tamperward 2.18.0 → 2.20.0

package/dist/cli/index.js

@@ -216,6 +216,10 @@ function defaultPolicy(version = 1) {
       // broad any in annotation/generic position is common in legit code (measured ~84-100% FP as a
       // block rule on real TS), so it WARNs until a semantic (error-silencing-aware) signal earns block.
       "ts-any-launder": { severity: "warn" },
+      // net growth of ordinary `as T` / `<T>x` / `x!` assertions in non-test source (#383).
+      // Fires on a large share of legitimate TypeScript mainline diffs (measured in
+      // harness/fp-study/CAST-GROWTH-CORPUS.md), so it is a review prompt, not a gate.
+      "ts-cast-growth": { severity: "warn" },
       "lint-suppression": { severity: "block" },
       "coverage-lowering": { severity: "block" },
       "ci-tampering": { severity: "block" },
@@ -244,6 +248,45 @@ function defaultPolicy(version = 1) {
   return p;
 }
 
+// src/narrow.ts
+function isRecord(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+function errnoCode(e) {
+  const code2 = isRecord(e) ? e.code : void 0;
+  return typeof code2 === "string" ? code2 : void 0;
+}
+function errorMessage(e) {
+  return e instanceof Error ? e.message : String(e);
+}
+function textOf(v) {
+  if (typeof v === "string") return v;
+  if (Buffer.isBuffer(v)) return v.toString("utf8");
+  return "";
+}
+function execFailure(e) {
+  const r = isRecord(e) ? e : {};
+  return {
+    stdout: textOf(r.stdout),
+    stderr: textOf(r.stderr),
+    status: typeof r.status === "number" ? r.status : null,
+    code: errnoCode(e),
+    message: errorMessage(e)
+  };
+}
+function finiteNumber(v) {
+  return typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+function stringOrUndefined(v) {
+  return typeof v === "string" ? v : void 0;
+}
+function nullableString(v) {
+  return v === null || typeof v === "string" ? v : void 0;
+}
+function nullableNumber(v) {
+  return v === null || typeof v === "number" && Number.isFinite(v) ? v : void 0;
+}
+
 // src/disk.ts
 var READ_CAP = 64 * 1024 * 1024;
 var NO_META = { mode: 0, size: 0, mtimeMs: 0 };
@@ -251,7 +294,7 @@ function errText(e) {
   return e instanceof Error ? e.message : String(e);
 }
 function errCode(e) {
-  return String(e?.code ?? "");
+  return errnoCode(e) ?? "";
 }
 function irregularName(st) {
   if (st.isFIFO()) return "fifo";
@@ -341,7 +384,7 @@ function inspectResolved(abs2) {
   }
   return inspectPath(real);
 }
-function textOf(e) {
+function textOf2(e) {
   return e.content == null ? null : e.content.toString("utf8");
 }
 function describe(e, shown) {
@@ -675,9 +718,9 @@ function git(args, cwd) {
       env: trustedGitEnv()
     });
   } catch (e) {
-    const err3 = e;
-    const detail = String(err3.stderr ?? "").trim();
-    throw new Error(detail ? `git ${args[0]}: ${detail}` : err3.message ?? `git ${args[0]} failed`);
+    const failure = execFailure(e);
+    const detail = failure.stderr.trim();
+    throw new Error(detail ? `git ${args[0]}: ${detail}` : failure.message || `git ${args[0]} failed`);
   }
 }
 function blobAt(rev, path, cwd) {
@@ -688,7 +731,7 @@ function blobAt(rev, path, cwd) {
   }
 }
 function fromDisk(path, cwd) {
-  return textOf(inspectRel(cwd ?? process.cwd(), path));
+  return textOf2(inspectRel(cwd ?? process.cwd(), path));
 }
 function enrich(c, beforeReader, afterReader) {
   if (c.kind !== "file") return c;
@@ -807,7 +850,7 @@ function ignoredAdds(opts = {}, keep, exclude) {
 }
 function diffWorktreeWithUntracked(opts = {}, keepIgnored) {
   const tracked = diffWorktree(opts);
-  const seen = new Set(tracked.filter((c) => c.kind === "file").map((c) => c.path));
+  const seen = new Set(tracked.flatMap((c) => c.kind === "file" ? [c.path] : []));
   const untracked = untrackedAdds(opts, void 0, seen);
   for (const c of untracked) if (c.kind === "file") seen.add(c.path);
   const ignored = keepIgnored ? ignoredAdds(opts, keepIgnored, seen) : [];
@@ -832,7 +875,7 @@ function asStr(v) {
   return typeof v === "string" ? v : "";
 }
 function readDisk(path) {
-  return textOf(inspectResolved(path));
+  return textOf2(inspectResolved(path));
 }
 function abs(path, cwd) {
   return resolve(cwd, path);
@@ -865,11 +908,11 @@ function synthFileChange(displayPath, before, after) {
         maxBuffer: 256 * 1024 * 1024
       });
     } catch (e) {
-      const err3 = e;
-      if (err3.status !== 1) {
-        throw new Error(`cannot diff the incoming edit to ${displayPath}: ${err3.code ?? err3.message ?? String(e)}`);
+      const failure = execFailure(e);
+      if (failure.status !== 1) {
+        throw new Error(`cannot diff the incoming edit to ${displayPath}: ${failure.code ?? failure.message}`);
       }
-      raw = err3.stdout ? String(err3.stdout) : "";
+      raw = failure.stdout;
     }
   } finally {
     rmSync(dir, { recursive: true, force: true });
@@ -905,8 +948,8 @@ function changesFromClaudeHook(input, cwd) {
       let after = before;
       const edits = Array.isArray(ti.edits) ? ti.edits : [];
       for (const raw of edits) {
-        const ed = raw;
-        after = applyEdit(after, ed.old_string ?? "", ed.new_string ?? "");
+        const ed = isRecord(raw) ? raw : {};
+        after = applyEdit(after, asStr(ed.old_string), asStr(ed.new_string));
       }
       return synthFileChange(relForDisplay(abs(fp, cwd), cwd), before, after);
     }
@@ -1110,7 +1153,7 @@ var noVerify = {
 };
 
 // src/detectors/ts-any-cast.ts
-import ts from "typescript";
+import ts2 from "typescript";
 
 // src/diff/select.ts
 function addedLines(c) {
@@ -1190,38 +1233,168 @@ function insideStringLiteral(line, idx, lang) {
   return quote !== null;
 }
 
+// src/detectors/ts-cast-growth.ts
+import ts from "typescript";
+var RULE2 = "ts-cast-growth";
+var DECLARATION = /\.d\.(?:ts|mts|cts)$/;
+var OUT_OF_BUDGET_PATH = /(?:^|\/)(?:node_modules|vendor|third_party|dist|build|generated|__generated__)\/|\.(?:generated|gen)\.[cm]?[jt]sx?$/;
+var GENERATED_HEADER = /@generated\b|\bAUTO-?GENERATED\b|\bDO NOT EDIT\b/i;
+var HEADER_LINES = 20;
+function scriptKind(path) {
+  const lower = path.toLowerCase();
+  if (lower.endsWith(".tsx")) return ts.ScriptKind.TSX;
+  if (lower.endsWith(".ts") || lower.endsWith(".mts") || lower.endsWith(".cts")) return ts.ScriptKind.TS;
+  if (lower.endsWith(".jsx")) return ts.ScriptKind.JSX;
+  return ts.ScriptKind.JS;
+}
+function outOfBudget(path, before) {
+  if (DECLARATION.test(path) || OUT_OF_BUDGET_PATH.test(path)) return true;
+  return before != null && GENERATED_HEADER.test(before.split("\n", HEADER_LINES).join("\n"));
+}
+function unparenthesized(e) {
+  let x = e;
+  while (ts.isParenthesizedExpression(x)) x = x.expression;
+  return x;
+}
+function assertedType(node) {
+  let t = node.type;
+  while (ts.isParenthesizedTypeNode(t)) t = t.type;
+  return t;
+}
+function isDoubleCast(node) {
+  const inner = unparenthesized(node.expression);
+  return (ts.isAsExpression(inner) || ts.isTypeAssertionExpression(inner)) && assertedType(inner).kind === ts.SyntaxKind.UnknownKeyword;
+}
+function surfaceOf(path, src) {
+  let sf;
+  try {
+    sf = ts.createSourceFile(path, src, ts.ScriptTarget.Latest, true, scriptKind(path));
+  } catch {
+    return null;
+  }
+  const diagnostics = "parseDiagnostics" in sf && Array.isArray(sf.parseDiagnostics) ? sf.parseDiagnostics : [];
+  if (diagnostics.length > 0) return null;
+  const surface = { type: 0, nonNull: 0, assertions: [] };
+  const lines = src.split("\n");
+  const record = (kind, node) => {
+    const line = sf.getLineAndCharacterOfPosition(node.getStart(sf)).line + 1;
+    surface.assertions.push({ kind, line, text: node.getText(sf).replace(/\s+/g, " "), lineText: (lines[line - 1] ?? "").trim() });
+    if (kind === "type") surface.type++;
+    else surface.nonNull++;
+  };
+  const isRow4OrHonest = (node) => {
+    const type = assertedType(node);
+    if (type.kind === ts.SyntaxKind.AnyKeyword || type.kind === ts.SyntaxKind.UnknownKeyword) return true;
+    return ts.isTypeReferenceNode(type) && ts.isIdentifier(type.typeName) && type.typeName.text === "const";
+  };
+  const visit = (node) => {
+    if (ts.isAsExpression(node) || ts.isTypeAssertionExpression(node)) {
+      if (!isDoubleCast(node) && !isRow4OrHonest(node)) record("type", node);
+    } else if (ts.isNonNullExpression(node)) {
+      record("non-null", node);
+    }
+    ts.forEachChild(node, visit);
+  };
+  visit(sf);
+  return surface;
+}
+function unmatchedAfter(before, after) {
+  const n = before.length;
+  const m = after.length;
+  const same = (i2, j2) => before[i2].lineText === after[j2].lineText && before[i2].text === after[j2].text;
+  const lcs = Array.from({ length: n + 1 }, () => new Array(m + 1).fill(0));
+  for (let i2 = n - 1; i2 >= 0; i2--) {
+    for (let j2 = m - 1; j2 >= 0; j2--) {
+      lcs[i2][j2] = same(i2, j2) ? lcs[i2 + 1][j2 + 1] + 1 : Math.max(lcs[i2 + 1][j2], lcs[i2][j2 + 1]);
+    }
+  }
+  const out2 = [];
+  let i = 0;
+  let j = 0;
+  while (j < m) {
+    if (i < n && same(i, j)) {
+      i++;
+      j++;
+    } else if (i < n && lcs[i + 1][j] >= lcs[i][j + 1]) {
+      i++;
+    } else {
+      out2.push(after[j]);
+      j++;
+    }
+  }
+  return out2;
+}
+var tsCastGrowth = {
+  id: RULE2,
+  surface: ["file"],
+  certainty: "mechanical",
+  run(changes, policy) {
+    const out2 = [];
+    for (const c of changes) {
+      if (c.kind !== "file" || c.op === "delete" || c.after == null) continue;
+      if (!isCodeFile(c.path) || outOfBudget(c.path, c.before)) continue;
+      if (protectedCategory(c.path, policy) === "tests") continue;
+      const after = surfaceOf(c.path, c.after);
+      const before = c.before == null ? { type: 0, nonNull: 0, assertions: [] } : surfaceOf(c.path, c.before);
+      if (!after || !before) continue;
+      const dType = after.type - before.type;
+      const dNonNull = after.nonNull - before.nonNull;
+      if (dType <= 0 && dNonNull <= 0) continue;
+      const grownKinds = /* @__PURE__ */ new Set([...dType > 0 ? ["type"] : [], ...dNonNull > 0 ? ["non-null"] : []]);
+      const addedLineNumbers2 = new Set(addedLines(c).flatMap((l) => l.newLine == null ? [] : [l.newLine]));
+      const onAddedLine = after.assertions.find((a) => grownKinds.has(a.kind) && addedLineNumbers2.has(a.line));
+      const first = onAddedLine ?? unmatchedAfter(before.assertions, after.assertions).find((a) => grownKinds.has(a.kind)) ?? after.assertions.find((a) => grownKinds.has(a.kind));
+      const parts = [];
+      if (dType > 0) parts.push(`+${dType} type assertion${dType === 1 ? "" : "s"} (\`as T\` / \`<T>x\`)`);
+      if (dNonNull > 0) parts.push(`+${dNonNull} non-null assertion${dNonNull === 1 ? "" : "s"} (\`x!\`)`);
+      out2.push(
+        makeFinding(RULE2, policy, {
+          file: c.path,
+          ...first ? { line: first.line } : {},
+          message: `The unsafe assertion surface grew: ${parts.join(", ")} net of any removed in this change (now ${after.type} type / ${after.nonNull} non-null in this file).`,
+          evidence: first?.text ?? parts.join(", "),
+          remediation: "Prove the value instead of asserting it: parse or validate at the boundary, use a type guard or discriminated union, or handle the nullable case. If the assertion is genuinely unavoidable, keep it at the narrowest boundary and say why in a comment.",
+          defaultSeverity: "warn"
+        })
+      );
+    }
+    return out2;
+  }
+};
+
 // src/detectors/ts-any-cast.ts
 var BLOCK_RULE = "ts-any-cast";
 var WARN_RULE = "ts-any-launder";
-var DOUBLE_CAST = /\bas\s+unknown\s+as\b/g;
+var DOUBLE_CAST = /\bas\s+\(*\s*unknown\s*\)*\s+as\b/g;
 var SUPPRESS = /@ts-(?:ignore|expect-error|nocheck)\b/g;
 var JSDOC_ANY_CAST = /\/\*\*\s*@type\s*\{\s*any\s*\}\s*\*\/\s*\(/g;
 var JS_FILE = /\.(?:js|jsx|mjs|cjs)$/;
 var countMatches = (s, re) => (s.match(re) || []).length;
 function countAny(src) {
-  const r = { cast: 0, broad: 0 };
+  const r = { cast: 0, broad: 0, double: 0 };
   try {
-    const sf = ts.createSourceFile("f.ts", src, ts.ScriptTarget.Latest, true, ts.ScriptKind.TS);
+    const sf = ts2.createSourceFile("f.ts", src, ts2.ScriptTarget.Latest, true, ts2.ScriptKind.TS);
     const visit = (node) => {
-      if (node.kind === ts.SyntaxKind.AnyKeyword) {
+      if ((ts2.isAsExpression(node) || ts2.isTypeAssertionExpression(node)) && isDoubleCast(node)) r.double++;
+      if (node.kind === ts2.SyntaxKind.AnyKeyword) {
         let target = node;
         let p = target.parent;
-        while (p && ts.isParenthesizedTypeNode(p)) {
+        while (p && ts2.isParenthesizedTypeNode(p)) {
           target = p;
           p = p.parent;
         }
-        const isCast = p && ts.isAsExpression(p) && p.type === target || p && ts.isTypeAssertionExpression(p) && p.type === target;
+        const isCast = p && ts2.isAsExpression(p) && p.type === target || p && ts2.isTypeAssertionExpression(p) && p.type === target;
         if (isCast) r.cast++;
         else r.broad++;
       }
-      ts.forEachChild(node, visit);
+      ts2.forEachChild(node, visit);
     };
     visit(sf);
   } catch {
   }
   return r;
 }
-var NARROW_LINE = /\bas\s+\(*\s*any\b|<\s*any\s*>|\bas\s+unknown\s+as\b|@ts-(?:ignore|expect-error|nocheck)\b/;
+var NARROW_LINE = /\bas\s+\(*\s*any\b|<\s*any\s*>|\bas\s+\(*\s*unknown\s*\)*\s+as\b|@ts-(?:ignore|expect-error|nocheck)\b/;
 var BROAD_LINE = /:\s*any\b|<[^<>]*\bany\b[^<>]*>/;
 var BLOCK_REMEDIATION = "Fix the underlying type instead of silencing the checker; do not cast to `any`.";
 var WARN_REMEDIATION = "Prefer a precise type or `unknown` + a guard over `any` here \u2014 flagged for review.";
@@ -1240,7 +1413,7 @@ var tsAnyCast = {
         const b = countAny(before);
         const dCast = a.cast - b.cast;
         const dBroad = a.broad - b.broad;
-        const dDouble = countMatches(c.after, DOUBLE_CAST) - countMatches(before, DOUBLE_CAST);
+        const dDouble = Math.max(a.double - b.double, countMatches(c.after, DOUBLE_CAST) - countMatches(before, DOUBLE_CAST));
         const dSuppr = countMatches(c.after, SUPPRESS) - countMatches(before, SUPPRESS);
         const dJsdoc = JS_FILE.test(c.path) ? countMatches(c.after, JSDOC_ANY_CAST) - countMatches(before, JSDOC_ANY_CAST) : 0;
         const blockReasons = [];
@@ -1304,7 +1477,7 @@ var tsAnyCast = {
 };
 
 // src/detectors/lint-suppression.ts
-var RULE2 = "lint-suppression";
+var RULE3 = "lint-suppression";
 var PATTERNS = {
   js: [
     { re: /eslint-disable(?:-next-line|-line)?\b/, why: "eslint-disable suppresses lint rules" },
@@ -1352,7 +1525,7 @@ var PATTERNS = {
   ]
 };
 var lintSuppression = {
-  id: RULE2,
+  id: RULE3,
   surface: ["file"],
   certainty: "mechanical",
   run(changes, policy) {
@@ -1368,7 +1541,7 @@ var lintSuppression = {
           const m = p.re.exec(l.content);
           if (!m || insideStringLiteral(l.content, m.index, lang)) continue;
           out2.push(
-            makeFinding(RULE2, policy, {
+            makeFinding(RULE3, policy, {
               file: c.path,
               line: l.newLine ?? void 0,
               message: `Lint suppression added: ${p.why}.`,
@@ -1385,8 +1558,8 @@ var lintSuppression = {
 };
 
