@ai-sdlc/orchestrator 0.1.0 → 0.1.2

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/dist/cli/commands/init.js

@@ -9,22 +9,29 @@ kind: Pipeline
 metadata:
   name: default
 spec:
+  triggers:
+    - event: issue.labeled
+      filter:
+        labels:
+          - ai-eligible
+  providers:
+    sourceControl:
+      type: github
+      config:
+        org: your-org
   stages:
     - name: validate
-      type: gate
+      qualityGates:
+        - default-gates
     - name: code
-      type: agent
-      timeout: 30m
+      agent: default-agent
+      timeout: PT30M
       onFailure:
-        action: retry
+        strategy: retry
         maxRetries: 2
     - name: review
-      type: gate
-  triggers:
-    - event: issue.labeled
-      filters:
-        - field: label
-          value: ai-sdlc
+      qualityGates:
+        - default-gates
 `;
 const AGENT_ROLE_YAML = `apiVersion: ai-sdlc.io/v1alpha1
 kind: AgentRole
@@ -52,19 +59,28 @@ kind: QualityGate
 metadata:
   name: default-gates
 spec:
+  scope:
+    authorTypes:
+      - ai-agent
   gates:
     - name: has-description
+      enforcement: hard-mandatory
       rule:
         metric: description-length
-        operator: gt
-        threshold: 0
-      enforcement: mandatory
+        operator: '>='
+        threshold: 1
     - name: has-acceptance-criteria
+      enforcement: soft-mandatory
       rule:
         metric: has-acceptance-criteria
-        operator: gte
+        operator: '>='
         threshold: 1
-      enforcement: warning
+      override:
+        requiredRole: tech-lead
+        requiresJustification: true
+  evaluation:
+    pipeline: pre-merge
+    timeout: 30s
 `;
 const AUTONOMY_POLICY_YAML = `apiVersion: ai-sdlc.io/v1alpha1
 kind: AutonomyPolicy
@@ -73,22 +89,48 @@ metadata:
 spec:
   levels:
     - level: 0
-      name: supervised
+      name: Supervised
+      description: All actions require human approval
       permissions:
-        read: ["**"]
-        write: ["src/**", "test/**", "tests/**"]
-        execute: []
+        read: ['**']
+        write: ['src/**', 'test/**', 'tests/**']
+        execute: ['test-suite']
       guardrails:
+        requireApproval: all
         maxLinesPerPR: 300
         blockedPaths:
           - .github/workflows/**
           - .ai-sdlc/**
+      monitoring: continuous
+      minimumDuration: null
+    - level: 1
+      name: Assisted
+      description: Routine changes are autonomous, complex changes need review
+      permissions:
+        read: ['**']
+        write: ['src/**', 'test/**', 'tests/**', 'docs/**']
+        execute: ['test-suite', 'lint', 'build']
+      guardrails:
+        requireApproval: security-critical-only
+        maxLinesPerPR: 500
+      monitoring: real-time-notification
+      minimumDuration: 4w
   promotionCriteria:
-    - metric: tasks-completed
-      threshold: 10
+    '0-to-1':
+      minimumTasks: 10
+      conditions:
+        - metric: pr-approval-rate
+          operator: '>='
+          threshold: 0.90
+      requiredApprovals:
+        - tech-lead
   demotionTriggers:
-    - trigger: failed-test
-      threshold: 3
+    - trigger: critical-security-incident
+      action: demote-to-0
+      cooldown: 4w
+    - trigger: test-failure-rate-exceeds-threshold
+      action: demote-one-level
+      cooldown: 2w
 `;
 export const initCommand = new Command('init')
     .description('Initialize AI-SDLC configuration in the current project')
@@ -122,6 +164,13 @@ export const initCommand = new Command('init')
             console.log(`  created ${f.name}`);
         }
     }
+    // Create state directory for SQLite store
+    const stateDir = join(configDir, 'state');
+    if (!existsSync(stateDir)) {
+        mkdirSync(stateDir, { recursive: true });
+        console.log(`  created state/`);
+    }
     console.log(`\nAI-SDLC config initialized in ${configDir}/`);
+    console.log(`Run 'ai-sdlc health' to verify your configuration.`);
 });
 //# sourceMappingURL=init.js.map

