testguard-cli 0.10.0__tar.gz → 0.10.1__tar.gz

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/CHANGELOG.md

@@ -7,6 +7,25 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.10.1] - 2026-09-19
+
+Automated weekly release — everything merged since `v0.10.0`.
+
+### Changed
+
+- fix(probe): preserve repeated claim selections (#139)
+- chore(homebrew): sha256 for v0.10.0 (#138)
+
+
+### Fixed
+
+- Repeated `probe --claim` flags no longer collapse silently to the last value.
+  Repeated and comma-separated ids are flattened in first-seen order,
+  duplicates are collapsed, empty selections fail, and both human and JSON
+  partial-run output show requested versus probed ids and counts. Probe JSON is
+  now validated against the published status schema before it is emitted. The
+  singular `scaffold` and `admit` forms reject ambiguous repeated values.
+
 ## [0.10.0] - 2026-09-19
 
 Automated weekly release — everything merged since `v0.9.4`.

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: testguard-cli
-Version: 0.10.0
+Version: 0.10.1
 Summary: Breaks your code on purpose and reports every promise your tests did not notice breaking. Mutation testing bound to the claims a project makes — vitest, jest, Playwright, pytest and unittest. Ships the Node.js CLI (requires Node.js 20+).
 Project-URL: Homepage, https://github.com/raccioly/testguard
 Project-URL: Documentation, https://github.com/raccioly/testguard#readme
@@ -151,9 +151,9 @@ raises coverage. TestGuard admits it because it fails when the claim is false.
 | npm | `npm i -D testguard-cli` then `npx testguard probe` |
 | pip | `pip install testguard-cli` then `testguard probe` (needs Node ≥ 20) |
 | Homebrew | `brew tap raccioly/tap && brew install testguard` |
-| GitHub Action | `uses: raccioly/testguard@v0.10.0` — see [`action.yml`](./action.yml) |
+| GitHub Action | `uses: raccioly/testguard@v0.10.1` — see [`action.yml`](./action.yml) |
 | pre-commit | `repo: https://github.com/raccioly/testguard`, hooks `testguard-claims`, `testguard-probe` |
-| GitLab CI | `include: - remote: https://raw.githubusercontent.com/raccioly/testguard/v0.10.0/packaging/gitlab/testguard.gitlab-ci.yml` with `inputs:` — see [`packaging/gitlab/`](./packaging/gitlab/testguard.gitlab-ci.yml) |
+| GitLab CI | `include: - remote: https://raw.githubusercontent.com/raccioly/testguard/v0.10.1/packaging/gitlab/testguard.gitlab-ci.yml` with `inputs:` — see [`packaging/gitlab/`](./packaging/gitlab/testguard.gitlab-ci.yml) |
 
 Projects that set `min-release-age` in `.npmrc` cannot see a version published
 less than that many days ago (`ENOVERSIONS`); install that one with
@@ -303,8 +303,12 @@ npx testguard-cli admit test/x.test.ts --claim X   # is this test green on HEAD
    because it fails when the claim is false.
 
    Practical loop: first pass `--no-escalate` (escalation re-runs the whole
-   suite N times per survivor); iterate on one claim with `--claim <ID>` and
-   either `--include-dirty` or `--in-place` (only fault target files must be
+   suite N times per survivor); iterate on one claim with `--claim <ID>`, or
+   select a batch with commas or repeated flags (`--claim A,B --claim C`).
+   Every occurrence is retained in first-seen order, duplicates are collapsed,
+   and partial human/JSON output names both the requested and probed counts, so
+   a green subset cannot masquerade as the selection the operator asked for.
+   Use either `--include-dirty` or `--in-place` (only fault target files must be
    clean there; test files may be dirty), optionally `--confirm 1` for a fast
    **provisional** signal — verdicts print with a `?`, evidence goes to
    `evidence-provisional.json`, and `baseline` refuses it; final pass with
@@ -493,12 +497,12 @@ detected base that does not resolve is a warning for `status` and `brief`
 # GitHub Actions
 - uses: actions/checkout@v4
   with: { fetch-depth: 0 }
-- uses: raccioly/testguard@v0.10.0
+- uses: raccioly/testguard@v0.10.1
   with: { command: gate }
 
 # GitLab CI — the component-shaped template: gate + probe, brief as an artifact and, opted in, as a merge-request note
 include:
-  - remote: 'https://raw.githubusercontent.com/raccioly/testguard/v0.10.0/packaging/gitlab/testguard.gitlab-ci.yml'
+  - remote: 'https://raw.githubusercontent.com/raccioly/testguard/v0.10.1/packaging/gitlab/testguard.gitlab-ci.yml'
     inputs: { dir: backend, post_note: true }   # post_note needs TESTGUARD_GITLAB_TOKEN (api scope); one note, updated in place
 ```
 

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/README.md

@@ -127,9 +127,9 @@ raises coverage. TestGuard admits it because it fails when the claim is false.
 | npm | `npm i -D testguard-cli` then `npx testguard probe` |
 | pip | `pip install testguard-cli` then `testguard probe` (needs Node ≥ 20) |
 | Homebrew | `brew tap raccioly/tap && brew install testguard` |
-| GitHub Action | `uses: raccioly/testguard@v0.10.0` — see [`action.yml`](./action.yml) |
+| GitHub Action | `uses: raccioly/testguard@v0.10.1` — see [`action.yml`](./action.yml) |
 | pre-commit | `repo: https://github.com/raccioly/testguard`, hooks `testguard-claims`, `testguard-probe` |
-| GitLab CI | `include: - remote: https://raw.githubusercontent.com/raccioly/testguard/v0.10.0/packaging/gitlab/testguard.gitlab-ci.yml` with `inputs:` — see [`packaging/gitlab/`](./packaging/gitlab/testguard.gitlab-ci.yml) |
+| GitLab CI | `include: - remote: https://raw.githubusercontent.com/raccioly/testguard/v0.10.1/packaging/gitlab/testguard.gitlab-ci.yml` with `inputs:` — see [`packaging/gitlab/`](./packaging/gitlab/testguard.gitlab-ci.yml) |
 
 Projects that set `min-release-age` in `.npmrc` cannot see a version published
 less than that many days ago (`ENOVERSIONS`); install that one with
@@ -279,8 +279,12 @@ npx testguard-cli admit test/x.test.ts --claim X   # is this test green on HEAD
    because it fails when the claim is false.
 
    Practical loop: first pass `--no-escalate` (escalation re-runs the whole
-   suite N times per survivor); iterate on one claim with `--claim <ID>` and
-   either `--include-dirty` or `--in-place` (only fault target files must be
+   suite N times per survivor); iterate on one claim with `--claim <ID>`, or
+   select a batch with commas or repeated flags (`--claim A,B --claim C`).
+   Every occurrence is retained in first-seen order, duplicates are collapsed,
+   and partial human/JSON output names both the requested and probed counts, so
+   a green subset cannot masquerade as the selection the operator asked for.
+   Use either `--include-dirty` or `--in-place` (only fault target files must be
    clean there; test files may be dirty), optionally `--confirm 1` for a fast
    **provisional** signal — verdicts print with a `?`, evidence goes to
    `evidence-provisional.json`, and `baseline` refuses it; final pass with
@@ -469,12 +473,12 @@ detected base that does not resolve is a warning for `status` and `brief`
 # GitHub Actions
 - uses: actions/checkout@v4
   with: { fetch-depth: 0 }
-- uses: raccioly/testguard@v0.10.0
+- uses: raccioly/testguard@v0.10.1
   with: { command: gate }
 
 # GitLab CI — the component-shaped template: gate + probe, brief as an artifact and, opted in, as a merge-request note
 include:
-  - remote: 'https://raw.githubusercontent.com/raccioly/testguard/v0.10.0/packaging/gitlab/testguard.gitlab-ci.yml'
+  - remote: 'https://raw.githubusercontent.com/raccioly/testguard/v0.10.1/packaging/gitlab/testguard.gitlab-ci.yml'
     inputs: { dir: backend, post_note: true }   # post_note needs TESTGUARD_GITLAB_TOKEN (api scope); one note, updated in place
 ```
 

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/action.yml

@@ -46,7 +46,7 @@ inputs:
   version:
     description: 'testguard-cli version to run'
     required: false
-    default: '0.10.0'
+    default: '0.10.1'
   node-version:
     description: 'Node.js version (20+)'
     required: false

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/docs/testguard-explained.html

@@ -144,7 +144,7 @@
 <div class="page">
   <div class="masthead">
     <div class="wordmark">Test<span class="mark">Guard</span></div>
-    <div class="meta">Technical Brief · v0.10.0 · MIT</div>
+    <div class="meta">Technical Brief · v0.10.1 · MIT</div>
   </div>
 
