specproof 0.1.0

package/.github/workflows/release.yml

@@ -0,0 +1,50 @@
+name: 🚀 Release
+
+on:
+  push:
+    branches: main
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  id-token: write # npm provenance
+
+jobs:
+  publish:
+    name: 🚀 Publish to npm
+    runs-on: ubuntu-latest
+
+    env:
+      NPM_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+    steps:
+      - name: 📥 Checkout code
+        uses: actions/checkout@v5
+
+      - name: 🟢 Setup Node
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          registry-url: https://registry.npmjs.org
+
+      - name: 🔎 Skip if this version is already on npm
+        id: check
+        run: |
+          NAME=$(node -p "require('./package.json').name")
+          VERSION=$(node -p "require('./package.json').version")
+          if npm view "$NAME@$VERSION" version >/dev/null 2>&1; then
+            echo "::notice::$NAME@$VERSION is already published — nothing to do"
+            echo "published=true" >> "$GITHUB_OUTPUT"
+          else
+            echo "published=false" >> "$GITHUB_OUTPUT"
+          fi
+
+      - name: ⚠️ Warn when NPM_TOKEN is missing
+        if: steps.check.outputs.published == 'false' && env.NPM_TOKEN == ''
+        run: echo "::warning::NPM_TOKEN secret is not set — skipping npm publish. Add it under Settings → Secrets and variables → Actions."
+
+      - name: 🚀 Publish to npm
+        if: steps.check.outputs.published == 'false' && env.NPM_TOKEN != ''
+        run: npm publish --provenance --access public
+        env:
+          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}

package/.github/workflows/test-unit.yml

@@ -0,0 +1,36 @@
+name: 🧾 Proof Contract Tests
+
+on:
+  push:
+    branches: main
+  pull_request:
+    branches: main
+  workflow_dispatch:
+
+jobs:
+  test-unit:
+    name: 🧾 Run proof contract tests
+    runs-on: ubuntu-latest
+
+    env:
+      NODE_ENV: test
+
+    steps:
+      - name: 📥 Checkout code
+        uses: actions/checkout@v5
+
+      - name: 🍞 Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: 🧰 Install dependencies
+        run: bun install
+
+      # The contract tests self-skip when no audited repo is configured.
+      # To guard a specific target in CI, check it out here and set
+      # SPECPROOF_REPO (and optionally SPECPROOF_SPEC) on the test step.
+      - name: 🧾 Run contract tests
+        run: bun run test:unit
+        env:
+          NODE_ENV: test

package/CHANGELOG.md

@@ -0,0 +1,33 @@
+# Changelog
+
+All notable changes to this project will be documented in this file.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
+and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.0] - 2026-07-13
+
+### Added
+- Initial public release under new name SpecProof (npm package `specproof`).
+- GitHub Actions release workflow: automatically publishes to npm when package version is updated.
+- Comprehensive project documentation in CLAUDE.md.
+- Generalized spec/test discovery: auto-discovers OpenAPI specs (`openapi*.json`, `swagger*.json`) and test files in any target repo; no longer OmniLens-specific.
+- Support for explicit spec path via `SPECPROOF_SPEC` environment variable.
+
+### Changed
+- **Breaking**: Renamed environment variable `OMNILENS_REPO` → `SPECPROOF_REPO` for specifying the target repo to audit.
+- **Breaking**: Renamed environment variable `OMNILENS_SPEC` → `SPECPROOF_SPEC` for specifying the OpenAPI spec path.
+- Renamed npm package from `test-ledger` to `specproof`.
+- Renamed generator script `scripts/generate-ledger.ts` → `scripts/generate-proof.ts` and npm command `generate:ledger` → `generate:proof`.
+- Renamed generated artifact `app/ledger.generated.json` → `app/proof.generated.json`.
+- Renamed contract test file `app/ledger-contract.test.ts` → `app/proof-contract.test.ts`.
+- Renamed stylesheet `app/ledger.css` → `app/proof.css`.
+- Renamed React component `CoverageLedger` → `CoverageProof`.
+- Updated CSS class prefix `lg-` → `sp-` throughout the codebase.
+- Generalized code comments and documentation from OmniLens-specific to target-agnostic language.
+- GitHub Actions workflow `test-unit.yml` renamed to "Proof Contract Tests" with updated environment variable references.
+- Removed `"private": true` from package.json to allow npm publishing.
+- Updated package.json metadata: added `repository`, `homepage`, `description`, and `keywords`.
+
+### Removed
+- OmniLens-specific hardcoded paths and configuration.

