circle-ir-ai 4.4.0 → 4.6.0

package/dist/bom/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/bom/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,EACL,oBAAoB,EACpB,qBAAqB,EACrB,0BAA0B,EAC1B,sBAAsB,EACtB,uBAAuB,EACvB,mBAAmB,EACnB,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,WAAW,CAAC;AACnB,OAAO,EAAE,WAAW,EAA8C,MAAM,eAAe,CAAC;AACxF,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAG7C,cAAc,YAAY,CAAC;AAC3B,cAAc,eAAe,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAE7C,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/H,MAAM,cAAc,GAAG,CAAC,CAAC;AAEzB,4EAA4E;AAC5E,MAAM,gBAAgB,GAAqI;IACzJ,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,oBAA6B,EAAE;IAC9D,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,qBAA8B,EAAE;IACnE,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,0BAAmC,EAAE;IACtE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,sBAA+B,EAAE;IAC3D,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,uBAAgC,EAAE;IACjE,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,uBAAgC,EAAE;IACrE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAA4B,EAAE;IACvD,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,sBAA+B,EAAE;CAC/D,CAAC;AACF,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,YAAY,GAAqI;IACrJ,EAAE,IAAI,EAAE,mBAAmB,EAAE,KAAK,EAAE,wBAAiC,EAAE;IACvE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,0BAAmC,EAAE;IAClE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,2BAAoC,EAAE;CACrE,CAAC;AACF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAE5D,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC;QACH,OAAO,oBAAoB,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAuE;IACzF,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,SAAS,EAAE,CAAC,CAAC,SAA4C;QACzD,KAAK,EAAG,CAAC,CAAC,KAAqC,IAAI,UAAU;QAC7D,MAAM,EAAE,IAAI;KACb,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,sEAAsE;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA8G,CAAC;IACrI,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE;QAC1B,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,IAAI,CAAC,CAAC,EAAE,CAAC;YAAC,CAAC,GAAG,EAAE,aAAa,EAAE,IAAI,GAAG,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAC/F,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QAChD,IAAI,KAAK,GAAG,cAAc;YAAE,OAAO;QACnC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAChE,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC/D,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,IAAI,CAAC;oBACH,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBACzE,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;oBACrB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;wBAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;wBAAC,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;oBAAC,CAAC;gBACtF,CAAC;gBAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;YAC7C,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAChD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;gBAC3D,IAAI,CAAC,MAAM;oBAAE,SAAS;gBACtB,IAAI,CAAC;oBACH,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC3F,CAAC;gBAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;YAC7C,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAElB,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;IACpD,MAAM,MAAM,GAAG,CAAC,GAAuB,EAAQ,EAAE;QAC/C,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,CAAC,QAAQ,EAAE,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,QAAQ,CAAC,MAAM,GAAG,IAAI,CAAC;QAC3D,IAAI,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAAE,QAAQ,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IACxI,CAAC,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;QACnC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,0EAA0E;YAC1E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAAC,CAAC;QAClG,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,YAAY;gBAAE,MAAM,CAAC,GAAG,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,QAAgB;IAC1C,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAElF,MAAM,YAAY,GAAG,CAAC,GAAW,EAAE,IAAY,EAAuB,EAAE;QACtE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;QACjC,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACrI,IAAI,KAAK,KAAK,oBAAoB,IAAI,KAAK,KAAK,qBAAqB;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC3I,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC1I,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAChG,IAAI,mCAAmC,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QAC9H,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QAChD,IAAI,KAAK,GAAG,cAAc;YAAE,OAAO;QACnC,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO;QAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;oBACzB,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;oBACvC,KAAK,MAAM,CAAC,IAAI,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;wBAChC,IAAI,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;4BAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;oBACzG,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,SAAS;gBAChE,IAAI,CAAC,GAAG,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACvB,CAAC;iBAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;gBACtB,MAAM,GAAG,GAAG,YAAY,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;gBACtC,IAAI,GAAG;oBAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,CAAC;QAAC,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC;IAAC,CAAC;AAC1D,CAAC;AAWD,gFAAgF;AAChF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,OAA2B,EAAE;IAC/E,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;IAEnE,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC;IAErC,6EAA6E;IAC7E,0EAA0E;IAC1E,MAAM,gBAAgB,GAAe,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACzG,MAAM,UAAU,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE1D,KAAK,MAAM,KAAK,IAAI,gBAAgB,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,KAAK,EAAE,CAAC;gBAAC,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC;gBAAC,CAAC,CAAC,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC;YAAC,CAAC;iBAC5D,CAAC;gBAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC;YAAC,CAAC;QAC5B,CAAC;IACH,CAAC;IACD,GAAG,CAAC,UAAU,GAAG,UAAU,CAAC;IAC5B,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/bom/types.d.ts

