@ai-sdlc/orchestrator 0.1.1 → 0.1.2

package/dist/cli/commands/validate.d.ts

@@ -0,0 +1,6 @@
+/**
+ * ai-sdlc validate — validate config files without running the full health check.
+ */
+import { Command } from 'commander';
+export declare const validateCommand: Command;
+//# sourceMappingURL=validate.d.ts.map

package/dist/cli/commands/validate.js

@@ -0,0 +1,21 @@
+/**
+ * ai-sdlc validate — validate config files without running the full health check.
+ */
+import { resolve } from 'node:path';
+import { Command } from 'commander';
+import { formatOutput } from '../formatters/index.js';
+import { validateConfigFiles } from '../../validate-config.js';
+export const validateCommand = new Command('validate')
+    .description('Validate AI-SDLC config files')
+    .option('--file <name>', 'Validate a specific YAML file only')
+    .action(async (opts, cmd) => {
+    const globalOpts = cmd.parent?.opts() ?? {};
+    const format = globalOpts.format ?? 'table';
+    const configDir = resolve(globalOpts.config ?? '.ai-sdlc');
+    const results = validateConfigFiles(configDir, opts.file);
+    console.log(formatOutput(format, { type: 'validate', results, configDir }));
+    if (results.some((r) => !r.valid)) {
+        process.exitCode = 1;
+    }
+});
+//# sourceMappingURL=validate.js.map

package/dist/cli/formatters/table.js

@@ -172,6 +172,29 @@ export function formatTable(data) {
             }
             break;
         }
+        case 'validate': {
+            const configDir = data.configDir;
+            lines.push(`Validation Results (${configDir})`);
+            lines.push('─'.repeat(50));
+            const results = data.results;
+            if (results.length === 0) {
+                lines.push('No YAML files found.');
+            }
+            else {
+                for (const r of results) {
+                    const status = r.valid ? 'VALID' : 'INVALID';
+                    const kindStr = r.kind ? String(r.kind).padEnd(16) : '(unknown)'.padEnd(16);
+                    lines.push(`  ${String(r.file).padEnd(28)} ${kindStr} ${status}`);
+                    if (!r.valid) {
+                        const errors = r.errors;
+                        for (const e of errors) {
+                            lines.push(`    ${e.path}: ${e.message}`);
+                        }
+                    }
+                }
+            }
+            break;
+        }
         default: {
             // Generic key-value output
             for (const [key, value] of Object.entries(data)) {

package/dist/cli/index.js

@@ -13,6 +13,7 @@ import { routingCommand } from './commands/routing.js';
 import { complexityCommand } from './commands/complexity.js';
 import { costCommand } from './commands/cost.js';
 import { dashboardCommand } from './commands/dashboard.js';
+import { validateCommand } from './commands/validate.js';
 const program = new Command();
 program
     .name('ai-sdlc')
@@ -31,5 +32,6 @@ program.addCommand(routingCommand);
 program.addCommand(complexityCommand);
 program.addCommand(costCommand);
 program.addCommand(dashboardCommand);
+program.addCommand(validateCommand);
 program.parse();
 //# sourceMappingURL=index.js.map

