@ztothez/design-engineering 2.0.0

package/dist/src/quality-gate/report.js

@@ -0,0 +1,46 @@
+function stageRow(name, stage) {
+    return `| ${name} | ${stage.status.toUpperCase()} | ${stage.errors} | ${stage.warnings} | ${stage.info} |`;
+}
+export function formatQualityGateReport(report) {
+    const result = report.passed
+        ? "PASS"
+        : report.summary.errors > 0 || report.complete
+            ? "FAIL"
+            : "INCOMPLETE";
+    const lines = [
+        "# ZtotheZ Design Engineering Quality Gate",
+        "",
+        `- Result: ${result}`,
+        `- Contract: \`${report.contractPath}\``,
+        `- Repository: \`${report.repository}\``,
+        ...(report.url ? [`- Runtime URL: \`${report.url}\``] : []),
+        ...(report.profile ? [`- Journey profile: \`${report.profile}\``] : []),
+        `- Failure policy: ${report.failOn}`,
+        `- Evidence directory: \`${report.outputDirectory}\``,
+        "",
+        "| Stage | Status | Errors | Warnings | Info |",
+        "|---|---:|---:|---:|---:|",
+        stageRow("Product contract", report.stages.contract),
+        stageRow("Architecture", report.stages.architecture),
+        stageRow("Runtime", report.stages.runtime),
+        stageRow("Acceptance", report.stages.acceptance),
+        "",
+        `Total: ${report.summary.errors} errors, ${report.summary.warnings} warnings, ${report.summary.info} info.`,
+    ];
+    const messages = Object.entries(report.stages)
+        .filter(([, stage]) => stage.message)
+        .map(([name, stage]) => `- **${name}:** ${stage.message}`);
+    if (messages.length > 0)
+        lines.push("", "## Stage Notes", "", ...messages);
+    lines.push("", "## Evidence");
+    for (const [name, stage] of Object.entries(report.stages)) {
+        lines.push("", `### ${name[0].toUpperCase()}${name.slice(1)}`);
+        if (stage.evidence.length === 0)
+            lines.push("", "No evidence file was produced.");
+        else
+            lines.push("", ...stage.evidence.map((path) => `- \`${path}\``));
+    }
+    lines.push("", "## Evidence Boundary", "", "### Verifier Limitations", "", ...report.evidenceBoundary.verifierLimitations.map((entry) => `- ${entry}`), "", "### Human Review Required", "", ...report.evidenceBoundary.humanReviewRequired.map((entry) => `- ${entry}`));
+    return lines.join("\n");
+}
+//# sourceMappingURL=report.js.map

package/dist/src/quality-gate/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/quality-gate/report.ts"],"names":[],"mappings":"AAEA,SAAS,QAAQ,CAAC,IAAY,EAAE,KAAuB;IACrD,OAAO,KAAK,IAAI,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,KAAK,CAAC,MAAM,MAAM,KAAK,CAAC,QAAQ,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC;AAC7G,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAyB;IAC/D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM;QAC1B,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ;YAC5C,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,YAAY,CAAC;IACnB,MAAM,KAAK,GAAG;QACZ,2CAA2C;QAC3C,EAAE;QACF,aAAa,MAAM,EAAE;QACrB,iBAAiB,MAAM,CAAC,YAAY,IAAI;QACxC,mBAAmB,MAAM,CAAC,UAAU,IAAI;QACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,wBAAwB,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,qBAAqB,MAAM,CAAC,MAAM,EAAE;QACpC,2BAA2B,MAAM,CAAC,eAAe,IAAI;QACrD,EAAE;QACF,+CAA+C;QAC/C,2BAA2B;QAC3B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;QACpD,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC;QACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1C,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAChD,EAAE;QACF,UAAU,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ;KAC5G,CAAC;IAEF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,QAAQ,CAAC,CAAC;IAE3E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChE,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gCAAgC,CAAC,CAAC;;YAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC;IACxE,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,sBAAsB,EACtB,EAAE,EACF,0BAA0B,EAC1B,EAAE,EACF,GAAG,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,EAC3E,EAAE,EACF,2BAA2B,EAC3B,EAAE,EACF,GAAG,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAC5E,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/quality-gate/runner.d.ts