@@ -0,0 +1,75 @@
+/**
+ * Layer-BOM (Bill of Materials) types — the Conformis "9-layer detect + usage
+ * index" inventory (conformis-execution-plan.md §7, conformis-layer-generation-canon.md §3/§9).
+ *
+ * The BOM is the *inventory* step of the conformis loop: for a repo, enumerate
+ * the components present at each canonical layer (L2–L9). It is NOT the verifier
+ * generator (that is the later, gated step) — it composes signals circle-ir
+ * already produces (dependency BOM, imports, config parse) into a per-layer map
+ * that everything downstream (coverage map, oracle fan-out, the architect view)
+ * consumes.
+ *
+ * Canon layers (L2–L9); L1 (corpora) and the horizontal band are not repo
+ * components, so they are not BOM layers.
+ */
+import type { Ecosystem } from './classify.js';
+/** The eight canonical component-bearing layers (conformis-layer-generation-canon.md §3). */
+export type BomLayer = 'L2' | 'L3' | 'L4' | 'L5' | 'L6' | 'L7' | 'L8' | 'L9';
+export declare const BOM_LAYER_TITLES: Record<BomLayer, string>;
+/** One inventoried component at a layer. */
+export interface BomComponent {
+    /** Package / file / runtime name. */
+    name: string;
+    /** Declared version spec when known (deps), else undefined (files/runtime). */
+    version?: string;
+    layer: BomLayer;
+    /**
+     * Sub-classification within the layer, e.g. `jwt` / `oauth` / `grpc` (L3),
+     * `framework:react` (L5), `orm:prisma` (L7), `container` (L6),
+     * `openapi-spec` (L8), `runtime:node` (L2).
+     */
+    kind: string;
+    ecosystem?: Ecosystem;
+    /** Where the component came from. */
+    source: 'dependency' | 'file' | 'runtime';
+    /** Repo-relative path, for file-detected components (L6/L8). */
+    path?: string;
+    /** L4 only: declared as a direct dependency (vs transitive). */
+    direct?: boolean;
+    /** Import/call sites of this component (usage index; classified deps only). */
+    usageSites?: UsageSite[];
+    /** Convenience count of `usageSites` (present when the usage index ran). */
+    usageCount?: number;
+}
+/** One place a component is used (an import site). */
+export interface UsageSite {
+    /** Repo-relative source file. */
+    file: string;
+    line: number | null;
+}
+/** Component name → its usage sites (the "which of *your* call-sites" grounding). */
+export type UsageIndex = Record<string, UsageSite[]>;
+export interface LayerBom {
+    layer: BomLayer;
+    title: string;
+    components: BomComponent[];
+}
+/** The repo-level Bill of Materials. */
+export interface RepoBom {
+    /** Repo path or logical target id. */
+    target: string;
+    /** Languages/ecosystems detected (from the dependency ecosystems + files). */
+    languages: string[];
+    /** Per-layer inventory. Every layer is present (possibly empty). */
+    layers: Record<BomLayer, LayerBom>;
+    /** Component name → usage sites, when the usage index ran (else undefined). */
+    usageIndex?: UsageIndex;
+    meta: {
+        generatedAt: string;
+        totalDependencies: number;
+        totalComponents: number;
+        /** Layers with at least one component — the "coverage surface". */
+        populatedLayers: BomLayer[];
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/bom/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/bom/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C,6FAA6F;AAC7F,MAAM,MAAM,QAAQ,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAE7E,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CASrD,CAAC;AAEF,4CAA4C;AAC5C,MAAM,WAAW,YAAY;IAC3B,qCAAqC;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,+EAA+E;IAC/E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,QAAQ,CAAC;IAChB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,qCAAqC;IACrC,MAAM,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAAC;IAC1C,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gEAAgE;IAChE,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,SAAS,EAAE,CAAC;IACzB,4EAA4E;IAC5E,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,sDAAsD;AACtD,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB;AAED,qFAAqF;AACrF,MAAM,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;AAErD,MAAM,WAAW,QAAQ;IACvB,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,YAAY,EAAE,CAAC;CAC5B;AAED,wCAAwC;AACxC,MAAM,WAAW,OAAO;IACtB,sCAAsC;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACnC,+EAA+E;IAC/E,UAAU,CAAC,EAAE,UAAU,CAAC;IACxB,IAAI,EAAE;QACJ,WAAW,EAAE,MAAM,CAAC;QACpB,iBAAiB,EAAE,MAAM,CAAC;QAC1B,eAAe,EAAE,MAAM,CAAC;QACxB,mEAAmE;QACnE,eAAe,EAAE,QAAQ,EAAE,CAAC;KAC7B,CAAC;CACH"}

package/dist/bom/types.js

@@ -0,0 +1,25 @@
+/**
+ * Layer-BOM (Bill of Materials) types — the Conformis "9-layer detect + usage
+ * index" inventory (conformis-execution-plan.md §7, conformis-layer-generation-canon.md §3/§9).
+ *
+ * The BOM is the *inventory* step of the conformis loop: for a repo, enumerate
+ * the components present at each canonical layer (L2–L9). It is NOT the verifier
+ * generator (that is the later, gated step) — it composes signals circle-ir
+ * already produces (dependency BOM, imports, config parse) into a per-layer map
+ * that everything downstream (coverage map, oracle fan-out, the architect view)
+ * consumes.
+ *
+ * Canon layers (L2–L9); L1 (corpora) and the horizontal band are not repo
+ * components, so they are not BOM layers.
+ */
+export const BOM_LAYER_TITLES = {
+    L2: 'Runtime',
+    L3: 'Protocols',
+    L4: 'Supply chain',
+    L5: 'Framework',
+    L6: 'Platform/Toolchain',
+    L7: 'Data',
+    L8: 'Integration/API',
+    L9: 'Business',
+};
+//# sourceMappingURL=types.js.map