package/CLAUDE.md

@@ -0,0 +1,72 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## What this is
+
+SpecProof: a standalone Next.js app that renders an audit view of any repo's API test coverage: every OpenAPI operation and response status, cross-examined against the target repo's test assertions. Clicking a stamped verdict shows the actual test snippet that proves (or fails to prove) coverage.
+
+This repo does not contain an API or its tests — it audits a target repo from the outside, the way OpenAPI tooling works when installed into a repo. Nothing repo-specific is baked in.
+
+## Architecture: generate → checked-in artifact → contract-test
+
+1. **Sources of truth**, read from the target repo (`SPECPROOF_REPO` env var; defaults to the current working directory):
+   - The OpenAPI spec — auto-discovered as the shallowest `openapi*.json` / `swagger*.json` in the tree, or set explicitly with `SPECPROOF_SPEC` (relative to the repo root).
+   - The repo's `*.test.ts` / `*.test.tsx` / `*.test.js` files — parsed via regex for `describe("METHOD /path")` blocks and `.status).toBe(NNN)` / `.status).toEqual(NNN)` assertions.
+2. **Analyzer** (`lib/api-test-coverage.ts`): joins the two sources into a `CoverageReport` (tags → operations → statuses, each status with assertion counts and extracted `it()` snippets). Operations are joined on the describe title's method + path; `{param}`, `[param]`, and `:param` segments are treated as equivalent. When several test files describe the same operation, the one with the most `it()` blocks wins.
+3. **Generator** (`scripts/generate-proof.ts`): calls the analyzer, writes the result to `app/proof.generated.json`. This is checked in, deterministic, and regenerated automatically before `dev`/`build`. When no target spec is found it leaves the existing artifact untouched (exit 0), so the app always builds.
+4. **Consumer** (`app/page.tsx` → `components/CoverageProof.tsx`): renders the checked-in artifact only. No target checkout is needed to build or deploy the app itself. An empty proof renders an empty-state hint.
+5. **Drift guard** (`app/proof-contract.test.ts`): fails when the artifact is stale relative to the spec/tests, when the proof's audited operations don't exactly match the spec's operations, or when a quoted snippet no longer points at a real `it()`/`test()` line. This suite self-skips (via `describe.skipIf`) when no target spec is resolvable.
+
+Because of this split, most day-to-day work happens in exactly one of two places:
+- Changing what's audited/how coverage is computed → `lib/api-test-coverage.ts` (+ regenerate the proof).
+- Changing how the proof is displayed → `components/CoverageProof.tsx` / `app/proof.css`, reading the existing `app/proof.generated.json` as fixture data — no target checkout needed.
+
+## Commands
+
+Requires [Bun](https://bun.sh).
+
+```bash
+bun install
+bun run dev              # generate:proof + next dev (port 3001)
+bun run build            # generate:proof + next build
+bun run start            # serve the production build (port 3001)
+bun run generate:proof   # regenerate app/proof.generated.json only
+bun run test:unit        # contract tests (vitest run; self-skips without a configured target)
+bun run test:unit:watch  # vitest watch mode
+bun run lint             # eslint + tsc --noEmit
+bun run lint:es          # eslint only
+bun run lint:ts          # tsc --noEmit only
+```
+
+To run a single test file: `bunx vitest run app/proof-contract.test.ts` (there is currently only the one test file).
+
+The generator/contract tests need a target repo:
+
+```bash
+SPECPROOF_REPO=/path/to/target-repo bun run generate:proof
+# optionally, if the spec has a nonstandard name/location:
+SPECPROOF_REPO=/path/to/target-repo SPECPROOF_SPEC=docs/api-spec.json bun run generate:proof
+```
+
+## Updating the proof
+
+When a target repo's test or OpenAPI spec changes, the checked-in `app/proof.generated.json` goes stale and the contract tests fail. Fix:
+
+```bash
+SPECPROOF_REPO=/path/to/target-repo bun run generate:proof
+git add app/proof.generated.json && git commit
+```
+
+## Releasing
+
+Merges to `main` trigger `.github/workflows/release.yml`, which publishes to npm when `package.json`'s version isn't already on the registry (needs the `NPM_TOKEN` repo secret). To release: bump `version` in `package.json` and merge.
+
+## Notes on the parsing approach
+
+`lib/api-test-coverage.ts` parses test files with regexes rather than a real TS/AST parser, relying on prettier-consistent formatting conventions in the audited repo:
+- `describe("METHOD /path")` titles are matched for the HTTP method prefix (`GET|POST|PUT|DELETE|PATCH`) followed by the operation path.
+- `it()`/`test()` blocks are extracted by matching the opening call, then scanning for the next `});` at the same indentation level — not a brace-matching parser, so it depends on consistent formatting in the audited repo.
+- Snippet source is dedented before being stored/rendered.
+
+If this parsing logic needs updating, check it against real test files in a target repo — the contract test's "every quoted snippet points at a real it()/test() block" check is what catches regressions here.