package/dist/execute.js

@@ -29,6 +29,7 @@ import { createPipelineMemory } from './shared.js';
 import { hasResourceChanged, fingerprintResource } from './reconcilers.js';
 import { CostTracker } from './cost-tracker.js';
 import { enrichAgentContext } from './context-enrichment.js';
+import { reportGateCheckRuns } from './check-runs.js';
 /**
  * Execute the full AI-SDLC pipeline for a given issue number.
  */
@@ -370,7 +371,44 @@ async function executePipelineBody(issueNumber, issue, config, qualityGate, agen
             },
         });
     });
-    // 11b. Post-agent complexity evaluation (non-blocking)
+    // 11b. Evaluate quality gates and report as GitHub Check Runs
+    if (qualityGate.spec.gates.length > 0) {
+        try {
+            const { stdout: headSha } = await execFileAsync('git', ['rev-parse', 'HEAD'], {
+                cwd: workDir,
+            });
+            const gateResults = qualityGate.spec.gates.map((gate) => {
+                const evalResult = evaluatePipelineGate(gate, {
+                    authorType: 'ai-agent',
+                    repository: '',
+                    metrics: costMetrics,
+                });
+                return {
+                    gate: evalResult.gate,
+                    verdict: evalResult.verdict === 'override' ? 'pass' : evalResult.verdict,
+                    message: evalResult.message,
+                };
+            });
+            // Report to GitHub Check Runs (best-effort, non-blocking)
+            await reportGateCheckRuns(headSha.trim(), gateResults).catch(() => {
+                log.info('Failed to report gate check runs to GitHub (non-blocking)');
+            });
+            auditLog.record({
+                actor: 'system',
+                action: 'evaluate',
+                resource: `issue#${issueNumber}`,
+                policy: 'post-agent-gates',
+                decision: gateResults.every((g) => g.verdict === 'pass') ? 'allowed' : 'denied',
+                details: {
+                    gates: gateResults.map((g) => ({ gate: g.gate, verdict: g.verdict })),
+                },
+            });
+        }
+        catch {
+            log.info('Post-agent gate evaluation skipped');
+        }
+    }
+    // 11c. Post-agent complexity evaluation (non-blocking)
     try {
         const { stdout: diffStat } = await execFileAsync('git', ['diff', '--stat', 'HEAD~1'], {
             cwd: workDir,

package/dist/index.d.ts

@@ -3,6 +3,7 @@ export { validateIssue, validateIssueWithExtensions, parseComplexity } from './v
 export { executePipeline, type ExecuteOptions, type PipelineResult, type PromotionResult, } from './execute.js';
 export { validateAgentOutput, type ValidationContext, type ValidationResult, type ValidationViolation, } from './validate-agent-output.js';
 export { createLogger, type Logger } from './logger.js';
+export { validateConfigFiles, type FileValidationResult } from './validate-config.js';
 export { executeFixCI, countRetryAttempts, fetchCILogs, type FixCIOptions } from './fix-ci.js';
 export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, type GitHubEnvConfig, type ValidateAndAuditParams, } from './shared.js';
 export { DEFAULT_MODEL, DEFAULT_GITHUB_ORG, DEFAULT_GITHUB_REPO, DEFAULT_GITHUB_REPOSITORY, DEFAULT_CONFIG_DIR_NAME, DEFAULT_SANDBOX_MEMORY_MB, DEFAULT_SANDBOX_CPU_PERCENT, DEFAULT_SANDBOX_NETWORK_POLICY, DEFAULT_SANDBOX_TIMEOUT_MS, defaultSandboxConstraints, DEFAULT_RUNNER_TIMEOUT_MS, DEFAULT_ALLOWED_TOOLS, DEFAULT_MAX_FILES_PER_CHANGE, DEFAULT_REQUIRE_TESTS, DEFAULT_BLOCKED_PATHS, DEFAULT_MAX_FIX_ATTEMPTS, DEFAULT_MAX_LOG_LINES, DEFAULT_GH_CLI_TIMEOUT_MS, DEFAULT_JIT_TTL_MS, DEFAULT_JIT_SCOPE, DEFAULT_BRANCH_TEMPLATE, DEFAULT_BRANCH_PATTERN, DEFAULT_PR_TITLE_TEMPLATE, DEFAULT_PR_FOOTER, DEFAULT_COMPLEXITY_THRESHOLDS, DEFAULT_MAX_LINES_PER_PR, DEFAULT_ANALYSIS_INCLUDE, DEFAULT_ANALYSIS_EXCLUDE, DEFAULT_GIT_HISTORY_DAYS, DEFAULT_HOTSPOT_THRESHOLD, NOTIFICATION_TITLES, DEFAULT_MODEL_COSTS, DEFAULT_COST_BUDGET_USD, DEFAULT_DASHBOARD_REFRESH_MS, PROGRESSIVE_GATE_PROFILES, DEFAULT_LINT_COMMAND, DEFAULT_FORMAT_COMMAND, DEFAULT_COMMIT_MESSAGE_TEMPLATE, DEFAULT_COMMIT_CO_AUTHOR, DEFAULT_OPENAI_API_URL, DEFAULT_OPENAI_MODEL, DEFAULT_ANTHROPIC_API_URL, DEFAULT_ANTHROPIC_MODEL, DEFAULT_GENERIC_LLM_MODEL, DEFAULT_LLM_TIMEOUT_MS, DEFAULT_LLM_MAX_TOKENS, DEFAULT_LLM_SYSTEM_PROMPT, DEFAULT_DOCKER_IMAGE, DEFAULT_WORKFLOW_FILE, DEFAULT_LABEL_TO_SKILL_MAP, DEFAULT_ANALYSIS_CACHE_TTL_MS, } from './defaults.js';

