looply-cli 0.0.0-stage → 0.2.0

package/dist/evidence-cmd.d.ts

@@ -0,0 +1,133 @@
+import { type ApplyIntent, type Artifact, type PlannedDeletion, type RetentionPolicy, type Tombstone } from '@looply/core';
+/**
+ * `looply evidence` — THE INVENTORY THE RETENTION POLICY WAS WAITING FOR.
+ *
+ * 🔴 D5 SHIPPED A COMPLETE POLICY WITH NO CALLER. `retentionPlan` and
+ * `describeRetentionPlan` had zero production callers: the fold knew what should
+ * expire and nothing ever asked it. This asks.
+ *
+ * ⚠️ AND IT ONLY ASKS. There is no `--apply`, deliberately. `retentionPlan`'s own
+ * docblock is unambiguous about why — *"DRY RUN IS NOT A MODE HERE, IT IS THE
+ * ONLY THING THIS FUNCTION DOES. The charter requires that old stores get an
+ * inventory before anything is removed, and a function that could be called in
+ * either mode is one that gets called in the wrong one."* The same reasoning
+ * applies one level up: a command that could delete is one that eventually
+ * deletes the wrong thing, and the policy's first rule is the one about not
+ * deleting.
+ *
+ * So this prints what WOULD happen and stops. Applying a plan is a separate act
+ * somebody builds deliberately, with the tombstones the policy already
+ * specifies, and it is recorded as UNFINISHED rather than half-built here.
+ */
+export declare const EVIDENCE_USAGE: string;
+export declare const EXIT_OK = 0;
+export declare const EXIT_USAGE = 2;
+/** The budget cannot be met without expiring something that may not be. */
+export declare const EXIT_PAUSE_CAPTURE = 4;
+/**
+ * An apply ran and refused at least one removal.
+ *
+ * 🔴 ITS OWN CODE, BECAUSE A REFUSAL IS NOT AN ERROR AND NOT A SUCCESS. Every
+ * refusal is the policy working, and a script that treated them as failure
+ * would learn to ignore them. One that could not tell them from a clean run
+ * would never look.
+ */
+export declare const EXIT_REFUSED = 5;
+export interface EvidenceDeps {
+    /**
+     * Every artifact this project has, already classified.
+     *
+     * ⚠️ `owned` MUST be set by whoever knows. The policy treats absent as NOT
+     * owned and refuses to expire it — which is the safe default and exactly why
+     * the caller, not the fold, decides.
+     */
+    artifacts(): Promise<readonly Artifact[]>;
+    /**
+     * What is present in the state directory and has NO class, so is not part of
+     * the plan above.
+     *
+     * 🔴 REPORTING THIS IS NOT OPTIONAL. Measured on a real project, the two
+     * classified stores held 109 KB of a 195 KB state directory: a report saying
+     * "7 artifacts across 2 stores" and nothing else silently omitted 44% of what
+     * was there, and read like an accounting. An instrument that measures less
+     * than it appears to is the defect this codebase names most often.
+     */
+    /**
+     * ⚠️ `bytes: null` means **could not be read**, not zero. An entry the
+     * scanner cannot size still has to appear, because the alternative is the
+     * silence this whole report exists to prevent.
+     */
+    uninventoried(): Promise<readonly {
+        name: string;
+        bytes: number | null;
+    }[]>;
+    policy(): RetentionPolicy;
+    nowMs(): number;
+    out(line: string): void;
+    err(line: string): void;
+    /** Where an artifact lives on disk, absolute. */
+    pathOf?(a: Artifact): string;
+    /**
+     * The project's own state directory.
+     *
+     * 🔴 THIS IS WHAT MAKES A ROOT "EXPLICITLY RECORDED". `OWNER_CHARTER.md` §5 D5
+     * limits application to *"explicitly recorded disposable roots"*, and a path
+     * typed on a command line is explicit but not recorded — a typo is just as
+     * explicit. A root has to be one the PRODUCT made and knows about, so it is
+     * checked against this and refused otherwise.
+     */
+    stateDir?(): string;
+    /** Carry out an intent. Injected, so this command is testable without a disk. */
+    apply?(intent: ApplyIntent): ApplyResult;
+}
+/** What `applyRetention` answers with, as this command needs to read it. */
+export interface ApplyResult {
+    readonly removed: readonly Tombstone[];
+    readonly refused: readonly {
+        id: string;
+        because: string;
+    }[];
+    readonly alreadyGone: readonly string[];
+    readonly resumed: readonly string[];
+    /** Entries this intent had already finished. Absent on an older executor. */
+    readonly settled?: readonly {
+        id: string;
+        phase: string;
+    }[];
+}
+export declare function evidenceCommand(argv: readonly string[], deps: EvidenceDeps): Promise<number>;
+/**
+ * The intent's id, DERIVED FROM WHAT IT IS ABOUT rather than freshly minted.