package/README.md

@@ -0,0 +1,51 @@
+# SpecProof
+
+A standalone Next.js app that renders an audit view of any repo's API test coverage: every OpenAPI operation and response status, cross-examined against the repo's test assertions. Click a stamped verdict to read the test itself.
+
+Point it at a repo the same way OpenAPI tooling works when installed into one — no repo-specific configuration is baked in:
+
+- **Sources of truth** (read from the target repo, `SPECPROOF_REPO`): the OpenAPI spec (auto-discovered `openapi*.json` / `swagger*.json`, or set `SPECPROOF_SPEC`) + the repo's `*.test.ts` files, parsed from `describe("METHOD /path")` blocks and `.status).toBe(NNN)` assertions. `{param}`, `[param]`, and `:param` path segments are treated as equivalent when matching.
+- **Generator**: `scripts/generate-proof.ts` compiles them into `app/proof.generated.json` — checked in, deterministic, regenerated automatically before `dev`/`build`.
+- **Consumer**: the app renders the checked-in artifact; no target checkout is needed to build or deploy.
+- **Drift guard**: `app/proof-contract.test.ts` fails CI when the artifact is stale relative to the spec/tests, when the proof doesn't cover exactly the spec's operations, or when a quoted snippet no longer points at a real `it()` block. It self-skips when no target repo is configured.
+
+## Setup
+
+Requires [Bun](https://bun.sh).
+
+```bash
+bun install
+SPECPROOF_REPO=/path/to/your-repo bun run dev   # compiles the proof, then serves on http://localhost:3001
+```
+
+`SPECPROOF_REPO` defaults to the current working directory, so running the generator from inside the target repo needs no configuration at all. If the spec isn't named `openapi*.json` / `swagger*.json`, point `SPECPROOF_SPEC` at it (relative to the repo root).
+
+## Commands
+
+```bash
+bun run dev             # generate:proof + next dev (port 3001)
+bun run build           # generate:proof + next build
+bun run start           # serve the production build (port 3001)
+bun run generate:proof  # regenerate app/proof.generated.json only
+bun run test:unit       # contract tests (self-skip without a configured target repo)
+bun run lint            # ESLint + tsc
+```
+
+## Updating the proof
+
+When the target repo's tests or OpenAPI spec change, the checked-in artifact goes stale and the contract tests fail. The fix:
+
+```bash
+SPECPROOF_REPO=/path/to/your-repo bun run generate:proof
+git add app/proof.generated.json && git commit
+```
+
+## Conventions the parser relies on
+
+- Test suites titled `describe("METHOD /path")` (`GET|POST|PUT|DELETE|PATCH`) — the path is matched against the spec's paths.
+- Status assertions written as `.status).toBe(NNN)` or `.status).toEqual(NNN)`.
+- Prettier-consistent formatting: `it()`/`test()` blocks are extracted by indentation, not a full parser.
+
+## Releasing
+
+Merges to `main` run the [Release workflow](.github/workflows/release.yml), which publishes the package to npm whenever `package.json`'s version isn't on the registry yet (requires the `NPM_TOKEN` repository secret).

