testguard-cli 0.1.2__tar.gz → 0.1.3__tar.gz

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/.github/scripts/install-smoke.mjs

@@ -31,7 +31,7 @@ try {
   const version = run(bin, ['--version'], consumer).trim();
   const claims = run(bin, ['claims', '.'], consumer);
   if (!/^\d+\.\d+\.\d+/.test(version)) throw new Error(`unexpected --version output: ${version}`);
-  if (!claims.includes('8 claims')) throw new Error(`claims did not list the fixture:\n${claims}`);
+  if (!/^\d+ claims in /.test(claims)) throw new Error(`claims did not list the fixture:\n${claims}`);
   const deps = Object.keys(JSON.parse(run(npm, ['ls', '--omit=dev', '--json', '--depth=0'], consumer)).dependencies ?? {});
   console.log(`install smoke OK — testguard ${version} runs from the installed tarball; consumer deps: ${deps.join(', ')}`);
 } finally {

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/CHANGELOG.md

@@ -7,6 +7,50 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.3] - 2026-09-17
+
+From a second field report on a real codebase (456 tests, 27 claims, 35
+faults; 13 survived on the first run, two critical claims with zero coverage).
+
+### Fixed
+
+- **Worktree mode probed HEAD while reading the claims file from the working
+  tree**, so uncommitted defender changes were silently ignored — the same
+  survivors came back with no hint why. `probe` now refuses (exit 2) when any
+  resolved defender or fault target has uncommitted changes, naming the files
+  and the commit it would have probed. Every summary names the commit probed.
+- `killed-by-undeclared-tests` never said which tests killed the fault; the
+  author could not fix `defendedBy` without grepping the suite. Evidence now
+  carries `detail.undeclaredKillers` and the CLI names the files.
+- `anchor-ambiguous` did not say how many hits; `detail.anchor { hits,
+  expected }` is recorded and printed.
+- A replacement with an unbalanced paren was `suite-failed-to-load`, not
+  `replacement-does-not-compile`: esbuild/vitest wording is now matched.
+- The claims schema promised defender discovery for an absent `defendedBy`;
+  the tool answered `nocover`. Discovery is implemented: the test files that
+  import the fault's target (relative or alias), recorded as
+  `defenders.discovered`. `nocover` now means exactly "no test file imports
+  this source".
+- `baseline.json` records `dirty`, as evidence already did.
+
+### Added
+
+- `--include-dirty`: snapshot the working tree (tracked edits and untracked,
+  non-ignored files) into a throwaway commit and probe that. HEAD, index and
+  the user's tree are never touched; `run.repo.snapshot` records the commit.
+- A one-line progress indicator on stderr (TTY only) so a minute of silence
+  is not mistaken for a hang.
+- Fixture: a claim with no `defendedBy` whose defender is discovered.
+
+### Changed
+
+- **Default output shows only unproven faults plus a killed count.**
+  `--verbose` restores the full stream.
+- The `survived` hint reminds the author to check that the fault is
+  observable at all before writing a test for it.
+- README: `$schema` path for consumers, `min-release-age` note, the
+  worktree-vs-working-tree rule, `brief` writes `brief.json` by default.
+
 ## [0.1.2] - 2026-09-17
 
 From a field report on a real codebase (63 test files, 458 tests, 39 faults).

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: testguard-cli
-Version: 0.1.2
+Version: 0.1.3
 Summary: Proves a test suite actually defends the claims a project makes: injects the faults those claims forbid and reports every one the tests miss. Python wrapper for the Node.js CLI (requires Node.js 20+).
 Project-URL: Homepage, https://github.com/raccioly/testguard
 Project-URL: Documentation, https://github.com/raccioly/testguard#readme
@@ -76,9 +76,13 @@ tests were written against the survivors, 39/39 were killed.
 | npm | `npm i -D testguard-cli` then `npx testguard probe` |
 | pip | `pip install testguard-cli` then `testguard probe` (needs Node ≥ 20) |
 | Homebrew | `brew tap raccioly/tap && brew install testguard` |
-| GitHub Action | `uses: raccioly/testguard@v0.1.2` — see [`action.yml`](./action.yml) |
+| GitHub Action | `uses: raccioly/testguard@v0.1.3` — see [`action.yml`](./action.yml) |
 | pre-commit | `repo: https://github.com/raccioly/testguard`, hooks `testguard-claims`, `testguard-probe` |
 