package/dist/index.js

@@ -4,6 +4,7 @@ export { validateIssue, validateIssueWithExtensions, parseComplexity } from './v
 export { executePipeline, } from './execute.js';
 export { validateAgentOutput, } from './validate-agent-output.js';
 export { createLogger } from './logger.js';
+export { validateConfigFiles } from './validate-config.js';
 export { executeFixCI, countRetryAttempts, fetchCILogs } from './fix-ci.js';
 // Shared utilities
 export { getGitHubConfig, resolveRepoRoot, createDefaultAuditLog, resolveAutonomyLevel, resolveConstraints, mergeBlockedPaths, isAutonomousStrategy, recordMetric, validateAndAuditOutput, createPipelineMemory, evaluatePipelineCompliance, authorizeFilesChanged, extractIssueNumber, BRANCH_PATTERN, createAbacPermissionHook, createBlockedPathsHook, createAuditLoggingHook, createPipelineAuthorizationChain, } from './shared.js';

package/dist/runners/claude-code.js

@@ -32,7 +32,7 @@ export function buildPrompt(ctx) {
         else if (fmtCmd) {
             lines.push(`${++step}. After making ANY code changes, always run \`${fmtCmd}\` to catch issues before committing.`);
         }
-        lines.push(`${++step}. Write or update tests if needed to cover your fix.`, `${++step}. Do NOT modify files matching the blocked paths below.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
+        lines.push(`${++step}. Write or update tests if needed to cover your fix.`, `${++step}. NEVER modify files matching the blocked paths below — violations will be automatically detected and the change will be rejected.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
     }
     else {
         let step = 0;
@@ -46,9 +46,9 @@ export function buildPrompt(ctx) {
         else if (fmtCmd) {
             lines.push(`${++step}. After making code changes, run \`${fmtCmd}\` to ensure CI will pass.`);
         }
-        lines.push(`${++step}. Do NOT modify files matching the blocked paths below.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
+        lines.push(`${++step}. NEVER modify files matching the blocked paths below — violations will be automatically detected and the change will be rejected.`, `${++step}. Keep your changes to at most ${ctx.constraints.maxFilesPerChange} files.`);
     }
-    lines.push('', '## Constraints', `- Maximum files to change: ${ctx.constraints.maxFilesPerChange}`, `- Tests required: ${ctx.constraints.requireTests}`, `- Blocked paths (do NOT modify): ${ctx.constraints.blockedPaths.join(', ') || 'none'}`);
+    lines.push('', '## Constraints (enforced — violations will be automatically rejected)', `- Maximum files to change: ${ctx.constraints.maxFilesPerChange}`, `- Tests required: ${ctx.constraints.requireTests}`, `- Blocked paths (NEVER modify — changes will be rejected): ${ctx.constraints.blockedPaths.join(', ') || 'none'}`);
     // Append relevant episodic memory if available
     if (ctx.memory) {
         const episodes = ctx.memory.episodic.search(`issue-${ctx.issueNumber}`);

package/dist/validate-agent-output.d.ts

@@ -18,6 +18,7 @@ export interface ValidationContext {
 export interface ValidationViolation {
     rule: string;
     message: string;
+    severity: 'error' | 'warning';
 }
 export interface ValidationResult {
     passed: boolean;