package/app/globals.css

@@ -0,0 +1,31 @@
+@import 'tailwindcss/base';
+@import 'tailwindcss/components';
+@import 'tailwindcss/utilities';
+
+/* Same dark theme tokens as apps/web — the proof renders on the shadcn
+   variable vocabulary (background/foreground/muted/border/…). */
+:root {
+  --background: 0 0% 0.4%;
+  --foreground: 0 0% 98%;
+  --primary: 0 0% 98%;
+  --primary-foreground: 0 0% 9%;
+  --secondary: 0 0% 14.9%;
+  --secondary-foreground: 0 0% 98%;
+  --muted: 0 0% 25%;
+  --muted-foreground: 0 0% 75%;
+  --accent: 0 0% 25%;
+  --accent-foreground: 0 0% 98%;
+  --border: 0 0% 20%;
+  --input: 0 0% 14.9%;
+  --ring: 0 0% 83.1%;
+  --radius: 0.5rem;
+}
+
+* {
+  border-color: hsl(var(--border));
+}
+
+body {
+  background-color: hsl(var(--background));
+  color: hsl(var(--foreground));
+}

package/app/layout.tsx

@@ -0,0 +1,29 @@
+import "./globals.css";
+import { ReactNode } from "react";
+import type { Metadata } from "next";
+
+export const metadata: Metadata = {
+  title: "SpecProof",
+  description:
+    "Every documented API operation and status code, cross-examined against the repo's test suites."
+};
+
+export default function RootLayout({ children }: { children: ReactNode }) {
+  return (
+    <html lang="en" className="dark">
+      <head>
+        <link rel="preconnect" href="https://fonts.googleapis.com" />
+        <link
+          rel="preconnect"
+          href="https://fonts.gstatic.com"
+          crossOrigin="anonymous"
+        />
+        <link
+          href="https://fonts.googleapis.com/css2?family=Geist+Mono:wght@300;400;500;600;700&display=swap"
+          rel="stylesheet"
+        />
+      </head>
+      <body className="min-h-screen bg-background antialiased">{children}</body>
+    </html>
+  );
+}

package/app/page.tsx

@@ -0,0 +1,20 @@
+import type { CoverageReport } from '@/lib/api-test-coverage';
+import { CoverageProof } from '@/components/CoverageProof';
+
+import proof from './proof.generated.json';
+
+import './proof.css';
+
+/**
+ * SpecProof
+ *
+ * Audit view of a repo's API test coverage: the OpenAPI spec's operations and
+ * response statuses joined against the repo's test assertions. Renders the
+ * checked-in proof.generated.json artifact — regenerated automatically
+ * before dev/build and kept in lockstep with the sources by the
+ * proof-contract test.
+ */
+export default function SpecProofPage() {
+  const report = proof as unknown as CoverageReport;
+  return <CoverageProof report={report} compiledAt={new Date().toISOString()} />;
+}