package/dist/bom/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/bom/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAOH,MAAM,CAAC,MAAM,gBAAgB,GAA6B;IACxD,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,cAAc;IAClB,EAAE,EAAE,WAAW;IACf,EAAE,EAAE,oBAAoB;IACxB,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,iBAAiB;IACrB,EAAE,EAAE,UAAU;CACf,CAAC"}

package/dist/bom/usage.d.ts

@@ -0,0 +1,17 @@
+/**
+ * BOM usage index — "which of *your* files import this component" (the grounding
+ * the Conformis usage-witness needs, conformis-execution-plan.md §2.3).
+ *
+ * For each classified component (L3/L5/L7 dependency), find the source files +
+ * lines that import it, by composing circle-ir's `parse` + `extractImports`
+ * (never a hand-rolled import scan). JS/TS/Python resolve cleanly (the import
+ * specifier is the package name); Maven is best-effort via groupId prefix.
+ */
+import type { UsageIndex } from './types.js';
+/**
+ * Build the usage index for `componentNames` over the repo's source files.
+ * Returns `{ [componentName]: UsageSite[] }`; components with no import site are
+ * omitted. Requires the analyzer to be initialized (caller ensures it).
+ */
+export declare function buildUsageIndex(repoPath: string, componentNames: string[]): Promise<UsageIndex>;
+//# sourceMappingURL=usage.d.ts.map

package/dist/bom/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/bom/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,KAAK,EAAE,UAAU,EAAa,MAAM,YAAY,CAAC;AAkDxD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EAAE,GACvB,OAAO,CAAC,UAAU,CAAC,CAiCrB"}

package/dist/bom/usage.js

@@ -0,0 +1,112 @@
+/**
+ * BOM usage index — "which of *your* files import this component" (the grounding
+ * the Conformis usage-witness needs, conformis-execution-plan.md §2.3).
+ *
+ * For each classified component (L3/L5/L7 dependency), find the source files +
+ * lines that import it, by composing circle-ir's `parse` + `extractImports`
+ * (never a hand-rolled import scan). JS/TS/Python resolve cleanly (the import
+ * specifier is the package name); Maven is best-effort via groupId prefix.
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+// Source extension → circle-ir SupportedLanguage.
+const EXT_LANG = {
+    '.ts': 'typescript', '.tsx': 'tsx', '.mts': 'typescript', '.cts': 'typescript',
+    '.js': 'javascript', '.jsx': 'javascript', '.mjs': 'javascript', '.cjs': 'javascript',
+    '.py': 'python',
+    '.java': 'java',
+    '.go': 'go', '.rs': 'rust',
+};
+const IGNORE_DIRS = new Set(['node_modules', '.git', 'dist', 'build', 'coverage', '.next', 'vendor', 'target', '__pycache__']);
+const MAX_FILES = 4000; // bound the walk; usage index is best-effort, not exhaustive
+const MAX_FILE_BYTES = 512 * 1024;
+function collectSourceFiles(dir, root, depth = 0, out = []) {
+    if (depth > 8 || out.length >= MAX_FILES)
+        return out;
+    let entries;
+    try {
+        entries = fs.readdirSync(dir, { withFileTypes: true });
+    }
+    catch {
+        return out;
+    }
+    for (const e of entries) {
+        if (out.length >= MAX_FILES)
+            break;
+        const abs = path.join(dir, e.name);
+        if (e.isDirectory()) {
+            if (IGNORE_DIRS.has(e.name) || e.name.startsWith('.'))
+                continue;
+            collectSourceFiles(abs, root, depth + 1, out);
+        }
+        else if (e.isFile()) {
+            const lang = EXT_LANG[path.extname(e.name).toLowerCase()];
+            if (lang)
+                out.push({ abs, rel: path.relative(root, abs), language: lang });
+        }
+    }
+    return out;
+}
+/**
+ * Does an import specifier reference this component?
+ * - JS/TS: `from_package === name` or `startsWith(name + '/')` (scoped subpaths).
+ * - Maven `group:artifact`: `from_package` (a java package) startsWith the groupId.
+ */
+function importMatchesComponent(fromPackage, componentName) {
+    if (fromPackage === componentName)
+        return true;
+    if (fromPackage.startsWith(componentName + '/'))
+        return true;
+    if (componentName.includes(':')) {
+        const groupId = componentName.split(':')[0];
+        if (groupId.includes('.') && fromPackage.startsWith(groupId))
+            return true;
+    }
+    return false;
+}
+/**
+ * Build the usage index for `componentNames` over the repo's source files.
+ * Returns `{ [componentName]: UsageSite[] }`; components with no import site are
+ * omitted. Requires the analyzer to be initialized (caller ensures it).
+ */
+export async function buildUsageIndex(repoPath, componentNames) {
+    const index = {};
+    if (componentNames.length === 0)
+        return index;
+    const { parse, extractImports } = await import('circle-ir');
+    const { ensureAnalyzerInitialized, isAnalyzerInitialized } = await import('../utils/analyzer-init.js');
+    if (!isAnalyzerInitialized())
+        await ensureAnalyzerInitialized();
+    const files = collectSourceFiles(repoPath, repoPath);
+    for (const f of files) {
+        let content;
+        try {
+            if (fs.statSync(f.abs).size > MAX_FILE_BYTES)
+                continue;
+            content = fs.readFileSync(f.abs, 'utf-8');
+        }
+        catch {
+            continue;
+        }
+        let imports;
+        try {
+            const tree = await parse(content, f.language);
+            imports = extractImports(tree, f.language);
+        }
+        catch {
+            continue;
+        }
+        for (const imp of imports) {
+            if (!imp.from_package)
+                continue;
+            for (const name of componentNames) {
+                if (importMatchesComponent(imp.from_package, name)) {
+                    const site = { file: f.rel, line: imp.line_number };
+                    (index[name] ??= []).push(site);
+                }
+            }
+        }
+    }
+    return index;
+}
+//# sourceMappingURL=usage.js.map