   <h1>Your tests pass. That is not the same as your tests working.</h1>

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/docs-canonical/REQUIREMENTS.md

@@ -1,6 +1,6 @@
 # Requirements
 
-<!-- docguard:version 1.0.0 -->
+<!-- docguard:version 1.1.0 -->
 <!-- docguard:status approved -->
 <!-- docguard:last-reviewed 2026-09-19 -->
 <!-- docguard:owner @raccioly -->
@@ -27,6 +27,7 @@
 | FR-13 | Replay historical fix commits to measure whether the suite would have caught them, and calibrate by fault class | P3 |
 | FR-14 | Serve the read-only operating loop over MCP so the loop survives a change of agent harness | P3 |
 | FR-15 | Validate every exact fault anchor and the syntax of supported in-memory replacements before starting a test runner (`claims --check-anchors`), without guessing repairs | P1 |
+| FR-16 | Preserve every repeated or comma-separated `probe --claim` selection in first-seen order, collapse duplicates, and report requested versus probed scope without allowing an empty selection to pass | P1 |
 
 ## Non-Functional Requirements
 
@@ -101,6 +102,7 @@ fails the pull request naming the unclaimed file, and `status` reports
 | FR-13 | `src/replay/` | `test/replay.test.mjs`, `test/calibration.test.mjs`, `TG-REPLAY-FLAKY-IS-NEVER-CAUGHT`, `TG-CALIBRATION-COUNTS-NOCOVER-AS-A-MISS`, `TG-CALIBRATION-COUNTS-ONLY-BUGS` |
 | FR-14 | `src/mcp/` | `test/mcp.test.mjs` |
 | FR-15 | `src/claims/anchors.mjs`, `src/commands/claims.mjs`, `src/status/status.mjs` | `test/claims-anchors.test.mjs`, `test/status.test.mjs`, `TG-ANCHOR-PREFLIGHT-FAILS-FAST` |
+| FR-16 | `src/cli.mjs`, `src/commands/probe.mjs`, `src/probe/probe.mjs`, `src/commands/scaffold.mjs`, `src/commands/admit.mjs` | `test/claim-selection.test.mjs`, `test/probe.fixture.test.mjs`, `TG-REPEATED-CLAIMS-ARE-ALL-PROBED` |
 | NFR-01 | `src/init/init.mjs`, runner resolution | `TG-INIT-HOOK-NO-NETWORK`, `TG-README-HOOK-MATCHES-THE-CODE` (every surface, not only the README), `TG-GITIGNORE-ADVICE-IS-ONE-LIST` |
 | NFR-02 | `package.json` | `npm run test:install` in CI |
 | NFR-03 | `src/probe/inject.mjs`, `src/probe/probe.mjs` | `TG-DIRTY-DEFENDERS-REFUSED`, `TG-IGNORED-DIRTY-RECORDED`, `TG-IN-PLACE-STILL-RAISES-A-MISSING-TARGET`, `TG-CONTROL-RESTORES-THE-SUBJECT` |
@@ -114,4 +116,5 @@ fails the pull request naming the unclaimed file, and `status` reports
 
 | Version | Date | Change | Author |
 |---|---|---|---|
+| 1.1.0 | 2026-09-19 | Require lossless, visible partial claim selection | @raccioly |
 | 1.0.0 | 2026-09-18 | First canonical requirements, written against v0.6.0 | @raccioly |

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/package-lock.json

@@ -1,12 +1,12 @@
 {
   "name": "testguard-cli",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "testguard-cli",
-      "version": "0.10.0",
+      "version": "0.10.1",
       "license": "MIT",
       "dependencies": {
         "ajv": "8.20.0"

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/package.json

@@ -1,6 +1,6 @@
 {
   "name": "testguard-cli",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Breaks your code on purpose and reports every promise your tests did not notice breaking. Mutation testing bound to the claims a project makes — vitest, jest, Playwright, pytest and unittest.",
   "type": "module",
   "license": "MIT",

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/packaging/gitlab/testguard.gitlab-ci.yml

@@ -3,7 +3,7 @@
 # Include it from a project's .gitlab-ci.yml, pinned to a release:
 #
 #   include:
-#     - remote: 'https://raw.githubusercontent.com/raccioly/testguard/v0.10.0/packaging/gitlab/testguard.gitlab-ci.yml'
+#     - remote: 'https://raw.githubusercontent.com/raccioly/testguard/v0.10.1/packaging/gitlab/testguard.gitlab-ci.yml'
 #       inputs:
 #         dir: backend            # where testguard.claims.json lives (default ".")
 #         post_note: true         # post the brief as a merge-request note (needs TESTGUARD_GITLAB_TOKEN, api scope)
@@ -29,7 +29,7 @@ spec:
   inputs:
     version:
       description: testguard-cli version to run
-      default: "0.10.0"
+      default: "0.10.1"
     dir:
       description: directory whose test runner is invoked (where testguard.claims.json lives)
       default: "."

