@ybotok/loam 0.2.0-alpha.1 → 0.2.0-alpha.13

package/dist/commands/validate/validate.js

@@ -3,12 +3,12 @@ import { readFile } from "node:fs/promises";
 import { agentsStaleFinding, binaryBehindFinding } from "../../core/agent/agents-stamp.js";
 import { inOrder } from "../../core/kernel/concurrency.js";
 import { resolveServiceTarget } from "../../core/repo/service-target.js";
-import { loadConfig } from "../../core/envelope/config.js";
-import { emitJson, fail, NO_SERVICE_MESSAGE, reportNoConfig } from "../../core/envelope/json.js";
+import { loamOwnedFiles } from "../../core/envelope/config.js";
+import { configOrRefuse, emitJson, fail, NO_SERVICE_MESSAGE } from "../../core/envelope/json.js";
 import { DocsRepoUnavailableError } from "../../core/repo/state.js";
-import { agentsPath as agentsFile, featurePaths, landscapePath as landscapeFile, servicePathsAt } from "../../core/repo/paths.js";
+import { agentsPath as agentsFile, landscapePath as landscapeFile } from "../../core/repo/paths.js";
 import { listFeatures, listServices, missingFeatureMessage, resolveFeature } from "../../core/repo/repo.js";
-import { countSeverity, reportValid, targetJson, targetValid, } from "../../core/vocabulary/report.js";
+import { countSeverity, reportValid, targetJson } from "../../core/vocabulary/report.js";
 import { LOAM_VERSION } from "../../core/envelope/version.js";
 import { FleetContext } from "../../core/fleet-context.js";
 import { fixesFor } from "../policy/format.js";
@@ -16,13 +16,15 @@ import { docsRepoReady, reportDocsRepoError, reportRepositoryUnavailable, } from
 import { interruptedCommitFinding } from "../../core/staging/recovery/finding.js";
 import { scopeJson, scopeLine, scopeSince } from "../../core/diff/scope/changed-paths.js";
 import { validateLandscape } from "./fleet/landscape.js";
-import { loadArchitecture } from "../../core/c4/project/architecture.js";
-import { readLandscape } from "./fleet/load.js";
+import { prefetchFleetDocuments, readLandscape } from "./fleet/load.js";
 import { buildScorecard } from "./fleet/scorecard/scorecard.js";
 import { printScorecard } from "./fleet/scorecard/print.js";
 import { validateFeature } from "./feature.js";
 import { validateService } from "./service/service.js";
-import { ambiguousTarget, capDetails, guarded, renderText, summary, unverifiableSubjects } from "./report.js";
+import { scopedLandscapeFindings } from "./scope.js";
+import { introducedBinding, introducedJson, introducedLead } from "./checks/introduced.js";
+import { ambiguousTarget, capDetails, guarded, summary, unverifiableSubjects } from "./report.js";
+import { renderText } from "./render/text.js";
 export function registerValidate(program) {
     program
         .command("validate")
@@ -63,12 +65,9 @@ export function registerValidate(program) {
                 : "--base narrows --all to what changed since a ref — pass --all with it.");
             return;
         }
-        const loaded = await loadConfig();
-        if (loaded.kind !== "loaded") {
-            reportNoConfig(json, loaded);
+        const config = await configOrRefuse(json);
+        if (config === null)
             return;
-        }
-        const config = loaded.config;
         const { docsDir } = config;
         // Before anything is enumerated: a docsDir that is not a docs repo must
         // refuse, not report an empty fleet. See docsRepoReady. `--feature` is the
@@ -82,29 +81,42 @@ export function registerValidate(program) {
         // something when loam is standing in that repository — which is exactly
         // what loam.json's `service` records.
         const repoOf = (service) => config.service === service ? process.cwd() : undefined;
-        /** One service target, from a name the enumeration or the grammar approved. */
-        const serviceTarget = (id) => guarded({ kind: "service", id }, () => validateService({ docsDir, service: id, repoDir: repoOf(id), gherkinDir: config.gherkinDir, contracts: config.contracts, fleet }));
+        // What loam itself wrote into that repository, which no `sources` list owes a reading of.
+        const loamOwned = loamOwnedFiles(config);
+        /**
+         * One service target, from a name the enumeration or the grammar approved.
+         * `land` is --all's landscape, read once for the whole run and handed to
+         * the service. Null is PASSED — it means "there is no landscape file" —
+         * so the test is `=== undefined`, never truthiness: a repo with no
+         * landscape would otherwise re-load per service and double-report.
+         *
+         * `landscapeReported` says whether this run ALSO emits a landscape target
+         * to carry the map's parse errors, and it is the caller's to state: a
+         * preloaded map does not imply one. It used to be read off `land`, and
+         * under `--base` the landscape is a target only when the branch changed
+         * `architecture/` — so a broken committed map and a branch touching only
+         * a service told that service "reported once, on the landscape target"
+         * with no details, and the parser output was reported nowhere.
+         */
+        const serviceTarget = (id, land, landscapeReported = false) => guarded({ kind: "service", id }, docsDir, () => validateService({
+            docsDir, service: id, repoDir: repoOf(id), loamOwned, gherkinDir: config.gherkinDir, contracts: config.contracts, fleet,
+            ...(land === undefined ? {} : { preloaded: land }),
+            landscapeReported,
+        }));
+        /** One feature target; `land` as above, and left undefined it means "load it if you need it". */
+        const featureTarget = (feature, land) => guarded({ kind: "feature", id: feature.id }, docsDir, () => validateFeature(docsDir, feature, land, fleet));
         const targets = [];
         /** What the positional argument turned out to name, for the JSON payload. */
         let resolvedKind;
         /** The `--base` narrowing, once it is known. Null on every unscoped run — including every run without --base. */
         let scope = null;
+        /** The features a bare run validated in place of a bound service they introduce. Null on every other run. */
+        let introduced = null;
         try {
             if (opts.all) {
-                // ONE LikeC4 workspace for the whole run. The per-path load pays a
-                // fresh Langium workspace per document (~100ms each even warm), which
-                // made the fleet's main CI command O(documents) workspace spins —
-                // 13.7s median over the 120-service benchmark (docs/BENCHMARKS.md).
-                // So --all enumerates its documents up front — the landscape, every
-                // service model, every active feature's delta — and batch-parses
-                // them into the fleet context's memo; every loadLikeC4 below, the
-                // landscape read included, is then a seeded hit. The enumerations are
-                // the same memoized promises the target loops reuse. If the batch
-                // CANNOT run (a sandbox denying tmpdir writes), prefetch seeds
-                // nothing and every load falls back to today's per-path parse:
-                // identical findings, the old speed. Single-service validate and
-                // list keep their untouched code paths on purpose — the ≤10%
-                // regression bound in docs/BENCHMARKS.md holds by construction.
+                // ONE workspace per document kind for the whole run — the block moved
+                // to `fleet/load.ts` (`prefetchFleetDocuments`), which is where the
+                // rule about which shape parses in which workspace belongs.
                 const lp = landscapeFile(docsDir);
                 const enumerated = await listServices(docsDir, fleet);
                 const active = await listFeatures(docsDir, {}, fleet);
@@ -123,20 +135,21 @@ export function registerValidate(program) {
                 }
                 const services = scope === null ? enumerated : scope.services;
                 const features = scope === null ? active : scope.features;
-                await fleet.prefetchLikeC4([
-                    ...(existsSync(lp) ? [lp] : []),
-                    ...services.filter((svc) => svc.has.model).map((svc) => servicePathsAt(svc.dir).model),
-                    ...features.filter((feat) => feat.has.delta).map((feat) => featurePaths(feat.dir).delta),
-                ]);
+                await prefetchFleetDocuments({ docsDir, fleet, services, features });
                 // Read whether or not the landscape is a TARGET: every service check
                 // below joins against it, so a scoped run needs the map in hand even
-                // when it does not grade the map itself.
-                const land = existsSync(lp) ? await readLandscape(() => loadArchitecture(docsDir)) : null;
+                // when it does not grade the map itself. Through the fleet index, so
+                // the single-service path — which now reads the same project — answers
+                // out of the same memo rather than parsing it a second time.
+                const land = existsSync(lp) ? await readLandscape(() => fleet.architecture(docsDir)) : null;
                 // The fleet-level cross-check first: it frames everything below it, and a
                 // service nobody drew is worth knowing before its own findings scroll past.
                 // Under `--base` it is a target only when `architecture/` changed — the
-                // landscape owns no service directory, so that is its whole footprint.
-                if (scope === null || scope.landscape) {
+                // landscape owns no service directory, so that is its whole footprint —
+                // and even then not whole: `scope.ts` drops what grades a file the
+                // branch left alone and adds the call edges it wrote.
+                const landscapeIsTarget = scope === null || scope.landscape;
+                if (landscapeIsTarget) {
                     const landscape = await validateLandscape(docsDir, land, fleet);
                     targets.push(landscape);
                     // The agent contract check, --all only: AGENTS.md is written once and
@@ -156,18 +169,14 @@ export function registerValidate(program) {
                     const behind = binaryBehindFinding(agentsText, LOAM_VERSION);
                     if (behind !== null)
                         landscape.findings.push(behind);
+                    if (scope !== null) {
+                        landscape.findings = await scopedLandscapeFindings(landscape.findings, {
+                            docsDir, scope, land, services: enumerated, fleet,
+                        });
+                    }
                 }
-                targets.push(...(await inOrder(services, (svc) => guarded({ kind: "service", id: svc.id }, () => validateService({
-                    docsDir,
-                    service: svc.id,
-                    repoDir: repoOf(svc.id),
-                    preloaded: land,
-                    gherkinDir: config.gherkinDir,
-                    contracts: config.contracts,
-                    fleet,
-                    landscapeReported: true,
-                })))));
-                targets.push(...(await inOrder(features, (feat) => guarded({ kind: "feature", id: feat.id }, () => validateFeature(docsDir, feat, land, fleet)))));
+                targets.push(...(await inOrder(services, (svc) => serviceTarget(svc.id, land, landscapeIsTarget))));
+                targets.push(...(await inOrder(features, (feat) => featureTarget(feat, land))));
             }
             else if (opts.feature) {
                 const feature = await resolveFeature(docsDir, opts.feature, "exclude", fleet);
@@ -175,7 +184,7 @@ export function registerValidate(program) {
                     fail(json, "unknown-target", await missingFeatureMessage(docsDir, opts.feature, fleet));
                     return;
                 }
-                targets.push(await guarded({ kind: "feature", id: feature.id }, () => validateFeature(docsDir, feature, undefined, fleet)));
+                targets.push(await featureTarget(feature));
             }
             else if (target !== undefined) {
                 // The positional reads the way `show` reads one: try the feature first
@@ -187,7 +196,7 @@ export function registerValidate(program) {
                 const isService = (await listServices(docsDir, fleet)).some((s) => s.id === target);
                 if (feature) {
                     resolvedKind = "feature";
-                    const report = await guarded({ kind: "feature", id: feature.id }, () => validateFeature(docsDir, feature, undefined, fleet));
+                    const report = await featureTarget(feature);
                     if (isService)
                         report.findings.unshift(ambiguousTarget(target, "feature"));
                     targets.push(report);
@@ -209,14 +218,18 @@ export function registerValidate(program) {
             }
             else {
                 const service = opts.service ?? config.service;
-                if (!service) {
-                    fail(json, "invalid-option", NO_SERVICE_MESSAGE);
-                    return;
-                }
+                if (!service)
+                    return fail(json, "invalid-option", NO_SERVICE_MESSAGE);
                 const resolved = await resolveServiceTarget(docsDir, service, "--service", fleet);
                 if (!resolved.ok)
                     return fail(json, "invalid-option", resolved.problem);
-                targets.push(await serviceTarget(resolved.id));
+                // A bound service a feature in flight introduces has no services/ directory yet, so its documents are
+                // validated where they are — the binding's reading only, since `--service` forces a service target.
+                introduced = opts.service === undefined ? await introducedBinding(docsDir, resolved, fleet) : null;
+                if (introduced === null)
+                    targets.push(await serviceTarget(resolved.id));
+                else
+                    targets.push(...(await inOrder(introduced.features, (feat) => featureTarget(feat))));
             }
         }
         catch (err) {
@@ -240,10 +253,14 @@ export function registerValidate(program) {
         // A journal in the repo outranks everything graded above: the docs may
         // be half-merged, and in CI a green over them merges. Led, not appended
         // — it is the reason nothing below can be trusted — and attached to the
-        // first target because a finding lives in one.
+        // first target because a finding lives in one. `lead` keeps it leading
+        // in the fleet report too, which orders targets by kind rather than by
+        // position (render/text.ts) and would otherwise print it wherever the
+        // first target landed.
         const interrupted = await interruptedCommitFinding(docsDir);
-        if (interrupted !== null && targets.length > 0)
-            targets[0].findings.unshift(interrupted);
+        if (interrupted !== null && targets.length > 0) {
+            targets[0].findings.unshift({ ...interrupted, text: { ...interrupted.text, lead: true } });
+        }
         // The fleet scorecard, --all only: recomputed per invocation off the same
         // memoized reads this run already made — loam stores no history — and it
         // fails closed per axis, never whole (fleet/scorecard/scorecard.ts).
@@ -257,16 +274,21 @@ export function registerValidate(program) {
             : null;
         const valid = reportValid(targets);
         const capped = targets.map(capDetails);
+        // One rollup for both views: the --json summary and the text footer
+        // print this object, never a count of their own.
