@sun-asterisk/sungen 3.2.35 → 3.3.0-alpha.10

package/dist/cli/commands/contract.js

@@ -0,0 +1,195 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerContractCommand = registerContractCommand;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const approve_contract_1 = require("../../contract/approve-contract");
+const build_contract_verdict_1 = require("../../contract/build-contract-verdict");
+const classify_trace_conformance_1 = require("../../contract/classify-trace-conformance");
+const contract_report_file_1 = require("../../contract/contract-report-file");
+const contract_schema_1 = require("../../contract/contract-schema");
+const human_confirmation_1 = require("../../decisions/human-confirmation");
+const contract_units_1 = require("../../contract/contract-units");
+const field_semantic_redaction_1 = require("../../contract/field-semantic-redaction");
+const resolve_unit_trace_identities_1 = require("../../contract/resolve-unit-trace-identities");
+const contract_derive_command_1 = require("./contract-derive-command");
+const project_sungen_invocation_1 = require("../project-sungen-invocation");
+const MARK = {
+    match: '✓', strengthened: '↑', proposed: '+', 'hash-changed': '⚖', 'oracle-weakened': '✗', 'target-changed': '✗', 'assertion-lost': '✗',
+    opaque: '◐', nondeterministic: '≈', inconclusive: '?', unproven: '✗',
+};
+/** `contract check` judges traces with a generous deadline (the guard path keeps ~3 s). */
+const CHECK_TRACE_BUDGET_MS = 120000;
+const UNPROVEN_HINT = "    → free / impl:code tests need their own config (outputDir 'test-results-free', trace: 'on', the sungen run-record reporter), then a fresh run (see `sungen contract derive`).";
+/** The command that recompiles a unit's spec — `sungen generate --screen|--flow|--api <unit>`. */
+function generateCommand(unit) {
+    const kind = path.relative(path.join(process.cwd(), 'qa'), unit.dir).split(path.sep)[0];
+    return `sungen generate --${kind === 'flows' ? 'flow' : kind === 'api' ? 'api' : 'screen'} ${unit.name}`;
+}
+function printVerdict(v, reportFile, generate) {
+    // The approve / --accept-opaque / generate lines as this project runs sungen (#963).
+    const L = (line) => console.log((0, project_sungen_invocation_1.withProjectInvocationInText)(line, process.cwd()));
+    const head = v.verdict === 'pass' ? '✓ PASS' : v.verdict === 'review'
+        ? '⚖ REVIEW — changed, not weaker. Exit 0 here, but review blocks `sungen delivery` until QA re-approves' : '✗ FAIL';
+    L('');
+    L(`━━━ Contract check: ${v.unit} — Gherkin vs the approved lock ━━━`);
+    L('');
+    L(`  verdict: ${head}`);
+    const matched = v.scenarios.filter((s) => s.class === 'match').length;
+    for (const s of v.scenarios.filter((x) => x.class !== 'match')) {
+        L(`  ${MARK[s.class] ?? '?'} ${s.id}  ${s.class}${s.class === 'proposed' ? ' (no approved entry — does not block)' : ''}`);
+        for (const f of s.findings)
+            L(`      ${f.rule ? `[${f.rule}] ` : ''}${f.step ? `step ${f.step}: ` : ''}${f.detail}`);
+        if (s.trace?.hashes.length)
+            L(`      trace: ${[...new Set(s.trace.hashes)].join(', ')} (${s.trace.runs.length} run(s))`);
+        if (s.class === 'unproven')
+            L(UNPROVEN_HINT);
+    }
+    if (matched)
+        L(`  ✓ ${matched} scenario(s) match the approved contract`);
+    const issue = (u) => u.change === 'tampered' || u.change === 'unverified' ? `lock entry ${u.change}: ${u.detail}` : `lock entry ${u.change} and not committed`;
+    for (const u of v.uncommitted.slice(0, 10))
+        L(`  ✗ ${u.id}  ${issue(u)}  [contract.lock-uncommitted]`);
+    if (v.uncommitted.length > 10)
+        L(`  ✗ … and ${v.uncommitted.length - 10} more lock entries that are not what QA approved and committed`);
+    for (const w of v.warnings)
+        L(`  ⚠ ${w}`);
+    L('');
+    // Only missing / refused traces: re-approving cannot help, a fresh traced run can.
+    const blocking = v.scenarios.filter((s) => contract_schema_1.HARD_CLASSES.has(s.class) || contract_schema_1.REVIEW_CLASSES.has(s.class));
+    const onlyUnproven = blocking.length > 0 && blocking.every((s) => s.class === 'unproven');
+    if (v.verdict === 'fail') {
+        L(v.uncommitted.length
+            ? '  → Commit the approval (lock + decision) through review, or restore the lock from git (`git checkout -- <lock>`).'
