spec-controller 0.1.0-alpha.2 → 0.1.0-alpha.4

package/dist/deferralTags.d.ts

@@ -5,8 +5,8 @@
  * established Cucumber deferral conventions.
  *
  * This is **product policy, not a core-domain invariant** — an evolvable list of tag
- * strings, so it lives in the application layer, NOT on the frozen v1 core barrel
- * (@SCN-API-001). The core `parseScenarios` recognises only the deferral set it is
+ * strings, so it lives in the application layer, NOT on the v1 core barrel.
+ * The core `parseScenarios` recognises only the deferral set it is
  * handed (its default is `[]`, a policy-free pure core); the app is the single source
  * of the starter policy and always passes the resolved set (starter ∪ configured) into
  * the parser at the ingest edge. Both `resolveDeferralTags` (the `@SCN-PND-021` config

package/dist/deferralTags.js

@@ -5,8 +5,8 @@
  * established Cucumber deferral conventions.
  *
  * This is **product policy, not a core-domain invariant** — an evolvable list of tag
- * strings, so it lives in the application layer, NOT on the frozen v1 core barrel
- * (@SCN-API-001). The core `parseScenarios` recognises only the deferral set it is
+ * strings, so it lives in the application layer, NOT on the v1 core barrel.
+ * The core `parseScenarios` recognises only the deferral set it is
  * handed (its default is `[]`, a policy-free pure core); the app is the single source
  * of the starter policy and always passes the resolved set (starter ∪ configured) into
  * the parser at the ingest edge. Both `resolveDeferralTags` (the `@SCN-PND-021` config

package/dist/ingest/gherkinValidation.d.ts

@@ -23,11 +23,12 @@
  * PURE: `string → parse errors`. No fs, no process — the file READ lives beside it at the ingest
  * edge, as it does for every other input.
  *
- * WHY IT LIVES IN THE APP, NOT CORE. Core's barrel is the FROZEN v1 contract surface, guarded
- * both directions by @SCN-API-001 — a symbol added there reds CI. This validator is an INGEST
- * concern (it decides whether an input can be read at all), not part of the reconciliation
- * contract downstream consumers build on, so it belongs with the other readers at the app edge
- * and the frozen surface stays untouched.
+ * WHY IT LIVES IN THE APP, NOT CORE. Core's barrel is the v1 contract surface downstream consumers
+ * build on. Since 3F-3449 nothing reds when a symbol is added there — the guard that reconciled it
+ * both directions is gone — so keeping it narrow is a discipline rather than a gate. This validator
+ * is an INGEST concern (it decides whether an input can be read at all), not part of the
+ * reconciliation contract, so it belongs with the other readers at the app edge and the v1 surface
+ * stays untouched.
  */
 /** A Gherkin parse failure: the file could not be read as Gherkin at all. */
 export interface GherkinParseError {

package/dist/ingest/gherkinValidation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gherkinValidation.d.ts","sourceRoot":"","sources":["../../src/ingest/gherkinValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAKH,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAa/E;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;gBAElC,MAAM,EAAE,SAAS,iBAAiB,EAAE;CAUjD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B"}
+{"version":3,"file":"gherkinValidation.d.ts","sourceRoot":"","sources":["../../src/ingest/gherkinValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAKH,6EAA6E;AAC7E,MAAM,WAAW,iBAAiB;IAChC,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAa/E;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;gBAElC,MAAM,EAAE,SAAS,iBAAiB,EAAE;CAUjD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEf,SAAS,EAAE,MAAM;CAK9B"}

