@cat-factory/kernel 0.179.0 → 0.181.0

package/dist/domain/errors.d.ts

@@ -1,4 +1,4 @@
-export type DomainErrorCode = 'not_found' | 'validation' | 'conflict' | 'credential_required' | 'forbidden';
+export type DomainErrorCode = 'not_found' | 'validation' | 'conflict' | 'credential_required' | 'forbidden' | 'unavailable' | 'unauthorized' | 'rate_limited';
 export declare class DomainError extends Error {
     readonly code: DomainErrorCode;
     /**
@@ -80,6 +80,52 @@ export declare class CredentialRequiredError extends DomainError {
 export declare class ForbiddenError extends DomainError {
     constructor(message?: string, details?: Record<string, unknown>);
 }
+/**
+ * A capability this deployment has not wired is required for the action (→ 503 Service
+ * Unavailable). BY FAR the most common hand-rolled envelope before it had a class — an
+ * opt-in integration (task sources, the skills library, artifact storage, an OAuth
+ * provider) that a facade only builds when configured, so its controller answers 503
+ * rather than 404.
+ *
+ * `reason` matters more here than anywhere else: "not configured" is the one error class
+ * whose remedy is always a specific setup screen, and a client cannot route to it by
+ * string-matching prose. Carry the machine-readable code and let the SPA translate.
+ */
+export declare class UnavailableError extends DomainError {
+    constructor(message: string, 
+    /** Machine-readable code for the client (under `details.reason`), e.g. which integration. */
+    reason?: string, 
+    /** Extra machine-readable context merged alongside `reason`. */
+    details?: Record<string, unknown>);
+}
+/**
+ * The caller is NOT authenticated (or its credential/signature did not verify) → 401.
+ * Distinct from {@link ForbiddenError}, which is an authenticated caller lacking a
+ * capability: 401 says "sign in", 403 says "you can't do this".
+ *
+ * Webhook receivers use this for a failed HMAC check. Keep those messages coarse — a
+ * signature verifier that distinguishes "no header" from "bad digest" is an oracle — and
+ * put the operator-facing distinction in a log line, not the envelope.
+ */
+export declare class UnauthorizedError extends DomainError {
+    constructor(message?: string, 
+    /** Machine-readable code for the client (under `details.reason`). */
+    reason?: string, details?: Record<string, unknown>);
+}
+/**
+ * The caller (or the deployment, against an upstream) exceeded a rate limit → 429.
+ *
+ * `retryAfterSeconds` rides `details` rather than a header because the envelope is what
+ * survives every hop this platform has — a queue consumer and the durable driver read the
+ * same `details` an HTTP client does, and neither sees response headers.
+ */
+export declare class RateLimitedError extends DomainError {
+    constructor(message: string, 
+    /** Machine-readable code for the client (under `details.reason`). */
+    reason?: string, 
+    /** How long to wait before retrying, when the limiter told us. */
+    retryAfterSeconds?: number);
+}
 /**
  * INTERNAL control-flow signal (NOT a wire/HTTP error): a durable-driver write lost an
  * optimistic-concurrency race — the run row was advanced by a concurrent writer (a human

package/dist/domain/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,YAAY,GACZ,UAAU,GACV,qBAAqB,GACrB,WAAW,CAAA;AAEf,qBAAa,WAAY,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,eAAe;IAE9B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAT5C,YACW,IAAI,EAAE,eAAe,EAC9B,OAAO,EAAE,MAAM;IACf;;;;;OAKG;IACM,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA,EAI3C;CACF;AAED,kDAAkD;AAClD,qBAAa,aAAc,SAAQ,WAAW;IAC5C,YAAY,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAErC;CACF;AAED,6DAA6D;AAC7D,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,YACE,OAAO,EAAE,MAAM;IACf;8DAC0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAGlC;CACF;AAED;;;;;;;;;;GAUG;AACH,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,4CAA4C;AAC5C,qBAAa,aAAc,SAAQ,WAAW;IAC5C,YACE,OAAO,EAAE,MAAM;IACf,uFAAuF;IACvF,MAAM,CAAC,EAAE,cAAc;IACvB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAGlC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,sBAAsB,CAAA;AAE1B;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,WAAW;IACtD,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,wBAAwB,CAAA;KAAE,EAEzF;CACF;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,SAAQ,WAAW;IAC7C,YAAY,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE;CACF;AAED;;;;;;;;;;GAUG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,WAAW,EAAE,MAAM,EAG9B;CACF;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,YAAY,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAG/C;CACF;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