+            : onlyUnproven ? "  → Re-run the free / impl:code tests with trace: 'on', then check again."
+                : '  → Restore the approved checks in the .feature — or, if the change is intended, QA approves it on a terminal:');
+    }
+    // An opaque step is not cleared by re-approving (#923): QA reviews it, then accepts it as it reads now.
+    const acceptable = blocking.filter((s) => s.class === 'opaque' && s.trace?.opaque?.some((o) => !o.accepted)
+        && !s.findings.some((f) => f.detail.startsWith(classify_trace_conformance_1.LOW_IDENTITY_FINDING)));
+    if (v.verdict !== 'pass' && !v.uncommitted.length && !onlyUnproven && acceptable.length < blocking.length)
+        L(`    sungen contract approve --screen ${v.unit}`);
+    for (const s of acceptable) {
+        L(`  → ${s.id}: QA reviews each opaque step above (verbatim, file:line); to accept them as they read now, on a terminal:`);
+        L(`    sungen contract approve --screen ${v.unit} --scenario ${s.id} --accept-opaque`);
+    }
+    // A weakened compiled scenario also leaves its spec out of step (#943): name the command that fixes the drift.
+    // (A free / impl:code scenario carries a trace summary; its test is hand-written, never regenerated.)
+    if (v.verdict === 'fail' && !v.uncommitted.length && v.scenarios.some((s) => !s.trace && contract_schema_1.HARD_CLASSES.has(s.class))) {
+        L(`  → After fixing the scenario, run \`${generate}\`: until the compiled spec is regenerated, \`sungen script-check\` reports drift.`);
+    }
+    L(`  Report: ${path.relative(process.cwd(), reportFile)}`);
+    L('');
+}
+function unitOrThrow(name) {
+    if (!name)
+        throw new Error('Provide --screen <name>');
+    return (0, contract_units_1.resolveContractUnit)(process.cwd(), name);
+}
+function registerContractCommand(program) {
+    const contract = program
+        .command('contract')
+        .description('Test Contract (DOS-14): the Gherkin QA approved is the contract — lock it (TTY) and check the .feature was not weakened');
+    contract
+        .command('approve')
+        .description('Lock the current Gherkin as the approved contract — a human types a confirmation on a TTY')
+        .option('-s, --screen <name>', 'Screen / flow / api unit name')
+        .option('--scenario <id>', 'Approve one scenario only (its ID, e.g. VP-LOGIN-001)')
+        .option('--reason <text>', 'Why (recorded in the contract-approval decision)')
+        .option('--accept-opaque', 'With --scenario: accept the reviewed opaque trace step(s) of one approved free / impl:code scenario')
+        .action(async (options) => {
+        try {
+            const unit = unitOrThrow(options.screen);
+            const r = await (0, approve_contract_1.approveContract)({
+                projectRoot: process.cwd(), unit: unit.name, scenario: options.scenario, reason: options.reason, acceptOpaque: options.acceptOpaque === true, io: (0, human_confirmation_1.processIO)(),
+            });
+            if (r.status === 'nothing-to-approve') {
+                console.log(`\n= Nothing to approve: every chosen scenario of ${unit.name} already matches its approved lock entry.\n`);
+                return;
+            }
+            if (r.status === 'nothing-to-accept') {
+                console.log(`\n= Nothing to accept: every opaque step of ${options.scenario} is already accepted as it reads now.\n`);
+                return;
+            }
+            if (r.status === 'accepted') {
+                console.log(`\n✓ Accepted ${r.accepted?.length ?? 0} opaque step(s) of ${options.scenario} → ${path.relative(process.cwd(), r.lockPath)} (decision ${r.decisionId})`);
+                console.log('  Commit the lock and the decision through review, then re-run the free test with its trace: a trace older than the lock proves nothing.\n');
+                return;
+            }
+            console.log(`\n✓ Approved ${r.approved.length} scenario(s)${r.removed.length ? `, removed ${r.removed.length}` : ''} → ${path.relative(process.cwd(), r.lockPath)} (decision ${r.decisionId})`);
+            console.log('  Commit the lock and the decision through review: until they are in git HEAD, `sungen contract check` reports contract.lock-uncommitted.\n');
+        }
+        catch (error) {
+            // A refusal names the command a human runs instead: as this project runs sungen (#963).
+            console.error('Error:', error instanceof Error ? (0, project_sungen_invocation_1.withProjectInvocationInText)(error.message, process.cwd()) : error);
+            process.exit(1);
+        }
+    });
+    contract
+        .command('check')
+        .description('Compare the .feature with the approved lock on the strength ladder, and the lock with git HEAD')
+        .option('-s, --screen <name>', 'Screen / flow / api unit name')
+        .option('--trace', 'Resolve free / impl:code trace target identities with @sungen/driver-ui (a real browser) first')
+        .option('--json', 'Output the verdict as JSON')
+        .action(async (options) => {
+        let unit;
+        try {
+            unit = unitOrThrow(options.screen);
+            const notes = options.trace ? await (0, resolve_unit_trace_identities_1.resolveUnitTraceIdentities)(process.cwd(), unit) : [];
+            // The CLI may take its time; the guard (contractBlockers) keeps the ~3 s default.