@@ -0,0 +1,2 @@
+import type { QualityGateOptions, QualityGateReport } from "./types.js";
+export declare function runQualityGate(options: QualityGateOptions): Promise<QualityGateReport>;

package/dist/src/quality-gate/runner.js

@@ -0,0 +1,175 @@
+import { mkdir, writeFile } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { formatAuditReport } from "../audit/report.js";
+import { auditRepository } from "../audit/scanner.js";
+import { evaluateAcceptance } from "../acceptance/evaluator.js";
+import { loadAcceptanceAttestations } from "../acceptance/loader.js";
+import { formatAcceptanceReport } from "../acceptance/report.js";
+import { formatContractValidationReport } from "../contracts/report.js";
+import { inspectProductContract } from "../contracts/validator.js";
+import { formatRuntimeReport } from "../runtime/report.js";
+import { verifyUiRuntime } from "../runtime/verifier.js";
+import { formatQualityGateReport } from "./report.js";
+const QUALITY_GATE_VERSION = "1.0.0";
+async function writeEvidence(path, content) {
+    await writeFile(path, typeof content === "string" ? `${content}\n` : `${JSON.stringify(content, null, 2)}\n`, "utf8");
+}
+function skippedStage(message) {
+    return { status: "skipped", errors: 0, warnings: 0, info: 0, evidence: [], message };
+}
+export async function runQualityGate(options) {
+    const outputDirectory = resolve(options.outputDirectory);
+    const contractPath = resolve(options.contractPath);
+    const repository = resolve(options.repository);
+    const failOn = options.failOn ?? "error";
+    await mkdir(outputDirectory, { recursive: true });
+    const inspection = await inspectProductContract(contractPath, {
+        projectRoot: resolve(options.projectRoot),
+    });
+    const contractJson = join(outputDirectory, "contract-report.json");
+    const contractMarkdown = join(outputDirectory, "contract-report.md");
+    await writeEvidence(contractJson, inspection.report);
+    await writeEvidence(contractMarkdown, formatContractValidationReport(inspection.report));
+    const contractStage = {
+        status: inspection.report.passed ? "pass" : "fail",
+        errors: inspection.report.issues.length,
+        warnings: 0,
+        info: 0,
+        evidence: [contractJson, contractMarkdown],
+    };
+    const architectureReport = await auditRepository(repository);
+    const architectureJson = join(outputDirectory, "architecture-report.json");
+    const architectureMarkdown = join(outputDirectory, "architecture-report.md");
+    await writeEvidence(architectureJson, architectureReport);
+    await writeEvidence(architectureMarkdown, formatAuditReport(architectureReport));
+    const architectureStage = {
+        status: architectureReport.passed ? "pass" : "fail",
+        ...architectureReport.summary,
+        evidence: [architectureJson, architectureMarkdown],
+    };
+    let runtimeStage;
+    let runtimeReport;
+    if (!options.url || !options.profile) {
+        runtimeStage = skippedStage("Runtime requires both a URL and a journey profile. A skipped runtime stage cannot produce a passing quality gate.");
+    }
+    else if (!inspection.report.passed || !inspection.contract || !inspection.suite) {
+        runtimeStage = skippedStage("Runtime was not executed because the product contract is invalid.");
+    }
+    else {
+        const profile = inspection.suite.profiles.find((candidate) => candidate.id === options.profile);
+        if (!profile) {
+            runtimeStage = {
+                status: "fail",
+                errors: 1,
+                warnings: 0,
+                info: 0,
+                evidence: [],
+                message: `Unknown journey profile ${options.profile}.`,
+            };
+        }
+        else {
+            const runtimeDirectory = join(outputDirectory, "runtime");
+            runtimeReport = await verifyUiRuntime({
+                url: options.url,
+                outputDirectory: runtimeDirectory,
+                viewports: inspection.contract.verification.viewports,
+                journeys: profile.journeys.map(({ name, steps }) => ({ name, steps })),
+                expectedNetwork: profile.expectedNetwork ?? [],
+                ...(options.settleMs === undefined ? {} : { settleMs: options.settleMs }),
+                ...(options.chromiumPath ? { chromiumPath: options.chromiumPath } : {}),
+            });