+Projects that set `min-release-age` in `.npmrc` cannot see a version published
+less than that many days ago (`ENOVERSIONS`); install that one with
+`npm i -D testguard-cli --min-release-age=0`.
+
 ## How it works
 
 ```bash
@@ -88,9 +92,11 @@ npx testguard-cli baseline    # freeze today's unproven findings; from now on on
 npx testguard-cli brief       # tell the agent where the suite is blind, before it writes
 ```
 
-1. **Claims** live in `testguard.claims.json`: a statement, where it comes
-   from, which tests supposedly defend it, and one or more *faults* — each a
-   deterministic source change that would make the statement false. Every
+1. **Claims** live in `testguard.claims.json` (editors validate it against
+   `"$schema": "./node_modules/testguard-cli/spec/schemas/claims.schema.json"`):
+   a statement, where it comes from, which tests supposedly defend it, and
+   one or more *faults* — each a deterministic source change that would make
+   the statement false. Every
    claim and every fault records who produced it. `testguard claims`
    validates the file and reports drift against `@claim <ID>` annotations in
    source. Test files are deliberately not scanned — a claim asserted by a test is the authorship trap the tool exists for — and annotation ids must contain a hyphen so prose is never mistaken for one.
@@ -115,10 +121,23 @@ npx testguard-cli brief       # tell the agent where the suite is blind, before
    written to `.testguard/evidence.json` — validated against the spec before
    it is written.
 
+   Worktree mode probes a **commit**. If a defender or target file has
+   uncommitted changes, `probe` refuses and says so — otherwise your new
+   tests would be silently absent and the same survivors would come back
+   with no hint why. `--include-dirty` snapshots the working tree (tracked
+   edits and new files) into a throwaway commit and probes that; your tree,
+   HEAD and index are never touched. Every summary names the commit probed.
+
+   A claim with no `defendedBy` has its defenders **discovered**: the test
+   files that import the fault's target, by relative path or resolved alias.
+   `NOCOVER` then means exactly "no test file imports this source".
+
    Practical loop: first pass `--no-escalate` (escalation re-runs the whole
-   suite N times per survivor); iterate on one claim with
-   `--claim <ID> --in-place` — only the files faults are applied to must be
-   committed, test files may be dirty; final pass with defaults. A custom
+   suite N times per survivor); iterate on one claim with `--claim <ID>` and
+   either `--include-dirty` or `--in-place` (only fault target files must be
+   clean there; test files may be dirty); final pass with defaults. By default
+   the stream shows only unproven faults plus a killed count — `--verbose`
+   shows every fault. A custom
    runner (`pnpm --filter`, a specific config) goes in
    `--runner-cmd "<cmd> {files} … {out}"`; if the scratch worktree cannot
    see your `node_modules`, pass `--node-modules <dir>`.
@@ -127,7 +146,8 @@ npx testguard-cli brief       # tell the agent where the suite is blind, before
    source and defenders are unchanged reuse their prior verdict, so a probe
    in CI costs only what changed.
 4. **Brief** turns evidence plus baseline into a ranked, capped
-   `## TEST BLINDSPOT CONTEXT` block. Wire it into an agent's session start
+   `## TEST BLINDSPOT CONTEXT` block, printed and also written to
+   `.testguard/brief.json` (`--text` prints only). Wire it into an agent's session start
    — for Claude Code, in `.claude/settings.json`:
 
