audit-tools 0.51.10 → 0.52.0

package/dist/shared/reporting/auditDeliverable.js

@@ -1,3 +1,4 @@
+// sites-pinned: tests/remediate/remediate-state-invariants.test.ts, tests/remediate/audit-read-plan-stamp.test.ts
 // Shared audit-deliverable emitter: build the canonical `audit-findings.json`
 // machine contract + its `audit-report.md` human render from a Finding[] set.
 //
@@ -39,8 +40,13 @@ function lensBreakdown(findings) {
  * deliverable is a flat, re-consumable finding set). Stamped with the same
  * `contract_version` the auditor emits, so `validateAuditFindingsReport` accepts
  * it and the remediator's structured fast-path consumes it losslessly.
+ *
+ * `auditRead` is REQUIRED and is never computed here: this emitter re-states
+ * findings somebody else read, so the only honest value is the one the source
+ * report carried (or `null` when there was none). Stamping the commit current at
+ * re-emit time would hand the next run a remediation-side commit as `B`.
  */
-export function buildAuditFindingsDeliverable(findings) {
+export function buildAuditFindingsDeliverable(findings, auditRead) {
     const coherenceTrace = buildContentCoherenceTrace({
         items: findings.map((finding) => ({
             id: finding.id,
@@ -84,6 +90,7 @@ export function buildAuditFindingsDeliverable(findings) {
     };
     return {
         contract_version: AUDIT_FINDINGS_CONTRACT_VERSION,
+        audit_read: auditRead,
         summary,
         findings: [...findings],
         coherence_trace: coherenceTrace,
@@ -122,9 +129,9 @@ export function renderAuditDeliverableMarkdown(findings, options = {}) {
  * `findings_report` to `audit-findings.json` and `report_markdown` to
  * `audit-report.md`.
  */
-export function buildAuditDeliverablePair(findings, options = {}) {
+export function buildAuditDeliverablePair(findings, auditRead, options = {}) {
     return {
-        findings_report: buildAuditFindingsDeliverable(findings),
+        findings_report: buildAuditFindingsDeliverable(findings, auditRead),
         report_markdown: renderAuditDeliverableMarkdown(findings, options),
     };
 }

package/dist/shared/reporting/auditDeliverable.js.map

@@ -1 +1 @@
-{"version":3,"file":"auditDeliverable.js","sourceRoot":"","sources":["../../../src/shared/reporting/auditDeliverable.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,2BAA2B;AAS3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,GACjC,MAAM,cAAc,CAAC;AAEtB,MAAM,aAAa,GAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEvF;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,QAA4B;IACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,aAAa;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,QAA4B;IACjD,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAA4B;IAE5B,MAAM,cAAc,GAAG,0BAA0B,CAC/C;QACE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAChC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3D,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACrB,CAAC,CAAC;QACH,aAAa,EAAE,EAAE;KAClB,EACD,8BAA8B,CAC/B,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAgB,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAChC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACnB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;YACtE,CAAC,CAAC,OAAO,CAAC,QAAQ;YAClB,CAAC,CAAC,OAAO,EACb,MAAM,CACP,CAAC;QACF,OAAO;YACL,EAAE,EAAE,SAAS,KAAK,GAAG,CAAC,EAAE;YACxB,WAAW,EAAE,CAAC,GAAG,GAAG,CAAC;YACrB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE;gBACX,GAAG,IAAI,GAAG,CACR,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1B,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CACrE,CACF;aACF,CAAC,IAAI,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;gBACxD,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,gBAAgB;YACpB,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,sCAAsC,OAAO,CAAC,MAAM,cAAc;YAC7E,UAAU,EAAE,EAAE;YACd,cAAc,EACZ,gCAAgC;gBAChC,OAAO,CAAC,MAAM,GAAG,8BAA8B;SAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAyB;QACpC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,gBAAgB,EAAE,MAAM,CAAC,MAAM;QAC/B,kBAAkB,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QAC/C,kBAAkB,EAAE,CAAC;QACrB,mBAAmB,EAAE,CAAC;QACtB,mCAAmC,EAAE,EAAE;QACvC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC;KACxC,CAAC;IACF,OAAO;QACL,gBAAgB,EAAE,+BAA+B;QACjD,OAAO;QACP,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;QACvB,eAAe,EAAE,cAAc;QAC/B,WAAW,EAAE,MAAM;QACnB,wEAAwE;QACxE,4EAA4E;QAC5E,4EAA4E;QAC5E,+CAA+C;QAC/C,gBAAgB,EAAE,oBAAoB,CAAC,MAAM,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAA4B,EAC5B,UAA8C,EAAE;IAEhD,MAAM,KAAK,GAAa,CAAC,KAAK,OAAO,CAAC,KAAK,IAAI,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAA4B,EAC5B,UAA8C,EAAE;IAEhD,OAAO;QACL,eAAe,EAAE,6BAA6B,CAAC,QAAQ,CAAC;QACxD,eAAe,EAAE,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC;KACnE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"auditDeliverable.js","sourceRoot":"","sources":["../../../src/shared/reporting/auditDeliverable.ts"],"names":[],"mappings":"AAAA,kHAAkH;AAClH,8EAA8E;AAC9E,8EAA8E;AAC9E,EAAE;AACF,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,8EAA8E;AAC9E,2BAA2B;AAU3B,OAAO,EAAE,+BAA+B,EAAE,MAAM,iCAAiC,CAAC;AAClF,OAAO,EAAE,uBAAuB,EAAE,MAAM,qBAAqB,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EACL,8BAA8B,EAC9B,0BAA0B,GAC3B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EACL,8BAA8B,EAC9B,gCAAgC,GACjC,MAAM,cAAc,CAAC;AAEtB,MAAM,aAAa,GAAsB,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;AAEvF;;;;;;;GAOG;AACH,SAAS,iBAAiB,CAAC,QAA4B;IACrD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,GAAG,IAAI,aAAa;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IACpD,OAAO,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CAAC,QAA4B;IACjD,OAAO,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAA4B,EAC5B,SAA2B;IAE3B,MAAM,cAAc,GAAG,0BAA0B,CAC/C;QACE,KAAK,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YAChC,EAAE,EAAE,OAAO,CAAC,EAAE;YACd,UAAU,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3D,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;SACrB,CAAC,CAAC;QACH,aAAa,EAAE,EAAE;KAClB,EACD,8BAA8B,CAC/B,CAAC;IACF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAC9E,MAAM,MAAM,GAAgB,cAAc,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QACvE,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,CAAE,CAAC,CAAC;QACtD,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAChC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CACnB,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC;YACtE,CAAC,CAAC,OAAO,CAAC,QAAQ;YAClB,CAAC,CAAC,OAAO,EACb,MAAM,CACP,CAAC;QACF,OAAO;YACL,EAAE,EAAE,SAAS,KAAK,GAAG,CAAC,EAAE;YACxB,WAAW,EAAE,CAAC,GAAG,GAAG,CAAC;YACrB,QAAQ,EAAE,EAAE;YACZ,WAAW,EAAE;gBACX,GAAG,IAAI,GAAG,CACR,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAC1B,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CACrE,CACF;aACF,CAAC,IAAI,EAAE;YACR,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC;gBACxD,CAAC,CAAC,cAAc;gBAChB,CAAC,CAAC,gBAAgB;YACpB,YAAY,EAAE,WAAW;YACzB,SAAS,EAAE,sCAAsC,OAAO,CAAC,MAAM,cAAc;YAC7E,UAAU,EAAE,EAAE;YACd,cAAc,EACZ,gCAAgC;gBAChC,OAAO,CAAC,MAAM,GAAG,8BAA8B;SAClD,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,MAAM,OAAO,GAAyB;QACpC,aAAa,EAAE,QAAQ,CAAC,MAAM;QAC9B,gBAAgB,EAAE,MAAM,CAAC,MAAM;QAC/B,kBAAkB,EAAE,iBAAiB,CAAC,QAAQ,CAAC;QAC/C,kBAAkB,EAAE,CAAC;QACrB,mBAAmB,EAAE,CAAC;QACtB,mCAAmC,EAAE,EAAE;QACvC,cAAc,EAAE,aAAa,CAAC,QAAQ,CAAC;KACxC,CAAC;IACF,OAAO;QACL,gBAAgB,EAAE,+BAA+B;QACjD,UAAU,EAAE,SAAS;QACrB,OAAO;QACP,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC;QACvB,eAAe,EAAE,cAAc;QAC/B,WAAW,EAAE,MAAM;QACnB,wEAAwE;QACxE,4EAA4E;QAC5E,4EAA4E;QAC5E,+CAA+C;QAC/C,gBAAgB,EAAE,oBAAoB,CAAC,MAAM,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,8BAA8B,CAC5C,QAA4B,EAC5B,UAA8C,EAAE;IAEhD,MAAM,KAAK,GAAa,CAAC,KAAK,OAAO,CAAC,KAAK,IAAI,cAAc,EAAE,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAChC,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,gBAAgB,QAAQ,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC,CAAC;IACnD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAA4B,EAC5B,SAA2B,EAC3B,UAA8C,EAAE;IAEhD,OAAO;QACL,eAAe,EAAE,6BAA6B,CAAC,QAAQ,EAAE,SAAS,CAAC;QACnE,eAAe,EAAE,8BAA8B,CAAC,QAAQ,EAAE,OAAO,CAAC;KACnE,CAAC;AACJ,CAAC"}

package/dist/shared/tooling/landingGates.d.ts

@@ -0,0 +1,118 @@
+/**
+ * One landing-gate ROLE, with the npm script names that declare it in
+ * preference order — the same ordering rule `testCommand.ts` states: generic /
+ * widely-adopted names first, framework- or repo-specific aliases last, and
+ * `pickScript` returns the FIRST match.