+            const runtimeMarkdown = join(runtimeDirectory, "runtime-report.md");
+            runtimeStage = {
+                status: runtimeReport.passed ? "pass" : "fail",
+                ...runtimeReport.summary,
+                evidence: [join(runtimeDirectory, "runtime-report.json"), runtimeMarkdown],
+                message: `${runtimeReport.journeys.filter((journey) => journey.passed).length}/${runtimeReport.journeys.length} journeys passed; ${runtimeReport.screenshots.length} screenshots captured.`,
+            };
+            await writeEvidence(runtimeMarkdown, formatRuntimeReport(runtimeReport));
+        }
+    }
+    let acceptanceStage;
+    if (!runtimeReport ||
+        !options.profile ||
+        !inspection.report.passed ||
+        !inspection.contract ||
+        !inspection.suite) {
+        acceptanceStage = skippedStage("Acceptance evidence requires a valid contract and completed runtime profile.");
+    }
+    else {
+        const attestations = options.attestationsPath
+            ? await loadAcceptanceAttestations(options.attestationsPath)
+            : undefined;
+        const acceptanceReport = evaluateAcceptance({
+            contract: inspection.contract,
+            suite: inspection.suite,
+            profile: options.profile,
+            contractReport: inspection.report,
+            runtimeReport,
+            ...(attestations ? { attestations } : {}),
+        });
+        const acceptanceJson = join(outputDirectory, "acceptance-report.json");
+        const acceptanceMarkdown = join(outputDirectory, "acceptance-report.md");
+        await writeEvidence(acceptanceJson, acceptanceReport);
+        await writeEvidence(acceptanceMarkdown, formatAcceptanceReport(acceptanceReport));
+        acceptanceStage = {
+            status: acceptanceReport.passed ? "pass" : "fail",
+            errors: acceptanceReport.summary.blockerFailures +
+                acceptanceReport.summary.blockerUnverified,
+            warnings: acceptanceReport.summary.warningFailures +
+                acceptanceReport.summary.warningUnverified,
+            info: 0,
+            evidence: [acceptanceJson, acceptanceMarkdown],
+            message: `${acceptanceReport.summary.passed} passed, ${acceptanceReport.summary.failed} failed, ${acceptanceReport.summary.unverified} unverified criteria in profile scope.`,
+        };
+    }
+    const stages = {
+        contract: contractStage,
+        architecture: architectureStage,
+        runtime: runtimeStage,
+        acceptance: acceptanceStage,
+    };
+    const summary = Object.values(stages).reduce((total, stage) => ({
+        errors: total.errors + stage.errors,
+        warnings: total.warnings + stage.warnings,
+        info: total.info + stage.info,
+    }), { errors: 0, warnings: 0, info: 0 });
+    const complete = runtimeStage.status !== "skipped" &&
+        runtimeStage.evidence.length > 0 &&
+        acceptanceStage.status !== "skipped";
+    const passed = complete &&
+        summary.errors === 0 &&
+        (failOn === "error" || summary.warnings === 0);
+    const report = {
+        version: QUALITY_GATE_VERSION,
+        generatedAt: new Date().toISOString(),
+        outputDirectory,
+        contractPath,
+        repository,
+        ...(options.url ? { url: options.url } : {}),
+        ...(options.profile ? { profile: options.profile } : {}),
+        failOn,
+        stages,
+        summary,
+        complete,
+        passed,
+        evidenceBoundary: {
+            verifierLimitations: [
+                ...architectureReport.evidenceBoundary.verifierLimitations,
+                ...(runtimeReport?.evidenceBoundary.verifierLimitations ?? [
+                    "Runtime verification was not completed, so rendered behavior and browser evidence remain unverified.",
+                ]),
+            ],
+            humanReviewRequired: [
+                ...architectureReport.evidenceBoundary.humanReviewRequired,
+                ...(runtimeReport?.evidenceBoundary.humanReviewRequired ?? [
+                    "Human visual and representative-user review remain outside this incomplete gate.",
+                ]),
+            ],
+        },
+    };
+    await writeEvidence(join(outputDirectory, "quality-gate.json"), report);
+    await writeEvidence(join(outputDirectory, "quality-gate.md"), formatQualityGateReport(report));
+    return report;
+}
+//# sourceMappingURL=runner.js.map