+            const verdict = (0, build_contract_verdict_1.buildContractVerdict)(process.cwd(), unit, { traceBudgetMs: CHECK_TRACE_BUDGET_MS });
+            verdict.warnings.push(...notes);
+            const hits = (0, field_semantic_redaction_1.secretScanHits)(JSON.stringify(verdict, null, 2), `${unit.name}-contract.json`);
+            if (hits.length)
+                throw new Error(`Refused to write the contract report — likely secret(s): ${hits.map((h) => `${h.where} ${h.reason}`).join('; ')}`);
+            const file = (0, contract_report_file_1.writeContractReport)(process.cwd(), verdict);
+            if (options.json)
+                console.log(JSON.stringify(verdict, null, 2));
+            else
+                printVerdict(verdict, file, generateCommand(unit));
+            process.exit(verdict.exitCode);
+        }
+        catch (error) {
+            // Unreadable = not run (DOS-14.0): an earlier report must not outlive the inputs it judged.
+            if (unit)
+                fs.rmSync((0, contract_report_file_1.contractReportPath)(process.cwd(), unit.name), { force: true });
+            console.error('Error:', error instanceof Error ? error.message : error);
+            process.exit(1);
+        }
+    });
+    (0, contract_derive_command_1.registerDeriveCommand)(contract);
+}
+//# sourceMappingURL=contract.js.map

package/dist/cli/commands/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../src/cli/commands/contract.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAoGA,0DA+DC;AAjJD,uCAAyB;AACzB,2CAA6B;AAC7B,sEAAkE;AAClE,kFAA8F;AAC9F,0FAAiF;AACjF,8EAA8F;AAC9F,oEAA8E;AAC9E,2EAA+D;AAC/D,kEAAoE;AACpE,sFAAyE;AACzE,gGAA0F;AAC1F,uEAAkE;AAClE,4EAA2E;AAE3E,MAAM,IAAI,GAA2B;IACnC,KAAK,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG;IACvI,MAAM,EAAE,GAAG,EAAE,gBAAgB,EAAE,GAAG,EAAE,YAAY,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG;CACrE,CAAC;AACF,2FAA2F;AAC3F,MAAM,qBAAqB,GAAG,MAAO,CAAC;AACtC,MAAM,aAAa,GAAG,mLAAmL,CAAC;AAE1M,kGAAkG;AAClG,SAAS,eAAe,CAAC,IAAmC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,OAAO,qBAAqB,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;AAC3G,CAAC;AAED,SAAS,YAAY,CAAC,CAAkB,EAAE,UAAkB,EAAE,QAAgB;IAC5E,qFAAqF;IACrF,MAAM,CAAC,GAAG,CAAC,IAAY,EAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAA,uDAA2B,EAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ;QACnE,CAAC,CAAC,uGAAuG,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvH,CAAC,CAAC,EAAE,CAAC,CAAC;IACN,CAAC,CAAC,uBAAuB,CAAC,CAAC,IAAI,qCAAqC,CAAC,CAAC;IACtE,CAAC,CAAC,EAAE,CAAC,CAAC;IACN,CAAC,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;IACxB,MAAM,OAAO,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,MAAM,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,OAAO,CAAC,EAAE,CAAC;QAC/D,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3H,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;YAAE,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACrH,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM;YAAE,CAAC,CAAC,gBAAgB,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;QACzH,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU;YAAE,CAAC,CAAC,aAAa,CAAC,CAAC;IAC/C,CAAC;IACD,IAAI,OAAO;QAAE,CAAC,CAAC,OAAO,OAAO,0CAA0C,CAAC,CAAC;IACzE,MAAM,KAAK,GAAG,CAAC,CAAyC,EAAU,EAAE,CAClE,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,MAAM,oBAAoB,CAAC;IAC5I,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC;IACvG,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE;QAAE,CAAC,CAAC,aAAa,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,EAAE,gEAAgE,CAAC,CAAC;IACzI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ;QAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,EAAE,CAAC,CAAC;IACN,mFAAmF;IACnF,MAAM,QAAQ,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,8BAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,gCAAc,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACrG,MAAM,YAAY,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,UAAU,CAAC,CAAC;IAC1F,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QACzB,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM;YACpB,CAAC,CAAC,oHAAoH;YACtH,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,2EAA2E;gBAC1F,CAAC,CAAC,gHAAgH,CAAC,CAAC;IAC1H,CAAC;IACD,wGAAwG;IACxG,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;WACtG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,iDAAoB,CAAC,CAAC,CAAC,CAAC;IACzE,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM;QAAE,CAAC,CAAC,wCAAwC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