@sun-asterisk/sungen 3.2.35 → 3.3.0-alpha.10

package/dist/contract/classify-contract-change.js

@@ -0,0 +1,98 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.finding = exports.severityOf = void 0;
+exports.classifyScenario = classifyScenario;
+/**
+ * One approved lock entry against the scenario as it reads now → its class on the strength ladder
+ * (DOS-14.4) and the findings behind it.
+ *
+ *   same hash                         match
+ *   assertions, paired in three passes:
+ *     1. identical                    nothing to say
+ *     2. same target (ref + scope)    compareAsserts against the WORST candidate: weakened · strengthened · review
+ *     3. same sentence, other target  target-changed
+ *     left over in the lock           assertion-lost        left over now     strengthened (new check)
+ *   actions changed · implementation retagged · only reordered    hash-changed (review)
+ *
+ * The scenario's class is its most severe finding. A change that produced no finding at all is
+ * still `hash-changed`: equal hashes are the only road to `match`.
+ */
+const contract_hash_1 = require("./contract-hash");
+const contract_schema_1 = require("./contract-schema");
+const oracle_strength_1 = require("./oracle-strength");
+const SEVERITY = {
+    proposed: 0, match: 0, strengthened: 1, nondeterministic: 1, 'hash-changed': 2, opaque: 2, inconclusive: 2,
+    'target-changed': 3, 'oracle-weakened': 3, 'assertion-lost': 3, unproven: 3,
+};
+const severityOf = (c) => SEVERITY[c];
+exports.severityOf = severityOf;
+const finding = (cls, detail, step) => ({ class: cls, ...(contract_schema_1.RULE_OF[cls] ? { rule: contract_schema_1.RULE_OF[cls] } : {}), detail, ...(step ? { step } : {}) });
+exports.finding = finding;
+const asserts = (steps) => steps.map((step, i) => ({ step, at: i + 1 })).filter((x) => x.step.kind === 'assert');
+const targetKey = (s) => s.target ? `${s.target.ref}\u0000${s.target.parent ?? ''}` : `\u0001${s.verb}`;
+const label = (s) => s.target ? `[${s.target.ref}]${s.target.parent ? ` in ${s.target.parent}` : ''}` : `"${s.verb}"`;
+function compareAssertions(locked, current) {
+    const out = [];
+    const was = asserts(locked);
+    const now = asserts(current);
+    const used = new Set();
+    const take = (pred) => {
+        const hit = now.find((c) => !used.has(c.at) && pred(c));
+        if (hit)
+            used.add(hit.at);
+        return hit;
+    };
+    const open = [];
+    for (const l of was)
+        if (!take((c) => (0, contract_hash_1.sameJson)(c.step, l.step)))
+            open.push(l);
+    const unpaired = [];
+    for (const l of open) {
+        const candidates = now.filter((c) => !used.has(c.at) && targetKey(c.step) === targetKey(l.step));
+        if (!candidates.length) {
+            unpaired.push(l);
+            continue;
+        }
+        // The WORST replacement is the one judged: picking the kindest let `see [X]` → `is hidden` +
+        // `is empty` read as strengthened, the inversion hiding behind a harmless extra check.
+        const judged = candidates.map((c) => ({ c, r: (0, oracle_strength_1.compareAsserts)(l.step, c.step) }));
+        const rank = (k) => (k === 'oracle-weakened' ? 2 : k === 'review' ? 1 : 0);
+        const worst = judged.sort((a, b) => rank(b.r.class) - rank(a.r.class))[0];
+        used.add(worst.c.at);
+        const cls = worst.r.class === 'review' ? 'hash-changed' : worst.r.class;
+        out.push((0, exports.finding)(cls, `${label(l.step)}: ${worst.r.detail}`, worst.c.at));
+    }
+    for (const l of unpaired) {
+        const moved = take((c) => c.step.verb === l.step.verb && !!l.step.target && !!c.step.target);
+        out.push(moved
+            ? (0, exports.finding)('target-changed', `the check "${l.step.verb}" moved from ${label(l.step)} to ${label(moved.step)}`, moved.at)
+            : (0, exports.finding)('assertion-lost', `the approved check ${label(l.step)} "${l.step.verb}" (step ${l.at}) is gone`));
+    }
+    for (const c of now)
+        if (!used.has(c.at))
+            out.push((0, exports.finding)('strengthened', `new check ${label(c.step)} "${c.step.verb}"`, c.at));
+    return out;
+}
+function classifyScenario(id, entry, current) {
+    if (!current) {
+        return { id, class: 'assertion-lost', findings: [(0, exports.finding)('assertion-lost', 'the approved scenario is no longer in the feature (removed, its ID changed, or made @manual)')] };
+    }
+    const base = { id, file: current.source.file };
+    if (current.hash === entry.hash)
+        return { ...base, class: 'match', findings: [] };
+    const findings = compareAssertions(entry.steps, current.steps);
+    if (entry.implementation !== current.implementation) {
+        findings.push((0, exports.finding)('hash-changed', `implementation path changed: ${entry.implementation} → ${current.implementation} (retag)`));
+    }
+    const actionsOf = (steps) => steps.filter((s) => s.kind === 'action');
+    if (!(0, contract_hash_1.sameJson)(actionsOf(entry.steps), actionsOf(current.steps)))
+        findings.push((0, exports.finding)('hash-changed', 'the actions changed (what the test does before it checks)'));
+    if (!findings.length)
+        findings.push((0, exports.finding)('hash-changed', 'the steps changed without a weaker or stronger check (e.g. reordered)'));
+    const worst = findings.reduce((acc, f) => {
+        const c = f.class;
+        return (0, exports.severityOf)(c) > (0, exports.severityOf)(acc) ? c : acc;
+    }, 'match');
+    return { ...base, class: worst, findings };
+}
+//# sourceMappingURL=classify-contract-change.js.map