package/dist/bom/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../src/bom/usage.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,kDAAkD;AAClD,MAAM,QAAQ,GAA2B;IACvC,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IAC9E,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY;IACrF,KAAK,EAAE,QAAQ;IACf,OAAO,EAAE,MAAM;IACf,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM;CAC3B,CAAC;AAEF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC;AAC/H,MAAM,SAAS,GAAG,IAAI,CAAC,CAAM,6DAA6D;AAC1F,MAAM,cAAc,GAAG,GAAG,GAAG,IAAI,CAAC;AAIlC,SAAS,kBAAkB,CAAC,GAAW,EAAE,IAAY,EAAE,KAAK,GAAG,CAAC,EAAE,MAAoB,EAAE;IACtF,IAAI,KAAK,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC;IACrD,IAAI,OAAoB,CAAC;IACzB,IAAI,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,GAAG,CAAC;IAAC,CAAC;IACrF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,GAAG,CAAC,MAAM,IAAI,SAAS;YAAE,MAAM;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;YACpB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChE,kBAAkB,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;QAChD,CAAC;aAAM,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YAC1D,IAAI,IAAI;gBAAE,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,sBAAsB,CAAC,WAAmB,EAAE,aAAqB;IACxE,IAAI,WAAW,KAAK,aAAa;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,WAAW,CAAC,UAAU,CAAC,aAAa,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,aAAa,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,cAAwB;IAExB,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAE9C,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC;IAC5D,MAAM,EAAE,yBAAyB,EAAE,qBAAqB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;IACvG,IAAI,CAAC,qBAAqB,EAAE;QAAE,MAAM,yBAAyB,EAAE,CAAC;IAEhE,MAAM,KAAK,GAAG,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,GAAG,cAAc;gBAAE,SAAS;YACvD,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC5C,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAErB,IAAI,OAA2E,CAAC;QAChF,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,QAAuC,CAAC,CAAC;YAC7E,OAAO,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,QAAgD,CAAC,CAAC;QACrF,CAAC;QAAC,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC;QAErB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;YAC1B,IAAI,CAAC,GAAG,CAAC,YAAY;gBAAE,SAAS;YAChC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;gBAClC,IAAI,sBAAsB,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC;oBACnD,MAAM,IAAI,GAAc,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;oBAC/D,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/coverage/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Coverage map — the Conformis architect-view *receipt* (conformis-layer-
+ * generation-canon.md §9, conformis-execution-plan.md D9 "the subtraction + the
+ * receipt").
+ *
+ * Given a layer-BOM (what's in the repo per layer), declare for each component
+ * whether we can *witness* it today (`settles_now`), can only *signal* it until
+ * a dynamic harness exists (`signal_until_harness`), have declared it
+ * un-checkable (`not_diffable`), or have no capability mapped (`uncovered`).
+ *
+ * HONESTY (canon §11): these states are a **declaration** of intended coverage,
+ * grounded in the canon's per-layer inherited/extracted split — NOT proven
+ * witness yield. The real settled-% comes later from shadow-mode witness runs.
+ * So this emits **counts + per-component verdicts** (the receipt), and a
+ * `declaredCoverablePct` explicitly labelled projected, never a settled-%.
+ */
+import type { BomLayer, RepoBom } from '../bom/types.js';
+export type CoverageState = 'settles_now' | 'signal_until_harness' | 'not_diffable' | 'uncovered';
+export declare const COVERAGE_STATES: CoverageState[];
+export interface ComponentCoverage {
+    name: string;
+    layer: BomLayer;
+    kind: string;
+    state: CoverageState;
+    /** Short why, e.g. "static call-site asserts" / "needs replay harness". */
+    basis: string;
+}
+export interface LayerCoverage {
+    layer: BomLayer;
+    title: string;
+    counts: Record<CoverageState, number>;
+    components: ComponentCoverage[];
+}
+export interface CoverageMap {
+    target: string;
+    layers: Record<BomLayer, LayerCoverage>;
+    summary: {
+        counts: Record<CoverageState, number>;
+        totalComponents: number;
+        /**
+         * PROJECTED — (settles_now + signal_until_harness) / (total − not_diffable).
+         * A declaration of intended coverage, NOT a proven settled-%. Gate any real
+         * % on shadow-mode witness yield (canon §11).
+         */
+        declaredCoverablePct: number;
+    };
+}
+/** Compute the coverage-map (receipt) for a BOM. Pure. */
+export declare function computeCoverage(bom: RepoBom): CoverageMap;
+//# sourceMappingURL=index.d.ts.map

