spec-controller 0.1.0-alpha.9 → 0.1.0

package/dist/run-management/resolveRunInputs.js

@@ -1,74 +1,16 @@
-/**
- * Resolve a run's git-derived inputs — the target's source SHA and repo root. The
- * IMPURE half of the old run/runContext.ts: both shell out to `git` over the
- * target tree, so they live in the app's run-management layer, apart from the pure
- * provenance projection (packages/core/src/provenance/provenance.ts) they feed. The
- * CLI (cli-balance/cli.ts) calls these once to build the RunContext.
- *
- * Scenarios: @SCN-RPT-001 (the run-provenance slice); the --source-sha override;
- * @SCN-RPT-016 (target-root derivation); @SCN-RPT-026 / @SCN-RPT-029 (the tool's own identity).
- */
 import { execFileSync } from "node:child_process";
 import { readFileSync } from "node:fs";
 import { dirname, join, sep } from "node:path";
 import { fileURLToPath } from "node:url";
-/**
- * Resolve the target's source SHA (project design §4). An explicit non-empty
- * `sourceSha` wins — the override for non-git / zip / detached-HEAD targets (the
- * --source-sha flag). Otherwise `git -C <targetDir> rev-parse HEAD` (trimmed) as a
- * READ-ONLY pure read. On any throw —
- * a non-git target, git absent, an empty answer — resolve to `null` ("unknown")
- * rather than crashing. `targetDir` = dirname(--features) when given, else cwd.
- */
 export function resolveSourceSha(opts) {
     if (opts.sourceSha !== undefined && opts.sourceSha.trim() !== "") {
         return opts.sourceSha.trim();
     }
-    try {
-        const dir = opts.targetDir !== undefined && opts.targetDir.trim() !== ""
-            ? opts.targetDir
-            : process.cwd();
-        const out = execFileSync("git", ["-C", dir, "rev-parse", "HEAD"], {
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
-        });
-        const sha = out.trim();
-        return sha === "" ? null : sha;
-    }
-    catch {
-        return null;
-    }
+    const dir = opts.targetDir !== undefined && opts.targetDir.trim() !== ""
+        ? opts.targetDir
+        : undefined;
+    return readGit(dir, ["rev-parse", "HEAD"]);
 }
-/**
- * Resolve the TOOL's own identity (3F-1916) — which spec-controller produced this run,
- * distinct from the TARGET's `sourceSha`. Two facts, one call, threaded to both the
- * report provenance (RunContext) and the run.yaml manifest.
- *
- * **TWO TRAPS, AND THIS DOCBLOCK ONLY NAMED THE FIRST FOR ELEVEN WEEKS** (@SCN-RPT-029,
- * 3F-3418). Nothing typechecks a comment, and the sentence below — true, and the whole of
- * what was written here — is what made the second trap read as already-handled.
- *
- * **Trap one, cwd:** at run time the process cwd is the TARGET repo (reconcile runs
- * there), so a bare `git rev-parse HEAD` would re-record the TARGET's SHA. So the SHA is
- * read `git -C <the tool's OWN dir>`, derived from `import.meta.url`, never cwd (3F-1916).
- *
- * **Trap two, which the `-C` guard could not see:** the tool's own dir is ITSELF inside the
- * target. For an installed package that dir is `<consumer>/node_modules/…`, which is inside
- * the consumer's worktree, so `git -C` walks up to the consumer's `.git` and answers with
- * the consumer's HEAD — being `.gitignore`d makes no difference, git does not stop at
- * ignored directories. That is not an absent tool SHA, it is a WRONG one, and nothing on
- * the rendered report distinguishes it from a genuine one. It is also the only case a
- * consumer ever sees: every adopter installs into a git repository. `resolveToolSha`
- * therefore answers a `node_modules` SEGMENT before it asks git at all.
- *
- * `toolSha` is `null` for a tool resolved out of `node_modules`, and otherwise
- * `git -C <toolDir> rev-parse HEAD` (trimmed) or `null` on any throw — no `.git` above the
- * tool, git absent, or an empty answer — mirroring `resolveSourceSha`'s fail-soft.
- * `toolVersion` is read from the tool's own `package.json` (walked up from `toolDir`), or
- * `"unknown"` when none is found — so a run stays attributable by version even when no SHA
- * can be read. `toolDir` / `packageJsonPath` are injectable for the `@unit` teeth
- * (@SCN-RPT-026, @SCN-RPT-029).
- */
 export function resolveToolIdentity(opts = {}) {
     const toolDir = opts.toolDir !== undefined && opts.toolDir.trim() !== ""
         ? opts.toolDir
@@ -78,44 +20,11 @@ export function resolveToolIdentity(opts = {}) {
         toolVersion: resolveToolVersion(opts.packageJsonPath ?? findPackageJson(toolDir)),
     };
 }
-/**
- * The tool's own git HEAD, read `-C <toolDir>` (never cwd), null on any throw — and null