+ *
+ * 🔴 A MINTED ID MEANT A CRASH COULD NEVER BE RESUMED. `resumeApply` reads the
+ * journal for records of THIS intent; with a new id every invocation, an
+ * `intended` left behind by a crash belonged to an id nothing would ever ask
+ * about again — so the one state the two-phase journal exists to survive was
+ * the one state it could not reach. Measured live: three identical `refused`
+ * records for one artifact across three runs, because every run decided it
+ * afresh under a new name.
+ *
+ * Deriving it from the root and from each deletion's identity, size and age
+ * means the same plan is the same intent — so a crash resumes — and a different
+ * plan is a different one, so a later, different apply is not mistaken for a
+ * continuation of an earlier one.
+ *
+ * FNV-1a, inline: this needs a stable short string, not a cryptographic
+ * property, and reaching for a hash module to get one would be a dependency
+ * with nothing behind it.
+ */
+export declare function intentIdFor(root: string, deletions: readonly PlannedDeletion[]): string;
+/**
+ * What this report does NOT account for, said out loud with its size.
+ *
+ * ⚠️ THE POLICY'S UNIT IS AN ARTIFACT WITH A CLASS, and a ledger or a cache
+ * has no class until somebody decides what one entry of it IS. Guessing in
+ * order to report a bigger number would be worse than omitting them — but
+ * omitting them SILENTLY is worse still, because the total then reads as the
+ * whole accounting.
+ */
+/** How many named entries the short form shows before it says how many it is hiding. */
+export declare const UNINVENTORIED_PREVIEW = 5;
+/** The numbers, unless a project says otherwise. Stated once, here and in the policy. */
+export declare const evidencePolicy: () => RetentionPolicy;
+//# sourceMappingURL=evidence-cmd.d.ts.map

package/dist/evidence-cmd.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-cmd.d.ts","sourceRoot":"","sources":["../src/evidence-cmd.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,QAAQ,EACb,KAAK,eAAe,EACpB,KAAK,eAAe,EACpB,KAAK,SAAS,EACf,MAAM,cAAc,CAAC;AAEtB;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,cAAc,QAQf,CAAC;AAEb,eAAO,MAAM,OAAO,IAAI,CAAC;AACzB,eAAO,MAAM,UAAU,IAAI,CAAC;AAC5B,2EAA2E;AAC3E,eAAO,MAAM,kBAAkB,IAAI,CAAC;AACpC;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,IAAI,CAAC;AAE9B,MAAM,WAAW,YAAY;IAC3B;;;;;;OAMG;IACH,SAAS,IAAI,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;IAC1C;;;;;;;;;OASG;IACH;;;;OAIG;IACH,aAAa,IAAI,OAAO,CAAC,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,EAAE,CAAC,CAAC;IAC5E,MAAM,IAAI,eAAe,CAAC;IAC1B,KAAK,IAAI,MAAM,CAAC;IAChB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAIxB,iDAAiD;IACjD,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC;IAC7B;;;;;;;;OAQG;IACH,QAAQ,CAAC,IAAI,MAAM,CAAC;IACpB,iFAAiF;IACjF,KAAK,CAAC,CAAC,MAAM,EAAE,WAAW,GAAG,WAAW,CAAC;CAC1C;AAED,4EAA4E;AAC5E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,SAAS,EAAE,CAAC;IACvC,QAAQ,CAAC,OAAO,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC7D,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC7D;AAKD,wBAAsB,eAAe,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAiHlG;AAGD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAQvF;AAyGD;;;;;;;;GAQG;AACH,wFAAwF;AACxF,eAAO,MAAM,qBAAqB,IAAI,CAAC;AA2DvC,yFAAyF;AACzF,eAAO,MAAM,cAAc,QAAO,eAAoC,CAAC"}

package/dist/evidence-cmd.js

@@ -0,0 +1,347 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evidencePolicy = exports.UNINVENTORIED_PREVIEW = exports.EXIT_REFUSED = exports.EXIT_PAUSE_CAPTURE = exports.EXIT_USAGE = exports.EXIT_OK = exports.EVIDENCE_USAGE = void 0;
+exports.evidenceCommand = evidenceCommand;
+exports.intentIdFor = intentIdFor;
+const core_1 = require("@looply/core");
+/**
+ * `looply evidence` — THE INVENTORY THE RETENTION POLICY WAS WAITING FOR.