package/dist/cli/commands/validate.d.ts

@@ -0,0 +1,6 @@
+/**
+ * ai-sdlc validate — validate config files without running the full health check.
+ */
+import { Command } from 'commander';
+export declare const validateCommand: Command;
+//# sourceMappingURL=validate.d.ts.map

package/dist/cli/commands/validate.js

@@ -0,0 +1,21 @@
+/**
+ * ai-sdlc validate — validate config files without running the full health check.
+ */
+import { resolve } from 'node:path';
+import { Command } from 'commander';
+import { formatOutput } from '../formatters/index.js';
+import { validateConfigFiles } from '../../validate-config.js';
+export const validateCommand = new Command('validate')
+    .description('Validate AI-SDLC config files')
+    .option('--file <name>', 'Validate a specific YAML file only')
+    .action(async (opts, cmd) => {
+    const globalOpts = cmd.parent?.opts() ?? {};
+    const format = globalOpts.format ?? 'table';
+    const configDir = resolve(globalOpts.config ?? '.ai-sdlc');
+    const results = validateConfigFiles(configDir, opts.file);
+    console.log(formatOutput(format, { type: 'validate', results, configDir }));
+    if (results.some((r) => !r.valid)) {
+        process.exitCode = 1;
+    }
+});
+//# sourceMappingURL=validate.js.map

package/dist/cli/formatters/table.js

@@ -172,6 +172,29 @@ export function formatTable(data) {
             }
             break;
         }
+        case 'validate': {
+            const configDir = data.configDir;
+            lines.push(`Validation Results (${configDir})`);
+            lines.push('─'.repeat(50));
+            const results = data.results;
+            if (results.length === 0) {
+                lines.push('No YAML files found.');
+            }
+            else {
+                for (const r of results) {
+                    const status = r.valid ? 'VALID' : 'INVALID';
+                    const kindStr = r.kind ? String(r.kind).padEnd(16) : '(unknown)'.padEnd(16);
+                    lines.push(`  ${String(r.file).padEnd(28)} ${kindStr} ${status}`);
+                    if (!r.valid) {
+                        const errors = r.errors;
+                        for (const e of errors) {
+                            lines.push(`    ${e.path}: ${e.message}`);
+                        }
+                    }
+                }
+            }
+            break;
+        }
         default: {
             // Generic key-value output
             for (const [key, value] of Object.entries(data)) {

package/dist/cli/index.js

@@ -13,6 +13,7 @@ import { routingCommand } from './commands/routing.js';
 import { complexityCommand } from './commands/complexity.js';
 import { costCommand } from './commands/cost.js';
 import { dashboardCommand } from './commands/dashboard.js';
+import { validateCommand } from './commands/validate.js';
 const program = new Command();
 program
     .name('ai-sdlc')
@@ -31,5 +32,6 @@ program.addCommand(routingCommand);
 program.addCommand(complexityCommand);
 program.addCommand(costCommand);
 program.addCommand(dashboardCommand);
+program.addCommand(validateCommand);
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/execute.js