- * without asking at all for a tool resolved out of `node_modules` (@SCN-RPT-029).
- *
- * A SEGMENT, NEVER A SUBSTRING. A directory honestly named `my_node_modules_backup` is not an
- * install, and a checkout living under a directory literally named `node_modules` reporting null is
- * the pathological trade every tool making this distinction takes.
- *
- * `sep`, NOT A REGEX OVER BOTH SEPARATORS. `[/\\]` would carry a branch no arm on this platform can
- * reach, so a mutant deleting its second half would survive the mutation gate while nothing was
- * worse. `sep` is what `fileURLToPath` produces on each platform, which is the only thing `toolDir`
- * is ever built from.
- *
- * IT ANSWERS BEFORE THE `try`, NOT INSIDE IT. Returning null from a thrown git read and returning
- * null because the tool is an install are the same recorded answer and not the same fact, and only
- * the first of them is allowed to depend on git being present.
- *
- * WHAT IT DOES NOT CLAIM. Under `--preserve-symlinks` Node reports the symlink path rather than the
- * realpath, so a linked development checkout would carry a `node_modules` segment and report null.
- * That is a strictly safer wrong answer than today's, nothing in this repository passes the flag,
- * and no arm covers it — named rather than guarded.
- */
 function resolveToolSha(toolDir) {
     if (toolDir.split(sep).includes("node_modules"))
         return null;
-    try {
-        const out = execFileSync("git", ["-C", toolDir, "rev-parse", "HEAD"], {
-            encoding: "utf8",
-            stdio: ["ignore", "pipe", "ignore"],
-        });
-        const sha = out.trim();
-        return sha === "" ? null : sha;
-    }
-    catch {
-        return null;
-    }
+    return readGit(toolDir, ["rev-parse", "HEAD"]);
 }
-/** Read the `version` from a package.json, or "unknown" when the path is null / unreadable / versionless. */
 function resolveToolVersion(packageJsonPath) {
     if (packageJsonPath === null)
         return "unknown";
@@ -127,7 +36,6 @@ function resolveToolVersion(packageJsonPath) {
         return "unknown";
     }
 }
-/** Walk up from a dir to the nearest package.json, or null when the filesystem root is reached. */
 function findPackageJson(fromDir) {
     let dir = fromDir;
     for (;;) {
@@ -144,37 +52,25 @@ function findPackageJson(fromDir) {
         }
     }
 }
-/**
- * Resolve the TARGET repo root — the root the recorded input paths (`presentInputs`)
- * and the evidence-observation locators (`countRuntimeEvidenceObservationKinds`) are both made
- * portable against (@SCN-RPT-016). The bug it fixes: the prior CLI relativized
- * against `process.cwd()` — the TOOL's own repo — so a cross-repo reconcile
- * (cwd ≠ target) kept the target's absolute paths (they aren't under cwd → the
- * "absolute-not-under-root" branch of `relativizeToRoot` → leaked verbatim).
- *
- * The rule (mirrors `resolveSourceSha`'s targetDir derivation): the root is derived from
- * the TARGET, never the run cwd — the git top-level of `dirname(--features)` when the
- * target is a git repo (the robust case: `--features` may sit in a nested dir), else
- * `dirname(--features)` itself (a non-git target — a zip / extracted tree), else
- * `process.cwd()` for a self-reconcile with no `--features` (the legacy cwd = target
- * assumption, preserved as the fallback). A READ-ONLY `git -C … rev-parse --show-toplevel`
- * (read-only-target-safe); any throw falls back to `dirname(--features)`.
- */
 export function resolveTargetRoot(opts) {
     if (opts.features === undefined || opts.features.trim() === "") {
         return process.cwd();
     }
     const targetDir = dirname(opts.features);
+    return readGit(targetDir, ["rev-parse", "--show-toplevel"]) ?? targetDir;
+}
+// An undefined dir means the working directory. It is read inside the try because
+// process.cwd() throws once that directory is removed, which must read as no output.
+function readGit(dir, args) {
     try {
-        const out = execFileSync("git", ["-C", targetDir, "rev-parse", "--show-toplevel"], {
+        const out = execFileSync("git", ["-C", dir ?? process.cwd(), ...args], {
             encoding: "utf8",
             stdio: ["ignore", "pipe", "ignore"],
         });
-        const root = out.trim();
-        return root === "" ? targetDir : root;
+        return out.trim() || null;
     }
     catch {
-        return targetDir;
+        return null;
     }
 }
 //# sourceMappingURL=resolveRunInputs.js.map