,CAAC,CAGzF;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKjE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAIA,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,YAAY,GACZ,UAAU,GACV,qBAAqB,GACrB,WAAW,GACX,aAAa,GACb,cAAc,GACd,cAAc,CAAA;AAElB,qBAAa,WAAY,SAAQ,KAAK;IAElC,QAAQ,CAAC,IAAI,EAAE,eAAe;IAE9B;;;;;OAKG;IACH,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAT5C,YACW,IAAI,EAAE,eAAe,EAC9B,OAAO,EAAE,MAAM;IACf;;;;;OAKG;IACM,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,YAAA,EAI3C;CACF;AAED,kDAAkD;AAClD,qBAAa,aAAc,SAAQ,WAAW;IAC5C,YAAY,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAErC;CACF;AAED,6DAA6D;AAC7D,qBAAa,eAAgB,SAAQ,WAAW;IAC9C,YACE,OAAO,EAAE,MAAM;IACf;8DAC0D;IAC1D,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAGlC;CACF;AAED;;;;;;;;;;GAUG;AACH,YAAY,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAA;AAE5D,4CAA4C;AAC5C,qBAAa,aAAc,SAAQ,WAAW;IAC5C,YACE,OAAO,EAAE,MAAM;IACf,uFAAuF;IACvF,MAAM,CAAC,EAAE,cAAc;IACvB,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAGlC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,wBAAwB,GAChC,iBAAiB,GACjB,mBAAmB,GACnB,gBAAgB,GAChB,sBAAsB,CAAA;AAE1B;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,WAAW;IACtD,YAAY,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,wBAAwB,CAAA;KAAE,EAEzF;CACF;AAED;;;;;;GAMG;AACH,qBAAa,cAAe,SAAQ,WAAW;IAC7C,YAAY,OAAO,SAAc,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAEnE;CACF;AAED;;;;;;;;;;GAUG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,YACE,OAAO,EAAE,MAAM;IACf,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM;IACf,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAGlC;CACF;AAED;;;;;;;;GAQG;AACH,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,YACE,OAAO,SAAiB;IACxB,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAGlC;CACF;AAED;;;;;;GAMG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,YACE,OAAO,EAAE,MAAM;IACf,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM;IACf,kEAAkE;IAClE,iBAAiB,CAAC,EAAE,MAAM,EAM3B;CACF;AAED;;;;;;;;;;GAUG;AACH,qBAAa,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,WAAW,EAAE,MAAM,EAG9B;CACF;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,oBAAqB,SAAQ,aAAa;IACrD,YAAY,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAG/C;CACF;AAED,oEAAoE;AACpE,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,CAAC,CAGzF;AAED,qEAAqE;AACrE,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAKjE"}

package/dist/domain/errors.js

@@ -66,6 +66,61 @@ export class ForbiddenError extends DomainError {
         super('forbidden', message, details);
     }
 }
+/**
+ * A capability this deployment has not wired is required for the action (→ 503 Service
+ * Unavailable). BY FAR the most common hand-rolled envelope before it had a class — an
+ * opt-in integration (task sources, the skills library, artifact storage, an OAuth
+ * provider) that a facade only builds when configured, so its controller answers 503
+ * rather than 404.
+ *
+ * `reason` matters more here than anywhere else: "not configured" is the one error class
+ * whose remedy is always a specific setup screen, and a client cannot route to it by
+ * string-matching prose. Carry the machine-readable code and let the SPA translate.
+ */
+export class UnavailableError extends DomainError {
+    constructor(message, 
+    /** Machine-readable code for the client (under `details.reason`), e.g. which integration. */
+    reason, 
+    /** Extra machine-readable context merged alongside `reason`. */
+    details) {
+        super('unavailable', message, reason ? { reason, ...details } : details);
+    }
+}
+/**
+ * The caller is NOT authenticated (or its credential/signature did not verify) → 401.
+ * Distinct from {@link ForbiddenError}, which is an authenticated caller lacking a
+ * capability: 401 says "sign in", 403 says "you can't do this".
+ *
+ * Webhook receivers use this for a failed HMAC check. Keep those messages coarse — a
+ * signature verifier that distinguishes "no header" from "bad digest" is an oracle — and
+ * put the operator-facing distinction in a log line, not the envelope.
+ */
+export class UnauthorizedError extends DomainError {
+    constructor(message = 'Unauthorized', 
+    /** Machine-readable code for the client (under `details.reason`). */
+    reason, details) {
+        super('unauthorized', message, reason ? { reason, ...details } : details);
+    }
+}
+/**
+ * The caller (or the deployment, against an upstream) exceeded a rate limit → 429.
+ *
+ * `retryAfterSeconds` rides `details` rather than a header because the envelope is what
+ * survives every hop this platform has — a queue consumer and the durable driver read the
+ * same `details` an HTTP client does, and neither sees response headers.