+ */
+export interface LandingGateRole {
+    /**
+     * The gate's role. Named so a report, a test and a prompt can all say WHICH
+     * gate a repo contributes without parsing its script name.
+     */
+    readonly role: "guard" | "deadcode" | "depgraph" | "glossary" | "lint";
+    /**
+     * One line, rendered wherever the landing gate is described to a host — the
+     * gate's own statement of what it refuses, never restated at the call site.
+     */
+    readonly refuses: string;
+    /** npm script names declaring this role, most generic first. */
+    readonly scripts: readonly string[];
+}
+/**
+ * The declared landing-gate vocabulary.
+ *
+ * ORDER IS THE EMITTED ORDER, and the four roles are independent: a repo
+ * declaring only `check:lint` contributes exactly one command. Sorted by role
+ * name (deadcode, depgraph, guard, lint) as the array literal, so the emitted
+ * list is content-stable and a re-derivation cannot churn the workload digest
+ * (CLAUDE.md, "Extractors emit stable, content-derived array order").
+ *
+ * `guard` is separate from the three cheap gates because it is the EXPENSIVE
+ * one: the repository's own cross-cutting test suite. It is here because a
+ * guard suite is precisely the gate a module-scoped `targeted_commands` entry
+ * cannot stand in for — `tests/shared/audit-tools-path-guard.test.ts` is the
+ * live example.
+ */
+export declare const LANDING_GATE_SCRIPT_NAMES: readonly LandingGateRole[];
+/**
+ * The repository's landing gates, as runnable command strings, in the
+ * vocabulary's declared role order.
+ *
+ * Pure over `(root)` and deterministic: reads one manifest, emits a
+ * content-stable sorted-by-role list, spawns nothing.
+ */
+export declare function discoverLandingGates(root: string): string[];
+/**
+ * Every invariant id a value DECLARES anywhere it can be nested — a module
+ * contract's `invariants`, an obligation slug, or any other string a producer
+ * hangs an id on. Walks objects and arrays rather than reading one named field,
+ * because a contract's shape is the producer's, not this predicate's.
+ *
+ * Returns the SET of ids, not a boolean, because the caller has to subtract the
+ * ids the glossary already documents: mentioning an existing id is not coining
+ * one (see {@link withGlossaryScope}).
+ */
+export declare function declaredInvariantIds(value: unknown): Set<string>;
+/**
+ * Whether a value declares ANY invariant id — the boolean form of
+ * {@link declaredInvariantIds}, for a caller that only needs the predicate.
+ */
+export declare function declaresInvariantId(value: unknown): boolean;
+/**
+ * The one-line statement of what a landing gate command REFUSES, or `null` when
+ * the command was not declared as one.
+ *
+ * Rendered wherever a host is told what its required tests cover, so the
+ * sentence stating a gate's authority is written once, beside the vocabulary
+ * that declares the gate. `null` for an item's own `targeted_commands`, which
+ * are not landing gates and carry no vocabulary entry.
+ */
+export declare function landingGateRefusal(command: string): string | null;
+/**
+ * The glossary document a scope must be able to write when it coins an
+ * invariant id. Repo-relative, so it composes with `allowed_files` unchanged.
+ *
+ * ⚠ This is THIS repository's convention, and it is only ever consulted as a
+ * CANDIDATE. `remediate-code` runs against arbitrary repositories, so the path
+ * being a constant is not a claim that the document exists — a target root that
+ * has no such file gets NO widening at all (a content fact, checked by
+ * {@link withGlossaryScope}). A tool that widened on the NAME alone would hand
+ * an item write scope over a file its repository does not have.
+ */
+export declare const GLOSSARY_DOCUMENT_PATH = "docs/glossary-ids.md";
+/**
+ * Widen a work item's write scope so an item that COINS an invariant id can
+ * actually satisfy the id-glossary gate.
+ *
+ * ── THE FRICTION THIS CLOSES ─────────────────────────────────────────────────
+ *
+ * The glossary document is outside every module's `file_scope`; the glossary
+ * gate scans `src/` for `INV-*` ids and fails on one with no glossary row. So
+ * an item that coins an id in `src/` is STRUCTURALLY UNABLE to satisfy the
+ * gate: the fix is a glossary edit its write scope forbids, and the red lands
+ * silently, discovered by the NEXT item's worker. It happened twice in one
+ * session (`INV-SSP-DEFERRED-SET-REPORTED` at CP-NODE-10, and the id the
+ * charter-delta parser coined at CP-NODE-18, since retired with that parser) —
+ * the "tool_should_decide" friction in `docs/backlog/open-bugs.md`.
