feat(provenant): SOP compliance report command

Add  to report SOP compliance from logged PROSE
test results.

- Add  to retrieve nodes by source
- Add  with formatted pass/fail/unknown report
- Register  CLI command
- Add database test for getNodesBySourceSystem
- 39 Provenant tests passing

Author: StackMemory Bot (CLI)

packages/provenant/src/__tests__/database.test.ts

@@ -117,6 +117,29 @@ describe('Database — sources and source edges', () => {
     expect(db.getSourceByExternalId('slack', 'msg-99')).toBeUndefined();
     expect(db.getSourceByExternalId('linear', 'msg-42')).toBeUndefined();
   });
+
+  it('finds nodes by source system', () => {
+    const node = db.insertNode({
+      type: 'decision',
+      content: 'E.1 / SOP-101 Frame Lifecycle: compliance verified',
+      embedding: null,
+      actor: 'prose-harness',
+      confidence: 0.95,
+    });
+    const source = db.insertSource({
+      system: 'prose-test-run',
+      external_id: 'run-1:E.1',
+      raw_payload: '{}',
+      hash: 'run-1:E.1',
+    });
+    db.linkNodeToSource(node.id, source.id, 'prose-test-run', 'run-1:E.1');
+
+    const found = db.getNodesBySourceSystem('prose-test-run');
+    expect(found).toHaveLength(1);
+    expect(found[0].id).toBe(node.id);
+
+    expect(db.getNodesBySourceSystem('other-system')).toHaveLength(0);
+  });
 });
 
 describe('Database — rejection log', () => {

packages/provenant/src/cli/commands/compliance.ts

@@ -0,0 +1,100 @@
+import { existsSync } from 'node:fs';
+import { Database } from '../../schema/database.js';
+
+interface ComplianceOpts {
+  db: string;
+  system?: string;
+}
+
+interface ComplianceEntry {
+  proseId: string;
+  sop: string;
+  status: 'pass' | 'fail' | 'unknown';
+  confidence: number;
+  runId: string;
+  runAt: string;
+}
+
+export function compliance(opts: ComplianceOpts): void {
+  if (!existsSync(opts.db)) {
+    console.error('No database found. Run `provenant log-decision` or ingest first.');
+    process.exit(1);
+  }
+
+  const db = new Database(opts.db);
+
+  try {
+    const system = opts.system ?? 'prose-test-run';
+    const nodes = db.getNodesBySourceSystem(system);
+
+    const entries: ComplianceEntry[] = [];
+    const seen = new Set<string>();
+
+    for (const node of nodes) {
+      const sources = db.getSourcesForNode(node.id);
+      const source = sources.find((s) => s.system === system);
+      if (!source) continue;
+
+      let metadata: Record<string, unknown> = {};
+      try {
+        metadata = JSON.parse(source.raw_payload) as Record<string, unknown>;
+      } catch {
+        // ignore malformed payload
+      }
+
+      const proseId = (metadata['proseId'] as string) ?? extractProseId(node.content);
+      const sop = (metadata['sop'] as string) ?? extractSop(node.content);
+      if (!proseId || seen.has(proseId)) continue;
+      seen.add(proseId);
+
+      const passed = node.content.includes('compliance verified');
+      const failed = node.content.includes('compliance NOT verified');
+
+      entries.push({
+        proseId,
+        sop,
+        status: passed ? 'pass' : failed ? 'fail' : 'unknown',
+        confidence: node.confidence,
+        runId: source.external_id.split(':')[0] ?? 'unknown',
+        runAt: new Date(node.created_at).toISOString(),
+      });
+    }
+
+    // Sort by PROSE ID
+    entries.sort((a, b) => a.proseId.localeCompare(b.proseId));
+
+    console.log(`SOP Compliance Report (${system})`);
+    console.log('─'.repeat(60));
+
+    if (entries.length === 0) {
+      console.log('No compliance decisions found.');
+      console.log(`Run: npx tsx scripts/log-prose-results.ts ${opts.db}`);
+      return;
+    }
+
+    const passed = entries.filter((e) => e.status === 'pass').length;
+    const failed = entries.filter((e) => e.status === 'fail').length;
+
+    for (const entry of entries) {
+      const icon = entry.status === 'pass' ? '✓' : entry.status === 'fail' ? '✗' : '?';
+      console.log(
+        `${icon} ${entry.proseId}  ${entry.sop.slice(0, 40).padEnd(40)}  confidence ${entry.confidence.toFixed(2)}`
+      );
+    }
+
+    console.log('─'.repeat(60));
+    console.log(`Total: ${entries.length}  Passed: ${passed}  Failed: ${failed}`);
+  } finally {
+    db.close();
+  }
+}
+
+function extractProseId(content: string): string | undefined {
+  const match = content.match(/^(E\.\d+)/);
+  return match?.[1];
+}
+
+function extractSop(content: string): string {
+  const match = content.match(/^E\.\d+ \/ ([^:]+):/);
+  return match?.[1] ?? 'Unknown SOP';
+}

packages/provenant/src/cli/index.ts

@@ -17,6 +17,7 @@ import {
 } from './commands/log-override.js';
 import { serve } from './commands/serve.js';
 import { calibrate } from './commands/calibrate.js';
+import { compliance } from './commands/compliance.js';
 
 const DB_DEFAULT = process.env['PROVENANT_DB'] || '.provenant/graph.db';
 
@@ -135,6 +136,14 @@ program
   .option('--db <path>', 'Database path (or set PROVENANT_DB)', DB_DEFAULT)
   .action(serve);
 
+// SOP compliance report
+program
+  .command('compliance')
+  .description('Show SOP compliance report from logged PROSE test results')
+  .option('--db <path>', 'Database path (or set PROVENANT_DB)', DB_DEFAULT)
+  .option('--system <system>', 'Source system to report on', 'prose-test-run')
+  .action(compliance);
+
 // Shadow mode calibration
 program
   .command('calibrate')

packages/provenant/src/schema/database.ts

@@ -339,6 +339,18 @@ export class Database {
       .all(nodeId) as Source[];
   }
 
+  getNodesBySourceSystem(system: string): Node[] {
+    return this.db
+      .prepare(
+        `SELECT n.* FROM nodes n
+         JOIN source_edges se ON se.node_id = n.id
+         JOIN sources s ON s.id = se.source_id
+         WHERE s.system = ?
+         ORDER BY n.created_at DESC`
+      )
+      .all(system) as Node[];
+  }
+
   // --- Rejection Log ---
 
   insertRejection(params: {