+ */
+export class RateLimitedError extends DomainError {
+    constructor(message, 
+    /** Machine-readable code for the client (under `details.reason`). */
+    reason, 
+    /** How long to wait before retrying, when the limiter told us. */
+    retryAfterSeconds) {
+        super('rate_limited', message, {
+            ...(reason ? { reason } : {}),
+            ...(retryAfterSeconds === undefined ? {} : { retryAfterSeconds }),
+        });
+    }
+}
 /**
  * INTERNAL control-flow signal (NOT a wire/HTTP error): a durable-driver write lost an
  * optimistic-concurrency race — the run row was advanced by a concurrent writer (a human

package/dist/domain/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iFAAiF;AACjF,gFAAgF;AAShF,MAAM,OAAO,WAAY,SAAQ,KAAK;IAEzB,IAAI;IAQJ,OAAO;IATlB,YACW,IAAqB,EAC9B,OAAe;IACf;;;;;OAKG;IACM,OAAiC;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAA;oBAVL,IAAI;uBAQJ,OAAO;QAGhB,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAA;IAC7B,CAAC;CACF;AAED,kDAAkD;AAClD,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YAAY,MAAc,EAAE,EAAU;QACpC,KAAK,CAAC,WAAW,EAAE,GAAG,MAAM,KAAK,EAAE,aAAa,CAAC,CAAA;IACnD,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C,YACE,OAAe;IACf;8DAC0D;IAC1D,OAAiC;QAEjC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;CACF;AAgBD,4CAA4C;AAC5C,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YACE,OAAe;IACf,uFAAuF;IACvF,MAAuB;IACvB,+FAA+F;IAC/F,OAAiC;QAEjC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACvE,CAAC;CACF;AAgBD;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,WAAW;IACtD,YAAY,OAAe,EAAE,OAA6D;QACxF,KAAK,CAAC,qBAAqB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,cAAe,SAAQ,WAAW;IAC7C,YAAY,OAAO,GAAG,WAAW,EAAE,OAAiC;QAClE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACtC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,WAAmB;QAC7B,KAAK,CAAC,cAAc,WAAW,sDAAsD,CAAC,CAAA;QACtF,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAA;IAC7B,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IACrD,YAAY,UAAkB,EAAE,QAAgB;QAC9C,KAAK,CAAC,GAAG,UAAU,KAAK,QAAQ,yCAAyC,CAAC,CAAA;QAC1E,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAA;IAC7B,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAI,KAA2B,EAAE,MAAc,EAAE,EAAU;IACpF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,WAAW,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;IAC7B,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/domain/errors.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iFAAiF;AACjF,gFAAgF;AAYhF,MAAM,OAAO,WAAY,SAAQ,KAAK;IAEzB,IAAI;IAQJ,OAAO;IATlB,YACW,IAAqB,EAC9B,OAAe;IACf;;;;;OAKG;IACM,OAAiC;QAE1C,KAAK,CAAC,OAAO,CAAC,CAAA;oBAVL,IAAI;uBAQJ,OAAO;QAGhB,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAA;IAC7B,CAAC;CACF;AAED,kDAAkD;AAClD,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YAAY,MAAc,EAAE,EAAU;QACpC,KAAK,CAAC,WAAW,EAAE,GAAG,MAAM,KAAK,EAAE,aAAa,CAAC,CAAA;IACnD,CAAC;CACF;AAED,6DAA6D;AAC7D,MAAM,OAAO,eAAgB,SAAQ,WAAW;IAC9C,YACE,OAAe;IACf;8DAC0D;IAC1D,OAAiC;QAEjC,KAAK,CAAC,YAAY,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACvC,CAAC;CACF;AAgBD,4CAA4C;AAC5C,MAAM,OAAO,aAAc,SAAQ,WAAW;IAC5C,YACE,OAAe;IACf,uFAAuF;IACvF,MAAuB;IACvB,+FAA+F;IAC/F,OAAiC;QAEjC,KAAK,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IACvE,CAAC;CACF;AAgBD;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,WAAW;IACtD,YAAY,OAAe,EAAE,OAA6D;QACxF,KAAK,CAAC,qBAAqB,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IAChD,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,cAAe,SAAQ,WAAW;IAC7C,YAAY,OAAO,GAAG,WAAW,EAAE,OAAiC;QAClE,KAAK,CAAC,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,CAAA;IACtC,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,gBAAiB,SAAQ,WAAW;IAC/C,YACE,OAAe;IACf,6FAA6F;IAC7F,MAAe;IACf,gEAAgE;IAChE,OAAiC;QAEjC,KAAK,CAAC,aAAa,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC1E,CAAC;CACF;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IAChD,YACE,OAAO,GAAG,cAAc;IACxB,qEAAqE;IACrE,MAAe,EACf,OAAiC;QAEjC,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;IAC3E,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,OAAO,gBAAiB,SAAQ,WAAW;IAC/C,YACE,OAAe;IACf,qEAAqE;IACrE,MAAe;IACf,kEAAkE;IAClE,iBAA0B;QAE1B,KAAK,CAAC,cAAc,EAAE,OAAO,EAAE;YAC7B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7B,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;SAClE,CAAC,CAAA;IACJ,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,iBAAkB,SAAQ,KAAK;IAC1C,YAAY,WAAmB;QAC7B,KAAK,CAAC,cAAc,WAAW,sDAAsD,CAAC,CAAA;QACtF,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAA;IAC7B,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,oBAAqB,SAAQ,aAAa;IACrD,YAAY,UAAkB,EAAE,QAAgB;QAC9C,KAAK,CAAC,GAAG,UAAU,KAAK,QAAQ,yCAAyC,CAAC,CAAA;QAC1E,IAAI,CAAC,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAA;IAC7B,CAAC;CACF;AAED,oEAAoE;AACpE,MAAM,UAAU,WAAW,CAAI,KAA2B,EAAE,MAAc,EAAE,EAAU;IACpF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,IAAI,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAC9E,OAAO,KAAK,CAAA;AACd,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAC/D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,KAAK,YAAY,WAAW,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC9E,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAA;IAC7B,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/domain/validation-detection.d.ts

@@ -0,0 +1,101 @@
+import type { ValidationEcosystem } from '@cat-factory/contracts';
+/**
+ * What a suggested check is FOR. Used only to order the suggestions (an install must
+ * precede the commands that need it; a fast lint should fail before a slow build) — it is
+ * not persisted, and the wire shape carries `{ label, command }` like any other check.
+ */
+export type ValidationCheckRole = 'install' | 'format' | 'lint' | 'typecheck' | 'test' | 'build';
+/** One root-directory entry, as the `RepoFiles` listing reports it. */
+export interface RepoRootEntry {
+    name: string;
+    /** `file` | `dir` | `symlink` | `submodule` — the provider's own vocabulary. */
+    type: string;
+}
+/**
+ * Everything the detector is allowed to see: the repo root's entries, plus the decoded
+ * content of the manifests named in {@link VALIDATION_DETECTION_CONTENT_FILES} that were
+ * actually present. A manifest the reader could not fetch is simply absent from `files`,
+ * which degrades that ecosystem to presence-only rules rather than failing detection.
+ */
+export interface RepoSurface {
+    entries: RepoRootEntry[];
+    files: Record<string, string>;
+}
+/** One suggested check plus the role that orders it. */
+export interface DetectedCheck {
+    label: string;
+    command: string;
+    role: ValidationCheckRole;
+}
+/** What one ecosystem detector produced. `null` ⇒ the ecosystem is absent or yielded nothing. */
+export interface EcosystemDetection {
+    ecosystem: ValidationEcosystem;
+    checks: DetectedCheck[];
+}
+/** The detection result, as the endpoint returns it (minus the transport `status`). */
+export interface ValidationDetectionResult {
+    /** Every ecosystem that contributed at least one check, in canonical order. */
+    ecosystems: ValidationEcosystem[];
+    checks: {
+        label: string;
+        command: string;
+    }[];
+    /** Whether {@link VALIDATION_MAX_CHECKS} dropped suggestions the detectors produced. */
+    truncated: boolean;
+}
+/**
+ * A read-only view over a {@link RepoSurface} with the lookups every detector needs. Names
+ * are matched case-INSENSITIVELY because the conventions genuinely vary (`Makefile` vs
+ * `makefile`, `justfile` vs `Justfile`) and a case-sensitive miss reads to an operator as
+ * "the detector is broken", not as "your file is spelled differently".
+ */
+export declare class RepoView {
+    private readonly filesByLowerName;
+    private readonly dirNames;
+    private readonly fileNames;
+    constructor(surface: RepoSurface);
+    /** Whether a FILE with this name sits at the repo root. */
+    has(name: string): boolean;
+    /** Whether any of these files sits at the repo root. */
+    hasAny(...names: string[]): boolean;
+    /** Whether a DIRECTORY with this name sits at the repo root. */
+    hasDir(name: string): boolean;
+    /** Whether any root FILE ends with this (lowercased) suffix — e.g. `.sln`, `.csproj`. */
+    hasFileWithSuffix(suffix: string): boolean;
+    /** The decoded content of a root manifest the reader fetched, or undefined. */
+    read(name: string): string | undefined;
+    /** The first of these root manifests whose content was fetched. */
+    readAny(...names: string[]): string | undefined;
+    /**
+     * A root manifest parsed as JSON, or undefined when it is absent or malformed. A repo
+     * with an unparseable `package.json` is a real thing (a merge conflict, a template
+     * placeholder); it degrades that ecosystem to its presence-only rules rather than
+     * failing the whole detection.
