wicked-crew 0.7.49 → 0.8.0

package/dist/watch/bounded-read.d.ts

@@ -0,0 +1,26 @@
+/**
+ * One bounded, cached read (TR-W6's rules-snapshot rule, shared by WT-W4's discovery view): a TTL'd
+ * value, at most one read in flight, and a per-ask DEADLINE below the deterministic lane's timeout —
+ * a slow read must never get a check's evaluation abandoned mid-way (its dedupe state would move
+ * while its output is dropped). Past the deadline the ask is refused — or, with `staleOk`, answered
+ * from the last value — while the read itself goes on and fills the snapshot when it lands. A read
+ * that has not settled within one TTL is abandoned: the next ask starts a new one (a hung source
+ * never pins the slot), and a late answer from an abandoned read never overwrites a newer snapshot.
+ */
+export declare class BoundedRead<T> {
+    private readonly opts;
+    private snapshot;
+    private inFlight;
+    constructor(opts: {
+        /** Names the read in the timeout's message ("the rules read timed out after 400 ms"). */
+        name: string;
+        source: () => Promise<T>;
+        ttlMs: number;
+        deadlineMs: number;
+        now: () => number;
+        /** Answer an ask past its deadline from the last value when there is one (advisory data). */
+        staleOk?: boolean;
+    });
+    read(): Promise<T>;
+}
+//# sourceMappingURL=bounded-read.d.ts.map

package/dist/watch/bounded-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-read.d.ts","sourceRoot":"","sources":["../../src/watch/bounded-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,WAAW,CAAC,CAAC;IAKtB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJvB,OAAO,CAAC,QAAQ,CAAyC;IACzD,OAAO,CAAC,QAAQ,CAA2D;gBAGxD,IAAI,EAAE;QACrB,yFAAyF;QACzF,IAAI,EAAE,MAAM,CAAC;QACb,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,CAAC;QACzB,KAAK,EAAE,MAAM,CAAC;QACd,UAAU,EAAE,MAAM,CAAC;QACnB,GAAG,EAAE,MAAM,MAAM,CAAC;QAClB,6FAA6F;QAC7F,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB;IAGH,IAAI,IAAI,OAAO,CAAC,CAAC,CAAC;CAuCnB"}

package/dist/watch/bounded-read.js

@@ -0,0 +1,59 @@
+/**
+ * One bounded, cached read (TR-W6's rules-snapshot rule, shared by WT-W4's discovery view): a TTL'd
+ * value, at most one read in flight, and a per-ask DEADLINE below the deterministic lane's timeout —
+ * a slow read must never get a check's evaluation abandoned mid-way (its dedupe state would move
+ * while its output is dropped). Past the deadline the ask is refused — or, with `staleOk`, answered
+ * from the last value — while the read itself goes on and fills the snapshot when it lands. A read
+ * that has not settled within one TTL is abandoned: the next ask starts a new one (a hung source
+ * never pins the slot), and a late answer from an abandoned read never overwrites a newer snapshot.
+ */
+export class BoundedRead {
+    opts;
+    snapshot = null;
+    inFlight = null;
+    constructor(opts) {
+        this.opts = opts;
+    }
+    read() {
+        const { name, ttlMs, deadlineMs, now } = this.opts;
+        const t = now();
+        if (this.snapshot !== null && t - this.snapshot.at < ttlMs)
+            return Promise.resolve(this.snapshot.value);
+        if (this.inFlight === null || t - this.inFlight.startedAt >= ttlMs) {
+            const flight = { startedAt: t, promise: Promise.resolve(undefined) };
+            flight.promise = Promise.resolve()
+                .then(this.opts.source)
+                .then((value) => {
+                // Only the read that still owns the slot may publish (an abandoned one is stale by definition).
+                if (this.inFlight === flight)
+                    this.snapshot = { at: now(), value };
+                return value;
+            })
+                .finally(() => {
+                if (this.inFlight === flight)
+                    this.inFlight = null;
+            });
+            flight.promise.catch(() => undefined); // an ask past its deadline no longer listens
+            this.inFlight = flight;
+        }
+        const read = this.inFlight.promise;
+        const stale = this.snapshot;
+        return new Promise((resolve, reject) => {
+            const timer = setTimeout(() => {
+                if (this.opts.staleOk === true && stale !== null)
+                    resolve(stale.value);
+                else
+                    reject(new Error(`${name} timed out after ${deadlineMs} ms`));
+            }, deadlineMs);
+            timer.unref();
+            read.then((value) => {
+                clearTimeout(timer);
+                resolve(value);
+            }, (err) => {
+                clearTimeout(timer);
+                reject(err instanceof Error ? err : new Error(String(err)));
+            });
+        });
+    }
+}
+//# sourceMappingURL=bounded-read.js.map

