musubix3 0.1.16 → 0.1.18

package/.github/plugin/marketplace.json

@@ -3,13 +3,13 @@
   "owner": { "name": "nahisaho" },
   "metadata": {
     "description": "GitHub Copilot CLI specification-driven development skills",
-    "version": "0.1.16"
+    "version": "0.1.18"
   },
   "plugins": [
     {
       "name": "musubix3",
       "source": ".",
-      "version": "0.1.16",
+      "version": "0.1.18",
       "description": "Evidence-driven SDD without duplicating native Copilot capabilities."
     }
   ]

package/.github/skills/sdd-change/SKILL.md

@@ -68,8 +68,7 @@ Documentation/prototypes may omit TDD only when policy allows; record the reason
    use strict `Formal:` JSON for explicit conditional, numeric, temporal or
    transition semantics; report unsupported prose rather than claiming proof.
    A required `formal` check enforces modeled fraction and configured solver.
-3. Run `gate --changed --json` and `status --json`. Repair failures, dangling
-   links and stale evidence; never weaken requirements or policy to obtain green.
+3. Run `gate --changed --json` and `status --json`. Repair failures, dangling links and stale evidence; never weaken requirements or policy to obtain green. If `workflow` fails, run `workflow-verify` compatible mode against this session's live transcript, then `workflow waiver record-all` (bulk, all-or-nothing) for remaining declaration-scoped diagnostics (it cannot clear `WORKFLOW_INVOCATION_UNVERIFIED`), then rerun gate/status.
 4. Treat the first otherwise-passing gate as the release candidate. Run a `rubber-duck` review of the release/quality evidence summary and the CHANGE document; fix every reported issue and re-review until zero issues remain. Before any release operation, prepare/show its exact hash, ask one human approve/reject question and wait; record only that hash, then rerun gate/status.
 5. Complete only when required checks pass and `status.gate.ready` is true;
    otherwise report blockers. One-phase work must state downstream work.

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog
 
+## 0.1.18 - 2026-09-13
+
+New feature: bulk workflow-waiver recording, resolving the repeated
+release-approval blocking pattern from `workflow-verify`/waiver reconciliation
+friction (GitHub Issues #21/#22/#23, this change: #24).
+
+- `musubix3 workflow waiver record-all --approver <name> --reason <text>
+  --confirm` waives every currently-outstanding waivable declaration-scoped
+  workflow diagnostic across the whole reconciliation report in one
+  all-or-nothing call, instead of requiring one `workflow waiver record`
+  invocation per diagnostic.
+- Rejects (recording nothing) if any bulk waiver precondition fails first:
+  malformed waiver evidence, an invalid waiver chain, a blank
+  `--approver`/`--reason`, or an outstanding `WORKFLOW_INVOCATION_UNVERIFIED`
+  diagnostic (which only `workflow-verify` having actually run this session
+  can resolve).
+- Idempotent: with zero remaining waivable candidates it succeeds and records
+  nothing.
+- Spec: `REQ-WORKFLOW-WAIVER-BULK-001..004`,
+  `DES-WORKFLOW-WAIVER-BULK-001..003`, tracked end-to-end in `CHANGE-0012`.
+
+## 0.1.17 - 2026-09-13
+
+`gate --changed` remediation for the change-evidence-waiver feature
+(CHANGE-0012, GitHub Issue #1 item):
+
+- Fixed a `TRACE_DUPLICATE` diagnostic caused by a duplicate trace `@id` on
+  two distinct annotations in `order.ts`.
+- Added a missing `@implements REQ-TDD-CYCLE-VOID-013` trace annotation on
+  the voided-cycle handling in `tdd.ts`, closing a `CHANGE_COMPLETENESS_CODE`
+  gap for CHANGE-0011.
+- Retroactively waived 166 historical `change-history`/`change-completeness`
+  diagnostics predating the CHANGE-0012 waiver mechanism as reviewed legacy
+  debt (CHANGE-0005, 0006, 0009, 0010, 0011).
+- Performed a full retroactive TDD Red-Green ceremony (18 test/requirement
+  pairs across 15 tests in `tests/change-evidence-waiver.test.ts`), resolving
+  all `TDD_TEST_STALE`/`TDD_REQUIREMENT_UNCOVERED` diagnostics.
+
 ## 0.1.16 - 2026-09-12
 
 New feature: scaffold starter `requirements.md`/`design.md` files for a new

package/README-ja.md

@@ -1,6 +1,6 @@
 # musubix3
 
-**最新リリース v0.1.16 · GitHub Copilot CLI 専用 · Node.js ≥20 · TypeScript · MIT**
+**最新リリース v0.1.17 · GitHub Copilot CLI 専用 · Node.js ≥20 · TypeScript · MIT**
 
 [English](README.md)
 