package/dist/validate-agent-output.js

@@ -36,7 +36,8 @@ export async function validateAgentOutput(ctx) {
             if (matchesBlockedPath(file, pattern)) {
                 violations.push({
                     rule: 'blocked-path',
-                    message: `File \`${file}\` matches blocked path \`${pattern}\``,
+                    message: `File \`${file}\` matches blocked path \`${pattern}\` — this change will be rejected. Remove modifications to this file.`,
+                    severity: 'error',
                 });
             }
         }
@@ -45,7 +46,8 @@ export async function validateAgentOutput(ctx) {
     if (ctx.filesChanged.length > ctx.constraints.maxFilesPerChange) {
         violations.push({
             rule: 'max-files',
-            message: `Changed ${ctx.filesChanged.length} files (max ${ctx.constraints.maxFilesPerChange})`,
+            message: `Changed ${ctx.filesChanged.length} files (max ${ctx.constraints.maxFilesPerChange}). Split this change into smaller PRs.`,
+            severity: 'warning',
         });
     }
     // 3. Max lines per PR
@@ -62,7 +64,8 @@ export async function validateAgentOutput(ctx) {
         if (totalLines > ctx.guardrails.maxLinesPerPR) {
             violations.push({
                 rule: 'max-lines',
-                message: `Changed ${totalLines} lines (max ${ctx.guardrails.maxLinesPerPR})`,
+                message: `Changed ${totalLines} lines (max ${ctx.guardrails.maxLinesPerPR}). Consider breaking this into smaller incremental changes.`,
+                severity: 'warning',
             });
         }
     }
@@ -72,7 +75,8 @@ export async function validateAgentOutput(ctx) {
         if (!hasTestFile) {
             violations.push({
                 rule: 'require-tests',
-                message: 'No test file found in changed files',
+                message: 'No test file found in changed files. Add or update tests to cover your changes.',
+                severity: 'error',
             });
         }
     }

package/dist/validate-config.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Per-file config validation — validates YAML files individually and
+ * returns structured results instead of throwing on first error.
+ */
+export interface FileValidationResult {
+    file: string;
+    kind: string | null;
+    valid: boolean;
+    errors: Array<{
+        path: string;
+        message: string;
+    }>;
+}
+/**
+ * Validate config files in the given directory.
+ * Returns one result per file instead of failing on the first error.
+ */
+export declare function validateConfigFiles(configDir: string, fileFilter?: string): FileValidationResult[];
+//# sourceMappingURL=validate-config.d.ts.map

package/dist/validate-config.js

@@ -0,0 +1,72 @@
+/**
+ * Per-file config validation — validates YAML files individually and
+ * returns structured results instead of throwing on first error.
+ */
+import { readFileSync, readdirSync, existsSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { parse as parseYaml } from 'yaml';
+import { validateResource } from '@ai-sdlc/reference';
+/**
+ * Validate config files in the given directory.
+ * Returns one result per file instead of failing on the first error.
+ */
+export function validateConfigFiles(configDir, fileFilter) {
+    const dir = resolve(configDir);
+    const results = [];
+    if (!existsSync(dir)) {
+        results.push({
+            file: configDir,
+            kind: null,
+            valid: false,
+            errors: [{ path: '/', message: `Config directory not found: ${dir}` }],
+        });
+        return results;
+    }
+    let files = readdirSync(dir).filter((f) => f.endsWith('.yaml') || f.endsWith('.yml'));
+    // Skip non-resource YAML files
+    files = files.filter((f) => f !== 'manifest.yaml');
+    if (fileFilter) {
+        files = files.filter((f) => f === fileFilter);
+        if (files.length === 0) {
+            results.push({
+                file: fileFilter,
+                kind: null,
+                valid: false,
+                errors: [{ path: '/', message: `File not found in config directory: ${fileFilter}` }],
+            });
+            return results;
+        }
+    }
+    for (const file of files) {
+        try {
+            const raw = readFileSync(resolve(dir, file), 'utf-8');
+            const doc = parseYaml(raw);
+            const result = validateResource(doc);
+            const kind = typeof doc === 'object' && doc !== null && 'kind' in doc
+                ? doc.kind
+                : null;
+            if (result.valid) {
+                results.push({ file, kind, valid: true, errors: [] });
+            }
+            else {
+                results.push({
+                    file,
+                    kind,
+                    valid: false,
+                    errors: (result.errors ?? []).map((e) => ({ path: e.path, message: e.message })),
+                });
+            }
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : String(err);
+            results.push({
+                file,
+                kind: null,
+                valid: false,
+                errors: [{ path: '/', message }],
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=validate-config.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ai-sdlc/orchestrator",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "AI-SDLC Orchestrator — long-running runtime that drives issues through the complete SDLC with AI agents",
   "license": "Apache-2.0",
   "repository": {
@@ -45,7 +45,7 @@
     "better-sqlite3": "^11.0.0",
     "commander": "^12.0.0",
     "yaml": "^2.7.0",
-    "@ai-sdlc/reference": "0.1.1"
+    "@ai-sdlc/reference": "0.1.2"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^7.6.0",