package/dist/watch/bounded-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bounded-read.js","sourceRoot":"","sources":["../../src/watch/bounded-read.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,WAAW;IAKH;IAJX,QAAQ,GAAoC,IAAI,CAAC;IACjD,QAAQ,GAAsD,IAAI,CAAC;IAE3E,YACmB,IAShB;QATgB,SAAI,GAAJ,IAAI,CASpB;IACA,CAAC;IAEJ,IAAI;QACF,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC;QACnD,MAAM,CAAC,GAAG,GAAG,EAAE,CAAC;QAChB,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,KAAK;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACxG,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK,EAAE,CAAC;YACnE,MAAM,MAAM,GAA+C,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,CAAC,SAAyB,CAAC,EAAE,CAAC;YACjI,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE;iBAC/B,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;iBACtB,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACd,gGAAgG;gBAChG,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;oBAAE,IAAI,CAAC,QAAQ,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC;gBACnE,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;iBACD,OAAO,CAAC,GAAG,EAAE;gBACZ,IAAI,IAAI,CAAC,QAAQ,KAAK,MAAM;oBAAE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;YACrD,CAAC,CAAC,CAAC;YACL,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,6CAA6C;YACpF,IAAI,CAAC,QAAQ,GAAG,MAAM,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC5B,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,IAAI,KAAK,KAAK,IAAI;oBAAE,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;;oBAClE,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,IAAI,oBAAoB,UAAU,KAAK,CAAC,CAAC,CAAC;YACrE,CAAC,EAAE,UAAU,CAAC,CAAC;YACf,KAAK,CAAC,KAAK,EAAE,CAAC;YACd,IAAI,CAAC,IAAI,CACP,CAAC,KAAK,EAAE,EAAE;gBACR,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,OAAO,CAAC,KAAK,CAAC,CAAC;YACjB,CAAC,EACD,CAAC,GAAY,EAAE,EAAE;gBACf,YAAY,CAAC,KAAK,CAAC,CAAC;gBACpB,MAAM,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAC9D,CAAC,CACF,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/watch/checks/discovery.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Workflow discovery (DES-walkthrough-proof §4.13; WT-W4): two deterministic, propose-only queries,
+ * registered as trigger-registry entries and fired on a run's terminal frames.
+ *
+ *   added_by_hand  per project, a catalog id a PERSON added to N consecutive launched chains (the
+ *                  steps of `plan.proposed{by:"human"}` the PA's proposal did not have; floor-added
+ *                  never; PA additions — `pa_added`, `member_request` — never) and never overrode
+ *                  → a testing-rule draft that makes the step the default for the observed kinds.
+ *   what_catches   per project per 30 days, a walkthrough FAIL while the same run's `test` verdict
+ *                  was PASS, K times → hold TST-1002 (Test plus a walkthrough review).
+ *
+ * Both count over ONE project-level view the daemon builds and the registry hands over as
+ * `ctx.discovery` (bounded, cached; `src/api/discovery-source.ts`). The checks stay pure over that
+ * view: no bus read, no ledger read, no engine call here.
+ *
+ * A hit is one `proposal` row per (project, query, draft hash) — RUN-LESS and project-scoped
+ * (`project` on the output; the emitter keys it to the project, so a second run of the project
+ * re-deriving the same draft resolves to the row already there, across restarts too). The emitter
+ * hands the row to the existing review queue (`facts.proposal` = the estate `proposal.submit` item,