 // src/detectors/test-skip.ts
-import ts2 from "typescript";
-var RULE3 = "test-skip";
+import ts3 from "typescript";
+var RULE4 = "test-skip";
 var acc = (names) => `(?:\\s*\\.\\s*(?:${names})(?![\\w$])|\\s*\\[\\s*['"\`](?:${names})['"\`]\\s*\\])`;
 var JS_RUNNER = "\\b(?:it|test|describe|suite)";
 var JS_MOD = "concurrent|sequential|shuffle";
@@ -1489,11 +1662,11 @@ var JS_TEST_MODULES = /* @__PURE__ */ new Set([
   "bun:test",
   "@playwright/test"
 ]);
-function scriptKind(path) {
-  if (/\.tsx$/i.test(path)) return ts2.ScriptKind.TSX;
-  if (/\.jsx$/i.test(path)) return ts2.ScriptKind.JSX;
-  if (/\.(?:js|mjs|cjs)$/i.test(path)) return ts2.ScriptKind.JS;
-  return ts2.ScriptKind.TS;
+function scriptKind2(path) {
+  if (/\.tsx$/i.test(path)) return ts3.ScriptKind.TSX;
+  if (/\.jsx$/i.test(path)) return ts3.ScriptKind.JSX;
+  if (/\.(?:js|mjs|cjs)$/i.test(path)) return ts3.ScriptKind.JS;
+  return ts3.ScriptKind.TS;
 }
 function addedLineNumbers(c) {
   const out2 = /* @__PURE__ */ new Set();
@@ -1505,32 +1678,32 @@ function addedLineNumbers(c) {
   return out2;
 }
 function moduleName(expr) {
-  return ts2.isStringLiteralLike(expr) ? expr.text : null;
+  return ts3.isStringLiteralLike(expr) ? expr.text : null;
 }
 function requiredModule(expr) {
-  if (!ts2.isCallExpression(expr) || !ts2.isIdentifier(expr.expression) || expr.expression.text !== "require" || expr.arguments.length !== 1) return null;
+  if (!ts3.isCallExpression(expr) || !ts3.isIdentifier(expr.expression) || expr.expression.text !== "require" || expr.arguments.length !== 1) return null;
   return moduleName(expr.arguments[0]);
 }
 function astContext(path, source) {
   const rootName = path.startsWith("/") ? path : "/tamperward/" + path;
-  const sf = ts2.createSourceFile(
+  const sf = ts3.createSourceFile(
     rootName,
     source,
-    ts2.ScriptTarget.Latest,
+    ts3.ScriptTarget.Latest,
     true,
-    scriptKind(path)
+    scriptKind2(path)
   );
-  const diagnostics = sf.parseDiagnostics ?? [];
+  const diagnostics = "parseDiagnostics" in sf && Array.isArray(sf.parseDiagnostics) ? sf.parseDiagnostics : [];
   if (diagnostics.length > 0) return null;
   const options = {
     allowJs: true,
     checkJs: false,
     noLib: true,
     noResolve: true,
-    target: ts2.ScriptTarget.Latest,
-    module: ts2.ModuleKind.ESNext
+    target: ts3.ScriptTarget.Latest,
+    module: ts3.ModuleKind.ESNext
   };
-  const host = ts2.createCompilerHost(options, true);
+  const host = ts3.createCompilerHost(options, true);
   host.getSourceFile = (fileName) => fileName === rootName ? sf : void 0;
   host.fileExists = (fileName) => fileName === rootName;
   host.readFile = (fileName) => fileName === rootName ? source : void 0;
@@ -1541,7 +1714,7 @@ function astContext(path, source) {
   host.getCanonicalFileName = (fileName) => fileName;
   host.useCaseSensitiveFileNames = () => true;
   host.getNewLine = () => "\n";
-  const program = ts2.createProgram([rootName], options, host);
+  const program = ts3.createProgram([rootName], options, host);
   return { sf, checker: program.getTypeChecker() };
 }
 function symbolAt(ctx, node) {
@@ -1555,13 +1728,13 @@ function importAliases(ctx) {
     if (sym) out2.set(sym, { causes });
   };
   for (const stmt of ctx.sf.statements) {
-    if (ts2.isImportDeclaration(stmt) && ts2.isStringLiteralLike(stmt.moduleSpecifier)) {
+    if (ts3.isImportDeclaration(stmt) && ts3.isStringLiteralLike(stmt.moduleSpecifier)) {
       if (!JS_TEST_MODULES.has(stmt.moduleSpecifier.text)) continue;
       const clause = stmt.importClause;
       if (!clause) continue;
       if (clause.name && stmt.moduleSpecifier.text.startsWith("node:test")) add(clause.name);
       const bindings = clause.namedBindings;
-      if (bindings && ts2.isNamedImports(bindings)) {
+      if (bindings && ts3.isNamedImports(bindings)) {
         for (const el of bindings.elements) {
           const imported = el.propertyName?.text ?? el.name.text;
           if (JS_RUNNERS.has(imported)) add(el.name);
@@ -1569,17 +1742,17 @@ function importAliases(ctx) {
       }
       continue;
     }
-    if (!ts2.isVariableStatement(stmt)) continue;
+    if (!ts3.isVariableStatement(stmt)) continue;
     for (const decl of stmt.declarationList.declarations) {
-      if (ts2.isObjectBindingPattern(decl.name) && decl.initializer) {
+      if (ts3.isObjectBindingPattern(decl.name) && decl.initializer) {
         const mod = requiredModule(decl.initializer);
         if (!mod || !JS_TEST_MODULES.has(mod)) continue;
         for (const el of decl.name.elements) {
-          if (!ts2.isIdentifier(el.name)) continue;
-          const imported = el.propertyName && ts2.isIdentifier(el.propertyName) ? el.propertyName.text : el.name.text;
+          if (!ts3.isIdentifier(el.name)) continue;
+          const imported = el.propertyName && ts3.isIdentifier(el.propertyName) ? el.propertyName.text : el.name.text;
           if (JS_RUNNERS.has(imported)) add(el.name);
         }
-      } else if (ts2.isIdentifier(decl.name) && decl.initializer && ts2.isIdentifier(decl.initializer)) {
+      } else if (ts3.isIdentifier(decl.name) && decl.initializer && ts3.isIdentifier(decl.initializer)) {
         simpleAliases.push({ local: decl.name, source: decl.initializer });
       }
     }
@@ -1605,11 +1778,11 @@ function importAliases(ctx) {
 function topLevelStaticStrings(ctx) {
   const pending = /* @__PURE__ */ new Map();
   for (const stmt of ctx.sf.statements) {
-    if (!ts2.isVariableStatement(stmt)) continue;
-    const isConst = (stmt.declarationList.flags & ts2.NodeFlags.Const) !== 0;
+    if (!ts3.isVariableStatement(stmt)) continue;
+    const isConst = (stmt.declarationList.flags & ts3.NodeFlags.Const) !== 0;
     if (!isConst) continue;
     for (const decl of stmt.declarationList.declarations) {
-      if (!ts2.isIdentifier(decl.name) || !decl.initializer) continue;
+      if (!ts3.isIdentifier(decl.name) || !decl.initializer) continue;
       const sym = symbolAt(ctx, decl.name);
       if (sym) pending.set(sym, { decl: decl.name, expr: decl.initializer });
     }
@@ -1617,15 +1790,15 @@ function topLevelStaticStrings(ctx) {
   const resolved = /* @__PURE__ */ new Map();
   const resolving = /* @__PURE__ */ new Set();
   const valueOf = (expr) => {
-    if (ts2.isStringLiteralLike(expr)) return { value: expr.text, causes: [] };
-    if (ts2.isParenthesizedExpression(expr)) return valueOf(expr.expression);
-    if (ts2.isBinaryExpression(expr) && expr.operatorToken.kind === ts2.SyntaxKind.PlusToken) {
+    if (ts3.isStringLiteralLike(expr)) return { value: expr.text, causes: [] };
+    if (ts3.isParenthesizedExpression(expr)) return valueOf(expr.expression);
+    if (ts3.isBinaryExpression(expr) && expr.operatorToken.kind === ts3.SyntaxKind.PlusToken) {
       const left = valueOf(expr.left);
       const right = valueOf(expr.right);
       if (!left || !right) return null;
       return { value: left.value + right.value, causes: [...left.causes, ...right.causes] };
     }
-    if (ts2.isIdentifier(expr)) {
+    if (ts3.isIdentifier(expr)) {
       const sym = symbolAt(ctx, expr);
       if (!sym) return null;
       const cached = resolved.get(sym);
@@ -1652,15 +1825,15 @@ function topLevelStaticStrings(ctx) {
   return resolved;
 }
 function staticPropertyName(expr, ctx, strings) {
-  if (ts2.isStringLiteralLike(expr)) return { name: expr.text, causes: [] };
-  if (ts2.isParenthesizedExpression(expr)) return staticPropertyName(expr.expression, ctx, strings);
-  if (ts2.isBinaryExpression(expr) && expr.operatorToken.kind === ts2.SyntaxKind.PlusToken) {
+  if (ts3.isStringLiteralLike(expr)) return { name: expr.text, causes: [] };
+  if (ts3.isParenthesizedExpression(expr)) return staticPropertyName(expr.expression, ctx, strings);
+  if (ts3.isBinaryExpression(expr) && expr.operatorToken.kind === ts3.SyntaxKind.PlusToken) {
     const left = staticPropertyName(expr.left, ctx, strings);
     const right = staticPropertyName(expr.right, ctx, strings);
     if (!left || !right) return null;
     return { name: left.name + right.name, causes: [...left.causes, ...right.causes] };
   }
-  if (ts2.isIdentifier(expr)) {
+  if (ts3.isIdentifier(expr)) {
     const sym = symbolAt(ctx, expr);
     if (!sym) return null;
     const value = strings.get(sym);
@@ -1673,8 +1846,8 @@ function runnerChain(expr, ctx, runners, strings) {
   const causes = [];
   let cur = expr;
   let terminalNode = expr;
-  while (ts2.isPropertyAccessExpression(cur) || ts2.isElementAccessExpression(cur)) {
-    if (ts2.isPropertyAccessExpression(cur)) {
+  while (ts3.isPropertyAccessExpression(cur) || ts3.isElementAccessExpression(cur)) {
+    if (ts3.isPropertyAccessExpression(cur)) {
       props.unshift(cur.name.text);
       if (props.length === 1) terminalNode = cur.name;
       cur = cur.expression;
@@ -1688,7 +1861,7 @@ function runnerChain(expr, ctx, runners, strings) {
     if (props.length === 1) terminalNode = cur.argumentExpression;
     cur = cur.expression;
   }
-  if (!ts2.isIdentifier(cur)) return null;
+  if (!ts3.isIdentifier(cur)) return null;
   const sym = symbolAt(ctx, cur);
   if (sym) {
     const binding = runners.get(sym);
@@ -1700,17 +1873,17 @@ function runnerChain(expr, ctx, runners, strings) {
   return { root: cur.text, props, terminalNode, causes };
 }
 function optionDisables(value) {
-  return !(value.kind === ts2.SyntaxKind.FalseKeyword || ts2.isNumericLiteral(value) && Number(value.text) === 0);
+  return !(value.kind === ts3.SyntaxKind.FalseKeyword || ts3.isNumericLiteral(value) && Number(value.text) === 0);
 }
 function shorthandOptionDisables(prop, ctx) {
   const sym = ctx.checker.getShorthandAssignmentValueSymbol(prop) ?? symbolAt(ctx, prop.name);
-  const decl = sym?.valueDeclaration ?? sym?.declarations?.find((d) => ts2.isVariableDeclaration(d));
-  if (!decl || !ts2.isVariableDeclaration(decl) || !decl.initializer) return true;
+  const decl = sym?.valueDeclaration ?? sym?.declarations?.find((d) => ts3.isVariableDeclaration(d));
+  if (!decl || !ts3.isVariableDeclaration(decl) || !decl.initializer) return true;
   return optionDisables(decl.initializer);
 }
 function structuralNodeKey(node, sf) {
   const children = node.getChildren(sf);
-  const text = node.text;
+  const text = "text" in node ? node.text : void 0;
   if (children.length === 0) {
     return typeof text === "string" ? `${node.kind}:${JSON.stringify(text)}` : String(node.kind);
   }
@@ -1722,7 +1895,7 @@ function semanticSkipHits(ctx) {
   const hits = [];
   const callOrdinals = /* @__PURE__ */ new Map();
   const visit = (node) => {
-    if (ts2.isCallExpression(node)) {
+    if (ts3.isCallExpression(node)) {
       const callText = node.getText(ctx.sf).trim();
       const callIdentity = structuralNodeKey(node, ctx.sf);
       const ordinal = (callOrdinals.get(callIdentity) ?? 0) + 1;
@@ -1747,19 +1920,19 @@ function semanticSkipHits(ctx) {
           push(terminalNode, [], "a .skipIf()/.runIf() condition (the test runs only when the condition allows)");
         } else if (terminal && ["fails", "failing"].includes(terminal) && props.length === 1) {
           push(terminalNode, [], "a .fails/.failing marker (the test now passes by failing)");
-        } else if (terminal === "each" && props.length === 1 && node.arguments.length > 0 && ts2.isArrayLiteralExpression(node.arguments[0]) && node.arguments[0].elements.length === 0) {
+        } else if (terminal === "each" && props.length === 1 && node.arguments.length > 0 && ts3.isArrayLiteralExpression(node.arguments[0]) && node.arguments[0].elements.length === 0) {
           push(terminalNode, [], "an empty .each table (no case ever runs)");
         }
         if (props.length === 0) {
           for (const arg of node.arguments) {
-            if (!ts2.isObjectLiteralExpression(arg)) continue;
+            if (!ts3.isObjectLiteralExpression(arg)) continue;
             for (const prop of arg.properties) {
-              if (ts2.isPropertyAssignment(prop)) {
+              if (ts3.isPropertyAssignment(prop)) {
                 let name = null;
                 let propertyCauses = [];
-                if (ts2.isIdentifier(prop.name) || ts2.isStringLiteralLike(prop.name)) {
+                if (ts3.isIdentifier(prop.name) || ts3.isStringLiteralLike(prop.name)) {
                   name = prop.name.text;
-                } else if (ts2.isComputedPropertyName(prop.name)) {
+                } else if (ts3.isComputedPropertyName(prop.name)) {
                   const resolved = staticPropertyName(prop.name.expression, ctx, strings);
                   name = resolved?.name ?? null;
                   propertyCauses = resolved?.causes ?? [];
@@ -1768,7 +1941,7 @@ function semanticSkipHits(ctx) {
                 if (!optionDisables(prop.initializer)) continue;
                 const why = name === "only" ? "an { only: ... } option focusing the test" : name === "todo" ? "a { todo: ... } option (the test no longer fails the run)" : "a { skip: ... } option disabling the test";
                 push(prop.name, propertyCauses, why);
-              } else if (ts2.isShorthandPropertyAssignment(prop) && ["skip", "todo", "only"].includes(prop.name.text)) {
+              } else if (ts3.isShorthandPropertyAssignment(prop) && ["skip", "todo", "only"].includes(prop.name.text)) {
                 if (!shorthandOptionDisables(prop, ctx)) continue;
                 push(prop.name, [], `a { ${prop.name.text} } option that conditionally narrows the test run`);
               }
@@ -1777,7 +1950,7 @@ function semanticSkipHits(ctx) {
         }
       }
     }
-    ts2.forEachChild(node, visit);
+    ts3.forEachChild(node, visit);
   };
   visit(ctx.sf);
   return hits;
@@ -1816,7 +1989,7 @@ function astSkipHits(c) {
   return { hits, authoritative: true };
 }
 var testSkip = {
-  id: RULE3,
+  id: RULE4,
   surface: ["file"],
   certainty: "mechanical",
   run(changes, policy) {
@@ -1834,7 +2007,7 @@ var testSkip = {
         for (const hit of analysis.hits) {
           astHitLines.add(hit.line);
           out2.push(
-            makeFinding(RULE3, policy, {
+            makeFinding(RULE4, policy, {
               file: c.path,
               line: hit.line,
               message: `Test skipped or narrowed: ${hit.why}.`,
@@ -1852,7 +2025,7 @@ var testSkip = {
           if (comment && !p.comment) continue;
           if (matchesOutsideString(p, l.content, lang)) {
             out2.push(
-              makeFinding(RULE3, policy, {
+              makeFinding(RULE4, policy, {
                 file: c.path,
                 line: l.newLine ?? void 0,
                 message: `Test skipped or narrowed: ${p.why}.`,
@@ -1871,7 +2044,7 @@ var testSkip = {
 
 // src/detectors/coverage-lowering.ts
 import picomatch2 from "picomatch";
-import ts3 from "typescript";
+import ts4 from "typescript";
 
 // src/detectors/repo.ts
 import { execFileSync as execFileSync4 } from "node:child_process";
@@ -1994,34 +2167,34 @@ function containsProtected(token, policy, category, ctx, except) {
 }
 
 // src/detectors/coverage-lowering.ts
-var RULE4 = "coverage-lowering";
+var RULE5 = "coverage-lowering";
 var METRICS = ["branches", "functions", "lines", "statements"];
-var isMetric = (k) => METRICS.includes(k);
+var isMetric = (k) => METRICS.some((m) => m === k);
 var norm = (p) => p.replace(/^\.\//, "");
 function keyName(name) {
-  if (ts3.isIdentifier(name) || ts3.isStringLiteral(name) || ts3.isNumericLiteral(name)) return name.text;
+  if (ts4.isIdentifier(name) || ts4.isStringLiteral(name) || ts4.isNumericLiteral(name)) return name.text;
   return null;
 }
 function numericOf(e) {
-  if (ts3.isNumericLiteral(e)) return Number(e.text);
-  if (ts3.isStringLiteral(e) && /^-?\d+(?:\.\d+)?$/.test(e.text.trim())) return Number(e.text);
-  if (ts3.isPrefixUnaryExpression(e) && e.operator === ts3.SyntaxKind.MinusToken && ts3.isNumericLiteral(e.operand)) {
+  if (ts4.isNumericLiteral(e)) return Number(e.text);
+  if (ts4.isStringLiteral(e) && /^-?\d+(?:\.\d+)?$/.test(e.text.trim())) return Number(e.text);
+  if (ts4.isPrefixUnaryExpression(e) && e.operator === ts4.SyntaxKind.MinusToken && ts4.isNumericLiteral(e.operand)) {
     return -Number(e.operand.text);
   }
   return void 0;
 }
 function metricsOf(expr, resolve10) {
   const obj = resolve10(expr);
-  if (!ts3.isObjectLiteralExpression(obj)) return void 0;
+  if (!ts4.isObjectLiteralExpression(obj)) return void 0;
   const out2 = { values: {}, opaque: false };
   let any = false;
   for (const p of obj.properties) {
-    if (ts3.isSpreadAssignment(p)) {
+    if (ts4.isSpreadAssignment(p)) {
       out2.opaque = true;
       any = true;
       continue;
     }
-    if (!ts3.isPropertyAssignment(p)) continue;
+    if (!ts4.isPropertyAssignment(p)) continue;
     const k = keyName(p.name);
     if (k === null || !isMetric(k)) continue;
     any = true;
@@ -2033,34 +2206,34 @@ function metricsOf(expr, resolve10) {
 }
 function underKey(node, key2) {
   for (let p = node.parent; p; p = p.parent) {
-    if (ts3.isPropertyAssignment(p) && keyName(p.name) === key2) return true;
+    if (ts4.isPropertyAssignment(p) && keyName(p.name) === key2) return true;
   }
   return false;
 }
 function ownerKey(node) {
   const obj = node.parent;
-  if (!obj || !ts3.isObjectLiteralExpression(obj)) return null;
+  if (!obj || !ts4.isObjectLiteralExpression(obj)) return null;
   let q = obj.parent;
-  while (q && (ts3.isParenthesizedExpression(q) || ts3.isAsExpression(q) || q.kind === ts3.SyntaxKind.SatisfiesExpression)) q = q.parent;
-  return q && ts3.isPropertyAssignment(q) ? keyName(q.name) : null;
+  while (q && (ts4.isParenthesizedExpression(q) || ts4.isAsExpression(q) || q.kind === ts4.SyntaxKind.SatisfiesExpression)) q = q.parent;
+  return q && ts4.isPropertyAssignment(q) ? keyName(q.name) : null;
 }
 function asExpression(src) {
   const t = src.trim();
   return t.startsWith("{") ? `(${t})` : src;
 }
 function sourceOf(src) {
-  return ts3.createSourceFile("cfg.ts", asExpression(src), ts3.ScriptTarget.Latest, true, ts3.ScriptKind.TS);
+  return ts4.createSourceFile("cfg.ts", asExpression(src), ts4.ScriptTarget.Latest, true, ts4.ScriptKind.TS);
 }
 function resolverFor(sf) {
   const consts = /* @__PURE__ */ new Map();
   for (const st of sf.statements) {
-    if (!ts3.isVariableStatement(st)) continue;
+    if (!ts4.isVariableStatement(st)) continue;
     for (const d of st.declarationList.declarations) {
-      if (ts3.isIdentifier(d.name) && d.initializer) consts.set(d.name.text, d.initializer);
+      if (ts4.isIdentifier(d.name) && d.initializer) consts.set(d.name.text, d.initializer);
     }
   }
   return (e) => {
-    if (ts3.isIdentifier(e)) {
+    if (ts4.isIdentifier(e)) {
       const bound = consts.get(e.text);
       return bound ?? e;
     }
@@ -2073,25 +2246,25 @@ function parseThresholds(src) {
     const sf = sourceOf(src);
     const resolve10 = resolverFor(sf);
     const visit = (node) => {
-      if (ts3.isPropertyAssignment(node)) {
+      if (ts4.isPropertyAssignment(node)) {
         const key2 = keyName(node.name);
         if (key2 === "coverageThreshold" || key2 === "thresholds" && underKey(node, "coverage")) {
           res.present = true;
           const init = resolve10(node.initializer);
-          if (!ts3.isObjectLiteralExpression(init)) {
+          if (!ts4.isObjectLiteralExpression(init)) {
             res.opaque = true;
           } else {
             const flat = metricsOf(init, resolve10);
             if (flat) res.global = merge(res.global, flat);
             for (const p of init.properties) {
-              if (ts3.isSpreadAssignment(p)) {
+              if (ts4.isSpreadAssignment(p)) {
                 res.opaque = true;
                 continue;
               }
-              if (!ts3.isPropertyAssignment(p)) continue;
+              if (!ts4.isPropertyAssignment(p)) continue;
               const k = keyName(p.name);
               if (k === null || isMetric(k)) continue;
-              if (key2 === "thresholds" && k === "100" && p.initializer.kind === ts3.SyntaxKind.TrueKeyword) {
+              if (key2 === "thresholds" && k === "100" && p.initializer.kind === ts4.SyntaxKind.TrueKeyword) {
                 res.global = merge(res.global, { values: { branches: 100, functions: 100, lines: 100, statements: 100 }, opaque: false });
                 continue;
               }
@@ -2103,7 +2276,7 @@ function parseThresholds(src) {
           }
         }
       }
-      ts3.forEachChild(node, visit);
+      ts4.forEachChild(node, visit);
     };
     visit(sf);
   } catch {
@@ -2114,12 +2287,12 @@ function merge(a, b) {
   return { values: { ...a?.values ?? {}, ...b.values }, opaque: (a?.opaque ?? false) || b.opaque };
 }
 function literals(e) {
-  if (ts3.isStringLiteral(e)) return { items: [e.text], opaque: false };
-  if (!ts3.isArrayLiteralExpression(e)) return { items: [], opaque: true };
+  if (ts4.isStringLiteral(e)) return { items: [e.text], opaque: false };
+  if (!ts4.isArrayLiteralExpression(e)) return { items: [], opaque: true };
   const items = [];
   let opaque = false;
   for (const el of e.elements) {
-    if (ts3.isStringLiteral(el) || ts3.isNoSubstitutionTemplateLiteral(el)) items.push(el.text);
+    if (ts4.isStringLiteral(el) || ts4.isNoSubstitutionTemplateLiteral(el)) items.push(el.text);
     else opaque = true;
   }
   return { items, opaque };
@@ -2130,7 +2303,7 @@ function parseLists(src) {
     const sf = sourceOf(src);
     const resolve10 = resolverFor(sf);
     const visit = (node) => {
-      if (ts3.isPropertyAssignment(node)) {
+      if (ts4.isPropertyAssignment(node)) {
         const k = keyName(node.name);
         const vitestCoverage = ownerKey(node) === "coverage";
         if (k === "collectCoverageFrom" || k === "include" && vitestCoverage) {
@@ -2144,7 +2317,7 @@ function parseLists(src) {
           if (opaque) res.opaqueIgnore = true;
         }
       }
-      ts3.forEachChild(node, visit);
+      ts4.forEachChild(node, visit);
     };
     visit(sf);
   } catch {
@@ -2155,15 +2328,15 @@ function parseSwitches(src) {
   const res = {};
   try {
     const sf = sourceOf(src);
-    const bool = (e) => e.kind === ts3.SyntaxKind.TrueKeyword ? true : e.kind === ts3.SyntaxKind.FalseKeyword ? false : void 0;
+    const bool = (e) => e.kind === ts4.SyntaxKind.TrueKeyword ? true : e.kind === ts4.SyntaxKind.FalseKeyword ? false : void 0;
     const visit = (node) => {
-      if (ts3.isPropertyAssignment(node)) {
+      if (ts4.isPropertyAssignment(node)) {
         const k = keyName(node.name);
         const owner = ownerKey(node);
         if (k === "enabled" && owner === "coverage") res.enabled = bool(node.initializer);
         else if (k === "perFile" && owner === "thresholds" && underKey(node, "coverage")) res.perFile = bool(node.initializer);
       }
-      ts3.forEachChild(node, visit);
+      ts4.forEachChild(node, visit);
     };
     visit(sf);
   } catch {
@@ -2176,11 +2349,11 @@ function sectionText(src, key2) {
     let out2 = "";
     const visit = (node) => {
       if (out2) return;
-      if (ts3.isPropertyAssignment(node) && keyName(node.name) === key2 && ts3.isObjectLiteralExpression(node.initializer)) {
+      if (ts4.isPropertyAssignment(node) && keyName(node.name) === key2 && ts4.isObjectLiteralExpression(node.initializer)) {
         out2 = node.initializer.getText(sf);
         return;
       }
-      ts3.forEachChild(node, visit);
+      ts4.forEachChild(node, visit);
     };
     visit(sf);
     return out2;
@@ -2517,7 +2690,7 @@ function gateMovedElsewhere(c, changes, policy) {
   });
 }
 var coverageLowering = {
-  id: RULE4,
+  id: RULE5,
   surface: ["file"],
   certainty: "mechanical",
   run(changes, policy, _view, ctx) {
@@ -2539,7 +2712,7 @@ var coverageLowering = {
         reasons.push(...simpleNarrowings(c.path, c.before ?? "", c.after));
         for (const reason of reasons) {
           out2.push(
-            makeFinding(RULE4, policy, {
+            makeFinding(RULE5, policy, {
               file: c.path,
               message: `Coverage gate weakened: ${reason}.`,
               evidence: reason,
@@ -2552,7 +2725,7 @@ var coverageLowering = {
         const gated = isJsConfig(c.path) ? parseThresholds(before).present : simpleWeakenings(c.path, before, "").length > 0 || SIMPLE_FILES.some((s) => s.file.test(c.path) && s.keys.some((k) => numbersOf(before, k.key).length));
         if (gated && !gateMovedElsewhere(c, changes, policy)) {
           out2.push(
-            makeFinding(RULE4, policy, {
+            makeFinding(RULE5, policy, {
               file: c.path,
               message: "Coverage gate weakened: the coverage config was deleted.",
               evidence: c.path,
@@ -2566,7 +2739,7 @@ var coverageLowering = {
       const removedCoverage = removed.find((l) => /--coverage\b/.test(l.content));
       if (removedCoverage && !added.some((l) => /--coverage\b/.test(l.content))) {
         out2.push(
-          makeFinding(RULE4, policy, {
+          makeFinding(RULE5, policy, {
             file: c.path,
             message: "The --coverage flag was removed from a test script.",
             evidence: removedCoverage.content.trim(),
@@ -2580,7 +2753,7 @@ var coverageLowering = {
           if (removed.some((r) => s.re.test(r.content))) continue;
           if (/passWithNoTests/.test(s.re.source) && dirHasSpec(c.path, policy, ctx) === false) continue;
           out2.push(
-            makeFinding(RULE4, policy, {
+            makeFinding(RULE5, policy, {
               file: c.path,
               line: l.newLine ?? void 0,
               message: s.message,
@@ -2603,7 +2776,7 @@ var coverageLowering = {
           const ov = oldNums.get(m[1]);
           if (ov !== void 0 && Number(m[2]) < ov) {
             out2.push(
-              makeFinding(RULE4, policy, {
+              makeFinding(RULE5, policy, {
                 file: c.path,
                 line: l.newLine ?? void 0,
                 message: `Coverage threshold for ${m[1]} lowered ${ov} \u2192 ${m[2]}.`,
@@ -2626,7 +2799,7 @@ var coverageLowering = {
 };
 