+        const totals = summary(targets);
         if (json) {
             emitJson({
                 command: "validate",
                 valid,
-                summary: summary(targets),
+                summary: totals,
                 ...(resolvedKind === undefined ? {} : { resolvedKind }),
                 // What this run looked at. Only under `--base`, so an unscoped payload
                 // is today's document and its ABSENCE says `summary` counts the whole
                 // fleet — scopeJson has why a scoped one may not stay silent.
                 ...(scope === null ? {} : { scope: scopeJson(scope) }),
+                // Only when a bare run validated the features introducing the bound service: why `targets` holds no service.
+                ...(introduced === null ? {} : { boundService: introducedJson(introduced) }),
                 // Emitted in every mode now that it is derived per service: a
                 // single-service run knows exactly as much about its own blind spot
                 // as `--all` knows about the fleet's.
@@ -314,9 +336,13 @@ export function registerValidate(program) {
             // would read as a green over the whole system.
             if (scope !== null)
                 console.log(scopeLine(scope));
+            // First for the same reason: what follows is a feature's report, not the service's.
+            if (introduced !== null)
+                console.log(`${introducedLead(introduced).join("\n")}\n`);
             renderText(capped, {
                 all: opts.all === true,
                 errorsOnly: opts.errorsOnly === true,
+                summary: totals,
                 unverifiable,
                 scorecard,
             });
@@ -334,5 +360,4 @@ export function registerValidate(program) {
             process.exitCode = 1;
     });
 }
-export { targetValid };
 //# sourceMappingURL=validate.js.map

package/dist/commands/validate/validate.js.map

@@ -1 +1 @@
-{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/commands/validate/validate.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,+BAA+B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,UAAU,IAAI,UAAU,EAAE,YAAY,EAAE,aAAa,IAAI,aAAa,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAClI,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EACL,aAAa,EACb,WAAW,EACX,UAAU,EACV,WAAW,GAEZ,MAAM,iCAAiC,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAsB,MAAM,wCAAwC,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uCAAuC,CAAC;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAY9G,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,QAAQ,CAAC,UAAU,EAAE,+FAA+F,CAAC;SACrH,WAAW,CAAC,gFAAgF,CAAC;SAC7F,MAAM,CAAC,gBAAgB,EAAE,0DAA0D,CAAC;SACpF,MAAM,CAAC,gBAAgB,EAAE,+CAA+C,CAAC;SACzE,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;SAClE,MAAM,CAAC,cAAc,EAAE,yGAAyG,CAAC;SACjI,MAAM,CAAC,UAAU,EAAE,oGAAoG,CAAC;SACxH,MAAM,CAAC,eAAe,EAAE,wFAAwF,CAAC;SACjH,MAAM,CAAC,QAAQ,EAAE,qDAAqD,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,MAA0B,EAAE,IAAqB,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;QAEhC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,MAAM,6DAA6D,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,wEAAwE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,qEAAqE;QACrE,wEAAwE;QACxE,mEAAmE;QACnE,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACjD,IAAI,CACF,IAAI,EACJ,gBAAgB,EAChB,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;gBAClD,CAAC,CAAC,6GAA6G;gBAC/G,CAAC,CAAC,wEAAwE,CAC7E,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC7B,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC7B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,wEAAwE;QACxE,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO;QAC9E,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QAEjC,yEAAyE;QACzE,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAsB,EAAE,CACrD,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QAEzD,+EAA+E;QAC/E,MAAM,aAAa,GAAG,CAAC,EAAgB,EAAyB,EAAE,CAChE,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CACpC,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,CAClI,CAAC;QAEJ,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,6EAA6E;QAC7E,IAAI,YAA+C,CAAC;QACpD,iHAAiH;QACjH,IAAI,KAAK,GAAyB,IAAI,CAAC;QAEvC,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,mEAAmE;gBACnE,sEAAsE;gBACtE,kEAAkE;gBAClE,oEAAoE;gBACpE,oEAAoE;gBACpE,iEAAiE;gBACjE,kEAAkE;gBAClE,sEAAsE;gBACtE,kEAAkE;gBAClE,+DAA+D;gBAC/D,+DAA+D;gBAC/D,iEAAiE;gBACjE,6DAA6D;gBAC7D,gEAAgE;gBAChE,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;gBACtD,uEAAuE;gBACvE,oEAAoE;gBACpE,uEAAuE;gBACvE,oEAAoE;gBACpE,6CAA6C;gBAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;oBACvG,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBAChC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;wBAC5C,OAAO;oBACT,CAAC;oBACD,KAAK,GAAG,QAAQ,CAAC;gBACnB,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9D,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC1D,MAAM,KAAK,CAAC,cAAc,CAAC;oBACzB,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/B,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;oBACtF,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;iBACzF,CAAC,CAAC;gBACH,qEAAqE;gBACrE,qEAAqE;gBACrE,yCAAyC;gBACzC,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC1F,0EAA0E;gBAC1E,4EAA4E;gBAC5E,wEAAwE;gBACxE,uEAAuE;gBACvE,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;oBACtC,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;oBAChE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,sEAAsE;oBACtE,iEAAiE;oBACjE,oEAAoE;oBACpE,mEAAmE;oBACnE,mEAAmE;oBACnE,oBAAoB;oBACpB,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;oBACvC,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;oBAC5D,IAAI,MAAM,KAAK,IAAI;wBAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrD,mEAAmE;oBACnE,qEAAqE;oBACrE,8CAA8C;oBAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;oBAC7D,IAAI,MAAM,KAAK,IAAI;wBAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvD,CAAC;gBACD,OAAO,CAAC,IAAI,CACV,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAClC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAC5C,eAAe,CAAC;oBACd,OAAO;oBACP,OAAO,EAAE,GAAG,CAAC,EAAE;oBACf,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;oBACvB,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,MAAM,CAAC,UAAU;oBAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;oBAC3B,KAAK;oBACL,iBAAiB,EAAE,IAAI;iBACxB,CAAC,CACH,CACF,CAAC,CACH,CAAC;gBACF,OAAO,CAAC,IAAI,CACV,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CACnC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAC7C,eAAe,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,CAC5C,CACF,CAAC,CACH,CAAC;YACJ,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;oBACxF,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,IAAI,CACV,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CACtD,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CACpD,CACF,CAAC;YACJ,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,uEAAuE;gBACvE,yEAAyE;gBACzE,wEAAwE;gBACxE,uEAAuE;gBACvE,mEAAmE;gBACnE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACxE,MAAM,SAAS,GAAG,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;gBACpF,IAAI,OAAO,EAAE,CAAC;oBACZ,YAAY,GAAG,SAAS,CAAC;oBACzB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CACrE,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CACpD,CAAC;oBACF,IAAI,SAAS;wBAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,mEAAmE;oBACnE,sEAAsE;oBACtE,8DAA8D;oBAC9D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBAClF,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClF,OAAO;oBACT,CAAC;oBACD,YAAY,GAAG,SAAS,CAAC;oBACzB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC9E,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACxE,OAAO,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;gBAC/C,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;oBACjD,OAAO;gBACT,CAAC;gBACD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;gBAClF,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACxE,OAAO,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,qEAAqE;YACrE,+DAA+D;YAC/D,uEAAuE;YACvE,qEAAqE;YACrE,qEAAqE;YACrE,gEAAgE;YAChE,0CAA0C;YAC1C,2BAA2B,CACzB,IAAI,EACJ,GAAG,EACH,8DAA8D,EAC9D,OAAO,CACR,CAAC;YACF,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACnD,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAE1F,0EAA0E;QAC1E,yEAAyE;QACzE,qEAAqE;QACrE,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,MAAM,SAAS,GACb,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,IAAI;YACxB,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACjF,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,CAAC;gBACP,OAAO,EAAE,UAAU;gBACnB,KAAK;gBACL,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC;gBACzB,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;gBACvD,uEAAuE;gBACvE,sEAAsE;gBACtE,8DAA8D;gBAC9D,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,8DAA8D;gBAC9D,oEAAoE;gBACpE,sCAAsC;gBACtC,2BAA2B,EAAE,YAAY;gBACzC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;gBAC5C,kEAAkE;gBAClE,qEAAqE;gBACrE,qEAAqE;gBACrE,mEAAmE;gBACnE,sEAAsE;gBACtE,cAAc;gBACd,EAAE;gBACF,+DAA+D;gBAC/D,mEAAmE;gBACnE,6DAA6D;gBAC7D,mEAAmE;gBACnE,0DAA0D;gBAC1D,4DAA4D;gBAC5D,EAAE;gBACF,oEAAoE;gBACpE,8DAA8D;gBAC9D,mEAAmE;gBACnE,qEAAqE;gBACrE,gEAAgE;gBAChE,oEAAoE;gBACpE,qEAAqE;gBACrE,mCAAmC;gBACnC,EAAE;gBACF,kEAAkE;gBAClE,oEAAoE;gBACpE,gEAAgE;gBAChE,oEAAoE;gBACpE,qEAAqE;gBACrE,oEAAoE;gBACpE,oEAAoE;gBACpE,mBAAmB;gBACnB,KAAK,EAAE,QAAQ,CACb,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACzF;gBACD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,sEAAsE;YACtE,sEAAsE;YACtE,+CAA+C;YAC/C,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAClD,UAAU,CAAC,MAAM,EAAE;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI;gBACtB,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI;gBACpC,YAAY;gBACZ,SAAS;aACV,CAAC,CAAC;YACH,IAAI,SAAS,KAAK,IAAI;gBAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,0EAA0E;QAC1E,qEAAqE;QACrE,iFAAiF;QACjF,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,YAAY,GAChB,IAAI,CAAC,MAAM,KAAK,IAAI;YACpB,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,IAAI,YAAY;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACP,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,CAAC","sourcesContent":["/**\n * `loam validate` — argument grammar, target selection, and the run's one\n * filesystem snapshot.\n *\n * The checks themselves live beside it, one module per target kind\n * (`landscape.ts`, `service/`, `feature/`) over the document checks they share\n * (`requirements.ts`). Every one of them produces findings and none of them\n * print: printing is `report.ts`'s, and it happens once, after the last target\n * is graded.\n */\nimport type { Command } from \"commander\";\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { agentsStaleFinding, binaryBehindFinding } from \"../../core/agent/agents-stamp.js\";\nimport { inOrder } from \"../../core/kernel/concurrency.js\";\nimport type { RawServiceId } from \"../../core/kernel/ids/service.js\";\nimport { resolveServiceTarget } from \"../../core/repo/service-target.js\";\nimport { loadConfig } from \"../../core/envelope/config.js\";\nimport { emitJson, fail, NO_SERVICE_MESSAGE, reportNoConfig } from \"../../core/envelope/json.js\";\nimport { DocsRepoUnavailableError } from \"../../core/repo/state.js\";\nimport { agentsPath as agentsFile, featurePaths, landscapePath as landscapeFile, servicePathsAt } from \"../../core/repo/paths.js\";\nimport { listFeatures, listServices, missingFeatureMessage, resolveFeature } from \"../../core/repo/repo.js\";\nimport {\n  countSeverity,\n  reportValid,\n  targetJson,\n  targetValid,\n  type TargetReport,\n} from \"../../core/vocabulary/report.js\";\nimport { LOAM_VERSION } from \"../../core/envelope/version.js\";\nimport { FleetContext } from \"../../core/fleet-context.js\";\nimport { fixesFor } from \"../policy/format.js\";\nimport {\n  docsRepoReady,\n  reportDocsRepoError,\n  reportRepositoryUnavailable,\n} from \"../policy/gate.js\";\nimport { interruptedCommitFinding } from \"../../core/staging/recovery/finding.js\";\nimport { scopeJson, scopeLine, scopeSince, type ValidateScope } from \"../../core/diff/scope/changed-paths.js\";\nimport { validateLandscape } from \"./fleet/landscape.js\";\nimport { loadArchitecture } from \"../../core/c4/project/architecture.js\";\nimport { readLandscape } from \"./fleet/load.js\";\nimport { buildScorecard } from \"./fleet/scorecard/scorecard.js\";\nimport { printScorecard } from \"./fleet/scorecard/print.js\";\nimport { validateFeature } from \"./feature.js\";\nimport { validateService } from \"./service/service.js\";\nimport { ambiguousTarget, capDetails, guarded, renderText, summary, unverifiableSubjects } from \"./report.js\";\n\ninterface ValidateOptions {\n  service?: string;\n  feature?: string;\n  all?: boolean;\n  base?: string;\n  strict?: boolean;\n  errorsOnly?: boolean;\n  json?: boolean;\n}\n\nexport function registerValidate(program: Command): void {\n  program\n    .command(\"validate\")\n    .argument(\"[target]\", \"service or feature id (a feature wins when both match; --service/--feature force the reading)\")\n    .description(\"Validate a service (C4 + requirement coverage) or a feature (delta + coverage)\")\n    .option(\"--service <id>\", \"service to validate (defaults to the configured service)\")\n    .option(\"--feature <id>\", \"validate a feature delta instead of a service\")\n    .option(\"--all\", \"validate every service and every active feature\")\n    .option(\"--base <ref>\", \"with --all: grade only the targets changed since a base git ref of the docs repo — the adoption ratchet\")\n    .option(\"--strict\", \"exit 1 on any warning too — a per-invocation CI lever; the report and --json payload do not change\")\n    .option(\"--errors-only\", \"print only errors and warnings — a rendering lever; the --json payload does not change\")\n    .option(\"--json\", \"emit the machine contract instead of the human view\")\n    .action(async (target: string | undefined, opts: ValidateOptions) => {\n      const json = opts.json === true;\n\n      if (target !== undefined && (opts.all || opts.service || opts.feature)) {\n        fail(json, \"invalid-option\", `'${target}' already names the target; drop --all/--service/--feature.`);\n        return;\n      }\n      if (opts.all && (opts.service || opts.feature)) {\n        fail(json, \"invalid-option\", \"--all validates everything; drop --service/--feature.\");\n        return;\n      }\n      // Two targets is no target: silently validating only the feature taught\n      // callers that --service had been honoured when it had been dropped.