+     */
+    json(name: string): Record<string, unknown> | undefined;
+}
+/** A detector: recognise an ecosystem on the surface and propose its checks. */
+export type EcosystemDetector = (view: RepoView) => EcosystemDetection | null;
+/**
+ * Compose one ecosystem's result, dropping an ecosystem that produced ONLY setup commands.
+ * An `install` on its own verifies nothing — it would open a PR on a checkout no command
+ * ever inspected, while costing every run the install — so the whole ecosystem is dropped
+ * instead, which is also what lets the task-runner fallback below take over.
+ */
+export declare function ecosystem(id: ValidationEcosystem, checks: (DetectedCheck | null)[]): EcosystemDetection | null;
+/** Build a check, or nothing when its precondition didn't hold (keeps detectors declarative). */
+export declare function check(role: ValidationCheckRole, label: string, command: string | null | undefined): DetectedCheck | null;
+/**
+ * Run the detectors over a repo surface and return the suggested checks.
+ *
+ * LANGUAGE ecosystems are detected first and independently — a polyglot repo (a Go service
+ * with a Node SPA beside it) gets both, because either half can break the PR. TASK RUNNERS
+ * (`make`, `just`, `task`) are a FALLBACK, used only when no language ecosystem produced
+ * anything: in a repo that has both, the language commands are the specific ones, and
+ * suggesting `make test` beside `go test ./...` would run the same suite twice on every run.
+ */
+export declare function detectValidationChecks(surface: RepoSurface, detectors: {
+    language: readonly EcosystemDetector[];
+    taskRunner: readonly EcosystemDetector[];
+}): ValidationDetectionResult;
+//# sourceMappingURL=validation-detection.d.ts.map

package/dist/domain/validation-detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-detection.d.ts","sourceRoot":"","sources":["../../src/domain/validation-detection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AA+BjE;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,SAAS,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,OAAO,CAAA;AAiBhG,uEAAuE;AACvE,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAA;IACZ,gFAAgF;IAChF,IAAI,EAAE,MAAM,CAAA;CACb;AAED;;;;;GAKG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,aAAa,EAAE,CAAA;IACxB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAC9B;AAED,wDAAwD;AACxD,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,mBAAmB,CAAA;CAC1B;AAED,iGAAiG;AACjG,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,mBAAmB,CAAA;IAC9B,MAAM,EAAE,aAAa,EAAE,CAAA;CACxB;AAED,uFAAuF;AACvF,MAAM,WAAW,yBAAyB;IACxC,+EAA+E;IAC/E,UAAU,EAAE,mBAAmB,EAAE,CAAA;IACjC,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC5C,wFAAwF;IACxF,SAAS,EAAE,OAAO,CAAA;CACnB;AAED;;;;;GAKG;AACH,qBAAa,QAAQ;IACnB,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAA4B;IAC7D,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAoB;IAC7C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoB;IAE9C,YAAY,OAAO,EAAE,WAAW,EAS/B;IAED,2DAA2D;IAC3D,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEzB;IAED,wDAAwD;IACxD,MAAM,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAElC;IAED,gEAAgE;IAChE,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE5B;IAED,yFAAyF;IACzF,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAIzC;IAED,+EAA+E;IAC/E,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAErC;IAED,mEAAmE;IACnE,OAAO,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,SAAS,CAM9C;IAED;;;;;OAKG;IACH,IAAI,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CActD;CACF;AAED,gFAAgF;AAChF,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,QAAQ,KAAK,kBAAkB,GAAG,IAAI,CAAA;AAE7E;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,EAAE,EAAE,mBAAmB,EACvB,MAAM,EAAE,CAAC,aAAa,GAAG,IAAI,CAAC,EAAE,GAC/B,kBAAkB,GAAG,IAAI,CAI3B;AAED,iGAAiG;AACjG,wBAAgB,KAAK,CACnB,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACjC,aAAa,GAAG,IAAI,CAEtB;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,WAAW,EACpB,SAAS,EAAE;IACT,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAA;IACtC,UAAU,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACzC,GACA,yBAAyB,CA4B3B"}

package/dist/domain/validation-detection.js

@@ -0,0 +1,166 @@
+import { VALIDATION_MAX_CHECKS } from '@cat-factory/contracts';
+/**
+ * Suggestion ordering within one ecosystem. Setup first, then the static checks cheapest
+ * first (a formatter diff should fail before a type check), then `build` BEFORE `test` —
+ * a compile error is the faster, clearer failure, and a suite whose fixtures come from
+ * build output would otherwise run against a tree that was never built.