@@ -362,6 +362,8 @@ npx musubix3 tdd green TEST-EXAMPLE-002 --requirement REQ-EXAMPLE-002 --command
 | `tdd validate` | 保存済みRed/Green/Refactorの順序、指紋、実行時間、hash-chainを検証 |
 | `tdd red\|green\|refactor <TEST-ID> --requirement <REQ-ID> --command <name>` | 検証可能なTDDフェーズを実行・記録 |
 | `workflow-record <skill> <phase> --status <status>` | 自己申告のworkflow宣言を記録 |
+| `workflow waiver record <code> --skill <skill> --phase <phase> --recorded-at <timestamp> [--index <n>] --approver <name> --reason <text> --confirm` | declaration単位のworkflow照合診断（`WORKFLOW_SKILL_NOT_INVOKED`、`WORKFLOW_INVOCATION_ORDER`、`WORKFLOW_INVOCATION_INCOMPLETE`、`WORKFLOW_INVOCATION_FAILED`、`WORKFLOW_INVOCATION_REUSED`のいずれか）1件を、監査可能な範囲でnon-blockingなwaived状態に降格記録する。同じdeclaration scopeを共有する`WORKFLOW_BINDING_MISSING`診断も同時に降格される。`WORKFLOW_INVOCATION_UNVERIFIED`はwaiveできず、そのsessionで実際に`workflow-verify`を実行した場合のみ解消できる |
+| `workflow waiver record-all --approver <name> --reason <text> --confirm` | `workflow waiver record`の一括版。reconciliation report全体で現在waive可能なdeclaration scope診断を、1件ずつの`record`呼び出しの代わりに全件一括でall-or-nothingにwaiveする。不正なwaiver証拠、無効なwaiver chain、空の`--approver`/`--reason`、または`workflow-verify`が未解決の`WORKFLOW_INVOCATION_UNVERIFIED`診断のいずれかが事前条件チェックで検出された場合は何も記録せず拒否する（`workflow-verify`が一度も実行されていない場合、個別waiverも一括waiverもこれを代替できない）。waiveされた各declaration scope診断に対応する`WORKFLOW_BINDING_MISSING`も、既存の単体`record`コマンドと同様に同時に降格される。waive対象が0件（既にwaive済み、または該当なし）の場合は冪等に成功し、何も記録しない |
 | `workflow-sanitize <copilot.jsonl> <output-file> [--session-id <uuid>]` | reviewやstrict検証前にmessageとSkill以外のtool dataを除去 |
 | `workflow-verify <copilot.jsonl> [--strict] [--session-id <uuid>]` | Skillイベントを照合し、任意で完全な成功session transcriptを要求 |
 | `attestation oidc-audience --key-id <id> [--public-key-file <pem>]` | 署名鍵を許可するGitHub custom audienceを導出 |

package/README.md

@@ -1,6 +1,6 @@
 # musubix3
 
-**Latest release v0.1.16 · GitHub Copilot CLI only · Node.js ≥20 · TypeScript · MIT**
+**Latest release v0.1.17 · GitHub Copilot CLI only · Node.js ≥20 · TypeScript · MIT**
 
 [日本語](README-ja.md)
 