 // src/detectors/ci-tampering.ts
-var RULE5 = "ci-tampering";
+var RULE6 = "ci-tampering";
 var USES = /^\s*-\s*uses:/;
 var CHECK = /\b(test|tests|lint|typecheck|type-check|tsc|eslint|jest|vitest|playwright|coverage|tamperward)\b/i;
 var YAML_KEY = /^\s*-?\s*[A-Za-z_][\w-]*:\s*(?:$|\S)/;
@@ -2890,7 +3063,7 @@ function isTruthy(raw) {
   return f !== void 0 && truthy(f);
 }
 var SHELL_ERREXIT = /(?:^|\s)-[a-zA-Z]*e[a-zA-Z]*(?:\s|$)|-o\s+errexit\b/;
-var indentOf = (l) => l.match(/^\s*/)[0].length;
+var indentOf = (l) => l.length - l.trimStart().length;
 var STEP_START = /^\s*-\s+(?:name|uses|run|if|id|with|env|shell|continue-on-error|working-directory|timeout-minutes):/;
 function stepOf(lines, i) {
   const ind = indentOf(lines[i]);
@@ -3072,7 +3245,7 @@ function triggerNarrowings(before, after, opts) {
 }
 var REUSED_WORKFLOW = /^\s*uses:\s*\.\/(\.github\/workflows\/[^\s@]+)/;
 var ciTampering = {
-  id: RULE5,
+  id: RULE6,
   surface: ["file"],
   certainty: "mechanical",
   run(changes, policy, _view, ctx) {
@@ -3084,7 +3257,7 @@ var ciTampering = {
       if (c.kind !== "file") continue;
       if (c.op === "rename" && c.oldPath && isActiveWorkflow(c.oldPath) && !isActiveWorkflow(c.path)) {
         out2.push(
-          makeFinding(RULE5, policy, {
+          makeFinding(RULE6, policy, {
             file: c.path,
             message: `A CI workflow was renamed so it no longer runs (${c.oldPath} \u2192 ${c.path}).`,
             evidence: `${c.oldPath} \u2192 ${c.path}`,
@@ -3108,7 +3281,7 @@ var ciTampering = {
         }
         if (coe && isTruthy(coe[1])) {
           out2.push(
-            makeFinding(RULE5, policy, {
+            makeFinding(RULE6, policy, {
               file: c.path,
               line: l.newLine ?? void 0,
               message: "continue-on-error: true added \u2014 failures will no longer fail the job.",
@@ -3118,7 +3291,7 @@ var ciTampering = {
           );
         } else if (cond && isAlwaysFalse(cond[1])) {
           out2.push(
-            makeFinding(RULE5, policy, {
+            makeFinding(RULE6, policy, {
               file: c.path,
               line: l.newLine ?? void 0,
               message: `if: ${uncommented(cond[1])} added \u2014 this step can never run.`,
@@ -3138,7 +3311,7 @@ var ciTampering = {
             const n = NEUTRALISERS.find((x) => x.re.test(b.body[k]));
             if (!n || propagates && /set\s\+e/.test(b.body[k])) continue;
             out2.push(
-              makeFinding(RULE5, policy, {
+              makeFinding(RULE6, policy, {
                 file: c.path,
                 line: idx + 1,
                 message: `A check's run block was neutralised: ${n.what}.`,
@@ -3154,7 +3327,7 @@ var ciTampering = {
           const step = stepOf(afterLines, l.newLine - 1);
           if (step && !stepHasCheck(afterLines, step)) continue;
           out2.push(
-            makeFinding(RULE5, policy, {
+            makeFinding(RULE6, policy, {
               file: c.path,
               line: l.newLine,
               message: "shell: \u2026 {0} added on a check step \u2014 the shell no longer stops on the first failure.",
@@ -3163,11 +3336,11 @@ var ciTampering = {
             })
           );
         }
-        if (c.before != null) {
+        if (c.before != null && c.after != null) {
           triggerOpts ??= { defaultBranch: defaultBranch(ctx), sources: sourceProbes(ctx), hasBranch: (b) => branchExists(b, ctx) };
           for (const reason of triggerNarrowings(parseTriggers(c.before), parseTriggers(c.after), triggerOpts)) {
             out2.push(
-              makeFinding(RULE5, policy, {
+              makeFinding(RULE6, policy, {
                 file: c.path,
                 message: `The workflow's triggers were narrowed: ${reason}.`,
                 evidence: reason,
@@ -3196,7 +3369,7 @@ var ciTampering = {
         if (s.state === "kept") continue;
         if (s.state === "neutralised") {
           out2.push(
-            makeFinding(RULE5, policy, {
+            makeFinding(RULE6, policy, {
               file: c.path,
               message: "A CI check command was neutralised in place: it still runs, but its result no longer decides (or its suite was narrowed).",
               evidence: `${l.content.trim()} \u2192 ${s.by}`,
@@ -3206,7 +3379,7 @@ var ciTampering = {
           continue;
         }
         out2.push(
-          makeFinding(RULE5, policy, {
+          makeFinding(RULE6, policy, {
             file: c.path,
             message: isUsesLine ? "A CI check step (test/lint/typecheck) was removed." : "A CI check command was removed from a run block.",
             evidence: l.content.trim(),
@@ -3235,7 +3408,7 @@ function shippedVersion() {
     for (const rel of ["../package.json", "../../package.json", "../../../package.json"]) {
       try {
         const pkg = JSON.parse(readFileSync3(join5(here, rel), "utf8"));
-        if (pkg.name === "tamperward" && typeof pkg.version === "string" && PLAIN_SEMVER.test(pkg.version)) {
+        if (isRecord(pkg) && pkg.name === "tamperward" && typeof pkg.version === "string" && PLAIN_SEMVER.test(pkg.version)) {
           return pkg.version;
         }
       } catch {
@@ -3319,11 +3492,25 @@ function resolvesToClaudeSettings(path, env = process.env) {
 
 // src/detectors/policy-diff.ts
 import { parse } from "yaml";
+function verifyBlock(v) {
+  if (!isRecord(v)) return void 0;
+  return {
+    ...typeof v.command === "string" ? { command: v.command } : {},
+    ...typeof v.budget === "number" ? { budget: v.budget } : {},
+    ...Array.isArray(v.inputs) ? { inputs: v.inputs.filter((g) => typeof g === "string") } : {},
+    ...typeof v.backend === "string" ? { backend: v.backend } : {},
+    ...typeof v.image === "string" ? { image: v.image } : {}
+  };
+}
+function ruleOverrides(v) {
+  if (!isRecord(v)) return {};
+  return Object.fromEntries(Object.entries(v).map(([name, cfg]) => [name, isRecord(cfg) ? cfg : {}]));
+}
 var globs2 = (list2) => Array.isArray(list2) ? list2.filter((g) => typeof g === "string").map(normalizeGlob) : [];
 function safeParse(src) {
   try {
     const v = parse(src);
-    if (v && typeof v === "object" && !Array.isArray(v)) return v;
+    if (isRecord(v)) return v;
     return null;
   } catch {
     return null;
@@ -3334,18 +3521,24 @@ function effective(raw) {
   const version = typeof v === "number" && Number.isInteger(v) && v >= 1 ? v : 1;
   const base = defaultPolicy(version);
   const rules = { ...base.rules };
-  for (const [name, cfg] of Object.entries(raw.rules ?? {})) {
-    const over = cfg && typeof cfg === "object" && !Array.isArray(cfg) ? cfg : {};
-    rules[name] = { ...rules[name] ?? {}, ...over, ...over.exclude ? { exclude: globs2(over.exclude) } : {} };
+  for (const [name, over] of Object.entries(ruleOverrides(raw.rules))) {
+    rules[name] = {
+      ...rules[name] ?? {},
+      ...over.severity !== void 0 ? { severity: over.severity } : {},
+      ...over.enabled !== void 0 ? { enabled: over.enabled } : {},
+      ...over.exclude !== void 0 ? { exclude: globs2(over.exclude) } : {}
+    };
   }
-  const userProtected = raw.protected && typeof raw.protected === "object" ? Object.fromEntries(Object.entries(raw.protected).map(([cat, list2]) => [cat, globs2(list2)])) : void 0;
+  const userProtected = isRecord(raw.protected) ? Object.fromEntries(Object.entries(raw.protected).map(([cat, list2]) => [cat, globs2(list2)])) : void 0;
+  const signoff = isRecord(raw.signoff) ? raw.signoff : {};
+  const requiredFor = [signoff.required_for, signoff.requiredFor].find(Array.isArray);
   return {
     version,
     rules,
     ignore: raw.ignore ? globs2(raw.ignore) : base.ignore ?? [],
     protected: mergeProtected(base.protected, userProtected),
-    requiredFor: raw.signoff?.required_for ?? raw.signoff?.requiredFor ?? base.signoff.requiredFor,
-    ledger: typeof raw.signoff?.ledger === "string" ? raw.signoff.ledger : base.signoff.ledger
+    requiredFor: requiredFor ? requiredFor.filter((s) => typeof s === "string") : base.signoff.requiredFor,
+    ledger: typeof signoff.ledger === "string" ? signoff.ledger : base.signoff.ledger
   };
 }
 function policyWeakening(before, after) {
@@ -3400,8 +3593,8 @@ function policyWeakening(before, after) {
   if (ae.ledger !== be.ledger) {
     reasons.push(`sign-off ledger moved (${be.ledger} \u2192 ${ae.ledger}) \u2014 the local layer would trust a different file`);
   }
-  const bv = b.verify;
-  const av = a.verify;
+  const bv = verifyBlock(b.verify);
+  const av = verifyBlock(a.verify);
   if (bv?.command) {
     if (!av?.command) {
       reasons.push("verify block removed \u2014 pristine-suite re-execution disabled");
@@ -4159,7 +4352,7 @@ function scriptWeakening(before, after, opts = {}) {
     const evidence = (trace?.line ?? before.find((l) => checkIdentity(stripComment(l).trim().replace(/^!\s+/, "").replace(PREFIX, "")) === id) ?? id).trim();
     out2.push({ reason: `the check invocation \`${id}\` was ${how}`, evidence });
   }
-  const floor = beforeInv.filter((i) => i.state === "live" && i.pin && PLAIN_SEMVER.test(i.pin)).map((i) => i.pin).sort((a, b) => compareVersions(a, b) ?? 0)[0];
+  const floor = beforeInv.flatMap((i) => i.state === "live" && i.pin && PLAIN_SEMVER.test(i.pin) ? [i.pin] : []).sort((a, b) => compareVersions(a, b) ?? 0)[0];
   if (floor) {
     for (const inv of afterInv) {
       if (inv.state !== "live" || !inv.pin) continue;
@@ -4555,7 +4748,10 @@ function destinations(cmd, args, isDir) {
     positional.push(a);
   }
   const base = (p) => p.replace(/\/+$/, "").split("/").pop() ?? p;
-  if (target !== null) return positional.map((p) => `${target.replace(/\/+$/, "")}/${base(p)}`);
+  if (target !== null) {
+    const dir = target.replace(/\/+$/, "");
+    return positional.map((p) => `${dir}/${base(p)}`);
+  }
   if (positional.length < 2) return [];
   const dest = positional[positional.length - 1];
   const srcs = positional.slice(0, -1);
@@ -4569,16 +4765,18 @@ function expandShellPath(t, env = process.env) {
 }
 function hookTests(policy, ctx) {
   const cwd = ctx?.cwd;
-  const onDisk = cwd !== void 0 && existsSync2(cwd);
-  const root = onDisk ? canonicalPath(cwd) : cwd;
+  const diskCwd = cwd !== void 0 && existsSync2(cwd) ? cwd : void 0;
+  const onDisk = diskCwd !== void 0;
+  const root = diskCwd !== void 0 ? canonicalPath(diskCwd) : cwd;
   const memo = /* @__PURE__ */ new Map();
   const rel = (t) => {
     const hit = memo.get(t);
     if (hit !== void 0) return hit;
     let p = expandShellPath(t.replace(/^["']|["']$/g, ""));
     const pathy = isAbsolute4(p) || p.includes("/") && !/^[-:]/.test(p);
-    if (pathy && (isAbsolute4(p) || onDisk)) {
-      p = canonicalPath(isAbsolute4(p) ? p : resolve2(cwd, p));
+    const abs2 = isAbsolute4(p) ? p : diskCwd !== void 0 ? resolve2(diskCwd, p) : null;
+    if (pathy && abs2 !== null) {
+      p = canonicalPath(abs2);
       if (root !== void 0) {
         if (p === root) p = ".";
         else if (p.startsWith(root + "/")) p = p.slice(root.length + 1);
@@ -4743,7 +4941,7 @@ function xargsWritesHook(toks, fed, policy, ctx) {
 }
 
 // src/detectors/hook-tampering.ts
-var RULE6 = "hook-tampering";
+var RULE7 = "hook-tampering";
 var ownerExec2 = (mode) => (parseInt(mode.slice(-3), 8) & 64) !== 0;
 var EVENTS = ["PreToolUse", "Stop"];
 var isObj = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
@@ -4959,7 +5157,7 @@ function coverage(cs) {
   const live = cs.filter((c) => c.runs);
   if (live.length === 0) return "none";
   if (live.some((c) => c.tools === null)) return null;
-  return new Set(live.flatMap((c) => [...c.tools]));
+  return new Set(live.flatMap((c) => c.tools ? [...c.tools] : []));
 }
 function duplicateJsonKeys(src) {
   const dups = [];
@@ -5072,7 +5270,7 @@ function settingsWeakening(before, after, local) {
       const schema = schemaProblem(e.group, e.h);
       if (schema) {
         reasons.push(`a ${e.event} hook entry carries a value the runtime's schema rejects (${schema}) \u2014 the runtime continues without the broken file, the gate included`);
-      } else if (e.event === "PreToolUse" || e.event === "Stop") {
+      } else if ((e.event === "PreToolUse" || e.event === "Stop") && isObj(e.h)) {
         reasons.push(`a ${e.event} hook entry beside the gate ${siblingProblem(e.h)}`);
       }
     }
@@ -5090,7 +5288,7 @@ function claudeSettingsFindings(c, policy) {
   if (c.after == null) return null;
   const after = parseSettings(c.after);
   const before = c.before != null ? parseSettings(c.before) : null;
-  const finding = (reason) => makeFinding(RULE6, policy, {
+  const finding = (reason) => makeFinding(RULE7, policy, {
     file: c.path,
     message: `The Claude Code hook wiring was weakened: ${reason}.`,
     evidence: reason,
@@ -5111,10 +5309,10 @@ function claudeSettingsFindings(c, policy) {
 function policyFindings(c, policy) {
   if (c.after == null) return null;
   const added = c.before == null;
-  const reasons = added ? policyAddWeakening(c.after) : policyWeakening(c.before, c.after);
+  const reasons = c.before == null ? policyAddWeakening(c.after) : policyWeakening(c.before, c.after);
   if (reasons === null) return null;
   return reasons.map(
-    (reason) => makeFinding(RULE6, policy, {
+    (reason) => makeFinding(RULE7, policy, {
       file: c.path,
       message: added ? `A policy file was added that weakens the baseline: ${reason}.` : `The policy was weakened: ${reason}.`,
       evidence: reason,
@@ -5177,7 +5375,7 @@ function configFindings(c, changes, policy, ctx) {
     reasons = after === null ? ["the file no longer parses as YAML \u2014 the tool that reads it runs nothing"] : isLefthook(c.path) ? lefthookWeakening(before, after) : preCommitWeakening(before, after);
   }
   return reasons.map(
-    (reason) => makeFinding(RULE6, policy, {
+    (reason) => makeFinding(RULE7, policy, {
       file: c.path,
       message: `The hook configuration was weakened: ${reason}.`,
       evidence: reason,
@@ -5260,7 +5458,7 @@ function huskyRuntimeWrite(path, content, ctx) {
   const root = path.slice(0, path.length - m[0].length + (m[0].startsWith("/") ? 1 : 0));
   const entry = inspectRel(join6(ctx.cwd, root), ".husky/pre-commit");
   if (entry.kind !== "file") return false;
-  const gate = textOf(entry);
+  const gate = textOf2(entry);
   if (gate == null) return false;
   return invocations(gate.split("\n"), { errexit: true }).some(
     (i) => i.identity === "tamperward check --staged" && i.state === "live" && i.pin === TW_VERSION
@@ -5269,7 +5467,7 @@ function huskyRuntimeWrite(path, content, ctx) {
 var isHuskyScript = (path) => /(?:^|\/)\.husky\/[^/]+$/.test(path);
 var isHookNote = (path) => /\.(?:md|markdown|txt)$|(?:^|\/)\.git(?:ignore|attributes)$/i.test(path);
 var hookTampering = {
-  id: RULE6,
+  id: RULE7,
   surface: ["file", "command"],
   certainty: "mechanical",
   run(changes, policy, _view, ctx) {
@@ -5282,7 +5480,7 @@ var hookTampering = {
           if (isPackageJson(c.path) && c.before != null && c.after != null) {
             for (const reason of packageJsonWeakening(c.before, c.after)) {
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   message: `The hook installation was weakened: ${reason}.`,
                   evidence: reason,
@@ -5295,7 +5493,7 @@ var hookTampering = {
         }
         if (c.op !== "delete" && c.oldMode && c.newMode && ownerExec2(c.oldMode) && !ownerExec2(c.newMode)) {
           out2.push(
-            makeFinding(RULE6, policy, {
+            makeFinding(RULE7, policy, {
               file: c.path,
               message: `Execute permission was removed from a protected hook (${c.oldMode} \u2192 ${c.newMode}) \u2014 git will skip it.`,
               evidence: `${c.path}: mode ${c.oldMode} \u2192 ${c.newMode}`,
@@ -5305,7 +5503,7 @@ var hookTampering = {
         }
         if (c.op === "delete") {
           out2.push(
-            makeFinding(RULE6, policy, {
+            makeFinding(RULE7, policy, {
               file: c.path,
               message: "A protected hook/policy file was deleted.",
               evidence: c.path,
@@ -5314,7 +5512,7 @@ var hookTampering = {
           );
         } else if (c.op === "rename" && !renameKept(c)) {
           out2.push(
-            makeFinding(RULE6, policy, {
+            makeFinding(RULE7, policy, {
               file: c.path,
               message: `A protected hook/policy file was renamed (${c.oldPath} \u2192 ${c.path}).`,
               evidence: `${c.oldPath} \u2192 ${c.path}`,
@@ -5328,7 +5526,7 @@ var hookTampering = {
           if (c.before != null && c.after != null) {
             for (const reason of codeownersWeakening(c.before, c.after, [...repoGateFiles(ctx), c.path])) {
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   message: `CODEOWNERS was weakened: ${reason}.`,
                   evidence: reason,
@@ -5344,12 +5542,12 @@ var hookTampering = {
           const husky = isHuskyScript(c.path);
           const opts = husky ? { errexit: true } : {};
           const beforePin = c.before != null && c.after != null ? initScriptPin(c.before) : null;
-          if (beforePin !== null) {
+          if (beforePin !== null && c.after != null) {
             const afterPin = initScriptPin(c.after);
             const kept = afterPin !== null && (beforePin === "" ? afterPin === "" || PLAIN_SEMVER.test(afterPin) : pinNotBelow(afterPin, beforePin));
             if (!kept) {
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   message: "A protected hook script no longer matches the shape `tamperward init` writes.",
                   evidence: "the gate script no longer matches the shape init wrote; re-run init or sign off",
@@ -5372,7 +5570,7 @@ var hookTampering = {
             if (shebang || !live) {
               const why = shebang ?? (gate.length ? `its \`${gate[0].identity}\` is ${gate[0].state}${gate[0].why ? ` (${gate[0].why})` : ""}` : "it runs no `tamperward check`");
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   message: `A protected hook script was added that does not run the gate live: ${why}. A new gate script needs a sign-off unless the gate is live in it.`,
                   evidence: `a hook script was added; sign off with \`tamperward allow hook-tampering --file ${c.path} --reason "..."\` locally or the \`tamperward:allow:hook-tampering@<head-sha>\` label in CI, or make the gate live in it`,
@@ -5381,7 +5579,7 @@ var hookTampering = {
               );
             } else if (earlyExit) {
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   line: earlyExit.newLine ?? void 0,
                   message: "An early `exit 0` was inserted into a protected hook \u2014 it now passes everything.",
@@ -5403,7 +5601,7 @@ var hookTampering = {
                 deadGuard2 ? `a guard that can never be true was inserted (\`${deadGuard2.content.trim()}\`)` : null
               ].filter((d) => d !== null);
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   message: `A hand-written protected hook script was changed: ${detail.length ? detail.join("; ") : "an edit other than a pin raise"}. Every edit to a gate script other than raising its pin needs a sign-off.`,
                   evidence: `the gate script changed; sign off with \`tamperward allow hook-tampering --file ${c.path} --reason "..."\` locally or the \`tamperward:allow:hook-tampering@<head-sha>\` label in CI, or restore it`,
@@ -5415,7 +5613,7 @@ var hookTampering = {
           }
           if (shebangChanged && c.after != null) {
             out2.push(
-              makeFinding(RULE6, policy, {
+              makeFinding(RULE7, policy, {
                 file: c.path,
                 line: 1,
                 message: `A protected hook's interpreter was changed: ${shebang}.`,
@@ -5426,7 +5624,7 @@ var hookTampering = {
           }
           if (earlyExit) {
             out2.push(
-              makeFinding(RULE6, policy, {
+              makeFinding(RULE7, policy, {
                 file: c.path,
                 line: earlyExit.newLine ?? void 0,
                 message: "An early `exit 0` was inserted into a protected hook \u2014 it now passes everything.",
@@ -5438,7 +5636,7 @@ var hookTampering = {
           const deadGuard = c.before == null || c.after == null ? added.find((l) => insertsDeadGuard(l.content)) : void 0;
           if (deadGuard) {
             out2.push(
-              makeFinding(RULE6, policy, {
+              makeFinding(RULE7, policy, {
                 file: c.path,
                 line: deadGuard.newLine ?? void 0,
                 message: "A guard that can never be true was inserted into a protected hook \u2014 what it wraps no longer runs.",
@@ -5450,7 +5648,7 @@ var hookTampering = {
           const lost = scriptWeakening(beforeLines, afterLines, opts);
           if (lost.length) {
             out2.push(
-              makeFinding(RULE6, policy, {
+              makeFinding(RULE7, policy, {
                 file: c.path,
                 message: `A check invocation was removed from a protected hook: ${lost[0].reason}.`,
                 evidence: lost[0].evidence,
@@ -5469,7 +5667,7 @@ var hookTampering = {
             const m = l.content.match(INLINE);
             if (m && m[2] === "warn" && removedSeverity.get(m[1]) === "block") {
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
                   message: `Rule "${m[1]}" was lowered from block to warn in the policy.`,
@@ -5479,7 +5677,7 @@ var hookTampering = {
               );
             } else if (/enabled:\s*false\b/.test(l.content)) {
               out2.push(
-                makeFinding(RULE6, policy, {
+                makeFinding(RULE7, policy, {
                   file: c.path,
                   line: l.newLine ?? void 0,
                   message: "A rule was disabled (enabled: false) in the policy.",
@@ -5497,7 +5695,7 @@ var hookTampering = {
           const hiding = updateIndexHiding(toks, policy);
           if (hiding) {
             out2.push(
-              makeFinding(RULE6, policy, {
+              makeFinding(RULE7, policy, {
                 file: repoRelative(hiding.file, ctx),
                 message: `Hook tampering via shell: ${hiding.reason}.`,
                 evidence: seg,
@@ -5513,7 +5711,7 @@ var hookTampering = {
             const file = target ? repoRelative(target, ctx) : void 0;
             const outside = file !== void 0 && (isAbsolute5(file) || /^[A-Za-z]:\//.test(file)) && isClaudeSettings(file) ? ` \u2014 ${file} is a Claude Code settings file the runtime reads hooks from` : "";
             out2.push(
-              makeFinding(RULE6, policy, {
+              makeFinding(RULE7, policy, {
                 ...file !== void 0 ? { file } : {},
                 message: `Hook tampering via shell: ${why}${outside}.`,
                 evidence: seg,
@@ -5530,11 +5728,11 @@ var hookTampering = {
 };
 