@@ -29,6 +29,7 @@ import { createPipelineMemory } from './shared.js';
 import { hasResourceChanged, fingerprintResource } from './reconcilers.js';
 import { CostTracker } from './cost-tracker.js';
 import { enrichAgentContext } from './context-enrichment.js';
+import { reportGateCheckRuns } from './check-runs.js';
 /**
  * Execute the full AI-SDLC pipeline for a given issue number.
  */
@@ -370,7 +371,44 @@ async function executePipelineBody(issueNumber, issue, config, qualityGate, agen
             },
         });
     });
-    // 11b. Post-agent complexity evaluation (non-blocking)
+    // 11b. Evaluate quality gates and report as GitHub Check Runs
+    if (qualityGate.spec.gates.length > 0) {
+        try {
+            const { stdout: headSha } = await execFileAsync('git', ['rev-parse', 'HEAD'], {
+                cwd: workDir,
+            });
+            const gateResults = qualityGate.spec.gates.map((gate) => {
+                const evalResult = evaluatePipelineGate(gate, {
+                    authorType: 'ai-agent',
+                    repository: '',
+                    metrics: costMetrics,
+                });
+                return {
+                    gate: evalResult.gate,
+                    verdict: evalResult.verdict === 'override' ? 'pass' : evalResult.verdict,
+                    message: evalResult.message,
+                };
+            });
+            // Report to GitHub Check Runs (best-effort, non-blocking)
+            await reportGateCheckRuns(headSha.trim(), gateResults).catch(() => {
+                log.info('Failed to report gate check runs to GitHub (non-blocking)');
+            });
+            auditLog.record({
+                actor: 'system',
+                action: 'evaluate',
+                resource: `issue#${issueNumber}`,
+                policy: 'post-agent-gates',
+                decision: gateResults.every((g) => g.verdict === 'pass') ? 'allowed' : 'denied',
+                details: {
+                    gates: gateResults.map((g) => ({ gate: g.gate, verdict: g.verdict })),
+                },
+            });
+        }
+        catch {
+            log.info('Post-agent gate evaluation skipped');
+        }
+    }
+    // 11c. Post-agent complexity evaluation (non-blocking)
     try {
         const { stdout: diffStat } = await execFileAsync('git', ['diff', '--stat', 'HEAD~1'], {
             cwd: workDir,

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export { validateIssue, validateIssueWithExtensions, parseComplexity } from './v
 export { executePipeline, type ExecuteOptions, type PipelineResult, type PromotionResult, } from './execute.js';
 export { validateAgentOutput, type ValidationContext, type ValidationResult, type ValidationViolation, } from './validate-agent-output.js';
 export { createLogger, type Logger } from './logger.js';
+export { validateConfigFiles, type FileValidationResult } from './validate-config.js';
 export { executeFixCI, countRetryAttempts, fetchCILogs, type FixCIOptions } from './fix-ci.js';
 export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, type GitHubEnvConfig, type ValidateAndAuditParams, } from './shared.js';
 export { DEFAULT_MODEL, DEFAULT_GITHUB_ORG, DEFAULT_GITHUB_REPO, DEFAULT_GITHUB_REPOSITORY, DEFAULT_CONFIG_DIR_NAME, DEFAULT_SANDBOX_MEMORY_MB, DEFAULT_SANDBOX_CPU_PERCENT, DEFAULT_SANDBOX_NETWORK_POLICY, DEFAULT_SANDBOX_TIMEOUT_MS, defaultSandboxConstraints, DEFAULT_RUNNER_TIMEOUT_MS, DEFAULT_ALLOWED_TOOLS, DEFAULT_MAX_FILES_PER_CHANGE, DEFAULT_REQUIRE_TESTS, DEFAULT_BLOCKED_PATHS, DEFAULT_MAX_FIX_ATTEMPTS, DEFAULT_MAX_LOG_LINES, DEFAULT_GH_CLI_TIMEOUT_MS, DEFAULT_JIT_TTL_MS, DEFAULT_JIT_SCOPE, DEFAULT_BRANCH_TEMPLATE, DEFAULT_BRANCH_PATTERN, DEFAULT_PR_TITLE_TEMPLATE, DEFAULT_PR_FOOTER, DEFAULT_COMPLEXITY_THRESHOLDS, DEFAULT_MAX_LINES_PER_PR, DEFAULT_ANALYSIS_INCLUDE, DEFAULT_ANALYSIS_EXCLUDE, DEFAULT_GIT_HISTORY_DAYS, DEFAULT_HOTSPOT_THRESHOLD, NOTIFICATION_TITLES, DEFAULT_MODEL_COSTS, DEFAULT_COST_BUDGET_USD, DEFAULT_DASHBOARD_REFRESH_MS, PROGRESSIVE_GATE_PROFILES, DEFAULT_LINT_COMMAND, DEFAULT_FORMAT_COMMAND, DEFAULT_COMMIT_MESSAGE_TEMPLATE, DEFAULT_COMMIT_CO_AUTHOR, DEFAULT_OPENAI_API_URL, DEFAULT_OPENAI_MODEL, DEFAULT_ANTHROPIC_API_URL, DEFAULT_ANTHROPIC_MODEL, DEFAULT_GENERIC_LLM_MODEL, DEFAULT_LLM_TIMEOUT_MS, DEFAULT_LLM_MAX_TOKENS, DEFAULT_LLM_SYSTEM_PROMPT, DEFAULT_DOCKER_IMAGE, DEFAULT_WORKFLOW_FILE, DEFAULT_LABEL_TO_SKILL_MAP, DEFAULT_ANALYSIS_CACHE_TTL_MS, } from './defaults.js';

