@cleocode/contracts 2026.4.68 → 2026.4.70

package/dist/acceptance-gate-schema.js

@@ -0,0 +1,244 @@
+/**
+ * Zod validation schemas for {@link AcceptanceGate} and related types.
+ *
+ * Kept in a separate file from the plain TypeScript types so that consumers
+ * that do not need runtime validation (e.g. type-only imports) pay zero cost.
+ *
+ * All schemas are named `*Schema` and derive their inferred types from the
+ * canonical TypeScript interfaces in `./acceptance-gate.ts`.
+ *
+ * @epic T760
+ * @task T763
+ * @task T779
+ */
+import { z } from 'zod';
+// ─── Base schema ──────────────────────────────────────────────────────────────
+/**
+ * Zod schema for {@link GateBase} — fields every gate variant carries.
+ *
+ * Not exported as a standalone validator because it is always composed into a
+ * full gate schema via `z.discriminatedUnion`. Exported so downstream packages
+ * can extend it (e.g. for migration or testing).
+ */
+export const gateBaseSchema = z.object({
+    /** Optional GSD-style REQ-ID, e.g. `"TIMER-03"`. */
+    req: z.string().optional(),
+    /** Human-readable description of what the gate checks. Required. */
+    description: z.string().min(1),
+    /** When true, failure is recorded as a warning rather than a block. */
+    advisory: z.boolean().optional(),
+    /** Per-gate timeout override in milliseconds. */
+    timeoutMs: z.number().int().positive().optional(),
+});
+// ─── File assertion schemas ───────────────────────────────────────────────────
+/**
+ * Zod schema for {@link FileAssertion}.
+ *
+ * Each variant carries a `type` literal that drives the discriminated union.
+ */
+export const fileAssertionSchema = z.discriminatedUnion('type', [
+    z.object({ type: z.literal('exists') }),
+    z.object({ type: z.literal('absent') }),
+    z.object({ type: z.literal('nonEmpty') }),
+    z.object({ type: z.literal('maxBytes'), value: z.number().int().nonnegative() }),
+    z.object({ type: z.literal('minBytes'), value: z.number().int().nonnegative() }),
+    z.object({ type: z.literal('contains'), value: z.string() }),
+    z.object({
+        type: z.literal('matches'),
+        /** Serialized `RegExp` source string. */
+        regex: z.string().min(1),
+        /** Optional `RegExp` flags, e.g. `"gim"`. */
+        flags: z.string().optional(),
+    }),
+    z.object({ type: z.literal('sha256'), value: z.string().length(64) }),
+]);
+// ─── Individual gate schemas ──────────────────────────────────────────────────
+/**
+ * Zod schema for {@link TestGate}.
+ *
+ * Validates that `command` is present and `expect` is one of the two allowed
+ * literal values.
+ */
+export const testGateSchema = gateBaseSchema.extend({
+    kind: z.literal('test'),
+    command: z.string().min(1),
+    args: z.array(z.string()).optional(),
+    expect: z.enum(['pass', 'exit0']),
+    minCount: z.number().int().nonnegative().optional(),
+    cwd: z.string().optional(),
+    env: z.record(z.string(), z.string()).optional(),
+});
+/** Zod schema for {@link FileGate}. */
+export const fileGateSchema = gateBaseSchema.extend({
+    kind: z.literal('file'),
+    path: z.string().min(1),
+    assertions: z.array(fileAssertionSchema).min(1),
+});
+/** Zod schema for {@link CommandGate}. */
+export const commandGateSchema = gateBaseSchema.extend({
+    kind: z.literal('command'),
+    cmd: z.string().min(1),
+    args: z.array(z.string()).optional(),
+    exitCode: z.number().int().optional(),
+    stdoutMatches: z.string().optional(),
+    stderrMatches: z.string().optional(),
+    cwd: z.string().optional(),
+    env: z.record(z.string(), z.string()).optional(),
+});
+/** Zod schema for {@link LintGate}. */
+export const lintGateSchema = gateBaseSchema.extend({
+    kind: z.literal('lint'),
+    tool: z.enum(['biome', 'eslint', 'tsc', 'prettier', 'rustc', 'clippy']),
+    args: z.array(z.string()).optional(),
+    expect: z.enum(['clean', 'noErrors']),
+    cwd: z.string().optional(),
+});
+/** Zod schema for {@link HttpGate}. */
+export const httpGateSchema = gateBaseSchema.extend({
+    kind: z.literal('http'),
+    url: z.string().url(),
+    method: z.enum(['GET', 'HEAD', 'POST', 'PUT', 'DELETE']).optional(),
+    status: z.number().int().min(100).max(599),
+    bodyMatches: z.string().optional(),
+    headers: z.record(z.string(), z.string()).optional(),
+    startCommand: z.string().optional(),
+    startupDelayMs: z.number().int().nonnegative().optional(),
+});
+/** Zod schema for {@link ManualGate}. */
+export const manualGateSchema = gateBaseSchema.extend({
+    kind: z.literal('manual'),
+    prompt: z.string().min(1),
+    verdicts: z.array(z.enum(['pass', 'fail', 'warn'])).optional(),
+});
+// ─── Discriminated union ──────────────────────────────────────────────────────
+/**
+ * Zod discriminated-union schema for {@link AcceptanceGate}.