 // src/detectors/test-deletion.ts
-import ts5 from "typescript";
+import ts6 from "typescript";
 
 // src/detectors/suite-config.ts
 import picomatch3 from "picomatch";
-import ts4 from "typescript";
+import ts5 from "typescript";
 var JEST_DEFAULT_MATCH = ["**/__tests__/**/*.[jt]s?(x)", "**/?(*.)+(spec|test).[jt]s?(x)"];
 var JEST_DEFAULT_IGNORE = ["/node_modules/"];
 var VITEST_DEFAULT_INCLUDE = ["**/*.{test,spec}.?(c|m)[jt]s?(x)"];
@@ -5565,18 +5763,18 @@ var PYTEST_CANONICAL_SAMPLES = [
   "tests/conftest.py"
 ];
 function keyName2(name) {
-  if (ts4.isIdentifier(name) || ts4.isStringLiteral(name)) return name.text;
+  if (ts5.isIdentifier(name) || ts5.isStringLiteral(name)) return name.text;
   return null;
 }
-var isStr = (e) => ts4.isStringLiteral(e) || ts4.isNoSubstitutionTemplateLiteral(e);
+var isStr = (e) => ts5.isStringLiteral(e) || ts5.isNoSubstitutionTemplateLiteral(e);
 function literals2(e) {
   if (isStr(e)) return { items: [e.text], opaque: false };
-  if (!ts4.isArrayLiteralExpression(e)) return { items: [], opaque: true };
+  if (!ts5.isArrayLiteralExpression(e)) return { items: [], opaque: true };
   const items = [];
   let opaque = false;
   for (const el of e.elements) {
     if (isStr(el)) items.push(el.text);
-    else if (ts4.isSpreadElement(el) && /^(?:configDefaults\.|default)(?:exclude|include)$/i.test(el.expression.getText())) {
+    else if (ts5.isSpreadElement(el) && /^(?:configDefaults\.|default)(?:exclude|include)$/i.test(el.expression.getText())) {
       items.push(.../exclude$/i.test(el.expression.getText()) ? VITEST_DEFAULT_EXCLUDE : VITEST_DEFAULT_INCLUDE);
     } else opaque = true;
   }
@@ -5584,10 +5782,10 @@ function literals2(e) {
 }
 function ownerKey2(node) {
   const obj = node.parent;
-  if (!obj || !ts4.isObjectLiteralExpression(obj)) return null;
+  if (!obj || !ts5.isObjectLiteralExpression(obj)) return null;
   let q = obj.parent;
-  while (q && (ts4.isParenthesizedExpression(q) || ts4.isAsExpression(q) || q.kind === ts4.SyntaxKind.SatisfiesExpression)) q = q.parent;
-  return q && ts4.isPropertyAssignment(q) ? keyName2(q.name) : null;
+  while (q && (ts5.isParenthesizedExpression(q) || ts5.isAsExpression(q) || q.kind === ts5.SyntaxKind.SatisfiesExpression)) q = q.parent;
+  return q && ts5.isPropertyAssignment(q) ? keyName2(q.name) : null;
 }
 function asExpression2(src) {
   const t = src.trim();
@@ -5622,13 +5820,12 @@ function effectivePytestFile(files) {
 function effectivePytestConfig(path, ctx) {
   if (path.includes("/")) return false;
   const base = path;
-  const ORDER = PYTEST_INI_ORDER;
-  const rank = ORDER.indexOf(base);
+  const rank = PYTEST_INI_ORDER.findIndex((name) => name === base);
   if (rank < 0) return false;
   const files = ctx?.trackedFiles;
   if (!files) return true;
   const rootNames = new Set(files.filter((f) => !f.includes("/")));
-  return !ORDER.slice(0, rank).some((n) => rootNames.has(n));
+  return !PYTEST_INI_ORDER.slice(0, rank).some((n) => rootNames.has(n));
 }
 function pytestBlock(src) {
   const lines = src.split(/\r?\n/);
@@ -5728,15 +5925,15 @@ function collect(root, runner) {
     projectList = e;
   };
   const visit = (node) => {
-    if (ts4.isSpreadAssignment(node) && spreadsIntoConfig(node, runner)) {
+    if (ts5.isSpreadAssignment(node) && spreadsIntoConfig(node, runner)) {
       sel.present = true;
       sel.opaque = true;
     }
-    if (ts4.isCallExpression(node) && /^(?:\w+\.)?mergeConfig$/.test(node.expression.getText()) && node.arguments[0] && !ts4.isObjectLiteralExpression(unwrapConfigCall(node.arguments[0]))) {
+    if (ts5.isCallExpression(node) && /^(?:\w+\.)?mergeConfig$/.test(node.expression.getText()) && node.arguments[0] && !ts5.isObjectLiteralExpression(unwrapConfigCall(node.arguments[0]))) {
       sel.present = true;
       sel.opaque = true;
     }
-    if (ts4.isPropertyAssignment(node)) {
+    if (ts5.isPropertyAssignment(node)) {
       const k = keyName2(node.name);
       if (runner === "jest") {
         if (k === "testMatch") sel.include = take(k, node.initializer);
@@ -5766,7 +5963,7 @@ function collect(root, runner) {
         }
       }
     }
-    ts4.forEachChild(node, visit);
+    ts5.forEachChild(node, visit);
   };
   visit(root);
   if (projectList) sel.projects = readProjects(projectList, sel, runner);
@@ -5775,30 +5972,30 @@ function collect(root, runner) {
 }
 function unwrapConfigCall(e) {
   let x = e;
-  while (ts4.isParenthesizedExpression(x) || ts4.isAsExpression(x) || x.kind === ts4.SyntaxKind.SatisfiesExpression) {
+  while (ts5.isParenthesizedExpression(x) || ts5.isAsExpression(x) || ts5.isSatisfiesExpression(x)) {
     x = x.expression;
   }
-  if (ts4.isCallExpression(x) && /^(?:\w+\.)?define(?:Config|Project)$/.test(x.expression.getText()) && x.arguments[0]) return unwrapConfigCall(x.arguments[0]);
+  if (ts5.isCallExpression(x) && /^(?:\w+\.)?define(?:Config|Project)$/.test(x.expression.getText()) && x.arguments[0]) return unwrapConfigCall(x.arguments[0]);
   return x;
 }
 var JEST_SELECTION_KEYS = /^(?:testMatch|testRegex|testPathIgnorePatterns|modulePathIgnorePatterns|roots|rootDir|projects)$/;
 function spreadsIntoConfig(node, runner) {
   const obj = node.parent;
-  if (!ts4.isObjectLiteralExpression(obj)) return false;
-  const keys = obj.properties.map((p) => ts4.isPropertyAssignment(p) ? keyName2(p.name) : null);
+  if (!ts5.isObjectLiteralExpression(obj)) return false;
+  const keys = obj.properties.map((p) => ts5.isPropertyAssignment(p) ? keyName2(p.name) : null);
   if (runner === "vitest") {
     if (keys.includes("test")) return true;
     let q = obj.parent;
-    while (q && (ts4.isParenthesizedExpression(q) || ts4.isAsExpression(q) || q.kind === ts4.SyntaxKind.SatisfiesExpression)) q = q.parent;
-    return !!q && ts4.isPropertyAssignment(q) && keyName2(q.name) === "test";
+    while (q && (ts5.isParenthesizedExpression(q) || ts5.isAsExpression(q) || q.kind === ts5.SyntaxKind.SatisfiesExpression)) q = q.parent;
+    return !!q && ts5.isPropertyAssignment(q) && keyName2(q.name) === "test";
   }
   return keys.some((k) => k !== null && JEST_SELECTION_KEYS.test(k));
 }
 function extendsOf(el) {
   for (const p of el.properties) {
-    if (!ts4.isPropertyAssignment(p) || keyName2(p.name) !== "extends") continue;
-    if (p.initializer.kind === ts4.SyntaxKind.TrueKeyword) return true;
-    if (p.initializer.kind === ts4.SyntaxKind.FalseKeyword) return null;
+    if (!ts5.isPropertyAssignment(p) || keyName2(p.name) !== "extends") continue;
+    if (p.initializer.kind === ts5.SyntaxKind.TrueKeyword) return true;
+    if (p.initializer.kind === ts5.SyntaxKind.FalseKeyword) return null;
     return "path";
   }
   return null;
@@ -5819,14 +6016,14 @@ function readProject(el, root, runner) {
   return p;
 }
 function readProjects(e, root, runner) {
-  if (!ts4.isArrayLiteralExpression(e)) {
+  if (!ts5.isArrayLiteralExpression(e)) {
     root.opaque = true;
     return [];
   }
   const list2 = [];
   for (const el of e.elements) {
     const lit = unwrapConfigCall(el);
-    if (ts4.isObjectLiteralExpression(lit)) list2.push(readProject(lit, root, runner));
+    if (ts5.isObjectLiteralExpression(lit)) list2.push(readProject(lit, root, runner));
     else root.opaque = true;
   }
   return list2;
@@ -5834,14 +6031,14 @@ function readProjects(e, root, runner) {
 function workspaceArray(sf) {
   for (const st of sf.statements) {
     let e;
-    if (ts4.isExportAssignment(st)) e = st.expression;
-    else if (ts4.isExpressionStatement(st) && ts4.isBinaryExpression(st.expression) && /module\.exports/.test(st.expression.left.getText())) e = st.expression.right;
+    if (ts5.isExportAssignment(st)) e = st.expression;
+    else if (ts5.isExpressionStatement(st) && ts5.isBinaryExpression(st.expression) && /module\.exports/.test(st.expression.left.getText())) e = st.expression.right;
     if (!e) continue;
-    while (ts4.isParenthesizedExpression(e) || ts4.isAsExpression(e) || e.kind === ts4.SyntaxKind.SatisfiesExpression) {
+    while (ts5.isParenthesizedExpression(e) || ts5.isAsExpression(e) || ts5.isSatisfiesExpression(e)) {
       e = e.expression;
     }
-    if (ts4.isCallExpression(e) && e.arguments.length > 0) e = e.arguments[0];
-    return ts4.isArrayLiteralExpression(e) ? e : null;
+    if (ts5.isCallExpression(e) && e.arguments.length > 0) e = e.arguments[0];
+    return ts5.isArrayLiteralExpression(e) ? e : null;
   }
   return null;
 }
@@ -5849,7 +6046,7 @@ function parseSelection(src, runner, path = "") {
   let sel = empty();
   if (runner === "pytest") return pytestSelection(src);
   try {
-    const sf = ts4.createSourceFile("cfg.ts", asExpression2(src), ts4.ScriptTarget.Latest, true, ts4.ScriptKind.TS);
+    const sf = ts5.createSourceFile("cfg.ts", asExpression2(src), ts5.ScriptTarget.Latest, true, ts5.ScriptKind.TS);
     if (runner === "vitest" && isWorkspaceFile(path)) {
       const arr = workspaceArray(sf);
       if (arr) {
@@ -5943,7 +6140,7 @@ function suiteNarrowings(before, after, path, samples) {
 }
 