package/dist/index.js

@@ -4,6 +4,7 @@ export { validateIssue, validateIssueWithExtensions, parseComplexity } from './v
 export { executePipeline, } from './execute.js';
 export { validateAgentOutput, } from './validate-agent-output.js';
 export { createLogger } from './logger.js';
+export { validateConfigFiles } from './validate-config.js';
 export { executeFixCI, countRetryAttempts, fetchCILogs } from './fix-ci.js';
 // Shared utilities
 export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, } from './shared.js';

package/dist/runners/claude-code.js

@@ -32,7 +32,7 @@ export function buildPrompt(ctx) {
         else if (fmtCmd) {
             lines.push(`${++step}. After making ANY code changes, always run \`${fmtCmd}\` to catch issues before committing.`);
         }
-        lines.push(`${++step}. Write or update tests if needed to cover your fix.`, `${++step}. Do NOT modify files matching the blocked paths below.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
+        lines.push(`${++step}. Write or update tests if needed to cover your fix.`, `${++step}. NEVER modify files matching the blocked paths below — violations will be automatically detected and the change will be rejected.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
     }
     else {
         let step = 0;
@@ -46,9 +46,9 @@ export function buildPrompt(ctx) {
         else if (fmtCmd) {
             lines.push(`${++step}. After making code changes, run \`${fmtCmd}\` to ensure CI will pass.`);
         }
-        lines.push(`${++step}. Do NOT modify files matching the blocked paths below.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
+        lines.push(`${++step}. NEVER modify files matching the blocked paths below — violations will be automatically detected and the change will be rejected.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
     }
-    lines.push('', '## Constraints', `- Maximum files to change: ${ctx.constraints.maxFilesPerChange}`, `- Tests required: ${ctx.constraints.requireTests}`, `- Blocked paths (do NOT modify): ${ctx.constraints.blockedPaths.join(', ') || 'none'}`);
+    lines.push('', '## Constraints (enforced — violations will be automatically rejected)', `- Maximum files to change: ${ctx.constraints.maxFilesPerChange}`, `- Tests required: ${ctx.constraints.requireTests}`, `- Blocked paths (NEVER modify — changes will be rejected): ${ctx.constraints.blockedPaths.join(', ') || 'none'}`);
     // Append relevant episodic memory if available
     if (ctx.memory) {
         const episodes = ctx.memory.episodic.search(`issue-${ctx.issueNumber}`);

package/dist/validate-agent-output.d.ts

@@ -18,6 +18,7 @@ export interface ValidationContext {
 export interface ValidationViolation {
     rule: string;
     message: string;
+    severity: 'error' | 'warning';
 }
 export interface ValidationResult {
     passed: boolean;