/J,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,4GAA4G,CAAC,CAAC;QAC3H,CAAC,CAAC,wCAAwC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;IACzF,CAAC;IACD,+GAA+G;IAC/G,sGAAsG;IACtG,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,IAAI,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,8BAAY,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QACpH,CAAC,CAAC,wCAAwC,QAAQ,oFAAoF,CAAC,CAAC;IAC1I,CAAC;IACD,CAAC,CAAC,aAAa,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,EAAE,CAAC,CAAC;AACR,CAAC;AAED,SAAS,WAAW,CAAC,IAAwB;IAC3C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACtD,OAAO,IAAA,oCAAmB,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED,SAAgB,uBAAuB,CAAC,OAAgB;IACtD,MAAM,QAAQ,GAAG,OAAO;SACrB,OAAO,CAAC,UAAU,CAAC;SACnB,WAAW,CAAC,yHAAyH,CAAC,CAAC;IAE1I,QAAQ;SACL,OAAO,CAAC,SAAS,CAAC;SAClB,WAAW,CAAC,2FAA2F,CAAC;SACxG,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;SAC9D,MAAM,CAAC,iBAAiB,EAAE,uDAAuD,CAAC;SAClF,MAAM,CAAC,iBAAiB,EAAE,kDAAkD,CAAC;SAC7E,MAAM,CAAC,iBAAiB,EAAE,qGAAqG,CAAC;SAChI,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACzC,MAAM,CAAC,GAAG,MAAM,IAAA,kCAAe,EAAC;gBAC9B,WAAW,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,EAAE,EAAE,IAAA,8BAAS,GAAE;aAC9J,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,oDAAoD,IAAI,CAAC,IAAI,6CAA6C,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC3K,IAAI,CAAC,CAAC,MAAM,KAAK,mBAAmB,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,+CAA+C,OAAO,CAAC,QAAQ,yCAAyC,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxK,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;gBAC5B,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,EAAE,MAAM,IAAI,CAAC,sBAAsB,OAAO,CAAC,QAAQ,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;gBACtK,OAAO,CAAC,GAAG,CAAC,4IAA4I,CAAC,CAAC;gBAC1J,OAAO;YACT,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAChM,OAAO,CAAC,GAAG,CAAC,6IAA6I,CAAC,CAAC;QAC7J,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,wFAAwF;YACxF,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,IAAA,uDAA2B,EAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACpH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,OAAO,CAAC;SAChB,WAAW,CAAC,gGAAgG,CAAC;SAC7G,MAAM,CAAC,qBAAqB,EAAE,+BAA+B,CAAC;SAC9D,MAAM,CAAC,SAAS,EAAE,gGAAgG,CAAC;SACnH,MAAM,CAAC,QAAQ,EAAE,4BAA4B,CAAC;SAC9C,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;QACxB,IAAI,IAA+C,CAAC;QACpD,IAAI,CAAC;YACH,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACnC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAA,0DAA0B,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,kFAAkF;YAClF,MAAM,OAAO,GAAG,IAAA,6CAAoB,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,qBAAqB,EAAE,CAAC,CAAC;YACpG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,CAAC;YAChC,MAAM,IAAI,GAAG,IAAA,yCAAc,EAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC;YAC5F,IAAI,IAAI,CAAC,MAAM;gBAAE,MAAM,IAAI,KAAK,CAAC,4DAA4D,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACrJ,MAAM,IAAI,GAAG,IAAA,0CAAmB,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;YACzD,IAAI,OAAO,CAAC,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;;gBAC3D,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,4FAA4F;YAC5F,IAAI,IAAI;gBAAE,EAAE,CAAC,MAAM,CAAC,IAAA,yCAAkB,EAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACxE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,IAAA,+CAAqB,EAAC,QAAQ,CAAC,CAAC;AAClC,CAAC"}

package/dist/cli/commands/delivery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/delivery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuBpC,OAAO,EAAmB,cAAc,EAA+C,MAAM,uBAAuB,CAAC;AAErH,OAAO,EACL,iBAAiB,EAOlB,MAAM,+BAA+B,CAAC;AAwBvC;;;;;;;;;;GAUG;AACH,KAAK,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAI1C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,0EAA0E;IAC1E,MAAM,EAAE,OAAO,CAAC;CACjB;AAyBD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,EAAE,CAqB5D;AA2FD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,cAAc,CA6DhF;AAqDD,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAO7D;AA4SD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAgBrF;AA+OD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgL9D"}
