sourceMappingURL=audit-report-verification.js.map

package/dist/harness/gates/audit-report-verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit-report-verification.js","sourceRoot":"","sources":["../../../src/harness/gates/audit-report-verification.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsEA,oCAMC;AAgDD,0CAEC;AAGD,oDAIC;AAED,8CA2CC;AAqBD,sDAMC;AA7MD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,yDAA+D;AAC/D,8CAA2C;AAC3C,8CAA8C;AAC9C,yDAA+E;AAC/E,6DAAuD;AACvD,yDAA6E;AAC7E,qDAAwD;AACxD,+DAAiG;AAkBjG,+EAA+E;AAC/E,SAAS,eAAe,CAAC,CAA0B,EAAE,GAAkD;IACrG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAC,CAAC,UAAsC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxH,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/C,CAAC;AACD,MAAM,SAAS,GAAG,CAAC,CAA0B,EAAiB,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;AAGrG,mIAAmI;AACtH,QAAA,cAAc,GAAG,2EAA2E,CAAC;AAC1G,kGAAkG;AAClG,MAAM,OAAO,GAAG,SAAS,CAAC;AAE1B;;;;GAIG;AACH,SAAgB,YAAY,CAAC,GAAe,EAAE,GAAe;IAC3D,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,SAAS;QAAE,OAAO,sBAAc,CAAC;IAC9D,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,kEAAkE,CAAC;IAClI,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,+FAA+F,CAAC;IACrM,IAAI,GAAG,CAAC,WAAW,KAAK,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,KAAK,GAAG,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IACxF,OAAO,kCAAkC,GAAG,CAAC,WAAW,YAAY,GAAG,CAAC,SAAS,iCAAiC,GAAG,CAAC,WAAW,YAAY,GAAG,CAAC,SAAS,GAAG,CAAC;AAChK,CAAC;AAED,uGAAuG;AACvG,SAAS,UAAU,CAAC,CAA0B;IAC5C,OAAO,YAAY,CAAC,EAAE,WAAW,EAAE,eAAe,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC,EAAE,WAAW,CAAC,EAAE,EAAE,IAAA,0BAAa,GAAE,CAAC,CAAC;AACvI,CAAC;AAGD,MAAM,GAAG,GAAG,QAAiB,CAAC;AAC9B,wGAAwG;AAC3F,QAAA,iBAAiB,GAA6B;IACzD,MAAM,EAAE,QAAQ,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG;IACzG,UAAU,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,gBAAgB,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG;IACrG,YAAY,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG;IAC3G,WAAW,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ;IAC1G,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG;IAC1D,aAAa,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS;CACtH,CAAC;AACF,MAAM,OAAO,GAAG,CAAC,UAAU,EAAE,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,iBAAiB,CAAC,CAAC;AAChG,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,MAAM,MAAM,GAAG,CAAC,CAAU,EAAqB,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAa,CAAC,CAAC;AAE5H,wFAAwF;AACxF,SAAS,cAAc,CAAC,CAA0B;IAChD,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,yBAAiB,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,CAAC,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,gBAAgB,CAAC,+BAA+B,EAAE,CAAC,CAAC;aACnG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,IAAI,SAAS,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAC;IACnI,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC;QAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAC;IACtJ,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,WAAW,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,6BAA6B,EAAE,CAAC,CAAC;aACrG,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,EAAE,CAAC;YAC5D,IAAI,CAAC,CAAC,QAAQ,KAAK,oCAAe,CAAC,CAAC,CAAC,UAAU,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,UAAU,kBAAkB,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,UAAU,gBAAgB,oCAAe,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACnO,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,EAAE,eAAe,CAAC;YAAE,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAW,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,4BAA4B,EAAE,CAAC,CAAC;QAC1L,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACxK,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,eAAe,CAAC,WAAmB,EAAE,IAAY;IAC/D,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,IAAA,uBAAU,EAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AACxF,CAAC;AAED,6FAA6F;AAC7F,SAAgB,oBAAoB,CAAC,WAAmB,EAAE,IAAY;IACpE,MAAM,KAAK,GAAG,IAAA,oCAAqB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAA,oCAAc,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACpF,OAAO,IAAA,2CAAqB,EAAC,WAAW,EAAE,KAAK,CAAC,CAAC,aAAa,CAAC;AACjE,CAAC;AAED,SAAgB,iBAAiB,CAAC,WAAmB,EAAE,IAAY;IACjE,MAAM,IAAI,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,IAAA,oCAAqB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;IACzD,MAAM,SAAS,GAAG,IAAA,2CAAqB,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,IAAA,oCAAc,EAAC,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,SAAS,CAAC,aAAa,CAAC;IACxC,MAAM,MAAM,GAAG,CAAC,KAAiB,EAAE,QAAuC,EAAE,SAAyC,IAAI,EAAE,QAAkB,EAAE,EAAqB,EAAE,CACpK,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,CAAC,CAAC;IAElF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACtD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACzF,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAClH,MAAM,CAAC,GAAG,MAAiC,CAAC;IAC5C,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;IACjC,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IAEpD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACjC,uGAAuG;QACvG,MAAM,OAAO,GAAG,IAAA,gCAAa,EAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,CAAC,UAAU,KAAK,MAAM,IAAI,OAAO,IAAI,IAAA,2CAAwB,EAAC,OAAO,EAAE,SAAS,CAAC,KAAK,MAAM;YAAE,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClJ,MAAM,EAAE,GAAG,cAAc,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;QACzF,IAAI,OAAO,KAAK,qCAAoB,EAAE,CAAC;YACrC,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,EAAE,kEAAkE,EAAE,CAAC,CAAC,CAAC;QAChJ,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,6DAA6D,EAAE,CAAC,CAAC,CAAC;IACvI,CAAC;IACD,MAAM,KAAK,GAAkC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,yGAAyG;IACzG,IAAI,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,KAAK,KAAK,sBAAc;gBAC9E,CAAC,CAAC,6BAA6B,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,kCAAkC,IAAI,SAAS;gBACtH,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,qBAAqB,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,CAAC,CAAC,aAAa,KAAK,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,sDAAsD,EAAE,CAAC,CAAC;IAC5I,IAAI,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,IAAI,IAAI,2EAA2E,EAAE,CAAC,CAAC,CAAC;IACpK,IAAI,CAAC,CAAC,UAAU,KAAK,IAAA,kCAAe,EAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,aAAuB,CAAC,EAAE,CAAC;QAC/E,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAA,2CAAwB,EAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,cAAc,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,eAAe,GAAG,CAAC,CAA0B,EAAyC,EAAE,CAAC,CAAC;IAC9F,IAAI,EAAE,kBAAkB;IACxB,OAAO,EAAE,iCAAiC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,yFAAyF;CACxJ,CAAC,CAAC;AAEH,8HAA8H;AAC9H,SAAS,cAAc,CAAC,CAA0B,EAAE,SAA4B;IAC9E,MAAM,OAAO,GAAG,IAAA,gCAAa,EAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,4HAA4H,EAAE,CAAC;IACjL,OAAO,IAAA,2CAAwB,EAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC;AACnG,CAAC;AAED,kEAAkE;AAC3D,MAAM,WAAW,GAAG,CAAC,CAAoB,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC;AAAxE,QAAA,WAAW,eAA6D;AAErF,8FAA8F;AACvF,MAAM,WAAW,GAAG,CAAC,CAAoB,EAAW,EAAE,CAAC,IAAA,mBAAW,EAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,KAAK,MAAM,CAAC;AAAnG,QAAA,WAAW,eAAwF;AAEhH,wFAAwF;AACxF,SAAgB,qBAAqB,CAAC,CAAoB,EAAE,IAAY;IACtE,MAAM,GAAG,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,kCAAkC,IAAI,IAAI,CAAC;IACzD,IAAI,CAAC,CAAC,KAAK,KAAK,OAAO;QAAE,OAAO,0BAA0B,GAAG,OAAO,KAAK,GAAG,CAAC;IAC7E,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,gCAAgC,GAAG,iCAAiC,KAAK,GAAG,CAAC;IAC/G,OAAO,yBAAyB,KAAK,GAAG,CAAC;AAC3C,CAAC"}