\n      if (opts.service && opts.feature) {\n        fail(json, \"invalid-option\", \"--service and --feature name different targets; pass one or the other.\");\n        return;\n      }\n      // `--base` NARROWS a whole-fleet run; it does not name one. Beside a\n      // positional, `--service` or `--feature` it is a scope over a scope — a\n      // contradiction rather than a narrowing, whose \"this service if it\n      // changed\" reading nobody could tell apart from a green over a service\n      // never looked at. `--base` and not `--since`: `--base <ref>` is already\n      // loam's word for a base git ref of the docs repo on diff and vouch.\n      if (opts.base !== undefined && opts.all !== true) {\n        fail(\n          json,\n          \"invalid-option\",\n          target !== undefined || opts.service || opts.feature\n            ? \"--base narrows --all to what changed since a ref; a named target is already a scope. Pass one or the other.\"\n            : \"--base narrows --all to what changed since a ref — pass --all with it.\",\n        );\n        return;\n      }\n\n      const loaded = await loadConfig();\n      if (loaded.kind !== \"loaded\") {\n        reportNoConfig(json, loaded);\n        return;\n      }\n      const config = loaded.config;\n      const { docsDir } = config;\n      // Before anything is enumerated: a docsDir that is not a docs repo must\n      // refuse, not report an empty fleet. See docsRepoReady. `--feature` is the\n      // one mode that never enumerates services, so it asks for less.\n      if (!docsRepoReady(json, docsDir, opts.feature ? \"docs\" : \"services\")) return;\n      // One invocation, one filesystem snapshot. Nothing is global: a later\n      // command gets a fresh index and therefore cannot observe stale files.\n      const fleet = new FleetContext();\n\n      // `sources` are paths into a service's own repository, so they only mean\n      // something when loam is standing in that repository — which is exactly\n      // what loam.json's `service` records.\n      const repoOf = (service: string): string | undefined =>\n        config.service === service ? process.cwd() : undefined;\n\n      /** One service target, from a name the enumeration or the grammar approved. */\n      const serviceTarget = (id: RawServiceId): Promise<TargetReport> =>\n        guarded({ kind: \"service\", id }, () =>\n          validateService({ docsDir, service: id, repoDir: repoOf(id), gherkinDir: config.gherkinDir, contracts: config.contracts, fleet }),\n        );\n\n      const targets: TargetReport[] = [];\n      /** What the positional argument turned out to name, for the JSON payload. */\n      let resolvedKind: \"service\" | \"feature\" | undefined;\n      /** The `--base` narrowing, once it is known. Null on every unscoped run — including every run without --base. */\n      let scope: ValidateScope | null = null;\n\n      try {\n        if (opts.all) {\n          // ONE LikeC4 workspace for the whole run. The per-path load pays a\n          // fresh Langium workspace per document (~100ms each even warm), which\n          // made the fleet's main CI command O(documents) workspace spins —\n          // 13.7s median over the 120-service benchmark (docs/BENCHMARKS.md).\n          // So --all enumerates its documents up front — the landscape, every\n          // service model, every active feature's delta — and batch-parses\n          // them into the fleet context's memo; every loadLikeC4 below, the\n          // landscape read included, is then a seeded hit. The enumerations are\n          // the same memoized promises the target loops reuse. If the batch\n          // CANNOT run (a sandbox denying tmpdir writes), prefetch seeds\n          // nothing and every load falls back to today's per-path parse:\n          // identical findings, the old speed. Single-service validate and\n          // list keep their untouched code paths on purpose — the ≤10%\n          // regression bound in docs/BENCHMARKS.md holds by construction.\n          const lp = landscapeFile(docsDir);\n          const enumerated = await listServices(docsDir, fleet);\n          const active = await listFeatures(docsDir, {}, fleet);\n          // `--base` narrows the enumerations and nothing else: a kept target is\n          // graded by exactly the checks `--all` would have run on it, at the\n          // same severities, through the same `--strict`. It matches through the\n          // ENUMERATIONS' own directories — changed-paths.ts says why a split\n          // on \"/\" silently drops every filed service.\n          if (opts.base !== undefined) {\n            const narrowed = await scopeSince({ docsDir, ref: opts.base, services: enumerated, features: active });\n            if (narrowed.kind === \"refused\") {\n              fail(json, narrowed.code, narrowed.message);\n              return;\n            }\n            scope = narrowed;\n          }\n          const services = scope === null ? enumerated : scope.services;\n          const features = scope === null ? active : scope.features;\n          await fleet.prefetchLikeC4([\n            ...(existsSync(lp) ? [lp] : []),\n            ...services.filter((svc) => svc.has.model).map((svc) => servicePathsAt(svc.dir).model),\n            ...features.filter((feat) => feat.has.delta).map((feat) => featurePaths(feat.dir).delta),\n          ]);\n          // Read whether or not the landscape is a TARGET: every service check\n          // below joins against it, so a scoped run needs the map in hand even\n          // when it does not grade the map itself.\n          const land = existsSync(lp) ? await readLandscape(() => loadArchitecture(docsDir)) : null;\n          // The fleet-level cross-check first: it frames everything below it, and a\n          // service nobody drew is worth knowing before its own findings scroll past.\n          // Under `--base` it is a target only when `architecture/` changed — the\n          // landscape owns no service directory, so that is its whole footprint.\n          if (scope === null || scope.landscape) {\n            const landscape = await validateLandscape(docsDir, land, fleet);\n            targets.push(landscape);\n            // The agent contract check, --all only: AGENTS.md is written once and\n            // never refreshed (the ownership contract), so the one thing the\n            // docs-repo-wide mode owes it is detection — a stamp older than the\n            // binary means agents are branching on tables the binary no longer\n            // honours. It grades the repo, not any service, so it rides on the\n            // landscape target.\n            const agentsPath = agentsFile(docsDir);\n            const agentsText = existsSync(agentsPath) ? await readFile(agentsPath, \"utf8\") : null;\n            const agents = agentsStaleFinding(agentsText, LOAM_VERSION);\n            if (agents !== null) landscape.findings.push(agents);\n            // The other direction, and the one that changes what a PASS means:\n            // this binary predates the corpus, so a directive it cannot parse is\n            // read as prose and produces no join to fail.\n            const behind = binaryBehindFinding(agentsText, LOAM_VERSION);\n            if (behind !== null) landscape.findings.push(behind);\n          }\n          targets.push(\n            ...(await inOrder(services, (svc) =>\n              guarded({ kind: \"service\", id: svc.id }, () =>\n                validateService({\n                  docsDir,\n                  service: svc.id,\n                  repoDir: repoOf(svc.id),\n                  preloaded: land,\n                  gherkinDir: config.gherkinDir,\n                  contracts: config.contracts,\n                  fleet,\n                  landscapeReported: true,\n                }),\n              ),\n            )),\n          );\n          targets.push(\n            ...(await inOrder(features, (feat) =>\n              guarded({ kind: \"feature\", id: feat.id }, () =>\n                validateFeature(docsDir, feat, land, fleet),\n              ),\n            )),\n          );\n        } else if (opts.feature) {\n          const feature = await resolveFeature(docsDir, opts.feature, \"exclude\", fleet);\n          if (!feature) {\n            fail(json, \"unknown-target\", await missingFeatureMessage(docsDir, opts.feature, fleet));\n            return;\n          }\n          targets.push(\n            await guarded({ kind: \"feature\", id: feature.id }, () =>\n              validateFeature(docsDir, feature, undefined, fleet),\n            ),\n          );\n        } else if (target !== undefined) {\n          // The positional reads the way `show` reads one: try the feature first\n          // (ids like FEAT-101 are distinctive, service names are arbitrary), then\n          // the service. --service/--feature stay as the explicit spellings for a\n          // name that could be both — and when both readings exist, the run says\n          // so out loud instead of silently taking one (`target.ambiguous`).\n          const feature = await resolveFeature(docsDir, target, \"exclude\", fleet);\n          const isService = (await listServices(docsDir, fleet)).some((s) => s.id === target);\n          if (feature) {\n            resolvedKind = \"feature\";\n            const report = await guarded({ kind: \"feature\", id: feature.id }, () =>\n              validateFeature(docsDir, feature, undefined, fleet),\n            );\n            if (isService) report.findings.unshift(ambiguousTarget(target, \"feature\"));\n            targets.push(report);\n          } else {\n            // Neither reading exists. An archived feature is its own diagnosis\n            // (\"already archived\", not \"no such thing\"); anything else reads as a\n            // service, so the did-you-mean hints in service.unknown fire.\n            if (!isService && (await resolveFeature(docsDir, target, \"only\", fleet)) !== null) {\n              fail(json, \"unknown-target\", await missingFeatureMessage(docsDir, target, fleet));\n              return;\n            }\n            resolvedKind = \"service\";\n            const resolved = await resolveServiceTarget(docsDir, target, \"target\", fleet);\n            if (!resolved.ok) return fail(json, \"invalid-option\", resolved.problem);\n            targets.push(await serviceTarget(resolved.id));\n          }\n        } else {\n          const service = opts.service ?? config.service;\n          if (!service) {\n            fail(json, \"invalid-option\", NO_SERVICE_MESSAGE);\n            return;\n          }\n          const resolved = await resolveServiceTarget(docsDir, service, \"--service\", fleet);\n          if (!resolved.ok) return fail(json, \"invalid-option\", resolved.problem);\n          targets.push(await serviceTarget(resolved.id));\n        }\n      } catch (err) {\n        // The docs repo went away between the gate above and the enumeration.\n        if (err instanceof DocsRepoUnavailableError) {\n          reportDocsRepoError(json, err);\n          return;\n        }\n        // An IO failure that `guarded` could not localise to one target — it\n        // happened in the ENUMERATION, which reads every living spec's\n        // frontmatter to build the service list. There is no partial report to\n        // give: without the list, no service was checked, including the ones\n        // that are fine. Say which file, and refuse; the one thing that must\n        // not happen is a stack trace on stdout's sibling stream and an\n        // `internal` envelope that names nothing.\n        reportRepositoryUnavailable(\n          json,\n          err,\n          \"the service list itself is unknown and nothing was validated\",\n          docsDir,\n        );\n        return;\n      }\n\n      // By subject, not by finding — the rule lives with the rollup in report.ts.\n      const unverifiable = unverifiableSubjects(targets);\n      // A journal in the repo outranks everything graded above: the docs may\n      // be half-merged, and in CI a green over them merges. Led, not appended\n      // — it is the reason nothing below can be trusted — and attached to the\n      // first target because a finding lives in one.\n      const interrupted = await interruptedCommitFinding(docsDir);\n      if (interrupted !== null && targets.length > 0) targets[0]!.findings.unshift(interrupted);\n\n      // The fleet scorecard, --all only: recomputed per invocation off the same\n      // memoized reads this run already made — loam stores no history — and it\n      // fails closed per axis, never whole (fleet/scorecard/scorecard.ts).\n      //\n      // Suppressed under `--base`: its denominators are the graded targets, so\n      // over a narrowed set it reads \"2 of 2 services documented\" for a fleet\n      // where ten more are not — and its axes license report.ts's grouping,\n      // which would drop real warnings because an unlooked-at axis reads zero.\n      const scorecard =\n        opts.all && scope === null\n          ? await buildScorecard({ docsDir, targets, fleet, boundService: config.service })\n          : null;\n\n      const valid = reportValid(targets);\n      const capped = targets.map(capDetails);\n      if (json) {\n        emitJson({\n          command: \"validate\",\n          valid,\n          summary: summary(targets),\n          ...(resolvedKind === undefined ? {} : { resolvedKind }),\n          // What this run looked at. Only under `--base`, so an unscoped payload\n          // is today's document and its ABSENCE says `summary` counts the whole\n          // fleet — scopeJson has why a scoped one may not stay silent.\n          ...(scope === null ? {} : { scope: scopeJson(scope) }),\n          // Emitted in every mode now that it is derived per service: a\n          // single-service run knows exactly as much about its own blind spot\n          // as `--all` knows about the fleet's.\n          sourcesUnverifiableFromHere: unverifiable,\n          ...(scorecard === null ? {} : { scorecard }),\n          // What to do about every code this run raised — the one thing the\n          // payload could not previously answer. `validate` is step 1 of every\n          // generated protocol and the command an agent reads first, and until\n          // now it replied in prose: a finding names a code and says what is\n          // wrong, and nothing in it said that `loam explain <code>` knows what\n          // to do next.