@@ -410,14 +410,16 @@ validation/gate or requested solver failure, **2** usage, I/O or malformed confi
 | `mutation validate` | Revalidate requirement-scoped schema-v1 killed-mutant evidence |
 | `mutation identity <REQ-ID> <TEST-ID> <sourcePath> <operator> <line> <column>` | Print the deterministic `MUT-*` identity a mutation report must declare |
 | `tdd validate` | Validate persisted Red/Green/Refactor order, fingerprints, durations, and hash-chain evidence |
-| `tdd red\|green\|refactor <TEST-ID> --requirement <REQ-ID> --command <name>` | Execute and record a verified TDD phase |
+| `tdd red\|green\|refactor <TEST-ID> --requirement <REQ-ID> --command <name>` | Execute and record a verified TDD phase. Recording the project's **first** `tdd` cycle (any `red` call while `.musubix/evidence/tdd.json` has zero cycles) makes `gate`'s `tdd` check required **project-wide**, for every mandatory requirement, not just the ones touched by the current change; each uncovered requirement then surfaces as `TDD_REQUIREMENT_UNCOVERED`. `approval record release` always runs the full (non-`--changed`) gate, so it is blocked by any resulting `TDD_REQUIREMENT_UNCOVERED` diagnostics. `tdd migrate` cannot be used to bulk-onboard previously-uncovered requirements: it only re-fingerprints a requirement that already has a valid Green cycle. `tdd red` prints/returns a `TDD_ADOPTION_PROJECT_WIDE` warning (in a `warnings` array, separate from `diagnostics`) the moment this first cycle is persisted, listing every other still-uncovered mandatory requirement. |
 | `workflow-record <skill> <phase> --status <status>` | Record a compact self-reported workflow declaration |
+| `workflow waiver record <code> --skill <skill> --phase <phase> --recorded-at <timestamp> [--index <n>] --approver <name> --reason <text> --confirm` | Record an audited, bounded downgrade of one declaration-scoped workflow reconciliation diagnostic (`WORKFLOW_SKILL_NOT_INVOKED`, `WORKFLOW_INVOCATION_ORDER`, `WORKFLOW_INVOCATION_INCOMPLETE`, `WORKFLOW_INVOCATION_FAILED`, or `WORKFLOW_INVOCATION_REUSED`) to a non-blocking waived status; a paired `WORKFLOW_BINDING_MISSING` diagnostic sharing the same declaration scope is downgraded together with it. It cannot waive `WORKFLOW_INVOCATION_UNVERIFIED`, which only `workflow-verify` having actually run this session can resolve |
+| `workflow waiver record-all --approver <name> --reason <text> --confirm` | Bulk variant of `workflow waiver record`: waives every currently-outstanding waivable declaration-scoped diagnostic across the whole reconciliation report in one all-or-nothing call, instead of one `record` invocation per diagnostic. Rejects (recording nothing) if any bulk waiver precondition fails first — malformed waiver evidence, an invalid waiver chain, a blank `--approver`/`--reason`, or a `WORKFLOW_INVOCATION_UNVERIFIED` diagnostic (which `workflow-verify` must resolve first; no per-declaration or bulk waiver can substitute for `workflow-verify` never having run). Each waived declaration-scoped diagnostic's paired `WORKFLOW_BINDING_MISSING` is downgraded together with it, identically to the existing single-record command. With zero remaining candidates (already waived, or none present) it succeeds idempotently and records nothing |
 | `workflow-sanitize <copilot.jsonl> <output-file> [--session-id <uuid>]` | Remove messages and non-Skill tool data before review or strict verification |
 | `workflow-verify <copilot.jsonl...> [--strict] [--session-id <uuid>]` | Reconcile Skill events; compatible mode accepts multiple transcript files (concatenated in chronological session order) so declarations whose invocation occurred in an earlier Copilot CLI session can be reconciled; `--strict`/`--session-id` still require exactly one file |
 | `attestation oidc-audience --key-id <id> [--public-key-file <pem>]` | Derive the GitHub custom audience that authorizes a signing key |
 | `attestation payload --provider <name> --run-id <id> --key-id <id> [--public-key-file <pem>] [--github-oidc-token-file <jwt>]` | Emit canonical unsigned CI payload for external signing |
 | `attestation verify` | Verify static-key or GitHub OIDC-authorized Ed25519 provenance |
-| `change-record <CHANGE-ID> <phase> --requirement <REQ-ID...>` | Record ordered artifact/TDD fingerprints for a staged change. `impact`/`requirements`/`design`/`quality` require the change's full requirement ID set; `red`/`implementation`/`green` also accept a proper non-empty subset, recorded as an independent per-requirement batch, so a multi-requirement change can be completed with an interleaved per-requirement Red-Implementation-Green loop instead of one global batch |
+| `change-record <CHANGE-ID> <phase> --requirement <REQ-ID...> [--allow-unchanged] [--dry-run]` | Record ordered artifact/TDD fingerprints for a staged change. `impact`/`requirements`/`design`/`quality` require the change's full requirement ID set; `red`/`implementation`/`green` also accept a proper non-empty subset, recorded as an independent per-requirement batch, so a multi-requirement change can be completed with an interleaved per-requirement Red-Implementation-Green loop instead of one global batch. Rejects with a non-zero exit and a stable `*_UNCHANGED_AT_RECORD` diagnostic (leaving `changes.json`/`order.json` untouched) when a phase's fingerprint is byte-identical to the immediately preceding phase's, since that mistake is otherwise only caught much later by `trace check --strict`/`gate`, at which point the append-only evidence store makes it unfixable. `--allow-unchanged` bypasses this check for the `requirements` phase only (the one case `sdd-change` documents as legitimate: a defect fix that intentionally leaves its requirement unchanged) and persists a durable marker so later validation does not re-flag it. `--dry-run` previews the exact success/rejection outcome, including every existing check, without persisting anything. Each recorded phase/batch stores both `order` (the verified, `gate`-checked logical append sequence from `order.json` — the only field guaranteed correct and monotonic per change) and `recordedAt` (an independently captured wall-clock timestamp with no ordering guarantee relative to `order`); `gate` reports a non-blocking `CHANGE_RECORDEDAT_OUT_OF_ORDER` warning when a change's `recordedAt` values disagree with its `order` sequence |
 | `config lint` | Report configured commands whose `args` reference repository-relative paths that do not exist |
 | `config scaffold` | Propose native test-command entries for detected Go/Rust/Maven/Python/Node toolchains without writing `.musubix/config.json` |
 | `gate [--changed] [--feature <name>]` | Fresh full checks plus actual configured commands; persist evidence. `--feature` scopes requirements/design/trace/tdd/change-history/change-completeness checks to one feature as a diagnostic view; never a substitute for the repository-wide gate |
@@ -901,8 +903,79 @@ artifact identity. Excluding the attestation check from the quality head avoids
 a circular signature dependency. A missing `ci-required` attestation is reported
 as a failed/missing check, never as skipped local evidence.
 