+ *
+ * 🔴 D5 SHIPPED A COMPLETE POLICY WITH NO CALLER. `retentionPlan` and
+ * `describeRetentionPlan` had zero production callers: the fold knew what should
+ * expire and nothing ever asked it. This asks.
+ *
+ * ⚠️ AND IT ONLY ASKS. There is no `--apply`, deliberately. `retentionPlan`'s own
+ * docblock is unambiguous about why — *"DRY RUN IS NOT A MODE HERE, IT IS THE
+ * ONLY THING THIS FUNCTION DOES. The charter requires that old stores get an
+ * inventory before anything is removed, and a function that could be called in
+ * either mode is one that gets called in the wrong one."* The same reasoning
+ * applies one level up: a command that could delete is one that eventually
+ * deletes the wrong thing, and the policy's first rule is the one about not
+ * deleting.
+ *
+ * So this prints what WOULD happen and stops. Applying a plan is a separate act
+ * somebody builds deliberately, with the tombstones the policy already
+ * specifies, and it is recorded as UNFINISHED rather than half-built here.
+ */
+exports.EVIDENCE_USAGE = [
+    'looply evidence                     what this project has accumulated, and what the retention policy would do with it',
+    'looply evidence --all               the same, listing every uninventoried entry by name rather than the largest few',
+    'looply evidence --apply --root <d>  carry the plan out, inside that one directory and nowhere else',
+    '',
+    'Without --apply it deletes nothing. With it, --root is REQUIRED and must name one',
+    'of this project\'s own evidence stores: the executor refuses anything unowned,',
+    'pinned, referenced, changed since the plan, or reachable only through a link.',
+].join('\n');
+exports.EXIT_OK = 0;
+exports.EXIT_USAGE = 2;
+/** The budget cannot be met without expiring something that may not be. */
+exports.EXIT_PAUSE_CAPTURE = 4;
+/**
+ * An apply ran and refused at least one removal.
+ *
+ * 🔴 ITS OWN CODE, BECAUSE A REFUSAL IS NOT AN ERROR AND NOT A SUCCESS. Every
+ * refusal is the policy working, and a script that treated them as failure
+ * would learn to ignore them. One that could not tell them from a clean run
+ * would never look.
+ */
+exports.EXIT_REFUSED = 5;
+const kb = (bytes) => bytes >= 1024 * 1024 ? `${(bytes / 1024 / 1024).toFixed(1)} MB` : `${Math.round(bytes / 1024)} KB`;
+async function evidenceCommand(argv, deps) {
+    /** Arguments first, before anything is read — the R2-G-1 lesson. */
+    const all = argv.includes('--all');
+    const apply = argv.includes('--apply');
+    const rootAt = argv.indexOf('--root');
+    const root = rootAt >= 0 ? argv[rootAt + 1] : undefined;
+    const consumed = new Set();
+    for (const [i, a] of argv.entries()) {
+        if (a === '--all' || a === '--apply' || a === '--root')
+            consumed.add(i);
+        if (a === '--root' && rootAt === i)
+            consumed.add(i + 1);
+    }
+    const unknown = argv.filter((_, i) => !consumed.has(i));
+    if (unknown.length > 0) {
+        deps.err(`looply evidence: ${unknown.join(', ')} — no idea what that means.\n\n${exports.EVIDENCE_USAGE}`);
+        return exports.EXIT_USAGE;
+    }
+    /**
+     * ⚠️ `--root` WITHOUT `--apply` IS REFUSED RATHER THAN IGNORED. A person who
+     * typed a root meant to act on it; printing a report and exiting 0 would look
+     * exactly like having done so.
+     */
+    if (rootAt >= 0 && !apply) {
+        deps.err(`looply evidence: --root means nothing without --apply.\n\n${exports.EVIDENCE_USAGE}`);
+        return exports.EXIT_USAGE;
+    }
+    if (apply) {
+        const bad = applyPrecheck(root, deps);
+        if (bad !== null) {
+            deps.err(`looply evidence --apply: ${bad}`);
+            return exports.EXIT_USAGE;
+        }
+    }
+    const artifacts = await deps.artifacts();
+    const uncounted = await deps.uninventoried();
+    if (artifacts.length === 0) {
+        deps.out('evidence: this project has accumulated nothing the retention policy covers.');
+        reportUninventoried(deps, uncounted, all);
+        return exports.EXIT_OK;
+    }
+    // (artifacts, nowMs, policy) — the order the fold declares, not the one that reads nicely.