    ```json

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/README.md

@@ -52,9 +52,13 @@ tests were written against the survivors, 39/39 were killed.
 | npm | `npm i -D testguard-cli` then `npx testguard probe` |
 | pip | `pip install testguard-cli` then `testguard probe` (needs Node ≥ 20) |
 | Homebrew | `brew tap raccioly/tap && brew install testguard` |
-| GitHub Action | `uses: raccioly/testguard@v0.1.2` — see [`action.yml`](./action.yml) |
+| GitHub Action | `uses: raccioly/testguard@v0.1.3` — see [`action.yml`](./action.yml) |
 | pre-commit | `repo: https://github.com/raccioly/testguard`, hooks `testguard-claims`, `testguard-probe` |
 
+Projects that set `min-release-age` in `.npmrc` cannot see a version published
+less than that many days ago (`ENOVERSIONS`); install that one with
+`npm i -D testguard-cli --min-release-age=0`.
+
 ## How it works
 
 ```bash
@@ -64,9 +68,11 @@ npx testguard-cli baseline    # freeze today's unproven findings; from now on on
 npx testguard-cli brief       # tell the agent where the suite is blind, before it writes
 ```
 
-1. **Claims** live in `testguard.claims.json`: a statement, where it comes
-   from, which tests supposedly defend it, and one or more *faults* — each a
-   deterministic source change that would make the statement false. Every
+1. **Claims** live in `testguard.claims.json` (editors validate it against
+   `"$schema": "./node_modules/testguard-cli/spec/schemas/claims.schema.json"`):
+   a statement, where it comes from, which tests supposedly defend it, and
+   one or more *faults* — each a deterministic source change that would make
+   the statement false. Every
    claim and every fault records who produced it. `testguard claims`
    validates the file and reports drift against `@claim <ID>` annotations in
    source. Test files are deliberately not scanned — a claim asserted by a test is the authorship trap the tool exists for — and annotation ids must contain a hyphen so prose is never mistaken for one.
@@ -91,10 +97,23 @@ npx testguard-cli brief       # tell the agent where the suite is blind, before
    written to `.testguard/evidence.json` — validated against the spec before
    it is written.
 
+   Worktree mode probes a **commit**. If a defender or target file has
+   uncommitted changes, `probe` refuses and says so — otherwise your new
+   tests would be silently absent and the same survivors would come back
+   with no hint why. `--include-dirty` snapshots the working tree (tracked
+   edits and new files) into a throwaway commit and probes that; your tree,
+   HEAD and index are never touched. Every summary names the commit probed.
+
+   A claim with no `defendedBy` has its defenders **discovered**: the test
+   files that import the fault's target, by relative path or resolved alias.
+   `NOCOVER` then means exactly "no test file imports this source".
+
    Practical loop: first pass `--no-escalate` (escalation re-runs the whole
-   suite N times per survivor); iterate on one claim with
-   `--claim <ID> --in-place` — only the files faults are applied to must be
-   committed, test files may be dirty; final pass with defaults. A custom
+   suite N times per survivor); iterate on one claim with `--claim <ID>` and
+   either `--include-dirty` or `--in-place` (only fault target files must be
+   clean there; test files may be dirty); final pass with defaults. By default
+   the stream shows only unproven faults plus a killed count — `--verbose`
+   shows every fault. A custom
    runner (`pnpm --filter`, a specific config) goes in
    `--runner-cmd "<cmd> {files} … {out}"`; if the scratch worktree cannot
    see your `node_modules`, pass `--node-modules <dir>`.
@@ -103,7 +122,8 @@ npx testguard-cli brief       # tell the agent where the suite is blind, before
    source and defenders are unchanged reuse their prior verdict, so a probe
    in CI costs only what changed.
 4. **Brief** turns evidence plus baseline into a ranked, capped
-   `## TEST BLINDSPOT CONTEXT` block. Wire it into an agent's session start
+   `## TEST BLINDSPOT CONTEXT` block, printed and also written to
+   `.testguard/brief.json` (`--text` prints only). Wire it into an agent's session start
    — for Claude Code, in `.claude/settings.json`:
 
    ```json

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/action.yml

@@ -38,7 +38,7 @@ inputs:
   version:
     description: 'testguard-cli version to run'
     required: false
-    default: '0.1.2'
+    default: '0.1.3'
   node-version:
     description: 'Node.js version (20+)'
     required: false