+{"version":3,"file":"delivery.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/delivery.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,OAAO,EAAmB,cAAc,EAA+C,MAAM,uBAAuB,CAAC;AAErH,OAAO,EACL,iBAAiB,EAOlB,MAAM,+BAA+B,CAAC;AAkCvC;;;;;;;;;;GAUG;AACH,KAAK,QAAQ,GAAG,QAAQ,GAAG,MAAM,GAAG,KAAK,CAAC;AAI1C,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,CAAC;IACf,0EAA0E;IAC1E,MAAM,EAAE,OAAO,CAAC;CACjB;AAyCD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,EAAE,CAqB5D;AA0FD,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,cAAc,CAkEhF;AAqDD,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAO7D;AA4SD,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,cAAc,GAAG,iBAAiB,CAgBrF;AAuQD,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAgN9D"}

package/dist/cli/commands/delivery.js

@@ -64,6 +64,15 @@ const export_1 = require("../../exporters/matrix/export");
 const carry_manual_results_1 = require("../../exporters/matrix/carry-manual-results");
 const result_totals_1 = require("../../exporters/matrix/result-totals");
 const capability_1 = require("../../harness/capability");
+const free_feature_blocks_1 = require("../../contract/free-feature-blocks");
+const human_confirmation_1 = require("../../decisions/human-confirmation");
+const delivery_decision_step_1 = require("../../harness/gates/delivery-decision-step");
+const gate_override_report_1 = require("../../harness/gates/gate-override-report");
+const delivery_checklist_1 = require("../../harness/gates/delivery-checklist");
+const project_sungen_invocation_1 = require("../project-sungen-invocation");
+const run_command_hints_1 = require("../run-command-hints");
+const parse_1 = require("../../harness/parse");
+const trace_run_record_1 = require("../../contract/trace/trace-run-record");
 const COLOR = {
     reset: '\x1b[0m',
     gray: '\x1b[90m',
@@ -87,15 +96,32 @@ function makeTarget(screen, featureBaseName, kind) {
     return { screen, featureBaseName, name: featureBaseName, kind, isFlow: kind === 'flow' };
 }
 /**
- * List all `.feature` files inside a screen/flow/api unit as separate targets.
- * Returns empty array when the directory has no features yet.
+ * A derived `*.free.feature` none of whose scenarios QA has approved yet (every one still `@proposed`):
+ * a proposal, not a delivery unit — counted as one, it ended in "Not exported" (#939). Approving a
+ * scenario drops its tag (`contract approve`), and from then on the file is a unit like any other.
+ */
+function proposalOnly(featureFile) {
+    if (!featureFile.endsWith('.free.feature'))
+        return false;
+    try {
+        // No scenario block at all (empty, or not Gherkin) is not a proposal: it stays listed and the preflight names it.
+        const blocks = (0, free_feature_blocks_1.splitFeatureBlocks)(fs.readFileSync(featureFile, 'utf8'));
+        return blocks.length > 0 && blocks.every((b) => b.proposed);
+    }
+    catch {
+        return false; // unreadable: listed, so the preflight names the problem
+    }
+}
+/**
+ * List all `.feature` files inside a screen/flow/api unit as separate targets — a proposal-only
+ * free feature excepted. Returns empty array when the directory has no features yet.
  */
 function listFeatureTargets(cwd, screen, kind) {
     const featuresDir = path.join(cwd, 'qa', qaParent(kind), screen, 'features');
     if (!fs.existsSync(featuresDir))
         return [];
     return fs.readdirSync(featuresDir)
-        .filter((f) => f.endsWith('.feature'))
+        .filter((f) => f.endsWith('.feature') && !proposalOnly(path.join(featuresDir, f)))
         .map((f) => makeTarget(screen, f.slice(0, -'.feature'.length), kind))
         .sort((a, b) => a.featureBaseName.localeCompare(b.featureBaseName));
 }
@@ -158,8 +184,7 @@ function qaDir(cwd, target) {
 // apis.yaml catalog loading moved to ../../exporters/api-catalog-loader so the
 // dashboard snapshot builder loads the identical contract (shared + unit merge).
 function generatedDir(cwd, target) {
-    const sub = target.kind === 'flow' ? path.join('flows', target.screen) : target.kind === 'api' ? path.join('api', target.screen) : target.screen;
-    return path.join(cwd, 'specs', 'generated', sub);
+    return path.join(cwd, (0, run_command_hints_1.generatedSubdir)(target.kind, target.screen));
 }
 // ----------------------------------------------------------------------------
 // Pre-flight checks
@@ -220,6 +245,9 @@ function runPreflight(cwd, target) {
     const selectorsFile = path.join(base, 'selectors', `${target.featureBaseName}.yaml`);
     const specFile = path.join(genBase, `${target.featureBaseName}.spec.ts`);
     const resultsFile = resolveResultsPath(cwd, target);
+    // A derived `*.free.feature` is implemented by hand-written tests (DOS-14.8): no selectors, never compiled,
+    // run with the project's free-test config into its own outputDir — so its hints are that run's (#964).