+    const plan = (0, core_1.retentionPlan)(artifacts, deps.nowMs(), deps.policy());
+    /** What is there, by store, before anything about expiry. */
+    const byStore = new Map();
+    for (const a of artifacts) {
+        const at = byStore.get(a.store) ?? { count: 0, bytes: 0 };
+        byStore.set(a.store, { count: at.count + 1, bytes: at.bytes + a.bytes });
+    }
+    deps.out(`evidence: ${artifacts.length} artifact(s) across ${byStore.size} store(s)`);
+    for (const [store, at] of [...byStore.entries()].sort((a, b) => b[1].bytes - a[1].bytes)) {
+        deps.out(`  ${store.padEnd(22)} ${String(at.count).padStart(4)}  ${kb(at.bytes).padStart(9)}`);
+    }
+    /**
+     * ⚠️ PROTECTED BYTES ARE SAID SEPARATELY FROM KEPT ONES. They are not the
+     * same claim: kept-but-expirable will go one day, and protected will not go
+     * at all. A single "retained" number would hide which of those a person is
+     * looking at.
+     */
+    deps.out('');
+    deps.out(`  would expire   ${String(plan.tombstones.length).padStart(4)}  ${kb(plan.tombstones.reduce((n, t) => n + t.bytes, 0)).padStart(9)}`);
+    deps.out(`  would keep     ${String(plan.decisions.filter((d) => d.verdict.kind === 'keep').length).padStart(4)}  ${kb(plan.unpinnedBytesAfter).padStart(9)}  unpinned, still expirable later`);
+    deps.out(`  protected      ${'   -'}  ${kb(plan.protectedBytes).padStart(9)}  pinned or not owned — nothing may expire these`);
+    /**
+     * 🔴 THE REASONS ARE PRINTED, NOT JUST THE COUNTS. An inventory that said
+     * "12 would expire" and nothing else is a number somebody has to trust. The
+     * policy writes a `because` for every decision; this is where a person reads
+     * it and disagrees with it before anything is ever applied.
+     */
+    /**
+     * 🔴 THE "NOTHING WAS DELETED" LINE IS DROPPED WHEN SOMETHING IS ABOUT TO BE.
+     *
+     * `describeRetentionPlan` ends with *"nothing was deleted: this is a plan, and
+     * applying one is a separate deliberate act"* — true of every report, and
+     * FALSE three lines above an apply that removed two directories. Measured on a
+     * real project: the report said nothing was deleted and the apply underneath
+     * it said `removed 2`. A reassurance contradicted by the next paragraph is
+     * worse than no reassurance.
+     */
+    const lines = (0, core_1.describeRetentionPlan)(plan).filter((l) => !(apply && l.includes('nothing was deleted')));
+    if (lines.length > 0) {
+        deps.out('');
+        for (const line of lines)
+            deps.out(`  ${line}`);
+    }
+    reportUninventoried(deps, uncounted, all);
+    if (apply) {
+        return carryOut(plan.tombstones, root, deps);
+    }
+    if (plan.capturePaused) {
+        /**
+         * 🔴 AN ACTIONABLE STATE, AND ITS OWN EXIT CODE. The budget is full of
+         * things that may not be expired, so capture of NEW artifacts must stop
+         * until a person resolves it. Reporting that as ordinary output would let a
+         * script sail past the one condition the budget exists to surface.
+         */
+        deps.err('');
+        deps.err('evidence: CAPTURE PAUSED — the budget is full of artifacts nothing may expire. ' +
+            'New capture in those stores should stop until somebody pins less, or raises the budget deliberately.');
+        return exports.EXIT_PAUSE_CAPTURE;
+    }
+    // No closing line of our own: `describeRetentionPlan` already ends with
+    // "nothing was deleted: this is a plan…", and saying it twice would read as
+    // two different reassurances rather than one fact.
+    return exports.EXIT_OK;
+}
+/**
+ * The intent's id, DERIVED FROM WHAT IT IS ABOUT rather than freshly minted.
+ *
+ * 🔴 A MINTED ID MEANT A CRASH COULD NEVER BE RESUMED. `resumeApply` reads the
+ * journal for records of THIS intent; with a new id every invocation, an
+ * `intended` left behind by a crash belonged to an id nothing would ever ask
+ * about again — so the one state the two-phase journal exists to survive was
+ * the one state it could not reach. Measured live: three identical `refused`
+ * records for one artifact across three runs, because every run decided it
+ * afresh under a new name.
+ *
+ * Deriving it from the root and from each deletion's identity, size and age
+ * means the same plan is the same intent — so a crash resumes — and a different
+ * plan is a different one, so a later, different apply is not mistaken for a
+ * continuation of an earlier one.
+ *
+ * FNV-1a, inline: this needs a stable short string, not a cryptographic
+ * property, and reaching for a hash module to get one would be a dependency
+ * with nothing behind it.