\n          //\n          // A top-level MAP, not a field on each finding, for the reason\n          // report.ts's DETAIL_LIMIT gives about evidence: a hundred-service\n          // fleet raising one code a hundred times would ship the same\n          // sentence a hundred times, in the interface an agent pipes into a\n          // context window. The consumer joins `findings[].code` to\n          // `fixes[code]` — one lookup, no round trip, no repetition.\n          //\n          // Keyed ONLY by codes a non-`ok` finding raised. A confirmation has\n          // nothing to fix, and on a clean fleet the `ok` codes are the\n          // overwhelming majority of findings; attaching fixes to them would\n          // pay the whole vocabulary's byte cost to tell a reader that nothing\n          // is wrong. `targets` is read here rather than `capped` because\n          // capping truncates evidence, not findings — the two raise the same\n          // codes, and reading the uncapped set keeps this rollup computed off\n          // the same targets as `summary()`.\n          //\n          // Not behind a flag, deliberately. It is additive, so no consumer\n          // that ignores it is affected; it is small, because it carries only\n          // the handful of codes this run actually raised rather than the\n          // 227-row vocabulary; and a flag would mean an agent has to already\n          // know the fixes exist in order to ask for them — which is the exact\n          // gap being closed. It is emitted on a green run too, as `{}`, so a\n          // consumer never has to branch on the key's presence before looking\n          // a code up in it.\n          fixes: fixesFor(\n            targets.flatMap((t) => t.findings.filter((f) => f.severity !== \"ok\").map((f) => f.code)),\n          ),\n          targets: capped.map(targetJson),\n        });\n      } else {\n        // The scope FIRST: a reader has to know what the report below is a\n        // report ABOUT, and in the zero-target case there is nothing below at\n        // all — printed after the findings, the one run that most needs words\n        // would read as a green over the whole system.\n        if (scope !== null) console.log(scopeLine(scope));\n        renderText(capped, {\n          all: opts.all === true,\n          errorsOnly: opts.errorsOnly === true,\n          unverifiable,\n          scorecard,\n        });\n        if (scorecard !== null) printScorecard(scorecard);\n      }\n      // --strict is a per-invocation CI lever: it fails the run on any error or\n      // warning (ok-severity confirmations never trip it — virtually every\n      // clean target emits some), and changes nothing else — `valid` keeps meaning \"no\n      // errors\" in text and JSON alike, so two pipelines reading the same repo\n      // may grade the same report differently and both are telling the truth.\n      const strictFailed =\n        opts.strict === true &&\n        countSeverity(targets, \"error\") + countSeverity(targets, \"warn\") > 0;\n      if (!valid || strictFailed) process.exitCode = 1;\n    });\n}\n\nexport { targetValid };\n"]}
+{"version":3,"file":"validate.js","sourceRoot":"","sources":["../../../src/commands/validate/validate.ts"],"names":[],"mappings":"AAWA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAC3F,OAAO,EAAE,OAAO,EAAE,MAAM,kCAAkC,CAAC;AAE3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAGzE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACjG,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,UAAU,IAAI,UAAU,EAAE,aAAa,IAAI,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACpG,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,qBAAqB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC5G,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,UAAU,EAAqB,MAAM,iCAAiC,CAAC;AAC5G,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,2BAA2B,GAC5B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAsB,MAAM,wCAAwC,CAAC;AAC9G,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AACrD,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc,EAA0B,MAAM,wBAAwB,CAAC;AACnH,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAClG,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAY9C,MAAM,UAAU,gBAAgB,CAAC,OAAgB;IAC/C,OAAO;SACJ,OAAO,CAAC,UAAU,CAAC;SACnB,QAAQ,CAAC,UAAU,EAAE,+FAA+F,CAAC;SACrH,WAAW,CAAC,gFAAgF,CAAC;SAC7F,MAAM,CAAC,gBAAgB,EAAE,0DAA0D,CAAC;SACpF,MAAM,CAAC,gBAAgB,EAAE,+CAA+C,CAAC;SACzE,MAAM,CAAC,OAAO,EAAE,iDAAiD,CAAC;SAClE,MAAM,CAAC,cAAc,EAAE,yGAAyG,CAAC;SACjI,MAAM,CAAC,UAAU,EAAE,oGAAoG,CAAC;SACxH,MAAM,CAAC,eAAe,EAAE,wFAAwF,CAAC;SACjH,MAAM,CAAC,QAAQ,EAAE,qDAAqD,CAAC;SACvE,MAAM,CAAC,KAAK,EAAE,MAA0B,EAAE,IAAqB,EAAE,EAAE;QAClE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC;QAEhC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACvE,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,IAAI,MAAM,6DAA6D,CAAC,CAAC;YACtG,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,uDAAuD,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QACD,wEAAwE;QACxE,qEAAqE;QACrE,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,wEAAwE,CAAC,CAAC;YACvG,OAAO;QACT,CAAC;QACD,qEAAqE;QACrE,wEAAwE;QACxE,mEAAmE;QACnE,uEAAuE;QACvE,yEAAyE;QACzE,qEAAqE;QACrE,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,CAAC;YACjD,IAAI,CACF,IAAI,EACJ,gBAAgB,EAChB,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO;gBAClD,CAAC,CAAC,6GAA6G;gBAC/G,CAAC,CAAC,wEAAwE,CAC7E,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO;QAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAC3B,wEAAwE;QACxE,2EAA2E;QAC3E,gEAAgE;QAChE,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO;QAC9E,sEAAsE;QACtE,uEAAuE;QACvE,MAAM,KAAK,GAAG,IAAI,YAAY,EAAE,CAAC;QAEjC,yEAAyE;QACzE,wEAAwE;QACxE,sCAAsC;QACtC,MAAM,MAAM,GAAG,CAAC,OAAe,EAAsB,EAAE,CACrD,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;QACzD,0FAA0F;QAC1F,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAEzC;;;;;;;;;;;;;;WAcG;QACH,MAAM,aAAa,GAAG,CAAC,EAAgB,EAAE,IAAuB,EAAE,iBAAiB,GAAG,KAAK,EAAyB,EAAE,CACpH,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAC7C,eAAe,CAAC;YACd,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK;YACvH,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;YAClD,iBAAiB;SAClB,CAAC,CACH,CAAC;QACJ,iGAAiG;QACjG,MAAM,aAAa,GAAG,CAAC,OAAqB,EAAE,IAAuB,EAAyB,EAAE,CAC9F,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,eAAe,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;QAE9G,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,6EAA6E;QAC7E,IAAI,YAA+C,CAAC;QACpD,iHAAiH;QACjH,IAAI,KAAK,GAAyB,IAAI,CAAC;QACvC,6GAA6G;QAC7G,IAAI,UAAU,GAA6B,IAAI,CAAC;QAEhD,IAAI,CAAC;YACH,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;gBACb,sEAAsE;gBACtE,oEAAoE;gBACpE,4DAA4D;gBAC5D,MAAM,EAAE,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;gBAClC,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;gBACtD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;gBACtD,uEAAuE;gBACvE,oEAAoE;gBACpE,uEAAuE;gBACvE,oEAAoE;gBACpE,6CAA6C;gBAC7C,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBAC5B,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;oBACvG,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBAChC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;wBAC5C,OAAO;oBACT,CAAC;oBACD,KAAK,GAAG,QAAQ,CAAC;gBACnB,CAAC;gBACD,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC9D,MAAM,QAAQ,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC;gBAC1D,MAAM,sBAAsB,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;gBACrE,qEAAqE;gBACrE,qEAAqE;gBACrE,qEAAqE;gBACrE,uEAAuE;gBACvE,6DAA6D;gBAC7D,MAAM,IAAI,GAAG,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBAC5F,0EAA0E;gBAC1E,4EAA4E;gBAC5E,wEAAwE;gBACxE,wEAAwE;gBACxE,mEAAmE;gBACnE,sDAAsD;gBACtD,MAAM,iBAAiB,GAAG,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,SAAS,CAAC;gBAC5D,IAAI,iBAAiB,EAAE,CAAC;oBACtB,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;oBAChE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBACxB,sEAAsE;oBACtE,iEAAiE;oBACjE,oEAAoE;oBACpE,mEAAmE;oBACnE,mEAAmE;oBACnE,oBAAoB;oBACpB,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;oBACvC,MAAM,UAAU,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;oBACtF,MAAM,MAAM,GAAG,kBAAkB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;oBAC5D,IAAI,MAAM,KAAK,IAAI;wBAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrD,mEAAmE;oBACnE,qEAAqE;oBACrE,8CAA8C;oBAC9C,MAAM,MAAM,GAAG,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;oBAC7D,IAAI,MAAM,KAAK,IAAI;wBAAE,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;oBACrD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;wBACnB,SAAS,CAAC,QAAQ,GAAG,MAAM,uBAAuB,CAAC,SAAS,CAAC,QAAQ,EAAE;4BACrE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK;yBAClD,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBAC9E,IAAI,CAAC,OAAO,EAAE,CAAC;oBACb,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;oBACxF,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,uEAAuE;gBACvE,yEAAyE;gBACzE,wEAAwE;gBACxE,uEAAuE;gBACvE,mEAAmE;gBACnE,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;gBACxE,MAAM,SAAS,GAAG,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;gBACpF,IAAI,OAAO,EAAE,CAAC;oBACZ,YAAY,GAAG,SAAS,CAAC;oBACzB,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;oBAC5C,IAAI,SAAS;wBAAE,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;oBAC3E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACvB,CAAC;qBAAM,CAAC;oBACN,mEAAmE;oBACnE,sEAAsE;oBACtE,8DAA8D;oBAC9D,IAAI,CAAC,SAAS,IAAI,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;wBAClF,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;wBAClF,OAAO;oBACT,CAAC;oBACD,YAAY,GAAG,SAAS,CAAC;oBACzB,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;oBAC9E,IAAI,CAAC,QAAQ,CAAC,EAAE;wBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;oBACxE,OAAO,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;gBACjD,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;gBAC/C,IAAI,CAAC,OAAO;oBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;gBACtE,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC;gBAClF,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;gBACxE,sGAAsG;gBACtG,oGAAoG;gBACpG,UAAU,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnG,IAAI,UAAU,KAAK,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;;oBACnE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5F,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,sEAAsE;YACtE,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;gBAC5C,mBAAmB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;gBAC/B,OAAO;YACT,CAAC;YACD,qEAAqE;YACrE,+DAA+D;YAC/D,uEAAuE;YACvE,qEAAqE;YACrE,qEAAqE;YACrE,gEAAgE;YAChE,0CAA0C;YAC1C,2BAA2B,CACzB,IAAI,EACJ,GAAG,EACH,8DAA8D,EAC9D,OAAO,CACR,CAAC;YACF,OAAO;QACT,CAAC;QAED,4EAA4E;QAC5E,MAAM,YAAY,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QACnD,uEAAuE;QACvE,wEAAwE;QACxE,wEAAwE;QACxE,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,uBAAuB;QACvB,MAAM,WAAW,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,WAAW,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,OAAO,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,GAAG,WAAW,EAAE,IAAI,EAAE,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,0EAA0E;QAC1E,yEAAyE;QACzE,qEAAqE;QACrE,EAAE;QACF,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,MAAM,SAAS,GACb,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,IAAI;YACxB,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;YACjF,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACvC,oEAAoE;QACpE,iDAAiD;QACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAChC,IAAI,IAAI,EAAE,CAAC;YACT,QAAQ,CAAC;gBACP,OAAO,EAAE,UAAU;gBACnB,KAAK;gBACL,OAAO,EAAE,MAAM;gBACf,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;gBACvD,uEAAuE;gBACvE,sEAAsE;gBACtE,8DAA8D;gBAC9D,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtD,6GAA6G;gBAC7G,GAAG,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC5E,8DAA8D;gBAC9D,oEAAoE;gBACpE,sCAAsC;gBACtC,2BAA2B,EAAE,YAAY;gBACzC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC;gBAC5C,kEAAkE;gBAClE,qEAAqE;gBACrE,qEAAqE;gBACrE,mEAAmE;gBACnE,sEAAsE;gBACtE,cAAc;gBACd,EAAE;gBACF,+DAA+D;gBAC/D,mEAAmE;gBACnE,6DAA6D;gBAC7D,mEAAmE;gBACnE,0DAA0D;gBAC1D,4DAA4D;gBAC5D,EAAE;gBACF,oEAAoE;gBACpE,8DAA8D;gBAC9D,mEAAmE;gBACnE,qEAAqE;gBACrE,gEAAgE;gBAChE,oEAAoE;gBACpE,qEAAqE;gBACrE,mCAAmC;gBACnC,EAAE;gBACF,kEAAkE;gBAClE,oEAAoE;gBACpE,gEAAgE;gBAChE,oEAAoE;gBACpE,qEAAqE;gBACrE,oEAAoE;gBACpE,oEAAoE;gBACpE,mBAAmB;gBACnB,KAAK,EAAE,QAAQ,CACb,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CACzF;gBACD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,mEAAmE;YACnE,sEAAsE;YACtE,sEAAsE;YACtE,+CAA+C;YAC/C,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YAClD,oFAAoF;YACpF,IAAI,UAAU,KAAK,IAAI;gBAAE,OAAO,CAAC,GAAG,CAAC,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACnF,UAAU,CAAC,MAAM,EAAE;gBACjB,GAAG,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI;gBACtB,UAAU,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI;gBACpC,OAAO,EAAE,MAAM;gBACf,YAAY;gBACZ,SAAS;aACV,CAAC,CAAC;YACH,IAAI,SAAS,KAAK,IAAI;gBAAE,cAAc,CAAC,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,0EAA0E;QAC1E,qEAAqE;QACrE,iFAAiF;QACjF,yEAAyE;QACzE,wEAAwE;QACxE,MAAM,YAAY,GAChB,IAAI,CAAC,MAAM,KAAK,IAAI;YACpB,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACvE,IAAI,CAAC,KAAK,IAAI,YAAY;YAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACnD,CAAC,CAAC,CAAC;AACP,CAAC","sourcesContent":["/**\n * `loam validate` — argument grammar, target selection, and the run's one\n * filesystem snapshot.\n *\n * The checks themselves live beside it, one module per target kind\n * (`landscape.ts`, `service/`, `feature/`) over the document checks they share\n * (`requirements.ts`). Every one of them produces findings and none of them\n * print: printing is `report.ts`'s, and it happens once, after the last target\n * is graded.