@revealui/claim-gates

Fleet claim honesty engines for multi-root claim-drift (GAP-462).

Overview

Extracts the claim-drift detector so every RevealFleet product repo can run the same honesty gates without a full-copy of the scanner. Phase 1 keeps revealui pnpm validate:claims hard-fail with pre-extract parity. Phase 2 adds per-profile scan roots, soft missing-path handling, and --warn / --baseline for gradual fleet enablement.

Installation

pnpm add @revealui/claim-gates

Quick Start

import { runClaimGates } from '@revealui/claim-gates';

const result = runClaimGates({
  root: '/path/to/checkout',
  profile: 'product-runtime',
});
process.exit(result.exitCode);

CLI (after build):

# revealui monorepo (default profile product-runtime)
claim-gates --root /path/to/revealui

# agency / marketing-site (hard-fail when clean)
claim-gates --root /path/to/agency --profile marketing-site

# sibling product README / docs (hard-fail; fleet-attribution off)
claim-gates --root /path/to/revdev --profile product-readme

pnpm validate:claims   # revealui monorepo thin wrapper + capability slice

Profiles (Phase 2+)

| Profile | Use | Metrics / license | Fleet attribution | Missing scan dirs | |---------|-----|-------------------|-------------------|-------------------| | product-runtime | Full revealui monorepo | On | On (docs / marketing) | Hard-fail if missing | | marketing-site | Agency | Off | Off (intentional Studio/Rev* copy) | Soft skip | | product-readme | Sibling product docs | Off | Off (peer products name each other) | Soft skip |

Auto-detect from root shape:

• apps/ + packages/ + apps/marketing/app/content/claims-evidence.ts → product-runtime
• app/ without packages/ → marketing-site
• else → product-readme

Flags: --fix, --warn / --baseline (report failures, exit 0), --root, --profile.

Copy-dependent holds (feature-existence)

Unshipped capabilities must not be claimed as live. Holds live in src/copy-dependents.ts (COPY_DEPENDENT_HOLDS, status waiting | released). Detectors run on profile copyDependentPaths during runClaimDrift and hard-fail pnpm validate:claims when live phrasing appears without a same-line roadmap qualifier.

IDs match the private planning registry (.jv docs/marketing/copy-dependents.yml). When a feature ships: set hold status: released in the same PR as the product work, then cue private COPY-DEP work for any remaining copy package.

GAP-484 honesty holds (stay waiting; they are bans, not roadmap cues): COPY-DEP-C-SCRM-CERT, COPY-DEP-AML-HARDENED, COPY-DEP-TRUSTWORTHY-AI, COPY-DEP-MODEL-PROVENANCE (weight scan claims; hash-plus-URL provenance is the allowed control language).

Development

pnpm --filter @revealui/claim-gates typecheck
pnpm --filter @revealui/claim-gates test
pnpm --filter @revealui/claim-gates build

License

MIT