package/dist/ingest/gherkinValidation.js

@@ -23,11 +23,12 @@
  * PURE: `string → parse errors`. No fs, no process — the file READ lives beside it at the ingest
  * edge, as it does for every other input.
  *
- * WHY IT LIVES IN THE APP, NOT CORE. Core's barrel is the FROZEN v1 contract surface, guarded
- * both directions by @SCN-API-001 — a symbol added there reds CI. This validator is an INGEST
- * concern (it decides whether an input can be read at all), not part of the reconciliation
- * contract downstream consumers build on, so it belongs with the other readers at the app edge
- * and the frozen surface stays untouched.
+ * WHY IT LIVES IN THE APP, NOT CORE. Core's barrel is the v1 contract surface downstream consumers
+ * build on. Since 3F-3449 nothing reds when a symbol is added there — the guard that reconciled it
+ * both directions is gone — so keeping it narrow is a discipline rather than a gate. This validator
+ * is an INGEST concern (it decides whether an input can be read at all), not part of the
+ * reconciliation contract, so it belongs with the other readers at the app edge and the v1 surface
+ * stays untouched.
  */
 import { AstBuilder, GherkinClassicTokenMatcher, Parser } from "@cucumber/gherkin";
 import { IdGenerator } from "@cucumber/messages";

package/dist/ingest/gherkinValidation.js.map

@@ -1 +1 @@
-{"version":3,"file":"gherkinValidation.js","sourceRoot":"","sources":["../../src/ingest/gherkinValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUjD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc;IACxD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,0BAA0B,EAAE,CAAC,CAAC;IAEhG,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0FAA0F;QAC1F,sFAAsF;QACtF,0FAA0F;QAC1F,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,MAAM,CAA+B;IAE9C,YAAY,MAAoC;QAC9C,KAAK,CACH;YACE,yEAAyE;YACzE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;SAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,8FAA8F;IACrF,SAAS,CAAS;IAE3B,YAAY,SAAiB;QAC3B,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF"}
+{"version":3,"file":"gherkinValidation.js","sourceRoot":"","sources":["../../src/ingest/gherkinValidation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,UAAU,EAAE,0BAA0B,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAUjD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,MAAc;IACxD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,EAAE,IAAI,0BAA0B,EAAE,CAAC,CAAC;IAEhG,IAAI,CAAC;QACH,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0FAA0F;QAC1F,sFAAsF;QACtF,0FAA0F;QAC1F,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,4BAA6B,SAAQ,KAAK;IAC5C,MAAM,CAA+B;IAE9C,YAAY,MAAoC;QAC9C,KAAK,CACH;YACE,yEAAyE;YACzE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC;SAC5D,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,8BAA8B,CAAC;QAC3C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,8FAA8F;IACrF,SAAS,CAAS;IAE3B,YAAY,SAAiB;QAC3B,KAAK,CAAC,gDAAgD,SAAS,EAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC7B,CAAC;CACF"}

package/dist/mutation-ratchet/index.d.ts

@@ -34,12 +34,17 @@
  * several kinds it is not, so it crosses this line under the fuller name. The aliasing is
  * deliberate and one-directional: the internal spelling stays internal.
  *
- * AND NO DRIFT GUARD STANDS OVER IT, WHICH IS A DECISION RATHER THAN AN OPEN QUESTION. The sibling
- * core package's barrel is reflected and compared against a frozen list in both directions, so a
- * symbol quietly added or dropped reds. That is what a PUBLISHED surface is owed, and 3F-2859
- * stopped publishing this one: no manifest key resolves here, and no caller outside this repository
- * can spell the specifier at all. Freezing the list would make every refactor behind this barrel a
- * change to a contract nobody holds.
+ * AND NO DRIFT GUARD STANDS OVER IT, WHICH IS A DECISION RATHER THAN AN OPEN QUESTION. 3F-2859
+ * stopped publishing this barrel: no manifest key resolves here, and no caller outside this
+ * repository can spell the specifier at all. Freezing the list would make every refactor behind it
+ * a change to a contract nobody holds.
+ *
+ * THE COMPARISON THIS PARAGRAPH USED TO DRAW IS GONE, AND SAYING SO IS THE POINT. It read: the
+ * sibling core package's barrel IS reflected and compared against a frozen list in both directions,
+ * so a symbol quietly added or dropped reds — that being what a PUBLISHED surface is owed, and this
+ * one is not published. At 3F-3449 that arm was deleted with the rest of the packaging checks this
+ * repository wrote for itself, so NEITHER barrel is guarded now and the contrast no longer carries
+ * the argument. What still carries it is the second sentence above, which never depended on it.
  */
 export { floorOf, gateRecordFor, killFloorOf, MalformedRecordError, parseGateRecords, RECORD_FILE, type GateRecord as MutationGateRecord, } from "./record.js";
 export { measurementFromReport, readMutationReport, type MutationMeasurement, type MutationReportRead, } from "./report.js";