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/fixtures/known-answer/README.md

@@ -24,6 +24,7 @@ evidence comes from running against a real codebase with real history.
 | REDACT-006 | `mask()` replaces with equal-length asterisks | F1 syntax error | fault-invalid |
 | EXPORT-001 | Exported rows never include `content` | F1 keeps content | nocover |
 | FLAKY-001 | (defender is flaky) | F1 anything | flaky-defender |
+| DISCOVER-001 | Every match is replaced (no `defendedBy`) | F1 loop body removed | killed — defenders **discovered** by import |
 
 ## The exhibit — REDACT-001/F1
 

testguard_cli-0.1.3/fixtures/known-answer/expected.json

@@ -0,0 +1,53 @@
+{
+  "confirmRuns": 3,
+  "expected": {
+    "REDACT-001/F1": {
+      "verdict": "survived",
+      "why": "The audit-row test asserts with objectContaining and omits `content`; a row carrying the raw input passes."
+    },
+    "REDACT-001/F2": {
+      "verdict": "killed",
+      "why": "The masked-output test asserts the secret is absent."
+    },
+    "REDACT-002/F1": {
+      "verdict": "killed",
+      "why": "The invalid-rule test asserts compileRules does not throw."
+    },
+    "REDACT-003/F1": {
+      "verdict": "survived",
+      "why": "No test exercises a missing scope; the fail-closed guard is undefended."
+    },
+    "REDACT-004/F1": {
+      "verdict": "timeout",
+      "why": "Tests awaiting redact() hit the 1s test timeout; a timeout is not an assertion failure and is not a kill."
+    },
+    "REDACT-005/F1": {
+      "verdict": "unverifiable",
+      "reason": "anchor-missing",
+      "why": "The find string is not present in the source."
+    },
+    "REDACT-005/F2": {
+      "verdict": "unverifiable",
+      "reason": "anchor-ambiguous",
+      "why": "`return null;` occurs twice; expectHits is 1."
+    },
+    "REDACT-006/F1": {
+      "verdict": "fault-invalid",
+      "reason": "replacement-does-not-compile",
+      "why": "The replacement introduces a syntax error; the suite cannot load."
+    },
+    "EXPORT-001/F1": {
+      "verdict": "nocover",
+      "why": "test/export.test.mjs does not exist; no defender resolves."
+    },
+    "FLAKY-001/F1": {
+      "verdict": "flaky-defender",
+      "reason": "defenders-not-green",
+      "why": "test/flaky.test.mjs fails every other run; the baseline is not green N/N."
+    },
+    "DISCOVER-001/F1": {
+      "verdict": "killed",
+      "why": "No defendedBy; test/redact.test.mjs is discovered because it imports src/redact.mjs, and its masked-output test fails."
+    }
+  }
+}

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/fixtures/known-answer/testguard.claims.json