+    const free = (0, parse_1.isHandWritten)([], featureFile);
     const featureOk = checkFeatureReal(featureFile);
     // test-data is only REQUIRED when the feature actually references a
     // {{var}} placeholder. A static screen (e.g. a fixed bottom-navigation bar)
@@ -229,9 +257,9 @@ function runPreflight(cwd, target) {
         ? checkTestDataHasVars(testDataFile)
         : true;
     // API units have no DOM → no selectors; the catalog (apis.yaml) is the contract. N/A, not missing.
-    const selectorsOk = target.kind === 'api' ? true : checkSelectorsHasEntries(selectorsFile, target.featureBaseName);
-    const specOk = fs.existsSync(specFile);
-    const resultsOk = resultsFile !== null;
+    const selectorsOk = target.kind === 'api' || free ? true : checkSelectorsHasEntries(selectorsFile, target.featureBaseName);
+    const specOk = free || fs.existsSync(specFile);
+    const resultsOk = free ? (0, run_command_hints_1.freeRunHasResults)(cwd) : resultsFile !== null;
     const label = target.isFlow ? `flow/${target.featureBaseName}` : target.featureBaseName;
     const missing = [];
     const suggestions = [];
@@ -251,13 +279,16 @@ function runPreflight(cwd, target) {
         missing.push(`compiled .spec.ts missing (optional — needed to run): ${path.relative(cwd, specFile)}`);
         suggestions.push(`sungen generate --${target.kind === 'flow' ? 'flow' : target.kind === 'api' ? 'api' : 'screen'} ${target.screen}`);
     }
-    if (!resultsOk) {
+    if (!resultsOk && free) {
+        missing.push(`free-test results missing (optional): ${trace_run_record_1.FREE_RUN_DIR}/`);
+        suggestions.push((0, run_command_hints_1.freeRunCommand)(cwd));
+    }
+    else if (!resultsOk) {
         const env = process.env.SUNGEN_ENV;
         const envSuffix = env ? `.${env}` : '';
         missing.push(`test-result${envSuffix}.json missing (optional)`);
         const genRel = path.relative(cwd, genBase);
-        const envPrefix = env ? `SUNGEN_ENV=${env} ` : '';
-        suggestions.push(`${envPrefix}PLAYWRIGHT_JSON_OUTPUT_NAME=${genRel}/${target.featureBaseName}-test-result.json npx playwright test ${genRel}/${target.featureBaseName}.spec.ts`);
+        suggestions.push((0, run_command_hints_1.plainRunCommand)(genRel, target.featureBaseName, env));
     }
     return {
         screen: label,
@@ -626,7 +657,7 @@ function matrixPathsFor(cwd, target) {
     };
 }
 function printFindings(findings) {
-    const icon = { error: `${COLOR.red}✗`, review: `${COLOR.yellow}⚠`, warning: `${COLOR.gray}·` };
+    const icon = { error: `${COLOR.red}✗`, review: `${COLOR.yellow}⚠`, warning: `${COLOR.gray}·`, info: `${COLOR.gray}i` };
     for (const f of findings) {
         log(`  ${icon[f.severity]} [Gate ${f.gate}]${COLOR.reset} ${f.ref ? `${f.ref}: ` : ''}${f.message}`);
     }
@@ -636,9 +667,10 @@ function printFindings(findings) {
  * gate errors, or unapproved groups without --preview) — the caller aggregates
  * a non-zero exit.
  */
-async function exportMatrixTarget(cwd, target, opts, env) {
+async function exportMatrixTarget(cwd, target, opts, env, decisions) {
     const paths = matrixPathsFor(cwd, target);
     paths.runEnv = matrixRunEnv(cwd, target, env, paths);
+    paths.gateRules = decisions?.rulesFor(qaDir(cwd, target)); // the unit's gate-overrides apply to its matrix gates
     // A feature whose scenarios are ALL @exploration probes has nothing to deliver —
     // skip it quietly (no map required) instead of demanding a reviewed grouping for
     // probes that are, by contract, outside the official suite.
@@ -653,6 +685,9 @@ async function exportMatrixTarget(cwd, target, opts, env) {
         }
     }
     const { model, mapMissing, mapErrors } = (0, export_1.loadMatrixModel)(paths);
+    // An audit that is untrusted or FAILs never yields an official deliverable: --preview renders a DRAFT (#935).