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/packaging/homebrew/testguard.rb

@@ -15,8 +15,8 @@
 class Testguard < Formula
   desc "Proves a test suite defends the claims a project makes"
   homepage "https://github.com/raccioly/testguard"
-  url "https://registry.npmjs.org/testguard-cli/-/testguard-cli-0.10.0.tgz"
-  sha256 "ab42501d45ba0a71b534e12aa86da2a9fc2f664a1da4f38a4e436dfd30c02c3c"
+  url "https://registry.npmjs.org/testguard-cli/-/testguard-cli-0.10.1.tgz"
+  sha256 "ebb9e4ac0370e0b2cbc52b3e5f24e8426020fd3b5ff9db6b2776ab2744874dab"
   license "MIT"
 
   depends_on "node"

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "testguard-cli"
-version = "0.10.0"
+version = "0.10.1"
 description = "Breaks your code on purpose and reports every promise your tests did not notice breaking. Mutation testing bound to the claims a project makes — vitest, jest, Playwright, pytest and unittest. Ships the Node.js CLI (requires Node.js 20+)."
 readme = "README.md"
 license = { text = "MIT" }

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/spec/GATE-SEMANTICS.md

@@ -436,6 +436,16 @@ new anchor is a semantic edit to the claim and must be reviewed and re-probed.
 `unclaimed-changes`, when a change reference is known). Its next action is
 `repair-fault`, naming the first fault and `testguard claims --check-anchors`.
 
+## Partial probe scope
+
+Every `--claim` occurrence contributes to the selection. Comma-separated ids
+inside each occurrence are flattened in first-seen order and duplicates are
+collapsed. An explicitly empty selection is a usage error, never a successful
+zero-record probe. Partial human output and the `probe --json` run wrapper name
+the requested and actually probed claim ids and counts. Commands whose
+`--claim` is singular (`scaffold` and `admit`) reject repeated or comma-separated
+values instead of silently choosing one.
+
 ## Severity floor
 
 `--severity <level>` gates only findings whose claim severity is at or above

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/spec/conformance/examples/status.json

@@ -18,6 +18,20 @@
     }
   },
   "provisional": false,
+  "run": {
+    "id": "run-20260917T020000",
+    "evidence": ".testguard/evidence-partial.json",
+    "provisional": false,
+    "records": 4,
+    "newSinceBaseline": 1,
+    "exitCode": 1,
+    "scope": {
+      "requestedClaims": ["REDACT-002", "REDACT-001"],
+      "requestedCount": 2,
+      "probedClaims": ["REDACT-002", "REDACT-001"],
+      "probedCount": 2
+    }
+  },
   "surface": {
     "sourceModules": 3,
     "claimedModules": 2,

testguard_cli-0.10.1/spec/conformance/invalid/status.partial-scope-counts-disagree.json

@@ -0,0 +1,31 @@
+{
+  "schemaVersion": 1,
+  "tool": { "name": "testguard", "version": "0.10.0" },
+  "generatedAt": "2026-09-19T22:00:00Z",
+  "state": "unprobed",
+  "next": {
+    "action": "probe",
+    "command": "testguard probe",
+    "why": "Claims have not been probed."
+  },
+  "counts": { "claims": 2, "faults": 2 },
+  "stale": [],
+  "invalidFaults": [],
+  "changedFaults": [],
+  "findings": [],
+  "paths": {},
+  "run": {
+    "id": "run-20260919T220000",
+    "evidence": ".testguard/evidence-partial.json",
+    "provisional": false,
+    "records": 1,
+    "newSinceBaseline": 0,
+    "exitCode": 0,
+    "scope": {
+      "requestedClaims": ["A", "B"],
+      "requestedCount": 1,
+      "probedClaims": ["A"],
+      "probedCount": 1
+    }
+  }
+}