+ * `kind_type: "policy:testing"`, payload `{rule, severity, evidence: {count, window, run_ids}}`).
+ * Nothing here lands a rule: approval is the operator's, in the queue (§4.13 "Approving"). The draft
+ * is a proposal, not the operator's words, so it never auto-remembers.
+ *
+ * The draft hash is over the RULE text, not the count: a sixth consecutive run re-derives the same
+ * draft and raises nothing new. A changed set of observed kinds is a new draft.
+ *
+ * A run whose records could not be read stays in the view as `unknown` (nothing added, no verdicts):
+ * it breaks a streak it sits inside and never counts as a hit — unknown is never "yes".
+ */
+import type { DiscoverySnapshot, WatchCheck } from '../types.js';
+export type DiscoveryQuery = 'added_by_hand' | 'what_catches';
+export interface AddedByHandParams {
+    /** The catalog ids a testing rule may oblige — only a step of this kind becomes a proposal. */
+    catalog: string[];
+}
+export interface AddedByHandThreshold {
+    /** Consecutive launched chains the step must have been added to, counted from the newest back. */
+    consecutive: number;
+}
+export interface WhatCatchesThreshold {
+    times: number;
+    window_days: number;
+}
+export interface DiscoveryProposal {
+    query: DiscoveryQuery;
+    /** `added_by_hand`: the step. */
+    catalog?: string;
+    /** The rule statement the proposal carries (the operator's review queue shows it verbatim). */
+    rule: string;
+    /** The watch row's sentence (the Watchtower's question). */
+    sentence: string;
+    evidence: {
+        count: number;
+        window: string;
+        run_ids: string[];
+        kinds: string[];
+    };
+}
+/** The dedupe key's draft part: 12 hex of sha256 over (query, rule). */
+export declare function draftHash(query: DiscoveryQuery, rule: string): string;
+export declare function addedByHandProposals(snap: DiscoverySnapshot, params: AddedByHandParams, threshold: AddedByHandThreshold): DiscoveryProposal[];
+export declare function whatCatchesProposals(snap: DiscoverySnapshot, threshold: WhatCatchesThreshold, now: number): DiscoveryProposal[];
+export declare const addedByHandCheck: WatchCheck<AddedByHandParams, AddedByHandThreshold>;
+export declare const whatCatchesCheck: WatchCheck<Record<string, never>, WhatCatchesThreshold>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/watch/checks/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/watch/checks/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAIH,OAAO,KAAK,EAAuC,iBAAiB,EAAgC,UAAU,EAAE,MAAM,aAAa,CAAC;AAEpI,MAAM,MAAM,cAAc,GAAG,eAAe,GAAG,cAAc,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,+FAA+F;IAC/F,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AACD,MAAM,WAAW,oBAAoB;IACnC,kGAAkG;IAClG,WAAW,EAAE,MAAM,CAAC;CACrB;AACD,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,cAAc,CAAC;IACtB,iCAAiC;IACjC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+FAA+F;IAC/F,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CACjF;AAMD,wEAAwE;AACxE,wBAAgB,SAAS,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAErE;AAQD,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAE,SAAS,EAAE,oBAAoB,GAAG,iBAAiB,EAAE,CAkB7I;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,oBAAoB,EAAE,GAAG,EAAE,MAAM,GAAG,iBAAiB,EAAE,CAa/H;AAmFD,eAAO,MAAM,gBAAgB,EAAE,UAAU,CAAC,iBAAiB,EAAE,oBAAoB,CAQhF,CAAC;AAEF,eAAO,MAAM,gBAAgB,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,oBAAoB,CAUpF,CAAC"}