\n */\nimport type { Command } from \"commander\";\nimport { existsSync } from \"node:fs\";\nimport { readFile } from \"node:fs/promises\";\nimport { agentsStaleFinding, binaryBehindFinding } from \"../../core/agent/agents-stamp.js\";\nimport { inOrder } from \"../../core/kernel/concurrency.js\";\nimport type { RawServiceId } from \"../../core/kernel/ids/service.js\";\nimport { resolveServiceTarget } from \"../../core/repo/service-target.js\";\nimport type { LoadedDoc } from \"../../core/c4/likec4.js\";\nimport type { FeatureEntry } from \"../../core/repo/entries.js\";\nimport { loamOwnedFiles } from \"../../core/envelope/config.js\";\nimport { configOrRefuse, emitJson, fail, NO_SERVICE_MESSAGE } from \"../../core/envelope/json.js\";\nimport { DocsRepoUnavailableError } from \"../../core/repo/state.js\";\nimport { agentsPath as agentsFile, landscapePath as landscapeFile } from \"../../core/repo/paths.js\";\nimport { listFeatures, listServices, missingFeatureMessage, resolveFeature } from \"../../core/repo/repo.js\";\nimport { countSeverity, reportValid, targetJson, type TargetReport } from \"../../core/vocabulary/report.js\";\nimport { LOAM_VERSION } from \"../../core/envelope/version.js\";\nimport { FleetContext } from \"../../core/fleet-context.js\";\nimport { fixesFor } from \"../policy/format.js\";\nimport {\n  docsRepoReady,\n  reportDocsRepoError,\n  reportRepositoryUnavailable,\n} from \"../policy/gate.js\";\nimport { interruptedCommitFinding } from \"../../core/staging/recovery/finding.js\";\nimport { scopeJson, scopeLine, scopeSince, type ValidateScope } from \"../../core/diff/scope/changed-paths.js\";\nimport { validateLandscape } from \"./fleet/landscape.js\";\nimport { prefetchFleetDocuments, readLandscape } from \"./fleet/load.js\";\nimport { buildScorecard } from \"./fleet/scorecard/scorecard.js\";\nimport { printScorecard } from \"./fleet/scorecard/print.js\";\nimport { validateFeature } from \"./feature.js\";\nimport { validateService } from \"./service/service.js\";\nimport { scopedLandscapeFindings } from \"./scope.js\";\nimport { introducedBinding, introducedJson, introducedLead, type IntroducedBinding } from \"./checks/introduced.js\";\nimport { ambiguousTarget, capDetails, guarded, summary, unverifiableSubjects } from \"./report.js\";\nimport { renderText } from \"./render/text.js\";\n\ninterface ValidateOptions {\n  service?: string;\n  feature?: string;\n  all?: boolean;\n  base?: string;\n  strict?: boolean;\n  errorsOnly?: boolean;\n  json?: boolean;\n}\n\nexport function registerValidate(program: Command): void {\n  program\n    .command(\"validate\")\n    .argument(\"[target]\", \"service or feature id (a feature wins when both match; --service/--feature force the reading)\")\n    .description(\"Validate a service (C4 + requirement coverage) or a feature (delta + coverage)\")\n    .option(\"--service <id>\", \"service to validate (defaults to the configured service)\")\n    .option(\"--feature <id>\", \"validate a feature delta instead of a service\")\n    .option(\"--all\", \"validate every service and every active feature\")\n    .option(\"--base <ref>\", \"with --all: grade only the targets changed since a base git ref of the docs repo — the adoption ratchet\")\n    .option(\"--strict\", \"exit 1 on any warning too — a per-invocation CI lever; the report and --json payload do not change\")\n    .option(\"--errors-only\", \"print only errors and warnings — a rendering lever; the --json payload does not change\")\n    .option(\"--json\", \"emit the machine contract instead of the human view\")\n    .action(async (target: string | undefined, opts: ValidateOptions) => {\n      const json = opts.json === true;\n\n      if (target !== undefined && (opts.all || opts.service || opts.feature)) {\n        fail(json, \"invalid-option\", `'${target}' already names the target; drop --all/--service/--feature.`);\n        return;\n      }\n      if (opts.all && (opts.service || opts.feature)) {\n        fail(json, \"invalid-option\", \"--all validates everything; drop --service/--feature.\");\n        return;\n      }\n      // Two targets is no target: silently validating only the feature taught\n      // callers that --service had been honoured when it had been dropped.\n      if (opts.service && opts.feature) {\n        fail(json, \"invalid-option\", \"--service and --feature name different targets; pass one or the other.\");\n        return;\n      }\n      // `--base` NARROWS a whole-fleet run; it does not name one. Beside a\n      // positional, `--service` or `--feature` it is a scope over a scope — a\n      // contradiction rather than a narrowing, whose \"this service if it\n      // changed\" reading nobody could tell apart from a green over a service\n      // never looked at. `--base` and not `--since`: `--base <ref>` is already\n      // loam's word for a base git ref of the docs repo on diff and vouch.\n      if (opts.base !== undefined && opts.all !== true) {\n        fail(\n          json,\n          \"invalid-option\",\n          target !== undefined || opts.service || opts.feature\n            ? \"--base narrows --all to what changed since a ref; a named target is already a scope. Pass one or the other.\"\n            : \"--base narrows --all to what changed since a ref — pass --all with it.\",\n        );\n        return;\n      }\n\n      const config = await configOrRefuse(json);\n      if (config === null) return;\n      const { docsDir } = config;\n      // Before anything is enumerated: a docsDir that is not a docs repo must\n      // refuse, not report an empty fleet. See docsRepoReady. `--feature` is the\n      // one mode that never enumerates services, so it asks for less.\n      if (!docsRepoReady(json, docsDir, opts.feature ? \"docs\" : \"services\")) return;\n      // One invocation, one filesystem snapshot. Nothing is global: a later\n      // command gets a fresh index and therefore cannot observe stale files.\n      const fleet = new FleetContext();\n\n      // `sources` are paths into a service's own repository, so they only mean\n      // something when loam is standing in that repository — which is exactly\n      // what loam.json's `service` records.\n      const repoOf = (service: string): string | undefined =>\n        config.service === service ? process.cwd() : undefined;\n      // What loam itself wrote into that repository, which no `sources` list owes a reading of.\n      const loamOwned = loamOwnedFiles(config);\n\n      /**\n       * One service target, from a name the enumeration or the grammar approved.\n       * `land` is --all's landscape, read once for the whole run and handed to\n       * the service. Null is PASSED — it means \"there is no landscape file\" —\n       * so the test is `=== undefined`, never truthiness: a repo with no\n       * landscape would otherwise re-load per service and double-report.\n       *\n       * `landscapeReported` says whether this run ALSO emits a landscape target\n       * to carry the map's parse errors, and it is the caller's to state: a\n       * preloaded map does not imply one. It used to be read off `land`, and\n       * under `--base` the landscape is a target only when the branch changed\n       * `architecture/` — so a broken committed map and a branch touching only\n       * a service told that service \"reported once, on the landscape target\"\n       * with no details, and the parser output was reported nowhere.\n       */\n      const serviceTarget = (id: RawServiceId, land?: LoadedDoc | null, landscapeReported = false): Promise<TargetReport> =>\n        guarded({ kind: \"service\", id }, docsDir, () =>\n          validateService({\n            docsDir, service: id, repoDir: repoOf(id), loamOwned, gherkinDir: config.gherkinDir, contracts: config.contracts, fleet,\n            ...(land === undefined ? {} : { preloaded: land }),\n            landscapeReported,\n          }),\n        );\n      /** One feature target; `land` as above, and left undefined it means \"load it if you need it\". */\n      const featureTarget = (feature: FeatureEntry, land?: LoadedDoc | null): Promise<TargetReport> =>\n        guarded({ kind: \"feature\", id: feature.id }, docsDir, () => validateFeature(docsDir, feature, land, fleet));\n\n      const targets: TargetReport[] = [];\n      /** What the positional argument turned out to name, for the JSON payload. */\n      let resolvedKind: \"service\" | \"feature\" | undefined;\n      /** The `--base` narrowing, once it is known. Null on every unscoped run — including every run without --base. */\n      let scope: ValidateScope | null = null;\n      /** The features a bare run validated in place of a bound service they introduce. Null on every other run. */\n      let introduced: IntroducedBinding | null = null;\n\n      try {\n        if (opts.all) {\n          // ONE workspace per document kind for the whole run — the block moved\n          // to `fleet/load.ts` (`prefetchFleetDocuments`), which is where the\n          // rule about which shape parses in which workspace belongs.\n          const lp = landscapeFile(docsDir);\n          const enumerated = await listServices(docsDir, fleet);\n          const active = await listFeatures(docsDir, {}, fleet);\n          // `--base` narrows the enumerations and nothing else: a kept target is\n          // graded by exactly the checks `--all` would have run on it, at the\n          // same severities, through the same `--strict`. It matches through the\n          // ENUMERATIONS' own directories — changed-paths.ts says why a split\n          // on \"/\" silently drops every filed service.\n          if (opts.base !== undefined) {\n            const narrowed = await scopeSince({ docsDir, ref: opts.base, services: enumerated, features: active });\n            if (narrowed.kind === \"refused\") {\n              fail(json, narrowed.code, narrowed.message);\n              return;\n            }\n            scope = narrowed;\n          }\n          const services = scope === null ? enumerated : scope.services;\n          const features = scope === null ? active : scope.features;\n          await prefetchFleetDocuments({ docsDir, fleet, services, features });\n          // Read whether or not the landscape is a TARGET: every service check\n          // below joins against it, so a scoped run needs the map in hand even\n          // when it does not grade the map itself. Through the fleet index, so\n          // the single-service path — which now reads the same project — answers\n          // out of the same memo rather than parsing it a second time.\n          const land = existsSync(lp) ? await readLandscape(() => fleet.architecture(docsDir)) : null;\n          // The fleet-level cross-check first: it frames everything below it, and a\n          // service nobody drew is worth knowing before its own findings scroll past.\n          // Under `--base` it is a target only when `architecture/` changed — the\n          // landscape owns no service directory, so that is its whole footprint —\n          // and even then not whole: `scope.ts` drops what grades a file the\n          // branch left alone and adds the call edges it wrote.\n          const landscapeIsTarget = scope === null || scope.landscape;\n          if (landscapeIsTarget) {\n            const landscape = await validateLandscape(docsDir, land, fleet);\n            targets.push(landscape);\n            // The agent contract check, --all only: AGENTS.md is written once and\n            // never refreshed (the ownership contract), so the one thing the\n            // docs-repo-wide mode owes it is detection — a stamp older than the\n            // binary means agents are branching on tables the binary no longer\n            // honours. It grades the repo, not any service, so it rides on the\n            // landscape target.\n            const agentsPath = agentsFile(docsDir);\n            const agentsText = existsSync(agentsPath) ? await readFile(agentsPath, \"utf8\") : null;\n            const agents = agentsStaleFinding(agentsText, LOAM_VERSION);\n            if (agents !== null) landscape.findings.push(agents);\n            // The other direction, and the one that changes what a PASS means:\n            // this binary predates the corpus, so a directive it cannot parse is\n            // read as prose and produces no join to fail.\n            const behind = binaryBehindFinding(agentsText, LOAM_VERSION);\n            if (behind !== null) landscape.findings.push(behind);\n            if (scope !== null) {\n              landscape.findings = await scopedLandscapeFindings(landscape.findings, {\n                docsDir, scope, land, services: enumerated, fleet,\n              });\n            }\n          }\n          targets.push(...(await inOrder(services, (svc) => serviceTarget(svc.id, land, landscapeIsTarget))));\n          targets.push(...(await inOrder(features, (feat) => featureTarget(feat, land))));\n        } else if (opts.feature) {\n          const feature = await resolveFeature(docsDir, opts.feature, \"exclude\", fleet);\n          if (!feature) {\n            fail(json, \"unknown-target\", await missingFeatureMessage(docsDir, opts.feature, fleet));\n            return;\n          }\n          targets.push(await featureTarget(feature));\n        } else if (target !== undefined) {\n          // The positional reads the way `show` reads one: try the feature first\n          // (ids like FEAT-101 are distinctive, service names are arbitrary), then\n          // the service. --service/--feature stay as the explicit spellings for a\n          // name that could be both — and when both readings exist, the run says\n          // so out loud instead of silently taking one (`target.ambiguous`).\n          const feature = await resolveFeature(docsDir, target, \"exclude\", fleet);\n          const isService = (await listServices(docsDir, fleet)).some((s) => s.id === target);\n          if (feature) {\n            resolvedKind = \"feature\";\n            const report = await featureTarget(feature);\n            if (isService) report.findings.unshift(ambiguousTarget(target, \"feature\"));\n            targets.push(report);\n          } else {\n            // Neither reading exists. An archived feature is its own diagnosis\n            // (\"already archived\", not \"no such thing\"); anything else reads as a\n            // service, so the did-you-mean hints in service.unknown fire.\n            if (!isService && (await resolveFeature(docsDir, target, \"only\", fleet)) !== null) {\n              fail(json, \"unknown-target\", await missingFeatureMessage(docsDir, target, fleet));\n              return;\n            }\n            resolvedKind = \"service\";\n            const resolved = await resolveServiceTarget(docsDir, target, \"target\", fleet);\n            if (!resolved.ok) return fail(json, \"invalid-option\", resolved.problem);\n            targets.push(await serviceTarget(resolved.id));\n          }\n        } else {\n          const service = opts.service ?? config.service;\n          if (!service) return fail(json, \"invalid-option\", NO_SERVICE_MESSAGE);\n          const resolved = await resolveServiceTarget(docsDir, service, \"--service\", fleet);\n          if (!resolved.ok) return fail(json, \"invalid-option\", resolved.problem);\n          // A bound service a feature in flight introduces has no services/ directory yet, so its documents are\n          // validated where they are — the binding's reading only, since `--service` forces a service target.