package/dist/mutation-ratchet/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mutation-ratchet/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EACL,OAAO,EACP,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,KAAK,UAAU,IAAI,kBAAkB,GACtC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/mutation-ratchet/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EACL,OAAO,EACP,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,EACX,KAAK,UAAU,IAAI,kBAAkB,GACtC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,EAClB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,GACxB,MAAM,aAAa,CAAC"}

package/dist/mutation-ratchet/index.js

@@ -34,12 +34,17 @@
  * several kinds it is not, so it crosses this line under the fuller name. The aliasing is
  * deliberate and one-directional: the internal spelling stays internal.
  *
- * AND NO DRIFT GUARD STANDS OVER IT, WHICH IS A DECISION RATHER THAN AN OPEN QUESTION. The sibling
- * core package's barrel is reflected and compared against a frozen list in both directions, so a
- * symbol quietly added or dropped reds. That is what a PUBLISHED surface is owed, and 3F-2859
- * stopped publishing this one: no manifest key resolves here, and no caller outside this repository
- * can spell the specifier at all. Freezing the list would make every refactor behind this barrel a
- * change to a contract nobody holds.
+ * AND NO DRIFT GUARD STANDS OVER IT, WHICH IS A DECISION RATHER THAN AN OPEN QUESTION. 3F-2859
+ * stopped publishing this barrel: no manifest key resolves here, and no caller outside this
+ * repository can spell the specifier at all. Freezing the list would make every refactor behind it
+ * a change to a contract nobody holds.
+ *
+ * THE COMPARISON THIS PARAGRAPH USED TO DRAW IS GONE, AND SAYING SO IS THE POINT. It read: the
+ * sibling core package's barrel IS reflected and compared against a frozen list in both directions,
+ * so a symbol quietly added or dropped reds — that being what a PUBLISHED surface is owed, and this
+ * one is not published. At 3F-3449 that arm was deleted with the rest of the packaging checks this
+ * repository wrote for itself, so NEITHER barrel is guarded now and the contrast no longer carries
+ * the argument. What still carries it is the second sentence above, which never depended on it.
  */
 export { floorOf, gateRecordFor, killFloorOf, MalformedRecordError, parseGateRecords, RECORD_FILE, } from "./record.js";
 export { measurementFromReport, readMutationReport, } from "./report.js";

package/dist/mutation-ratchet/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mutation-ratchet/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EACL,OAAO,EACP,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GAEZ,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,GAGnB,MAAM,aAAa,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/mutation-ratchet/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+CG;AAEH,OAAO,EACL,OAAO,EACP,aAAa,EACb,WAAW,EACX,oBAAoB,EACpB,gBAAgB,EAChB,WAAW,GAEZ,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,qBAAqB,EACrB,kBAAkB,GAGnB,MAAM,aAAa,CAAC"}