 // src/detectors/test-deletion.ts
-var RULE7 = "test-deletion";
+var RULE8 = "test-deletion";
 var JVM_TEST = /^\s*(?:@\w+(?:\([^)]*\))?\s+)*@(?:Test|ParameterizedTest|RepeatedTest|TestFactory|TestTemplate)\b/;
 var TEST_DEFS = {
   py: /^\s*(?:async\s+)?def\s+test\w*\s*\(/,
@@ -5956,21 +6153,21 @@ var TEST_DEFS = {
   cs: /^\s*\[(?:Fact|Theory|Test|TestMethod|TestCase|DataTestMethod)\b/
 };
 function calleeName(expr) {
-  if (ts5.isIdentifier(expr)) return expr.text;
-  if (ts5.isPropertyAccessExpression(expr) && ts5.isIdentifier(expr.expression)) {
+  if (ts6.isIdentifier(expr)) return expr.text;
+  if (ts6.isPropertyAccessExpression(expr) && ts6.isIdentifier(expr.expression)) {
     return expr.expression.text;
   }
   return null;
 }
 var TABLE_METHOD = /^(?:each|for)$/;
-var isEachOf = (expr) => ts5.isPropertyAccessExpression(expr) && ts5.isIdentifier(expr.expression) && (expr.expression.text === "it" || expr.expression.text === "test") && TABLE_METHOD.test(expr.name.text);
-var isDescribeEach = (expr) => ts5.isPropertyAccessExpression(expr) && ts5.isIdentifier(expr.expression) && expr.expression.text === "describe" && TABLE_METHOD.test(expr.name.text);
+var isEachOf = (expr) => ts6.isPropertyAccessExpression(expr) && ts6.isIdentifier(expr.expression) && (expr.expression.text === "it" || expr.expression.text === "test") && TABLE_METHOD.test(expr.name.text);
+var isDescribeEach = (expr) => ts6.isPropertyAccessExpression(expr) && ts6.isIdentifier(expr.expression) && expr.expression.text === "describe" && TABLE_METHOD.test(expr.name.text);
 function loopRows(iterable) {
-  if (ts5.isArrayLiteralExpression(iterable)) {
+  if (ts6.isArrayLiteralExpression(iterable)) {
     let n = 0;
     let open = false;
     for (const el of iterable.elements) {
-      if (ts5.isSpreadElement(el)) open = true;
+      if (ts6.isSpreadElement(el)) open = true;
       else n++;
     }
     return { n: Math.max(n, open ? 0 : 1), open };
@@ -5982,20 +6179,20 @@ function templateRows(node) {
   return Math.max(rows, 1);
 }
 function hasSubstantiveBody(call) {
-  const fn = call.arguments.find((a) => ts5.isArrowFunction(a) || ts5.isFunctionExpression(a));
+  const fn = call.arguments.find((a) => ts6.isArrowFunction(a) || ts6.isFunctionExpression(a));
   if (!fn) return true;
   const body = fn.body;
-  const text = ts5.isBlock(body) ? body.getText().slice(1, -1) : body.getText();
+  const text = ts6.isBlock(body) ? body.getText().slice(1, -1) : body.getText();
   return text.split("\n").some((l) => isSignificantLine(l.trim(), "js"));
 }
 function eachRows(call) {
   const arg = call.arguments[0];
   if (!arg) return { n: 1, open: true };
-  if (ts5.isArrayLiteralExpression(arg)) {
+  if (ts6.isArrayLiteralExpression(arg)) {
     let n = 0;
     let open = false;
     for (const el of arg.elements) {
-      if (ts5.isSpreadElement(el)) open = true;
+      if (ts6.isSpreadElement(el)) open = true;
       else n++;
     }
     return { n: Math.max(n, open ? 0 : 1), open };
@@ -6010,35 +6207,35 @@ function countTests(src, path = "spec.ts", substantiveOnly = false) {
     for (const line of src.split("\n")) if (re.test(line)) n2++;
     return { min: n2, open: false };
   }
-  const sf = ts5.createSourceFile("spec.ts", src, ts5.ScriptTarget.Latest, true, ts5.ScriptKind.TS);
+  const sf = ts6.createSourceFile("spec.ts", src, ts6.ScriptTarget.Latest, true, ts6.ScriptKind.TS);
   let n = 0;
   let open = false;
   const visit = (node, mult) => {
-    if (ts5.isForOfStatement(node)) {
+    if (ts6.isForOfStatement(node)) {
       const r = loopRows(node.expression);
       if (r.open) open = true;
       visit(node.statement, mult * r.n);
       return;
     }
-    if (ts5.isForStatement(node) || ts5.isForInStatement(node) || ts5.isWhileStatement(node) || ts5.isDoStatement(node)) {
+    if (ts6.isForStatement(node) || ts6.isForInStatement(node) || ts6.isWhileStatement(node) || ts6.isDoStatement(node)) {
       open = true;
     }
-    if (ts5.isCallExpression(node)) {
+    if (ts6.isCallExpression(node)) {
       const callee = node.expression;
-      if (ts5.isPropertyAccessExpression(callee) && callee.name.text === "forEach") {
+      if (ts6.isPropertyAccessExpression(callee) && callee.name.text === "forEach") {
         const r = loopRows(callee.expression);
         if (r.open) open = true;
         for (const a of node.arguments) visit(a, mult * r.n);
         return;
       }
       const head = node.expression;
-      if (ts5.isCallExpression(head) && isDescribeEach(head.expression)) {
+      if (ts6.isCallExpression(head) && isDescribeEach(head.expression)) {
         const r = eachRows(head);
         if (r.open) open = true;
         for (const a of node.arguments) visit(a, mult * r.n);
         return;
       }
-      if (ts5.isTaggedTemplateExpression(head) && isDescribeEach(head.tag)) {
+      if (ts6.isTaggedTemplateExpression(head) && isDescribeEach(head.tag)) {
         for (const a of node.arguments) visit(a, mult * templateRows(head));
         return;
       }
@@ -6050,10 +6247,10 @@ function countTests(src, path = "spec.ts", substantiveOnly = false) {
         const name = calleeName(node.expression);
         if ((name === "it" || name === "test") && (!substantiveOnly || hasSubstantiveBody(node))) n += mult;
       }
-    } else if (ts5.isTaggedTemplateExpression(node) && isEachOf(node.tag)) {
+    } else if (ts6.isTaggedTemplateExpression(node) && isEachOf(node.tag)) {
       n += templateRows(node) * mult;
     }
-    ts5.forEachChild(node, (c) => visit(c, mult));
+    ts6.forEachChild(node, (c) => visit(c, mult));
   };
   visit(sf, 1);
   return { min: n, open };
@@ -6090,7 +6287,8 @@ function scriptNarrowings(before, after, path) {
   if ((path.split("/").pop() ?? path) !== "package.json") return [];
   const scriptsOf = (src) => {
     try {
-      const s = JSON.parse(src ?? "{}").scripts ?? {};
+      const pkg = JSON.parse(src ?? "{}");
+      const s = isRecord(pkg) && isRecord(pkg.scripts) ? pkg.scripts : {};
       return Object.fromEntries(Object.entries(s).filter((e) => typeof e[1] === "string"));
     } catch {
       return {};
@@ -6135,7 +6333,7 @@ function leavesGlob(dir, dest, policy, ctx) {
 }
 var SED_INPLACE = /(?:^|\s)(?:-i\b|--in-place\b|-[a-zA-Z]*i[a-zA-Z]*\b)/;
 var testDeletion = {
-  id: RULE7,
+  id: RULE8,
   surface: ["file", "command"],
   certainty: "mechanical",
   run(changes, policy, _view, ctx) {
@@ -6166,7 +6364,7 @@ var testDeletion = {
         if (c.op === "delete" && isTest) {
           if (c.before != null && isRelocation(significantLines(c.before, c.path), countTestBlocks(c.before, c.path))) continue;
           out2.push(
-            makeFinding(RULE7, policy, {
+            makeFinding(RULE8, policy, {
               file: c.path,
               message: "A test file was deleted.",
               evidence: c.path,
@@ -6175,7 +6373,7 @@ var testDeletion = {
           );
         } else if (c.op === "rename" && c.oldPath && isSpec(c.oldPath) && !isTest) {
           out2.push(
-            makeFinding(RULE7, policy, {
+            makeFinding(RULE8, policy, {
               file: c.path,
               message: `A test file was renamed out of the test glob (${c.oldPath} \u2192 ${c.path}).`,
               evidence: `${c.oldPath} \u2192 ${c.path}`,
@@ -6190,7 +6388,7 @@ var testDeletion = {
             const removed = new Set([...significantLines(c.before, c.path)].filter((l) => !afterLines.has(l)));
             if (isRelocation(removed, before.min - after.min)) continue;
             out2.push(
-              makeFinding(RULE7, policy, {
+              makeFinding(RULE8, policy, {
                 file: c.path,
                 message: `Test blocks removed: ${before.min} \u2192 ${after.min} it()/test() in this spec (each-table rows count as tests).`,
                 evidence: `${before.min - after.min} test block(s) removed from ${c.path}`,
@@ -6203,7 +6401,7 @@ var testDeletion = {
           const readable = rn !== "pytest" || effectivePytestConfig(c.path, ctx);
           for (const n of readable ? suiteNarrowings(c.before, c.after, c.path, runnerSamples(c.path, policy, ctx, rn)) : []) {
             out2.push(
-              makeFinding(RULE7, policy, {
+              makeFinding(RULE8, policy, {
                 file: c.path,
                 message: `The runner no longer selects ${n.path}: ${n.reason}.`,
                 evidence: `${n.path} dropped from the suite by ${c.path}`,
@@ -6213,7 +6411,7 @@ var testDeletion = {
           }
           for (const n of scriptNarrowings(c.before, c.after, c.path)) {
             out2.push(
-              makeFinding(RULE7, policy, {
+              makeFinding(RULE8, policy, {
                 file: c.path,
                 message: `The test script now narrows the suite: ${n.flag} added to scripts.${n.script}.`,
                 evidence: `"${n.script}": ${JSON.stringify(n.before)} \u2192 ${JSON.stringify(n.after)}`,
@@ -6301,7 +6499,7 @@ var testDeletion = {
           }
           if (why) {
             out2.push(
-              makeFinding(RULE7, policy, {
+              makeFinding(RULE8, policy, {
                 message: `Test removed via shell: ${why}.`,
                 evidence,
                 remediation: "Fix the code under test. Mutating a spec from the shell is still deleting the test \u2014 and is blocked the same way."
@@ -6316,11 +6514,10 @@ var testDeletion = {
   }
 };
 function pytestPrecedenceFindings(changes, policy, ctx) {
-  const order = PYTEST_INI_ORDER;
   const touched = /* @__PURE__ */ new Map();
   for (const c of changes) {
     if (c.kind !== "file" || c.oldPath) continue;
-    if (order.includes(c.path)) touched.set(c.path, c);
+    if (PYTEST_INI_ORDER.some((name) => name === c.path)) touched.set(c.path, c);
   }
   if (touched.size === 0) return [];
   const listing = trackedFiles(ctx);
@@ -6328,7 +6525,7 @@ function pytestPrecedenceFindings(changes, policy, ctx) {
   const rootNames = new Set(listing.filter((f) => !f.includes("/")));
   const base = /* @__PURE__ */ new Map();
   const head = /* @__PURE__ */ new Map();
-  for (const name of order) {
+  for (const name of PYTEST_INI_ORDER) {
     const c = touched.get(name);
     if (c) {
       base.set(name, c.before);
@@ -6345,7 +6542,7 @@ function pytestPrecedenceFindings(changes, policy, ctx) {
   if (!was || !now || was.path === now.path) return [];
   const samples = runnerSamples(now.path, policy, ctx, "pytest");
   return suiteNarrowings(was.content, now.content, now.path, samples).map(
-    (n) => makeFinding(RULE7, policy, {
+    (n) => makeFinding(RULE8, policy, {
       file: now.path,
       message: `The effective pytest config moved from ${was.path} to ${now.path}, and ${n.path} is no longer selected: ${n.reason}.`,
       evidence: `inifile precedence ${was.path} \u2192 ${now.path} drops ${n.path} from the suite`,
@@ -6355,8 +6552,8 @@ function pytestPrecedenceFindings(changes, policy, ctx) {
 }
 
 // src/detectors/test-content-removal.ts
-import ts6 from "typescript";
-var RULE8 = "test-content-removal";
+import ts7 from "typescript";
+var RULE9 = "test-content-removal";
 var MIN_REMOVED_LINES = 3;
 var MIN_REMOVED_ROWS = 2;
 var ws = (s) => s.replace(/\s+/g, "");
@@ -6365,13 +6562,13 @@ function eachTables(src, path) {
   let open = false;
   if (langOf(path) !== "js" && langOf(path) !== null) return { rows, open };
   try {
-    const sf = ts6.createSourceFile("spec.ts", src, ts6.ScriptTarget.Latest, true, ts6.ScriptKind.TS);
+    const sf = ts7.createSourceFile("spec.ts", src, ts7.ScriptTarget.Latest, true, ts7.ScriptKind.TS);
     const visit = (node) => {
-      if (ts6.isCallExpression(node) && ts6.isPropertyAccessExpression(node.expression) && /^(?:each|for)$/.test(node.expression.name.text) && ts6.isIdentifier(node.expression.expression) && /^(?:it|test|describe)$/.test(node.expression.expression.text)) {
+      if (ts7.isCallExpression(node) && ts7.isPropertyAccessExpression(node.expression) && /^(?:each|for)$/.test(node.expression.name.text) && ts7.isIdentifier(node.expression.expression) && /^(?:it|test|describe)$/.test(node.expression.expression.text)) {
         const arg = node.arguments[0];
-        if (arg && ts6.isArrayLiteralExpression(arg)) {
+        if (arg && ts7.isArrayLiteralExpression(arg)) {
           for (const el of arg.elements) {
-            if (ts6.isSpreadElement(el)) {
+            if (ts7.isSpreadElement(el)) {
               open = true;
               continue;
             }
@@ -6381,7 +6578,7 @@ function eachTables(src, path) {
           }
         } else open = true;
       }
-      ts6.forEachChild(node, visit);
+      ts7.forEachChild(node, visit);
     };
     visit(sf);
   } catch {
@@ -6399,7 +6596,7 @@ function significantLinesOrdered(src, path) {
   return out2;
 }
 var testContentRemoval = {
-  id: RULE8,
+  id: RULE9,
   surface: ["file"],
   certainty: "mechanical",
   run(changes, policy) {
@@ -6440,7 +6637,7 @@ var testContentRemoval = {
       const goneRows = table.rows.size && tableAfter.open ? [...table.rows].filter(([k]) => !tableAfter.rows.has(k) && !addedPool.includes(k)).map(([, text]) => text) : [];
       if (goneRows.length >= MIN_REMOVED_ROWS) {
         out2.push(
-          makeFinding(RULE8, policy, {
+          makeFinding(RULE9, policy, {
             file: c.path,
             message: `Rows removed from a test table: ${goneRows.length} case(s) gone from an each-table that spreads from elsewhere, and they reappear nowhere in the change.`,
             evidence: goneRows.slice(0, 3).map((l) => l.slice(0, 80)).join(" | "),
@@ -6451,7 +6648,7 @@ var testContentRemoval = {
       }
       if (gone.length >= MIN_REMOVED_LINES && netDrop >= MIN_REMOVED_LINES) {
         out2.push(
-          makeFinding(RULE8, policy, {
+          makeFinding(RULE9, policy, {
             file: c.path,
             message: `Test content removed from a surviving spec: ${gone.length} significant line(s) gone with no test block deleted.`,
             evidence: gone.slice(0, 3).map((l) => l.slice(0, 80)).join(" | "),
@@ -6465,7 +6662,7 @@ var testContentRemoval = {
 };
 
 // src/detectors/snapshot-rewrite.ts
-var RULE9 = "snapshot-rewrite";
+var RULE10 = "snapshot-rewrite";
 var RUNNER2 = /\b(?:jest|vitest|playwright|ava)\b/;
 var PM_TEST_SCRIPT = /(?:^|\s)(?:npm|pnpm|yarn|bun)\s+(?:t|tst|test|run(?:-script)?\s+\S*test\S*)(?:\s|$)/;
 var UPDATE_ANY = /--(?:update-?[sS]napshots?|test-update-snapshots|snapshot-update)\b/;
@@ -6482,12 +6679,12 @@ function namesProtectedSnapshot(seg, policy) {
   return null;
 }
 var snapshotRewrite = {
-  id: RULE9,
+  id: RULE10,
   surface: ["command", "file"],
   certainty: "mechanical",
   run(changes, policy) {
     const out2 = [];
-    const warn = (input) => out2.push(makeFinding(RULE9, policy, { ...input, defaultSeverity: "warn" }));
+    const warn = (input) => out2.push(makeFinding(RULE10, policy, { ...input, defaultSeverity: "warn" }));
     for (const c of changes) {
       if (c.kind === "command") {
         for (const seg of segments(c.raw)) {
@@ -6516,7 +6713,7 @@ var snapshotRewrite = {
       if (c.op === "add" || !isSnap && !wasSnap) continue;
       const what = c.op === "delete" ? "deleted" : c.op === "rename" && !isSnap ? `renamed out of the protected snapshot set (to ${c.path})` : "rewritten";
       warn({
-        file: c.op === "rename" && !isSnap ? c.oldPath : c.path,
+        file: c.op === "rename" && !isSnap ? c.oldPath ?? c.path : c.path,
         message: `A recorded expected output was ${what}.`,
         evidence: c.op === "rename" ? `${c.oldPath} -> ${c.path}` : c.path,
         remediation: "If the intended output genuinely changed, a human should confirm the new expectation against the requirement; if the test was failing, fix the code instead of re-recording the expectation from it."
@@ -6527,7 +6724,7 @@ var snapshotRewrite = {
 };
 
 // src/detectors/snapshot-only.ts
-var RULE10 = "snapshot-only-rewrite";
+var RULE11 = "snapshot-only-rewrite";
 var COMMIT_VIEWS = ["staged", "range"];
 function isSnapshotChange(c, policy) {
   if (c.kind !== "file") return false;
@@ -6536,7 +6733,7 @@ function isSnapshotChange(c, policy) {
   return c.oldPath != null && isProtected(c.oldPath, policy, "snapshots");
 }
 var snapshotOnlyRewrite = {
-  id: RULE10,
+  id: RULE11,
   surface: ["file"],
   certainty: "mechanical",
   run(changes, policy, view) {
@@ -6546,9 +6743,10 @@ var snapshotOnlyRewrite = {
     const snaps = files.filter((c) => isSnapshotChange(c, policy));
     if (snaps.length === 0 || snaps.length !== files.length) return [];
     const first = snaps[0];
-    const names = snaps.map((c) => c.kind === "file" ? c.path : "").filter(Boolean).slice(0, 3).join(", ");
+    if (!first) return [];
+    const names = snaps.map((c) => c.path).slice(0, 3).join(", ");
     return [
-      makeFinding(RULE10, policy, {
+      makeFinding(RULE11, policy, {
         file: first.path,
         message: `Only recorded expectations changed in this diff (${snaps.length} snapshot file${snaps.length === 1 ? "" : "s"}, no code change to explain them).`,
         evidence: names + (snaps.length > 3 ? ", \u2026" : ""),
@@ -6560,8 +6758,8 @@ var snapshotOnlyRewrite = {
 };
 