package/dist/src/quality-gate/runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runner.js","sourceRoot":"","sources":["../../../src/quality-gate/runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE1C,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAOtD,MAAM,oBAAoB,GAAG,OAAO,CAAC;AAErC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,OAAwB;IACjE,MAAM,SAAS,CACb,IAAI,EACJ,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EACtF,MAAM,CACP,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;AACvF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA2B;IAC9D,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACzD,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC;IACzC,MAAM,KAAK,CAAC,eAAe,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAElD,MAAM,UAAU,GAAG,MAAM,sBAAsB,CAAC,YAAY,EAAE;QAC5D,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC;KAC1C,CAAC,CAAC;IACH,MAAM,YAAY,GAAG,IAAI,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,oBAAoB,CAAC,CAAC;IACrE,MAAM,aAAa,CAAC,YAAY,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,aAAa,CAAC,gBAAgB,EAAE,8BAA8B,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACzF,MAAM,aAAa,GAAqB;QACtC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAClD,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM;QACvC,QAAQ,EAAE,CAAC;QACX,IAAI,EAAE,CAAC;QACP,QAAQ,EAAE,CAAC,YAAY,EAAE,gBAAgB,CAAC;KAC3C,CAAC;IAEF,MAAM,kBAAkB,GAAG,MAAM,eAAe,CAAC,UAAU,CAAC,CAAC;IAC7D,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,0BAA0B,CAAC,CAAC;IAC3E,MAAM,oBAAoB,GAAG,IAAI,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;IAC7E,MAAM,aAAa,CAAC,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;IAC1D,MAAM,aAAa,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,kBAAkB,CAAC,CAAC,CAAC;IACjF,MAAM,iBAAiB,GAAqB;QAC1C,MAAM,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACnD,GAAG,kBAAkB,CAAC,OAAO;QAC7B,QAAQ,EAAE,CAAC,gBAAgB,EAAE,oBAAoB,CAAC;KACnD,CAAC;IAEF,IAAI,YAA8B,CAAC;IACnC,IAAI,aAAwC,CAAC;IAC7C,IAAI,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrC,YAAY,GAAG,YAAY,CACzB,mHAAmH,CACpH,CAAC;IACJ,CAAC;SAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAClF,YAAY,GAAG,YAAY,CAAC,mEAAmE,CAAC,CAAC;IACnG,CAAC;SAAM,CAAC;QACN,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;QAChG,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,GAAG;gBACb,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,CAAC;gBACT,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,CAAC;gBACP,QAAQ,EAAE,EAAE;gBACZ,OAAO,EAAE,2BAA2B,OAAO,CAAC,OAAO,GAAG;aACvD,CAAC;QACJ,CAAC;aAAM,CAAC;YACN,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC;YAC1D,aAAa,GAAG,MAAM,eAAe,CAAC;gBACpC,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,eAAe,EAAE,gBAAgB;gBACjC,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,SAAS;gBACrD,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACtE,eAAe,EAAE,OAAO,CAAC,eAAe,IAAI,EAAE;gBAC9C,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACzE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACxE,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,IAAI,CAAC,gBAAgB,EAAE,mBAAmB,CAAC,CAAC;YACpE,YAAY,GAAG;gBACb,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;gBAC9C,GAAG,aAAa,CAAC,OAAO;gBACxB,QAAQ,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,qBAAqB,CAAC,EAAE,eAAe,CAAC;gBAC1E,OAAO,EAAE,GAAG,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,MAAM,qBAAqB,aAAa,CAAC,WAAW,CAAC,MAAM,wBAAwB;aAC5L,CAAC;YACF,MAAM,aAAa,CAAC,eAAe,EAAE,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,IAAI,eAAiC,CAAC;IACtC,IACE,CAAC,aAAa;QACd,CAAC,OAAO,CAAC,OAAO;QAChB,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM;QACzB,CAAC,UAAU,CAAC,QAAQ;QACpB,CAAC,UAAU,CAAC,KAAK,EACjB,CAAC;QACD,eAAe,GAAG,YAAY,CAC5B,8EAA8E,CAC/E,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,MAAM,YAAY,GAAG,OAAO,CAAC,gBAAgB;YAC3C,CAAC,CAAC,MAAM,0BAA0B,CAAC,OAAO,CAAC,gBAAgB,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAC;QACd,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;YAC1C,QAAQ,EAAE,UAAU,CAAC,QAAQ;YAC7B,KAAK,EAAE,UAAU,CAAC,KAAK;YACvB,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,cAAc,EAAE,UAAU,CAAC,MAAM;YACjC,aAAa;YACb,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC1C,CAAC,CAAC;QACH,MAAM,cAAc,GAAG,IAAI,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;QACvE,MAAM,kBAAkB,GAAG,IAAI,CAAC,eAAe,EAAE,sBAAsB,CAAC,CAAC;QACzE,MAAM,aAAa,CAAC,cAAc,EAAE,gBAAgB,CAAC,CAAC;QACtD,MAAM,aAAa,CAAC,kBAAkB,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,CAAC,CAAC;QAClF,eAAe,GAAG;YAChB,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACjD,MAAM,EACJ,gBAAgB,CAAC,OAAO,CAAC,eAAe;gBACxC,gBAAgB,CAAC,OAAO,CAAC,iBAAiB;YAC5C,QAAQ,EACN,gBAAgB,CAAC,OAAO,CAAC,eAAe;gBACxC,gBAAgB,CAAC,OAAO,CAAC,iBAAiB;YAC5C,IAAI,EAAE,CAAC;YACP,QAAQ,EAAE,CAAC,cAAc,EAAE,kBAAkB,CAAC;YAC9C,OAAO,EAAE,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,YAAY,gBAAgB,CAAC,OAAO,CAAC,MAAM,YAAY,gBAAgB,CAAC,OAAO,CAAC,UAAU,wCAAwC;SAC9K,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG;QACb,QAAQ,EAAE,aAAa;QACvB,YAAY,EAAE,iBAAiB;QAC/B,OAAO,EAAE,YAAY;QACrB,UAAU,EAAE,eAAe;KAC5B,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAC1C,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QACjB,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;QACnC,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ;QACzC,IAAI,EAAE,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,IAAI;KAC9B,CAAC,EACF,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CACpC,CAAC;IACF,MAAM,QAAQ,GACZ,YAAY,CAAC,MAAM,KAAK,SAAS;QACjC,YAAY,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;QAChC,eAAe,CAAC,MAAM,KAAK,SAAS,CAAC;IACvC,MAAM,MAAM,GACV,QAAQ;QACR,OAAO,CAAC,MAAM,KAAK,CAAC;QACpB,CAAC,MAAM,KAAK,OAAO,IAAI,OAAO,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC;IACjD,MAAM,MAAM,GAAsB;QAChC,OAAO,EAAE,oBAAoB;QAC7B,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACrC,eAAe;QACf,YAAY;QACZ,UAAU;QACV,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5C,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxD,MAAM;QACN,MAAM;QACN,OAAO;QACP,QAAQ;QACR,MAAM;QACN,gBAAgB,EAAE;YAChB,mBAAmB,EAAE;gBACnB,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,mBAAmB;gBAC1D,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,mBAAmB,IAAI;oBACzD,sGAAsG;iBACvG,CAAC;aACH;YACD,mBAAmB,EAAE;gBACnB,GAAG,kBAAkB,CAAC,gBAAgB,CAAC,mBAAmB;gBAC1D,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAC,mBAAmB,IAAI;oBACzD,kFAAkF;iBACnF,CAAC;aACH;SACF;KACF,CAAC;IACF,MAAM,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,mBAAmB,CAAC,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,aAAa,CAAC,IAAI,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/quality-gate/schema.d.ts