+ */
+function intentIdFor(root, deletions) {
+    const material = [root, ...[...deletions].map((d) => `${d.id}:${d.bytes}:${d.createdAtMs}`).sort()].join('|');
+    let h = 0x811c9dc5;
+    for (let i = 0; i < material.length; i += 1) {
+        h ^= material.charCodeAt(i);
+        h = Math.imul(h, 0x01000193) >>> 0;
+    }
+    return `ret_${h.toString(36)}`;
+}
+/**
+ * Everything wrong with an `--apply` invocation, before a single file is read.
+ *
+ * Null when there is nothing wrong. Checked BEFORE the inventory, so a bad root
+ * never reaches a plan — the R2-G-1 lesson applied to the one verb that can
+ * destroy something.
+ */
+function applyPrecheck(root, deps) {
+    if (deps.apply === undefined || deps.pathOf === undefined || deps.stateDir === undefined) {
+        return 'this build has no executor wired to it, so there is nothing to apply with';
+    }
+    if (root === undefined || root === '' || root.startsWith('--')) {
+        return '--root is required, and must name one of this project\u2019s evidence stores';
+    }
+    const state = deps.stateDir();
+    if (!(0, core_1.insideRoot)(state, root)) {
+        return `${root} is not inside this project\u2019s state directory (${state}), and only a root the product made may be applied to`;
+    }
+    /**
+     * 🔴 AND IT MUST NOT BE THE STATE DIRECTORY ITSELF. `insideRoot` answers true
+     * for the root it is given, so naming the state directory would authorise the
+     * queue, the ledger, the lease and every index under it. A store is a child of
+     * it, never it.
+     */
+    if ((0, core_1.insideRoot)(root, state)) {
+        return `${root} is the whole state directory — name a single store inside it, not the directory that holds everything`;
+    }
+    return null;
+}
+/**
+ * Turn what the plan would expire into an intent bounded by one root, and run it.
+ *
+ * ⚠️ THE PLAN IS FILTERED TO THE ROOT, NOT CHECKED AGAINST IT. An artifact the
+ * policy would expire that lives somewhere else is not an error and not a
+ * refusal — the person named one store, and the others are simply not this
+ * invocation's business. They are counted out loud so the difference between
+ * "nothing to do" and "nothing HERE to do" is visible.
+ */
+function carryOut(tombstones, root, deps) {
+    const pathOf = deps.pathOf;
+    const run = deps.apply;
+    const all = tombstones.map((t) => ({
+        id: t.id,
+        store: t.store,
+        path: pathOf({ id: t.id, store: t.store, bytes: t.bytes, createdAtMs: t.createdAtMs, class: 'failure-diagnostic' }),
+        bytes: t.bytes,
+        createdAtMs: t.createdAtMs,
+        because: t.because,
+    }));
+    const here = all.filter((d) => (0, core_1.insideRoot)(root, d.path));
+    const elsewhere = all.length - here.length;
+    deps.out('');
+    if (here.length === 0) {
+        deps.out(elsewhere === 0
+            ? 'apply: the policy would expire nothing, so there is nothing to carry out.'
+            : `apply: nothing to carry out in ${root} — the ${elsewhere} the policy would expire live in other stores.`);
+        return exports.EXIT_OK;
+    }
+    const intent = {
+        intentId: intentIdFor(root, here),
+        root,
+        plannedAtMs: deps.nowMs(),
+        policy: deps.policy(),
+        deletions: here,
+    };
+    const out = run(intent);
+    deps.out(`apply: ${here.length} planned in ${root}${elsewhere > 0 ? ` (${elsewhere} more are in other stores)` : ''}`);
+    if (out.resumed.length > 0)
+        deps.out(`  resumed        ${String(out.resumed.length).padStart(4)}  left in flight by an earlier run`);
+    deps.out(`  removed        ${String(out.removed.length).padStart(4)}  ${kb(out.removed.reduce((n, t) => n + t.bytes, 0)).padStart(9)}`);
+    if (out.alreadyGone.length > 0)
+        deps.out(`  already gone   ${String(out.alreadyGone.length).padStart(4)}  removed before this run reached them`);
+    /**
+     * 🔴 EVERY REFUSAL IS PRINTED WITH ITS REASON. A count of refusals is a number
+     * nobody can act on; the whole design of the executor is that it says which of
+     * a dozen named reasons applied, and a report that swallowed those would make
+     * the care in it invisible.
+     */
+    for (const r of out.refused)
+        deps.out(`  refused  ${r.id}: ${r.because}`);
+    /**
+     * 🔴 A REFUSAL THIS RUN DID NOT MAKE IS STILL A REFUSAL.