 // src/detectors/assertion-weakening.ts
-import ts7 from "typescript";
-var RULE11 = "assertion-weakening";
+import ts8 from "typescript";
+var RULE12 = "assertion-weakening";
 var TEST_CALLS = /* @__PURE__ */ new Set(["it", "test"]);
 var SUITE_CALLS = /* @__PURE__ */ new Set(["describe", "suite", "context"]);
 var EXACT_MATCHERS = /* @__PURE__ */ new Set(["toBe", "toEqual", "toStrictEqual", "toMatchObject"]);
@@ -6569,55 +6767,55 @@ var WEAK_MATCHERS = /* @__PURE__ */ new Set(["toBeTruthy", "toBeDefined"]);
 var compact = (s) => s.replace(/\s+/g, "");
 function literalTitle(node) {
   if (!node) return null;
-  if (ts7.isStringLiteral(node) || ts7.isNoSubstitutionTemplateLiteral(node)) return node.text;
+  if (ts8.isStringLiteral(node) || ts8.isNoSubstitutionTemplateLiteral(node)) return node.text;
   return null;
 }
 function scriptKindForPath(path) {
   const lower = path.toLowerCase();
-  if (lower.endsWith(".tsx")) return ts7.ScriptKind.TSX;
+  if (lower.endsWith(".tsx")) return ts8.ScriptKind.TSX;
   if (lower.endsWith(".ts") || lower.endsWith(".mts") || lower.endsWith(".cts")) {
-    return ts7.ScriptKind.TS;
+    return ts8.ScriptKind.TS;
   }
-  if (lower.endsWith(".jsx")) return ts7.ScriptKind.JSX;
-  return ts7.ScriptKind.JS;
+  if (lower.endsWith(".jsx")) return ts8.ScriptKind.JSX;
+  return ts8.ScriptKind.JS;
 }
 function staticFacts(node) {
   if (!node) return null;
-  if (node.kind === ts7.SyntaxKind.TrueKeyword) return { defined: true, truthy: true };
-  if (node.kind === ts7.SyntaxKind.FalseKeyword) return { defined: true, truthy: false };
-  if (node.kind === ts7.SyntaxKind.NullKeyword) return { defined: true, truthy: false };
-  if (ts7.isIdentifier(node) && node.text === "undefined") {
+  if (node.kind === ts8.SyntaxKind.TrueKeyword) return { defined: true, truthy: true };
+  if (node.kind === ts8.SyntaxKind.FalseKeyword) return { defined: true, truthy: false };
+  if (node.kind === ts8.SyntaxKind.NullKeyword) return { defined: true, truthy: false };
+  if (ts8.isIdentifier(node) && node.text === "undefined") {
     return { defined: false, truthy: false };
   }
-  if (ts7.isVoidExpression(node)) return { defined: false, truthy: false };
-  if (ts7.isStringLiteral(node) || ts7.isNoSubstitutionTemplateLiteral(node)) {
+  if (ts8.isVoidExpression(node)) return { defined: false, truthy: false };
+  if (ts8.isStringLiteral(node) || ts8.isNoSubstitutionTemplateLiteral(node)) {
     return { defined: true, truthy: node.text.length > 0 };
   }
-  if (ts7.isNumericLiteral(node)) {
+  if (ts8.isNumericLiteral(node)) {
     return { defined: true, truthy: Number(node.text) !== 0 };
   }
-  if (ts7.isBigIntLiteral(node)) {
+  if (ts8.isBigIntLiteral(node)) {
     return { defined: true, truthy: node.text.replace(/n$/i, "") !== "0" };
   }
-  if (ts7.isPrefixUnaryExpression(node) && (node.operator === ts7.SyntaxKind.MinusToken || node.operator === ts7.SyntaxKind.PlusToken) && ts7.isNumericLiteral(node.operand)) {
-    const value = Number(node.operand.text) * (node.operator === ts7.SyntaxKind.MinusToken ? -1 : 1);
+  if (ts8.isPrefixUnaryExpression(node) && (node.operator === ts8.SyntaxKind.MinusToken || node.operator === ts8.SyntaxKind.PlusToken) && ts8.isNumericLiteral(node.operand)) {
+    const value = Number(node.operand.text) * (node.operator === ts8.SyntaxKind.MinusToken ? -1 : 1);
     return { defined: true, truthy: value !== 0 };
   }
-  if (ts7.isObjectLiteralExpression(node) || ts7.isArrayLiteralExpression(node) || ts7.isRegularExpressionLiteral(node) || ts7.isArrowFunction(node) || ts7.isFunctionExpression(node) || ts7.isClassExpression(node) || ts7.isNewExpression(node)) {
+  if (ts8.isObjectLiteralExpression(node) || ts8.isArrayLiteralExpression(node) || ts8.isRegularExpressionLiteral(node) || ts8.isArrowFunction(node) || ts8.isFunctionExpression(node) || ts8.isClassExpression(node) || ts8.isNewExpression(node)) {
     return { defined: true, truthy: true };
   }
   return null;
 }
 function expectAssertion(node, sf) {
-  if (!ts7.isPropertyAccessExpression(node.expression)) return null;
+  if (!ts8.isPropertyAccessExpression(node.expression)) return null;
   const matcher = node.expression.name.text;
   let receiver = node.expression.expression;
   let polarity = "";
-  if (ts7.isPropertyAccessExpression(receiver) && receiver.name.text === "not") {
+  if (ts8.isPropertyAccessExpression(receiver) && receiver.name.text === "not") {
     polarity = "not";
     receiver = receiver.expression;
   }
-  if (!ts7.isCallExpression(receiver) || !ts7.isIdentifier(receiver.expression) || receiver.expression.text !== "expect" || receiver.arguments.length !== 1) {
+  if (!ts8.isCallExpression(receiver) || !ts8.isIdentifier(receiver.expression) || receiver.expression.text !== "expect" || receiver.arguments.length !== 1) {
     return null;
   }
   const subject = compact(receiver.arguments[0].getText(sf));
@@ -6633,41 +6831,41 @@ function expectAssertion(node, sf) {
   };
 }
 function simpleCallName(node) {
-  return ts7.isIdentifier(node.expression) ? node.expression.text : null;
+  return ts8.isIdentifier(node.expression) ? node.expression.text : null;
 }
 function callbackFor(node) {
   const cb = node.arguments[1];
-  return cb && (ts7.isArrowFunction(cb) || ts7.isFunctionExpression(cb)) ? cb : null;
+  return cb && (ts8.isArrowFunction(cb) || ts8.isFunctionExpression(cb)) ? cb : null;
 }
 function blocks(src, path) {
   const out2 = /* @__PURE__ */ new Map();
   if (langOf(path) !== "js") return out2;
   try {
-    const sf = ts7.createSourceFile(path, src, ts7.ScriptTarget.Latest, true, scriptKindForPath(path));
+    const sf = ts8.createSourceFile(path, src, ts8.ScriptTarget.Latest, true, scriptKindForPath(path));
     const visit = (node, suites) => {
-      if (ts7.isCallExpression(node)) {
+      if (ts8.isCallExpression(node)) {
         const call = simpleCallName(node);
         const title = literalTitle(node.arguments[0]);
         const cb = callbackFor(node);
         if (call && SUITE_CALLS.has(call) && title !== null && cb) {
           const nextSuites = [...suites, title];
-          ts7.forEachChild(cb, (child) => visit(child, nextSuites));
+          ts8.forEachChild(cb, (child) => visit(child, nextSuites));
           return;
         }
         if (call && TEST_CALLS.has(call) && title !== null && cb) {
           const assertions = [];
           const collect2 = (child) => {
-            if (child !== cb && ts7.isCallExpression(child)) {
+            if (child !== cb && ts8.isCallExpression(child)) {
               const nestedCall = simpleCallName(child);
               if (nestedCall && (TEST_CALLS.has(nestedCall) || SUITE_CALLS.has(nestedCall))) {
                 return;
               }
             }
-            if (ts7.isCallExpression(child)) {
+            if (ts8.isCallExpression(child)) {
               const a = expectAssertion(child, sf);
               if (a) assertions.push(a);
             }
-            ts7.forEachChild(child, collect2);
+            ts8.forEachChild(child, collect2);
           };
           collect2(cb);
           const identity2 = [...suites, title].join(" > ");
@@ -6677,7 +6875,7 @@ function blocks(src, path) {
           return;
         }
       }
-      ts7.forEachChild(node, (child) => visit(child, suites));
+      ts8.forEachChild(node, (child) => visit(child, suites));
     };
     visit(sf, []);
   } catch {
@@ -6726,7 +6924,7 @@ function findingForBlock(path, before, after, policy) {
   const weakened = directionalWeakening(before.assertions, after.assertions);
   if (weakened) {
     const message = weakened.kind === "throw-specificity" ? `Assertion weakened in test "${before.identity}": exception-message specificity was removed from toThrow().` : `Assertion weakened in test "${before.identity}": ${weakened.before.matcher} was replaced by weaker ${weakened.after.matcher} on the same subject.`;
-    return makeFinding(RULE11, policy, {
+    return makeFinding(RULE12, policy, {
       file: path,
       message,
       evidence: `${weakened.before.text} -> ${weakened.after.text}`,
@@ -6735,7 +6933,7 @@ function findingForBlock(path, before, after, policy) {
   }
   const removed = pureRemoval(before.assertions, after.assertions);
   if (removed) {
-    return makeFinding(RULE11, policy, {
+    return makeFinding(RULE12, policy, {
       file: path,
       message: `Assertion removed from kept test "${before.identity}" without a replacement assertion.`,
       evidence: removed.text,
@@ -6745,7 +6943,7 @@ function findingForBlock(path, before, after, policy) {
   return null;
 }
 var assertionWeakening = {
-  id: RULE11,
+  id: RULE12,
   surface: ["file"],
   certainty: "heuristic",
   run(changes, policy) {
@@ -6771,6 +6969,7 @@ var assertionWeakening = {
 var allDetectors = [
   noVerify,
   tsAnyCast,
+  tsCastGrowth,
   lintSuppression,
   testSkip,
   coverageLowering,
@@ -6812,14 +7011,15 @@ function evaluate(changes, policy, detectors = allDetectors, view, ctx) {
       process.stderr.write(`tamperward: detector "${d.id}" errored: ${String(e)}
 `);
       if (view === "staged" || view === "worktree" || view === "range") {
-        out2.push({
+        const failed = {
           rule: "detector-error",
           severity: "block",
           message: `Detector "${d.id}" failed to run; the verdict is incomplete.`,
           evidence: String(e).slice(0, 200),
           remediation: "A rule that cannot run is not a rule that passed. Fix the input or the detector; do not read this as clean.",
           signoff: { required: true, command: `tamperward allow detector-error --reason "..."` }
-        });
+        };
+        out2.push(failed);
       }
     }
   }
@@ -6860,7 +7060,7 @@ function normalizeVersion(v, where = POLICY_FILE) {
   return v;
 }
 var SEVERITIES = ["block", "warn"];
-var isSeverity = (v) => SEVERITIES.includes(v);
+var isSeverity = (v) => SEVERITIES.some((s) => s === v);
 var isStringList = (v) => Array.isArray(v) && v.every((s) => typeof s === "string");
 var isMapping = (v) => typeof v === "object" && v !== null && !Array.isArray(v);
 var TOP_LEVEL_KEYS = /* @__PURE__ */ new Set(["version", "protected", "rules", "ignore", "signoff", "verify"]);
@@ -6874,75 +7074,105 @@ function validate(r, where) {
     throw new PolicyError(`${where}: ${msg}`);
   }
   const show = (v) => JSON.stringify(v) ?? String(v);
+  const out2 = {};
+  if (r.version !== void 0) out2.version = r.version;
   const unknown = Object.keys(r).filter((k) => !TOP_LEVEL_KEYS.has(k));
   if (unknown.length) {
     bad(`unknown top-level key${unknown.length === 1 ? "" : "s"} ${unknown.map((k) => JSON.stringify(k)).join(", ")} (expected one of ${[...TOP_LEVEL_KEYS].join(", ")})`);
   }
   if (r.rules !== void 0) {
     if (!isMapping(r.rules)) bad(`rules must be a mapping of rule name to { severity, enabled, exclude }, got ${show(r.rules)}`);
+    const rules = {};
     for (const [name, cfg] of Object.entries(r.rules)) {
       if (!isMapping(cfg)) bad(`rules.${name} must be a mapping like { severity: block }, got ${show(cfg)}`);
-      if (cfg.severity !== void 0 && !isSeverity(cfg.severity)) {
-        bad(`rules.${name}.severity must be "block" or "warn", got ${show(cfg.severity)}`);
+      const { severity, enabled, exclude } = cfg;
+      if (severity !== void 0 && !isSeverity(severity)) {
+        bad(`rules.${name}.severity must be "block" or "warn", got ${show(severity)}`);
       }
-      if (cfg.enabled !== void 0 && typeof cfg.enabled !== "boolean") {
-        bad(`rules.${name}.enabled must be true or false, got ${show(cfg.enabled)}`);
+      if (enabled !== void 0 && typeof enabled !== "boolean") {
+        bad(`rules.${name}.enabled must be true or false, got ${show(enabled)}`);
       }
-      if (cfg.exclude !== void 0 && !isStringList(cfg.exclude)) {
-        bad(`rules.${name}.exclude must be a list of globs, got ${show(cfg.exclude)}`);
+      if (exclude !== void 0 && !isStringList(exclude)) {
+        bad(`rules.${name}.exclude must be a list of globs, got ${show(exclude)}`);
       }
+      rules[name] = {
+        ...severity !== void 0 ? { severity } : {},
+        ...enabled !== void 0 ? { enabled } : {},
+        ...exclude !== void 0 ? { exclude } : {}
+      };
     }
+    out2.rules = rules;
+  }
+  if (r.ignore !== void 0) {
+    if (!isStringList(r.ignore)) bad(`ignore must be a list of globs, got ${show(r.ignore)}`);
+    out2.ignore = r.ignore;
   }
-  if (r.ignore !== void 0 && !isStringList(r.ignore)) bad(`ignore must be a list of globs, got ${show(r.ignore)}`);
   if (r.protected !== void 0) {
     if (!isMapping(r.protected)) bad(`protected must be a mapping of category to a list of globs, got ${show(r.protected)}`);
+    const categories = {};
     for (const [cat, globs4] of Object.entries(r.protected)) {
       if (!isStringList(globs4)) bad(`protected.${cat} must be a list of globs, got ${show(globs4)}`);
+      categories[cat] = globs4;
     }
+    out2.protected = categories;
   }
   if (r.signoff !== void 0) {
     if (!isMapping(r.signoff)) bad(`signoff must be a mapping, got ${show(r.signoff)}`);
+    const signoff = {};
     for (const key2 of ["required_for", "requiredFor"]) {
       const v = r.signoff[key2];
-      if (v !== void 0 && !(Array.isArray(v) && v.every(isSeverity))) {
+      if (v === void 0) continue;
+      if (!(Array.isArray(v) && v.every(isSeverity))) {
         bad(`signoff.${key2} must be a list of "block" / "warn", got ${show(v)}`);
       }
+      signoff[key2] = v;
     }
     const ledger = r.signoff.ledger;
     if (ledger !== void 0 && typeof ledger !== "string") bad(`signoff.ledger must be a path, got ${show(ledger)}`);
-    if (typeof ledger === "string" && !ledgerInsideRepo(ledger)) {
-      bad(`signoff.ledger must be a relative path inside the repository, got ${show(ledger)}`);
+    if (typeof ledger === "string") {
+      if (!ledgerInsideRepo(ledger)) bad(`signoff.ledger must be a relative path inside the repository, got ${show(ledger)}`);
+      signoff.ledger = ledger;
     }
+    out2.signoff = signoff;
   }
   if (r.verify !== void 0) {
     if (!isMapping(r.verify)) bad(`verify must be a mapping like { command: "npm test" }, got ${show(r.verify)}`);
     const v = r.verify;
-    if (v.command !== void 0 && typeof v.command !== "string") bad(`verify.command must be a string, got ${show(v.command)}`);
-    if (v.budget !== void 0 && !(typeof v.budget === "number" && Number.isFinite(v.budget) && v.budget > 0)) {
-      bad(`verify.budget must be a positive number of seconds, got ${show(v.budget)}`);
+    const { command, budget, inputs, backend, image } = v;
+    if (command !== void 0 && typeof command !== "string") bad(`verify.command must be a string, got ${show(command)}`);
+    if (budget !== void 0 && !(typeof budget === "number" && Number.isFinite(budget) && budget > 0)) {
+      bad(`verify.budget must be a positive number of seconds, got ${show(budget)}`);
     }
-    if (v.inputs !== void 0 && !isStringList(v.inputs)) bad(`verify.inputs must be a list of globs, got ${show(v.inputs)}`);
-    if (v.backend !== void 0 && v.backend !== "local" && v.backend !== "container") {
-      bad(`verify.backend must be "local" or "container", got ${show(v.backend)}`);
+    if (inputs !== void 0 && !isStringList(inputs)) bad(`verify.inputs must be a list of globs, got ${show(inputs)}`);
+    if (backend !== void 0 && backend !== "local" && backend !== "container") {
+      bad(`verify.backend must be "local" or "container", got ${show(backend)}`);
     }
-    if (v.image !== void 0 && typeof v.image !== "string") {
-      bad(`verify.image must be an immutable container image reference, got ${show(v.image)}`);
+    if (image !== void 0 && typeof image !== "string") {
+      bad(`verify.image must be an immutable container image reference, got ${show(image)}`);
     }
-    const backend = v.backend ?? "local";
-    if (backend === "container") {
-      if (typeof v.image !== "string") bad('verify.image is required when verify.backend is "container"');
-      if (!/^(?!-)[^\s@]+@sha256:[0-9a-f]{64}$/i.test(v.image)) {
-        bad(`verify.image must be pinned by sha256 digest (name@sha256:<64 hex>), got ${show(v.image)}`);
+    if ((backend ?? "local") === "container") {
+      if (typeof image !== "string") bad('verify.image is required when verify.backend is "container"');
+      if (!/^(?!-)[^\s@]+@sha256:[0-9a-f]{64}$/i.test(image)) {
+        bad(`verify.image must be pinned by sha256 digest (name@sha256:<64 hex>), got ${show(image)}`);
       }
-    } else if (v.image !== void 0) {
+    } else if (image !== void 0) {
       bad('verify.image is only valid when verify.backend is "container"');
     }
+    out2.verify = {
+      ...command !== void 0 ? { command } : {},
+      ...budget !== void 0 ? { budget } : {},
+      ...inputs !== void 0 ? { inputs } : {},
+      ...backend !== void 0 ? { backend } : {},
+      ...image !== void 0 ? { image } : {}
+    };
   }
+  return out2;
 }
 function parsePolicy(raw, where = POLICY_FILE) {
-  const r = raw ?? {};
-  const version = normalizeVersion(r.version, where);
-  validate(r, where);
+  const doc = raw ?? {};
+  if (!isMapping(doc)) throw new PolicyError(`${where} is not a policy mapping`);
+  const version = normalizeVersion(doc.version, where);
+  const r = validate(doc, where);
   const base = defaultPolicy(version);
   const globs4 = (list2) => list2?.map(normalizeGlob);
   const userProtected = r.protected ? Object.fromEntries(Object.entries(r.protected).map(([cat, list2]) => [cat, globs4(list2) ?? []])) : void 0;
@@ -6981,10 +7211,7 @@ function parseOrThrow(src, where) {
   try {
     raw = parse2(src);
   } catch (e) {
-    throw new PolicyError(`${where} is not valid YAML: ${e.message}`);
-  }
-  if (raw !== null && raw !== void 0 && (typeof raw !== "object" || Array.isArray(raw))) {
-    throw new PolicyError(`${where} is not a policy mapping`);
+    throw new PolicyError(`${where} is not valid YAML: ${errorMessage(e)}`);
   }
   return parsePolicy(raw, where);
 }
@@ -7004,6 +7231,14 @@ import { createHash as createHash2 } from "node:crypto";
 import { appendFileSync, mkdirSync, readFileSync as readFileSync6, existsSync as existsSync5 } from "node:fs";
 import { dirname as dirname2, join as join8 } from "node:path";
 var DEFAULT_TTL_MS = 30 * 24 * 60 * 60 * 1e3;
+function ledgerEntryFrom(value) {
+  if (!isRecord(value)) return null;
+  const { rule, file, fingerprint: fingerprint2, reason, recordedAt, expiresAt } = value;
+  if (typeof rule !== "string" || typeof fingerprint2 !== "string" || typeof reason !== "string") return null;
+  if (typeof recordedAt !== "number" || typeof expiresAt !== "number") return null;
+  if (file !== void 0 && typeof file !== "string") return null;
+  return { rule, ...file !== void 0 ? { file } : {}, fingerprint: fingerprint2, reason, recordedAt, expiresAt };
+}
 function fingerprint(rule, file, evidence) {
   return createHash2("sha256").update(`${rule}\0${file ?? ""}\0${evidence}`).digest("hex").slice(0, 16);
 }
@@ -7022,8 +7257,8 @@ function readLedger(cwd, policy) {
   for (const line of readFileSync6(p, "utf8").split("\n")) {
     if (!line.trim()) continue;
     try {
-      const e = JSON.parse(line);
-      if (e && typeof e.fingerprint === "string") out2.push(e);
+      const e = ledgerEntryFrom(JSON.parse(line));
+      if (e) out2.push(e);
     } catch {
     }
   }
@@ -7059,9 +7294,10 @@ function oobToken(want, oob, head) {
     }
     const [rule, sha2] = [t.slice(0, at), t.slice(at + 1)];
     if (rule !== want) continue;
-    const normalizedHead = head?.trim().toLowerCase();
+    if (!head) return t;
+    const normalizedHead = head.trim().toLowerCase();
     const normalizedSha = sha2.trim().toLowerCase();
-    if (!head || /^[0-9a-f]+$/.test(normalizedHead) && normalizedSha === normalizedHead) return t;
+    if (/^[0-9a-f]+$/.test(normalizedHead) && normalizedSha === normalizedHead) return t;
   }
   return null;
 }
@@ -7084,6 +7320,12 @@ function oobFromEnv(env = process.env) {
   return (env.TAMPERWARD_OOB_SIGNOFF ?? "").split(",").map((s) => s.trim().replace(/^tamperward:allow:/, "")).filter(Boolean);
 }
 
+// src/machine-output.ts
+var MACHINE_SCHEMA_VERSION = 1;
+function machineOutput(payload) {
+  return { ...payload, schema_version: MACHINE_SCHEMA_VERSION };
+}
+
 // src/cli/render/text.ts
 var ESC = "\x1B";
 var RESET = `${ESC}[0m`;
@@ -7287,7 +7529,7 @@ function isGitHubActions(env = process.env) {
 // src/cli/report.ts
 var FORMATS = ["auto", "text", "json", "github"];
 function isFormat(s) {
-  return FORMATS.includes(s);
+  return FORMATS.some((f) => f === s);
 }
 function resolveFormat(input, env = process.env) {
   if (input.json) return "json";
@@ -7303,7 +7545,7 @@ function report(input) {
       JSON.stringify(
         // `findings`, `scanned` and `ignoredFiles` keep their exact prior shape; `summary`
         // is additive, so an existing consumer reading only the old keys is unaffected.
-        { findings, scanned, ignoredFiles, summary: { block: blocks2, warn: findings.length - blocks2 } },
+        machineOutput({ findings, scanned, ignoredFiles, summary: { block: blocks2, warn: findings.length - blocks2 } }),
         null,
         2
       ) + "\n"
@@ -7379,7 +7621,9 @@ function check(opts) {
     process.stderr.write(`tamperward: ${cleared.length} blocking finding(s) cleared by ${how}: ${cleared.map((f) => f.rule + (f.file ? `(${f.file})` : "")).join(", ")}
 `);
   }
-  report({ findings, scanned: changes.length, ignoredFiles, json: opts.json, format: opts.format });
+  if (!opts.silent) {
+    report({ findings, scanned: changes.length, ignoredFiles, json: opts.json, format: opts.format });
+  }
   return hasBlocking(findings) ? 1 : 0;
 }
 function runCheck(opts) {
@@ -7463,6 +7707,17 @@ import { createHash as createHash3 } from "node:crypto";
 import { existsSync as existsSync7, lstatSync as lstatSync2, mkdirSync as mkdirSync3, readdirSync, readFileSync as readFileSync8, renameSync, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { isAbsolute as isAbsolute7, join as join10 } from "node:path";
 import { execFileSync as execFileSync5 } from "node:child_process";
+function ptreeFrom(value) {
+  if (!isRecord(value)) return null;
+  const out2 = {};
+  for (const [path, entry] of Object.entries(value)) {
+    if (!isRecord(entry)) return null;
+    const { hash, mode, size, mtimeMs } = entry;
+    if (typeof hash !== "string" || typeof mode !== "number" || typeof size !== "number" || typeof mtimeMs !== "number") return null;
+    out2[path] = { hash, mode, size, mtimeMs };
+  }
+  return out2;
+}
 var UNSAFE2 = /[^A-Za-z0-9._-]/g;
 var SKIP_DIRS2 = /* @__PURE__ */ new Set([".git", "node_modules", ".hg", ".svn"]);
 function gitDir2(cwd) {
@@ -7554,7 +7809,7 @@ function driftBetween(expected, current) {
 function loadTree(p) {
   if (!p || !existsSync7(p)) return null;
   try {
-    return JSON.parse(readFileSync8(p, "utf8"));
+    return ptreeFrom(JSON.parse(readFileSync8(p, "utf8")));
   } catch {
     return null;
   }
@@ -7614,8 +7869,25 @@ function watcherHealthPath(log) {
 function readWatcherHealth(log) {
   try {
     const value = JSON.parse(readFileSync9(watcherHealthPath(log), "utf8"));
-    if (value.version !== 1 || typeof value.pid !== "number" || typeof value.started_at !== "string" || !["healthy", "degraded", "stopped"].includes(String(value.state))) return null;
-    return value;
+    if (!isRecord(value)) return null;
+    const { state, backend, pid, started_at } = value;
+    if (value.version !== 1 || typeof pid !== "number" || typeof started_at !== "string") return null;
+    if (state !== "healthy" && state !== "degraded" && state !== "stopped") return null;
+    return {
+      version: 1,
+      state,
+      backend: backend === "initializing" || backend === "recursive" ? backend : "fallback",
+      pid,
+      started_at,
+      stopped_at: nullableString(value.stopped_at) ?? null,
+      watched_dirs: finiteNumber(value.watched_dirs) ?? 0,
+      last_append_at: nullableString(value.last_append_at) ?? null,
+      event_count: finiteNumber(value.event_count) ?? 0,
+      dropped_events: finiteNumber(value.dropped_events) ?? 0,
+      error_count: finiteNumber(value.error_count) ?? 0,
+      last_error: nullableString(value.last_error) ?? null,
+      log: stringOrUndefined(value.log) ?? log
+    };
   } catch {
     return null;
   }
@@ -7626,7 +7898,7 @@ function pidAlive(pid) {
     process.kill(pid, 0);
     return true;
   } catch (e) {
-    return e.code === "EPERM";
+    return errnoCode(e) === "EPERM";
   }
 }
 function watcherTelemetry(log) {
@@ -7830,7 +8102,23 @@ function runWatch(args) {
 