\n          introduced = opts.service === undefined ? await introducedBinding(docsDir, resolved, fleet) : null;\n          if (introduced === null) targets.push(await serviceTarget(resolved.id));\n          else targets.push(...(await inOrder(introduced.features, (feat) => featureTarget(feat))));\n        }\n      } catch (err) {\n        // The docs repo went away between the gate above and the enumeration.\n        if (err instanceof DocsRepoUnavailableError) {\n          reportDocsRepoError(json, err);\n          return;\n        }\n        // An IO failure that `guarded` could not localise to one target — it\n        // happened in the ENUMERATION, which reads every living spec's\n        // frontmatter to build the service list. There is no partial report to\n        // give: without the list, no service was checked, including the ones\n        // that are fine. Say which file, and refuse; the one thing that must\n        // not happen is a stack trace on stdout's sibling stream and an\n        // `internal` envelope that names nothing.\n        reportRepositoryUnavailable(\n          json,\n          err,\n          \"the service list itself is unknown and nothing was validated\",\n          docsDir,\n        );\n        return;\n      }\n\n      // By subject, not by finding — the rule lives with the rollup in report.ts.\n      const unverifiable = unverifiableSubjects(targets);\n      // A journal in the repo outranks everything graded above: the docs may\n      // be half-merged, and in CI a green over them merges. Led, not appended\n      // — it is the reason nothing below can be trusted — and attached to the\n      // first target because a finding lives in one. `lead` keeps it leading\n      // in the fleet report too, which orders targets by kind rather than by\n      // position (render/text.ts) and would otherwise print it wherever the\n      // first target landed.\n      const interrupted = await interruptedCommitFinding(docsDir);\n      if (interrupted !== null && targets.length > 0) {\n        targets[0]!.findings.unshift({ ...interrupted, text: { ...interrupted.text, lead: true } });\n      }\n\n      // The fleet scorecard, --all only: recomputed per invocation off the same\n      // memoized reads this run already made — loam stores no history — and it\n      // fails closed per axis, never whole (fleet/scorecard/scorecard.ts).\n      //\n      // Suppressed under `--base`: its denominators are the graded targets, so\n      // over a narrowed set it reads \"2 of 2 services documented\" for a fleet\n      // where ten more are not — and its axes license report.ts's grouping,\n      // which would drop real warnings because an unlooked-at axis reads zero.\n      const scorecard =\n        opts.all && scope === null\n          ? await buildScorecard({ docsDir, targets, fleet, boundService: config.service })\n          : null;\n\n      const valid = reportValid(targets);\n      const capped = targets.map(capDetails);\n      // One rollup for both views: the --json summary and the text footer\n      // print this object, never a count of their own.\n      const totals = summary(targets);\n      if (json) {\n        emitJson({\n          command: \"validate\",\n          valid,\n          summary: totals,\n          ...(resolvedKind === undefined ? {} : { resolvedKind }),\n          // What this run looked at. Only under `--base`, so an unscoped payload\n          // is today's document and its ABSENCE says `summary` counts the whole\n          // fleet — scopeJson has why a scoped one may not stay silent.\n          ...(scope === null ? {} : { scope: scopeJson(scope) }),\n          // Only when a bare run validated the features introducing the bound service: why `targets` holds no service.\n          ...(introduced === null ? {} : { boundService: introducedJson(introduced) }),\n          // Emitted in every mode now that it is derived per service: a\n          // single-service run knows exactly as much about its own blind spot\n          // as `--all` knows about the fleet's.\n          sourcesUnverifiableFromHere: unverifiable,\n          ...(scorecard === null ? {} : { scorecard }),\n          // What to do about every code this run raised — the one thing the\n          // payload could not previously answer. `validate` is step 1 of every\n          // generated protocol and the command an agent reads first, and until\n          // now it replied in prose: a finding names a code and says what is\n          // wrong, and nothing in it said that `loam explain <code>` knows what\n          // to do next.\n          //\n          // A top-level MAP, not a field on each finding, for the reason\n          // report.ts's DETAIL_LIMIT gives about evidence: a hundred-service\n          // fleet raising one code a hundred times would ship the same\n          // sentence a hundred times, in the interface an agent pipes into a\n          // context window. The consumer joins `findings[].code` to\n          // `fixes[code]` — one lookup, no round trip, no repetition.\n          //\n          // Keyed ONLY by codes a non-`ok` finding raised. A confirmation has\n          // nothing to fix, and on a clean fleet the `ok` codes are the\n          // overwhelming majority of findings; attaching fixes to them would\n          // pay the whole vocabulary's byte cost to tell a reader that nothing\n          // is wrong. `targets` is read here rather than `capped` because\n          // capping truncates evidence, not findings — the two raise the same\n          // codes, and reading the uncapped set keeps this rollup computed off\n          // the same targets as `summary()`.\n          //\n          // Not behind a flag, deliberately. It is additive, so no consumer\n          // that ignores it is affected; it is small, because it carries only\n          // the handful of codes this run actually raised rather than the\n          // 227-row vocabulary; and a flag would mean an agent has to already\n          // know the fixes exist in order to ask for them — which is the exact\n          // gap being closed. It is emitted on a green run too, as `{}`, so a\n          // consumer never has to branch on the key's presence before looking\n          // a code up in it.\n          fixes: fixesFor(\n            targets.flatMap((t) => t.findings.filter((f) => f.severity !== \"ok\").map((f) => f.code)),\n          ),\n          targets: capped.map(targetJson),\n        });\n      } else {\n        // The scope FIRST: a reader has to know what the report below is a\n        // report ABOUT, and in the zero-target case there is nothing below at\n        // all — printed after the findings, the one run that most needs words\n        // would read as a green over the whole system.\n        if (scope !== null) console.log(scopeLine(scope));\n        // First for the same reason: what follows is a feature's report, not the service's.\n        if (introduced !== null) console.log(`${introducedLead(introduced).join(\"\\n\")}\\n`);\n        renderText(capped, {\n          all: opts.all === true,\n          errorsOnly: opts.errorsOnly === true,\n          summary: totals,\n          unverifiable,\n          scorecard,\n        });\n        if (scorecard !== null) printScorecard(scorecard);\n      }\n      // --strict is a per-invocation CI lever: it fails the run on any error or\n      // warning (ok-severity confirmations never trip it — virtually every\n      // clean target emits some), and changes nothing else — `valid` keeps meaning \"no\n      // errors\" in text and JSON alike, so two pipelines reading the same repo\n      // may grade the same report differently and both are telling the truth.\n      const strictFailed =\n        opts.strict === true &&\n        countSeverity(targets, \"error\") + countSeverity(targets, \"warn\") > 0;\n      if (!valid || strictFailed) process.exitCode = 1;\n    });\n}\n"]}

package/dist/commands/verify/cross/diff.js

@@ -22,7 +22,7 @@ import { readFile } from "node:fs/promises";
 import { resolve } from "node:path";
 import { emitJson, fail, repoPath } from "../../../core/envelope/json.js";
 import { isRecord } from "../../../core/kernel/records.js";
-import { checkAnswers } from "../../../core/verify/answers.js";
+import { answerEntries, checkAnswers } from "../../../core/verify/answers.js";
 import {} from "../../../core/verify/checklist.js";
 import { crossExamine, disjointNotice } from "../../../core/verify/cross/diff.js";
 import { plural } from "../../policy/format.js";
@@ -38,11 +38,7 @@ import {} from "../report.js";
 function offLensNote(scope, raw) {
     if (scope.lens === undefined)
         return "";
-    const entries = Array.isArray(raw)
-        ? raw
-        : isRecord(raw) && Array.isArray(raw["answers"])
-            ? raw["answers"]
-            : [];
+    const entries = answerEntries(raw) ?? [];
     const scoped = new Set(scope.scoped.map((c) => c.id));
     const onChecklist = new Set(scope.checklist.claims.map((c) => c.id));
     const foreign = [

package/dist/commands/verify/cross/diff.js.map

@@ -1 +1 @@
-{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../../src/commands/verify/cross/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAmC,MAAM,iCAAiC,CAAC;AAChG,OAAO,EAA8B,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,cAAc,EAAoB,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAqB,MAAM,cAAc,CAAC;AA8BjD;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAgB,EAAE,GAAY;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAChC,CAAC,CAAC,GAAG;QACL,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC9C,CAAC,CAAE,GAAG,CAAC,SAAS,CAAe;YAC/B,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG;QACd,GAAG,IAAI,GAAG,CACR,OAAO;aACJ,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAC3B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAClG;KACF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,CACL,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,SAAS,CAAC,OAAO,4CAA4C;QACtG,aAAa,KAAK,CAAC,IAAI,+BAA+B,KAAK,CAAC,MAAM,CAAC,MAAM,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,UAAU,CACxH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,KAAgB,EAAE,IAAY,EAAE,IAAwB;IAC9E,MAAM,KAAK,GAAG,GAAG,IAAI,gBAAgB,IAAI,GAAG,CAAC;IAC7C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,0EAA0E;QAC1E,wEAAwE;QACxE,iDAAiD;QACjD,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,KAAK,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,KAAK,eAAe,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACnF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACnH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,KAAK,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,wEAAwE;IACxE,0EAA0E;IAC1E,0DAA0D;IAC1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,QAAQ,CAAC,MAAmB;IACnC,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;QAAE,OAAO,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvF,OAAO,cAAc,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAoB,EACpB,SAAoB,EACpB,KAAkB,EAClB,KAAwB;IAExB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,mEAAmE;IACnE,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC1G,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,oBAAoB;IACpB,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CACT,IAAI,EACJ,iBAAiB,EACjB,eAAe,SAAS,CAAC,OAAO,8CAA8C,IAAI,IAAI,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAc,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAE5F,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE1C,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC;YACP,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;YACnC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,qEAAqE;YACrE,6DAA6D;YAC7D,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1F,KAAK,EAAE;gBACL,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBACtC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;aACvC;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GACb,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,QAAQ,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC;IAClH,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,CAAC,OAAO,6BAA6B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,CAC/H,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,uEAAuE;QACvE,mCAAmC;QACnC,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QACxG,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,sBAAsB,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,OAAO,CAAC,cAAc,qBAAqB,KAAK,CAAC,OAAO,CAAC,gBAAgB,uBAAuB,KAAK,CAAC,OAAO,CAAC,QAAQ,YAAY,CAC9I,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;AACxF,CAAC","sourcesContent":["/**\n * `loam verify <FEAT> --diff-answers a.json b.json` — the command surface of\n * the cross-examination lens.\n *\n * A third read form beside the report and frozen views: it takes no lock,\n * needs no service binding, and writes nothing. The payload deliberately\n * carries NO `verified`, `verdict` or `attested` key — their absence is the\n * doctrine made structural (`core/verify/cross/diff.ts` holds the\n * reasoning): this surface ranks review, it grades nothing.\n *\n * Both files validate through the same `checkAnswers` the record path uses,\n * against the same scoped checklist, with `runnerOwned` unset: under a diff\n * both agents answer everything in scope, `scenario.tested` included — that\n * is the attested channel, and this command records nothing. If a future\n * wave ever makes scenario claims runner-only even without `--results`,\n * blind agents can no longer answer them and this command starts refusing;\n * `checkAnswers`' own `runnerOwned` note carries the same warning where that\n * editor will see it.\n */\nimport { createHash } from \"node:crypto\";\nimport { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { emitJson, fail, repoPath } from \"../../../core/envelope/json.js\";\nimport { isRecord } from \"../../../core/kernel/records.js\";\nimport { checkAnswers, type Answer, type AnswerRefusal } from \"../../../core/verify/answers.js\";\nimport { type Checklist, type Claim } from \"../../../core/verify/checklist.js\";\nimport { crossExamine, disjointNotice, type CrossAnswer } from \"../../../core/verify/cross/diff.js\";\nimport { plural } from \"../../policy/format.js\";\nimport { type VerifyTarget } from \"../report.js\";\n\n/**\n * The two files, named for the order they were given: `a` is the first and\n * every refusal about it says \"first answer set\". One record rather than two\n * loose strings because they are never asked about separately, and because a\n * transposed pair is exactly the mistake a positional form invites.