+     *
+     * Running the same plan twice decides nothing the second time — that is the
+     * journal working. But reporting "removed 0, refused 0, exit 0" would tell
+     * somebody re-running to check that everything is fine, about a store where an
+     * artifact is still standing because the policy refused to remove it. The
+     * decision holds; it was simply made earlier, and it is said and counted.
+     */
+    const stoodRefused = (out.settled ?? []).filter((e) => e.phase === 'refused');
+    for (const e of stoodRefused)
+        deps.out(`  refused  ${e.id}: decided by an earlier run of this same plan, and it still stands`);
+    if ((out.settled ?? []).length > 0) {
+        deps.out(`  settled        ${String(out.settled.length).padStart(4)}  this plan had already been carried out`);
+    }
+    return out.refused.length + stoodRefused.length > 0 ? exports.EXIT_REFUSED : exports.EXIT_OK;
+}
+/**
+ * What this report does NOT account for, said out loud with its size.
+ *
+ * ⚠️ THE POLICY'S UNIT IS AN ARTIFACT WITH A CLASS, and a ledger or a cache
+ * has no class until somebody decides what one entry of it IS. Guessing in
+ * order to report a bigger number would be worse than omitting them — but
+ * omitting them SILENTLY is worse still, because the total then reads as the
+ * whole accounting.
+ */
+/** How many named entries the short form shows before it says how many it is hiding. */
+exports.UNINVENTORIED_PREVIEW = 5;
+function reportUninventoried(deps, uncounted, all) {
+    if (uncounted.length === 0)
+        return;
+    /**
+     * 🔴 THE DOCBLOCK ABOVE SAID IT, AND THE CODE DID THE OPPOSITE.
+     *
+     * *"omitting them SILENTLY is worse still, because the total then reads as
+     * the whole accounting"* — and an entry the scanner could not `stat` was
+     * dropped on the floor, so a state directory containing an unreadable entry
+     * reported the same count and the same total as one containing nothing of
+     * the kind. Measured: 24 entries / 94 KB before a dangling junction was put
+     * in the state dir, and **24 entries / 94 KB after**.
+     *
+     * ⚠️ So an unsized entry is counted, named, and kept OUT of the byte total,
+     * and the total is marked as a floor rather than a figure. Adding a zero for
+     * it would understate the directory while looking exact, which is the same
+     * failure wearing a number.
+     */
+    const sized = uncounted.filter((u) => u.bytes !== null);
+    const unsized = uncounted.filter((u) => u.bytes === null);
+    const total = sized.reduce((n, u) => n + u.bytes, 0);
+    const size = unsized.length > 0 ? `at least ${kb(total)}` : kb(total);
+    deps.out('');
+    deps.out(`  NOT inventoried: ${uncounted.length} entr${uncounted.length === 1 ? 'y' : 'ies'}, ${size} — no class yet, so no plan covers them`);
+    /**
+     * 🔴 `… and 20 more` HID THE ONE THING THE CHARTER ASKS FOR BY NAME.
+     *
+     * `OWNER_CHARTER.md` §5 D5: *"Also cover the named compile/tool/rejected
+     * stores or report exact unclassified entries."* `rejected` is inventoried;
+     * the compile and tool stores are not, and on a real project they sat inside
+     * an elision that named five entries and swallowed twenty. A reader could not
+     * tell whether they were in there at all.
+     *
+     * So `--all` lists every one, and the short form's elision now carries the
+     * BYTES it is hiding as well as the count — a number that cannot be read as
+     * "a few small ones" when it is not.