package/dist/coverage/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/coverage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAgB,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAGvE,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,sBAAsB,GAAG,cAAc,GAAG,WAAW,CAAC;AAElG,eAAO,MAAM,eAAe,EAAE,aAAa,EAAyE,CAAC;AAErH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,QAAQ,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACtC,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACxC,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACtC,eAAe,EAAE,MAAM,CAAC;QACxB;;;;WAIG;QACH,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAuCD,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CA2BzD"}

package/dist/coverage/index.js

@@ -0,0 +1,73 @@
+/**
+ * Coverage map — the Conformis architect-view *receipt* (conformis-layer-
+ * generation-canon.md §9, conformis-execution-plan.md D9 "the subtraction + the
+ * receipt").
+ *
+ * Given a layer-BOM (what's in the repo per layer), declare for each component
+ * whether we can *witness* it today (`settles_now`), can only *signal* it until
+ * a dynamic harness exists (`signal_until_harness`), have declared it
+ * un-checkable (`not_diffable`), or have no capability mapped (`uncovered`).
+ *
+ * HONESTY (canon §11): these states are a **declaration** of intended coverage,
+ * grounded in the canon's per-layer inherited/extracted split — NOT proven
+ * witness yield. The real settled-% comes later from shadow-mode witness runs.
+ * So this emits **counts + per-component verdicts** (the receipt), and a
+ * `declaredCoverablePct` explicitly labelled projected, never a settled-%.
+ */
+import { BOM_LAYER_TITLES } from '../bom/types.js';
+export const COVERAGE_STATES = ['settles_now', 'signal_until_harness', 'not_diffable', 'uncovered'];
+// Per-layer default capability, from the canon §3 verifier-shape / inherited-
+// extracted column. Declarations, extend/override per kind below.
+const LAYER_CAPABILITY = {
+    L2: { state: 'signal_until_harness', basis: 'runtime races/async need a replay harness (Coyote/JPF); presence is static' },
+    L3: { state: 'settles_now', basis: 'static call-site asserts (alg≠none, PKCE-MUST, state-validated); wire seq is dynamic' },
+    L4: { state: 'settles_now', basis: 'reachability × version-diff (Syft/Grype/OSV) — static' },
+    L5: { state: 'signal_until_harness', basis: 'framework idiom conformance is fuzzier; wrap linters as signal until harnessed' },
+    L6: { state: 'settles_now', basis: 'config-conformance (Checkov/OPA/Conftest) — static' },
+    L7: { state: 'signal_until_harness', basis: 'tx-boundary/N+1 static; migration reconciliation needs a differential harness' },
+    L8: { state: 'settles_now', basis: 'contract-diff × usage-witness (oasdiff/buf/graphql-inspector + circle-ir) — static usage' },
+    L9: { state: 'uncovered', basis: 'domain-logic residual — extracted + executed harness, not yet built' },
+};
+// Per-kind overrides where a component is more/less checkable than its layer default.
+const KIND_CAPABILITY = {
+    'runtime:node': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:python': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:jvm': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:go': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:rust': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    // L7 raw drivers: presence only, no ORM idiom to check
+    'db-driver': { state: 'signal_until_harness', basis: 'raw driver — query safety needs taint, no ORM idiom contract' },
+    // L4 dev deps: not a runtime supply-chain surface
+    'dependency:dev': { state: 'not_diffable', basis: 'dev-only dependency — not in the shipped supply-chain surface' },
+};
+function capabilityFor(c) {
+    return KIND_CAPABILITY[c.kind] ?? LAYER_CAPABILITY[c.layer];
+}
+const ALL_LAYERS = ['L2', 'L3', 'L4', 'L5', 'L6', 'L7', 'L8', 'L9'];
+/** Compute the coverage-map (receipt) for a BOM. Pure. */
+export function computeCoverage(bom) {
+    const zero = () => ({ settles_now: 0, signal_until_harness: 0, not_diffable: 0, uncovered: 0 });
+    const total = zero();
+    const layers = {};
+    for (const layer of ALL_LAYERS) {
+        const counts = zero();
+        const components = [];
+        for (const c of bom.layers[layer].components) {
+            const cap = capabilityFor(c);
+            counts[cap.state]++;
+            total[cap.state]++;
+            components.push({ name: c.name, layer, kind: c.kind, state: cap.state, basis: cap.basis });
+        }
+        layers[layer] = { layer, title: BOM_LAYER_TITLES[layer], counts, components };
+    }
+    const totalComponents = COVERAGE_STATES.reduce((n, s) => n + total[s], 0);
+    const diffable = totalComponents - total.not_diffable;
+    const coverable = total.settles_now + total.signal_until_harness;
+    const declaredCoverablePct = diffable > 0 ? Math.round((coverable / diffable) * 1000) / 10 : 0;
+    return {
+        target: bom.target,
+        layers,
+        summary: { counts: total, totalComponents, declaredCoverablePct },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/coverage/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coverage/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAInD,MAAM,CAAC,MAAM,eAAe,GAAoB,CAAC,aAAa,EAAE,sBAAsB,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;AAsCrH,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,gBAAgB,GAAiC;IACrD,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,4EAA4E,EAAE;IAC1H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,sFAAsF,EAAE;IAC3H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,uDAAuD,EAAE;IAC5F,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,gFAAgF,EAAE;IAC9H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACzF,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,+EAA+E,EAAE;IAC7H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,0FAA0F,EAAE;IAC/H,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,qEAAqE,EAAE;CACzG,CAAC;AAEF,sFAAsF;AACtF,MAAM,eAAe,GAA+B;IAClD,cAAc,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACtG,gBAAgB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACxG,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACrG,YAAY,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACpG,cAAc,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACtG,uDAAuD;IACvD,WAAW,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,8DAA8D,EAAE;IACrH,kDAAkD;IAClD,gBAAgB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,+DAA+D,EAAE;CACpH,CAAC;AAEF,SAAS,aAAa,CAAC,CAAe;IACpC,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,GAAe,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEhF,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,IAAI,GAAG,GAAkC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/H,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,EAAqC,CAAC;IAErD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;QACtB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACjE,MAAM,oBAAoB,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/F,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM;QACN,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE;KAClE,CAAC;AACJ,CAAC"}