+#### Attestation evidence-head composition
+
+`collectEvidenceHeads` (`packages/analysis/src/attestation.ts`) canonicalizes
+up to ten independent evidence entries into stable per-entry digests. Each
+entry's direct input/projection is:
+
+- `tdd`: the last entry's `recordSha256` from `.musubix/evidence/tdd.json`'s
+  hash chain — a chain-tip digest, not a projection over every recorded
+  phase field.
+- `workflow`: `workflowEvidenceHead`'s projection of
+  `.musubix/evidence/workflow.json`'s `verification` block only
+  (`eventsSha256`, `sourceSha256`, `transcriptSha256`, `mode`, `sessionId`,
+  `exitCode`, `terminalAt`, `eventCount`, `sourceBytes`,
+  `maxTranscriptBytes`, `maximumLineBytes`, `maxTranscriptLineBytes`, and
+  `invocations` (each entry's `skill`/`toolCallId`/`invokedAt`/
+  `completedAt`/`status`, unsorted/order-sensitive as stored), or just
+  `eventsSha256`/`sourceSha256` when `mode`, `transcriptSha256`, and
+  `sessionId` are all absent); the raw `events` log itself is excluded.
+- `changes`: a canonical digest of `.musubix/evidence/changes.json`'s
+  `changes` array directly — not the `.musubix/changes/*.md` documents
+  themselves, which are a separate upstream input to that evidence.
+- `order`: the last entry's `recordSha256` from `.musubix/evidence/order.json`'s
+  records — a chain-tip digest, not a projection over every recorded
+  declaration.
+- `formal`: retains only `fingerprints`, `totalRequirements`,
+  `modeledRequirements`, `modeledFraction`, and the solver's
+  `artifact`/`status`/`result.consistency` from `.musubix/evidence/formal.json`,
+  excluding `generatedAt` and every other `result` field such as solver
+  duration, diagnostics, literals, and constraints.
+- `performance`: `performanceEvidenceHead`'s projection of
+  `.musubix/evidence/performance.json`, retaining per execution
+  `commandName`/`commandSha256`/`reportPath`/`sourceKind`/`processStatus`/
+  `exitCode`/a canonically-sorted `tests` array (each test entry kept in
+  full), and per observation `requirementId`/`testId`/`counter`/`observed`/
+  `maximum`/`status`/an optional `provenance` object retaining exactly
+  `commandName`/`commandSha256`/`reportPath`/`sourceKind`/`testId`/
+  `testStatus`/`counter`/`value`/`processStatus`/`exitCode`; both the
+  `executions` and `observations` arrays are canonicalized
+  order-independently.
+- `mutation`: `mutationEvidenceHead`'s equivalent projection of
+  `.musubix/evidence/mutation.json`, retaining per execution
+  `commandName`/`commandSha256`/`reportPath`/`processStatus`/`exitCode`/a
+  canonically-sorted `mutants` array (each mutant's full record); both the
+  `executions` and nested `mutants` arrays are canonicalized
+  order-independently.
+- `modelCorrespondence`: `modelCorrespondenceEvidenceHead`'s projection of
+  `.musubix/evidence/model-correspondence.json`, retaining `schemaVersion`,
+  `formalEvidenceSha256`, `traceEvidenceSha256`, and a canonically-sorted
+  `entries` array (each retaining `requirementId`/`requirementPath`/
+  `formalSha256`/`modelSha256`/`traceSha256`/a canonically-sorted `tests`
+  array retaining exactly `testId`/`testPath`/`testSha256`/`commandName`/
+  `commandSha256`/`reportPath`, excluding `reportSha256`/`provenanceSha256`);
+  any other stored run metadata is excluded.
+- `quality`: retains `schemaVersion`, `mode`, a derived pass/fail `status`,
+  and each non-`attestation` check's `name`/`required`/`status`/a narrow
+  `diagnostics` projection (`code`/`severity`/`path`/`line`), plus `metrics`
+  with the `attestation.errors` entry excluded; also excludes `generatedAt`,
+  `durationMs`, and `stdout`/`stderr`.
+- `workspace`: not an evidence file at all — a content digest over the
+  non-evidence repository file set returned by `files(root)`, filtered by
+  `evidenceInputPaths`; `.musubix/evidence/**` itself is excluded from this
+  walk so writing evidence never perturbs the workspace snapshot it is
+  bound into.
+
+See `collectEvidenceHeads` and the per-entry head functions it delegates to
+(`workflowEvidenceHead`, `performanceEvidenceHead`, `mutationEvidenceHead`,
+`modelCorrespondenceEvidenceHead`) for the authoritative implementation; this
+list is a summary, not a substitute for reading the source when precision
+matters.
+
 Example strict configuration:
 
+
 ```json
 {
   "attestation": {

package/dist/packages/analysis/src/approval-domains.d.ts

@@ -0,0 +1,22 @@
+import type { ApprovalConfig } from './config.js';
+export interface ResolvedDomain {
+    name: string;
+    features: string[];
+}
+export declare function domainsConfigured(config: ApprovalConfig): boolean;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-002
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-002 REQ-APPROVAL-DOMAIN-SCOPING-003 REQ-APPROVAL-DOMAIN-SCOPING-004
+ * @design DES-APPROVAL-DOMAIN-SCOPING-002
+ */
+export declare function resolveDomains(root: string, config: ApprovalConfig): Promise<ResolvedDomain[]>;
+export declare function domainOwning(resolved: ResolvedDomain[], slug: string): string | null;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-014
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-016
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export declare function featureOwningRequirement(root: string, requirementId: string): Promise<string>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-015