 // src/detectors/fs-events.ts
 import { closeSync as closeSync2, openSync as openSync2, readSync as readSync2, statSync } from "node:fs";
-var RULE12 = "transient-protected-mutation";
+function fsEventFrom(line) {
+  let value;
+  try {
+    value = JSON.parse(line);
+  } catch {
+    return null;
+  }
+  if (!isRecord(value)) return null;
+  const { ts: ts9, path, kind } = value;
+  if (typeof ts9 !== "string" || typeof path !== "string" || kind !== "change" && kind !== "rename") return null;
+  const mode = nullableNumber(value.mode);
+  const size = nullableNumber(value.size);
+  const hash = nullableString(value.hash);
+  if (mode === void 0 || size === void 0 || hash === void 0) return null;
+  return { ts: ts9, path, kind, mode, size, hash };
+}
+var RULE13 = "transient-protected-mutation";
 var MAX_EVENT_READ_BYTES = 4 * 1024 * 1024;
 var MAX_EVENT_SWEEP_BYTES = 16 * 1024 * 1024;
 var DEFAULT_EVENT_READ_IO = {
@@ -7901,11 +8189,9 @@ function readEvents(log, offset, maxBytes = MAX_EVENT_READ_BYTES, io = DEFAULT_E
   const complete = chunk.subarray(0, lastNewline + 1).toString("utf8");
   for (const line of complete.split("\n")) {
     if (!line.trim()) continue;
-    try {
-      events.push(JSON.parse(line));
-    } catch {
-      malformedLines++;
-    }
+    const event = fsEventFrom(line);
+    if (event) events.push(event);
+    else malformedLines++;
   }
   const newOffset = start + lastNewline + 1;
   return {
@@ -8025,7 +8311,7 @@ function drainEvents(log, offset, maxTotalBytes = MAX_EVENT_SWEEP_BYTES, io = DE
   };
 }
 function transientFindings(events, persistentPaths, policy, finalHash) {
-  if (!isEnabled(RULE12, policy)) return [];
+  if (!isEnabled(RULE13, policy)) return [];
   const byPath = /* @__PURE__ */ new Map();
   for (const e of events) {
     if (!isProtected(e.path, policy)) continue;
@@ -8045,7 +8331,7 @@ function transientFindings(events, persistentPaths, policy, finalHash) {
     const modeChurn = modes.size > 1;
     if (!contentChurn && !modeChurn) continue;
     const what = contentChurn ? `content was modified and restored within the turn (${hashes.size} distinct states observed)` : `file mode changed during the turn (${[...modes].map((m) => (m & 4095).toString(8)).join(" \u2192 ")})`;
-    const f = makeFinding(RULE12, policy, {
+    const f = makeFinding(RULE13, policy, {
       file: path,
       message: `Transient protected mutation: ${what}, leaving no net diff.`,
       evidence: evs.slice(0, 4).map((e) => `${e.ts} ${e.hash ?? "gone"}${e.mode != null ? `/${(e.mode & 4095).toString(8)}` : ""}`).join(" | "),
@@ -8079,10 +8365,16 @@ function parseInput(raw) {
   } catch (e) {
     throw new HookInputError(`the hook payload is not valid JSON: ${e instanceof Error ? e.message : String(e)}`);
   }
-  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+  if (!isRecord(parsed)) {
     throw new HookInputError(`the hook payload is not a JSON object (got ${Array.isArray(parsed) ? "an array" : typeof parsed})`);
   }
-  return parsed;
+  return {
+    ...typeof parsed.tool_name === "string" ? { tool_name: parsed.tool_name } : {},
+    ...isRecord(parsed.tool_input) ? { tool_input: parsed.tool_input } : {},
+    ...typeof parsed.cwd === "string" ? { cwd: parsed.cwd } : {},
+    ...typeof parsed.stop_hook_active === "boolean" ? { stop_hook_active: parsed.stop_hook_active } : {},
+    ...typeof parsed.session_id === "string" ? { session_id: parsed.session_id } : {}
+  };
 }
 function recordDenylog(blocks2) {
   const log = process.env.TAMPERWARD_DENYLOG;
@@ -8725,6 +9017,9 @@ function missingTools(matcher) {
   if (have === null) return [];
   return PRE_MATCHER.split("|").filter((t) => !have.has(t));
 }
+function isHooksShape(hooks) {
+  return hooksShapeError(hooks) === null;
+}
 function hooksShapeError(hooks) {
   if (hooks === void 0 || hooks === null) return null;
   if (!isPlainObject(hooks)) return "hooks is not an object";
@@ -8747,7 +9042,7 @@ function verifierCandidates(cwd) {
   };
   try {
     const pkg = JSON.parse(readFileSync11(join12(cwd, "package.json"), "utf8"));
-    const test = pkg.scripts?.test;
+    const test = isRecord(pkg) && isRecord(pkg.scripts) ? pkg.scripts.test : void 0;
     if (typeof test === "string" && test.trim() !== "" && !/error:\s*no test specified/i.test(test)) add("npm test");
   } catch {
   }
@@ -8846,14 +9141,14 @@ function planClaudeHooks(cwd) {
         detail: "exists but is not valid JSON \u2014 fix it, then re-run init (refusing to overwrite)"
       };
     }
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
+    if (!isRecord(parsed)) {
       return { item: "agent", path: rel, status: "error", detail: "exists but is not a JSON object \u2014 refusing to overwrite" };
     }
-    settings = parsed;
-  }
-  const shapeError = hooksShapeError(settings.hooks);
-  if (shapeError) {
-    return { item: "agent", path: rel, status: "error", detail: `${shapeError} \u2014 fix it, then re-run init (refusing to overwrite)` };
+    const shapeError = hooksShapeError(parsed.hooks);
+    if (shapeError || !isHooksShape(parsed.hooks)) {
+      return { item: "agent", path: rel, status: "error", detail: `${shapeError ?? "hooks is not the shape Claude Code reads"} \u2014 fix it, then re-run init (refusing to overwrite)` };
+    }
+    settings = { ...parsed, hooks: parsed.hooks ?? void 0 };
   }
   const hooks = settings.hooks ??= {};
   const entriesWith = (arr, needle) => (arr ?? []).filter((m) => (m.hooks ?? []).some((h) => needle.test(String(h.command ?? ""))));
@@ -9077,7 +9372,7 @@ function planCodeowners(cwd) {
   const path = join12(cwd, existingRel ?? rel);
   const existing = existingRel ? readFileSync11(path, "utf8") : null;
   const missing = CODEOWNERS_PATHS.filter((p) => existing === null || !coveredBy(existing, p));
-  if (missing.length === 0) {
+  if (existingRel !== void 0 && missing.length === 0) {
     return { item: "codeowners", path: existingRel, status: "ok", detail: "gate paths already have code owners" };
   }
   const inferred = inferOwner(cwd);
@@ -9703,14 +9998,15 @@ function decodeUtf8Tail(tail) {
   while (start < tail.length && (tail[start] & 192) === 128) start++;
   return tail.subarray(start).toString("utf8");
 }
-function streamFromRaw(raw) {
+function streamFromRaw(value) {
+  const raw = isRecord(value) ? value : {};
   let tail = Buffer.alloc(0);
   try {
-    tail = Buffer.from(raw?.tail_b64 ?? "", "base64");
+    tail = Buffer.from(typeof raw.tail_b64 === "string" ? raw.tail_b64 : "", "base64");
   } catch {
     tail = Buffer.alloc(0);
   }
-  const captured = Number.isFinite(raw?.captured_bytes) ? Math.max(0, Number(raw?.captured_bytes)) : tail.length;
+  const captured = typeof raw.captured_bytes === "number" && Number.isFinite(raw.captured_bytes) ? Math.max(0, raw.captured_bytes) : tail.length;
   return {
     captured_bytes: captured,
     retained_bytes: tail.length,
@@ -9721,7 +10017,7 @@ function streamFromRaw(raw) {
 function scrubDiagnosticText(input) {
   let out2 = "";
   for (const ch of input) {
-    const cp = ch.codePointAt(0);
+    const cp = ch.codePointAt(0) ?? 0;
     if (ch === "\n" || ch === "	") {
       out2 += ch;
     } else if (cp === 13) {
@@ -9924,7 +10220,7 @@ function parseCapturedSupervisorResult(stdoutText) {
   } catch {
     return null;
   }
-  if (!raw || typeof raw !== "object" || Array.isArray(raw)) return null;
+  if (!isRecord(raw)) return null;
   const diagnostics = {
     stdout: streamFromRaw(raw.stdout),
     stderr: streamFromRaw(raw.stderr)
@@ -9975,7 +10271,7 @@ function runCapturedProcessSync(executable, args, opts) {
     const parsed = parseCapturedSupervisorResult(supervisor.stdout ?? "");
     const diagnostics = parsed?.diagnostics ?? emptySuiteDiagnostics();
     if (!parsed) {
-      const supervisorTimedOut = Boolean(supervisor.error) && supervisor.error.code === "ETIMEDOUT";
+      const supervisorTimedOut = Boolean(supervisor.error) && errnoCode(supervisor.error) === "ETIMEDOUT";
       return {
         exit: null,
         signal: supervisor.signal ? String(supervisor.signal) : null,
@@ -10070,16 +10366,16 @@ function dockerAvailable(enginePath, host) {
   }
 }
 function declaredImageVolumePaths(metadata) {
-  if (!metadata || typeof metadata !== "object" || Array.isArray(metadata)) {
+  if (!isRecord(metadata)) {
     throw new Error("image metadata must be a Docker image-inspect object");
   }
   const config = metadata.Config;
-  if (!config || typeof config !== "object" || Array.isArray(config)) {
+  if (!isRecord(config)) {
     throw new Error("image metadata Config must be an object");
   }
   const volumes = config.Volumes;
   if (volumes === void 0 || volumes === null) return [];
-  if (typeof volumes !== "object" || Array.isArray(volumes)) {
+  if (!isRecord(volumes)) {
     throw new Error("image metadata Config.Volumes must be a mapping or null");
   }
   return Object.keys(volumes).sort();
@@ -10583,8 +10879,7 @@ function validateSymlinkGraph(target, out2, root, dependencyRoot, label) {
   const pending = linkParts(target);
   const seen = /* @__PURE__ */ new Set();
   let hops = 0;
-  while (pending.length) {
-    const part = pending.shift();
+  for (let part = pending.shift(); part !== void 0; part = pending.shift()) {
     if (part === "..") {
       if (!stack.length) throw linkEscape(label, target);
       stack.pop();
@@ -10596,7 +10891,7 @@ function validateSymlinkGraph(target, out2, root, dependencyRoot, label) {
       stack = [];
       continue;
     }
-    const base = domain === "tree" ? root : dependencyRoot;
+    const base = domain === "deps" && dependencyRoot ? dependencyRoot : root;
     const current = join16(base, ...stack);
     let st;
     try {
@@ -10894,10 +11189,24 @@ function renderStageDiagnostics(out2, stage, result) {
 }
 function runVerify(opts) {
   const cwd = opts.cwd ?? process.cwd();
-  const out2 = (s) => void process.stdout.write(s + "\n");
-  if (opts.invalid) {
-    out2(`verify: ${opts.invalid} \u2014 failing closed`);
+  const out2 = opts.silent ? (_s) => {
+  } : (s) => void process.stdout.write(s + "\n");
+  const cannotVerify = (reason, detail, extra = {}) => {
+    if (opts.json) {
+      out2(JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
+        verdict: "CANNOT_VERIFY",
+        reason,
+        ...detail ? { detail } : {},
+        ...extra
+      }));
+    } else if (detail) {
+      out2(`verify: ${detail} \u2014 failing closed`);
+    }
     return 2;
+  };
+  if (opts.invalid) {
+    return cannotVerify("INVALID_ARGUMENTS", opts.invalid);
   }
   let policy;
   try {
@@ -10905,24 +11214,24 @@ function runVerify(opts) {
     else if (opts.base) policy = loadPolicyAt(resolveBase(opts.base, cwd), cwd) ?? defaultPolicy();
     else policy = loadPolicy(cwd);
   } catch (e) {
-    out2(`verify: cannot load policy (${e instanceof Error ? e.message : String(e)}) \u2014 failing closed`);
-    return 2;
+    return cannotVerify("POLICY_ERROR", `cannot load policy (${e instanceof Error ? e.message : String(e)})`);
   }
   if (opts.requireAncestor) {
     const requested = git2(["rev-parse", "--verify", `${opts.base ?? "HEAD"}^{commit}`], cwd).trim();
     if (!baseIsAncestorOfHead(requested, cwd)) {
-      out2(
-        `verify: --require-ancestor: ${requested.slice(0, 10)} is not an ancestor of HEAD \u2014 the anchor would silently resolve to an older commit. Failing closed.`
+      return cannotVerify(
+        "BASE_NOT_ANCESTOR",
+        `--require-ancestor: ${requested.slice(0, 10)} is not an ancestor of HEAD; the anchor would silently resolve to an older commit`,
+        { base: requested }
       );
-      return 2;
     }
   }
   const cmd = opts.cmd ?? policy.verify?.command;
   if (!cmd) {
-    out2(
-      opts.base ? "verify: no suite command in the policy at the trusted base \u2014 the base governs the verifier, so a `verify:` block added only on the candidate is not used. Add it at the base, or pass --cmd explicitly." : "verify: no suite command \u2014 set policy `verify: { command: ... }` or pass --cmd"
+    return cannotVerify(
+      "NO_SUITE_COMMAND",
+      opts.base ? "no suite command in the policy at the trusted base; add it at the base or pass --cmd explicitly" : "no suite command; set policy verify.command or pass --cmd"
     );
-    return 2;
   }
   const budget = opts.budget ?? policy.verify?.budget ?? 300;
   const verifierBackend = opts.verifierBackend ?? prepareVerifierBackend(policy.verify);
@@ -10930,6 +11239,7 @@ function runVerify(opts) {
   if (!verifierBackend.available) {
     if (opts.json) {
       out2(JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: "VERIFIER_BACKEND_UNAVAILABLE",
         verifier_backend: backendReport(),
@@ -10945,6 +11255,7 @@ function runVerify(opts) {
   if (!isolated && !localVerifierShell(process.platform, cmd)) {
     if (opts.json) {
       out2(JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: "LOCAL_VERIFIER_UNSUPPORTED_PLATFORM",
         platform: process.platform,
@@ -10967,6 +11278,7 @@ function runVerify(opts) {
   if (dependencyEnvironment?.status === "unattestable" && !opts.allowDepDrift) {
     if (opts.json) {
       out2(JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: "DEPENDENCY_ENVIRONMENT_UNATTESTABLE",
         verifier_backend: backendReport(),
@@ -10986,8 +11298,7 @@ function runVerify(opts) {
   try {
     base = resolveBase(opts.base ?? "HEAD", cwd);
   } catch {
-    out2(`verify: cannot resolve base rev "${opts.base ?? "HEAD"}" \u2014 failing closed`);
-    return 2;
+    return cannotVerify("BASE_UNRESOLVABLE", `cannot resolve base rev "${opts.base ?? "HEAD"}"`);
   }
   const visRoot = mkdtempSync3(join16(tmpdir3(), "tw-verify-vis-"));
   const visDir = join16(visRoot, "t");
@@ -11004,17 +11315,22 @@ function runVerify(opts) {
   ) ?? checkDeps() : { ok: true };
   if (!dependencyAtEntry.ok && !opts.allowDepDrift) {
     cleanup([visRoot]);
-    out2("verify: the frozen dependency environment changed before the visible suite ran \u2014");
-    out2((dependencyAtEntry.reason ?? "dependency identity changed") + ". Failing closed, not open.");
-    return 2;
+    return cannotVerify(
+      "DEPENDENCY_DRIFT",
+      dependencyAtEntry.reason ?? "dependency identity changed before the visible suite ran",
+      { dependency_environment: dependencyReport(), verifier_backend: backendReport(), oracle_assurance: oracleAssuranceReport() }
+    );
   }
   try {
     mkdirSync6(visDir);
     materialize(cwd, visDir, frozenNodeModules);
   } catch (e) {
     cleanup([visRoot]);
-    out2(`verify: could not materialize (${e instanceof Error ? e.message : String(e)}) \u2014 failing closed`);
-    return 2;
+    return cannotVerify(
+      "MATERIALIZATION_FAILED",
+      `could not materialize (${e instanceof Error ? e.message : String(e)})`,
+      { verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport() }
+    );
   }
   const visible = runStage(visDir);
   if (visible.failure === "backend" || visible.failure === "resource") {
@@ -11022,6 +11338,7 @@ function runVerify(opts) {
     const exhausted = visible.failure === "resource";
     if (opts.json) {
       out2(JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: exhausted ? "VERIFIER_RESOURCE_EXHAUSTED" : "VERIFIER_BACKEND_RUNTIME_FAILURE",
         stage: "visible",
@@ -11042,16 +11359,20 @@ function runVerify(opts) {
   }
   if (treeFingerprint(cwd, protectedIgnored) !== treeBefore) {
     cleanup([visRoot]);
-    out2("verify: the working tree changed while the visible suite was running \u2014 the pristine copy");
-    out2("would be materialised from a tree the candidate just edited. Failing closed, not open.");
-    return 2;
+    return cannotVerify(
+      "WORKTREE_CHANGED",
+      "the working tree changed while the visible suite was running",
+      { stage: "visible", verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport() }
+    );
   }
   const dependencyAfterVisible = checkDeps();
   if (!dependencyAfterVisible.ok && !opts.allowDepDrift) {
     cleanup([visRoot]);
-    out2("verify: the frozen dependency environment changed while the visible suite was running \u2014");
-    out2((dependencyAfterVisible.reason ?? "dependency identity changed") + ". Failing closed, not open.");
-    return 2;
+    return cannotVerify(
+      "DEPENDENCY_DRIFT",
+      dependencyAfterVisible.reason ?? "dependency identity changed while the visible suite was running",
+      { stage: "visible", dependency_environment: dependencyReport(), verifier_backend: backendReport(), oracle_assurance: oracleAssuranceReport() }
+    );
   }
   const priRoot = mkdtempSync3(join16(tmpdir3(), "tw-verify-pri-"));
   const priDir = join16(priRoot, "t");
@@ -11070,8 +11391,11 @@ function runVerify(opts) {
     ));
   } catch (e) {
     cleanup([visRoot, priRoot]);
-    out2(`verify: could not materialize (${e instanceof Error ? e.message : String(e)}) \u2014 failing closed`);
-    return 2;
+    return cannotVerify(
+      "MATERIALIZATION_FAILED",
+      `could not materialize pristine copy (${e instanceof Error ? e.message : String(e)})`,
+      { stage: "pristine", verifier_backend: backendReport(), dependency_environment: dependencyReport(), oracle_assurance: oracleAssuranceReport() }
+    );
   }
   const overlayBefore = overlayDigest(priDir, restored);
   const pristine = runStage(priDir);
@@ -11080,6 +11404,7 @@ function runVerify(opts) {
     const exhausted = pristine.failure === "resource";
     if (opts.json) {
       out2(JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
         verdict: "CANNOT_VERIFY",
         reason: exhausted ? "VERIFIER_RESOURCE_EXHAUSTED" : "VERIFIER_BACKEND_RUNTIME_FAILURE",
         stage: "pristine",
@@ -11108,13 +11433,14 @@ function runVerify(opts) {
   const depsMoved = !dependencyAfterPristine.ok && !opts.allowDepDrift;
   cleanup([visRoot, priRoot]);
   if (overlayMoved || treeMoved || depsMoved) {
-    out2(
-      "verify: " + (overlayMoved ? "a restored file in the pristine copy changed while the pristine suite was running" : treeMoved ? "the working tree changed while the pristine suite was running" : "the frozen dependency environment changed while the pristine suite was running") + " \u2014"
-    );
-    out2("the verdict would describe something other than what ran. Failing closed, not open.");
-    out2("(A suite that rewrites its own snapshots or test files in place will trip this; run it in");
-    out2("whatever mode your runner calls CI, so verification observes rather than updates.)");
-    return 2;
+    const reason = overlayMoved ? "PRISTINE_INTEGRITY_CHANGED" : treeMoved ? "WORKTREE_CHANGED" : "DEPENDENCY_DRIFT";
+    const detail = overlayMoved ? "a restored file in the pristine copy changed while the pristine suite was running" : treeMoved ? "the working tree changed while the pristine suite was running" : dependencyAfterPristine.reason ?? "the frozen dependency environment changed while the pristine suite was running";
+    return cannotVerify(reason, detail, {
+      stage: "pristine",
+      verifier_backend: backendReport(),
+      dependency_environment: dependencyReport(),
+      oracle_assurance: oracleAssuranceReport()
+    });
   }
   let verdict2;
   let code2;
@@ -11136,6 +11462,7 @@ function runVerify(opts) {
   if (opts.json) {
     out2(
       JSON.stringify({
+        schema_version: MACHINE_SCHEMA_VERSION,
         verdict: verdict2,
         base,
         command: cmd,
@@ -11299,8 +11626,9 @@ var AGENT_SUPERVISOR = String.raw`
 const { spawn, spawnSync } = require('node:child_process');
 const fs = require('node:fs');
 
-const [resultFile, budgetRaw, command, ...args] = process.argv.slice(1);
+const [resultFile, budgetRaw, machineRaw, command, ...args] = process.argv.slice(1);
 const budgetMs = budgetRaw === '' ? null : Number(budgetRaw);
+const machineMode = machineRaw === '1';
 let child;
 let timedOut = false;
 let finished = false;
@@ -11326,7 +11654,9 @@ function killTree(pid) {
 
 try {
   child = spawn(command, args, {
-    stdio: 'inherit',
+    // Machine mode owns stdout for the final envelope document. Preserve agent
+    // diagnostics by routing both child streams to the parent's stderr.
+    stdio: machineMode ? ['inherit', 2, 2] : 'inherit',
     detached: process.platform !== 'win32',
   });
 } catch (e) {
@@ -11363,8 +11693,9 @@ child.once('exit', (code, signal) => finish(code, signal));
 var LINUX_SUBREAPER_SUPERVISOR = String.raw`
 import ctypes, json, os, signal, subprocess, sys, time
 