+ *
+ * ── THREE CONDITIONS, EACH NARROWING ─────────────────────────────────────────
+ *
+ *  1. The document must EXIST in the target root. The path is this
+ *     repository's convention; an arbitrary target repo may keep none, and
+ *     widening for a document that is not there grants scope over nothing.
+ *  2. The contract must declare at least one id the document does NOT already
+ *     carry. A contract that merely MENTIONS `INV-COVERAGE` — a seam adjustment
+ *     citing an existing invariant, a prose reference — coins nothing, and
+ *     widening for it hands the item a document it has no business editing.
+ *     Only an id with no row yet is a COIN, because only that id needs one.
+ *  3. The scope must not already carry the path (idempotence).
+ *
+ * The gate itself is bound separately, at the CLOSE — scope without the gate
+ * would leave the red silent; the gate without scope would turn it into a
+ * dead-end refusal. Both halves are the one decision.
+ *
+ * Deterministic, stable-ordered and idempotent: a scope that already carries
+ * the path is returned unchanged.
+ */
+export declare function withGlossaryScope(root: string, allowedFiles: readonly string[], declaredIds: ReadonlySet<string>): string[];
+//# sourceMappingURL=landingGates.d.ts.map

package/dist/shared/tooling/landingGates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"landingGates.d.ts","sourceRoot":"","sources":["../../../src/shared/tooling/landingGates.ts"],"names":[],"mappings":"AAuEA;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,UAAU,GAAG,UAAU,GAAG,UAAU,GAAG,MAAM,CAAC;IACvE;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,gEAAgE;IAChE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,eAAe,EAkC/D,CAAC;AAyBF;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAc3D;AAeD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,CAkBhE;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAE3D;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOjE;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,sBAAsB,yBAAyB,CAAC;AAyB7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,WAAW,EAAE,WAAW,CAAC,MAAM,CAAC,GAC/B,MAAM,EAAE,CAQV"}

package/dist/shared/tooling/landingGates.js

@@ -0,0 +1,314 @@
+// sites-pinned: tests/shared/landing-gates.test.ts, tests/remediate/host-handoff.test.ts
+//   The discovery/vocabulary/scope rules are pinned by the shared suite; the
+//   per-item wiring that remains (the glossary write scope) is pinned by the
+//   host-handoff suite's "landing gates" block, and the close leg by
+//   tests/remediate/landing-gates-close.test.ts.
+//
+// The repository's LANDING GATES: the tree-wide guard suites and the cheap
+// release gates a LANDING must run, discovered from the target repository's own
+// declared command surface.
+//
+// ── WHY THIS EXISTS ──────────────────────────────────────────────────────────
+//
+// The per-item required tests were the block's `targeted_commands`, which are
+// MODULE-SCOPED: a block that edits one module declares the command that
+// exercises that module. Three remediation landings reddened CI after green
+// per-item runs, each on a gate no per-item command covers —
+//
+//   • a hand-restated `.audit-tools` literal caught only by the tree-wide
+//     `tests/shared/audit-tools-path-guard.test.ts` (`1e7a4a54` fixed it),
+//   • a case-folding assertion true only on a case-insensitive volume
+//     (`011c6ae0`), and
+//   • an intra-`src/shared` import cycle a reviewer graded minor that
+//     `check:depgraph` refuses (`b5963957`).
+//
+// ── WHERE THE GATES RUN: THE CLOSE, NOT THE ITEM ─────────────────────────────
+//
+// The first attempt folded these gates into EVERY work item's `required_tests`.
+// That was wrong, and the way it was wrong is worth keeping: these gates state
+// facts about the WHOLE tree, so an item that adds an export whose only consumer
+// lands in a LATER item could not pass, and no edit inside its own scope could
+// make it pass; another item's fault could refuse this one too. A gate that
+// GUESSES at a boundary owned by something else is moved to the boundary that
+// owns it (CLAUDE.md, *A gate states the boundary it OWNS*) — and the merged tree
+// exists only at the CLOSE. So the loop is: this module DISCOVERS the gates, and
+// `verifyLandingGates` (`src/remediate/phases/closeVerifyLandingGates.ts`) runs
+// them once each at close and folds the result into `fullyGreen`.
+//
+// What stays per-item is the one scope fact a prepare owns: a block that coins
+// an invariant id needs the glossary document in its write scope, or the gate is
+// unsatisfiable for the item that coins it (`withGlossaryScope` below).
+//
+// ── WHY IT IS DISCOVERED, NOT BAKED IN ───────────────────────────────────────
+//
+// `remediate-code` runs against ARBITRARY repositories. `check:depgraph`,
+// `check:deadcode` and `check:lint` are THIS repository's script names; a
+// language-neutral tool that hardcoded them would demand a target repo declare
+// audit-tools' own private vocabulary, and would run the wrong thing (or
+// nothing) everywhere else. So the gates are read from the target repo's
+// `package.json` scripts through a DECLARED, preference-ordered vocabulary —
+// exactly the shape `discoverProjectCommands` (./testCommand.ts) already uses
+// for test/e2e/build/lint, so a "discover a project command by role" question
+// has one answer in this codebase rather than two.