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-017
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export declare function featureOwningDesignFile(file: string): string | null;

package/dist/packages/analysis/src/approval-domains.js

@@ -0,0 +1,75 @@
+import { validateRequirements } from '../../domain/src/index.js';
+import { matchGlob } from './graph.js';
+import { files, readText } from './files.js';
+const featureRequirementsPattern = /^\.musubix\/features\/([^/]+)\/requirements\.md$/;
+const featureDesignPattern = /^\.musubix\/features\/([^/]+)\/design\.md$/;
+export function domainsConfigured(config) {
+    return config.domains.length > 0;
+}
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-002
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-002 REQ-APPROVAL-DOMAIN-SCOPING-003 REQ-APPROVAL-DOMAIN-SCOPING-004
+ * @design DES-APPROVAL-DOMAIN-SCOPING-002
+ */
+export async function resolveDomains(root, config) {
+    const domains = config.domains;
+    if (domains.length === 0)
+        return [];
+    const slugs = [...new Set((await files(root))
+            .map((path) => featureRequirementsPattern.exec(path)?.[1])
+            .filter((slug) => !!slug))].sort();
+    const owners = new Map();
+    for (const slug of slugs) {
+        const matching = domains.filter((domain) => domain.featureGlobs.some((glob) => matchGlob(slug, glob)));
+        owners.set(slug, matching.map((domain) => domain.name).sort());
+    }
+    for (const slug of slugs) {
+        const matching = owners.get(slug);
+        if (matching.length === 0) {
+            throw new Error(`Feature "${slug}" is not owned by any configured approval domain; every feature directory must match exactly one domain's featureGlobs.`);
+        }
+        if (matching.length > 1) {
+            throw new Error(`Feature "${slug}" matches more than one configured approval domain: ${matching.join(', ')}; every feature directory must match exactly one domain.`);
+        }
+    }
+    const resolved = domains.map((domain) => ({
+        name: domain.name,
+        features: slugs.filter((slug) => owners.get(slug)[0] === domain.name).sort(),
+    }));
+    for (const domain of resolved) {
+        if (domain.features.length === 0) {
+            throw new Error(`Approval domain "${domain.name}" matches zero existing feature directories; remove it or add a matching feature.`);
+        }
+    }
+    return resolved;
+}
+export function domainOwning(resolved, slug) {
+    return resolved.find((domain) => domain.features.includes(slug))?.name ?? null;
+}
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-014
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-016
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export async function featureOwningRequirement(root, requirementId) {
+    const paths = (await files(root)).filter((path) => featureRequirementsPattern.test(path));
+    const owners = [];
+    for (const path of paths) {
+        const slug = featureRequirementsPattern.exec(path)[1];
+        const result = validateRequirements(await readText(root, path), path);
+        if (result.value.some((requirement) => requirement.id === requirementId))
+            owners.push(slug);
+    }
+    if (owners.length === 0)
+        throw new Error(`Requirement ${requirementId} was not found in any feature's requirements.md.`);
+    if (owners.length > 1)
+        throw new Error(`Requirement ${requirementId} is defined in more than one feature: ${owners.join(', ')}.`);
+    return owners[0];
+}
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-015
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-017
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export function featureOwningDesignFile(file) {
+    const match = featureDesignPattern.exec(file);
+    return match ? match[1] : null;
+}
+//# sourceMappingURL=approval-domains.js.map

package/dist/packages/analysis/src/approval-domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-domains.js","sourceRoot":"","sources":["../../../../packages/analysis/src/approval-domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AACjE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEvC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAO7C,MAAM,0BAA0B,GAAG,kDAAkD,CAAC;AACtF,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAE1E,MAAM,UAAU,iBAAiB,CAAC,MAAsB;IACtD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;AACnC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,MAAsB;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;aAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;aACzD,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAErD,MAAM,MAAM,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC3C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,MAAoB,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACrH,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,yHAAyH,CAAC,CAAC;QAC7J,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,YAAY,IAAI,uDAAuD,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,0DAA0D,CAAC,CAAC;QACxK,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAqB,OAAO,CAAC,GAAG,CAAC,CAAC,MAAoB,EAAE,EAAE,CAAC,CAAC;QACxE,