package/dist/run-management/resolveRunInputs.js.map

@@ -1 +1 @@
-{"version":3,"file":"resolveRunInputs.js","sourceRoot":"","sources":["../../src/run-management/resolveRunInputs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAgD;IAC/E,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;YACtE,CAAC,CAAC,IAAI,CAAC,SAAS;YAChB,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC;QAClB,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;YAChE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAUD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuD,EAAE;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACtE,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;KAClF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE;YACpE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACvB,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6GAA6G;AAC7G,SAAS,kBAAkB,CAAC,eAA8B;IACxD,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAA0B,CAAC;QACvF,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,iBAAiB,CAAC,EAAE;YACjF,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACxB,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}
+{"version":3,"file":"resolveRunInputs.js","sourceRoot":"","sources":["../../src/run-management/resolveRunInputs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,MAAM,UAAU,gBAAgB,CAAC,IAAgD;IAC/E,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QACtE,CAAC,CAAC,IAAI,CAAC,SAAS;QAChB,CAAC,CAAC,SAAS,CAAC;IACd,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7C,CAAC;AAOD,MAAM,UAAU,mBAAmB,CAAC,OAAuD,EAAE;IAC3F,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE;QACtE,CAAC,CAAC,IAAI,CAAC,OAAO;QACd,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,OAAO;QACL,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC,eAAe,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;KAClF,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,kBAAkB,CAAC,eAA8B;IACxD,IAAI,eAAe,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,eAAe,EAAE,MAAM,CAAC,CAA0B,CAAC;QACvF,OAAO,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,IAAI,GAAG,GAAG,OAAO,CAAC;IAClB,SAAS,CAAC;QACR,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC5C,IAAI,CAAC;YACH,YAAY,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YAChC,OAAO,SAAS,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;YAC5B,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,IAAI,CAAC;YAChC,GAAG,GAAG,MAAM,CAAC;QACf,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,IAA2B;IAC3D,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IACvB,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzC,OAAO,OAAO,CAAC,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,IAAI,SAAS,CAAC;AAC3E,CAAC;AAED,kFAAkF;AAClF,qFAAqF;AACrF,SAAS,OAAO,CAAC,GAAuB,EAAE,IAAuB;IAC/D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE;YACrE,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/storedRun.d.ts

@@ -0,0 +1,6 @@
+import { type CommandSpec } from "./cli-registry.js";
+import type { HostInvocation } from "./host.js";
+export declare function dispatchesUnstored(inv: HostInvocation): boolean;
+export declare function storedReRenderRefusal(inv: HostInvocation): string | undefined;
+export declare function unstoredRunIdRefusal(inv: HostInvocation, commands?: readonly CommandSpec[]): string | undefined;
+//# sourceMappingURL=storedRun.d.ts.map

package/dist/storedRun.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storedRun.d.ts","sourceRoot":"","sources":["../src/storedRun.ts"],"names":[],"mappings":"AACA,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAGhD,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAE/D;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,MAAM,GAAG,SAAS,CAS7E;AAED,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,cAAc,EACnB,QAAQ,GAAE,SAAS,WAAW,EAAyB,GACtD,MAAM,GAAG,SAAS,CAQpB"}