+     */
+    const ordered = [...sized].sort((a, b) => b.bytes - a.bytes);
+    const shown = all ? ordered : ordered.slice(0, exports.UNINVENTORIED_PREVIEW);
+    for (const u of shown) {
+        deps.out(`    ${u.name.padEnd(30)} ${kb(u.bytes).padStart(9)}`);
+    }
+    const hidden = ordered.slice(shown.length);
+    if (hidden.length > 0) {
+        const hiddenBytes = hidden.reduce((n, u) => n + u.bytes, 0);
+        deps.out(`    … and ${hidden.length} more, ${kb(hiddenBytes)} — \`looply evidence --all\` names them`);
+    }
+    for (const u of unsized) {
+        deps.out(`    ${u.name.padEnd(30)} ${'unreadable'.padStart(9)}`);
+    }
+}
+/** The numbers, unless a project says otherwise. Stated once, here and in the policy. */
+const evidencePolicy = () => core_1.DEFAULT_RETENTION;
+exports.evidencePolicy = evidencePolicy;
+//# sourceMappingURL=evidence-cmd.js.map

package/dist/evidence-cmd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-cmd.js","sourceRoot":"","sources":["../src/evidence-cmd.ts"],"names":[],"mappings":";;;AAsHA,0CAiHC;AAuBD,kCAQC;AAtQD,uCAUsB;AAEtB;;;;;;;;;;;;;;;;;;;GAmBG;AAEU,QAAA,cAAc,GAAG;IAC5B,uHAAuH;IACvH,qHAAqH;IACrH,oGAAoG;IACpG,EAAE;IACF,mFAAmF;IACnF,gFAAgF;IAChF,+EAA+E;CAChF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEA,QAAA,OAAO,GAAG,CAAC,CAAC;AACZ,QAAA,UAAU,GAAG,CAAC,CAAC;AAC5B,2EAA2E;AAC9D,QAAA,kBAAkB,GAAG,CAAC,CAAC;AACpC;;;;;;;GAOG;AACU,QAAA,YAAY,GAAG,CAAC,CAAC;AA4D9B,MAAM,EAAE,GAAG,CAAC,KAAa,EAAU,EAAE,CACnC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;AAE9F,KAAK,UAAU,eAAe,CAAC,IAAuB,EAAE,IAAkB;IAC/E,oEAAoE;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,QAAQ;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,CAAC,KAAK,QAAQ,IAAI,MAAM,KAAK,CAAC;YAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,GAAG,CAAC,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,kCAAkC,sBAAc,EAAE,CAAC,CAAC;QACnG,OAAO,kBAAU,CAAC;IACpB,CAAC;IACD;;;;OAIG;IACH,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,GAAG,CAAC,6DAA6D,sBAAc,EAAE,CAAC,CAAC;QACxF,OAAO,kBAAU,CAAC;IACpB,CAAC;IACD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,4BAA4B,GAAG,EAAE,CAAC,CAAC;YAC5C,OAAO,kBAAU,CAAC;QACpB,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;IACzC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,CAAC;IAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,6EAA6E,CAAC,CAAC;QACxF,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;QAC1C,OAAO,eAAO,CAAC;IACjB,CAAC;IAED,2FAA2F;IAC3F,MAAM,IAAI,GAAG,IAAA,oBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAEnE,6DAA6D;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4C,CAAC;IACpE,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;QAC1D,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,aAAa,SAAS,CAAC,MAAM,uBAAuB,OAAO,CAAC,IAAI,WAAW,CAAC,CAAC;IACtF,KAAK,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACzF,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjG,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChJ,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC;IAChM,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,KAAK,EAAE,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAE/H;;;;;OAKG;IACH;;;;;;;;;OASG;IACH,MAAM,KAAK,GAAG,IAAA,4BAAqB,EAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;IACvG,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,mBAAmB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;IAE1C,IAAI,KAAK,EAAE,CAAC;QACV,OAAO,QAAQ,CAAC,IAAI,CAAC,UAAU,EAAE,IAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;IAED,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB;;;;;WAKG;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,IAAI,CAAC,GAAG,CACN,iFAAiF;YAC/E,sGAAsG,CACzG,CAAC;QACF,OAAO,0BAAkB,CAAC;IAC5B,CAAC;IAED,wEAAwE;IACxE,4EAA4E;IAC5E,mDAAmD;IACnD,OAAO,eAAO,CAAC;AACjB,CAAC;AAGD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,WAAW,CAAC,IAAY,EAAE,SAAqC;IAC7E,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9G,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC5B,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAAwB,EAAE,IAAkB;IACjE,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACzF,OAAO,2EAA2E,CAAC;IACrF,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,EAAE,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,8EAA8E,CAAC;IACxF,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC9B,IAAI,CAAC,IAAA,iBAAU,EAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,GAAG,IAAI,uDAAuD,KAAK,uDAAuD,CAAC;IACpI,CAAC;IACD;;;;;OAKG;IACH,IAAI,IAAA,iBAAU,EAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,GAAG,IAAI,wGAAwG,CAAC;IACzH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,QAAQ,CAAC,UAAgC,EAAE,IAAY,EAAE,IAAkB;IAClF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAiC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAA6C,CAAC;IAE/D,MAAM,GAAG,GAAsB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpD,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;QACnH,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,OAAO,EAAE,CAAC,CAAC,OAAO;KACnB,CAAC,CAAC