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/spec/lib/validate.mjs

@@ -250,6 +250,13 @@ const semantic = {
       if (!doc.surface.history.available && doc.surface.history.commitsRead !== 0) errors.push({ path: '/surface/history/commitsRead', message: 'unavailable history must report zero commits read' });
       if (new Set(doc.surface.rankedUnclaimed.map((item) => item.file)).size !== doc.surface.rankedUnclaimed.length) errors.push({ path: '/surface/rankedUnclaimed', message: 'ranked unclaimed modules must be unique' });
     }
+    if (doc.run?.scope) {
+      const scope = doc.run.scope;
+      if (scope.requestedCount !== scope.requestedClaims.length) errors.push({ path: '/run/scope/requestedCount', message: 'requestedCount must equal requestedClaims.length' });
+      if (scope.probedCount !== scope.probedClaims.length) errors.push({ path: '/run/scope/probedCount', message: 'probedCount must equal probedClaims.length' });
+      const requested = new Set(scope.requestedClaims);
+      if (scope.probedClaims.some((id) => !requested.has(id))) errors.push({ path: '/run/scope/probedClaims', message: 'every probed claim must have been requested' });
+    }
     return errors;
   },
 

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/spec/schemas/status.schema.json

@@ -152,6 +152,80 @@
       },
       "additionalProperties": false
     },
+    "run": {
+      "description": "Present on probe --json: the validated status document plus the completed invocation's result. scope is present only for a partial --claim run.",
+      "type": "object",
+      "required": ["id", "evidence", "provisional", "records", "newSinceBaseline", "exitCode"],
+      "properties": {
+        "id": { "type": "string", "minLength": 1, "maxLength": 128 },
+        "evidence": { "type": "string", "minLength": 1, "maxLength": 4096 },
+        "provisional": { "type": "boolean" },
+        "records": { "type": "integer", "minimum": 0 },
+        "newSinceBaseline": { "type": "integer", "minimum": 0 },
+        "exitCode": { "enum": [0, 1] },
+        "scope": {
+          "type": "object",
+          "required": ["requestedClaims", "requestedCount", "probedClaims", "probedCount"],
+          "properties": {
+            "requestedClaims": {
+              "type": "array",
+              "minItems": 1,
+              "uniqueItems": true,
+              "items": { "$ref": "urn:claimspec:v1:common#/$defs/identifier" }
+            },
+            "requestedCount": { "type": "integer", "minimum": 1 },
+            "probedClaims": {
+              "type": "array",
+              "uniqueItems": true,
+              "items": { "$ref": "urn:claimspec:v1:common#/$defs/identifier" }
+            },
+            "probedCount": { "type": "integer", "minimum": 0 }
+          },
+          "additionalProperties": false
+        }
+      },
+      "additionalProperties": false
+    },
+    "cost": {
+      "description": "Present when probe --json --cost is requested; derived only from the runs in the emitted evidence.",
+      "type": "object",
+      "required": ["totalMs", "totalRuns", "reusedRecords", "records", "claims", "defenders", "sharedDefenders"],
+      "properties": {
+        "totalMs": { "type": "number", "minimum": 0 },
+        "totalRuns": { "type": "integer", "minimum": 0 },
+        "reusedRecords": { "type": "integer", "minimum": 0 },
+        "records": { "type": "integer", "minimum": 0 },
+        "claims": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "required": ["claimId", "ms", "runs", "faults", "reused", "defenders"],
+            "properties": {
+              "claimId": { "$ref": "urn:claimspec:v1:common#/$defs/identifier" },
+              "ms": { "type": "number", "minimum": 0 },
+              "runs": { "type": "integer", "minimum": 0 },
+              "faults": { "type": "integer", "minimum": 0 },
+              "reused": { "type": "integer", "minimum": 0 },
+              "defenders": {
+                "type": "array",
+                "uniqueItems": true,
+                "items": { "$ref": "urn:claimspec:v1:common#/$defs/repoPath" }
+              }
+            },
+            "additionalProperties": false
+          }
+        },
+        "defenders": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/costDefender" }
+        },
+        "sharedDefenders": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/costDefender" }
+        }
+      },
+      "additionalProperties": false
+    },
     "counts": {
       "type": "object",
       "required": [
@@ -399,5 +473,23 @@
       "$ref": "urn:claimspec:v1:common#/$defs/gitSha"
     }
   },
-  "additionalProperties": false
+  "additionalProperties": false,
+  "$defs": {
+    "costDefender": {
+      "type": "object",
+      "required": ["file", "ms", "runs", "claims"],
+      "properties": {
+        "file": { "$ref": "urn:claimspec:v1:common#/$defs/repoPath" },
+        "ms": { "type": "number", "minimum": 0 },
+        "runs": { "type": "integer", "minimum": 0 },
+        "claims": {
+          "type": "array",
+          "minItems": 1,
+          "uniqueItems": true,
+          "items": { "$ref": "urn:claimspec:v1:common#/$defs/identifier" }
+        }
+      },
+      "additionalProperties": false
+    }
+  }
 }