package/dist/watch/checks/discovery.js

@@ -0,0 +1,168 @@
+/**
+ * Workflow discovery (DES-walkthrough-proof §4.13; WT-W4): two deterministic, propose-only queries,
+ * registered as trigger-registry entries and fired on a run's terminal frames.
+ *
+ *   added_by_hand  per project, a catalog id a PERSON added to N consecutive launched chains (the
+ *                  steps of `plan.proposed{by:"human"}` the PA's proposal did not have; floor-added
+ *                  never; PA additions — `pa_added`, `member_request` — never) and never overrode
+ *                  → a testing-rule draft that makes the step the default for the observed kinds.
+ *   what_catches   per project per 30 days, a walkthrough FAIL while the same run's `test` verdict
+ *                  was PASS, K times → hold TST-1002 (Test plus a walkthrough review).
+ *
+ * Both count over ONE project-level view the daemon builds and the registry hands over as
+ * `ctx.discovery` (bounded, cached; `src/api/discovery-source.ts`). The checks stay pure over that
+ * view: no bus read, no ledger read, no engine call here.
+ *
+ * A hit is one `proposal` row per (project, query, draft hash) — RUN-LESS and project-scoped
+ * (`project` on the output; the emitter keys it to the project, so a second run of the project
+ * re-deriving the same draft resolves to the row already there, across restarts too). The emitter
+ * hands the row to the existing review queue (`facts.proposal` = the estate `proposal.submit` item,
+ * `kind_type: "policy:testing"`, payload `{rule, severity, evidence: {count, window, run_ids}}`).
+ * Nothing here lands a rule: approval is the operator's, in the queue (§4.13 "Approving"). The draft
+ * is a proposal, not the operator's words, so it never auto-remembers.
+ *
+ * The draft hash is over the RULE text, not the count: a sixth consecutive run re-derives the same
+ * draft and raises nothing new. A changed set of observed kinds is a new draft.
+ *
+ * A run whose records could not be read stays in the view as `unknown` (nothing added, no verdicts):
+ * it breaks a streak it sits inside and never counts as a hit — unknown is never "yes".
+ */
+import { createHash } from 'node:crypto';
+import { z } from 'zod';
+const DAY_MS = 86_400_000;
+const TST_1002 = 'TST-1002';
+const BAG_KEY = 'discovery';
+/** The dedupe key's draft part: 12 hex of sha256 over (query, rule). */
+export function draftHash(query, rule) {
+    return createHash('sha256').update(`${query}\u0000${rule}`).digest('hex').slice(0, 12);
+}
+const kindsOf = (runs) => [...new Set(runs.map((r) => r.kind))].sort();
+const kindsText = (kinds) => kinds.join(' or ');
+/** Oldest launch first, whatever order the view lists them in. */
+const byLaunch = (snap) => [...snap.runs].sort((a, b) => a.launched_at - b.launched_at || a.run_id.localeCompare(b.run_id));
+export function addedByHandProposals(snap, params, threshold) {
+    const runs = byLaunch(snap);
+    const out = [];
+    for (const catalog of params.catalog) {
+        let streak = 0;
+        for (let i = runs.length - 1; i >= 0 && runs[i].human_added.includes(catalog); i -= 1)
+            streak += 1;
+        if (streak === 0 || streak < threshold.consecutive)
+            continue;
+        const hits = runs.slice(runs.length - streak);
+        const kinds = kindsOf(hits);
+        out.push({
+            query: 'added_by_hand',
+            catalog,
+            rule: `A ${kindsText(kinds)} run includes the \`${catalog}\` step.`,
+            sentence: `You've added \`${catalog}\` by hand to ${streak} consecutive ${kindsText(kinds)} runs — make it the default?`,
+            evidence: { count: streak, window: `${streak} consecutive runs`, run_ids: hits.map((r) => r.run_id), kinds },
+        });
+    }
+    return out;
+}
+export function whatCatchesProposals(snap, threshold, now) {
+    const since = now - threshold.window_days * DAY_MS;
+    const hits = byLaunch(snap).filter((r) => r.launched_at >= since && r.walkthrough === 'FAIL' && r.test === 'PASS');
+    if (hits.length < threshold.times)
+        return [];
+    const kinds = kindsOf(hits);
+    return [
+        {
+            query: 'what_catches',
+            rule: `A change to code or config gets Test plus a walkthrough review by a different helper (${TST_1002}, held).`,