,CAAC;IACJ,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAA,iBAAU,EAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,SAAS,GAAG,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAE3C,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CACN,SAAS,KAAK,CAAC;YACb,CAAC,CAAC,2EAA2E;YAC7E,CAAC,CAAC,kCAAkC,IAAI,UAAU,SAAS,gDAAgD,CAC9G,CAAC;QACF,OAAO,eAAO,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAgB;QAC1B,QAAQ,EAAE,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC;QACjC,IAAI;QACJ,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE;QACzB,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE;QACrB,SAAS,EAAE,IAAI;KAChB,CAAC;IAEF,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;IACxB,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,CAAC,MAAM,eAAe,IAAI,GAAG,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,SAAS,4BAA4B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACvH,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC;IACrI,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACxI,IAAI,GAAG,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC;QAAE,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,wCAAwC,CAAC,CAAC;IACjJ;;;;;OAKG;IACH,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,OAAO;QAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IAE1E;;;;;;;;OAQG;IACH,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IAC9E,KAAK,MAAM,CAAC,IAAI,YAAY;QAAE,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,EAAE,oEAAoE,CAAC,CAAC;IAC/H,IAAI,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,oBAAoB,MAAM,CAAC,GAAG,CAAC,OAAQ,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC;IAClH,CAAC;IAED,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAY,CAAC,CAAC,CAAC,eAAO,CAAC;AAC/E,CAAC;AAED;;;;;;;;GAQG;AACH,wFAAwF;AAC3E,QAAA,qBAAqB,GAAG,CAAC,CAAC;AAEvC,SAAS,mBAAmB,CAC1B,IAAkB,EAClB,SAA4D,EAC5D,GAAY;IAEZ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEnC;;;;;;;;;;;;;;OAcG;IACH,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAsC,CAAC;IAC7F,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;IAC1D,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAEtE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACb,IAAI,CAAC,GAAG,CAAC,sBAAsB,SAAS,CAAC,MAAM,QAAQ,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,yCAAyC,CAAC,CAAC;IAC/I;;;;;;;;;;;;OAYG;IACH,MAAM,OAAO,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,6BAAqB,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,MAAM,UAAU,EAAE,CAAC,WAAW,CAAC,yCAAyC,CAAC,CAAC;IACzG,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AAED,yFAAyF;AAClF,MAAM,cAAc,GAAG,GAAoB,EAAE,CAAC,wBAAiB,CAAC;AAA1D,QAAA,cAAc,kBAA4C"}

package/dist/evidence-facts.d.ts

@@ -0,0 +1,40 @@
+/**
+ * WHAT THE FILESYSTEM CANNOT SAY: provenance, pins and references, asked
+ * again at the moment of removal.
+ *
+ * 🔴 IT LIVES HERE, AND NOT IN `bin.ts`, FOR THE REASON `self-repo-id.ts`
+ * gives at length: a spec that needs this would otherwise have to import the
+ * CLI entry point, and two suites importing that file is how a half-written
+ * transform cache entry took the gate down twice. It is also the only way to
+ * test it at all — this is the last check before a delete, and it had no
+ * spec of its own while it was a private function in a 2,000-line file.
+ */
+/**
+ * Ownership, class and — the hard one — whether anything still refers to it.
+ *
+ * 🔴 `referenced` DEFAULTS TO TRUE, AND THAT IS THE WHOLE DESIGN OF IT.
+ * `OWNER_CHARTER.md` §5 D5 forbids deleting *"artifacts referenced by
+ * active/review/recovery work"* and says *"missing/unreadable/unknown is never
+ * deletion permission"*. Put together, those mean an artifact whose references
+ * could not be established is referenced as far as this is concerned. Only a
+ * check that RAN and found nothing may answer false.
+ *
+ * The three places a rejected candidate can still be spoken for, and all of them
+ * are bounded reads of files this project already keeps:
+ *
+ *   run.lease.json   the run holding the project right now
+ *   runs/            the run records that have not been reaped
+ *   queue.json       an item still carrying the failure this candidate is from
+ *
+ * ⚠️ NOT `events.jsonl`. Every run id that ever existed is in it, so a search
+ * there would find every artifact referenced for ever and the policy would never
+ * expire anything — a rule that always says no is indistinguishable from one
+ * nobody wrote.
+ */
+export declare function artifactFacts(stateDir: string, id: string): {
+    owned: boolean;
+    pinned: boolean;
+    referenced: boolean;
+    class: 'failure-diagnostic' | 'success-diagnostic' | 'durable';
+};
+//# sourceMappingURL=evidence-facts.d.ts.map

package/dist/evidence-facts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-facts.d.ts","sourceRoot":"","sources":["../src/evidence-facts.ts"],"names":[],"mappings":"AAyBA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG;IAC3D,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,GAAG,SAAS,CAAC;CAChE,CAuDA"}