package/dist/run-management/resolveRunInputs.d.ts

@@ -6,7 +6,7 @@
  * CLI (cli-balance/cli.ts) calls these once to build the RunContext.
  *
  * Scenarios: @SCN-RPT-001 (the run-provenance slice); the --source-sha override;
- * @SCN-RPT-016 (target-root derivation).
+ * @SCN-RPT-016 (target-root derivation); @SCN-RPT-026 / @SCN-RPT-029 (the tool's own identity).
  */
 /**
  * Resolve the target's source SHA (project design §4). An explicit non-empty
@@ -32,17 +32,30 @@ export interface ToolIdentity {
  * distinct from the TARGET's `sourceSha`. Two facts, one call, threaded to both the
  * report provenance (RunContext) and the run.yaml manifest.
  *
- * **The correctness trap this exists to avoid:** at run time the process cwd is the
- * TARGET repo (reconcile runs there), so a bare `git rev-parse HEAD` would re-record the
- * TARGET's SHA — the exact bug this ticket fixes. So the SHA is read `git -C <the tool's
- * OWN dir>`, derived from `import.meta.url`, never cwd.
+ * **TWO TRAPS, AND THIS DOCBLOCK ONLY NAMED THE FIRST FOR ELEVEN WEEKS** (@SCN-RPT-029,
+ * 3F-3418). Nothing typechecks a comment, and the sentence below — true, and the whole of
+ * what was written here — is what made the second trap read as already-handled.
  *
- * `toolSha` is `git -C <toolDir> rev-parse HEAD` (trimmed), or `null` on any throw — the
- * tool installed as a package with no `.git`, git absent, or an empty answer — mirroring
- * `resolveSourceSha`'s fail-soft. `toolVersion` is read from the tool's own
- * `package.json` (walked up from `toolDir`), or `"unknown"` when none is found — so a run
- * stays attributable by version even when no SHA can be read. `toolDir` /
- * `packageJsonPath` are injectable for the `@unit` teeth (@SCN-RPT-026).
+ * **Trap one, cwd:** at run time the process cwd is the TARGET repo (reconcile runs
+ * there), so a bare `git rev-parse HEAD` would re-record the TARGET's SHA. So the SHA is
+ * read `git -C <the tool's OWN dir>`, derived from `import.meta.url`, never cwd (3F-1916).
+ *
+ * **Trap two, which the `-C` guard could not see:** the tool's own dir is ITSELF inside the
+ * target. For an installed package that dir is `<consumer>/node_modules/…`, which is inside
+ * the consumer's worktree, so `git -C` walks up to the consumer's `.git` and answers with
+ * the consumer's HEAD — being `.gitignore`d makes no difference, git does not stop at
+ * ignored directories. That is not an absent tool SHA, it is a WRONG one, and nothing on
+ * the rendered report distinguishes it from a genuine one. It is also the only case a
+ * consumer ever sees: every adopter installs into a git repository. `resolveToolSha`
+ * therefore answers a `node_modules` SEGMENT before it asks git at all.
+ *
+ * `toolSha` is `null` for a tool resolved out of `node_modules`, and otherwise
+ * `git -C <toolDir> rev-parse HEAD` (trimmed) or `null` on any throw — no `.git` above the
+ * tool, git absent, or an empty answer — mirroring `resolveSourceSha`'s fail-soft.
+ * `toolVersion` is read from the tool's own `package.json` (walked up from `toolDir`), or
+ * `"unknown"` when none is found — so a run stays attributable by version even when no SHA
+ * can be read. `toolDir` / `packageJsonPath` are injectable for the `@unit` teeth
+ * (@SCN-RPT-026, @SCN-RPT-029).
  */
 export declare function resolveToolIdentity(opts?: {
     toolDir?: string;

package/dist/run-management/resolveRunInputs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resolveRunInputs.d.ts","sourceRoot":"","sources":["../../src/run-management/resolveRunInputs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAiBhG;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,mGAAmG;IACnG,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,2FAA2F;IAC3F,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,YAAY,CAQ3G;AA2CD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAerE"}
+{"version":3,"file":"resolveRunInputs.d.ts","sourceRoot":"","sources":["../../src/run-management/resolveRunInputs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAOH;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,GAAG,IAAI,CAiBhG;AAED,gFAAgF;AAChF,MAAM,WAAW,YAAY;IAC3B,mGAAmG;IACnG,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,2FAA2F;IAC3F,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,eAAe,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,YAAY,CAQ3G;AAiED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAerE"}