+//
+// Degrade-to-empty is the contract: a repo with no `package.json`, a malformed
+// one, or one declaring none of these roles contributes NO landing gate. A
+// missing gate narrows the landing command set; it never throws and never
+// invents a command the repository did not declare.
+//
+// ⚠ WHAT "NO GATE DISCOVERED" DOES AND DOES NOT MEAN. Discovery reads the target
+// repository's `package.json` `scripts` map and NOTHING ELSE — there is no
+// `Makefile`, `Cargo.toml`, `build.gradle` or shell-script arm, and none is
+// planned, because no portable way exists to read another build system's target
+// names and a guessed target would run the wrong thing. So "no landing gate" is
+// a fact about the manifest, never a claim that the repository has no tree-wide
+// check: a repository with another build system gets NO landing gate at all, and
+// the close report says so in one line rather than silently reporting a green
+// gate set. A gate is only ever ADDED by the target declaring it.
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { compareCodeUnits } from "../compareCodeUnits.js";
+/**
+ * The declared landing-gate vocabulary.
+ *
+ * ORDER IS THE EMITTED ORDER, and the four roles are independent: a repo
+ * declaring only `check:lint` contributes exactly one command. Sorted by role
+ * name (deadcode, depgraph, guard, lint) as the array literal, so the emitted
+ * list is content-stable and a re-derivation cannot churn the workload digest
+ * (CLAUDE.md, "Extractors emit stable, content-derived array order").
+ *
+ * `guard` is separate from the three cheap gates because it is the EXPENSIVE
+ * one: the repository's own cross-cutting test suite. It is here because a
+ * guard suite is precisely the gate a module-scoped `targeted_commands` entry
+ * cannot stand in for — `tests/shared/audit-tools-path-guard.test.ts` is the
+ * live example.
+ */
+export const LANDING_GATE_SCRIPT_NAMES = [
+    {
+        role: "deadcode",
+        refuses: "an exported symbol with zero consumers anywhere, including tests",
+        scripts: ["check:deadcode", "check:dead-code", "deadcode", "knip"],
+    },
+    {
+        role: "depgraph",
+        refuses: "a module-graph violation — an import cycle, or an upward import out of the shared base layer",
+        scripts: ["check:depgraph", "check:dep-graph", "depgraph", "depcruise"],
+    },
+    {
+        role: "glossary",
+        refuses: "an opaque identifier used in the source tree that no glossary row documents — the id-glossary gate",
+        scripts: [
+            "check:invariant-glossary",
+            "check:glossary",
+            "check:glossary-ids",
+            "glossary:check",
+        ],
+    },
+    {
+        role: "guard",
+        refuses: "a tree-wide invariant the repository's cross-cutting suites assert and no module-scoped command covers",
+        scripts: ["verify:guards", "test:guards", "guards", "test:guard"],
+    },
+    {
+        role: "lint",
+        refuses: "a lint violation anywhere in the tree",
+        scripts: ["check:lint", "lint", "lint:check"],
+    },
+];
+function readPackageScripts(root) {
+    const packageJsonPath = join(root, "package.json");
+    if (!existsSync(packageJsonPath))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(packageJsonPath, "utf8"));
+        if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
+            return null;
+        const scripts = parsed.scripts;
+        return scripts !== null && typeof scripts === "object" && !Array.isArray(scripts)
+            ? scripts
+            : null;
+    }
+    catch {
+        // Unreadable / malformed package.json: no landing gates. A prepare must not
+        // fail because a manifest it does not own is malformed — the same
+        // degrade-to-empty rule `discoverProjectCommands` follows.
+        return null;
+    }
+}
+/** The `npm run <script>` command for a declared script name. */
+function npmRun(script) {
+    return `npm run ${script}`;
+}
+/**
+ * The repository's landing gates, as runnable command strings, in the
+ * vocabulary's declared role order.
+ *
+ * Pure over `(root)` and deterministic: reads one manifest, emits a
+ * content-stable sorted-by-role list, spawns nothing.
+ */
+export function discoverLandingGates(root) {
+    const scripts = readPackageScripts(root);
+    if (scripts === null)
+        return [];
+    const commands = [];
+    for (const gate of LANDING_GATE_SCRIPT_NAMES) {
+        for (const name of gate.scripts) {
+            const body = scripts[name];
+            if (typeof body === "string" && body.trim().length > 0) {
+                commands.push(npmRun(name));
+                break;
+            }
+        }
+    }
+    return commands.sort(compareCodeUnits);
+}
+/**
+ * The opaque-identifier family the id-glossary gate scans the source tree for.