package/dist/storedRun.js

@@ -0,0 +1,27 @@
+import { asksForHelp } from "./cli-args.js";
+import { cliRegistry } from "./cli-registry.js";
+import { APP_MESSAGES, AppMessage } from "./messages.js";
+export function dispatchesUnstored(inv) {
+    return inv.store === undefined || asksForHelp(inv.commandArgs);
+}
+export function storedReRenderRefusal(inv) {
+    if (inv.command !== "balance" || asksForHelp(inv.commandArgs))
+        return undefined;
+    if (!inv.commandArgs.includes("--render-from-json"))
+        return undefined;
+    const given = [inv.store === undefined ? [] : ["--store"], inv.runId === undefined ? [] : ["--run-id"]].flat();
+    if (given.length === 0)
+        return undefined;
+    return (`${APP_MESSAGES[AppMessage.HostUsageError](APP_MESSAGES[AppMessage.ReRenderNotStored](given.join(", ")))}\n` +
+        APP_MESSAGES[given.length === 1 ? AppMessage.ReRenderWithoutIt : AppMessage.ReRenderWithoutThem]());
+}
+export function unstoredRunIdRefusal(inv, commands = cliRegistry.commands) {
+    if (inv.runId === undefined || inv.store !== undefined || asksForHelp(inv.commandArgs))
+        return undefined;
+    const entry = commands.find((command) => command.name === inv.command);
+    if (entry === undefined || entry.acceptsHostModifiers === false)
+        return undefined;
+    return (`${APP_MESSAGES[AppMessage.HostUsageError](APP_MESSAGES[AppMessage.RunIdWithoutStore](inv.runId))}\n` +
+        APP_MESSAGES[AppMessage.KeepRunUnderName](entry.name));
+}
+//# sourceMappingURL=storedRun.js.map

package/dist/storedRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storedRun.js","sourceRoot":"","sources":["../src/storedRun.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAoB,MAAM,mBAAmB,CAAC;AAElE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEzD,MAAM,UAAU,kBAAkB,CAAC,GAAmB;IACpD,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;AACjE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,GAAmB;IACvD,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IAChF,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAAE,OAAO,SAAS,CAAC;IACtE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,CACL,GAAG,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QAC5G,YAAY,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,EAAE,CACnG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,GAAmB,EACnB,WAAmC,WAAW,CAAC,QAAQ;IAEvD,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC;QAAE,OAAO,SAAS,CAAC;IACzG,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,oBAAoB,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAClF,OAAO,CACL,GAAG,YAAY,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI;QACrG,YAAY,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CACtD,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spec-controller",
-  "version": "0.1.0-alpha.9",
+  "version": "0.1.0",
   "description": "Reconcile the behaviour your scenarios name against the evidence that actually ran — the deterministic `balance` CLI.",
   "keywords": [
     "reconciliation",
@@ -25,7 +25,7 @@
     "@cucumber/gherkin": "^41.0.0",
     "@cucumber/messages": "^34.0.1",
     "yaml": "^2.9.0",
-    "@3f-consulting/spec-controller-core": "0.1.0-alpha.9"
+    "@3f-consulting/spec-controller-core": "0.1.0"
   },
   "publishConfig": {
     "access": "public"

package/dist/corpus/cli.d.ts

@@ -1,34 +0,0 @@
-/**
- * The `tags` command — `spec-controller tags`, the `@SCN` scheme policing itself over a
- * target's Gherkin corpus.
- *
- * THIS EDGE OWNS ONLY THE READS. The rule is `corpusFaults`, in core, reached through the ROOT
- * barrel and nothing else: `./internal` is dropped by `publishConfig.exports` at pack time, and
- * this module travels in the tarball. That is not a style preference — an installed
- * `balance --help` once threw ERR_PACKAGE_PATH_NOT_EXPORTED behind thirteen green gates because a
- * published module reached that subpath (3F-3086). So what happens here is: discover the corpus,
- * read the manifest, build the mutation-record reader, hand over the bytes.
- *
- * ITS OWN COMMAND RATHER THAN A `balance` FLAG. `balance`'s exit code IS its verdict — 0
- * balanced, 1 out of balance, 3 pending-under-strict, 4 unsound, 5 nothing to reconcile — and a
- * corpus FAULT is not a reconciliation verdict. A flag would either overload one of those codes or
- * add a further meaning to a status a consumer's CI branches on. A second command costs one registry entry and gives
- * the fault its own ladder:
- *
- *   0 — the corpus obeys the scheme.
- *   1 — findings; the corpus was read and it breaks a rule.
- *   2 — the corpus (or the manifest) could not be READ at all. Not a verdict, because nothing was
- *       concluded. Sibling to @SCN-CLI-014/015/016 on `balance`, and the same argument: an input
- *       the tool cannot read is a usage error, never a verdict.
- *
- * Usage:
- *   spec-controller tags [--features <dir>] [--package-json <path>]
- */
-/**
- * Police a target's corpus against the `@SCN` scheme's own rules.
- *
- * `process.exitCode` RATHER THAN `process.exit`, so whatever has been written is flushed intact
- * rather than truncated mid-write — the convention `balance`'s own gate settled on.
- */
-export declare function runTags(argv: string[]): void;
-//# sourceMappingURL=cli.d.ts.map