-result_file, agent_env_file, agent_cwd, budget_raw, test_mode, command, *args = sys.argv[1:]
+result_file, agent_env_file, agent_cwd, budget_raw, test_mode, machine_raw, command, *args = sys.argv[1:]
 budget = None if budget_raw == "" else float(budget_raw)
+machine_mode = machine_raw == "1"
 libc = ctypes.CDLL(None, use_errno=True)
 PR_SET_DUMPABLE = 4
 PR_SET_CHILD_SUBREAPER = 36
@@ -11482,6 +11813,10 @@ try:
         cwd=agent_cwd,
         env=agent_env,
         start_new_session=True,
+        # In machine mode stdout is reserved for TamperWard's one final JSON
+        # document. Agent stdout is retained as diagnostics on stderr.
+        stdout=sys.stderr if machine_mode else None,
+        stderr=None,
     )
 except Exception as exc:
     # No candidate process exists, so the lifecycle domain is trivially empty.
@@ -11511,7 +11846,7 @@ write_result({
 })
 raise SystemExit(0)
 `;
-function runAgentSupervised(argv2, cwd, budgetSecs, linuxPythonCandidates, lifecycleTestMode) {
+function runAgentSupervised(argv2, cwd, budgetSecs, linuxPythonCandidates, lifecycleTestMode, machineMode = false) {
   const stateDir = mkdtempSync4(join17(tmpdir4(), "tw-agent-supervisor-"));
   const resultFile = join17(stateDir, "result.json");
   const agentEnvFile = join17(stateDir, "agent-env.json");
@@ -11544,6 +11879,7 @@ function runAgentSupervised(argv2, cwd, budgetSecs, linuxPythonCandidates, lifec
         cwd,
         budgetSecs === void 0 ? "" : String(budgetSecs),
         lifecycleTestMode ?? "",
+        machineMode ? "1" : "0",
         ...argv2
       ];
       supervisorCwd = "/";
@@ -11555,6 +11891,7 @@ function runAgentSupervised(argv2, cwd, budgetSecs, linuxPythonCandidates, lifec
         AGENT_SUPERVISOR,
         resultFile,
         budgetSecs === void 0 ? "" : String(budgetSecs * 1e3),
+        machineMode ? "1" : "0",
         ...argv2
       ];
     }
@@ -11573,7 +11910,7 @@ function runAgentSupervised(argv2, cwd, budgetSecs, linuxPythonCandidates, lifec
         }
       }
     );
-    const supervisorTimedOut = Boolean(supervisor.error) && supervisor.error.code === "ETIMEDOUT";
+    const supervisorTimedOut = Boolean(supervisor.error) && errnoCode(supervisor.error) === "ETIMEDOUT";
     const completedNormally = !supervisorTimedOut && !supervisor.error && supervisor.status === 0 && supervisor.signal == null;
     if (!completedNormally) {
       return {
@@ -11624,7 +11961,7 @@ function pidAlive2(pid) {
     process.kill(pid, 0);
     return true;
   } catch (e) {
-    return e.code === "EPERM";
+    return errnoCode(e) === "EPERM";
   }
 }
 function supervisedObserverLog(cwd) {
@@ -11667,15 +12004,14 @@ function stopObserverProcess(observer) {
   waitMs(100);
   const beforeStop = watcherTelemetry(observer.log);
   const pid = observer.pid;
-  if (pidAlive2(pid)) {
+  if (pid !== null && pidAlive2(pid)) {
     try {
       process.kill(pid, "SIGTERM");
     } catch {
     }
     const deadline = Date.now() + 2e3;
     while (Date.now() < deadline) {
-      const health = watcherTelemetry(observer.log);
-      if (health.health?.state === "stopped" || !pidAlive2(pid)) break;
+      if (!pidAlive2(pid)) break;
       waitMs(25);
     }
     if (pidAlive2(pid)) {
@@ -11688,22 +12024,22 @@ function stopObserverProcess(observer) {
   observer.finished = true;
   return beforeStop;
 }
-function observerSummary(observer, telemetry) {
+function observerSummary(observer, telemetry, write = out) {
   const h = telemetry.health;
   const counts = h ? `${h.event_count} event(s), ${h.dropped_events} dropped, ${h.error_count} error(s)` : "no valid health record";
   const reason = telemetry.reason ? `; ${telemetry.reason}` : "";
-  out(
+  write(
     `tamperward run \u2014 transient observer: ${telemetry.state} (advisory; ${counts}; log ${observer.log}${reason})`
   );
 }
-function collectObserverFindings(observer, telemetry, cwd, base, head, policy) {
-  observerSummary(observer, telemetry);
+function collectObserverFindings(observer, telemetry, cwd, base, head, policy, write = out) {
+  observerSummary(observer, telemetry, write);
   const strict = process.env.TAMPERWARD_TRANSIENT === "block";
   const drained = drainEvents(observer.log, 0);
   const { events } = drained;
   if (!drained.complete) {
     const issue = drained.issue ?? "read-stalled";
-    out(
+    write(
       `tamperward run \u2014 transient observer: telemetry was not fully classified (${issue}; ${drained.bytesRead}/${MAX_EVENT_SWEEP_BYTES} bytes read). ` + (strict ? "Strict transient policy fails closed." : "Observer telemetry remains advisory, so this degrades evidence but does not independently fail the envelope.")
     );
     if (strict) return { blocking: true };
@@ -11719,7 +12055,7 @@ function collectObserverFindings(observer, telemetry, cwd, base, head, policy) {
       changes.filter((change) => change.kind === "file").map((change) => change.path)
     );
   } catch (e) {
-    out(
+    write(
       `tamperward run \u2014 transient observer: recorded ${events.length} event(s), but could not classify them against the final diff (${e instanceof Error ? e.message : String(e)}).` + (strict ? " Strict transient policy fails closed." : "")
     );
     return { blocking: strict };
@@ -11730,16 +12066,16 @@ function collectObserverFindings(observer, telemetry, cwd, base, head, policy) {
   };
   const findings = transientFindings(events, persistent, policy, finalHash);
   for (const finding of findings) {
-    out(
+    write(
       `[observer] ${finding.severity === "block" ? "BLOCK" : "warn"} ${finding.rule}${finding.file ? " " + finding.file : ""}: ${finding.message}`
     );
   }
   return { blocking: findings.some((finding) => finding.severity === "block") };
 }
-function finishObserverAdvisory(observer) {
+function finishObserverAdvisory(observer, write = out) {
   if (!observer || observer.finished) return;
   const telemetry = stopObserverProcess(observer);
-  observerSummary(observer, telemetry);
+  observerSummary(observer, telemetry, write);
 }
 function git3(args, cwd) {
   return execFileSync9("git", args, { cwd, encoding: "utf8", maxBuffer: 1 << 28, env: trustedGitEnv() });
@@ -11798,6 +12134,8 @@ function survivorsHoldingTree(cwd, spawnedAfterTicks) {
 }
 function runEnvelope(opts) {
   const cwd = resolve7(opts.cwd ?? process.cwd());
+  const say = opts.json ? (_s) => {
+  } : out;
   if (!opts.argv.length) {
     err("tamperward run: no agent command given (usage: tamperward run [options] -- <command...>)");
     return 2;
@@ -11848,8 +12186,8 @@ function runEnvelope(opts) {
     return 2;
   }
   const verifierBackend = prepareVerifierBackend(frozenPolicy.verify);
-  out(`tamperward run \u2014 trusted base ${base.slice(0, 10)}; agent exit is untrusted.`);
-  out(`tamperward run \u2014 verifier backend: ${verifierBackendSummary(verifierBackend)}`);
+  say(`tamperward run \u2014 trusted base ${base.slice(0, 10)}; agent exit is untrusted.`);
+  say(`tamperward run \u2014 verifier backend: ${verifierBackendSummary(verifierBackend)}`);
   if (!verifierBackend.available) {
     err("tamperward run: the requested verifier backend cannot be established \u2014");
     err(`${verifierBackend.reason ?? "unknown backend failure"}. Failing closed before the agent starts.`);
@@ -11865,7 +12203,7 @@ function runEnvelope(opts) {
   }
   const dependencyEnvironment = verifierBackend.kind === "local" ? discoverDependencyEnvironment(cwd, frozenCmd) : null;
   if (dependencyEnvironment) {
-    out(`tamperward run \u2014 dependency environment: ${dependencyEnvironmentSummary(dependencyEnvironment)}`);
+    say(`tamperward run \u2014 dependency environment: ${dependencyEnvironmentSummary(dependencyEnvironment)}`);
     if (dependencyEnvironment.status === "unattestable" && !opts.allowDepDrift) {
       err("tamperward run: the verifier dependency environment cannot be attested \u2014");
       err(`${dependencyEnvironment.reason ?? "unknown dependency environment"}. Failing closed before the agent starts.`);
@@ -11873,11 +12211,11 @@ function runEnvelope(opts) {
       return 2;
     }
   } else {
-    out(`tamperward run \u2014 dependency environment: verifier-owned by ${verifierBackend.image ?? "isolated image"}`);
+    say(`tamperward run \u2014 dependency environment: verifier-owned by ${verifierBackend.image ?? "isolated image"}`);
   }
   const observer = opts.observeTransients ? startSupervisedObserver(cwd, base, opts.observerEntry) : null;
   if (!observer) {
-    out("tamperward run \u2014 transient observer: disabled (advisory; pass --observe-transients to enable)");
+    say("tamperward run \u2014 transient observer: disabled (advisory; pass --observe-transients to enable)");
   }
   const rewritesBefore = objectRewriteState(cwd);
   const spawnTicks = nowTicks();
@@ -11886,16 +12224,38 @@ function runEnvelope(opts) {
     cwd,
     opts.agentBudget,
     opts.linuxPythonCandidates,
-    opts.lifecycleTestMode
+    opts.lifecycleTestMode,
+    opts.json === true
   );
   const agentExit = agentRun.exit;
   const agentTimedOut = agentRun.timedOut;
+  const emitRunJson = (verdict3, exitCode2, extra = {}, complete = false) => {
+    if (!opts.json) return;
+    out(JSON.stringify(machineOutput({
+      verdict: verdict3,
+      exit_code: exitCode2,
+      complete,
+      base,
+      agent: {
+        exit_code: agentExit,
+        timed_out: agentTimedOut,
+        lifecycle_owned: agentRun.lifecycleOwned,
+        ...opts.agentBudget !== void 0 ? { budget_secs: opts.agentBudget } : {}
+      },
+      verifier_backend: verifierBackendReport(verifierBackend),
+      dependency_environment: dependencyEnvironment ? dependencyEnvironmentReport(dependencyEnvironment) : { status: "verifier-owned", roots: [], image: verifierBackend.image },
+      ...extra
+    })));
+  };
   if (agentRun.failure && !agentTimedOut) {
     err(`tamperward run: agent runtime failed to start/report cleanly (${agentRun.failure}).`);
   }
-  if (process.platform === "linux" && !agentRun.lifecycleOwned) {
-    err("tamperward run: the Linux agent lifecycle boundary was not established/drained \u2014 failing closed before adjudication.");
-    finishObserverAdvisory(observer);
+  if (!agentRun.lifecycleOwned) {
+    err("tamperward run: the agent lifecycle boundary was not established/drained \u2014 failing closed before adjudication.");
+    finishObserverAdvisory(observer, say);
+    emitRunJson("CANNOT_ADJUDICATE", 2, {
+      reason: "AGENT_LIFECYCLE_NOT_OWNED"
+    });
     return 2;
   }
   if (agentTimedOut) {
@@ -11908,9 +12268,10 @@ function runEnvelope(opts) {
     err("tamperward run: git object-replacement state changed during this run \u2014 a replace ref, graft");
     err("or shallow boundary now redirects what the trusted base resolves to. Nothing below could be");
     err("read against the anchor we started from. That is the finding.");
-    out(`
+    say(`
 tamperward run \u2014 agent exit ${agentExit}; OBJECT_REWRITE \u2192 ENFORCEMENT_FAILED`);
-    finishObserverAdvisory(observer);
+    finishObserverAdvisory(observer, say);
+    emitRunJson("OBJECT_REWRITE", 1);
     return 1;
   }
   const head = git3(["rev-parse", "HEAD"], cwd).trim();
@@ -11918,36 +12279,41 @@ tamperward run \u2014 agent exit ${agentExit}; OBJECT_REWRITE \u2192 ENFORCEMENT
   if (isAncestor.status !== 0) {
     err(`tamperward run: HEAD ${head.slice(0, 10)} is not a descendant of the trusted base ${base.slice(0, 10)} \u2014`);
     err("the agent rewrote history out from under the anchor. That is the finding.");
-    out(`
+    say(`
 tamperward run \u2014 agent exit ${agentExit}; HISTORY_REWRITE \u2192 ENFORCEMENT_FAILED`);
-    finishObserverAdvisory(observer);
+    finishObserverAdvisory(observer, say);
+    emitRunJson("HISTORY_REWRITE", 1, { head });
     return 1;
   }
   const protectedIgnored = (rel) => isProtected(rel, frozenPolicy);
   const fpBefore = treeFingerprint(cwd, protectedIgnored);
   let diffCode = 0;
   if (head !== base) {
-    out(`
+    say(`
 [envelope] policy check over committed changes (${base.slice(0, 10)}...${head.slice(0, 10)}):`);
-    diffCode = runCheck({ diff: `${base}...${head}`, cwd, policyOverride: frozenPolicy });
+    diffCode = runCheck({ diff: `${base}...${head}`, cwd, policyOverride: frozenPolicy, silent: opts.json });
   }
-  out("\n[envelope] policy check over the working tree (frozen policy, untracked included, no local ledger):");
-  const workCode = runCheck({ worktree: true, cwd, policyOverride: frozenPolicy, includeUntracked: true, ciLayer: true });
+  say("\n[envelope] policy check over the working tree (frozen policy, untracked included, no local ledger):");
+  const workCode = runCheck({ worktree: true, cwd, policyOverride: frozenPolicy, includeUntracked: true, ciLayer: true, silent: opts.json });
   const dependencyBeforeVerificationAttestation = dependencyEnvironment ? attestDependencyEnvironment(cwd, dependencyEnvironment) : void 0;
   const dependencyBeforeVerification = dependencyBeforeVerificationAttestation?.check ?? { ok: true };
   if (!dependencyBeforeVerification.ok) {
     err("tamperward run: the frozen dependency environment changed before verification began \u2014");
     err(`${dependencyBeforeVerification.reason ?? "dependency identity changed"}.`);
     if (!opts.allowDepDrift) {
-      out(`
+      say(`
 tamperward run \u2014 agent exit ${agentExit}; DEPENDENCY_DRIFT \u2192 ENFORCEMENT_FAILED`);
-      finishObserverAdvisory(observer);
+      finishObserverAdvisory(observer, say);
+      emitRunJson("DEPENDENCY_DRIFT", 1, {
+        head,
+        checks: { diff: diffCode, worktree: workCode }
+      });
       return 1;
     }
     err("(--allow-dep-drift: proceeding anyway, on the operator's judgement.)");
   }
   let verifierFinalDependencyAttestation;
-  out("\n[envelope] pristine verification against the trusted base:");
+  say("\n[envelope] pristine verification against the trusted base:");
   const verifyCode = runVerify({
     cwd,
     base,
@@ -11962,7 +12328,8 @@ tamperward run \u2014 agent exit ${agentExit}; DEPENDENCY_DRIFT \u2192 ENFORCEME
       }
     } : {},
     allowDepDrift: opts.allowDepDrift,
-    verifierBackend
+    verifierBackend,
+    silent: opts.json
   });
   if (opts.settle && opts.settle > 0) {
     waitForSettleSync(opts.settle);
@@ -11975,7 +12342,7 @@ tamperward run \u2014 agent exit ${agentExit}; DEPENDENCY_DRIFT \u2192 ENFORCEME
   const dependencyAfter = dependencyEnvironment ? checkDependencyEnvironment(cwd, dependencyEnvironment) : { ok: true };
   if (dependencyEnvironment && process.env.TAMPERWARD_DIAGNOSTICS === "1") {
     const metrics = dependencyEnvironmentDiagnostics(dependencyEnvironment);
-    out(
+    say(
       `tamperward run \u2014 dependency attestation diagnostics: full_snapshots=${metrics.fullSnapshots} reused_snapshots=${metrics.reusedSnapshots} total_ms=${Number(metrics.totalMs.toFixed(3))} verifier_final_attestation=${verifierFinalDependencyAttestation ? "yes" : "no"} run_lifecycle_owned=${agentRun.lifecycleOwned ? "yes" : "no"} entry_reuse=${canReuseAdjacentDependencyAttestation(agentRun.lifecycleOwned) ? "yes" : "no"}`
     );
   }
@@ -12003,7 +12370,8 @@ tamperward run \u2014 agent exit ${agentExit}; DEPENDENCY_DRIFT \u2192 ENFORCEME
       cwd,
       base,
       head,
-      frozenPolicy
+      frozenPolicy,
+      say
     );
     observerBlocked = observed.blocking;
   }
@@ -12012,10 +12380,25 @@ tamperward run \u2014 agent exit ${agentExit}; DEPENDENCY_DRIFT \u2192 ENFORCEME
   const blocked = diffCode === 1 || workCode === 1 || verifyCode === 1 || notQuiescent || observerBlocked;
   const enforcement = cannot ? 2 : blocked ? 1 : 0;
   const verdict2 = enforcement === 2 ? "CANNOT_ADJUDICATE (fail closed)" : rewrote ? "OBJECT_REWRITE \u2014 the base the checks read is not the base we anchored to" : depsDrifted ? "DEPENDENCY_DRIFT \u2014 the suite runner changed under the envelope" : notQuiescent ? "NOT_QUIESCENT \u2014 the tree moved, or something still holds it" : observerBlocked ? "TRANSIENT_OBSERVER_BLOCK \u2014 observed temporal weakening under strict transient policy" : enforcement === 1 ? "ENFORCEMENT_FAILED \u2014 the tree the runtime released does not stand" : agentTimedOut ? "AGENT_TIMEOUT \u2014 runtime budget expired; post-timeout enforcement clean" : agentExit !== 0 ? `agent exited ${agentExit} (enforcement clean)` : "GREEN MEANS GREEN";
+  const machineVerdict = enforcement === 2 ? "CANNOT_ADJUDICATE" : rewrote ? "OBJECT_REWRITE" : depsDrifted ? "DEPENDENCY_DRIFT" : notQuiescent ? "NOT_QUIESCENT" : observerBlocked ? "TRANSIENT_OBSERVER_BLOCK" : enforcement === 1 ? "ENFORCEMENT_FAILED" : agentTimedOut ? "AGENT_TIMEOUT" : agentExit !== 0 ? "AGENT_FAILED" : "VERIFIED";
   const agentSummary = agentTimedOut ? `AGENT_TIMEOUT (${opts.agentBudget}s; exit 124)` : `agent exit ${agentExit}`;
-  out(`
+  const exitCode = enforcement !== 0 ? enforcement : agentTimedOut ? 124 : agentExit;
+  if (opts.json) {
+    const cannotReason = enforcement !== 2 ? null : verifyCode === 2 ? "VERIFY_CANNOT_VERIFY" : diffCode === 2 ? "CHECK_DIFF_UNJUDGEABLE" : "CHECK_WORKTREE_UNJUDGEABLE";
+    emitRunJson(machineVerdict, exitCode, {
+      head,
+      checks: { diff: diffCode, worktree: workCode, verify: verifyCode },
+      observer: {
+        enabled: Boolean(opts.observeTransients),
+        blocking: observerBlocked
+      },
+      ...cannotReason ? { reason: cannotReason } : {}
+    }, true);
+  } else {
+    say(`
 tamperward run \u2014 ${agentSummary}; checks diff=${diffCode} worktree=${workCode} verify=${verifyCode} \u2192 ${verdict2}`);
-  return enforcement !== 0 ? enforcement : agentTimedOut ? 124 : agentExit;
+  }
+  return exitCode;
 }
 function parseRun(args) {
   const o = { argv: [] };
@@ -12027,6 +12410,7 @@ function parseRun(args) {
     } else if (a === "--base") o.base = args[++i];
     else if (a === "--cmd") o.cmd = args[++i];
     else if (a === "--budget") o.budget = Number(args[++i]);
+    else if (a === "--json") o.json = true;
     else if (a === "--agent-budget") o.agentBudget = Number(args[++i]);
     else if (a === "--allow-dirty") o.allowDirty = true;
     else if (a === "--settle") o.settle = Number(args[++i]);
@@ -12073,14 +12457,14 @@ function lifecyclePlatformCheck(platform = process.platform, linuxPython = platf
 var VERIFY_COMMAND = /\btamperward(?:@\S+)?\s+verify\b/;
 function err2(message, opts, id = "doctor", checks = []) {
   if (opts?.json) {
-    const report2 = {
+    const report2 = machineOutput({
       command: "doctor",
       authoritative: false,
       checks: [
         ...checks.filter((check2) => check2.id !== id),
         { id, state: "BROKEN", detail: message }
       ]
-    };
+    });
     process.stdout.write(JSON.stringify(report2) + "\n");
   } else {
     process.stderr.write(`tamperward doctor: ${message}
@@ -12094,7 +12478,7 @@ function policyFor(opts, cwd) {
   return atBase ?? defaultPolicy();
 }
 function asMapping(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+  return isRecord(value) ? value : null;
 }
 function wiringState(status, authority) {
   if (status === "ok") return "OK";
@@ -12293,7 +12677,7 @@ function observerCheck(cwd) {
 function emitReport(opts, checks) {
   const authoritative = !checks.some((x) => x.state === "BROKEN");
   if (opts.json) {
-    const report2 = { command: "doctor", authoritative, checks };
+    const report2 = machineOutput({ command: "doctor", authoritative, checks });
     process.stdout.write(JSON.stringify(report2) + "\n");
     return;
   }
@@ -12415,8 +12799,8 @@ function githubApi(cwd, endpoint) {
     );
     return JSON.parse(stdout);
   } catch (e) {
-    const x = e;
-    const detail = x.stderr ? String(x.stderr).replace(/\s+/g, " ").trim() : x.message;
+    const failure = execFailure(e);
+    const detail = failure.stderr ? failure.stderr.replace(/\s+/g, " ").trim() : failure.message;
     throw new Error(
       "GitHub API " + endpoint + " failed: " + (detail || "unknown error")
     );
@@ -12727,7 +13111,7 @@ function summarizeTraceRuns(opts) {
     for (const item of run) {
       const rel = normalRepoPath(opts.root, item.path);
       const isTracked = rel !== null && opts.tracked.has(rel);
-      const keyPath = isTracked ? rel : rel === null ? resolve9(opts.root, item.path) : null;
+      const keyPath = rel !== null ? opts.tracked.has(rel) ? rel : null : resolve9(opts.root, item.path);
       if (keyPath === null) continue;
       const target = isTracked ? repo : external;
       const key2 = `${isTracked ? "repo" : "external"}\0${keyPath}`;
@@ -12812,7 +13196,7 @@ function materializeBase(base, cwd, dest) {
 }
 function traceFiles(prefix) {
   const dir = resolve9(prefix, "..");
-  const base = prefix.split(sep3).at(-1);
+  const base = prefix.split(sep3).at(-1) ?? prefix;
   return readdirSync6(dir).filter((name) => name === base || name.startsWith(base + ".")).map((name) => join19(dir, name)).sort();
 }
 function rewriteTraceRoot(accesses, actualRoot) {
@@ -13149,7 +13533,7 @@ function validateCliArgs(cmd, args) {
     const prefix = args.slice(0, delimiter3);
     const command = args.slice(delimiter3 + 1);
     const parsed = validateFlatArgs(prefix, {
-      flags: ["--allow-dirty", "--allow-dep-drift", "--observe-transients"],
+      flags: ["--allow-dirty", "--allow-dep-drift", "--observe-transients", "--json"],
       values: {
         "--base": "string",
         "--cmd": "string",
@@ -13250,7 +13634,8 @@ Formats:
   github  GitHub Actions view: one inline annotation per finding (so it shows up
           on the line in "Files changed") plus a job-summary table on the run
           page, alongside the same text output in the log.
-  json    the findings verbatim, plus a summary count.
+  json    versioned machine-readable output. Top-level schema_version identifies
+          the public JSON-schema major; published schemas live under schemas/.
   auto    github when GITHUB_ACTIONS=true, otherwise text.
   tamperward hook claude                    PreToolUse gate (reads hook JSON on stdin)
   tamperward sweep claude                   Stop sweep (re-scan the turn's working tree)
@@ -13279,11 +13664,13 @@ Formats:
              [--budget S] [--agent-budget S] untrusted, then re-adjudicate the tree it
              [--allow-dirty] [--settle S]   left (policy over base...HEAD and the
              [--allow-dep-drift] [--cwd D]  worktree, plus verify).
-             [--observe-transients]          --observe-transients starts a session-
+             [--observe-transients] [--json] --observe-transients starts a session-
                                             scoped observer before the agent and
                                             reports temporal evidence/health after it.
                                             --agent-budget bounds the agent runtime
                                             itself and still adjudicates after timeout.
+                                            --json emits one final versioned run verdict
+                                            document on stdout after agent adjudication.
                                             Exit: agent's
                                             code when clean; 124 on clean AGENT_TIMEOUT;
                                             1 on any blocking finding/masked failure;