+ * Anchored to a word boundary at the end too, so a short namespace does not
+ * match inside a longer token; and to `INV-` + an uppercase letter start, so a
+ * lowercase test-family id (`INV-remediate-state-01`) is not read as a
+ * production namespace — the same split `scripts/check-invariant-glossary.mjs`
+ * draws.
+ *
+ * GLOBAL on purpose: {@link declaredInvariantIds} collects EVERY id in a value,
+ * so the lastIndex state a `/g` regex carries is reset before each use there.
+ */
+const INVARIANT_ID = /\bINV-[A-Z][A-Z0-9]*(?:-[A-Z][A-Z0-9]*)*\b/gu;
+/**
+ * Every invariant id a value DECLARES anywhere it can be nested — a module
+ * contract's `invariants`, an obligation slug, or any other string a producer
+ * hangs an id on. Walks objects and arrays rather than reading one named field,
+ * because a contract's shape is the producer's, not this predicate's.
+ *
+ * Returns the SET of ids, not a boolean, because the caller has to subtract the
+ * ids the glossary already documents: mentioning an existing id is not coining
+ * one (see {@link withGlossaryScope}).
+ */
+export function declaredInvariantIds(value) {
+    const found = new Set();
+    const walk = (node) => {
+        if (typeof node === "string") {
+            INVARIANT_ID.lastIndex = 0;
+            for (const match of node.matchAll(INVARIANT_ID))
+                found.add(match[0]);
+            return;
+        }
+        if (Array.isArray(node)) {
+            for (const entry of node)
+                walk(entry);
+            return;
+        }
+        if (node !== null && typeof node === "object") {
+            for (const entry of Object.values(node))
+                walk(entry);
+        }
+    };
+    walk(value);
+    return found;
+}
+/**
+ * Whether a value declares ANY invariant id — the boolean form of
+ * {@link declaredInvariantIds}, for a caller that only needs the predicate.
+ */
+export function declaresInvariantId(value) {
+    return declaredInvariantIds(value).size > 0;
+}
+/**
+ * The one-line statement of what a landing gate command REFUSES, or `null` when
+ * the command was not declared as one.
+ *
+ * Rendered wherever a host is told what its required tests cover, so the
+ * sentence stating a gate's authority is written once, beside the vocabulary
+ * that declares the gate. `null` for an item's own `targeted_commands`, which
+ * are not landing gates and carry no vocabulary entry.
+ */
+export function landingGateRefusal(command) {
+    for (const gate of LANDING_GATE_SCRIPT_NAMES) {
+        if (gate.scripts.some((name) => npmRun(name) === command)) {
+            return `\`${command}\` — refuses ${gate.refuses}`;
+        }
+    }
+    return null;
+}
+/**
+ * The glossary document a scope must be able to write when it coins an
+ * invariant id. Repo-relative, so it composes with `allowed_files` unchanged.
+ *
+ * ⚠ This is THIS repository's convention, and it is only ever consulted as a
+ * CANDIDATE. `remediate-code` runs against arbitrary repositories, so the path
+ * being a constant is not a claim that the document exists — a target root that
+ * has no such file gets NO widening at all (a content fact, checked by
+ * {@link withGlossaryScope}). A tool that widened on the NAME alone would hand
+ * an item write scope over a file its repository does not have.
+ */
+export const GLOSSARY_DOCUMENT_PATH = "docs/glossary-ids.md";
+/**
+ * The invariant ids the glossary document at `root` already carries, or `null`
+ * when the document does not exist there.
+ *
+ * `null` and an empty set are DIFFERENT answers, and collapsing them is the bug
+ * this return type exists to prevent: absent means this repository keeps no
+ * glossary document, so nothing can be coined against it and no scope widens;
+ * present-and-empty means every id in the contract is new.
+ */
+function documentedInvariantIds(root) {
+    const documentPath = join(root, ...GLOSSARY_DOCUMENT_PATH.split("/"));
+    if (!existsSync(documentPath))
+        return null;
+    try {
+        return declaredInvariantIds(readFileSync(documentPath, "utf8"));
+    }
+    catch {
+        // Unreadable glossary: "cannot tell which ids are documented". The EMPTY
+        // set is the conservative answer — it widens for any declared id, granting
+        // only a scope an item's own contract asked for, whereas returning `null`
+        // turns a read error into the silent dead-end this function removes.
+        return new Set();
+    }
+}
+/**
+ * Widen a work item's write scope so an item that COINS an invariant id can
+ * actually satisfy the id-glossary gate.