+    if (model && decisions?.auditDraft(qaDir(cwd, target)))
+        model.manifest.approvalState = 'draft';
     if (mapMissing) {
         log(`${COLOR.yellow}${paths.label}: no delivery map${COLOR.reset} (${path.relative(cwd, paths.mapFile)})`);
         log(`  The matrix needs the reviewed grouping (target / intent / oracle per delivery item).`);
@@ -670,17 +705,20 @@ async function exportMatrixTarget(cwd, target, opts, env) {
     // counted, so this line, the workbook's totals and the summary table all agree (#891). A file
     // that cannot be read is reported where it matters — when it would be overwritten.
     const format = opts.format ?? 'xlsx';
+    // A draft (DRAFT banner) is written to its own `…-testcases.DRAFT.<ext>`, never onto the official file (#965).
+    const draft = model.manifest.approvalState === 'draft';
     let prior = null;
     let priorError = null;
     try {
         prior = await (0, carry_manual_results_1.readPriorManualResults)((0, xlsx_exporter_1.deliverableXlsxPath)(cwd, paths.unit));
     }
-    // A CSV-only export overwrites no workbook, so an unreadable one only means "nothing to carry".
+    // A CSV-only export or a draft overwrites no official workbook, so an unreadable one only means "nothing to carry".
     catch (e) {
-        if (format !== 'csv')
+        if (format !== 'csv' && !draft)
             priorError = e;
     }
     (0, carry_manual_results_1.applyManualCarry)(model, prior);
+    model.gateOverrides = (0, gate_override_report_1.deliverableGateOverrides)(decisions?.overridesFor(qaDir(cwd, target)) ?? [], (0, export_1.hasReview)(model.findings), decisions?.acceptedInRun);
     log(`${COLOR.bold}${paths.label}${COLOR.reset} — ${model.manifest.itemCount} delivery item(s), ${model.manifest.variantCount} coverage variant(s), review: ${model.manifest.approvalState} (design), test outcome: ${(0, result_totals_1.formatTestOutcome)((0, result_totals_1.resultTotals)(model.items))}`);
     {
         const mocked = model.items.flatMap((it) => it.variants.filter((v) => v.mocked));
@@ -729,6 +767,9 @@ async function exportMatrixTarget(cwd, target, opts, env) {
     const written = [xlsxPath, csvPath].filter((p) => !!p).map((p) => path.relative(cwd, p));
     for (const rel of written)
         log(`  ${COLOR.green}→ ${rel}${COLOR.reset}`);
+    if (draft) {
+        log(`  ${COLOR.yellow}draft only — not a deliverable:${COLOR.reset} it carries the DRAFT banner, and the official ${(0, csv_exporter_1.deliverableBasename)(paths.unit)} file was neither written nor changed.`);
+    }
     if (manualCarry)
         printManualCarry(manualCarry);
     return {
@@ -837,6 +878,22 @@ function printSummaryTable(summaries) {
         log(`${COLOR.yellow}Note: ${totalNotCompiled} scenario(s) flagged "Not compiled" in CSV. Re-run \`sungen generate\` to compile them.${COLOR.reset}\n`);
     }
 }
+/** T6: one checklist block per delivered unit, each box from what its command says now (delivery-checklist.ts). */
+async function printDeliveryChecklist(cwd, targets, accepted) {
+    const units = new Map();
+    for (const t of targets) {
+        const dir = qaDir(cwd, t);
+        if (!units.has(dir))
+            units.set(dir, { label: t.isFlow ? `flow/${t.screen}` : t.screen, unitName: t.screen, unitDir: dir, kind: t.kind, resultsPath: resolveResultsPath(cwd, t) });
+    }
+    const rows = [];
+    for (const u of units.values())
+        rows.push({ label: u.label, boxes: await (0, delivery_checklist_1.unitChecklist)(cwd, u, accepted) });
+    log('');
+    // Each box's fix command as this project runs sungen (#963).
+    for (const line of (0, delivery_checklist_1.renderChecklist)(rows))
+        log((0, project_sungen_invocation_1.withProjectInvocationInText)(line, cwd));
+}
 // ----------------------------------------------------------------------------
 // Command registration
 // ----------------------------------------------------------------------------
@@ -852,8 +909,9 @@ function registerDeliveryCommand(program) {
         .option('--full', 'Alias of --legacy')
         .option('--check', 'Matrix gates only — validate the delivery map, write nothing')
         .option('--approve [ids]', 'Approve proposed groups (all, or a comma-separated id list) + stamp fingerprints')
-        .option('--preview', 'Render the matrix despite review-required findings (DRAFT watermark)')
+        .option('--preview', 'Render the matrix despite review-required findings — a DRAFT (watermarked) written to <unit>-testcases.DRAFT.*, never onto the official file')
         .option('--format <format>', 'Matrix output format: xlsx (default) | csv | both', 'xlsx')
+        .option('--accept-in-run', 'Deliver despite gate-overrides/waivers/approvals recorded during the run (decision.in-run) — a human confirms on a terminal')
         .action(async (names, options) => {
         try {
             // Same effect as running with SUNGEN_ENV=<env> — result-file resolution,
@@ -925,6 +983,30 @@ function registerDeliveryCommand(program) {
                 .reduce((a, r) => ({ hits: [...a.hits, ...r.hits], unscanned: [...a.unscanned, ...r.unscanned] }), { hits: [], unscanned: [] });
             for (const line of (0, secret_scan_1.formatSecretScan)(secretScan))
                 log(line);
+            // OES-11.3–11.5: decisions that do not verify, rejected overrides, a stale audit and in-run
+            // decisions stop the delivery before anything is written (approval only stamps the map).