package/dist/coverage-map/index.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Coverage map — the Conformis architect-view *receipt* (conformis-layer-
+ * generation-canon.md §9, conformis-execution-plan.md D9 "the subtraction + the
+ * receipt").
+ *
+ * Given a layer-BOM (what's in the repo per layer), declare for each component
+ * whether we can *witness* it today (`settles_now`), can only *signal* it until
+ * a dynamic harness exists (`signal_until_harness`), have declared it
+ * un-checkable (`not_diffable`), or have no capability mapped (`uncovered`).
+ *
+ * HONESTY (canon §11): these states are a **declaration** of intended coverage,
+ * grounded in the canon's per-layer inherited/extracted split — NOT proven
+ * witness yield. The real settled-% comes later from shadow-mode witness runs.
+ * So this emits **counts + per-component verdicts** (the receipt), and a
+ * `declaredCoverablePct` explicitly labelled projected, never a settled-%.
+ */
+import type { BomLayer, RepoBom } from '../bom/types.js';
+export type CoverageState = 'settles_now' | 'signal_until_harness' | 'not_diffable' | 'uncovered';
+export declare const COVERAGE_STATES: CoverageState[];
+export interface ComponentCoverage {
+    name: string;
+    layer: BomLayer;
+    kind: string;
+    state: CoverageState;
+    /** Short why, e.g. "static call-site asserts" / "needs replay harness". */
+    basis: string;
+}
+export interface LayerCoverage {
+    layer: BomLayer;
+    title: string;
+    counts: Record<CoverageState, number>;
+    components: ComponentCoverage[];
+}
+export interface CoverageMap {
+    target: string;
+    layers: Record<BomLayer, LayerCoverage>;
+    summary: {
+        counts: Record<CoverageState, number>;
+        totalComponents: number;
+        /**
+         * PROJECTED — (settles_now + signal_until_harness) / (total − not_diffable).
+         * A declaration of intended coverage, NOT a proven settled-%. Gate any real
+         * % on shadow-mode witness yield (canon §11).
+         */
+        declaredCoverablePct: number;
+    };
+}
+/** Compute the coverage-map (receipt) for a BOM. Pure. */
+export declare function computeCoverage(bom: RepoBom): CoverageMap;
+//# sourceMappingURL=index.d.ts.map

package/dist/coverage-map/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/coverage-map/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAgB,QAAQ,EAAE,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAGvE,MAAM,MAAM,aAAa,GAAG,aAAa,GAAG,sBAAsB,GAAG,cAAc,GAAG,WAAW,CAAC;AAElG,eAAO,MAAM,eAAe,EAAE,aAAa,EAAyE,CAAC;AAErH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,QAAQ,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,aAAa,CAAC;IACrB,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;IACtC,UAAU,EAAE,iBAAiB,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACxC,OAAO,EAAE;QACP,MAAM,EAAE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QACtC,eAAe,EAAE,MAAM,CAAC;QACxB;;;;WAIG;QACH,oBAAoB,EAAE,MAAM,CAAC;KAC9B,CAAC;CACH;AAuCD,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,CA2BzD"}