package/dist/contract/classify-contract-change.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-change.js","sourceRoot":"","sources":["../../src/contract/classify-contract-change.ts"],"names":[],"mappings":";;;AAyEA,4CAkBC;AA3FD;;;;;;;;;;;;;;GAcG;AACH,mDAA2C;AAC3C,uDAAyJ;AACzJ,uDAAmD;AAOnD,MAAM,QAAQ,GAAkC;IAC9C,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1G,gBAAgB,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC5E,CAAC;AACK,MAAM,UAAU,GAAG,CAAC,CAAgB,EAAU,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAAvD,QAAA,UAAU,cAA6C;AAE7D,MAAM,OAAO,GAAG,CAAC,GAA+C,EAAE,MAAc,EAAE,IAAa,EAAmB,EAAE,CACzH,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,yBAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,yBAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAD1F,QAAA,OAAO,WACmF;AAGvG,MAAM,OAAO,GAAG,CAAC,KAAqB,EAAa,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;AAC5I,MAAM,SAAS,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;AAC9H,MAAM,KAAK,GAAG,CAAC,CAAe,EAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;AAE5I,SAAS,iBAAiB,CAAC,MAAsB,EAAE,OAAuB;IACxE,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,IAA6B,EAAuB,EAAE;QAClE,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,IAAI,GAAG;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1B,OAAO,GAAG,CAAC;IACb,CAAC,CAAC;IACF,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,wBAAQ,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAc,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACjG,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QACvD,6FAA6F;QAC7F,uFAAuF;QACvF,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,IAAA,gCAAc,EAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5E,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7F,GAAG,CAAC,IAAI,CAAC,KAAK;YACZ,CAAC,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,cAAc,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,EAAE,CAAC;YACvH,CAAC,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,sBAAsB,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,GAAG;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,aAAa,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjI,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,gBAAgB,CAAC,EAAU,EAAE,KAAgB,EAAE,OAAqC;IAClG,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,QAAQ,EAAE,CAAC,IAAA,eAAO,EAAC,gBAAgB,EAAE,8FAA8F,CAAC,CAAC,EAAE,CAAC;IAChL,CAAC;IACD,MAAM,IAAI,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,OAAO,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI;QAAE,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAClF,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,cAAc,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,gCAAgC,KAAK,CAAC,cAAc,MAAM,OAAO,CAAC,cAAc,UAAU,CAAC,CAAC,CAAC;IACrI,CAAC;IACD,MAAM,SAAS,GAAG,CAAC,KAAqB,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC;IACtF,IAAI,CAAC,IAAA,wBAAQ,EAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,2DAA2D,CAAC,CAAC,CAAC;IACrK,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,eAAO,EAAC,cAAc,EAAE,uEAAuE,CAAC,CAAC,CAAC;IACtI,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE;QACtD,MAAM,CAAC,GAAG,CAAC,CAAC,KAAsB,CAAC;QACnC,OAAO,IAAA,kBAAU,EAAC,CAAC,CAAC,GAAG,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACnD,CAAC,EAAE,OAAO,CAAC,CAAC;IACZ,OAAO,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC"}

package/dist/contract/classify-contract-unit.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Every scenario id of a unit, locked or current, with its ladder class (DOS-14.3, DOS-14.4).
+ *
+ *   approved entry, one current copy      classifyScenario (the ladder)
+ *   approved entry, no current copy       assertion-lost
+ *   approved entry, several copies        assertion-lost — the lock can no longer tell which copy QA
+ *                                         approved, and picking one would let the others hide (M7)
+ *   no approved entry                     proposed (never blocks); a tampered entry counts as none
+ *   Scenario Outline (any lock state)     at least hash-changed: the compiler does not support the
+ *                                         construct, so the contract cannot judge its Examples
+ */
+import { ScenarioResult } from './classify-contract-change';
+import { ContractLock, ContractScenario } from './contract-schema';
+export declare function classifyUnit(lock: ContractLock | null, current: ContractScenario[], untrusted?: ReadonlySet<string>): {
+    results: ScenarioResult[];
+    warnings: string[];
+};
+//# sourceMappingURL=classify-contract-unit.d.ts.map

package/dist/contract/classify-contract-unit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-unit.d.ts","sourceRoot":"","sources":["../../src/contract/classify-contract-unit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAA6B,cAAc,EAAc,MAAM,4BAA4B,CAAC;AACnG,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAmB,MAAM,mBAAmB,CAAC;AASpF,wBAAgB,YAAY,CAC1B,IAAI,EAAE,YAAY,GAAG,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,EAAE,SAAS,GAAE,WAAW,CAAC,MAAM,CAAa,GACjG;IAAE,OAAO,EAAE,cAAc,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,CAuBnD"}