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/src/cli.mjs

@@ -46,7 +46,7 @@ probe
   --ref <commit>       probe this commit in the scratch worktree (default: HEAD). An explicit --ref is honoured even when
                        defender/target files are dirty: a warning names them, the evidence records them (repo.ignoredDirty)
   --ignore-dirty       probe HEAD as committed although defender/target files are dirty (same warning and record)
-  --claim <ID,ID>      probe only these claims; writes .testguard/evidence-partial.json
+  --claim <ID,ID>      probe only these claims; repeatable, order-preserving, and writes .testguard/evidence-partial.json
   --include-dirty      probe the working tree (a snapshot commit) instead of HEAD; uncommitted tests count
                        (without it, a dirty defender/target with the implicit HEAD is refused: the silent-mismatch trap)
   --verbose            also print each killed fault (default: only unproven ones, plus a count)
@@ -137,7 +137,7 @@ export async function main(argv, io = { out: (s) => process.stdout.write(s + '\n
         ref: { type: 'string' },
         'ignore-dirty': { type: 'boolean', default: false },
         serial: { type: 'boolean', default: false },
-        claim: { type: 'string' },
+        claim: { type: 'string', multiple: true },
         fault: { type: 'string' },
         'include-dirty': { type: 'boolean', default: false },
         changed: { type: 'string' },

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/src/commands/admit.mjs

@@ -29,10 +29,19 @@ function findProjectDir(testAbs, claimsFlag) {
  * decision here can never disagree with the gate.
  */
 export async function admitCommand({ file, values, version }, io) {
-  if (!file || !values.claim) {
+  if (!file || !values.claim?.length) {
     io.err('usage: testguard admit <test-file> --claim <ID> [--fault <FID>] [--confirm <n>] [--json]');
     return 3;
   }
+  if (values.claim.length > 1 || values.claim[0].includes(',')) {
+    io.err('admit accepts exactly one --claim <ID>');
+    return 3;
+  }
+  const claimId = values.claim[0].trim();
+  if (!claimId) {
+    io.err('--claim must name one claim id');
+    return 3;
+  }
   const confirmRuns = Number(values.confirm);
   const budgetMs = Number(values.budget);
   if (!Number.isInteger(confirmRuns) || confirmRuns < 1 || !Number.isInteger(budgetMs) || budgetMs < 1000) {
@@ -46,7 +55,6 @@ export async function admitCommand({ file, values, version }, io) {
   if (testRel.startsWith('..')) throw new PreconditionError(`${file} is outside the project directory ${projectDir}`);
 
   const all = loadClaims(values.claims ? resolve(values.claims) : defaultClaimsPath(projectDir));
-  const claimId = values.claim.trim();
   const claim = all.claims.find((c) => c.id === claimId);
   if (!claim) throw new PreconditionError(`--claim: unknown claim id ${claimId}`);
   const faults = values.fault ? claim.faults.filter((f) => f.id === values.fault) : claim.faults;

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/src/commands/probe.mjs

@@ -9,11 +9,30 @@ import { computeStatus } from '../status/status.mjs';
 import { resolveChangedRef, withChangedRef } from '../gate/changed.mjs';
 import { costReport, renderCost } from '../probe/cost.mjs';
 import { progressMode, stageReporter, clearStageLine, recordEvent, isProgressMode, progressStream } from '../probe/progress.mjs';
+import { validate } from '../../spec/lib/validate.mjs';
 export const provisionalEvidencePath = (projectDir) => join(projectDir, '.testguard', 'evidence-provisional.json');
 
 export const evidencePath = (projectDir) => join(projectDir, '.testguard', 'evidence.json');
 export const baselinePath = (projectDir) => join(projectDir, '.testguard', 'baseline.json');
 