@@ -0,0 +1,75 @@
+import { z } from "zod";
+export declare const qualityGateReportSchema: {
+    version: z.ZodString;
+    generatedAt: z.ZodString;
+    outputDirectory: z.ZodString;
+    contractPath: z.ZodString;
+    repository: z.ZodString;
+    url: z.ZodOptional<z.ZodString>;
+    profile: z.ZodOptional<z.ZodString>;
+    failOn: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+    }>;
+    stages: z.ZodObject<{
+        contract: z.ZodObject<{
+            status: z.ZodEnum<{
+                pass: "pass";
+                fail: "fail";
+                skipped: "skipped";
+            }>;
+            errors: z.ZodNumber;
+            warnings: z.ZodNumber;
+            info: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        architecture: z.ZodObject<{
+            status: z.ZodEnum<{
+                pass: "pass";
+                fail: "fail";
+                skipped: "skipped";
+            }>;
+            errors: z.ZodNumber;
+            warnings: z.ZodNumber;
+            info: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        runtime: z.ZodObject<{
+            status: z.ZodEnum<{
+                pass: "pass";
+                fail: "fail";
+                skipped: "skipped";
+            }>;
+            errors: z.ZodNumber;
+            warnings: z.ZodNumber;
+            info: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+        acceptance: z.ZodObject<{
+            status: z.ZodEnum<{
+                pass: "pass";
+                fail: "fail";
+                skipped: "skipped";
+            }>;
+            errors: z.ZodNumber;
+            warnings: z.ZodNumber;
+            info: z.ZodNumber;
+            evidence: z.ZodArray<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>;
+    }, z.core.$strip>;
+    summary: z.ZodObject<{
+        errors: z.ZodNumber;
+        warnings: z.ZodNumber;
+        info: z.ZodNumber;
+    }, z.core.$strip>;
+    complete: z.ZodBoolean;
+    passed: z.ZodBoolean;
+    evidenceBoundary: z.ZodDefault<z.ZodObject<{
+        verifierLimitations: z.ZodArray<z.ZodString>;
+        humanReviewRequired: z.ZodArray<z.ZodString>;
+    }, z.core.$strip>>;
+};