package/dist/contract/classify-contract-unit.js

@@ -0,0 +1,49 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.classifyUnit = classifyUnit;
+/**
+ * Every scenario id of a unit, locked or current, with its ladder class (DOS-14.3, DOS-14.4).
+ *
+ *   approved entry, one current copy      classifyScenario (the ladder)
+ *   approved entry, no current copy       assertion-lost
+ *   approved entry, several copies        assertion-lost — the lock can no longer tell which copy QA
+ *                                         approved, and picking one would let the others hide (M7)
+ *   no approved entry                     proposed (never blocks); a tampered entry counts as none
+ *   Scenario Outline (any lock state)     at least hash-changed: the compiler does not support the
+ *                                         construct, so the contract cannot judge its Examples
+ */
+const classify_contract_change_1 = require("./classify-contract-change");
+const contract_schema_1 = require("./contract-schema");
+const OUTLINE = 'Scenario Outline is not supported by the compiler — the contract cannot judge its Examples rows; rewrite it as @cases data';
+function withOutlineFinding(r) {
+    const findings = [...r.findings, (0, classify_contract_change_1.finding)('hash-changed', OUTLINE)];
+    return { ...r, class: (0, classify_contract_change_1.severityOf)(r.class) >= (0, classify_contract_change_1.severityOf)('hash-changed') ? r.class : 'hash-changed', findings };
+}
+function classifyUnit(lock, current, untrusted = new Set()) {
+    const groups = new Map();
+    for (const sc of current)
+        groups.set(sc.id, [...(groups.get(sc.id) ?? []), sc]);
+    const approvedIds = Object.entries(lock?.scenarios ?? {}).filter(([id, e]) => (0, contract_schema_1.isHumanApproved)(e) && !untrusted.has(id)).map(([id]) => id);
+    const results = [];
+    const warnings = [];
+    for (const id of [...new Set([...approvedIds, ...groups.keys()])].sort((a, b) => a.localeCompare(b, 'en'))) {
+        const entry = lock?.scenarios[id];
+        const copies = groups.get(id) ?? [];
+        const approved = (0, contract_schema_1.isHumanApproved)(entry) && !untrusted.has(id);
+        let mine;
+        if (!approved) {
+            if (copies.length > 1)
+                warnings.push(`scenario id ${id} is used by ${copies.length} scenarios — give each its own ID before approving`);
+            mine = copies.map((c) => ({ id, class: 'proposed', findings: [], file: c.source.file }));
+        }
+        else if (copies.length > 1) {
+            mine = [{ id, class: 'assertion-lost', file: copies[0].source.file, findings: [(0, classify_contract_change_1.finding)('assertion-lost', `the approved id ${id} is now carried by ${copies.length} scenarios — the lock cannot tell which one QA approved; give each its own ID`)] }];
+        }
+        else {
+            mine = [(0, classify_contract_change_1.classifyScenario)(id, entry, copies[0])];
+        }
+        results.push(...(copies.some((c) => c.source.outline) ? mine.map(withOutlineFinding) : mine));
+    }
+    return { results, warnings };
+}
+//# sourceMappingURL=classify-contract-unit.js.map

package/dist/contract/classify-contract-unit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-contract-unit.js","sourceRoot":"","sources":["../../src/contract/classify-contract-unit.ts"],"names":[],"mappings":";;AAqBA,oCAyBC;AA9CD;;;;;;;;;;GAUG;AACH,yEAAmG;AACnG,uDAAoF;AAEpF,MAAM,OAAO,GAAG,4HAA4H,CAAC;AAE7I,SAAS,kBAAkB,CAAC,CAAiB;IAC3C,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAA,kCAAO,EAAC,cAAc,EAAE,OAAO,CAAC,CAAC,CAAC;IACnE,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAA,qCAAU,EAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAA,qCAAU,EAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC;AACjH,CAAC;AAED,SAAgB,YAAY,CAC1B,IAAyB,EAAE,OAA2B,EAAE,YAAiC,IAAI,GAAG,EAAE;IAElG,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8B,CAAC;IACrD,KAAK,MAAM,EAAE,IAAI,OAAO;QAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iCAAe,EAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1I,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,WAAW,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;QAC3G,MAAM,KAAK,GAAG,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,IAAA,iCAAe,EAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9D,IAAI,IAAsB,CAAC;QAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,eAAe,EAAE,eAAe,MAAM,CAAC,MAAM,oDAAoD,CAAC,CAAC;YACxI,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC3F,CAAC;aAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,IAAI,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,IAAA,kCAAO,EAAC,gBAAgB,EACrG,mBAAmB,EAAE,sBAAsB,MAAM,CAAC,MAAM,+EAA+E,CAAC,CAAC,EAAE,CAAC,CAAC;QACjJ,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,CAAC,IAAA,2CAAgB,EAAC,EAAE,EAAE,KAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACnD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChG,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC"}

package/dist/contract/classify-trace-conformance.d.ts

@@ -0,0 +1,47 @@
+/**
+ * A free / impl:code scenario's traces against its approved lock entry (DOS-14.5 – 14.6) — the SAME
+ * strength ladder as the Gherkin check (DOS-14.4, oracle-strength.ts), fed from the trace fingerprint.
+ *
+ *   free        classifyScenario(lock entry, fingerprint): equal hash → match, else the ladder
+ *   impl:code   group by group: each approved step must be realized inside the `test.step` titled
+ *               with that step — identically (fine), weaker (hard), stronger (strengthened), changed
+ *               (review); an approved check with no group or no check in its group → assertion-lost
+ *   overlays    a step whose target identity is `low` → opaque (review, never match, red-team #4);
+ *               an opaque step → opaque with its verbatim text and file:line (contract.opaque-step) —
+ *               unless the approved entry lists it as accepted by QA at its sha (#923, opaqueStepSha):
+ *               then a note, not a finding. impl:code: a test.step whose only candidates are opaque is
+ *               left to the overlay (judged on the ladder it could only read "changed"), which names the
+ *               approved step the opaque one replaces
+ *   runs        no admissible trace → unproven (all inconclusive → inconclusive) when APPROVED, a
+ *               warning while proposed (M5, M6); a trace refused beside an admissible one → a warning;
+ *               several admissible traces that fingerprint differently → nondeterministic (worst wins)
+ */
+import { ContractFinding } from './classify-contract-change';
+import type { ContractStep, Implementation, LockEntry, OpaqueStep, ScenarioClass } from './contract-schema';
+import { RenderedStep } from './render-free-gherkin';
+import type { TraceRun } from './trace/collect-trace-evidence';
+import type { TraceFingerprint } from './trace/trace-fingerprint';
+/**
+ * `warnings` never change the verdict: a not-yet-approved scenario's trace problems, unused traces, an
+ * accepted opaque step. `opaque`: every opaque step of the admissible traces, accepted or not.
+ */
+export interface TraceOutcome {
+    class: ScenarioClass;
+    findings: ContractFinding[];
+    hashes: string[];
+    runs: string[];
+    warnings: string[];
+    opaque: OpaqueStep[];
+}
+/** What an unjudgeable scenario becomes: hard when QA locked it (approved), a warning while it is proposed. */
+export declare function notJudged(id: string, approved: boolean, cls: 'unproven' | 'inconclusive', reasons: string[]): TraceOutcome;
+/**
+ * The sha a QA acceptance binds to (#923): the opaque step as rendered — its verbatim line or request,
+ * check or step, the `test.step` it sits in — and as normalized, with the implementation path. Any
+ * change to the step gives another sha, so the old acceptance no longer covers it.
+ */
+export declare function opaqueStepSha(implementation: Implementation, r: RenderedStep, step: ContractStep | undefined): string;
+/** How a low target identity opens its finding — `next` reads it to offer `contract check --trace`. */
+export declare const LOW_IDENTITY_FINDING = "target identity is low";
+export declare function classifyTraceRuns(id: string, implementation: Implementation, entry: LockEntry | undefined, runs: TraceRun[], fingerprints: Map<TraceRun, TraceFingerprint>): TraceOutcome;
+//# sourceMappingURL=classify-trace-conformance.d.ts.map