+/** Every repeated/comma-separated --claim value, in first-seen order. */
+export function claimSelection(values) {
+  if (values === undefined) return undefined;
+  return [...new Set(values.flatMap((value) => value.split(',')).map((id) => id.trim()).filter(Boolean))];
+}
+
+/** Scope is invocation metadata, kept outside the evidence contract. */
+export function partialScope(only, records) {
+  if (!only) return undefined;
+  const probedClaims = [...new Set(records.map((record) => record.claim.id))];
+  return {
+    requestedClaims: only,
+    requestedCount: only.length,
+    probedClaims,
+    probedCount: probedClaims.length,
+  };
+}
+
 export async function probeCommand({ projectDir, values, version }, io) {
   const confirmRuns = Number(values.confirm);
   const budgetMs = Number(values.budget);
@@ -34,7 +53,11 @@ export async function probeCommand({ projectDir, values, version }, io) {
     io.err('claims file declares no claims; nothing to verify');
     return 2;
   }
-  const only = values.claim ? values.claim.split(',').map((s) => s.trim()).filter(Boolean) : undefined;
+  const only = claimSelection(values.claim);
+  if (only?.length === 0) {
+    io.err('--claim must name at least one claim id');
+    return 3;
+  }
   // A --claim run is partial evidence; keep it away from the canonical file unless --out says otherwise.
   const provisional = confirmRuns < 3;
   // Provisional and partial runs never overwrite the canonical evidence: only confirmed, complete runs may feed a baseline.
@@ -81,9 +104,13 @@ export async function probeCommand({ projectDir, values, version }, io) {
   writeSpecDoc('evidence', outPath, evidence);
 
   const g = gate(evidence.records, baseline, { severityFloor: values.severity });
+  const scope = partialScope(only, evidence.records);
   if (values.json) {
     const status = withChangedRef(resolveChangedRef({ explicit: values.changed }), (changedRef) => computeStatus({ projectDir, toolVersion: version, changedRef, includeDirty: values['include-dirty'], evidence: outPath }), io.err);
-    io.out(JSON.stringify({ ...status, run: { id: evidence.run.id, evidence: outPath, provisional, records: evidence.records.length, newSinceBaseline: g.new.length, exitCode: g.new.length > 0 ? 1 : 0 }, ...(values.cost ? { cost: costReport(evidence.records) } : {}) }, null, 2));
+    const doc = { ...status, run: { id: evidence.run.id, evidence: outPath, provisional, records: evidence.records.length, newSinceBaseline: g.new.length, exitCode: g.new.length > 0 ? 1 : 0, ...(scope ? { scope } : {}) }, ...(values.cost ? { cost: costReport(evidence.records) } : {}) };
+    const result = validate('status', doc);
+    if (!result.ok) throw new Error(`probe JSON document does not conform: ${result.errors.map((e) => `${e.path}: ${e.message}`).join('; ')}`);
+    io.out(JSON.stringify(doc, null, 2));
     return g.new.length > 0 ? 1 : 0;
   }
   if (!values.quiet && baseline) {
@@ -102,7 +129,7 @@ export async function probeCommand({ projectDir, values, version }, io) {
     io.out(renderCost(costReport(evidence.records)));
     io.out('');
   }
-  io.out(`evidence: ${outPath}${only ? ` (partial: --claim ${only.join(',')}; not the canonical evidence file)` : provisional ? ' (provisional; not the canonical evidence file)' : ''}`);
+  io.out(`evidence: ${outPath}${scope ? ` (partial: ${scope.requestedCount} claim${scope.requestedCount === 1 ? '' : 's'} requested, ${scope.probedCount} probed: --claim ${scope.requestedClaims.join(',')}; not the canonical evidence file)` : provisional ? ' (provisional; not the canonical evidence file)' : ''}`);
   if (provisional && !values.quiet) io.err(PROVISIONAL_WARNING(confirmRuns));
   return g.new.length > 0 ? 1 : 0;
 }

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/src/commands/scaffold.mjs

@@ -10,6 +10,15 @@ export async function scaffoldCommand({ projectDir, file, values, version }, io)
     io.err('usage: testguard scaffold <source-file> [--claim <ID>] [--out <path>] [--json]');
     return 3;
   }
+  if (values.claim?.length > 1 || values.claim?.[0]?.includes(',')) {
+    io.err('scaffold accepts exactly one --claim <ID>');
+    return 3;
+  }
+  const claimId = values.claim?.[0]?.trim();
+  if (values.claim && !claimId) {
+    io.err('--claim must name one claim id');
+    return 3;
+  }
   const abs = resolve(file);
   if (!existsSync(abs)) throw new PreconditionError(`no such file: ${file}`);
   const rel = relative(projectDir, abs);
@@ -17,7 +26,7 @@ export async function scaffoldCommand({ projectDir, file, values, version }, io)
 
   const claimsPath = values.claims ? resolve(values.claims) : defaultClaimsPath(projectDir);
   const existingClaims = existsSync(claimsPath) ? loadClaims(claimsPath) : undefined;
-  const { doc, stats } = scaffoldFile({ projectDir, file: rel, claimId: values.claim, existingClaims, toolVersion: version });
+  const { doc, stats } = scaffoldFile({ projectDir, file: rel, claimId, existingClaims, toolVersion: version });
 
   if (values.json) {
     io.out(JSON.stringify(doc, null, 2));