+ *
+ * Uses `z.discriminatedUnion('kind', [...])` for O(1) variant lookup.
+ * Parse with `acceptanceGateSchema.parse(input)` or
+ * `acceptanceGateSchema.safeParse(input)`.
+ *
+ * @example
+ * ```ts
+ * const gate = acceptanceGateSchema.parse({
+ *   kind: 'test',
+ *   command: 'pnpm test',
+ *   expect: 'pass',
+ *   description: 'Test suite must pass',
+ * });
+ * ```
+ */
+export const acceptanceGateSchema = z.discriminatedUnion('kind', [
+    testGateSchema,
+    fileGateSchema,
+    commandGateSchema,
+    lintGateSchema,
+    httpGateSchema,
+    manualGateSchema,
+]);
+// ─── Result schema ────────────────────────────────────────────────────────────
+/**
+ * Zod schema for {@link AcceptanceGateResult}.
+ *
+ * Validates the shape produced by the gate runner and stored in
+ * `lifecycle_gate_results`.
+ */
+export const acceptanceGateResultSchema = z.object({
+    index: z.number().int().nonnegative(),
+    req: z.string().optional(),
+    kind: z.enum(['test', 'file', 'command', 'lint', 'http', 'manual']),
+    result: z.enum(['pass', 'fail', 'warn', 'skipped', 'error']),
+    durationMs: z.number().nonnegative(),
+    evidence: z.string().optional(),
+    errorMessage: z.string().optional(),
+    /** ISO 8601 timestamp. */
+    checkedAt: z.string().datetime(),
+    checkedBy: z.string().min(1),
+});
+// ─── Mixed acceptance item schema (T780 + T800) ───────────────────────────────
+/**
+ * Zod schema for a single acceptance criterion — either a non-empty string
+ * (legacy) or a structured {@link AcceptanceGate} (machine-verifiable).
+ *
+ * **Tightened (T800)**: Rejects empty strings, whitespace-only strings, and
+ * any non-gate objects. Clear error messages guide callers toward valid input.
+ *
+ * Strings are validated with `z.string().trim().min(1)` to eliminate empty
+ * and whitespace-only criteria. The gate branch uses the existing discriminated-union
+ * schema so all six gate kinds (`test`, `file`, `command`, `lint`, `http`, `manual`)
+ * are accepted.
+ *
+ * @example
+ * ```ts
+ * acceptanceItemSchema.parse('must render in <100ms');      // => 'must render in <100ms'
+ * acceptanceItemSchema.parse({ kind: 'test', command: 'pnpm test', expect: 'pass', description: '...' }); // => TestGate
+ * acceptanceItemSchema.parse('');                            // ERROR: string must be non-empty
+ * acceptanceItemSchema.parse({ foo: 'bar' });               // ERROR: invalid gate object
+ * ```
+ *
+ * @epic T760
+ * @task T780
+ * @task T800
+ */
+export const acceptanceItemSchema = z.union([
+    z
+        .string()
+        .trim()
+        .min(1, {
+        message: 'Acceptance string criterion must be non-empty. Provide a non-blank description or a valid AcceptanceGate object.',
+    })
+        .describe('Free-text legacy acceptance criterion (non-empty string)'),
+    acceptanceGateSchema.describe('Structured machine-verifiable acceptance gate'),
+]);
+/**
+ * Zod schema for a mixed acceptance array — `(string | AcceptanceGate)[]`.