package/dist/contract/classify-trace-conformance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-trace-conformance.d.ts","sourceRoot":"","sources":["../../src/contract/classify-trace-conformance.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAoB,eAAe,EAAuC,MAAM,4BAA4B,CAAC;AAEpH,OAAO,KAAK,EAAsB,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAEhI,OAAO,EAAQ,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,YAAY;IAAG,KAAK,EAAE,aAAa,CAAC;IAAC,QAAQ,EAAE,eAAe,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,UAAU,EAAE,CAAA;CAAE;AAE/J,+GAA+G;AAC/G,wBAAgB,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,GAAG,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,YAAY,CAI1H;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,cAAc,EAAE,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,CAErH;AAED,uGAAuG;AACvG,eAAO,MAAM,oBAAoB,2BAA2B,CAAC;AA6F7D,wBAAgB,iBAAiB,CAC/B,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,cAAc,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,YAAY,EAAE,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,GACxI,YAAY,CAyBd"}

package/dist/contract/classify-trace-conformance.js

@@ -0,0 +1,164 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LOW_IDENTITY_FINDING = void 0;
+exports.notJudged = notJudged;
+exports.opaqueStepSha = opaqueStepSha;
+exports.classifyTraceRuns = classifyTraceRuns;
+/**
+ * A free / impl:code scenario's traces against its approved lock entry (DOS-14.5 – 14.6) — the SAME
+ * strength ladder as the Gherkin check (DOS-14.4, oracle-strength.ts), fed from the trace fingerprint.
+ *
+ *   free        classifyScenario(lock entry, fingerprint): equal hash → match, else the ladder
+ *   impl:code   group by group: each approved step must be realized inside the `test.step` titled
+ *               with that step — identically (fine), weaker (hard), stronger (strengthened), changed
+ *               (review); an approved check with no group or no check in its group → assertion-lost
+ *   overlays    a step whose target identity is `low` → opaque (review, never match, red-team #4);
+ *               an opaque step → opaque with its verbatim text and file:line (contract.opaque-step) —
+ *               unless the approved entry lists it as accepted by QA at its sha (#923, opaqueStepSha):
+ *               then a note, not a finding. impl:code: a test.step whose only candidates are opaque is
+ *               left to the overlay (judged on the ladder it could only read "changed"), which names the
+ *               approved step the opaque one replaces
+ *   runs        no admissible trace → unproven (all inconclusive → inconclusive) when APPROVED, a
+ *               warning while proposed (M5, M6); a trace refused beside an admissible one → a warning;
+ *               several admissible traces that fingerprint differently → nondeterministic (worst wins)
+ */
+const classify_contract_change_1 = require("./classify-contract-change");
+const contract_hash_1 = require("./contract-hash");
+const oracle_strength_1 = require("./oracle-strength");
+const render_free_gherkin_1 = require("./render-free-gherkin");
+/** What an unjudgeable scenario becomes: hard when QA locked it (approved), a warning while it is proposed. */
+function notJudged(id, approved, cls, reasons) {
+    return approved
+        ? { class: cls, findings: reasons.map((r) => (0, classify_contract_change_1.finding)(cls, r)), hashes: [], runs: [], warnings: [], opaque: [] }
+        : { class: 'proposed', findings: [], hashes: [], runs: [], warnings: reasons.map((r) => `${id} (not approved yet, so a warning): ${r}`), opaque: [] };
+}
+/**
+ * The sha a QA acceptance binds to (#923): the opaque step as rendered — its verbatim line or request,
+ * check or step, the `test.step` it sits in — and as normalized, with the implementation path. Any
+ * change to the step gives another sha, so the old acceptance no longer covers it.
+ */
+function opaqueStepSha(implementation, r, step) {
+    return (0, contract_hash_1.sha256Hex)((0, contract_hash_1.canonicalJson)({ implementation, kind: r.kind, group: r.group ?? null, verbatim: r.opaque?.verbatim ?? null, step: step ?? null })).slice(0, 16);
+}
+/** How a low target identity opens its finding — `next` reads it to offer `contract check --trace`. */
+exports.LOW_IDENTITY_FINDING = 'target identity is low';
+const worstOf = (findings, start = 'match') => findings.reduce((acc, f) => ((0, classify_contract_change_1.severityOf)(f.class) > (0, classify_contract_change_1.severityOf)(acc) ? f.class : acc), start);
+/** An approved step as a reader sees it: `see [My Account] heading with text "My Account"`. */
+function approvedStepText(s) {
+    const refs = [s.target?.ref, ...(s.target?.also ?? [])].filter((r) => r !== undefined);
+    const values = (s.kind === 'assert' ? s.expected : s.value)?.split(' | ') ?? [];
+    let r = 0;
+    let v = 0;
+    return s.verb.replace(/\[\]/g, () => `[${refs[r++] ?? ''}]`).replace(/\{\}/g, () => (v < values.length ? `"${values[v++]}"` : '{}'));
+}
+function overlays(fp, implementation, accepted, used, replaces) {
+    const findings = [];
+    const opaque = [];
+    fp.rendered.forEach((r, i) => {
+        if (used && !used.has(i))
+            return;
+        if (r.opaque) {
+            const sha = opaqueStepSha(implementation, r, fp.steps[i]);
+            const isAccepted = accepted.some((a) => a.step === i + 1 && a.sha === sha);
+            const instead = replaces?.get(i);
+            opaque.push({ step: i + 1, sha, kind: r.kind, verbatim: r.opaque.verbatim, ...(r.opaque.where ? { where: r.opaque.where } : {}), ...(instead ? { replaces: instead } : {}), accepted: isAccepted });
+            if (!isAccepted) {
+                findings.push((0, classify_contract_change_1.finding)('opaque', `"${r.opaque.verbatim}"${r.opaque.where ? ` at ${r.opaque.where}` : ''} — ${r.kind === 'assert' ? 'a check' : 'a step'} sungen cannot compare; QA reviews it${instead ? ` — replaces approved ${instead}` : ''}`, i + 1));
+            }
+        }
+        else if (r.low)