package/dist/validate-agent-output.js

@@ -36,7 +36,8 @@ export async function validateAgentOutput(ctx) {
             if (matchesBlockedPath(file, pattern)) {
                 violations.push({
                     rule: 'blocked-path',
-                    message: `File \`${file}\` matches blocked path \`${pattern}\``,
+                    message: `File \`${file}\` matches blocked path \`${pattern}\` — this change will be rejected. Remove modifications to this file.`,
+                    severity: 'error',
                 });
             }
         }
@@ -45,7 +46,8 @@ export async function validateAgentOutput(ctx) {
     if (ctx.filesChanged.length > ctx.constraints.maxFilesPerChange) {
         violations.push({
             rule: 'max-files',
-            message: `Changed ${ctx.filesChanged.length} files (max ${ctx.constraints.maxFilesPerChange})`,
+            message: `Changed ${ctx.filesChanged.length} files (max ${ctx.constraints.maxFilesPerChange}). Split this change into smaller PRs.`,
+            severity: 'warning',
         });
     }
     // 3. Max lines per PR
@@ -62,7 +64,8 @@ export async function validateAgentOutput(ctx) {
         if (totalLines > ctx.guardrails.maxLinesPerPR) {
             violations.push({
                 rule: 'max-lines',
-                message: `Changed ${totalLines} lines (max ${ctx.guardrails.maxLinesPerPR})`,
+                message: `Changed ${totalLines} lines (max ${ctx.guardrails.maxLinesPerPR}). Consider breaking this into smaller incremental changes.`,
+                severity: 'warning',
             });
         }
     }
@@ -72,7 +75,8 @@ export async function validateAgentOutput(ctx) {
         if (!hasTestFile) {
             violations.push({
                 rule: 'require-tests',
-                message: 'No test file found in changed files',
+                message: 'No test file found in changed files. Add or update tests to cover your changes.',
+                severity: 'error',
             });
         }
     }

package/dist/validate-config.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Per-file config validation — validates YAML files individually and
+ * returns structured results instead of throwing on first error.
+ */
+export interface FileValidationResult {
+    file: string;
+    kind: string | null;
+    valid: boolean;
+    errors: Array<{
+        path: string;
+        message: string;
+    }>;
+}
+/**
+ * Validate config files in the given directory.
+ * Returns one result per file instead of failing on the first error.
+ */
+export declare function validateConfigFiles(configDir: string, fileFilter?: string): FileValidationResult[];
+//# sourceMappingURL=validate-config.d.ts.map

package/dist/validate-config.js

@@ -0,0 +1,72 @@
+/**
+ * Per-file config validation — validates YAML files individually and
+ * returns structured results instead of throwing on first error.
+ */
+import { readFileSync, readdirSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { validateResource } from '@ai-sdlc/reference';
+/**
+ * Validate config files in the given directory.
+ * Returns one result per file instead of failing on the first error.
+ */
+export function validateConfigFiles(configDir, fileFilter) {
+    const dir = resolve(configDir);
+    const results = [];
+    if (!existsSync(dir)) {
+        results.push({
+            file: configDir,
+            kind: null,
+            valid: false,
+            errors: [{ path: '/', message: `Config directory not found: ${dir}` }],
+        });
+        return results;
+    }
+    let files = readdirSync(dir).filter((f) => f.endsWith('.yaml') || f.endsWith('.yml'));
+    // Skip non-resource YAML files
+    files = files.filter((f) => f !== 'manifest.yaml');
+    if (fileFilter) {
+        files = files.filter((f) => f === fileFilter);
+        if (files.length === 0) {
+            results.push({
+                file: fileFilter,
+                kind: null,
+                valid: false,
+                errors: [{ path: '/', message: `File not found in config directory: ${fileFilter}` }],
+            });
+            return results;
+        }
+    }
+    for (const file of files) {
+        try {
+            const raw = readFileSync(resolve(dir, file), 'utf-8');
+            const doc = parseYaml(raw);
+            const result = validateResource(doc);
+            const kind = typeof doc === 'object' && doc !== null && 'kind' in doc
+                ? doc.kind
+                : null;
+            if (result.valid) {
+                results.push({ file, kind, valid: true, errors: [] });
+            }
+            else {
+                results.push({
+                    file,
+                    kind,
+                    valid: false,
+                    errors: (result.errors ?? []).map((e) => ({ path: e.path, message: e.message })),
+                });
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            results.push({
+                file,
+                kind: null,
+                valid: false,
+                errors: [{ path: '/', message }],
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=validate-config.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdlc/orchestrator",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "AI-SDLC Orchestrator — long-running runtime that drives issues through the complete SDLC with AI agents",
   "license": "Apache-2.0",
   "repository": {
@@ -12,7 +12,11 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "files": ["dist", "!dist/**/*.test.*", "!dist/**/*.map"],
+  "files": [
+    "dist",
+    "!dist/**/*.test.*",
+    "!dist/**/*.map"
+  ],
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -37,17 +41,11 @@
       "import": "./dist/cli/index.js"
     }
   },
-  "scripts": {
-    "build": "tsc",
-    "clean": "rm -rf dist *.tsbuildinfo",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  },
   "dependencies": {
-    "@ai-sdlc/reference": "workspace:*",
     "better-sqlite3": "^11.0.0",
     "commander": "^12.0.0",
-    "yaml": "^2.7.0"
+    "yaml": "^2.7.0",
+    "@ai-sdlc/reference": "0.1.2"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.0",
@@ -55,5 +53,11 @@
     "tsx": "^4.19.0",
     "typescript": "^5.7.0",
     "vitest": "^3.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "test": "vitest run",
+    "test:watch": "vitest"
   }
-}
+}