package/dist/harness/gates/decisions-hash.d.ts

@@ -0,0 +1,13 @@
+import { DecisionProblem } from '../../decisions/decision-file';
+export interface DecisionsHashItem {
+    path: string;
+    entryHash?: string;
+    problem?: string;
+    contentSha?: string;
+}
+export declare function computeDecisionsHash(items: DecisionsHashItem[]): string;
+/** The hash of a unit with no decision that can touch its gates. */
+export declare const EMPTY_DECISIONS_HASH: string;
+/** A problem file as a hash item: its content counts, so editing it re-stales the audit. */
+export declare function problemHashItem(projectRoot: string, p: DecisionProblem): DecisionsHashItem;
+//# sourceMappingURL=decisions-hash.d.ts.map

package/dist/harness/gates/decisions-hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions-hash.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/decisions-hash.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAEhE,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAID,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,EAAE,GAAG,MAAM,CAGvE;AAED,oEAAoE;AACpE,eAAO,MAAM,oBAAoB,QAA2B,CAAC;AAE7D,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,eAAe,GAAG,iBAAiB,CAI1F"}

package/dist/harness/gates/decisions-hash.js

@@ -0,0 +1,72 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMPTY_DECISIONS_HASH = void 0;
+exports.computeDecisionsHash = computeDecisionsHash;
+exports.problemHashItem = problemHashItem;
+/**
+ * `decisionsHash` (OES-11.4, red-team #12): a fingerprint of the decisions that can change a unit's
+ * gate outcome. The audit records it; `next`, `gate` and `delivery` recompute it — a mismatch means
+ * the audit was measured under other decisions: stale, re-audit.
+ *
+ * What it covers, for one unit — the project's `qa/decisions/` plus the unit's own directory:
+ *   - every `gate-override` entry that can apply to the unit (accepted, ineffective, rejected,
+ *     superseded alike), by path and entry_hash
+ *   - every file there that does not verify (unreadable, invalid, id or hash mismatch), by path,
+ *     problem and content — it may be an override nobody can read
+ * What it does NOT cover: waivers. A waiver is bound to the audit by `evidence_hash = hash of the
+ * audit report`; folding it in here would make every waiver stale the audit that it waives.
+ */
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const decision_identity_1 = require("../../decisions/decision-identity");
+const sha256 = (s) => (0, crypto_1.createHash)('sha256').update(s).digest('hex');
+function computeDecisionsHash(items) {
+    const sorted = [...items].sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    return sha256((0, decision_identity_1.canonicalJson)({ schema: 1, decisions: sorted }));
+}
+/** The hash of a unit with no decision that can touch its gates. */
+exports.EMPTY_DECISIONS_HASH = computeDecisionsHash([]);
+/** A problem file as a hash item: its content counts, so editing it re-stales the audit. */
+function problemHashItem(projectRoot, p) {
+    let contentSha = 'unreadable';
+    try {
+        contentSha = sha256(fs.readFileSync(p.path));
+    }
+    catch { /* gone or unreadable: the marker stands */ }
+    return { path: path.relative(projectRoot, p.path).split(path.sep).join('/'), problem: p.code, contentSha };
+}
+//# sourceMappingURL=decisions-hash.js.map

package/dist/harness/gates/decisions-hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decisions-hash.js","sourceRoot":"","sources":["../../../src/harness/gates/decisions-hash.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4BA,oDAGC;AAMD,0CAIC;AAzCD;;;;;;;;;;;;GAYG;AACH,mCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAC7B,yEAAkE;AAUlE,MAAM,MAAM,GAAG,CAAC,CAAkB,EAAU,EAAE,CAAC,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE5F,SAAgB,oBAAoB,CAAC,KAA0B;IAC7D,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,OAAO,MAAM,CAAC,IAAA,iCAAa,EAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED,oEAAoE;AACvD,QAAA,oBAAoB,GAAG,oBAAoB,CAAC,EAAE,CAAC,CAAC;AAE7D,4FAA4F;AAC5F,SAAgB,eAAe,CAAC,WAAmB,EAAE,CAAkB;IACrE,IAAI,UAAU,GAAG,YAAY,CAAC;IAC9B,IAAI,CAAC;QAAC,UAAU,GAAG,MAAM,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,2CAA2C,CAAC,CAAC;IAC3G,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC;AAC7G,CAAC"}

package/dist/harness/gates/delivery-checklist.d.ts

@@ -0,0 +1,24 @@
+import { UnitKind } from '../script-check';
+import type { InRunAcceptance } from './gate-override-report';
+export type BoxState = 'pass' | 'fail' | 'skipped';
+export interface ChecklistBox {
+    name: string;
+    state: BoxState;
+    evidence: string;
+}
+export interface ChecklistUnit {
+    label: string;
+    unitName: string;
+    unitDir: string;
+    kind: UnitKind;
+    resultsPath: string | null;
+}
+/** Which run the delivered counts come from — and whether the suite moved on since (#942). */
+export declare function resultsBox(projectRoot: string, u: ChecklistUnit): ChecklistBox;
+export declare function triageBox(projectRoot: string, u: ChecklistUnit): ChecklistBox;
+export declare function unitChecklist(projectRoot: string, u: ChecklistUnit, accepted?: InRunAcceptance): Promise<ChecklistBox[]>;
+export declare function renderChecklist(rows: Array<{
+    label: string;
+    boxes: ChecklistBox[];
+}>): string[];
+//# sourceMappingURL=delivery-checklist.d.ts.map

package/dist/harness/gates/delivery-checklist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delivery-checklist.d.ts","sourceRoot":"","sources":["../../../src/harness/gates/delivery-checklist.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAkB,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAG3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAE9D,MAAM,MAAM,QAAQ,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;AACnD,MAAM,WAAW,YAAY;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,QAAQ,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE;AACjF,MAAM,WAAW,aAAa;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE;AA2E/H,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,GAAG,YAAY,CAW9E;AAED,wBAAgB,SAAS,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,GAAG,YAAY,CAkB7E;AAED,wBAAsB,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAE9H;AAID,wBAAgB,eAAe,CAAC,IAAI,EAAE,KAAK,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,YAAY,EAAE,CAAA;CAAE,CAAC,GAAG,MAAM,EAAE,CAQ/F"}