+            sentence: `A walkthrough caught what the tests passed ${hits.length} times in the last ${threshold.window_days} days — hold ${TST_1002} (Test plus a walkthrough review) for ${kindsText(kinds)} runs?`,
+            evidence: { count: hits.length, window: `${threshold.window_days}d`, run_ids: hits.map((r) => r.run_id), kinds },
+        },
+    ];
+}
+function bagOf(state) {
+    let bag = state.bag.get(BAG_KEY);
+    if (bag === undefined) {
+        bag = { frames: 0, noSource: false, noProject: false, unreadable: null, judged: false };
+        state.bag.set(BAG_KEY, bag);
+    }
+    return bag;
+}
+/** The review-queue item the emitter files (`facts.proposal`), beside the plain facts studio shows. */
+function proposalFacts(p, project) {
+    return {
+        proposal: {
+            kind_type: 'policy:testing',
+            payload: { rule: p.rule, severity: 'warn', evidence: p.evidence },
+            facets: { project },
+        },
+        query: p.query,
+        ...(p.catalog !== undefined ? { catalog: p.catalog } : {}),
+        count: p.evidence.count,
+        kinds: p.evidence.kinds,
+    };
+}
+async function discover(input, state, ctx, compute) {
+    const bag = bagOf(state);
+    bag.frames += 1;
+    if (ctx.discovery === undefined) {
+        bag.noSource = true;
+        return [];
+    }
+    if (input.runId === null)
+        return [];
+    let snap;
+    try {
+        snap = await ctx.discovery(input.runId);
+    }
+    catch (err) {
+        bag.unreadable = err instanceof Error ? err.message : String(err);
+        return [];
+    }
+    if (snap === null) {
+        bag.noProject = true;
+        return [];
+    }
+    const project = snap.project_id;
+    bag.noProject = false;
+    bag.unreadable = null;
+    bag.judged = true;
+    return compute(snap).map((p) => ({
+        op: 'raise',
+        subject: `${project}:${p.query}:${draftHash(p.query, p.rule)}`,
+        project,
+        sentence: p.sentence,
+        facts: proposalFacts(p, project),
+        re: `${input.type}#${input.runId}`,
+    }));
+}
+function coverageOf(state) {
+    const bag = state.bag.get(BAG_KEY);
+    if (bag === undefined || bag.frames === 0)
+        return { state: 'not_checked', reason: 'the run has not ended yet' };
+    if (bag.noSource)
+        return { state: 'not_checked', reason: 'no discovery source (the daemon gave the registry no project view to count over)' };
+    if (bag.noProject)
+        return { state: 'not_checked', reason: 'the run belongs to no project, so there is nothing to count over' };
+    if (bag.unreadable !== null) {
+        return { state: 'not_checked', reason: `the project's run records could not be read in time (${bag.unreadable}); counted again when the next run ends` };
+    }
+    return bag.judged ? { state: 'checked' } : { state: 'not_checked', reason: 'the run has not ended yet' };
+}
+export const addedByHandCheck = {
+    name: 'deterministic:added_by_hand',
+    lane: 'deterministic',
+    paramsSchema: z.object({ catalog: z.array(z.string().min(1).max(64)).min(1).max(32) }).strict(),
+    thresholdSchema: z.object({ consecutive: z.number().int().min(2).max(100).default(5) }).strict(),
+    evaluate: (input, state, params, threshold, ctx) => discover(input, state, ctx, (snap) => addedByHandProposals(snap, params, threshold)),
+    coverage: coverageOf,
+    describe: (t) => `When a step you added by hand appears in ${t.consecutive} consecutive runs of a project (a testing rule to make it the default)`,
+};
+export const whatCatchesCheck = {
+    name: 'deterministic:what_catches',
+    lane: 'deterministic',
+    paramsSchema: z.object({}).strict(),
+    thresholdSchema: z
+        .object({ times: z.number().int().min(1).max(100).default(3), window_days: z.number().int().min(1).max(365).default(30) })
+        .strict(),
+    evaluate: (input, state, _params, threshold, ctx) => discover(input, state, ctx, (snap) => whatCatchesProposals(snap, threshold, ctx.now())),
+    coverage: coverageOf,
+    describe: (t) => `When a walkthrough fails while the same run's tests passed ${t.times} times in ${t.window_days} days (hold ${TST_1002})`,
+};
+//# sourceMappingURL=discovery.js.map