@@ -4,10 +4,19 @@
     {
       "id": "REDACT-001",
       "statement": "The audit row written for a masked message never contains the original input.",
-      "source": { "kind": "spec", "ref": "README.md#claims" },
+      "source": {
+        "kind": "spec",
+        "ref": "README.md#claims"
+      },
       "severity": "critical",
-      "producedBy": { "producer": "human", "by": "fixture author", "at": "2026-09-17T00:00:00Z" },
-      "defendedBy": ["test/redact.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author",
+        "at": "2026-09-17T00:00:00Z"
+      },
+      "defendedBy": [
+        "test/redact.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -16,7 +25,10 @@
           "file": "src/redact.mjs",
           "find": "content: redacted,",
           "replace": "content: input,",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         },
         {
           "id": "F2",
@@ -25,17 +37,28 @@
           "file": "src/redact.mjs",
           "find": "const redacted = mask(input, rules);",
           "replace": "const redacted = input;",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     },
     {
       "id": "REDACT-002",
       "statement": "A rule whose pattern is invalid is skipped; it never aborts the scan.",
-      "source": { "kind": "spec", "ref": "README.md#claims" },
+      "source": {
+        "kind": "spec",
+        "ref": "README.md#claims"
+      },
       "severity": "high",
-      "producedBy": { "producer": "human", "by": "fixture author" },
-      "defendedBy": ["test/redact.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "defendedBy": [
+        "test/redact.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -44,17 +67,28 @@
           "file": "src/redact.mjs",
           "find": "  } catch {\n    return null;\n  }",
           "replace": "  } catch (e) {\n    throw e;\n  }",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     },
     {
       "id": "REDACT-003",
       "statement": "A missing scope is an error; the engine never performs an unscoped scan.",
-      "source": { "kind": "annotation", "ref": "src/redact.mjs @claim REDACT-003" },
+      "source": {
+        "kind": "annotation",
+        "ref": "src/redact.mjs @claim REDACT-003"
+      },
       "severity": "high",
-      "producedBy": { "producer": "human", "by": "fixture author" },
-      "defendedBy": ["test/redact.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "defendedBy": [
+        "test/redact.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -63,17 +97,28 @@
           "file": "src/redact.mjs",
           "find": "if (!ctx || !ctx.scope) {",
           "replace": "if (false) {",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     },
     {
       "id": "REDACT-004",
       "statement": "redact() settles for every input.",
-      "source": { "kind": "spec", "ref": "README.md#claims" },
+      "source": {
+        "kind": "spec",
+        "ref": "README.md#claims"
+      },
       "severity": "medium",
-      "producedBy": { "producer": "human", "by": "fixture author" },
-      "defendedBy": ["test/redact.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "defendedBy": [
+        "test/redact.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -82,17 +127,28 @@
           "file": "src/redact.mjs",
           "find": "  return redacted;\n}",
           "replace": "  return new Promise(() => {});\n}",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     },
     {
       "id": "REDACT-005",
       "statement": "findRule() returns null for an unknown id.",
-      "source": { "kind": "spec", "ref": "README.md#claims" },
+      "source": {
+        "kind": "spec",
+        "ref": "README.md#claims"
+      },
       "severity": "low",
-      "producedBy": { "producer": "human", "by": "fixture author" },
-      "defendedBy": ["test/redact.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "defendedBy": [
+        "test/redact.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -101,7 +157,10 @@
           "file": "src/redact.mjs",
           "find": "return undefined; // unknown rule",
           "replace": "return rules[0];",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         },
         {
           "id": "F2",
@@ -111,17 +170,28 @@
           "find": "return null;",
           "replace": "return rules[0];",
           "expectHits": 1,
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     },
     {
       "id": "REDACT-006",
       "statement": "mask() replaces each match with asterisks of equal length.",
-      "source": { "kind": "spec", "ref": "README.md#claims" },
+      "source": {
+        "kind": "spec",
+        "ref": "README.md#claims"
+      },
       "severity": "low",
-      "producedBy": { "producer": "human", "by": "fixture author" },
-      "defendedBy": ["test/redact.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "defendedBy": [
+        "test/redact.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -130,17 +200,28 @@
           "file": "src/redact.mjs",
           "find": "(m) => '*'.repeat(m.length)",
           "replace": "(m) => '*'.repeat(m.length",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     },
     {
       "id": "EXPORT-001",
       "statement": "Exported rows never include the content field.",
-      "source": { "kind": "spec", "ref": "README.md#claims" },
+      "source": {
+        "kind": "spec",
+        "ref": "README.md#claims"
+      },
       "severity": "medium",
-      "producedBy": { "producer": "human", "by": "fixture author" },
-      "defendedBy": ["test/export.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "defendedBy": [
+        "test/export.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -149,17 +230,27 @@
           "file": "src/export.mjs",
           "find": "return rows.map(({ content, ...rest }) => rest);",
           "replace": "return rows.map((row) => ({ ...row }));",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     },
     {
       "id": "FLAKY-001",
       "statement": "A claim whose defender is not reliably green cannot be verified.",
-      "source": { "kind": "manual" },
+      "source": {
+        "kind": "manual"
+      },
       "severity": "low",
-      "producedBy": { "producer": "human", "by": "fixture author" },
-      "defendedBy": ["test/flaky.test.mjs"],
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "defendedBy": [
+        "test/flaky.test.mjs"
+      ],
       "faults": [
         {
           "id": "F1",
@@ -168,7 +259,37 @@
           "file": "src/redact.mjs",
           "find": "action: 'MASK',",
           "replace": "action: 'mask',",
-          "producedBy": { "producer": "human", "by": "fixture author" }
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
+        }
+      ]
+    },
+    {
+      "id": "DISCOVER-001",
+      "statement": "Every rule match is replaced in the returned text.",
+      "source": {
+        "kind": "spec",
+        "ref": "README.md#claims"
+      },
+      "severity": "high",
+      "producedBy": {
+        "producer": "human",
+        "by": "fixture author"
+      },
+      "faults": [
+        {
+          "id": "F1",
+          "description": "The replacement loop body is removed; nothing is masked. No defendedBy is declared: defenders must be discovered as the tests that import src/redact.mjs.",
+          "faultClass": "statement-deleted",
+          "file": "src/redact.mjs",
+          "find": "out = out.replace(rule.re, (m) => '*'.repeat(m.length));",
+          "replace": "/* fault: replacement removed */",
+          "producedBy": {
+            "producer": "human",
+            "by": "fixture author"
+          }
         }
       ]
     }