package/dist/run-management/resolveRunInputs.js

@@ -6,11 +6,11 @@
  * CLI (cli-balance/cli.ts) calls these once to build the RunContext.
  *
  * Scenarios: @SCN-RPT-001 (the run-provenance slice); the --source-sha override;
- * @SCN-RPT-016 (target-root derivation).
+ * @SCN-RPT-016 (target-root derivation); @SCN-RPT-026 / @SCN-RPT-029 (the tool's own identity).
  */
 import { execFileSync } from "node:child_process";
 import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { dirname, join, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 /**
  * Resolve the target's source SHA (project design §4). An explicit non-empty
@@ -44,17 +44,30 @@ export function resolveSourceSha(opts) {
  * distinct from the TARGET's `sourceSha`. Two facts, one call, threaded to both the
  * report provenance (RunContext) and the run.yaml manifest.
  *
- * **The correctness trap this exists to avoid:** at run time the process cwd is the
- * TARGET repo (reconcile runs there), so a bare `git rev-parse HEAD` would re-record the
- * TARGET's SHA — the exact bug this ticket fixes. So the SHA is read `git -C <the tool's
- * OWN dir>`, derived from `import.meta.url`, never cwd.
+ * **TWO TRAPS, AND THIS DOCBLOCK ONLY NAMED THE FIRST FOR ELEVEN WEEKS** (@SCN-RPT-029,
+ * 3F-3418). Nothing typechecks a comment, and the sentence below — true, and the whole of
+ * what was written here — is what made the second trap read as already-handled.
  *
- * `toolSha` is `git -C <toolDir> rev-parse HEAD` (trimmed), or `null` on any throw — the
- * tool installed as a package with no `.git`, git absent, or an empty answer — mirroring
- * `resolveSourceSha`'s fail-soft. `toolVersion` is read from the tool's own
- * `package.json` (walked up from `toolDir`), or `"unknown"` when none is found — so a run
- * stays attributable by version even when no SHA can be read. `toolDir` /
- * `packageJsonPath` are injectable for the `@unit` teeth (@SCN-RPT-026).
+ * **Trap one, cwd:** at run time the process cwd is the TARGET repo (reconcile runs
+ * there), so a bare `git rev-parse HEAD` would re-record the TARGET's SHA. So the SHA is
+ * read `git -C <the tool's OWN dir>`, derived from `import.meta.url`, never cwd (3F-1916).
+ *
+ * **Trap two, which the `-C` guard could not see:** the tool's own dir is ITSELF inside the
+ * target. For an installed package that dir is `<consumer>/node_modules/…`, which is inside
+ * the consumer's worktree, so `git -C` walks up to the consumer's `.git` and answers with
+ * the consumer's HEAD — being `.gitignore`d makes no difference, git does not stop at
+ * ignored directories. That is not an absent tool SHA, it is a WRONG one, and nothing on
+ * the rendered report distinguishes it from a genuine one. It is also the only case a
+ * consumer ever sees: every adopter installs into a git repository. `resolveToolSha`
+ * therefore answers a `node_modules` SEGMENT before it asks git at all.
+ *
+ * `toolSha` is `null` for a tool resolved out of `node_modules`, and otherwise
+ * `git -C <toolDir> rev-parse HEAD` (trimmed) or `null` on any throw — no `.git` above the
+ * tool, git absent, or an empty answer — mirroring `resolveSourceSha`'s fail-soft.
+ * `toolVersion` is read from the tool's own `package.json` (walked up from `toolDir`), or
+ * `"unknown"` when none is found — so a run stays attributable by version even when no SHA
+ * can be read. `toolDir` / `packageJsonPath` are injectable for the `@unit` teeth
+ * (@SCN-RPT-026, @SCN-RPT-029).
  */
 export function resolveToolIdentity(opts = {}) {
     const toolDir = opts.toolDir !== undefined && opts.toolDir.trim() !== ""
@@ -65,8 +78,31 @@ export function resolveToolIdentity(opts = {}) {
         toolVersion: resolveToolVersion(opts.packageJsonPath ?? findPackageJson(toolDir)),
     };
 }
-/** The tool's own git HEAD, read `-C <toolDir>` (never cwd), null on any throw. */
+/**
+ * The tool's own git HEAD, read `-C <toolDir>` (never cwd), null on any throw — and null
+ * without asking at all for a tool resolved out of `node_modules` (@SCN-RPT-029).
+ *
+ * A SEGMENT, NEVER A SUBSTRING. A directory honestly named `my_node_modules_backup` is not an
+ * install, and a checkout living under a directory literally named `node_modules` reporting null is
+ * the pathological trade every tool making this distinction takes.
+ *
+ * `sep`, NOT A REGEX OVER BOTH SEPARATORS. `[/\\]` would carry a branch no arm on this platform can
+ * reach, so a mutant deleting its second half would survive the mutation gate while nothing was
+ * worse. `sep` is what `fileURLToPath` produces on each platform, which is the only thing `toolDir`
+ * is ever built from.
+ *
+ * IT ANSWERS BEFORE THE `try`, NOT INSIDE IT. Returning null from a thrown git read and returning
+ * null because the tool is an install are the same recorded answer and not the same fact, and only
+ * the first of them is allowed to depend on git being present.
+ *
+ * WHAT IT DOES NOT CLAIM. Under `--preserve-symlinks` Node reports the symlink path rather than the
+ * realpath, so a linked development checkout would carry a `node_modules` segment and report null.
+ * That is a strictly safer wrong answer than today's, nothing in this repository passes the flag,
+ * and no arm covers it — named rather than guarded.
+ */
 function resolveToolSha(toolDir) {
+    if (toolDir.split(sep).includes("node_modules"))
+        return null;
     try {
         const out = execFileSync("git", ["-C", toolDir, "rev-parse", "HEAD"], {
             encoding: "utf8",