+            findings.push((0, classify_contract_change_1.finding)('opaque', `${exports.LOW_IDENTITY_FINDING} (${r.low}) — cannot prove "${r.sentence}" acts on the approved element`, i + 1));
+    });
+    return { findings, opaque };
+}
+function implCodeFindings(entry, fp) {
+    const findings = [];
+    const used = new Set();
+    const replaces = new Map();
+    const taken = new Set();
+    entry.steps.forEach((locked, i) => {
+        const g = fp.groups.findIndex((x, gi) => !taken.has(gi) && (0, contract_hash_1.sameJson)(x.titleStep, locked));
+        if (g < 0) {
+            findings.push(locked.kind === 'assert'
+                ? (0, classify_contract_change_1.finding)('assertion-lost', `no test.step implements the approved check "${locked.verb}" (step ${i + 1})`)
+                : (0, classify_contract_change_1.finding)('hash-changed', `no test.step implements the approved step "${locked.verb}" (step ${i + 1})`));
+            return;
+        }
+        taken.add(g);
+        const members = fp.groups[g].members;
+        const same = members.find((m) => (0, contract_hash_1.sameJson)(fp.steps[m], locked));
+        if (same !== undefined) {
+            used.add(same);
+            return;
+        }
+        const candidates = members.filter((m) => fp.steps[m].kind === locked.kind);
+        if (!candidates.length) {
+            findings.push(locked.kind === 'assert' ? (0, classify_contract_change_1.finding)('assertion-lost', `the test.step for "${locked.verb}" checks nothing`, i + 1)
+                : (0, classify_contract_change_1.finding)('hash-changed', `the test.step for "${locked.verb}" does nothing on the page`, i + 1));
+            return;
+        }
+        candidates.forEach((m) => used.add(m));
+        // Only steps sungen cannot compare implement this approved step: the overlay sends them to QA's
+        // review (#923), naming the approved step. On the ladder they could only read "changed", which
+        // re-approving never clears.
+        if (candidates.every((m) => fp.rendered[m].opaque)) {
+            for (const m of candidates)
+                replaces.set(m, `step ${i + 1} "${(0, render_free_gherkin_1.clip)(approvedStepText(locked))}"`);
+            return;
+        }
+        if (locked.kind === 'action') {
+            findings.push((0, classify_contract_change_1.finding)('hash-changed', `the code for "${locked.verb}" does something else: "${fp.rendered[candidates[0]].sentence}"`, i + 1));
+            return;
+        }
+        const judged = candidates.map((m) => (0, oracle_strength_1.compareAsserts)(locked, fp.steps[m]));
+        const rank = (k) => (k === 'oracle-weakened' ? 0 : k === 'review' ? 1 : 2);
+        const best = judged.sort((a, b) => rank(b.class) - rank(a.class))[0];
+        findings.push((0, classify_contract_change_1.finding)(best.class === 'review' ? 'hash-changed' : best.class, best.detail, i + 1));
+    });
+    fp.groups.forEach((g, gi) => { if (!taken.has(gi))
+        findings.push((0, classify_contract_change_1.finding)('hash-changed', `test.step "${g.title}" implements no approved step`)); });
+    return { findings, used, replaces };
+}
+function classifyOne(id, implementation, entry, fp) {
+    const accepted = entry.acceptedOpaque ?? [];
+    if (implementation === 'impl:code') {
+        const { findings, used, replaces } = implCodeFindings(entry, fp);
+        const o = overlays(fp, implementation, accepted, used, replaces);
+        return { findings: [...findings, ...o.findings], opaque: o.opaque };
+    }
+    const ladder = (0, classify_contract_change_1.classifyScenario)(id, entry, {
+        id, implementation, steps: fp.steps, hash: fp.hash, source: { file: '', name: id, hasId: true, lines: [], outline: false },
+    });
+    const o = overlays(fp, implementation, accepted);
+    return { findings: [...ladder.findings, ...o.findings], opaque: o.opaque };
+}
+const runLabel = (r) => `${r.record?.runId ?? '?'}#${r.result?.retry ?? '?'}`;
+function classifyTraceRuns(id, implementation, entry, runs, fingerprints) {
+    const admissible = runs.filter((r) => r.status === 'admissible' && fingerprints.has(r));
+    const others = runs.filter((r) => !admissible.includes(r));
+    const labels = admissible.map(runLabel);
+    const hashes = admissible.map((r) => fingerprints.get(r).hash);
+    if (!admissible.length) {
+        const allInconclusive = others.length > 0 && others.every((r) => r.status === 'inconclusive');
+        return { ...notJudged(id, !!entry, allInconclusive ? 'inconclusive' : 'unproven', others.map((r) => r.reason ?? r.status)), hashes, runs: labels };
+    }
+    // A trace that may not speak, beside one that may: the admissible one judges, the other is a warning.
+    const warnings = others.map((r) => `${id}: another trace of this scenario was not used — ${r.reason ?? r.status}`);
+    if (!entry)
+        return { class: 'proposed', findings: [], hashes, runs: labels, warnings, opaque: [] };
+    const perRun = admissible.map((r) => classifyOne(id, implementation, entry, fingerprints.get(r)));
+    const findings = perRun.flatMap((p) => p.findings);
+    const opaque = [...new Map(perRun.flatMap((p) => p.opaque).map((o) => [`${o.step}:${o.sha}`, o])).values()]
+        .sort((a, b) => a.step - b.step || a.sha.localeCompare(b.sha));
+    for (const o of opaque.filter((x) => x.accepted)) {
+        warnings.push(`${id}: step ${o.step} — opaque ${o.kind === 'assert' ? 'check' : 'step'} "${(0, render_free_gherkin_1.clip)(o.verbatim)}" accepted by QA (decision ${entry.decisionId}), not compared`);
+    }
+    let cls = worstOf(findings);
+    if (new Set(hashes).size > 1) {
+        findings.push((0, classify_contract_change_1.finding)('nondeterministic', `${new Set(hashes).size} different fingerprints across ${admissible.length} runs — the runs took different branches`));
+        if ((0, classify_contract_change_1.severityOf)(cls) <= (0, classify_contract_change_1.severityOf)('strengthened'))
+            cls = 'nondeterministic';
+    }
+    return { class: cls, findings, hashes, runs: labels, warnings, opaque };
+}
+//# sourceMappingURL=classify-trace-conformance.js.map