package/dist/corpus/cli.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/corpus/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AA8DH;;;;;GAKG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAiD5C"}

package/dist/corpus/cli.js

@@ -1,125 +0,0 @@
-/**
- * The `tags` command — `spec-controller tags`, the `@SCN` scheme policing itself over a
- * target's Gherkin corpus.
- *
- * THIS EDGE OWNS ONLY THE READS. The rule is `corpusFaults`, in core, reached through the ROOT
- * barrel and nothing else: `./internal` is dropped by `publishConfig.exports` at pack time, and
- * this module travels in the tarball. That is not a style preference — an installed
- * `balance --help` once threw ERR_PACKAGE_PATH_NOT_EXPORTED behind thirteen green gates because a
- * published module reached that subpath (3F-3086). So what happens here is: discover the corpus,
- * read the manifest, build the mutation-record reader, hand over the bytes.
- *
- * ITS OWN COMMAND RATHER THAN A `balance` FLAG. `balance`'s exit code IS its verdict — 0
- * balanced, 1 out of balance, 3 pending-under-strict, 4 unsound, 5 nothing to reconcile — and a
- * corpus FAULT is not a reconciliation verdict. A flag would either overload one of those codes or
- * add a further meaning to a status a consumer's CI branches on. A second command costs one registry entry and gives
- * the fault its own ladder:
- *
- *   0 — the corpus obeys the scheme.
- *   1 — findings; the corpus was read and it breaks a rule.
- *   2 — the corpus (or the manifest) could not be READ at all. Not a verdict, because nothing was
- *       concluded. Sibling to @SCN-CLI-014/015/016 on `balance`, and the same argument: an input
- *       the tool cannot read is a usage error, never a verdict.
- *
- * Usage:
- *   spec-controller tags [--features <dir>] [--package-json <path>]
- */
-import { existsSync, readFileSync } from "node:fs";
-import { corpusFaults } from "@3f-consulting/spec-controller-core";
-import { cliRegistry, renderCommandHelp } from "../cli-registry.js";
-import { checkUnknownFlags, parseArgs } from "../cli-args.js";
-import { DEFAULT_DEFERRAL_TAGS } from "../deferralTags.js";
-import { UnreadableFeatureCorpusError } from "../ingest/gherkinValidation.js";
-import { discoverFeatures } from "../ingest/ingestScenarios.js";
-import { resolveToolIdentity } from "../run-management/resolveRunInputs.js";
-/**
- * Read everything the rule takes, or say why it could not be read.
- *
- * ONE PLACE, ONE STATUS, because it is one Rule. A corpus the Gherkin parser rejects, a features
- * directory that is not there, and a manifest that is not JSON are three spellings of "the tool
- * could not read its input" — and every one of them, left to escape, lands on Node's default exit
- * 1, which is this command's code for FINDINGS. A crashed invocation would then be
- * indistinguishable by status from a corpus that genuinely breaks a rule, which is exactly the
- * collision 3F-1742 closed on `balance`.
- *
- * THE PARSE REFUSAL IS INHERITED, NOT RESTATED (@SCN-GPG-001). `discoverFeatures` refuses a corpus
- * cucumber could not run rather than returning one, so this command gets that refusal by going
- * through the shared discovery — the same way `balance` does — and what is left here is turning
- * it into this command's status. Its message carries the parser's own words verbatim.
- *
- * THE SOURCES ARE READ HERE because the rule is pure and takes bytes. `DiscoveredFeature` carries
- * the header code and the scenario ids but not the file's text, and the grammar rules that follow
- * this one need the text to walk the tags.
- */
-function readCorpusInputs(featuresDir, manifestPath) {
-    try {
-        const discovered = featuresDir === undefined ? discoverFeatures() : discoverFeatures(featuresDir);
-        return {
-            ok: true,
-            features: discovered.map((f) => ({
-                slug: f.slug,
-                featureCode: f.featureCode,
-                source: readFileSync(f.path, "utf8"),
-            })),
-            packageJson: existsSync(manifestPath)
-                ? JSON.parse(readFileSync(manifestPath, "utf8"))
-                : {},
-        };
-    }
-    catch (err) {
-        if (err instanceof UnreadableFeatureCorpusError)
-            return { ok: false, error: err.message };
-        const failure = err instanceof Error ? err.message : String(err);
-        return { ok: false, error: `The corpus could not be read: ${failure}` };
-    }
-}
-/**
- * Police a target's corpus against the `@SCN` scheme's own rules.
- *
- * `process.exitCode` RATHER THAN `process.exit`, so whatever has been written is flushed intact
- * rather than truncated mid-write — the convention `balance`'s own gate settled on.
- */
-export function runTags(argv) {
-    // Answer `--help`/`-h` from the registry BEFORE any parse, so it never falls through as a stray
-    // flag while the command runs anyway. The registry is the single source, so a flag that exists
-    // is a flag that appears in help — there is no hand-kept list here to drift.
-    if (argv.includes("--help") || argv.includes("-h")) {
-        process.stdout.write(renderCommandHelp(cliRegistry, "tags") + "\n");
-        return;
-    }
-    const args = parseArgs(argv);
-    // Registry-bounded parse (@SCN-CLI-009's rule, applied to this command's own scope): `tags`
-    // accepts ONLY the flags its registry entry lists. By construction, not by assertion — the
-    // helper is the one `balance` uses, given this command's name.
-    const unknownFlagError = checkUnknownFlags(args, cliRegistry, "tags", resolveToolIdentity().toolVersion);
-    if (unknownFlagError) {
-        process.stderr.write(unknownFlagError + "\n");
-        process.exitCode = 2;
-        return;
-    }
-    // `--package-json` defaults to the manifest at the cwd, matching `balance`'s default: the
-    // target is the tree you are standing in unless you say otherwise.
-    const inputs = readCorpusInputs(args["features"], args["package-json"] ?? "package.json");
-    if (!inputs.ok) {
-        process.stderr.write(inputs.error + "\n");
-        process.exitCode = 2;
-        return;
-    }
-    const faults = corpusFaults({
-        features: inputs.features,
-        packageJson: inputs.packageJson,
-        // The STARTER deferral set — the application layer's own policy, which a target's config may
-        // only extend. Single-sourced here for the reason the reconcile composition takes it as a
-        // parameter: which words the community recognises is the product's answer, not the engine's.
-        deferralTags: DEFAULT_DEFERRAL_TAGS,
-    });
-    if (faults.length === 0) {
-        process.stdout.write("tags: OK — every feature code names one feature file, and every tag on the corpus obeys the @SCN scheme's own rules.\n");
-        return;
-    }
-    process.stderr.write(`tags: FAILED — ${faults.length} finding(s):\n`);
-    for (const fault of faults)
-        process.stderr.write(`  ${fault.message}\n`);
-    process.exitCode = 1;
-}
-//# sourceMappingURL=cli.js.map