+ *
+ * **Tightened (T800)**:
+ * - Requires at least 1 item (matching CLEO's anti-hallucination policy).
+ * - Rejects duplicate `req:` GSD-style REQ-IDs within the same array.
+ *
+ * Use this to validate the full `Task.acceptance` field after widening (T780).
+ *
+ * @example
+ * ```ts
+ * // Valid: mixed types with unique req IDs
+ * acceptanceArraySchema.parse([
+ *   'must render in <100ms',
+ *   { kind: 'test', command: 'pnpm test', expect: 'pass', description: 'Tests pass', req: 'TEST-01' }
+ * ]);
+ *
+ * // ERROR: empty array
+ * acceptanceArraySchema.parse([]);
+ *
+ * // ERROR: duplicate req:'TEST-01' across two gates
+ * acceptanceArraySchema.parse([
+ *   { kind: 'test', command: 'pnpm test', expect: 'pass', description: 'Tests pass', req: 'TEST-01' },
+ *   { kind: 'file', path: 'README.md', assertions: [{ type: 'exists' }], description: 'README exists', req: 'TEST-01' }
+ * ]);
+ * ```
+ *
+ * @epic T760
+ * @task T780
+ * @task T800
+ */
+export const acceptanceArraySchema = z
+    .array(acceptanceItemSchema)
+    .min(1, {
+    message: 'Task must have at least one acceptance criterion. Provide a non-empty string or a valid AcceptanceGate object.',
+})
+    .refine((items) => {
+    // Extract all req: values from gates (skip plain strings)
+    const reqIds = new Set();
+    for (const item of items) {
+        if (typeof item === 'object' && item !== null && 'req' in item && item.req) {
+            if (reqIds.has(item.req)) {
+                return false; // Duplicate found
+            }
+            reqIds.add(item.req);
+        }
+    }
+    return true; // No duplicates
+}, {
+    message: 'Duplicate req: (REQ-ID) values within the same acceptance array. Each GSD-style requirement ID must be unique. Check for repeated req fields and ensure each gate has a distinct identifier.',
+});
+//# sourceMappingURL=acceptance-gate-schema.js.map

package/dist/acceptance-gate-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-gate-schema.js","sourceRoot":"","sources":["../src/acceptance-gate-schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,iFAAiF;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,oDAAoD;IACpD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,oEAAoE;IACpE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,uEAAuE;IACvE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAChC,iDAAiD;IACjD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAC,CAAC;AAEH,iFAAiF;AAEjF;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC9D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACvC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;IACzC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAChF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;IAC5D,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;QAC1B,yCAAyC;QACzC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,6CAA6C;QAC7C,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAC7B,CAAC;IACF,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC;CACtE,CAAC,CAAC;AAKH,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAChD,CAAC,CAAC;AAEH,0CAA0C;AAC1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC;IACrD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;IACvE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC3B,CAAC,CAAC;AAEH,uCAAuC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,cAAc,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACvB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC1C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAEH,yCAAyC;AACzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,cAAc,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC/D,CAAC,CAAC;AAEH,iFAAiF;AAEjF;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,cAAc;IACd,cAAc;IACd,iBAAiB;IACjB,cAAc;IACd,cAAc;IACd,gBAAgB;CACjB,CAAC,CAAC;AAKH,iFAAiF;AAEjF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC5D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE;IACpC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,0BAA0B;IAC1B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAKH,iFAAiF;AAEjF;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC;IAC1C,CAAC;SACE,MAAM,EAAE;SACR,IAAI,EAAE;SACN,GAAG,CAAC,CAAC,EAAE;QACN,OAAO,EACL,kHAAkH;KACrH,CAAC;SACD,QAAQ,CAAC,0DAA0D,CAAC;IACvE,oBAAoB,CAAC,QAAQ,CAAC,+CAA+C,CAAC;CAC/E,CAAC,CAAC;AAKH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,KAAK,CAAC,oBAAoB,CAAC;KAC3B,GAAG,CAAC,CAAC,EAAE;IACN,OAAO,EACL,gHAAgH;CACnH,CAAC;KACD,MAAM,CACL,CAAC,KAAK,EAAE,EAAE;IACR,0DAA0D;IAC1D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YAC3E,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,CAAC,kBAAkB;YAClC,CAAC;YACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,gBAAgB;AAC/B,CAAC,EACD;IACE,OAAO,EACL,8LAA8L;CACjM,CACF,CAAC"}

package/dist/acceptance-gate.d.ts

@@ -0,0 +1,253 @@
+/**
+ * Acceptance gate discriminated union and result types.