{testguard_cli-0.10.0 → testguard_cli-0.10.1}/src/probe/probe.mjs

@@ -40,6 +40,16 @@ function readRunnerVersion(projectDir, name = 'vitest') {
   }
 }
 
+/** Validate and order a partial claim selection without losing caller order. */
+export function selectClaims(claims, only) {
+  if (!only) return claims;
+  if (only.length === 0) throw new PreconditionError('--claim must name at least one claim id');
+  const byId = new Map(claims.map((claim) => [claim.id, claim]));
+  const unknown = only.filter((id) => !byId.has(id));
+  if (unknown.length) throw new PreconditionError(`--claim: unknown claim id(s) ${unknown.join(', ')}`);
+  return only.map((id) => byId.get(id));
+}
+
 /**
  * Probe every fault of every claim. Returns a spec-conformant evidence
  * document; writing it is the caller's job.
@@ -76,18 +86,13 @@ export async function probe({
   const head = headSha(root, ref);
   if (!head) throw new PreconditionError(ref === 'HEAD' ? 'repository has no commits; every verdict is tied to a commit' : `ref ${ref} does not resolve to a commit`);
 
-  const targets = [...new Set(claims.claims.flatMap((c) => c.faults.map((f) => relative(root, join(projectDir, f.file)))))];
+  const scopedClaims = selectClaims(claims.claims, only);
+  const targets = [...new Set(scopedClaims.flatMap((c) => c.faults.map((f) => relative(root, join(projectDir, f.file)))))];
   if (mode === 'in-place' && isDirty(root, targets)) {
     throw new PreconditionError(`uncommitted changes in fault target files (${targets.join(', ')}); commit or stash them, or drop --in-place. Only the files faults are applied to must be clean — test files may be dirty, which is what makes --in-place usable while writing tests.`);
   }
   if (includeDirty && mode !== 'worktree') throw new PreconditionError('--include-dirty applies to worktree mode; drop --in-place');
   if (includeDirty && ref !== 'HEAD') throw new PreconditionError('--include-dirty snapshots the working tree; it cannot be combined with --ref');
-  const selected = only ? new Set(only) : null;
-  if (selected) {
-    const known = new Set(claims.claims.map((c) => c.id));
-    const unknown = [...selected].filter((id) => !known.has(id));
-    if (unknown.length) throw new PreconditionError(`--claim: unknown claim id(s) ${unknown.join(', ')}`);
-  }
 
   // Worktree mode probes a commit, not the working tree. Uncommitted defender
   // or target edits would be silently absent — the same survivors, no hint why.
@@ -103,8 +108,7 @@ export async function probe({
       if (isDirty(root)) snapshot = snapshotWorkingTree(root);
     } else {
       const watched = new Set(targets);
-      for (const claim of claims.claims) {
-        if (selected && !selected.has(claim.id)) continue;
+      for (const claim of scopedClaims) {
         const declared = claim.defendedBy?.length ? resolveDefenders(projectDir, claim.defendedBy) : claim.faults.flatMap((f) => discoverDefenders(projectDir, f.file));
         for (const d of declared) watched.add(relative(root, join(projectDir, d)));
         for (const g of claim.defendedBy ?? []) if (!g.includes('*')) watched.add(relative(root, join(projectDir, g)));
@@ -193,8 +197,7 @@ export async function probe({
       return Object.fromEntries([...groups].map(([r, group]) => [labelOf(r), group]));
     };
 
-    for (const claim of claims.claims) {
-      if (selected && !selected.has(claim.id)) continue;
+    for (const claim of scopedClaims) {
       const declared = claim.defendedBy?.length ? resolveDefenders(iso.projectDir, claim.defendedBy) : null;
       for (const fault of claim.faults) {
         // Mock-awareness: a discovered file that mocks the target is not a