package/app/proof-contract.test.ts

@@ -0,0 +1,95 @@
+import fs from "fs";
+import path from "path";
+import { describe, expect, it } from "vitest";
+
+import {
+  resolveSpecPath,
+  TARGET_REPO_ROOT,
+  type CoverageReport,
+} from "@/lib/api-test-coverage";
+import { buildProof, GENERATED_PROOF_PATH } from "@/scripts/generate-proof";
+
+/**
+ * Contract tests that keep the rendered proof in lockstep with the target
+ * repo it audits. Three drift modes are covered:
+ *
+ * 1. The OpenAPI spec gains/loses an operation without the proof following
+ *    (spec <-> proof, both directions).
+ * 2. A quoted test snippet no longer points at a real it()/test() block in
+ *    its test file — the evidence the UI shows must be re-readable from the
+ *    source it cites.
+ * 3. The spec or a test file changed without regenerating
+ *    proof.generated.json.
+ */
+
+function loadCheckedInProof(): CoverageReport {
+  return JSON.parse(fs.readFileSync(GENERATED_PROOF_PATH, "utf8"));
+}
+
+// The drift guards compare the artifact against the audited target repo
+// (SPECPROOF_REPO, or the current directory). Without an OpenAPI spec to audit
+// there is nothing to compare against, so the suite self-skips.
+const specPath = resolveSpecPath();
+if (!specPath) {
+  console.warn(
+    `proof-contract: skipping — no OpenAPI spec found under ${TARGET_REPO_ROOT} (set SPECPROOF_REPO to the repo to audit, or SPECPROOF_SPEC to the spec file)`,
+  );
+}
+
+describe.skipIf(!specPath)("SpecProof contract", () => {
+  it("audits every operation in the OpenAPI spec, and nothing else", () => {
+    const spec = JSON.parse(fs.readFileSync(specPath!, "utf8")) as {
+      paths: Record<string, Record<string, unknown>>;
+    };
+
+    const documented = Object.entries(spec.paths)
+      .flatMap(([opPath, methods]) =>
+        Object.keys(methods).map((method) => `${method} ${opPath}`),
+      )
+      .sort();
+
+    const audited = loadCheckedInProof()
+      .tags.flatMap((tag) => tag.operations)
+      .map((op) => `${op.method} ${op.specPath}`)
+      .sort();
+
+    expect(documented.length).toBeGreaterThan(0);
+    expect(audited).toEqual(documented);
+  });
+
+  it("every quoted snippet points at a real it()/test() block in its test file", () => {
+    const sources = new Map<string, string[]>();
+    const readLines = (testFile: string) => {
+      const cached = sources.get(testFile);
+      if (cached) return cached;
+      const lines = fs
+        .readFileSync(path.join(TARGET_REPO_ROOT, testFile), "utf8")
+        .split("\n");
+      sources.set(testFile, lines);
+      return lines;
+    };
+
+    for (const tag of loadCheckedInProof().tags) {
+      for (const op of tag.operations) {
+        if (!op.testFile) continue;
+        for (const status of op.statuses) {
+          for (const snippet of status.snippets) {
+            const line = readLines(op.testFile)[snippet.startLine - 1] ?? "";
+            expect(
+              /(?:it|test)\(/.test(line),
+              `${op.method} ${op.specPath} ${status.code}: snippet "${snippet.title}" cites ${op.testFile}:${snippet.startLine}, but that line is not an it()/test() block`,
+            ).toBe(true);
+          }
+        }
+      }
+    }
+  });
+
+  it("proof.generated.json is up to date with the spec and tests", () => {
+    const checkedIn = loadCheckedInProof();
+    // If this fails, the OpenAPI spec or a test file changed without
+    // regenerating the proof: run `bun run generate:proof` and commit the
+    // result.
+    expect(checkedIn).toEqual(buildProof());
+  });
+});