\n */\nexport interface AnswerFiles {\n  a: string;\n  b: string;\n}\n\ntype SideRead =\n  | { ok: true; answers: Answer[]; digest: string }\n  | { ok: false; code: AnswerRefusal; message: string };\n\n/**\n * Everything a side is validated against: the lens-scoped claims, the whole\n * checklist behind them (what the honest off-lens diagnosis is written from),\n * and the lens itself. One record because the three are never asked about\n * separately — a scoped array without its checklist is how the false \"not on\n * the checklist\" diagnosis happened.\n */\ninterface DiffScope {\n  scoped: Claim[];\n  checklist: Checklist;\n  lens?: string;\n}\n\n/**\n * The honest half of a lens-narrowed mismatch. `checkAnswers` is handed only\n * the scoped claims, so an answer naming another service's claim — which IS\n * on the feature's checklist — would otherwise be called \"not on the\n * checklist\": the same false diagnosis `runnerOwned` exists to prevent on the\n * recording path. When the stray ids are real claims the lens filtered out,\n * say that, and say what the lens narrowed.\n */\nfunction offLensNote(scope: DiffScope, raw: unknown): string {\n  if (scope.lens === undefined) return \"\";\n  const entries = Array.isArray(raw)\n    ? raw\n    : isRecord(raw) && Array.isArray(raw[\"answers\"])\n      ? (raw[\"answers\"] as unknown[])\n      : [];\n  const scoped = new Set(scope.scoped.map((c) => c.id));\n  const onChecklist = new Set(scope.checklist.claims.map((c) => c.id));\n  const foreign = [\n    ...new Set(\n      entries\n        .filter(isRecord)\n        .map((entry) => entry[\"id\"])\n        .filter((id): id is string => typeof id === \"string\" && onChecklist.has(id) && !scoped.has(id)),\n    ),\n  ];\n  if (foreign.length === 0) return \"\";\n  return (\n    ` (${foreign.join(\", \")}: on the ${scope.checklist.feature} checklist but owned by another service — ` +\n    `--service ${scope.lens} narrowed the comparison to ${scope.scoped.length} of ${scope.checklist.claims.length} claims)`\n  );\n}\n\n/**\n * Read, digest and validate ONE answer set. Fail-closed on purpose at every\n * step: an unreadable or malformed file is a refusal naming which file and\n * why — never a silently empty side, which would grade as \"no disagreement\"\n * about claims nobody compared.\n */\nasync function readSide(scope: DiffScope, file: string, side: \"first\" | \"second\"): Promise<SideRead> {\n  const label = `${side} answer set (${file})`;\n  let bytes: Buffer;\n  try {\n    // cwd-relative deliberately — record.ts's reason for the same choice: the\n    // answer sets are the caller's hand-offs, not repository artifacts, and\n    // nothing on any record will ever point at them.\n    bytes = await readFile(resolve(process.cwd(), file));\n  } catch (err) {\n    return {\n      ok: false,\n      code: \"answers-unreadable\",\n      message: `${label}: cannot read: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n  let raw: unknown;\n  try {\n    raw = JSON.parse(bytes.toString(\"utf8\"));\n  } catch (err) {\n    return {\n      ok: false,\n      code: \"answers-unreadable\",\n      message: `${label}: not JSON: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n  const context = { feature: scope.checklist.feature, ...(scope.lens === undefined ? {} : { service: scope.lens }) };\n  const checked = checkAnswers(scope.scoped, raw, undefined, context);\n  if (!checked.ok) {\n    return { ok: false, code: checked.code, message: `${label}: ${checked.message}${offLensNote(scope, raw)}` };\n  }\n  // The digest is over the exact bytes read — the same reviewer-checkable\n  // promise `reportLine` makes for consumed reports: `shasum -a 256 <file>`\n  // answers whether the diff in hand read the file in hand.\n  return { ok: true, answers: checked.answers, digest: createHash(\"sha256\").update(bytes).digest(\"hex\") };\n}\n\nfunction sideLine(answer: CrossAnswer): string {\n  if (answer.verdict === \"confirmed\") return `confirmed (${answer.evidence.join(\", \")})`;\n  return `unconfirmed${answer.note === undefined ? \"\" : ` — ${answer.note}`}`;\n}\n\nexport async function diffAnswers(\n  target: VerifyTarget,\n  checklist: Checklist,\n  files: AnswerFiles,\n  scope: { lens?: string },\n): Promise<void> {\n  const { docsDir, featureDir, json } = target;\n  const lens = scope.lens;\n  // The same lens the read view applies (report.ts): the claims that\n  // service's code answers, no repository binding asked for — a diff writes\n  // nothing, so there is nothing to bind.\n  const scoped = lens === undefined ? checklist.claims : checklist.claims.filter((c) => c.subject === lens);\n  // record.ts's refusal, mirrored: a lens that owns nothing here is almost\n  // always a typo'd service id, and validating two files against an empty\n  // claim set would call every honest answer off-checklist instead of naming\n  // the real mistake.\n  if (lens !== undefined && scoped.length === 0) {\n    return fail(\n      json,\n      \"unknown-service\",\n      `The current ${checklist.feature} checklist has no claims owned by service '${lens}'.`,\n    );\n  }\n  const diffScope: DiffScope = { scoped, checklist, ...(lens === undefined ? {} : { lens }) };\n\n  // Sequential on purpose — a short-circuit, not a race: readSide never\n  // rejects, but when the first file refuses, the second is never read or\n  // parsed, so the refusal a caller sees always names the earliest problem\n  // and no work is spent on a file whose sibling already failed the run.\n  const a = await readSide(diffScope, files.a, \"first\");\n  if (!a.ok) return fail(json, a.code, a.message);\n  const b = await readSide(diffScope, files.b, \"second\");\n  if (!b.ok) return fail(json, b.code, b.message);\n\n  const cross = crossExamine(scoped, a.answers, b.answers);\n  const notice = disjointNotice(cross.rows);\n\n  if (json) {\n    emitJson({\n      command: \"verify\",\n      feature: checklist.feature,\n      path: repoPath(docsDir, featureDir),\n      digest: checklist.digest,\n      // Named only when narrowed — report.ts's rule: a consumer must never\n      // mistake one service's cross-examination for the feature's.\n      ...(lens === undefined ? {} : { service: lens, checklistClaims: checklist.claims.length }),\n      files: {\n        a: { path: files.a, digest: a.digest },\n        b: { path: files.b, digest: b.digest },\n      },\n      summary: cross.summary,\n      claims: cross.rows,\n      disagreements: cross.disagreements,\n      ...(notice === null ? {} : { notices: [notice] }),\n    });\n    return;\n  }\n\n  const scopeNote =\n    lens === undefined ? \"\" : ` owned by ${lens} (of ${plural(checklist.claims.length, \"claim\")} on the checklist)`;\n  console.log(\n    `${checklist.feature} — cross-examination over ${plural(cross.rows.length, \"claim\")}${scopeNote} (${files.a} vs ${files.b})\\n`,\n  );\n  if (cross.rows.length === 0) {\n    // Only the whole-checklist form can get here: a lens that owns nothing\n    // refused `unknown-service` above.\n    console.log(\"  Nothing to cross-examine: this feature's delta, specs and openapi promise nothing yet.\");\n    return;\n  }\n  for (const row of cross.rows) {\n    if (row.code === \"cross.disagree\") {\n      console.log(`  ✗ cross.disagree ${row.id}  [${row.subject}]  ${row.claim}`);\n      console.log(`      a: ${sideLine(row.a)}`);\n      console.log(`      b: ${sideLine(row.b)}`);\n    } else if (row.code === \"cross.agree-unconfirmed\") {\n      console.log(`  = ${row.id}  [${row.subject}]  ${row.claim}  (both unconfirmed)`);\n    } else {\n      console.log(`  = ${row.id}  [${row.subject}]  ${row.claim}${row.evidenceDisjoint === true ? \"  (disjoint evidence)\" : \"\"}`);\n    }\n  }\n  console.log(\"\");\n  if (notice !== null) console.log(`  ⚠ ${notice.code}: ${notice.message}`);\n  console.log(\n    `  ${cross.summary.agreeConfirmed} agree-confirmed, ${cross.summary.agreeUnconfirmed} agree-unconfirmed, ${cross.summary.disagree} disagree.`,\n  );\n  console.log(\"\\n  Agreement is not verification — nothing was written and no verdict changed.\");\n  console.log(\"  Read the disagreements first, then the disjoint-evidence agreements.\");\n}\n"]}
+{"version":3,"file":"diff.js","sourceRoot":"","sources":["../../../../src/commands/verify/cross/diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1E,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,YAAY,EAAmC,MAAM,iCAAiC,CAAC;AAC/G,OAAO,EAA8B,MAAM,mCAAmC,CAAC;AAC/E,OAAO,EAAE,YAAY,EAAE,cAAc,EAAoB,MAAM,oCAAoC,CAAC;AACpG,OAAO,EAAE,MAAM,EAAE,MAAM,wBAAwB,CAAC;AAChD,OAAO,EAAqB,MAAM,cAAc,CAAC;AA8BjD;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,KAAgB,EAAE,GAAY;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACxC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,MAAM,OAAO,GAAG;QACd,GAAG,IAAI,GAAG,CACR,OAAO;aACJ,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;aAC3B,MAAM,CAAC,CAAC,EAAE,EAAgB,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,IAAI,WAAW,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAClG;KACF,CAAC;IACF,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,CACL,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,SAAS,CAAC,OAAO,4CAA4C;QACtG,aAAa,KAAK,CAAC,IAAI,+BAA+B,KAAK,CAAC,MAAM,CAAC,MAAM,OAAO,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,UAAU,CACxH,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,KAAgB,EAAE,IAAY,EAAE,IAAwB;IAC9E,MAAM,KAAK,GAAG,GAAG,IAAI,gBAAgB,IAAI,GAAG,CAAC;IAC7C,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,0EAA0E;QAC1E,wEAAwE;QACxE,iDAAiD;QACjD,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,KAAK,kBAAkB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACtF,CAAC;IACJ,CAAC;IACD,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EAAE,GAAG,KAAK,eAAe,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACnF,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACnH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpE,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,KAAK,OAAO,CAAC,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;IAC9G,CAAC;IACD,wEAAwE;IACxE,0EAA0E;IAC1E,0DAA0D;IAC1D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,QAAQ,CAAC,MAAmB;IACnC,IAAI,MAAM,CAAC,OAAO,KAAK,WAAW;QAAE,OAAO,cAAc,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACvF,OAAO,cAAc,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAoB,EACpB,SAAoB,EACpB,KAAkB,EAClB,KAAwB;IAExB,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,mEAAmE;IACnE,0EAA0E;IAC1E,wCAAwC;IACxC,MAAM,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;IAC1G,yEAAyE;IACzE,wEAAwE;IACxE,2EAA2E;IAC3E,oBAAoB;IACpB,IAAI,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CACT,IAAI,EACJ,iBAAiB,EACjB,eAAe,SAAS,CAAC,OAAO,8CAA8C,IAAI,IAAI,CACvF,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAc,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAE5F,sEAAsE;IACtE,wEAAwE;IACxE,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACtD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,CAAC,GAAG,MAAM,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IAEhD,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAE1C,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC;YACP,OAAO,EAAE,QAAQ;YACjB,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;YACnC,MAAM,EAAE,SAAS,CAAC,MAAM;YACxB,qEAAqE;YACrE,6DAA6D;YAC7D,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1F,KAAK,EAAE;gBACL,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;gBACtC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;aACvC;YACD,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,MAAM,EAAE,KAAK,CAAC,IAAI;YAClB,aAAa,EAAE,KAAK,CAAC,aAAa;YAClC,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;SAClD,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IAED,MAAM,SAAS,GACb,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa,IAAI,QAAQ,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,oBAAoB,CAAC;IAClH,OAAO,CAAC,GAAG,CACT,GAAG,SAAS,CAAC,OAAO,6BAA6B,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KAAK,KAAK,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,KAAK,CAC/H,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,uEAAuE;QACvE,mCAAmC;QACnC,OAAO,CAAC,GAAG,CAAC,0FAA0F,CAAC,CAAC;QACxG,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,GAAG,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAClC,OAAO,CAAC,GAAG,CAAC,sBAAsB,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YAC5E,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3C,OAAO,CAAC,GAAG,CAAC,YAAY,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC7C,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,yBAAyB,EAAE,CAAC;YAClD,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,sBAAsB,CAAC,CAAC;QACnF,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,MAAM,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,gBAAgB,KAAK,IAAI,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9H,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,CAAC,OAAO,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1E,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,OAAO,CAAC,cAAc,qBAAqB,KAAK,CAAC,OAAO,CAAC,gBAAgB,uBAAuB,KAAK,CAAC,OAAO,CAAC,QAAQ,YAAY,CAC9I,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,iFAAiF,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,wEAAwE,CAAC,CAAC;AACxF,CAAC","sourcesContent":["/**\n * `loam verify <FEAT> --diff-answers a.json b.json` — the command surface of\n * the cross-examination lens.\n *\n * A third read form beside the report and frozen views: it takes no lock,\n * needs no service binding, and writes nothing. The payload deliberately\n * carries NO `verified`, `verdict` or `attested` key — their absence is the\n * doctrine made structural (`core/verify/cross/diff.ts` holds the\n * reasoning): this surface ranks review, it grades nothing.\n *\n * Both files validate through the same `checkAnswers` the record path uses,\n * against the same scoped checklist, with `runnerOwned` unset: under a diff\n * both agents answer everything in scope, `scenario.tested` included — that\n * is the attested channel, and this command records nothing. If a future\n * wave ever makes scenario claims runner-only even without `--results`,\n * blind agents can no longer answer them and this command starts refusing;\n * `checkAnswers`' own `runnerOwned` note carries the same warning where that\n * editor will see it.