package/dist/corpus/cli.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cli.js","sourceRoot":"","sources":["../../src/corpus/cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEnD,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AAEnE,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC9D,OAAO,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAC3D,OAAO,EAAE,4BAA4B,EAAE,MAAM,gCAAgC,CAAC;AAC9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,uCAAuC,CAAC;AAW5E;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAS,gBAAgB,CAAC,WAA+B,EAAE,YAAoB;IAC7E,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAClG,OAAO;YACL,EAAE,EAAE,IAAI;YACR,QAAQ,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC/B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC;aACrC,CAAC,CAAC;YACH,WAAW,EAAE,UAAU,CAAC,YAAY,CAAC;gBACnC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAA6B;gBAC7E,CAAC,CAAC,EAAE;SACP,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,4BAA4B;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC1F,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAiC,OAAO,EAAE,EAAE,CAAC;IAC1E,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,IAAc;IACpC,gGAAgG;IAChG,+FAA+F;IAC/F,6EAA6E;IAC7E,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC;QACpE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAE7B,4FAA4F;IAC5F,2FAA2F;IAC3F,+DAA+D;IAC/D,MAAM,gBAAgB,GAAG,iBAAiB,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,WAAW,CAAC,CAAC;IACzG,IAAI,gBAAgB,EAAE,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAAC;QAC9C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,0FAA0F;IAC1F,mEAAmE;IACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,CAAC;IAC1F,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,6FAA6F;QAC7F,0FAA0F;QAC1F,6FAA6F;QAC7F,YAAY,EAAE,qBAAqB;KACpC,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wHAAwH,CACzH,CAAC;QACF,OAAO;IACT,CAAC;IAED,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,MAAM,CAAC,MAAM,gBAAgB,CAAC,CAAC;IACtE,KAAK,MAAM,KAAK,IAAI,MAAM;QAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC;IACzE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AACvB,CAAC"}