package/dist/contract/classify-trace-conformance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classify-trace-conformance.js","sourceRoot":"","sources":["../../src/contract/classify-trace-conformance.ts"],"names":[],"mappings":";;;AAiCA,8BAIC;AAOD,sCAEC;AAgGD,8CA2BC;AAzKD;;;;;;;;;;;;;;;;;GAiBG;AACH,yEAAoH;AACpH,mDAAqE;AAErE,uDAAmD;AACnD,+DAA2D;AAU3D,+GAA+G;AAC/G,SAAgB,SAAS,CAAC,EAAU,EAAE,QAAiB,EAAE,GAAgC,EAAE,OAAiB;IAC1G,OAAO,QAAQ;QACb,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,kCAAO,EAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QAC/G,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,sCAAsC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;AAC1J,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,cAA8B,EAAE,CAAe,EAAE,IAA8B;IAC3G,OAAO,IAAA,yBAAS,EAAC,IAAA,6BAAa,EAAC,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,QAAQ,IAAI,IAAI,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACnK,CAAC;AAED,uGAAuG;AAC1F,QAAA,oBAAoB,GAAG,wBAAwB,CAAC;AAE7D,MAAM,OAAO,GAAG,CAAC,QAA2B,EAAE,QAAuB,OAAO,EAAiB,EAAE,CAC7F,QAAQ,CAAC,MAAM,CAAgB,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,IAAA,qCAAU,EAAC,CAAC,CAAC,KAAsB,CAAC,GAAG,IAAA,qCAAU,EAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAsB,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAI/I,+FAA+F;AAC/F,SAAS,gBAAgB,CAAC,CAAe;IACvC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACpG,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;IAChF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACvI,CAAC;AAED,SAAS,QAAQ,CACf,EAAoB,EAAE,cAA8B,EAAE,QAAuC,EAAE,IAAkB,EAAE,QAAsC;IAEzJ,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;QACjC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,aAAa,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;YAC3E,MAAM,OAAO,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;YACjC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;YACpM,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,QAAQ,CAAC,IAAI,CAAC,IAAA,kCAAO,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,wCAAwC,OAAO,CAAC,CAAC,CAAC,wBAAwB,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC5P,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,CAAC,GAAG;YAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,kCAAO,EAAC,QAAQ,EAAE,GAAG,4BAAoB,KAAK,CAAC,CAAC,GAAG,qBAAqB,CAAC,CAAC,QAAQ,gCAAgC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC9J,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAgB,EAAE,EAAoB;IAC9D,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QAChC,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,IAAA,wBAAQ,EAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1F,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ;gBACpC,CAAC,CAAC,IAAA,kCAAO,EAAC,gBAAgB,EAAE,+CAA+C,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC;gBAC1G,CAAC,CAAC,IAAA,kCAAO,EAAC,cAAc,EAAE,8CAA8C,MAAM,CAAC,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAC3G,OAAO;QACT,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACb,MAAM,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QACrC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,wBAAQ,EAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAChE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACnD,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC;QAC3E,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;YACvB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,kCAAO,EAAC,gBAAgB,EAAE,sBAAsB,MAAM,CAAC,IAAI,kBAAkB,EAAE,CAAC,GAAG,CAAC,CAAC;gBAC5H,CAAC,CAAC,IAAA,kCAAO,EAAC,cAAc,EAAE,sBAAsB,MAAM,CAAC,IAAI,4BAA4B,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACnG,OAAO;QACT,CAAC;QACD,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,gGAAgG;QAChG,+FAA+F;QAC/F,6BAA6B;QAC7B,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;YACnD,KAAK,MAAM,CAAC,IAAI,UAAU;gBAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,KAAK,IAAA,0BAAI,EAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC;YACjG,OAAO;QACT,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAAC,QAAQ,CAAC,IAAI,CAAC,IAAA,kCAAO,EAAC,cAAc,EAAE,iBAAiB,MAAM,CAAC,IAAI,2BAA2B,EAAE,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QACvL,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,gCAAc,EAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC,CAAC,CAAC;QAC1F,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACrE,QAAQ,CAAC,IAAI,CAAC,IAAA,kCAAO,EAAC,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,IAAA,kCAAO,EAAC,cAAc,EAAE,cAAc,CAAC,CAAC,KAAK,+BAA+B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpJ,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,WAAW,CAAC,EAAU,EAAE,cAA8B,EAAE,KAAgB,EAAE,EAAoB;IACrG,MAAM,QAAQ,GAAG,KAAK,CAAC,cAAc,IAAI,EAAE,CAAC;IAC5C,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;QACnC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,gBAAgB,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QACjE,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QACjE,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IACtE,CAAC;IACD,MAAM,MAAM,GAAmB,IAAA,2CAAgB,EAAC,EAAE,EAAE,KAAK,EAAE;QACzD,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;KAC3H,CAAC,CAAC;IACH,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,CAAC;IACjD,OAAO,EAAE,QAAQ,EAAE,CAAC,GAAG,MAAM,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAW,EAAU,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,IAAI,GAAG,EAAE,CAAC;AAEhG,SAAgB,iBAAiB,CAC/B,EAAU,EAAE,cAA8B,EAAE,KAA4B,EAAE,IAAgB,EAAE,YAA6C;IAEzI,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,YAAY,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,cAAc,CAAC,CAAC;QAC9F,OAAO,EAAE,GAAG,SAAS,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACrJ,CAAC;IACD,sGAAsG;IACtG,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,mDAAmD,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACnH,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnG,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;IACnG,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACjH,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,KAAK,IAAA,0BAAI,EAAC,CAAC,CAAC,QAAQ,CAAC,8BAA8B,KAAK,CAAC,UAAU,iBAAiB,CAAC,CAAC;IAC9K,CAAC;IACD,IAAI,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;QAC7B,QAAQ,CAAC,IAAI,CAAC,IAAA,kCAAO,EAAC,kBAAkB,EAAE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,kCAAkC,UAAU,CAAC,MAAM,0CAA0C,CAAC,CAAC,CAAC;QACjK,IAAI,IAAA,qCAAU,EAAC,GAAG,CAAC,IAAI,IAAA,qCAAU,EAAC,cAAc,CAAC;YAAE,GAAG,GAAG,kBAAkB,CAAC;IAC9E,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC1E,CAAC"}