\n */\nimport { createHash } from \"node:crypto\";\nimport { readFile } from \"node:fs/promises\";\nimport { resolve } from \"node:path\";\nimport { emitJson, fail, repoPath } from \"../../../core/envelope/json.js\";\nimport { isRecord } from \"../../../core/kernel/records.js\";\nimport { answerEntries, checkAnswers, type Answer, type AnswerRefusal } from \"../../../core/verify/answers.js\";\nimport { type Checklist, type Claim } from \"../../../core/verify/checklist.js\";\nimport { crossExamine, disjointNotice, type CrossAnswer } from \"../../../core/verify/cross/diff.js\";\nimport { plural } from \"../../policy/format.js\";\nimport { type VerifyTarget } from \"../report.js\";\n\n/**\n * The two files, named for the order they were given: `a` is the first and\n * every refusal about it says \"first answer set\". One record rather than two\n * loose strings because they are never asked about separately, and because a\n * transposed pair is exactly the mistake a positional form invites.\n */\nexport interface AnswerFiles {\n  a: string;\n  b: string;\n}\n\ntype SideRead =\n  | { ok: true; answers: Answer[]; digest: string }\n  | { ok: false; code: AnswerRefusal; message: string };\n\n/**\n * Everything a side is validated against: the lens-scoped claims, the whole\n * checklist behind them (what the honest off-lens diagnosis is written from),\n * and the lens itself. One record because the three are never asked about\n * separately — a scoped array without its checklist is how the false \"not on\n * the checklist\" diagnosis happened.\n */\ninterface DiffScope {\n  scoped: Claim[];\n  checklist: Checklist;\n  lens?: string;\n}\n\n/**\n * The honest half of a lens-narrowed mismatch. `checkAnswers` is handed only\n * the scoped claims, so an answer naming another service's claim — which IS\n * on the feature's checklist — would otherwise be called \"not on the\n * checklist\": the same false diagnosis `runnerOwned` exists to prevent on the\n * recording path. When the stray ids are real claims the lens filtered out,\n * say that, and say what the lens narrowed.\n */\nfunction offLensNote(scope: DiffScope, raw: unknown): string {\n  if (scope.lens === undefined) return \"\";\n  const entries = answerEntries(raw) ?? [];\n  const scoped = new Set(scope.scoped.map((c) => c.id));\n  const onChecklist = new Set(scope.checklist.claims.map((c) => c.id));\n  const foreign = [\n    ...new Set(\n      entries\n        .filter(isRecord)\n        .map((entry) => entry[\"id\"])\n        .filter((id): id is string => typeof id === \"string\" && onChecklist.has(id) && !scoped.has(id)),\n    ),\n  ];\n  if (foreign.length === 0) return \"\";\n  return (\n    ` (${foreign.join(\", \")}: on the ${scope.checklist.feature} checklist but owned by another service — ` +\n    `--service ${scope.lens} narrowed the comparison to ${scope.scoped.length} of ${scope.checklist.claims.length} claims)`\n  );\n}\n\n/**\n * Read, digest and validate ONE answer set. Fail-closed on purpose at every\n * step: an unreadable or malformed file is a refusal naming which file and\n * why — never a silently empty side, which would grade as \"no disagreement\"\n * about claims nobody compared.\n */\nasync function readSide(scope: DiffScope, file: string, side: \"first\" | \"second\"): Promise<SideRead> {\n  const label = `${side} answer set (${file})`;\n  let bytes: Buffer;\n  try {\n    // cwd-relative deliberately — record.ts's reason for the same choice: the\n    // answer sets are the caller's hand-offs, not repository artifacts, and\n    // nothing on any record will ever point at them.\n    bytes = await readFile(resolve(process.cwd(), file));\n  } catch (err) {\n    return {\n      ok: false,\n      code: \"answers-unreadable\",\n      message: `${label}: cannot read: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n  let raw: unknown;\n  try {\n    raw = JSON.parse(bytes.toString(\"utf8\"));\n  } catch (err) {\n    return {\n      ok: false,\n      code: \"answers-unreadable\",\n      message: `${label}: not JSON: ${err instanceof Error ? err.message : String(err)}`,\n    };\n  }\n  const context = { feature: scope.checklist.feature, ...(scope.lens === undefined ? {} : { service: scope.lens }) };\n  const checked = checkAnswers(scope.scoped, raw, undefined, context);\n  if (!checked.ok) {\n    return { ok: false, code: checked.code, message: `${label}: ${checked.message}${offLensNote(scope, raw)}` };\n  }\n  // The digest is over the exact bytes read — the same reviewer-checkable\n  // promise `reportLine` makes for consumed reports: `shasum -a 256 <file>`\n  // answers whether the diff in hand read the file in hand.\n  return { ok: true, answers: checked.answers, digest: createHash(\"sha256\").update(bytes).digest(\"hex\") };\n}\n\nfunction sideLine(answer: CrossAnswer): string {\n  if (answer.verdict === \"confirmed\") return `confirmed (${answer.evidence.join(\", \")})`;\n  return `unconfirmed${answer.note === undefined ? \"\" : ` — ${answer.note}`}`;\n}\n\nexport async function diffAnswers(\n  target: VerifyTarget,\n  checklist: Checklist,\n  files: AnswerFiles,\n  scope: { lens?: string },\n): Promise<void> {\n  const { docsDir, featureDir, json } = target;\n  const lens = scope.lens;\n  // The same lens the read view applies (report.ts): the claims that\n  // service's code answers, no repository binding asked for — a diff writes\n  // nothing, so there is nothing to bind.\n  const scoped = lens === undefined ? checklist.claims : checklist.claims.filter((c) => c.subject === lens);\n  // record.ts's refusal, mirrored: a lens that owns nothing here is almost\n  // always a typo'd service id, and validating two files against an empty\n  // claim set would call every honest answer off-checklist instead of naming\n  // the real mistake.\n  if (lens !== undefined && scoped.length === 0) {\n    return fail(\n      json,\n      \"unknown-service\",\n      `The current ${checklist.feature} checklist has no claims owned by service '${lens}'.`,\n    );\n  }\n  const diffScope: DiffScope = { scoped, checklist, ...(lens === undefined ? {} : { lens }) };\n\n  // Sequential on purpose — a short-circuit, not a race: readSide never\n  // rejects, but when the first file refuses, the second is never read or\n  // parsed, so the refusal a caller sees always names the earliest problem\n  // and no work is spent on a file whose sibling already failed the run.\n  const a = await readSide(diffScope, files.a, \"first\");\n  if (!a.ok) return fail(json, a.code, a.message);\n  const b = await readSide(diffScope, files.b, \"second\");\n  if (!b.ok) return fail(json, b.code, b.message);\n\n  const cross = crossExamine(scoped, a.answers, b.answers);\n  const notice = disjointNotice(cross.rows);\n\n  if (json) {\n    emitJson({\n      command: \"verify\",\n      feature: checklist.feature,\n      path: repoPath(docsDir, featureDir),\n      digest: checklist.digest,\n      // Named only when narrowed — report.ts's rule: a consumer must never\n      // mistake one service's cross-examination for the feature's.\n      ...(lens === undefined ? {} : { service: lens, checklistClaims: checklist.claims.length }),\n      files: {\n        a: { path: files.a, digest: a.digest },\n        b: { path: files.b, digest: b.digest },\n      },\n      summary: cross.summary,\n      claims: cross.rows,\n      disagreements: cross.disagreements,\n      ...(notice === null ? {} : { notices: [notice] }),\n    });\n    return;\n  }\n\n  const scopeNote =\n    lens === undefined ? \"\" : ` owned by ${lens} (of ${plural(checklist.claims.length, \"claim\")} on the checklist)`;\n  console.log(\n    `${checklist.feature} — cross-examination over ${plural(cross.rows.length, \"claim\")}${scopeNote} (${files.a} vs ${files.b})\\n`,\n  );\n  if (cross.rows.length === 0) {\n    // Only the whole-checklist form can get here: a lens that owns nothing\n    // refused `unknown-service` above.\n    console.log(\"  Nothing to cross-examine: this feature's delta, specs and openapi promise nothing yet.\");\n    return;\n  }\n  for (const row of cross.rows) {\n    if (row.code === \"cross.disagree\") {\n      console.log(`  ✗ cross.disagree ${row.id}  [${row.subject}]  ${row.claim}`);\n      console.log(`      a: ${sideLine(row.a)}`);\n      console.log(`      b: ${sideLine(row.b)}`);\n    } else if (row.code === \"cross.agree-unconfirmed\") {\n      console.log(`  = ${row.id}  [${row.subject}]  ${row.claim}  (both unconfirmed)`);\n    } else {\n      console.log(`  = ${row.id}  [${row.subject}]  ${row.claim}${row.evidenceDisjoint === true ? \"  (disjoint evidence)\" : \"\"}`);\n    }\n  }\n  console.log(\"\");\n  if (notice !== null) console.log(`  ⚠ ${notice.code}: ${notice.message}`);\n  console.log(\n    `  ${cross.summary.agreeConfirmed} agree-confirmed, ${cross.summary.agreeUnconfirmed} agree-unconfirmed, ${cross.summary.disagree} disagree.`,\n  );\n  console.log(\"\\n  Agreement is not verification — nothing was written and no verdict changed.\");\n  console.log(\"  Read the disagreements first, then the disjoint-evidence agreements.\");\n}\n"]}

package/dist/commands/verify/evidence/contract.js

@@ -9,7 +9,7 @@ import { readContractReport } from "../../../core/verify/evidence/contract.js";
 import {} from "../../../core/verify/record.js";
 import { readReportArtifact } from "./read.js";
 export async function readContractResults(spelled, repoDir) {
-    const artifact = await readReportArtifact(spelled, repoDir, "contract-test report");
+    const artifact = await readReportArtifact(spelled, repoDir, "contract-test report", 'It reads loam\'s generic contract-results JSON — {"loamContractReport": 1, "results": [{"operationId": "…", "status": "passed"}]} — which any contract suite can be adapted into.');
     if (!artifact.ok)
         return artifact;
     const parsed = readContractReport(artifact.doc, spelled);

package/dist/commands/verify/evidence/contract.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../../src/commands/verify/evidence/contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,kBAAkB,EAAoB,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAA+B,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAM/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,OAA2B;IAE3B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,OAAO,EAAE,sBAAsB,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC1F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ,CAAC,OAAO;YACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,sEAAsE;YACtE,iEAAiE;YACjE,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YAC/D,MAAM,EAAE,SAAS;SAClB;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * `--contract-results` consumed: the file read and pinned through the shared\n * plumbing in `./read.ts`, then graded by the format reader in\n * `core/verify/evidence/contract.ts`. Mirrors what `../results.ts` is for the\n * cucumber report — the command-side half that touches the filesystem, kept\n * apart from the core half that only ever judges a parsed document.\n */\nimport { readContractReport, type ContractRun } from \"../../../core/verify/evidence/contract.js\";\nimport { type ConsumedContractReport } from \"../../../core/verify/record.js\";\nimport { readReportArtifact } from \"./read.js\";\n\nexport type ContractResultsRead =\n  | { ok: true; report: ConsumedContractReport; runs: ContractRun[] }\n  | { ok: false; code: \"answers-unreadable\"; message: string };\n\nexport async function readContractResults(\n  spelled: string,\n  repoDir: string | undefined,\n): Promise<ContractResultsRead> {\n  const artifact = await readReportArtifact(spelled, repoDir, \"contract-test report\");\n  if (!artifact.ok) return artifact;\n  const parsed = readContractReport(artifact.doc, spelled);\n  if (!parsed.ok) return { ok: false, code: \"answers-unreadable\", message: parsed.message };\n  return {\n    ok: true,\n    runs: parsed.runs,\n    report: {\n      path: artifact.spelled,\n      digest: artifact.digest,\n      mtime: artifact.mtime,\n      // Distinct operationIds, not entries: the pin says how much of an API\n      // the file speaks about, and a re-run is not a second operation.\n      operations: new Set(parsed.runs.map((r) => r.operationId)).size,\n      format: \"generic\",\n    },\n  };\n}\n"]}
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../../../../src/commands/verify/evidence/contract.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,kBAAkB,EAAoB,MAAM,2CAA2C,CAAC;AACjG,OAAO,EAA+B,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAM/C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAe,EACf,OAA2B;IAE3B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CACvC,OAAO,EACP,OAAO,EACP,sBAAsB,EACtB,mLAAmL,CACpL,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC;IAClC,MAAM,MAAM,GAAG,kBAAkB,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACzD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IAC1F,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ,CAAC,OAAO;YACtB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,sEAAsE;YACtE,iEAAiE;YACjE,UAAU,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;YAC/D,MAAM,EAAE,SAAS;SAClB;KACF,CAAC;AACJ,CAAC","sourcesContent":["/**\n * `--contract-results` consumed: the file read and pinned through the shared\n * plumbing in `./read.ts`, then graded by the format reader in\n * `core/verify/evidence/contract.ts`. Mirrors what `../results.ts` is for the\n * cucumber report — the command-side half that touches the filesystem, kept\n * apart from the core half that only ever judges a parsed document.\n */\nimport { readContractReport, type ContractRun } from \"../../../core/verify/evidence/contract.js\";\nimport { type ConsumedContractReport } from \"../../../core/verify/record.js\";\nimport { readReportArtifact } from \"./read.js\";\n\nexport type ContractResultsRead =\n  | { ok: true; report: ConsumedContractReport; runs: ContractRun[] }\n  | { ok: false; code: \"answers-unreadable\"; message: string };\n\nexport async function readContractResults(\n  spelled: string,\n  repoDir: string | undefined,\n): Promise<ContractResultsRead> {\n  const artifact = await readReportArtifact(\n    spelled,\n    repoDir,\n    \"contract-test report\",\n    'It reads loam\\'s generic contract-results JSON — {\"loamContractReport\": 1, \"results\": [{\"operationId\": \"…\", \"status\": \"passed\"}]} — which any contract suite can be adapted into.',\n  );\n  if (!artifact.ok) return artifact;\n  const parsed = readContractReport(artifact.doc, spelled);\n  if (!parsed.ok) return { ok: false, code: \"answers-unreadable\", message: parsed.message };\n  return {\n    ok: true,\n    runs: parsed.runs,\n    report: {\n      path: artifact.spelled,\n      digest: artifact.digest,\n      mtime: artifact.mtime,\n      // Distinct operationIds, not entries: the pin says how much of an API\n      // the file speaks about, and a re-run is not a second operation.\n      operations: new Set(parsed.runs.map((r) => r.operationId)).size,\n      format: \"generic\",\n    },\n  };\n}\n"]}