+ */
+const ROLE_ORDER = [
+    'install',
+    'format',
+    'lint',
+    'typecheck',
+    'build',
+    'test',
+];
+/**
+ * A read-only view over a {@link RepoSurface} with the lookups every detector needs. Names
+ * are matched case-INSENSITIVELY because the conventions genuinely vary (`Makefile` vs
+ * `makefile`, `justfile` vs `Justfile`) and a case-sensitive miss reads to an operator as
+ * "the detector is broken", not as "your file is spelled differently".
+ */
+export class RepoView {
+    filesByLowerName = new Map();
+    dirNames = new Set();
+    fileNames = new Set();
+    constructor(surface) {
+        for (const entry of surface.entries) {
+            const name = entry.name.toLowerCase();
+            if (entry.type === 'dir')
+                this.dirNames.add(name);
+            else
+                this.fileNames.add(name);
+        }
+        for (const [name, content] of Object.entries(surface.files)) {
+            this.filesByLowerName.set(name.toLowerCase(), content);
+        }
+    }
+    /** Whether a FILE with this name sits at the repo root. */
+    has(name) {
+        return this.fileNames.has(name.toLowerCase());
+    }
+    /** Whether any of these files sits at the repo root. */
+    hasAny(...names) {
+        return names.some((n) => this.has(n));
+    }
+    /** Whether a DIRECTORY with this name sits at the repo root. */
+    hasDir(name) {
+        return this.dirNames.has(name.toLowerCase());
+    }
+    /** Whether any root FILE ends with this (lowercased) suffix — e.g. `.sln`, `.csproj`. */
+    hasFileWithSuffix(suffix) {
+        const lower = suffix.toLowerCase();
+        for (const name of this.fileNames)
+            if (name.endsWith(lower))
+                return true;
+        return false;
+    }
+    /** The decoded content of a root manifest the reader fetched, or undefined. */
+    read(name) {
+        return this.filesByLowerName.get(name.toLowerCase());
+    }
+    /** The first of these root manifests whose content was fetched. */
+    readAny(...names) {
+        for (const name of names) {
+            const content = this.read(name);
+            if (content !== undefined)
+                return content;
+        }
+        return undefined;
+    }
+    /**
+     * A root manifest parsed as JSON, or undefined when it is absent or malformed. A repo
+     * with an unparseable `package.json` is a real thing (a merge conflict, a template
+     * placeholder); it degrades that ecosystem to its presence-only rules rather than
+     * failing the whole detection.
+     */
+    json(name) {
+        const raw = this.read(name);
+        if (raw === undefined)
+            return undefined;
+        try {
+            const parsed = JSON.parse(raw);
+            return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)
+                ? parsed
+                : undefined;
+        }
+        catch {
+            // silent-catch-ok: a malformed manifest is a detection MISS, not an error to report —
+            // the ecosystem falls back to its presence-only rules and the operator still gets the
+            // rest of the suggestions.
+            return undefined;
+        }
+    }
+}
+/**
+ * Compose one ecosystem's result, dropping an ecosystem that produced ONLY setup commands.
+ * An `install` on its own verifies nothing — it would open a PR on a checkout no command
+ * ever inspected, while costing every run the install — so the whole ecosystem is dropped
+ * instead, which is also what lets the task-runner fallback below take over.
+ */
+export function ecosystem(id, checks) {
+    const kept = checks.filter((c) => c !== null);
+    if (!kept.some((c) => c.role !== 'install'))
+        return null;
+    return { ecosystem: id, checks: kept };
+}
+/** Build a check, or nothing when its precondition didn't hold (keeps detectors declarative). */
+export function check(role, label, command) {
+    return command ? { role, label, command } : null;
+}
+/**
+ * Run the detectors over a repo surface and return the suggested checks.
+ *
+ * LANGUAGE ecosystems are detected first and independently — a polyglot repo (a Go service
+ * with a Node SPA beside it) gets both, because either half can break the PR. TASK RUNNERS
+ * (`make`, `just`, `task`) are a FALLBACK, used only when no language ecosystem produced
+ * anything: in a repo that has both, the language commands are the specific ones, and
+ * suggesting `make test` beside `go test ./...` would run the same suite twice on every run.
+ */
+export function detectValidationChecks(surface, detectors) {
+    const view = new RepoView(surface);
+    const run = (list) => list.map((d) => d(view)).filter((d) => d !== null);
+    const language = run(detectors.language);
+    const hits = language.length > 0 ? language : run(detectors.taskRunner);
+    // Grouped by ecosystem (so an install stays with the commands that need it), role-ordered
+    // within each group, and in the detectors' own canonical order across groups.