package/app/proof.css

@@ -0,0 +1,217 @@
+/* ============================================================================
+   SpecProof — functional coverage report
+   Single-typeface Geist Mono tabulation: dotted index leaders, punch-card
+   status marks, stamped verdicts. All rules scoped under .proof-root.
+   ============================================================================ */
+
+.proof-root {
+  --sp-mono: "Geist Mono", ui-monospace, SFMono-Regular, Menlo, monospace;
+
+  /* method colors — same accent vocabulary as the marketing/POC surfaces */
+  --sp-get: #00e5a0;
+  --sp-post: #4d9fff;
+  --sp-put: #f59e0b;
+  --sp-delete: #ef4444;
+  --sp-patch: #c084fc;
+
+  /* verdicts */
+  --sp-ok: #00e5a0;
+  --sp-gap: #ff5c5c;
+  --sp-undoc: #f5a623;
+
+  --sp-ink: #e6e6e2;
+  --sp-faint: rgba(255, 255, 255, 0.38);
+  --sp-hair: rgba(255, 255, 255, 0.09);
+  --sp-hair-strong: rgba(255, 255, 255, 0.22);
+
+  font-family: var(--sp-mono);
+  color: var(--sp-ink);
+}
+
+.proof-page {
+  position: relative;
+  isolation: isolate;
+}
+
+/* faint top glow behind content */
+.proof-page::before {
+  content: "";
+  position: absolute;
+  inset: 0;
+  z-index: -1;
+  background: radial-gradient(120% 40% at 50% -5%, rgba(0, 229, 160, 0.055), transparent 60%);
+  pointer-events: none;
+}
+
+/* ---- entrance choreography ------------------------------------------------ */
+@keyframes sp-rise {
+  from {
+    opacity: 0;
+    transform: translateY(14px);
+  }
+  to {
+    opacity: 1;
+    transform: translateY(0);
+  }
+}
+
+.sp-rise {
+  opacity: 0;
+  animation: sp-rise 0.65s cubic-bezier(0.22, 1, 0.36, 1) forwards;
+  animation-delay: calc(var(--sp-stagger, 0) * 70ms);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .sp-rise {
+    animation: none;
+    opacity: 1;
+  }
+}
+
+/* ---- proof rules ----------------------------------------------------------- */
+.sp-rule-double {
+  border-top: 3px double var(--sp-hair-strong);
+}
+
+.sp-leader {
+  flex: 1 1 2rem;
+  min-width: 2rem;
+  border-bottom: 1px dotted rgba(255, 255, 255, 0.18);
+  transform: translateY(-0.3em);
+}
+
+/* ---- method chips ----------------------------------------------------------- */
+.sp-method {
+  --mc: var(--sp-faint);
+  color: var(--mc);
+  border-left: 3px solid var(--mc);
+  padding-left: 0.6rem;
+  font-size: 0.72rem;
+  font-weight: 600;
+  letter-spacing: 0.14em;
+  line-height: 1.9;
+  transition: border-left-width 150ms ease;
+}
+.sp-method[data-method="get"] { --mc: var(--sp-get); }
+.sp-method[data-method="post"] { --mc: var(--sp-post); }
+.sp-method[data-method="put"] { --mc: var(--sp-put); }
+.sp-method[data-method="delete"] { --mc: var(--sp-delete); }
+.sp-method[data-method="patch"] { --mc: var(--sp-patch); }
+
+.sp-oprow:hover .sp-method,
+.sp-oprow[data-state="open"] .sp-method {
+  border-left-width: 6px;
+}
+
+/* ---- punch-card status marks (trigger row) ---------------------------------- */
+.sp-marks {
+  display: inline-flex;
+  gap: 3px;
+  align-items: center;
+}
+.sp-mark {
+  width: 7px;
+  height: 11px;