package/dist/contract/contract-git.d.ts

@@ -0,0 +1,24 @@
+export declare const CLI_GIT_TIMEOUT_MS = 30000;
+export declare const GUARD_GIT_TIMEOUT_MS = 3000;
+export declare class GitUnavailableError extends Error {
+    constructor(detail: string);
+}
+export interface HeadSnapshot {
+    root: string;
+    timeoutMs: number;
+    /** Project-relative path → blob id of each committed lock and decision; null when there is nothing to compare with. */
+    blobs: Map<string, string> | null;
+    /** Set when git FAILED in a checkout that has .git (blobs is then null). */
+    error?: string;
+}
+export declare function headSnapshot(root: string, timeoutMs?: number): HeadSnapshot;
+export declare const gitBlobId: (text: string) => string;
+export declare const posixRel: (root: string, abs: string) => string;
+/**
+ * The committed text of a project-relative path, or null when HEAD does not hold it. `workingText`
+ * (the file as it is on disk, if any) spares the `git show` when it is byte-identical to HEAD.
+ */
+export declare function headFileText(snap: HeadSnapshot, rel: string, workingText: string | null): string | null;
+/** A file's text, or null when it does not exist. */
+export declare function readTextOrNull(file: string): string | null;
+//# sourceMappingURL=contract-git.d.ts.map

package/dist/contract/contract-git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-git.d.ts","sourceRoot":"","sources":["../../src/contract/contract-git.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,kBAAkB,QAAS,CAAC;AACzC,eAAO,MAAM,oBAAoB,OAAQ,CAAC;AAE1C,qBAAa,mBAAoB,SAAQ,KAAK;gBAChC,MAAM,EAAE,MAAM;CAI3B;AA2BD,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,uHAAuH;IACvH,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;IAClC,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAqB,GAAG,YAAY,CAYvF;AAED,eAAO,MAAM,SAAS,GAAI,MAAM,MAAM,KAAG,MAGxC,CAAC;AAEF,eAAO,MAAM,QAAQ,GAAI,MAAM,MAAM,EAAE,KAAK,MAAM,KAAG,MAA4D,CAAC;AAElH;;;GAGG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAOvG;AAED,qDAAqD;AACrD,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK1D"}