package/dist/watch/checks/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/watch/checks/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA6BxB,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,QAAQ,GAAG,UAAU,CAAC;AAC5B,MAAM,OAAO,GAAG,WAAW,CAAC;AAE5B,wEAAwE;AACxE,MAAM,UAAU,SAAS,CAAC,KAAqB,EAAE,IAAY;IAC3D,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,KAAK,SAAS,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACzF,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,IAA6B,EAAY,EAAE,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC1G,MAAM,SAAS,GAAG,CAAC,KAAwB,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC3E,kEAAkE;AAClE,MAAM,QAAQ,GAAG,CAAC,IAAuB,EAAkB,EAAE,CAC3D,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,CAAC,WAAW,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;AAEnG,MAAM,UAAU,oBAAoB,CAAC,IAAuB,EAAE,MAAyB,EAAE,SAA+B;IACtH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACrC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,CAAC,CAAC;QACpG,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,SAAS,CAAC,WAAW;YAAE,SAAS;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC5B,GAAG,CAAC,IAAI,CAAC;YACP,KAAK,EAAE,eAAe;YACtB,OAAO;YACP,IAAI,EAAE,KAAK,SAAS,CAAC,KAAK,CAAC,uBAAuB,OAAO,UAAU;YACnE,QAAQ,EAAE,kBAAkB,OAAO,iBAAiB,MAAM,gBAAgB,SAAS,CAAC,KAAK,CAAC,8BAA8B;YACxH,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE;SAC7G,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,IAAuB,EAAE,SAA+B,EAAE,GAAW;IACxG,MAAM,KAAK,GAAG,GAAG,GAAG,SAAS,CAAC,WAAW,GAAG,MAAM,CAAC;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,IAAI,KAAK,IAAI,CAAC,CAAC,WAAW,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACnH,IAAI,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5B,OAAO;QACL;YACE,KAAK,EAAE,cAAc;YACrB,IAAI,EAAE,yFAAyF,QAAQ,UAAU;YACjH,QAAQ,EAAE,8CAA8C,IAAI,CAAC,MAAM,sBAAsB,SAAS,CAAC,WAAW,gBAAgB,QAAQ,yCAAyC,SAAS,CAAC,KAAK,CAAC,QAAQ;YACvM,QAAQ,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC,WAAW,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE;SACjH;KACF,CAAC;AACJ,CAAC;AAUD,SAAS,KAAK,CAAC,KAAoB;IACjC,IAAI,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAoB,CAAC;IACpD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,GAAG,GAAG,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QACxF,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CAAC,CAAoB,EAAE,OAAe;IAC1D,OAAO;QACL,QAAQ,EAAE;YACR,SAAS,EAAE,gBAAgB;YAC3B,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE;YACjE,MAAM,EAAE,EAAE,OAAO,EAAE;SACpB;QACD,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;QACvB,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK;KACxB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,KAAoB,EACpB,KAAoB,EACpB,GAAa,EACb,OAAyD;IAEzD,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACzB,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IAChB,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAChC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;QACpB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACpC,IAAI,IAA8B,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,UAAU,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,UAAU,CAAC;IAChC,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;IACtB,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC;IACtB,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC;IAClB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC/B,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,GAAG,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE;QAC9D,OAAO;QACP,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,KAAK,EAAE,aAAa,CAAC,CAAC,EAAE,OAAO,CAAC;QAChC,EAAE,EAAE,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE;KACnC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,SAAS,UAAU,CAAC,KAAoB;IACtC,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAoB,CAAC;IACtD,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IAChH,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,kFAAkF,EAAE,CAAC;IAC9I,IAAI,GAAG,CAAC,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,kEAAkE,EAAE,CAAC;IAC/H,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;QAC5B,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,wDAAwD,GAAG,CAAC,UAAU,yCAAyC,EAAE,CAAC;IAC3J,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAwD;IACnF,IAAI,EAAE,6BAA6B;IACnC,IAAI,EAAE,eAAe;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAA6C;IAC1I,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,EAAgD;IAC9I,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACxI,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,4CAA4C,CAAC,CAAC,WAAW,wEAAwE;CACnJ,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAA4D;IACvF,IAAI,EAAE,4BAA4B;IAClC,IAAI,EAAE,eAAe;IACrB,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAiD;IAClF,eAAe,EAAE,CAAC;SACf,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC;SACzH,MAAM,EAAgD;IACzD,QAAQ,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5I,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,8DAA8D,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,WAAW,eAAe,QAAQ,GAAG;CAC3I,CAAC"}