package/dist/runners/copilot-stub.d.ts

@@ -1,9 +0,0 @@
-/**
- * Stub runner for GitHub Copilot — placeholder for future implementation.
- */
-import type { AgentRunner, AgentContext, AgentResult } from './types.js';
-export declare class CopilotStubRunner implements AgentRunner {
-    readonly name = "copilot";
-    run(_ctx: AgentContext): Promise<AgentResult>;
-}
-//# sourceMappingURL=copilot-stub.d.ts.map

package/dist/runners/copilot-stub.js

@@ -1,15 +0,0 @@
-/**
- * Stub runner for GitHub Copilot — placeholder for future implementation.
- */
-export class CopilotStubRunner {
-    name = 'copilot';
-    async run(_ctx) {
-        return {
-            success: false,
-            filesChanged: [],
-            summary: 'GitHub Copilot runner not yet implemented',
-            error: 'STUB: GitHub Copilot integration requires Copilot Workspace API access',
-        };
-    }
-}
-//# sourceMappingURL=copilot-stub.js.map

package/dist/runners/cursor-stub.d.ts

@@ -1,9 +0,0 @@
-/**
- * Stub runner for Cursor — placeholder for future implementation.
- */
-import type { AgentRunner, AgentContext, AgentResult } from './types.js';
-export declare class CursorStubRunner implements AgentRunner {
-    readonly name = "cursor";
-    run(_ctx: AgentContext): Promise<AgentResult>;
-}
-//# sourceMappingURL=cursor-stub.d.ts.map

package/dist/runners/cursor-stub.js

@@ -1,15 +0,0 @@
-/**
- * Stub runner for Cursor — placeholder for future implementation.
- */
-export class CursorStubRunner {
-    name = 'cursor';
-    async run(_ctx) {
-        return {
-            success: false,
-            filesChanged: [],
-            summary: 'Cursor runner not yet implemented',
-            error: 'STUB: Cursor integration requires Cursor Agent API access',
-        };
-    }
-}
-//# sourceMappingURL=cursor-stub.js.map

package/dist/runners/devin-stub.d.ts

@@ -1,9 +0,0 @@
-/**
- * Stub runner for Devin — placeholder for future implementation.
- */
-import type { AgentRunner, AgentContext, AgentResult } from './types.js';
-export declare class DevinStubRunner implements AgentRunner {
-    readonly name = "devin";
-    run(_ctx: AgentContext): Promise<AgentResult>;
-}
-//# sourceMappingURL=devin-stub.d.ts.map

package/dist/runners/devin-stub.js

@@ -1,15 +0,0 @@
-/**
- * Stub runner for Devin — placeholder for future implementation.
- */
-export class DevinStubRunner {
-    name = 'devin';
-    async run(_ctx) {
-        return {
-            success: false,
-            filesChanged: [],
-            summary: 'Devin runner not yet implemented',
-            error: 'STUB: Devin integration requires Devin API access',
-        };
-    }
-}
-//# sourceMappingURL=devin-stub.js.map