package/dist/contract/contract-git.js

@@ -0,0 +1,144 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.posixRel = exports.gitBlobId = exports.GitUnavailableError = exports.GUARD_GIT_TIMEOUT_MS = exports.CLI_GIT_TIMEOUT_MS = void 0;
+exports.headSnapshot = headSnapshot;
+exports.headFileText = headFileText;
+exports.readTextOrNull = readTextOrNull;
+/**
+ * What git HEAD holds under `qa/`, for the contract (DOS-14.4) — with a timeout the caller picks
+ * (≈3 s inside the Claude Code guard, whose own budget is 5 s; 30 s for the CLI).
+ *
+ * Three answers, never confused:
+ *   blobs          one `git ls-tree -r -z HEAD -- qa`: every committed lock and decision with its blob id
+ *   no git         no `.git` at or above the project, or a repository without a first commit
+ *   git FAILED     `.git` is there but git errors, times out, refuses (dubious ownership) or is not
+ *                  installed — reported as `error`, so the caller can refuse to call a lock "clean"
+ *
+ * A file whose working bytes hash to its HEAD blob id IS its committed version: it is read from disk
+ * and needs no `git show`. git runs with fixed arguments, never through a shell.
+ */
+const child_process_1 = require("child_process");
+const crypto_1 = require("crypto");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+exports.CLI_GIT_TIMEOUT_MS = 30000;
+exports.GUARD_GIT_TIMEOUT_MS = 3000;
+class GitUnavailableError extends Error {
+    constructor(detail) {
+        super(`git is unavailable in a checkout that has .git (${detail}) — the contract lock cannot be compared with HEAD`);
+        this.name = 'GitUnavailableError';
+    }
+}
+exports.GitUnavailableError = GitUnavailableError;
+function runGit(cwd, args, timeoutMs) {
+    try {
+        const out = (0, child_process_1.execFileSync)('git', args, { cwd, stdio: ['ignore', 'pipe', 'pipe'], maxBuffer: 64 * 1024 * 1024, timeout: timeoutMs }).toString('utf8');
+        return { ok: true, out, timedOut: false, message: '' };
+    }
+    catch (e) {
+        const err = e;
+        const message = (err.stderr?.toString().trim() || err.message || String(e)).split('\n')[0];
+        return { ok: false, out: '', timedOut: err.code === 'ETIMEDOUT' || err.signal === 'SIGTERM', message };
+    }
+}
+function hasDotGit(start) {
+    let dir = path.resolve(start);
+    for (let i = 0; i < 40; i++) {
+        if (fs.existsSync(path.join(dir, '.git')))
+            return true;
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return false;
+        dir = parent;
+    }
+    return false;
+}
+const RECORD = /^\d+ blob ([0-9a-f]+)\t(.+)$/s;
+const KEEP = (p) => p.endsWith('/contracts.lock.yaml') || /\/decisions\/[^/]+\.yaml$/.test(p);
+function headSnapshot(root, timeoutMs = exports.CLI_GIT_TIMEOUT_MS) {
+    const r = runGit(root, ['ls-tree', '-r', '-z', 'HEAD', '--', 'qa'], timeoutMs);
+    if (r.ok) {
+        const blobs = new Map();
+        for (const rec of r.out.split('\0')) {
+            const m = rec.match(RECORD);
+            if (m && KEEP(m[2]))
+                blobs.set(m[2], m[1]);
+        }
+        return { root, timeoutMs, blobs };
+    }
+    if (r.timedOut)
+        return { root, timeoutMs, blobs: null, error: `git timed out after ${timeoutMs} ms` };
+    if (!hasDotGit(root))
+        return { root, timeoutMs, blobs: null };
+    const repo = runGit(root, ['rev-parse', '--git-dir'], timeoutMs);
+    if (repo.ok && !runGit(root, ['rev-parse', '--verify', '-q', 'HEAD'], timeoutMs).ok)
+        return { root, timeoutMs, blobs: null }; // no first commit yet
+    return { root, timeoutMs, blobs: null, error: r.message || 'git failed' };
+}
+const gitBlobId = (text) => {
+    const body = Buffer.from(text, 'utf8');
+    return (0, crypto_1.createHash)('sha1').update(Buffer.concat([Buffer.from(`blob ${body.length}\0`), body])).digest('hex');
+};
+exports.gitBlobId = gitBlobId;
+const posixRel = (root, abs) => path.relative(root, abs).split(path.sep).join('/');
+exports.posixRel = posixRel;
+/**
+ * The committed text of a project-relative path, or null when HEAD does not hold it. `workingText`
+ * (the file as it is on disk, if any) spares the `git show` when it is byte-identical to HEAD.
+ */
+function headFileText(snap, rel, workingText) {
+    const blob = snap.blobs?.get(rel);
+    if (blob === undefined)
+        return null;
+    if (workingText !== null && (0, exports.gitBlobId)(workingText) === blob)
+        return workingText;
+    const r = runGit(snap.root, ['show', `HEAD:./${rel}`], snap.timeoutMs);
+    if (!r.ok)
+        throw new GitUnavailableError(`git show HEAD:${rel}: ${r.timedOut ? 'timed out' : r.message}`);
+    return r.out;
+}
+/** A file's text, or null when it does not exist. */
+function readTextOrNull(file) {
+    try {
+        return fs.readFileSync(file, 'utf8');
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return null;
+        throw e;
+    }
+}
+//# sourceMappingURL=contract-git.js.map

package/dist/contract/contract-git.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-git.js","sourceRoot":"","sources":["../../src/contract/contract-git.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEA,oCAYC;AAaD,oCAOC;AAGD,wCAKC;AAzGD;;;;;;;;;;;;GAYG;AACH,iDAA6C;AAC7C,mCAAoC;AACpC,uCAAyB;AACzB,2CAA6B;AAEhB,QAAA,kBAAkB,GAAG,KAAM,CAAC;AAC5B,QAAA,oBAAoB,GAAG,IAAK,CAAC;AAE1C,MAAa,mBAAoB,SAAQ,KAAK;IAC5C,YAAY,MAAc;QACxB,KAAK,CAAC,mDAAmD,MAAM,oDAAoD,CAAC,CAAC;QACrH,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;IACpC,CAAC;CACF;AALD,kDAKC;AAKD,SAAS,MAAM,CAAC,GAAW,EAAE,IAAc,EAAE,SAAiB;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,4BAAY,EAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACpJ,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,GAAG,GAAG,CAAiE,CAAC;QAC9E,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,KAAK,WAAW,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,EAAE,OAAO,EAAE,CAAC;IACzG,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,IAAI,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACvD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QACjC,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,MAAM,MAAM,GAAG,+BAA+B,CAAC;AAC/C,MAAM,IAAI,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAE/G,SAAgB,YAAY,CAAC,IAAY,EAAE,SAAS,GAAG,0BAAkB;IACvE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/E,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;QACxC,KAAK,MAAM,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QACjH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,uBAAuB,SAAS,KAAK,EAAE,CAAC;IACtG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9D,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC,EAAE,SAAS,CAAC,CAAC;IACjE,IAAI,IAAI,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC,EAAE;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAE,sBAAsB;IACrJ,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,IAAI,YAAY,EAAE,CAAC;AAC5E,CAAC;AAEM,MAAM,SAAS,GAAG,CAAC,IAAY,EAAU,EAAE;IAChD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,OAAO,IAAA,mBAAU,EAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC9G,CAAC,CAAC;AAHW,QAAA,SAAS,aAGpB;AAEK,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,GAAW,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAArG,QAAA,QAAQ,YAA6F;AAElH;;;GAGG;AACH,SAAgB,YAAY,CAAC,IAAkB,EAAE,GAAW,EAAE,WAA0B;IACtF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpC,IAAI,WAAW,KAAK,IAAI,IAAI,IAAA,iBAAS,EAAC,WAAW,CAAC,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAChF,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,GAAG,EAAE,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACvE,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,mBAAmB,CAAC,iBAAiB,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1G,OAAO,CAAC,CAAC,GAAG,CAAC;AACf,CAAC;AAED,qDAAqD;AACrD,SAAgB,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAAC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACvD,IAAK,CAA2B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAChE,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/dist/contract/contract-hash.d.ts

@@ -0,0 +1,7 @@
+import type { ContractStep, Implementation } from './contract-schema';
+export declare const canonicalJson: (v: unknown) => string;
+/** Structural equality, key order ignored. */
+export declare const sameJson: (a: unknown, b: unknown) => boolean;
+export declare const sha256Hex: (s: string) => string;
+export declare function contractHash(implementation: Implementation, steps: ContractStep[]): string;
+//# sourceMappingURL=contract-hash.d.ts.map