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE;KAC9E,CAAC,CAAC,CAAC;IAEJ,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,oBAAoB,MAAM,CAAC,IAAI,mFAAmF,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAA0B,EAAE,IAAY;IACnE,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,IAAI,IAAI,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,IAAY,EAAE,aAAqB;IAChF,MAAM,KAAK,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,0BAA0B,CAAC,IAAI,CAAC,IAAI,CAAE,CAAC,CAAC,CAAE,CAAC;QACxD,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;QACtE,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,KAAK,aAAa,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,aAAa,kDAAkD,CAAC,CAAC;IACzH,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,eAAe,aAAa,yCAAyC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClI,OAAO,MAAM,CAAC,CAAC,CAAE,CAAC;AACpB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9C,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAClC,CAAC"}

package/dist/packages/analysis/src/approval-record.d.ts

@@ -1,6 +1,12 @@
+import type { ApprovalConfig } from './config.js';
 import { type ApprovalEvidence, type ApprovalStage } from './approval.js';
 /** @id CODE-HUMAN-APPROVAL-GATES-002
  * @implements REQ-HUMAN-APPROVAL-GATES-001 REQ-HUMAN-APPROVAL-GATES-006
  * @design DES-APPROVAL-002 DES-APPROVAL-003
  */
-export declare function recordApproval(root: string, stage: ApprovalStage, approver: string, expectedArtifactSha256: string): Promise<ApprovalEvidence>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-016
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-005 REQ-APPROVAL-DOMAIN-SCOPING-006 REQ-APPROVAL-DOMAIN-SCOPING-007
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-013 REQ-APPROVAL-DOMAIN-SCOPING-014 REQ-APPROVAL-DOMAIN-SCOPING-015
+ * @design DES-APPROVAL-DOMAIN-SCOPING-004
+ */
+export declare function recordApproval(root: string, stage: ApprovalStage, approver: string, expectedArtifactSha256: string, config: ApprovalConfig, domainName?: string): Promise<ApprovalEvidence>;

package/dist/packages/analysis/src/approval-record.js

@@ -1,11 +1,16 @@
-import { approvalManifest, requireApproval, validateStageArtifacts, } from './approval.js';
+import { approvalManifest, approvalPath, domainsConfigured, requireApproval, requireDomainOption, resolveDomains, validateStageArtifacts, } from './approval.js';
 import { writeJson } from './files.js';
 import { runGate } from './gate.js';
 /** @id CODE-HUMAN-APPROVAL-GATES-002
  * @implements REQ-HUMAN-APPROVAL-GATES-001 REQ-HUMAN-APPROVAL-GATES-006
  * @design DES-APPROVAL-002 DES-APPROVAL-003
  */
-export async function recordApproval(root, stage, approver, expectedArtifactSha256) {
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-016
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-005 REQ-APPROVAL-DOMAIN-SCOPING-006 REQ-APPROVAL-DOMAIN-SCOPING-007
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-013 REQ-APPROVAL-DOMAIN-SCOPING-014 REQ-APPROVAL-DOMAIN-SCOPING-015
+ * @design DES-APPROVAL-DOMAIN-SCOPING-004
+ */
+export async function recordApproval(root, stage, approver, expectedArtifactSha256, config, domainName) {
     const normalizedApprover = approver.trim();
     if (!normalizedApprover || normalizedApprover.includes('\0')) {
         throw new Error('Approver must be a nonempty name without NUL bytes.');
@@ -13,19 +18,28 @@ export async function recordApproval(root, stage, approver, expectedArtifactSha2
     if (!/^[a-f0-9]{64}$/.test(expectedArtifactSha256)) {
         throw new Error('Expected approval artifact SHA-256 must be 64 lowercase hexadecimal characters.');
     }
-    await validateStageArtifacts(root, stage);
-    const requiredApproval = { mode: 'required' };
-    if (stage === 'design' || stage === 'release')
-        await requireApproval(root, 'requirements', requiredApproval);
+    requireDomainOption(config, stage, domainName);
+    const resolved = domainsConfigured(config) ? await resolveDomains(root, config) : [];
+    const domain = domainName ? resolved.find((d) => d.name === domainName) : undefined;
+    await validateStageArtifacts(root, stage, domain);
+    const requiredApproval = { mode: 'required', domains: [] };
+    if (stage === 'design') {
+        await requireApproval(root, 'requirements', requiredApproval, domain);
+    }
     if (stage === 'release') {
-        await requireApproval(root, 'design', requiredApproval);
+        for (const d of resolved) {
+            await requireApproval(root, 'requirements', requiredApproval, d);
+            await requireApproval(root, 'design', requiredApproval, d);
+        }
+        if (!resolved.length)
+            await requireApproval(root, 'design', requiredApproval);
         const quality = await runGate(root);
         const blockers = quality.checks.filter((check) => check.name !== 'approval' && check.required && check.status !== 'pass');
         if (blockers.length) {
             throw new Error(`Release approval requires passing non-approval quality checks: ${blockers.map((check) => check.name).join(', ')}.`);
         }
     }
-    const manifest = await approvalManifest(root, stage);
+    const manifest = await approvalManifest(root, stage, domain);
     if (!Object.keys(manifest.artifacts).length)