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "testguard-cli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "testguard-cli",
-      "version": "0.1.2",
+      "version": "0.1.3",
       "license": "MIT",
       "dependencies": {
         "ajv": "8.20.0"

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "testguard-cli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Proves a test suite defends the claims a project makes: injects the faults those claims forbid and reports every one the tests fail to detect.",
   "type": "module",
   "license": "MIT",

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/packaging/homebrew/testguard.rb

@@ -13,7 +13,7 @@
 class Testguard < Formula
   desc "Proves a test suite defends the claims a project makes"
   homepage "https://github.com/raccioly/testguard"
-  url "https://registry.npmjs.org/testguard-cli/-/testguard-cli-0.1.2.tgz"
+  url "https://registry.npmjs.org/testguard-cli/-/testguard-cli-0.1.3.tgz"
   sha256 "385d69f9d3c153b934d9c1cb6a2c754eb9b221b0a8c0ba8b805858384d2d4678"
   license "MIT"
 

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "testguard-cli"
-version = "0.1.2"
+version = "0.1.3"
 description = "Proves a test suite actually defends the claims a project makes: injects the faults those claims forbid and reports every one the tests miss. Python wrapper for the Node.js CLI (requires Node.js 20+)."
 readme = "README.md"
 license = { text = "MIT" }

{testguard_cli-0.1.2 → testguard_cli-0.1.3}/spec/GATE-SEMANTICS.md

@@ -35,10 +35,16 @@ Rules that follow from the table:
    reporting `survived` would be wrong the other way. It is `flaky-defender`.
 5. **Escalation never upgrades a verdict.** A fault that survives its declared
    defenders may be re-run against the whole suite. If the wider suite kills
-   it, the verdict stays `survived` with reason `killed-by-undeclared-tests`:
-   the claim's stated evidence chain is broken even though the suite is not
-   blind. It gates, and ranks below a true survivor.
-6. **Never a single global score.** Output is per claim, ranked. Blindness is
+   it, the verdict stays `survived` with reason `killed-by-undeclared-tests`
+   and `detail.undeclaredKillers` names the tests, so the author can fix
+   `defendedBy`. The claim's stated evidence chain is broken even though the
+   suite is not blind. It gates, and ranks below a true survivor.
+6. **A verdict names the commit it is about.** Evidence records `repo.head`;
+   when the working tree was probed instead, `repo.snapshot` holds the
+   throwaway commit that captured it. A tool must refuse to probe a commit
+   while defenders or targets have uncommitted changes, unless told to
+   snapshot the working tree — otherwise the answer looks right and is not.
+7. **Never a single global score.** Output is per claim, ranked. Blindness is
    concentrated, and one number hides where.
 
 ## Baseline and delta