package/dist/src/quality-gate/schema.js

@@ -0,0 +1,37 @@
+import { z } from "zod";
+const qualityGateStageSchema = z.object({
+    status: z.enum(["pass", "fail", "skipped"]),
+    errors: z.number().int().nonnegative(),
+    warnings: z.number().int().nonnegative(),
+    info: z.number().int().nonnegative(),
+    evidence: z.array(z.string()),
+    message: z.string().optional(),
+});
+export const qualityGateReportSchema = {
+    version: z.string(),
+    generatedAt: z.string(),
+    outputDirectory: z.string(),
+    contractPath: z.string(),
+    repository: z.string(),
+    url: z.string().optional(),
+    profile: z.string().optional(),
+    failOn: z.enum(["error", "warning"]),
+    stages: z.object({
+        contract: qualityGateStageSchema,
+        architecture: qualityGateStageSchema,
+        runtime: qualityGateStageSchema,
+        acceptance: qualityGateStageSchema,
+    }),
+    summary: z.object({
+        errors: z.number().int().nonnegative(),
+        warnings: z.number().int().nonnegative(),
+        info: z.number().int().nonnegative(),
+    }),
+    complete: z.boolean(),
+    passed: z.boolean(),
+    evidenceBoundary: z.object({
+        verifierLimitations: z.array(z.string()),
+        humanReviewRequired: z.array(z.string()),
+    }).default({ verifierLimitations: [], humanReviewRequired: [] }),
+};
+//# sourceMappingURL=schema.js.map

package/dist/src/quality-gate/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../../src/quality-gate/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IAC3C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC/B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE;IACxB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,QAAQ,EAAE,sBAAsB;QAChC,YAAY,EAAE,sBAAsB;QACpC,OAAO,EAAE,sBAAsB;QAC/B,UAAU,EAAE,sBAAsB;KACnC,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;QACxC,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;KACzC,CAAC,CAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,mBAAmB,EAAE,EAAE,EAAE,CAAC;CACjE,CAAC"}

package/dist/src/quality-gate/types.d.ts

@@ -0,0 +1,49 @@
+export type QualityGateFailOn = "error" | "warning";
+export type QualityGateStageStatus = "pass" | "fail" | "skipped";
+export type QualityGateStage = {
+    status: QualityGateStageStatus;
+    errors: number;
+    warnings: number;
+    info: number;
+    evidence: string[];
+    message?: string;
+};
+export type QualityGateReport = {
+    version: string;
+    generatedAt: string;
+    outputDirectory: string;
+    contractPath: string;
+    repository: string;
+    url?: string;
+    profile?: string;
+    failOn: QualityGateFailOn;
+    stages: {
+        contract: QualityGateStage;
+        architecture: QualityGateStage;
+        runtime: QualityGateStage;
+        acceptance: QualityGateStage;
+    };
+    summary: {
+        errors: number;
+        warnings: number;
+        info: number;
+    };
+    complete: boolean;
+    passed: boolean;
+    evidenceBoundary: {
+        verifierLimitations: string[];
+        humanReviewRequired: string[];
+    };
+};
+export type QualityGateOptions = {
+    contractPath: string;
+    projectRoot: string;
+    repository: string;
+    outputDirectory: string;
+    url?: string;
+    profile?: string;
+    failOn?: QualityGateFailOn;
+    settleMs?: number;
+    chromiumPath?: string;
+    attestationsPath?: string;
+};

package/dist/src/quality-gate/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/src/quality-gate/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/quality-gate/types.ts"],"names":[],"mappings":""}

package/dist/src/repair/loader.d.ts

@@ -0,0 +1,2 @@
+import { type RepairRequest } from "./schema.js";
+export declare function loadRepairRequest(path: string): Promise<RepairRequest>;

package/dist/src/repair/loader.js

@@ -0,0 +1,11 @@
+import { readFile } from "node:fs/promises";
+import { extname } from "node:path";
+import { parse } from "yaml";
+import { repairRequestSchema } from "./schema.js";
+export async function loadRepairRequest(path) {
+    const source = await readFile(path, "utf8");
+    const extension = extname(path).toLowerCase();
+    const parsed = extension === ".json" ? JSON.parse(source) : parse(source);
+    return repairRequestSchema.parse(parsed);
+}
+//# sourceMappingURL=loader.js.map

package/dist/src/repair/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/repair/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,mBAAmB,EAAsB,MAAM,aAAa,CAAC;AAEtE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAAY;IAClD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,MAAM,MAAM,GAAG,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC1E,OAAO,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAC3C,CAAC"}

package/dist/src/repair/policy.d.ts

@@ -0,0 +1,16 @@
+import { type GenerationManifest } from "../generation/schema.js";
+export type RepairTargetOptions = {
+    generationRoot: string;
+    targetDirectory: string;
+    portfolioRegistryPath: string;
+    manifestPath: string;
+};
+export type AuthorizedRepairTarget = {
+    generationRoot: string;
+    targetDirectory: string;
+    portableTarget: string;
+    manifest: GenerationManifest;
+    manifestPath: string;
+};
+export declare function authorizeRepairTarget(options: RepairTargetOptions): Promise<AuthorizedRepairTarget>;
+export declare function requireLoopbackUrl(value: string): string;