         throw new Error(`No artifacts are available for ${stage} approval.`);
     if (manifest.artifactSha256 !== expectedArtifactSha256) {
@@ -37,7 +51,7 @@ export async function recordApproval(root, stage, approver, expectedArtifactSha2
         approver: normalizedApprover,
         approvedAt: new Date().toISOString(),
     };
-    await writeJson(root, `.musubix/evidence/approvals/${stage}.json`, evidence);
+    await writeJson(root, approvalPath(stage, domainName), evidence);
     return evidence;
 }
 //# sourceMappingURL=approval-record.js.map

package/dist/packages/analysis/src/approval-record.js.map

@@ -1 +1 @@
-{"version":3,"file":"approval-record.js","sourceRoot":"","sources":["../../../../packages/analysis/src/approval-record.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAAE,eAAe,EAAE,sBAAsB,GAE1D,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,KAAoB,EACpB,QAAgB,EAChB,sBAA8B;IAE9B,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,sBAAsB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAC1C,MAAM,gBAAgB,GAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9D,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC;IAC7G,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACxD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/C,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kEAAkE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvI,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,YAAY,CAAC,CAAC;IAClH,IAAI,QAAQ,CAAC,cAAc,KAAK,sBAAsB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,gDAAgD,sBAAsB,aAAa,QAAQ,CAAC,cAAc,iDAAiD,CAAC,CAAC;IAC/K,CAAC;IACD,MAAM,QAAQ,GAAqB;QACjC,aAAa,EAAE,CAAC;QAChB,GAAG,QAAQ;QACX,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,EAAE,+BAA+B,KAAK,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC7E,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"approval-record.js","sourceRoot":"","sources":["../../../../packages/analysis/src/approval-record.ts"],"names":[],"mappings":"AACA,OAAO,EACL,gBAAgB,EAAE,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,mBAAmB,EACvF,cAAc,EAAE,sBAAsB,GAEvC,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC;;;GAGG;AACH;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAY,EACZ,KAAoB,EACpB,QAAgB,EAChB,sBAA8B,EAC9B,MAAsB,EACtB,UAAmB;IAEnB,MAAM,kBAAkB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,kBAAkB,IAAI,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACnD,MAAM,IAAI,KAAK,CAAC,iFAAiF,CAAC,CAAC;IACrG,CAAC;IACD,mBAAmB,CAAC,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrF,MAAM,MAAM,GAA+B,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,MAAM,sBAAsB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAClD,MAAM,gBAAgB,GAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC3E,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvB,MAAM,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,eAAe,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;YACjE,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,MAAM;YAAE,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAC9E,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAC/C,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;QAC1E,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,kEAAkE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvI,CAAC;IACH,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,KAAK,YAAY,CAAC,CAAC;IAClH,IAAI,QAAQ,CAAC,cAAc,KAAK,sBAAsB,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,gDAAgD,sBAAsB,aAAa,QAAQ,CAAC,cAAc,iDAAiD,CAAC,CAAC;IAC/K,CAAC;IACD,MAAM,QAAQ,GAAqB;QACjC,aAAa,EAAE,CAAC;QAChB,GAAG,QAAQ;QACX,QAAQ,EAAE,kBAAkB;QAC5B,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,MAAM,SAAS,CAAC,IAAI,EAAE,YAAY,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,QAAQ,CAAC,CAAC;IACjE,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/packages/analysis/src/approval.d.ts

@@ -1,10 +1,14 @@
 import { type Diagnostic } from '../../domain/src/index.js';
 import type { ApprovalConfig } from './config.js';
+import { type ResolvedDomain } from './approval-domains.js';
+export { domainsConfigured, domainOwning, featureOwningDesignFile, featureOwningRequirement, resolveDomains, type ResolvedDomain, } from './approval-domains.js';
 export declare const approvalStages: readonly ["requirements", "design", "release"];
 export type ApprovalStage = typeof approvalStages[number];
 export type ApprovalStatus = 'approved' | 'missing' | 'stale';
 export interface ApprovalManifest {
     stage: ApprovalStage;
+    domain?: string;
+    features?: string[];
     artifacts: Record<string, string>;
     artifactSha256: string;
 }
@@ -15,6 +19,7 @@ export interface ApprovalEvidence extends ApprovalManifest {
 }
 export interface ApprovalStageValidation {
     stage: ApprovalStage;
+    domain?: string;
     required: boolean;
     present: boolean;
     status: ApprovalStatus;
@@ -22,27 +27,84 @@ export interface ApprovalStageValidation {
     currentArtifactSha256: string;
     diagnostics: Diagnostic[];
 }
+export interface DomainApprovalValidation {
+    name: string;
+    stages: ApprovalStageValidation[];
+}
 export interface ApprovalValidation {
     schemaVersion: 1;
     mode: ApprovalConfig['mode'];
     present: boolean;
     valid: boolean;
     stages: ApprovalStageValidation[];
+    domain?: string;