+ *
+ * ── THE FRICTION THIS CLOSES ─────────────────────────────────────────────────
+ *
+ * The glossary document is outside every module's `file_scope`; the glossary
+ * gate scans `src/` for `INV-*` ids and fails on one with no glossary row. So
+ * an item that coins an id in `src/` is STRUCTURALLY UNABLE to satisfy the
+ * gate: the fix is a glossary edit its write scope forbids, and the red lands
+ * silently, discovered by the NEXT item's worker. It happened twice in one
+ * session (`INV-SSP-DEFERRED-SET-REPORTED` at CP-NODE-10, and the id the
+ * charter-delta parser coined at CP-NODE-18, since retired with that parser) —
+ * the "tool_should_decide" friction in `docs/backlog/open-bugs.md`.
+ *
+ * ── THREE CONDITIONS, EACH NARROWING ─────────────────────────────────────────
+ *
+ *  1. The document must EXIST in the target root. The path is this
+ *     repository's convention; an arbitrary target repo may keep none, and
+ *     widening for a document that is not there grants scope over nothing.
+ *  2. The contract must declare at least one id the document does NOT already
+ *     carry. A contract that merely MENTIONS `INV-COVERAGE` — a seam adjustment
+ *     citing an existing invariant, a prose reference — coins nothing, and
+ *     widening for it hands the item a document it has no business editing.
+ *     Only an id with no row yet is a COIN, because only that id needs one.
+ *  3. The scope must not already carry the path (idempotence).
+ *
+ * The gate itself is bound separately, at the CLOSE — scope without the gate
+ * would leave the red silent; the gate without scope would turn it into a
+ * dead-end refusal. Both halves are the one decision.
+ *
+ * Deterministic, stable-ordered and idempotent: a scope that already carries
+ * the path is returned unchanged.
+ */
+export function withGlossaryScope(root, allowedFiles, declaredIds) {
+    if (declaredIds.size === 0 || allowedFiles.includes(GLOSSARY_DOCUMENT_PATH)) {
+        return [...allowedFiles];
+    }
+    const documented = documentedInvariantIds(root);
+    if (documented === null)
+        return [...allowedFiles];
+    if (![...declaredIds].some((id) => !documented.has(id)))
+        return [...allowedFiles];
+    return [...allowedFiles, GLOSSARY_DOCUMENT_PATH].sort(compareCodeUnits);
+}
+//# sourceMappingURL=landingGates.js.map

package/dist/shared/tooling/landingGates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"landingGates.js","sourceRoot":"","sources":["../../../src/shared/tooling/landingGates.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,iDAAiD;AACjD,EAAE;AACF,2EAA2E;AAC3E,gFAAgF;AAChF,4BAA4B;AAC5B,EAAE;AACF,gFAAgF;AAChF,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,4EAA4E;AAC5E,6DAA6D;AAC7D,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,wBAAwB;AACxB,sEAAsE;AACtE,6CAA6C;AAC7C,EAAE;AACF,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,4EAA4E;AAC5E,8EAA8E;AAC9E,kFAAkF;AAClF,iFAAiF;AACjF,gFAAgF;AAChF,kEAAkE;AAClE,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,wEAAwE;AACxE,EAAE;AACF,gFAAgF;AAChF,EAAE;AACF,0EAA0E;AAC1E,0EAA0E;AAC1E,+EAA+E;AAC/E,yEAAyE;AACzE,yEAAyE;AACzE,6EAA6E;AAC7E,8EAA8E;AAC9E,8EAA8E;AAC9E,mDAAmD;AACnD,EAAE;AACF,+EAA+E;AAC/E,2EAA2E;AAC3E,0EAA0E;AAC1E,oDAAoD;AACpD,EAAE;AACF,iFAAiF;AACjF,2EAA2E;AAC3E,4EAA4E;AAC5E,gFAAgF;AAChF,gFAAgF;AAChF,gFAAgF;AAChF,iFAAiF;AACjF,8EAA8E;AAC9E,kEAAkE;AAClE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAuB1D;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAA+B;IACnE;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EAAE,kEAAkE;QAC3E,OAAO,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,CAAC;KACnE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EACL,8FAA8F;QAChG,OAAO,EAAE,CAAC,gBAAgB,EAAE,iBAAiB,EAAE,UAAU,EAAE,WAAW,CAAC;KACxE;IACD;QACE,IAAI,EAAE,UAAU;QAChB,OAAO,EACL,oGAAoG;QACtG,OAAO,EAAE;YACP,0BAA0B;YAC1B,gBAAgB;YAChB,oBAAoB;YACpB,gBAAgB;SACjB;KACF;IACD;QACE,IAAI,EAAE,OAAO;QACb,OAAO,EACL,wGAAwG;QAC1G,OAAO,EAAE,CAAC,eAAe,EAAE,aAAa,EAAE,QAAQ,EAAE,YAAY,CAAC;KAClE;IACD;QACE,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,uCAAuC;QAChD,OAAO,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,YAAY,CAAC;KAC9C;CACF,CAAC;AAEF,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1E,IAAI,MAAM,KAAK,IAAI,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACxF,MAAM,OAAO,GAAI,MAAgC,CAAC,OAAO,CAAC;QAC1D,OAAO,OAAO,KAAK,IAAI,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;YAC/E,CAAC,CAAE,OAAmC;YACtC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,kEAAkE;QAClE,2DAA2D;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,SAAS,MAAM,CAAC,MAAc;IAC5B,OAAO,WAAW,MAAM,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY;IAC/C,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACzC,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,KAAK,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7C,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAChC,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;YAC3B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACvD,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC5B,MAAM;YACR,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,YAAY,GAAG,8CAA8C,CAAC;AAEpE;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,IAAI,GAAG,CAAC,IAAa,EAAQ,EAAE;QACnC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,YAAY,CAAC,SAAS,GAAG,CAAC,CAAC;YAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,KAAK,MAAM,KAAK,IAAI,IAAI;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO;QACT,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,IAA+B,CAAC;gBAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAClF,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,CAAC;IACZ,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,KAAK,MAAM,IAAI,IAAI,yBAAyB,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,EAAE,CAAC;YAC1D,OAAO,KAAK,OAAO,gBAAgB,IAAI,CAAC,OAAO,EAAE,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,sBAAsB,CAAC;AAE7D;;;;;;;;GAQG;AACH,SAAS,sBAAsB,CAAC,IAAY;IAC1C,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,2EAA2E;QAC3E,0EAA0E;QAC1E,qEAAqE;QACrE,OAAO,IAAI,GAAG,EAAU,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AACH,MAAM,UAAU,iBAAiB,CAC/B,IAAY,EACZ,YAA+B,EAC/B,WAAgC;IAEhC,IAAI,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC5E,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IAC3B,CAAC;IACD,MAAM,UAAU,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,UAAU,KAAK,IAAI;QAAE,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IAClD,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAAE,OAAO,CAAC,GAAG,YAAY,CAAC,CAAC;IAClF,OAAO,CAAC,GAAG,YAAY,EAAE,sBAAsB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;AAC1E,CAAC"}

package/dist/shared/tooling/projectTestAdmission.d.ts

@@ -73,4 +73,20 @@ export declare function runAdmittedProjectE2eCommand(command: string[], root: st
     maxCapturedOutput?: number;
     sigkillGraceMs?: number;
 }): Promise<ProjectTestAdmissionOutcome>;
+/**
+ * Run one of the repository's discovered LANDING GATES under the same gate.
+ *
+ * The landing-gate leg runs at the CLOSE, on the merged tree — see
+ * `verifyLandingGates` in `src/remediate/phases/closeVerifyLandingGates.ts`. It
+ * is a different role from test/e2e only in what discovery emits: one vector
+ * for those, a set of up to five gate commands for this. The admission rule and
+ * every spawn bound are the SAME, which is the point — a gate is a discovered
+ * project command like any other, and adding a second spawn path for it would
+ * be a second place for the shell-safety and output-cap rules to drift.
+ */
+export declare function runAdmittedProjectLandingGateCommand(command: string[], root: string, options?: {
+    timeoutMs?: number;
+    maxCapturedOutput?: number;
+    sigkillGraceMs?: number;
+}): Promise<ProjectTestAdmissionOutcome>;
 //# sourceMappingURL=projectTestAdmission.d.ts.map

package/dist/shared/tooling/projectTestAdmission.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"projectTestAdmission.d.ts","sourceRoot":"","sources":["../../../src/shared/tooling/projectTestAdmission.ts"],"names":[],"mappings":"AAIA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAc,CAAC;AAEnD,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,OAAQ,CAAC;AAEnD;;;;;;;;GAQG;AACH,eAAO,MAAM,gCAAgC,QAAkB,CAAC;AAEhE,MAAM,WAAW,2BAA2B;IAC1C,qGAAqG;IACrG,QAAQ,EAAE,OAAO,CAAC;IAClB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;CAChB;AAmBD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErF;AAwFD,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,2BAA2B,CAAC,CAEtC;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,2BAA2B,CAAC,CAEtC"}
+{"version":3,"file":"projectTestAdmission.d.ts","sourceRoot":"","sources":["../../../src/shared/tooling/projectTestAdmission.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAc,CAAC;AAEnD,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,OAAQ,CAAC;AAEnD;;;;;;;;GAQG;AACH,eAAO,MAAM,gCAAgC,QAAkB,CAAC;AAEhE,MAAM,WAAW,2BAA2B;IAC1C,qGAAqG;IACrG,QAAQ,EAAE,OAAO,CAAC;IAClB,+CAA+C;IAC/C,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,OAAO,CAAC;IACnB;;;;;OAKG;IACH,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;CAChB;AA6BD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAErF;AA0HD,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,2BAA2B,CAAC,CAEtC;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,2BAA2B,CAAC,CAEtC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,MAAM,EAAE,EACjB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;CACpB,GACL,OAAO,CAAC,2BAA2B,CAAC,CAEtC"}