+ *
+ * A machine-verifiable acceptance gate. Gates coexist with free-text criteria
+ * in `Task.acceptance`; the runtime executes only gates and records results in
+ * `task.verification.gateResults` and in the `lifecycle_gate_results` DB table.
+ *
+ * Six gate kinds are supported:
+ * - `test`    — run a command and assert exit code / test-count
+ * - `file`    — assert properties of a file on disk
+ * - `command` — run any CLI command and assert exit code / stdout
+ * - `lint`    — run a static-analysis tool and require a clean result
+ * - `http`    — hit a URL and assert status + optional body
+ * - `manual`  — explicit escape hatch requiring human/agent verdict
+ *
+ * @epic T760
+ * @task T763
+ * @task T779
+ * @see {@link https://github.com/kryptobaseddev/cleo} T760 RCASD hardening
+ */
+/** Fields every gate variant carries. */
+export interface GateBase {
+    /**
+     * Optional REQ-ID (GSD-style: `TIMER-03`, `A11Y-04`). When present the
+     * gate is addressable via `cleo req show <taskId> --id TIMER-03` and its
+     * result is indexed in `lifecycle_gate_results.gate_name`.
+     */
+    req?: string;
+    /**
+     * Free-text description of what this gate is checking. Shown in
+     * `cleo show` output and in failure messages. Required so agents and
+     * humans can read the gate without executing it.
+     */
+    description: string;
+    /**
+     * When `true` a failure of this gate does not block completion — it is
+     * recorded as `result: 'warn'` in `lifecycle_gate_results`.
+     *
+     * @defaultValue false
+     */
+    advisory?: boolean;
+    /**
+     * Gate timeout in milliseconds.
+     *
+     * @defaultValue 120_000
+     */
+    timeoutMs?: number;
+}
+/**
+ * Run a command; pass when exit code is 0 and when at least `minCount`
+ * tests have run. Designed for test suites:
+ * `{ kind: 'test', command: 'pnpm test', expect: 'pass' }`.
+ */
+export interface TestGate extends GateBase {
+    kind: 'test';
+    /** Shell command. Executed via `child_process.spawn`, no `shell: true`. */
+    command: string;
+    /** Arguments split explicitly (avoids shell-injection). */
+    args?: string[];
+    /**
+     * - `"pass"`: exit code 0 AND stdout contains no `FAIL|failing|Error:` pattern.
+     * - `"exit0"`: exit code 0 only (permissive mode).
+     */
+    expect: 'pass' | 'exit0';
+    /** Minimum number of tests that must have run. */
+    minCount?: number;
+    /** Working directory relative to project root. Default `.`. */
+    cwd?: string;
+    /** Environment variable overrides. Keys must match `/^[A-Z_][A-Z0-9_]*$/`. */
+    env?: Record<string, string>;
+}
+/**
+ * Assert properties of a file on disk. Multiple assertions are AND-ed:
+ * all must hold for the gate to pass.
+ */
+export interface FileGate extends GateBase {
+    kind: 'file';
+    /**
+     * Absolute or project-root-relative path. Globs are not supported here
+     * — use one gate per path.