package/dist/run-management/resolveRunInputs.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveRunInputs.js","sourceRoot":"","sources":["../../src/run-management/resolveRunInputs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgD;IAC/E,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;YACtE,CAAC,CAAC,IAAI,CAAC,SAAS;YAChB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;YAChE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuD,EAAE;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACtE,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;KAClF,CAAC;AACJ,CAAC;AAED,mFAAmF;AACnF,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;YACpE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6GAA6G;AAC7G,SAAS,kBAAkB,CAAC,eAA8B;IACxD,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAA0B,CAAC;QACvF,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE;YACjF,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"resolveRunInputs.js","sourceRoot":"","sources":["../../src/run-management/resolveRunInputs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgD;IAC/E,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;YACtE,CAAC,CAAC,IAAI,CAAC,SAAS;YAChB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;YAChE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuD,EAAE;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACtE,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;KAClF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;YACpE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6GAA6G;AAC7G,SAAS,kBAAkB,CAAC,eAA8B;IACxD,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAA0B,CAAC;QACvF,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE;YACjF,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spec-controller",
-  "version": "0.1.0-alpha.2",
+  "version": "0.1.0-alpha.4",
   "description": "Reconcile the behaviour your scenarios name against the evidence that actually ran — the deterministic `balance` CLI.",
   "keywords": [
     "reconciliation",
@@ -10,11 +10,6 @@
     "double-entry",
     "cli"
   ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/3f-consulting/spec-controller.git",
-    "directory": "packages/spec-controller"
-  },
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -30,7 +25,7 @@
     "@cucumber/gherkin": "^41.0.0",
     "@cucumber/messages": "^34.0.1",
     "yaml": "^2.9.0",
-    "@3f-consulting/spec-controller-core": "0.1.0-alpha.2"
+    "@3f-consulting/spec-controller-core": "0.1.0-alpha.4"
   },
   "publishConfig": {
     "access": "public"