+  border: 1px solid var(--sp-faint);
+  background: transparent;
+}
+.sp-mark[data-state="ok"] {
+  background: var(--sp-ok);
+  border-color: var(--sp-ok);
+}
+.sp-mark[data-state="gap"] {
+  border-color: var(--sp-gap);
+  border-style: dashed;
+}
+.sp-mark[data-state="undoc"] {
+  border-color: var(--sp-undoc);
+  background: repeating-linear-gradient(
+    45deg,
+    var(--sp-undoc) 0 1px,
+    transparent 1px 3px
+  );
+}
+
+/* ---- status-code ink by class ------------------------------------------------ */
+.sp-code[data-class="2"] { color: var(--sp-ok); }
+.sp-code[data-class="3"] { color: var(--sp-post); }
+.sp-code[data-class="4"] { color: var(--sp-undoc); }
+.sp-code[data-class="5"] { color: var(--sp-gap); }
+
+/* ---- verdict stamps ----------------------------------------------------------- */
+.sp-stamp {
+  font-size: 0.62rem;
+  font-weight: 600;
+  letter-spacing: 0.16em;
+  padding: 0.18rem 0.5rem;
+  white-space: nowrap;
+}
+.sp-stamp[data-verdict="ok"] {
+  color: var(--sp-ok);
+  border: 1px solid color-mix(in srgb, var(--sp-ok) 45%, transparent);
+  background: color-mix(in srgb, var(--sp-ok) 8%, transparent);
+}
+.sp-stamp[data-verdict="gap"] {
+  color: var(--sp-gap);
+  border: 1px dashed color-mix(in srgb, var(--sp-gap) 55%, transparent);
+}
+.sp-stamp[data-verdict="undoc"] {
+  color: var(--sp-undoc);
+  border: 1px solid color-mix(in srgb, var(--sp-undoc) 45%, transparent);
+  background: repeating-linear-gradient(
+    45deg,
+    color-mix(in srgb, var(--sp-undoc) 10%, transparent) 0 4px,
+    transparent 4px 8px
+  );
+}
+
+/* clickable stamps (verified / undocumented open the test-code panel) */
+button.sp-stamp {
+  cursor: pointer;
+  transition: transform 120ms ease, box-shadow 120ms ease;
+}
+button.sp-stamp:hover {
+  transform: translateY(-1px);
+  box-shadow: 0 3px 14px -4px color-mix(in srgb, currentColor 55%, transparent);
+}
+button.sp-stamp:focus-visible {
+  outline: 1px solid currentColor;
+  outline-offset: 2px;
+}
+
+/* ---- test-code panel ----------------------------------------------------------- */
+.sp-codeblock {
+  border: 1px solid var(--sp-hair);
+  background: rgba(255, 255, 255, 0.02);
+  font-size: 0.72rem;
+  line-height: 1.7;
+  overflow-x: auto;
+}
+.sp-codeline {
+  display: grid;
+  grid-template-columns: 3.2rem 1fr;
+  padding-right: 1rem;
+  white-space: pre;
+}
+.sp-codeline[data-hit] {
+  background: color-mix(in srgb, var(--sp-ok) 8%, transparent);
+  box-shadow: inset 2px 0 0 var(--sp-ok);
+}
+.sp-lineno {
+  padding-right: 0.9rem;
+  text-align: right;
+  color: rgba(255, 255, 255, 0.22);
+  user-select: none;
+}
+.sp-codeline[data-hit] .sp-lineno {
+  color: var(--sp-ok);
+}
+
+/* ---- row hover bleed ----------------------------------------------------------- */
+.sp-oprow {
+  transition: background-color 180ms ease;
+}
+.sp-oprow:hover,
+.sp-oprow[data-state="open"] {
+  background: rgba(255, 255, 255, 0.025);
+}

package/app/proof.generated.json

@@ -0,0 +1,7 @@
+{
+  "tags": [],
+  "operationCount": 0,
+  "coveredCount": 0,
+  "totalCount": 0,
+  "untestedOperations": 0
+}