package/dist/src/repair/policy.js

@@ -0,0 +1,65 @@
+import { lstat, realpath, stat } from "node:fs/promises";
+import { basename, relative, resolve } from "node:path";
+import { generationManifestSchema } from "../generation/schema.js";
+import { isContained, portablePath } from "../portfolio/files.js";
+import { inspectPortfolioRegistry } from "../portfolio/registry.js";
+import { readFile } from "node:fs/promises";
+async function requireRealDirectory(path, label) {
+    const lexical = resolve(path);
+    const lexicalStats = await lstat(lexical);
+    if (lexicalStats.isSymbolicLink())
+        throw new Error(`${label} cannot be a symbolic link`);
+    const canonical = await realpath(lexical);
+    if (!(await stat(canonical)).isDirectory())
+        throw new Error(`${label} must be a directory`);
+    return canonical;
+}
+export async function authorizeRepairTarget(options) {
+    const generationRoot = await requireRealDirectory(options.generationRoot, "Generation root");
+    const targetDirectory = await requireRealDirectory(options.targetDirectory, "Repair target");
+    if (targetDirectory === generationRoot || !isContained(generationRoot, targetDirectory)) {
+        throw new Error("Repair target must be a child of the authorized generation root");
+    }
+    const registryInspection = await inspectPortfolioRegistry(resolve(options.portfolioRegistryPath));
+    if (!registryInspection.registry || !registryInspection.report.passed) {
+        throw new Error("Portfolio registry must pass validation before repair");
+    }
+    for (const root of registryInspection.roots) {
+        if (isContained(root.canonicalPath, targetDirectory) || isContained(targetDirectory, root.canonicalPath)) {
+            throw new Error(`Repair target overlaps read-only portfolio root ${root.declaration.id}`);
+        }
+    }
+    const requestedManifest = resolve(targetDirectory, options.manifestPath);
+    if (!isContained(targetDirectory, requestedManifest)) {
+        throw new Error("Generation manifest resolves outside the repair target");
+    }
+    const manifestStats = await lstat(requestedManifest);
+    if (manifestStats.isSymbolicLink() || !manifestStats.isFile()) {
+        throw new Error("Generation manifest must be a regular non-symbolic file");
+    }
+    const manifestCanonical = await realpath(requestedManifest);
+    if (!isContained(targetDirectory, manifestCanonical)) {
+        throw new Error("Generation manifest escapes the repair target");
+    }
+    const manifest = generationManifestSchema.parse(JSON.parse(await readFile(manifestCanonical, "utf8")));
+    return {
+        generationRoot,
+        targetDirectory,
+        portableTarget: portablePath(relative(generationRoot, targetDirectory)) || basename(targetDirectory),
+        manifest,
+        manifestPath: manifestCanonical,
+    };
+}
+export function requireLoopbackUrl(value) {
+    const url = new URL(value);
+    const hostname = url.hostname.toLowerCase();
+    if (!(["127.0.0.1", "localhost", "::1"].includes(hostname))) {
+        throw new Error("Repair verification URL must use a loopback host");
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        throw new Error("Repair verification URL must use HTTP or HTTPS");
+    }
+    url.hash = "";
+    return url.toString();
+}
+//# sourceMappingURL=policy.js.map

package/dist/src/repair/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../../src/repair/policy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAExD,OAAO,EAAE,wBAAwB,EAA2B,MAAM,yBAAyB,CAAC;AAC5F,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAiB5C,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,KAAa;IAC7D,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9B,MAAM,YAAY,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,YAAY,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,4BAA4B,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,KAAK,sBAAsB,CAAC,CAAC;IAC5F,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA4B;IAE5B,MAAM,cAAc,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,cAAc,EAAE,iBAAiB,CAAC,CAAC;IAC7F,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,eAAe,EAAE,eAAe,CAAC,CAAC;IAC7F,IAAI,eAAe,KAAK,cAAc,IAAI,CAAC,WAAW,CAAC,cAAc,EAAE,eAAe,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,MAAM,kBAAkB,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC;IAClG,IAAI,CAAC,kBAAkB,CAAC,QAAQ,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,KAAK,EAAE,CAAC;QAC5C,IAAI,WAAW,CAAC,IAAI,CAAC,aAAa,EAAE,eAAe,CAAC,IAAI,WAAW,CAAC,eAAe,EAAE,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACzG,MAAM,IAAI,KAAK,CAAC,mDAAmD,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAG,OAAO,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IACzE,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrD,IAAI,aAAa,CAAC,cAAc,EAAE,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,iBAAiB,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,CAAC;IAC5D,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,QAAQ,GAAG,wBAAwB,CAAC,KAAK,CAC7C,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CACtD,CAAC;IAEF,OAAO;QACL,cAAc;QACd,eAAe;QACf,cAAc,EAAE,YAAY,CAAC,QAAQ,CAAC,cAAc,EAAE,eAAe,CAAC,CAAC,IAAI,QAAQ,CAAC,eAAe,CAAC;QACpG,QAAQ;QACR,YAAY,EAAE,iBAAiB;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;IACd,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC"}