package/dist/coverage-map/index.js

@@ -0,0 +1,73 @@
+/**
+ * Coverage map — the Conformis architect-view *receipt* (conformis-layer-
+ * generation-canon.md §9, conformis-execution-plan.md D9 "the subtraction + the
+ * receipt").
+ *
+ * Given a layer-BOM (what's in the repo per layer), declare for each component
+ * whether we can *witness* it today (`settles_now`), can only *signal* it until
+ * a dynamic harness exists (`signal_until_harness`), have declared it
+ * un-checkable (`not_diffable`), or have no capability mapped (`uncovered`).
+ *
+ * HONESTY (canon §11): these states are a **declaration** of intended coverage,
+ * grounded in the canon's per-layer inherited/extracted split — NOT proven
+ * witness yield. The real settled-% comes later from shadow-mode witness runs.
+ * So this emits **counts + per-component verdicts** (the receipt), and a
+ * `declaredCoverablePct` explicitly labelled projected, never a settled-%.
+ */
+import { BOM_LAYER_TITLES } from '../bom/types.js';
+export const COVERAGE_STATES = ['settles_now', 'signal_until_harness', 'not_diffable', 'uncovered'];
+// Per-layer default capability, from the canon §3 verifier-shape / inherited-
+// extracted column. Declarations, extend/override per kind below.
+const LAYER_CAPABILITY = {
+    L2: { state: 'signal_until_harness', basis: 'runtime races/async need a replay harness (Coyote/JPF); presence is static' },
+    L3: { state: 'settles_now', basis: 'static call-site asserts (alg≠none, PKCE-MUST, state-validated); wire seq is dynamic' },
+    L4: { state: 'settles_now', basis: 'reachability × version-diff (Syft/Grype/OSV) — static' },
+    L5: { state: 'signal_until_harness', basis: 'framework idiom conformance is fuzzier; wrap linters as signal until harnessed' },
+    L6: { state: 'settles_now', basis: 'config-conformance (Checkov/OPA/Conftest) — static' },
+    L7: { state: 'signal_until_harness', basis: 'tx-boundary/N+1 static; migration reconciliation needs a differential harness' },
+    L8: { state: 'settles_now', basis: 'contract-diff × usage-witness (oasdiff/buf/graphql-inspector + circle-ir) — static usage' },
+    L9: { state: 'uncovered', basis: 'domain-logic residual — extracted + executed harness, not yet built' },
+};
+// Per-kind overrides where a component is more/less checkable than its layer default.
+const KIND_CAPABILITY = {
+    'runtime:node': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:python': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:jvm': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:go': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    'runtime:rust': { state: 'not_diffable', basis: 'runtime version itself is not a conformance target' },
+    // L7 raw drivers: presence only, no ORM idiom to check
+    'db-driver': { state: 'signal_until_harness', basis: 'raw driver — query safety needs taint, no ORM idiom contract' },
+    // L4 dev deps: not a runtime supply-chain surface
+    'dependency:dev': { state: 'not_diffable', basis: 'dev-only dependency — not in the shipped supply-chain surface' },
+};
+function capabilityFor(c) {
+    return KIND_CAPABILITY[c.kind] ?? LAYER_CAPABILITY[c.layer];
+}
+const ALL_LAYERS = ['L2', 'L3', 'L4', 'L5', 'L6', 'L7', 'L8', 'L9'];
+/** Compute the coverage-map (receipt) for a BOM. Pure. */
+export function computeCoverage(bom) {
+    const zero = () => ({ settles_now: 0, signal_until_harness: 0, not_diffable: 0, uncovered: 0 });
+    const total = zero();
+    const layers = {};
+    for (const layer of ALL_LAYERS) {
+        const counts = zero();
+        const components = [];
+        for (const c of bom.layers[layer].components) {
+            const cap = capabilityFor(c);
+            counts[cap.state]++;
+            total[cap.state]++;
+            components.push({ name: c.name, layer, kind: c.kind, state: cap.state, basis: cap.basis });
+        }
+        layers[layer] = { layer, title: BOM_LAYER_TITLES[layer], counts, components };
+    }
+    const totalComponents = COVERAGE_STATES.reduce((n, s) => n + total[s], 0);
+    const diffable = totalComponents - total.not_diffable;
+    const coverable = total.settles_now + total.signal_until_harness;
+    const declaredCoverablePct = diffable > 0 ? Math.round((coverable / diffable) * 1000) / 10 : 0;
+    return {
+        target: bom.target,
+        layers,
+        summary: { counts: total, totalComponents, declaredCoverablePct },
+    };
+}
+//# sourceMappingURL=index.js.map