package/dist/watch/checks/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/watch/checks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAS9C,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAUzD,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/watch/checks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAW9C,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,EAAE,UAAU,CAezD,CAAC"}

package/dist/watch/checks/index.js

@@ -6,8 +6,10 @@
 import { checkFailedCheck } from './check-failed.js';
 import { claimVsEvidenceCheck } from './claim-vs-evidence.js';
 import { deliverAuditCheck } from './deliver-audit.js';
+import { addedByHandCheck, whatCatchesCheck } from './discovery.js';
 import { lagCheck } from './lag.js';
 import { quietAfterClaimCheck } from './quiet-after-claim.js';
+import { scopeDriftCheck } from './scope-drift.js';
 import { ungatedCheck } from './ungated.js';
 import { warnedRuleCheck } from './warned-rule.js';
 export const SHIPPED_CHECKS = new Map([
@@ -20,5 +22,10 @@ export const SHIPPED_CHECKS = new Map([
     // TR-W6
     [claimVsEvidenceCheck.name, claimVsEvidenceCheck],
     [warnedRuleCheck.name, warnedRuleCheck],
+    // TR-W7
+    [scopeDriftCheck.name, scopeDriftCheck],
+    // WT-W4 (DES-walkthrough-proof §4.13: discovery, propose-only)
+    [addedByHandCheck.name, addedByHandCheck],
+    [whatCatchesCheck.name, whatCatchesCheck],
 ]);
 //# sourceMappingURL=index.js.map

package/dist/watch/checks/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/watch/checks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,CAAC,MAAM,cAAc,GAAoC,IAAI,GAAG,CAAqB;IACzF,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAiC,CAAC;IAClD,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAyC,CAAC;IAClE,SAAS;IACT,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAA0C,CAAC;IACpE,CAAC,YAAY,CAAC,IAAI,EAAE,YAAqC,CAAC;IAC1D,CAAC,oBAAoB,CAAC,IAAI,EAAE,oBAA6C,CAAC;IAC1E,QAAQ;IACR,CAAC,oBAAoB,CAAC,IAAI,EAAE,oBAA6C,CAAC;IAC1E,CAAC,eAAe,CAAC,IAAI,EAAE,eAAwC,CAAC;CACjE,CAAC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/watch/checks/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,CAAC,MAAM,cAAc,GAAoC,IAAI,GAAG,CAAqB;IACzF,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAiC,CAAC;IAClD,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAyC,CAAC;IAClE,SAAS;IACT,CAAC,iBAAiB,CAAC,IAAI,EAAE,iBAA0C,CAAC;IACpE,CAAC,YAAY,CAAC,IAAI,EAAE,YAAqC,CAAC;IAC1D,CAAC,oBAAoB,CAAC,IAAI,EAAE,oBAA6C,CAAC;IAC1E,QAAQ;IACR,CAAC,oBAAoB,CAAC,IAAI,EAAE,oBAA6C,CAAC;IAC1E,CAAC,eAAe,CAAC,IAAI,EAAE,eAAwC,CAAC;IAChE,QAAQ;IACR,CAAC,eAAe,CAAC,IAAI,EAAE,eAAwC,CAAC;IAChE,+DAA+D;IAC/D,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAyC,CAAC;IAClE,CAAC,gBAAgB,CAAC,IAAI,EAAE,gBAAyC,CAAC;CACnE,CAAC,CAAC"}