+    const ordered = hits.flatMap((hit) => [...hit.checks]
+        .sort((a, b) => ROLE_ORDER.indexOf(a.role) - ROLE_ORDER.indexOf(b.role))
+        .map((c) => ({ ...c, ecosystem: hit.ecosystem })));
+    // The cap can slice an ecosystem mid-group and leave only its `install` behind — a command
+    // that verifies nothing, costs every run its install time, and reads as "this ecosystem is
+    // covered". Drop any group the cut reduced to setup, the same rule `ecosystem()` applies
+    // before truncation.
+    const capped = ordered.slice(0, VALIDATION_MAX_CHECKS);
+    const verified = new Set(capped.filter((c) => c.role !== 'install').map((c) => c.ecosystem));
+    const kept = capped.filter((c) => verified.has(c.ecosystem));
+    return {
+        ecosystems: hits.map((h) => h.ecosystem).filter((id) => verified.has(id)),
+        checks: uniquifyLabels(kept),
+        truncated: ordered.length > kept.length,
+    };
+}
+/**
+ * Make the labels unique, which the write contract REQUIRES — two ecosystems both
+ * proposing `test` would otherwise produce a suggestion the operator cannot save, with a
+ * validation error that names neither offender. Disambiguates with the ecosystem first
+ * (`test` / `test (go)`), which is the information a reader actually wants, and falls back
+ * to an ordinal only if that still collides.
+ */
+function uniquifyLabels(checks) {
+    const taken = new Set();
+    return checks.map((c) => {
+        const candidates = [c.label, `${c.label} (${c.ecosystem})`];
+        let label = candidates.find((l) => !taken.has(l));
+        for (let n = 2; label === undefined; n += 1) {
+            const numbered = `${c.label} (${c.ecosystem} ${n})`;
+            if (!taken.has(numbered))
+                label = numbered;
+        }
+        taken.add(label);
+        // The write contract caps a label at 80 chars; every label built here is far shorter,
+        // but clamp anyway so a future long label degrades instead of failing the save.
+        return { label: label.slice(0, 80), command: c.command };
+    });
+}
+//# sourceMappingURL=validation-detection.js.map

package/dist/domain/validation-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-detection.js","sourceRoot":"","sources":["../../src/domain/validation-detection.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAA;AAqC9D;;;;;GAKG;AACH,MAAM,UAAU,GAAmC;IACjD,SAAS;IACT,QAAQ;IACR,MAAM;IACN,WAAW;IACX,OAAO;IACP,MAAM;CACP,CAAA;AA0CD;;;;;GAKG;AACH,MAAM,OAAO,QAAQ;IACF,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC5C,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAA;IAC5B,SAAS,GAAG,IAAI,GAAG,EAAU,CAAA;IAE9C,YAAY,OAAoB;QAC9B,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;YACpC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAA;YACrC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;;gBAC5C,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QAC/B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5D,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,OAAO,CAAC,CAAA;QACxD,CAAC;IACH,CAAC;IAED,2DAA2D;IAC3D,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED,wDAAwD;IACxD,MAAM,CAAC,GAAG,KAAe;QACvB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;IACvC,CAAC;IAED,gEAAgE;IAChE,MAAM,CAAC,IAAY;QACjB,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IAC9C,CAAC;IAED,yFAAyF;IACzF,iBAAiB,CAAC,MAAc;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAClC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAAE,OAAO,IAAI,CAAA;QACxE,OAAO,KAAK,CAAA;IACd,CAAC;IAED,+EAA+E;IAC/E,IAAI,CAAC,IAAY;QACf,OAAO,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAA;IACtD,CAAC;IAED,mEAAmE;IACnE,OAAO,CAAC,GAAG,KAAe;QACxB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/B,IAAI,OAAO,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAA;QAC3C,CAAC;QACD,OAAO,SAAS,CAAA;IAClB,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,IAAY;QACf,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI,GAAG,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACvC,IAAI,CAAC;YACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACvC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAC5E,CAAC,CAAE,MAAkC;gBACrC,CAAC,CAAC,SAAS,CAAA;QACf,CAAC;QAAC,MAAM,CAAC;YACP,sFAAsF;YACtF,sFAAsF;YACtF,2BAA2B;YAC3B,OAAO,SAAS,CAAA;QAClB,CAAC;IACH,CAAC;CACF;AAKD;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,EAAuB,EACvB,MAAgC;IAEhC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAsB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IACjE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC;QAAE,OAAO,IAAI,CAAA;IACxD,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;AACxC,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,KAAK,CACnB,IAAyB,EACzB,KAAa,EACb,OAAkC;IAElC,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAClD,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAoB,EACpB,SAGC;IAED,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAA;IAClC,MAAM,GAAG,GAAG,CAAC,IAAkC,EAAE,EAAE,CACjD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA2B,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAA;IAE7E,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAA;IAEvE,0FAA0F;IAC1F,8EAA8E;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CACnC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;SACZ,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACvE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CACpD,CAAA;IACD,2FAA2F;IAC3F,2FAA2F;IAC3F,yFAAyF;IACzF,qBAAqB;IACrB,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,qBAAqB,CAAC,CAAA;IACtD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IAC5F,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAA;IAE5D,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC;QAC5B,SAAS,EAAE,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM;KACxC,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,cAAc,CACrB,MAA8D;IAE9D,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAA;IAC/B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACtB,MAAM,UAAU,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,SAAS,GAAG,CAAC,CAAA;QAC3D,IAAI,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAA;QACjD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,KAAK,KAAK,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC5C,MAAM,QAAQ,GAAG,GAAG,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,SAAS,IAAI,CAAC,GAAG,CAAA;YACnD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;gBAAE,KAAK,GAAG,QAAQ,CAAA;QAC5C,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QAChB,sFAAsF;QACtF,gFAAgF;QAChF,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAA;IAC1D,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/domain/validation-detectors.d.ts

@@ -0,0 +1,40 @@
+import type { EcosystemDetection, EcosystemDetector, RepoView } from './validation-detection.js';
+/**
+ * The root manifests whose CONTENT the reader fetches (everything else is presence-only).