+    domains?: DomainApprovalValidation[];
+    release?: ApprovalStageValidation;
     diagnostics: Diagnostic[];
 }
+export declare function approvalPath(stage: ApprovalStage, domain?: string): string;
 /** @id CODE-HUMAN-APPROVAL-GATES-001
  * @implements REQ-HUMAN-APPROVAL-GATES-001 REQ-HUMAN-APPROVAL-GATES-002 REQ-HUMAN-APPROVAL-GATES-003
  * @implements REQ-HUMAN-APPROVAL-GATES-004 REQ-HUMAN-APPROVAL-GATES-005 REQ-HUMAN-APPROVAL-GATES-006
  * @implements REQ-HUMAN-APPROVAL-GATES-007 REQ-HUMAN-APPROVAL-GATES-008
  * @design DES-APPROVAL-001 DES-APPROVAL-002 DES-APPROVAL-003
  */
-export declare function approvalManifest(root: string, stage: ApprovalStage): Promise<ApprovalManifest>;
-export declare function loadApproval(root: string, stage: ApprovalStage): Promise<ApprovalEvidence | null>;
-export declare function validateApprovalStage(root: string, stage: ApprovalStage, config: ApprovalConfig): Promise<ApprovalStageValidation>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-007
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-011 REQ-APPROVAL-DOMAIN-SCOPING-012 REQ-APPROVAL-DOMAIN-SCOPING-013
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-014 REQ-APPROVAL-DOMAIN-SCOPING-023 REQ-APPROVAL-DOMAIN-SCOPING-024
+ * @design DES-APPROVAL-DOMAIN-SCOPING-003
+ */
+export declare function approvalManifest(root: string, stage: ApprovalStage, domain?: ResolvedDomain): Promise<ApprovalManifest>;
+export declare function loadApproval(root: string, stage: ApprovalStage, domain?: string): Promise<ApprovalEvidence | null>;
+export declare function validateApprovalStage(root: string, stage: ApprovalStage, config: ApprovalConfig, domain?: ResolvedDomain): Promise<ApprovalStageValidation>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-004
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-008 REQ-APPROVAL-DOMAIN-SCOPING-021 REQ-APPROVAL-DOMAIN-SCOPING-022
+ * @design DES-APPROVAL-DOMAIN-SCOPING-004
+ */
 export declare function validateApprovals(root: string, config: ApprovalConfig): Promise<ApprovalValidation>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-008
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-009 REQ-APPROVAL-DOMAIN-SCOPING-010
+ * @design DES-APPROVAL-DOMAIN-SCOPING-004
+ */
+export declare function validateApprovalsForDomain(root: string, config: ApprovalConfig, domainName: string): Promise<ApprovalValidation>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-006
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-019 REQ-APPROVAL-DOMAIN-SCOPING-020
+ * @design DES-APPROVAL-DOMAIN-SCOPING-006
+ */
+export declare function validateApprovalsForFeatureGate(root: string, config: ApprovalConfig, domainName: string): Promise<ApprovalValidation>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-009
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-005 REQ-APPROVAL-DOMAIN-SCOPING-006 REQ-APPROVAL-DOMAIN-SCOPING-007
+ * @design DES-APPROVAL-DOMAIN-SCOPING-004
+ */
+export declare function requireDomainOption(config: ApprovalConfig, stage: ApprovalStage, domain: string | undefined): void;
+export declare function requireValidateDomainOption(config: ApprovalConfig, domain: string | undefined): void;
 /** @id CODE-CLI-WORKFLOW-UX-003
  * @implements REQ-CLI-WORKFLOW-UX-003
  * @design DES-CLI-WORKFLOW-UX-003
  */
-export declare function requireApproval(root: string, stage: ApprovalStage, config: ApprovalConfig): Promise<void>;
-export declare function validateStageArtifacts(root: string, stage: ApprovalStage): Promise<void>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-005
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-016 REQ-APPROVAL-DOMAIN-SCOPING-017 REQ-APPROVAL-DOMAIN-SCOPING-018
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export declare function requireApproval(root: string, stage: ApprovalStage, config: ApprovalConfig, domain?: ResolvedDomain): Promise<void>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-010
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-016 REQ-APPROVAL-DOMAIN-SCOPING-017 REQ-APPROVAL-DOMAIN-SCOPING-018
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export declare function resolveOwningDomainOrThrow(root: string, config: ApprovalConfig, slug: string): Promise<ResolvedDomain | undefined>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-011
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-005 REQ-APPROVAL-DOMAIN-SCOPING-013
+ * @design DES-APPROVAL-DOMAIN-SCOPING-004
+ */
+export declare function resolveNamedDomain(root: string, config: ApprovalConfig, domainName: string): Promise<ResolvedDomain>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-012
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-017
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export declare function resolveDesignFileDomain(root: string, config: ApprovalConfig, file: string): Promise<ResolvedDomain | undefined>;
+/** @id CODE-APPROVAL-DOMAIN-SCOPING-013
+ * @implements REQ-APPROVAL-DOMAIN-SCOPING-016
+ * @design DES-APPROVAL-DOMAIN-SCOPING-005
+ */
+export declare function resolveRequirementDomain(root: string, config: ApprovalConfig, requirementId: string): Promise<ResolvedDomain | undefined>;
+export declare function validateStageArtifacts(root: string, stage: ApprovalStage, domain?: ResolvedDomain): Promise<void>;