package/dist/coverage-map/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/coverage-map/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAInD,MAAM,CAAC,MAAM,eAAe,GAAoB,CAAC,aAAa,EAAE,sBAAsB,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;AAsCrH,8EAA8E;AAC9E,kEAAkE;AAClE,MAAM,gBAAgB,GAAiC;IACrD,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,4EAA4E,EAAE;IAC1H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,sFAAsF,EAAE;IAC3H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,uDAAuD,EAAE;IAC5F,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,gFAAgF,EAAE;IAC9H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACzF,EAAE,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,+EAA+E,EAAE;IAC7H,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,0FAA0F,EAAE;IAC/H,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,qEAAqE,EAAE;CACzG,CAAC;AAEF,sFAAsF;AACtF,MAAM,eAAe,GAA+B;IAClD,cAAc,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACtG,gBAAgB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACxG,aAAa,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACrG,YAAY,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACpG,cAAc,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,oDAAoD,EAAE;IACtG,uDAAuD;IACvD,WAAW,EAAE,EAAE,KAAK,EAAE,sBAAsB,EAAE,KAAK,EAAE,8DAA8D,EAAE;IACrH,kDAAkD;IAClD,gBAAgB,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,KAAK,EAAE,+DAA+D,EAAE;CACpH,CAAC;AAEF,SAAS,aAAa,CAAC,CAAe;IACpC,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,GAAe,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;AAEhF,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,GAAY;IAC1C,MAAM,IAAI,GAAG,GAAkC,EAAE,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,oBAAoB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/H,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;IACrB,MAAM,MAAM,GAAG,EAAqC,CAAC;IAErD,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC;QACtB,MAAM,UAAU,GAAwB,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,CAAC;YAC7C,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACnB,UAAU,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChF,CAAC;IAED,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,eAAe,GAAG,KAAK,CAAC,YAAY,CAAC;IACtD,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC,oBAAoB,CAAC;IACjE,MAAM,oBAAoB,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,SAAS,GAAG,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAE/F,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM;QACN,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE;KAClE,CAAC;AACJ,CAAC"}

package/dist/coverage-map/kb-join.d.ts

@@ -0,0 +1,46 @@
+/**
+ * BOM×KB join — enrich the coverage receipt with fleet memory.
+ *
+ * The coverage map declares what we *can* check (per the capability registry);
+ * the KB join adds what the fleet has *already witnessed*. A component that
+ * `settles_now` AND carries a fleet witness becomes `witnessed` — the only state
+ * backed by evidence rather than declaration. This is the lazy-fan-out input:
+ * a component witnessed elsewhere needs re-verification here, not first-time
+ * authoring.
+ *
+ * Honesty (canon §11): `witnessed` is fleet-wide evidence, NOT a this-repo
+ * settled-%. The summary reports a `witnessedCount` (real) alongside the
+ * `declaredCoverablePct` (projected) — never conflated.
+ */
+import type { BomLayer } from '../bom/types.js';
+import type { CoverageMap, CoverageState, ComponentCoverage } from './index.js';
+import type { KnowledgeBase, KbEntry } from './kb.js';
+export type JoinedState = CoverageState | 'witnessed';
+export interface JoinedComponentCoverage extends ComponentCoverage {
+    ecosystem?: string;
+    /** Fleet memory for this component (absent = KB never saw it). */
+    kb?: Pick<KbEntry, 'witnessed' | 'cardUrl' | 'corpusRefs' | 'lastVerdict'>;
+    /** State after the join: `witnessed` when settles_now + a fleet witness exists. */
+    effectiveState: JoinedState;
+}
+export interface JoinedLayerCoverage {
+    layer: BomLayer;
+    title: string;
+    components: JoinedComponentCoverage[];
+}
+export interface JoinedCoverageMap {
+    target: string;
+    layers: Record<BomLayer, JoinedLayerCoverage>;
+    summary: {
+        /** Projected coverable %, carried from the coverage map (declaration). */
+        declaredCoverablePct: number;
+        totalComponents: number;
+        /** REAL: components the fleet has already witnessed (evidence, not projection). */
+        witnessedCount: number;
+        /** Components with a public card. */
+        cardedCount: number;
+    };
+}
+/** Enrich a coverage map with a KB's fleet memory. Pure w.r.t. `kb.lookup`. */
+export declare function joinCoverageWithKb(coverage: CoverageMap, kb: KnowledgeBase): JoinedCoverageMap;
+//# sourceMappingURL=kb-join.d.ts.map

package/dist/coverage-map/kb-join.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kb-join.d.ts","sourceRoot":"","sources":["../../src/coverage-map/kb-join.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,KAAK,EAAE,WAAW,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAChF,OAAO,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAEtD,MAAM,MAAM,WAAW,GAAG,aAAa,GAAG,WAAW,CAAC;AAEtD,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,EAAE,CAAC,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,GAAG,YAAY,GAAG,aAAa,CAAC,CAAC;IAC3E,mFAAmF;IACnF,cAAc,EAAE,WAAW,CAAC;CAC7B;AAED,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,QAAQ,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,uBAAuB,EAAE,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,mBAAmB,CAAC,CAAC;IAC9C,OAAO,EAAE;QACP,0EAA0E;QAC1E,oBAAoB,EAAE,MAAM,CAAC;QAC7B,eAAe,EAAE,MAAM,CAAC;QACxB,mFAAmF;QACnF,cAAc,EAAE,MAAM,CAAC;QACvB,qCAAqC;QACrC,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;CACH;AAID,+EAA+E;AAC/E,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE,aAAa,GAAG,iBAAiB,CAmC9F"}