+ * Bounded on purpose: the reader turns this into one file read per entry that actually
+ * exists, so a new entry here is a new round trip on every detection.
+ */
+export declare const VALIDATION_DETECTION_CONTENT_FILES: readonly string[];
+/**
+ * Node: the scripts the repo declares ARE the evidence. Nothing is invented — a repo with
+ * no `lint` script gets no lint check, because guessing `npx eslint .` on a project that
+ * never configured eslint produces a check that fails for reasons no agent can fix.
+ */
+export declare function detectNode(view: RepoView): EcosystemDetection | null;
+export declare function detectPython(view: RepoView): EcosystemDetection | null;
+export declare function detectGo(view: RepoView): EcosystemDetection | null;
+export declare function detectRust(view: RepoView): EcosystemDetection | null;
+export declare function detectMaven(view: RepoView): EcosystemDetection | null;
+export declare function detectGradle(view: RepoView): EcosystemDetection | null;
+export declare function detectDotnet(view: RepoView): EcosystemDetection | null;
+export declare function detectRuby(view: RepoView): EcosystemDetection | null;
+export declare function detectPhp(view: RepoView): EcosystemDetection | null;
+export declare function detectElixir(view: RepoView): EcosystemDetection | null;
+export declare function detectMake(view: RepoView): EcosystemDetection | null;
+export declare function detectJust(view: RepoView): EcosystemDetection | null;
+export declare function detectTask(view: RepoView): EcosystemDetection | null;
+/** Language ecosystems, in the order their suggestions are presented. */
+export declare const LANGUAGE_DETECTORS: readonly EcosystemDetector[];
+/** Generic task runners — consulted only when no language ecosystem matched. */
+export declare const TASK_RUNNER_DETECTORS: readonly EcosystemDetector[];
+/**
+ * The registries as `detectValidationChecks` takes them. Passed explicitly rather than
+ * defaulted inside the composer, which would make `validation-detection.ts` import this
+ * module and this module import it back — and which would also hide the seam a deployment
+ * would extend to teach the detector its own house convention.
+ */
+export declare const DEFAULT_VALIDATION_DETECTORS: {
+    readonly language: readonly EcosystemDetector[];
+    readonly taskRunner: readonly EcosystemDetector[];
+};
+//# sourceMappingURL=validation-detectors.d.ts.map

package/dist/domain/validation-detectors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation-detectors.d.ts","sourceRoot":"","sources":["../../src/domain/validation-detectors.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,MAAM,2BAA2B,CAAA;AAkBhG;;;;GAIG;AACH,eAAO,MAAM,kCAAkC,EAAE,SAAS,MAAM,EAY/D,CAAA;AAwHD;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAkBpE;AAuCD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAoCtE;AAID,wBAAgB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAgBlE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAWpE;AAID,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAOrE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAQtE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAWtE;AAID,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAUpE;AASD,wBAAgB,SAAS,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAgBnE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAQtE;AA0FD,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAIpE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAIpE;AAED,wBAAgB,UAAU,CAAC,IAAI,EAAE,QAAQ,GAAG,kBAAkB,GAAG,IAAI,CAIpE;AAID,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,EAAE,SAAS,iBAAiB,EAW1D,CAAA;AAED,gFAAgF;AAChF,eAAO,MAAM,qBAAqB,EAAE,SAAS,iBAAiB,EAI7D,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;aACvC,QAAQ;aACR,UAAU;CACF,CAAA"}