From 06549da7f5fbcccc783d8ea5a8c37d741545c720 Mon Sep 17 00:00:00 2001 From: bobby Date: Sun, 28 Jun 2026 10:06:26 -0400 Subject: [PATCH] seam-coverage: enforce door-kit (migrated); prx-w2mf baseline fully burned down MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit door-kit now declares a seam claim (pinning its node-builtin + bun surface, env as its one declared ambient) with test-running CI (door-kit#16) → removed from EXEMPT, enforced. The prx-w2mf baseline is empty: schema-gen (#3), ocap-provenance (#9), door-kit (#16) all migrated. EXEMPT is now permanent-only — seam-check (the harness) and guest-room (the runtime). Co-Authored-By: Claude Opus 4.8 (1M context) --- scripts/check-seam-coverage.ts | 15 +++++---------- 1 file changed, 5 insertions(+), 10 deletions(-) diff --git a/scripts/check-seam-coverage.ts b/scripts/check-seam-coverage.ts index b81c461..417aff6 100644 --- a/scripts/check-seam-coverage.ts +++ b/scripts/check-seam-coverage.ts @@ -19,19 +19,14 @@ import { join } from "node:path"; import { UncheckedPackagesError, assertAllPackagesChecked } from "@bounded-systems/seam-check"; /** - * Repos excluded from the check. The meta-test still FAILS on any *new* capability - * repo not listed here. Two kinds: - * - PERMANENT: not extractable leaf packages a seam claim applies to. - * - BASELINE (burn down — bead `prx-w2mf`): needs work or a maintainer decision. - * Migrated + now enforced (no longer here): schema-gen (#3), ocap-provenance (#9). + * Repos excluded from the check — PERMANENT only: packages a leaf seam claim + * doesn't apply to. The meta-test still FAILS on any *new* capability repo not + * listed here. The `prx-w2mf` baseline is fully burned down — schema-gen (#3), + * ocap-provenance (#9), and door-kit (#16) are migrated and now enforced. */ const EXEMPT = new Set([ - // permanent — not extractable leaves a seam claim applies to: "seam-check", // the harness itself; self-tested (imports ../index.ts, not the marker) "guest-room", // runtime: composes capabilities (BDD specs), not an extractable leaf - // baseline (prx-w2mf) — maintainer judgment needed, NOT a clean recipe: - "door-kit", // client; reaches raw node:fs/crypto/buffer/process (no seams) + 0 tests — - // decide: legit low-level door (custom claim) or a seam violation to fix? ]); function gh(args: string[], quiet = false): string { @@ -88,7 +83,7 @@ function main(): void { assertAllPackagesChecked({ packagesDir: workspace }); console.log(`✓ seam coverage: all ${capability.length} capability packages declare a seam claim.`); console.log(` checked: ${capability.join(", ")}`); - console.log(` exempt: ${[...EXEMPT].sort().join(", ")} (permanent: seam-check, guest-room; baseline prx-w2mf: door-kit)`); + console.log(` exempt (permanent — not leaf seams): ${[...EXEMPT].sort().join(", ")}`); } catch (err) { if (err instanceof UncheckedPackagesError) { console.error(