package/dist/runners/copilot-stub.d.ts

@@ -1,9 +0,0 @@
-/**
- * Stub runner for GitHub Copilot — placeholder for future implementation.
- */
-import type { AgentRunner, AgentContext, AgentResult } from './types.js';
-export declare class CopilotStubRunner implements AgentRunner {
-    readonly name = "copilot";
-    run(_ctx: AgentContext): Promise<AgentResult>;
-}
-//# sourceMappingURL=copilot-stub.d.ts.map

package/dist/runners/copilot-stub.js

@@ -1,15 +0,0 @@
-/**
- * Stub runner for GitHub Copilot — placeholder for future implementation.
- */
-export class CopilotStubRunner {
-    name = 'copilot';
-    async run(_ctx) {
-        return {
-            success: false,
-            filesChanged: [],
-            summary: 'GitHub Copilot runner not yet implemented',
-            error: 'STUB: GitHub Copilot integration requires Copilot Workspace API access',
-        };
-    }
-}
-//# sourceMappingURL=copilot-stub.js.map

package/dist/runners/cursor-stub.d.ts

@@ -1,9 +0,0 @@
-/**
- * Stub runner for Cursor — placeholder for future implementation.
- */
-import type { AgentRunner, AgentContext, AgentResult } from './types.js';
-export declare class CursorStubRunner implements AgentRunner {
-    readonly name = "cursor";
-    run(_ctx: AgentContext): Promise<AgentResult>;
-}
-//# sourceMappingURL=cursor-stub.d.ts.map

package/dist/runners/cursor-stub.js

@@ -1,15 +0,0 @@
-/**
- * Stub runner for Cursor — placeholder for future implementation.
- */
-export class CursorStubRunner {
-    name = 'cursor';
-    async run(_ctx) {
-        return {
-            success: false,
-            filesChanged: [],
-            summary: 'Cursor runner not yet implemented',
-            error: 'STUB: Cursor integration requires Cursor Agent API access',
-        };
-    }
-}
-//# sourceMappingURL=cursor-stub.js.map

package/dist/runners/devin-stub.d.ts

@@ -1,9 +0,0 @@
-/**
- * Stub runner for Devin — placeholder for future implementation.
- */
-import type { AgentRunner, AgentContext, AgentResult } from './types.js';
-export declare class DevinStubRunner implements AgentRunner {
-    readonly name = "devin";
-    run(_ctx: AgentContext): Promise<AgentResult>;
-}
-//# sourceMappingURL=devin-stub.d.ts.map

package/dist/runners/devin-stub.js

@@ -1,15 +0,0 @@
-/**
- * Stub runner for Devin — placeholder for future implementation.
- */
-export class DevinStubRunner {
-    name = 'devin';
-    async run(_ctx) {
-        return {
-            success: false,
-            filesChanged: [],
-            summary: 'Devin runner not yet implemented',
-            error: 'STUB: Devin integration requires Devin API access',
-        };
-    }
-}
-//# sourceMappingURL=devin-stub.js.map