package/dist/watch/checks/scope-drift.d.ts

@@ -0,0 +1,47 @@
+/**
+ * `deterministic:scope_drift` (DES-trigger-registry §4.3 row 4 "scope-drift", §4.4; TR-W7).
+ *
+ * Set logic over two facts the engine computed, nothing parsed: the creator floor's
+ * `repoChecksEvaluated.changed` (TR-W1b — every path the unit changed, its dispatch baseline tree
+ * against the tree the checks ran on; any carrier, any way of editing) against the run's declared
+ * scope, `plan.accepted.touch` (TR-W1a — the accepted proposal's touch unioned with every earlier
+ * accepted rev's; a BUS row the registry PULLS, the first entry that listens on the bus). A path the
+ * floor names that no touch entry covers is one flag per (attempt, path); the emitter rolls them up
+ * per attempt past the entry's rate (§4.7). Drift flags clear only by dismissal.
+ *
+ * Touch entries are files or directory prefixes ending `/` (§4.4). Nothing else is inferred: an entry
+ * without a trailing slash names ONE file, never a prefix (a declared `src` does not cover `src/x.ts`;
+ * a declared `src/` does). Both sides are normalised (`./`, doubled slashes) before the comparison so
+ * a spelling difference is never drift.
+ *
+ * Order is not assumed. A plan is accepted minutes before its creator floors run, but the plan row is
+ * polled off the bus while the floor arrives on the fan-in, so a floor that lands first is KEPT
+ * (bounded) and judged when the plan row arrives — anchored to the floor's own time and replay
+ * provenance (TR-W6's kept-frame rule). The newest accepted rev is the scope (core already unions the
+ * revs); a lower rev replayed late never narrows it.
+ *
+ * Coverage (§4.7, G7):
+ *   - "no declared scope" when `touch_source` is `none`, or absent — an old row reads as none, and an
+ *     engine before TR-W1a cannot be told apart from a plan that declared nothing, so the reason
+ *     names both. A DECLARED empty set (a source with no paths) is not none: it covers nothing, so
+ *     every change is outside it and the run is checked;
+ *   - not checked when the TOUCH set itself was cut at 64: what lies outside the listed paths cannot
+ *     be known, so nothing is flagged rather than flagging what may be in scope;
+ *   - a truncated CHANGE list is still judged on the paths it names, and the fact says it was cut
+ *     (§4.4: "a truncated list still names its first 200 paths and says so").
+ */
+import type { WatchCheck } from '../types.js';
+/** The bus row the check joins to (TR-W1a). The entry's `join` names it; the loader checks the grammar. */
+export declare const PLAN_ACCEPTED_TYPE = "wicked.team.plan.accepted";
+/** `plan.accepted.touch` is cut at this many paths by the engine (`ACCEPTED_TOUCH_CAP`). */
+export declare const TOUCH_CAP = 64;
+export interface ScopeDriftThreshold {
+    /** An attempt raises only when at least this many of its changed paths lie outside the scope. */
+    min_paths: number;
+}
+/** Repo-relative, forward slashes: no leading `./` or `/`, no doubled slashes. */
+export declare function normalisePath(p: string): string;
+/** True when some touch entry covers `path`: an equal file, or a directory prefix ending `/` (§4.4). */
+export declare function inScope(path: string, touch: readonly string[]): boolean;
+export declare const scopeDriftCheck: WatchCheck<Record<string, never>, ScopeDriftThreshold>;
+//# sourceMappingURL=scope-drift.d.ts.map

package/dist/watch/checks/scope-drift.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"scope-drift.d.ts","sourceRoot":"","sources":["../../../src/watch/checks/scope-drift.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,KAAK,EAA8B,UAAU,EAAE,MAAM,aAAa,CAAC;AAE1E,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,8BAA8B,CAAC;AAC9D,4FAA4F;AAC5F,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B,MAAM,WAAW,mBAAmB;IAClC,iGAAiG;IACjG,SAAS,EAAE,MAAM,CAAC;CACnB;AA8CD,kFAAkF;AAClF,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED,wGAAwG;AACxG,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAYvE;AA2DD,eAAO,MAAM,eAAe,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,mBAAmB,CA2ElF,CAAC"}