package/dist/src/repair/report.d.ts

@@ -0,0 +1,2 @@
+import type { RepairReport } from "./schema.js";
+export declare function formatRepairReport(report: RepairReport): string;

package/dist/src/repair/report.js

@@ -0,0 +1,32 @@
+export function formatRepairReport(report) {
+    return [
+        "# Bounded Repair Report",
+        "",
+        `- Request: ${report.requestId}`,
+        `- Target: ${report.target}`,
+        `- Adapter: ${report.adapter} ${report.adapterVersion}`,
+        `- Status: ${report.status}`,
+        `- Reason: ${report.reason}`,
+        `- Target restored: ${report.targetRestored ? "yes" : "no"}`,
+        `- Unrelated files preserved: ${report.unrelatedFilesPreserved ? "yes" : "no"}`,
+        `- Human evidence: ${report.humanEvidence}`,
+        "",
+        "## Finding Resolution",
+        `- Resolved: ${report.resolvedFindingIds.length > 0 ? report.resolvedFindingIds.join(", ") : "none"}`,
+        `- Unresolved: ${report.unresolvedFindingIds.length > 0 ? report.unresolvedFindingIds.join(", ") : "none"}`,
+        "",
+        "## Attempts",
+        ...report.attempts.flatMap((attempt) => [
+            `### ${attempt.id}`,
+            `- Status: ${attempt.status}`,
+            `- Operations: ${attempt.operationIds.length > 0 ? attempt.operationIds.join(", ") : "none"}`,
+            `- Changed files: ${attempt.changedFiles.length > 0 ? attempt.changedFiles.join(", ") : "none"}`,
+            `- Result: ${attempt.message}`,
+        ]),
+        "",
+        "## Evidence Boundary",
+        ...report.evidenceBoundary.verifierLimitations.map((entry) => `- Limitation: ${entry}`),
+        ...report.evidenceBoundary.humanReviewRequired.map((entry) => `- Human review: ${entry}`),
+    ].join("\n");
+}
+//# sourceMappingURL=report.js.map

package/dist/src/repair/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/repair/report.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,OAAO;QACL,yBAAyB;QACzB,EAAE;QACF,cAAc,MAAM,CAAC,SAAS,EAAE;QAChC,aAAa,MAAM,CAAC,MAAM,EAAE;QAC5B,cAAc,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,cAAc,EAAE;QACvD,aAAa,MAAM,CAAC,MAAM,EAAE;QAC5B,aAAa,MAAM,CAAC,MAAM,EAAE;QAC5B,sBAAsB,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAC5D,gCAAgC,MAAM,CAAC,uBAAuB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;QAC/E,qBAAqB,MAAM,CAAC,aAAa,EAAE;QAC3C,EAAE;QACF,uBAAuB;QACvB,eAAe,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;QACrG,iBAAiB,MAAM,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;QAC3G,EAAE;QACF,aAAa;QACb,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,OAAO,OAAO,CAAC,EAAE,EAAE;YACnB,aAAa,OAAO,CAAC,MAAM,EAAE;YAC7B,iBAAiB,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;YAC7F,oBAAoB,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE;YAChG,aAAa,OAAO,CAAC,OAAO,EAAE;SAC/B,CAAC;QACF,EAAE;QACF,sBAAsB;QACtB,GAAG,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,KAAK,EAAE,CAAC;QACvF,GAAG,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,KAAK,EAAE,CAAC;KAC1F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC"}

package/dist/src/repair/runner.d.ts

@@ -0,0 +1,17 @@
+import type { QualityGateFailOn } from "../quality-gate/types.js";
+import { type RepairReport, type RepairRequest } from "./schema.js";
+export type RepairRunnerOptions = {
+    request: RepairRequest;
+    generationRoot: string;
+    targetDirectory: string;
+    portfolioRegistryPath: string;
+    contractPath: string;
+    projectRoot: string;
+    url: string;
+    profile: string;
+    outputDirectory: string;
+    failOn?: QualityGateFailOn;
+    settleMs?: number;
+    chromiumPath?: string;
+};
+export declare function runBoundedRepair(options: RepairRunnerOptions): Promise<RepairReport>;