+            let decisions;
+            // --approve only stamps a matrix map. With --legacy / --full it would skip this gate and
+            // fall through to the export, so the combination is refused before anything is written.
+            if (options.approve !== undefined && (options.legacy || options.full)) {
+                console.error(`${COLOR.red}--approve applies to the matrix deliverable only${COLOR.reset} — it cannot be combined with --legacy / --full`);
+                process.exit(1);
+            }
+            if (options.approve === undefined) {
+                const gate = await (0, delivery_decision_step_1.runDeliveryDecisionStep)({
+                    // The accept-in-run command and its refusal as this project runs sungen (#963).
+                    projectRoot: cwd, acceptInRun: !!options.acceptInRun, io: (0, human_confirmation_1.processIO)(), log: (line) => log((0, project_sungen_invocation_1.withProjectInvocationInText)(line, cwd)),
+                    // --preview / --check soften only the matrix export; --legacy has no draft mode, so it always needs one.
+                    requireTrustedAudit: !!(options.legacy || options.full) || (!options.preview && !options.check),
+                    refs: toExport.map((t) => ({ label: t.isFlow ? `flow/${t.featureBaseName}` : t.featureBaseName, unitName: t.screen, unitDir: qaDir(cwd, t), resultsPath: resolveResultsPath(cwd, t) })),
+                    argv: ['sungen', 'delivery', ...(names ?? []), ...(options.env ? ['--env', options.env] : []), ...(options.legacy || options.full ? ['--legacy'] : [])],
+                });
+                if (!gate) {
+                    await printDeliveryChecklist(cwd, toExport);
+                    process.exit(1);
+                }
+                decisions = gate;
+            }
             // 3. Export
             const legacy = options.legacy || options.full;
             if (!legacy) {
@@ -972,7 +1054,7 @@ function registerDeliveryCommand(program) {
                 for (const target of toExport) {
                     const s = await exportMatrixTarget(cwd, target, {
                         check: options.check, preview: options.preview, format: format,
-                    }, env);
+                    }, env, decisions);
                     if (s === 'skipped')
                         continue; // all-@exploration feature — neither exported nor a failure
                     if (s)
@@ -982,15 +1064,22 @@ function registerDeliveryCommand(program) {
                 }
                 if (matrixSummaries.length > 0 && !options.check)
                     printMatrixSummaryTable(matrixSummaries);
+                for (const line of decisions?.summaryLines() ?? [])
+                    log(line);
                 printSkipSummary(skipped, notExported);
+                await printDeliveryChecklist(cwd, toExport, decisions?.acceptedInRun);
                 // A named target that produced nothing is a failure. A sweep is a failure
                 // only when it produced nothing at all — units still waiting for a map or
                 // an approval are the normal state of a live project. Preflight skips are
                 // not counted here: reaching this point in an explicit scope means
                 // --continue-on-missing was passed, which IS the opt-in to tolerate them.
-                const failed = explicitScope
+                // --check reports like its checklist: an audit box that does not hold is a non-zero exit (#935).
+                const auditFails = (decisions?.untrustedAudits.length ?? 0) + (decisions?.failingAudits.length ?? 0);
+                if (options.check && auditFails)
+                    log(`${COLOR.red}✗ --check: ${auditFails} unit(s) whose audit does not pass — see the audit box above.${COLOR.reset}`);
+                const failed = (explicitScope
                     ? notExported.length > 0
-                    : matrixSummaries.length === 0;
+                    : matrixSummaries.length === 0) || (!!options.check && auditFails > 0);
                 if (failed)
                     process.exit(1);
                 return;
@@ -1005,6 +1094,7 @@ function registerDeliveryCommand(program) {
             // 4. Summary
             printSummaryTable(summaries);
             printSkipSummary(skipped, []);
+            await printDeliveryChecklist(cwd, toExport, decisions?.acceptedInRun);
             // Same rule as the matrix path: every attempted target in an explicit scope
             // must have produced a file; a sweep only fails when nothing was written.
             if (explicitScope ? summaries.length < toExport.length : summaries.length === 0)