+     */
+    path: string;
+    assertions: FileAssertion[];
+}
+/**
+ * A single assertion about a file on disk.
+ *
+ * All assertion variants in a `FileGate` must pass for the gate to pass.
+ */
+export type FileAssertion = {
+    type: 'exists';
+} | {
+    type: 'absent';
+} | {
+    type: 'nonEmpty';
+} | {
+    type: 'maxBytes';
+    value: number;
+} | {
+    type: 'minBytes';
+    value: number;
+} | {
+    type: 'contains';
+    value: string;
+} | {
+    type: 'matches';
+    /** Serialized `RegExp` source string. */
+    regex: string;
+    /** Optional `RegExp` flags, e.g. `"gim"`. */
+    flags?: string;
+} | {
+    type: 'sha256';
+    value: string;
+};
+/**
+ * Run any CLI command and assert exit code and optional stdout match.
+ * Escape hatch for anything `TestGate`/`LintGate`/`HttpGate` do not cover.
+ */
+export interface CommandGate extends GateBase {
+    kind: 'command';
+    cmd: string;
+    args?: string[];
+    /**
+     * Expected exit code.
+     *
+     * @defaultValue 0
+     */
+    exitCode?: number;
+    /** stdout must match this regex source. */
+    stdoutMatches?: string;
+    /** stderr must match this regex source. */
+    stderrMatches?: string;
+    /** Working directory relative to project root. */
+    cwd?: string;
+    /** Environment variable overrides. */
+    env?: Record<string, string>;
+}
+/**
+ * Run a static-analysis tool and require a clean result.
+ * Wraps common cases with known exit codes so agents do not re-invent them.
+ */
+export interface LintGate extends GateBase {
+    kind: 'lint';
+    /** Linting tool to invoke. */
+    tool: 'biome' | 'eslint' | 'tsc' | 'prettier' | 'rustc' | 'clippy';
+    /**
+     * Tool arguments. Defaults: biome→`['check', '.']`, eslint→`['.']`,
+     * tsc→`['--noEmit']`.
+     */
+    args?: string[];
+    /**
+     * - `"clean"`: zero findings.
+     * - `"noErrors"`: tolerates warnings but not errors.
+     */
+    expect: 'clean' | 'noErrors';
+    /** Working directory relative to project root. */
+    cwd?: string;
+}
+/**
+ * Hit a URL and assert HTTP status and optional body match. For tasks that
+ * ship a webapp or API. The runner starts a server only if `startCommand`
+ * is set and tears it down after the probe.
+ */
+export interface HttpGate extends GateBase {
+    kind: 'http';
+    url: string;
+    /** HTTP method for the probe request. Default `"GET"`. */
+    method?: 'GET' | 'HEAD' | 'POST' | 'PUT' | 'DELETE';
+    /** Expected HTTP status code. */
+    status: number;
+    /** Response body must match this regex source. */
+    bodyMatches?: string;
+    /** Request headers to include. */
+    headers?: Record<string, string>;
+    /** Pre-probe command to start a server. Runs in background; killed after probe. */
+    startCommand?: string;
+    /**
+     * Milliseconds to wait after starting before probing.
+     *
+     * @defaultValue 2000
+     */
+    startupDelayMs?: number;
+}
+/**
+ * Explicit escape hatch: a gate the runtime CANNOT verify automatically.
+ * Requires a human or a different agent to record a verdict before
+ * `cleo complete` will accept it.
+ *
+ * This is the ONLY gate variant that preserves today's free-text behaviour.
+ * Use for subjective criteria: "copy reads well", "visual design matches mockup".
+ */
+export interface ManualGate extends GateBase {
+    kind: 'manual';
+    /** Question or prompt shown to the human or agent performing verification. */
+    prompt: string;
+    /**
+     * Valid verdicts the reviewer may record.
+     *
+     * @defaultValue ['pass', 'fail']
+     */
+    verdicts?: ('pass' | 'fail' | 'warn')[];
+}
+/**
+ * A machine-verifiable acceptance gate attached to a task.
+ *
+ * All variants share the {@link GateBase} fields (`req`, `description`,
+ * `advisory`, `timeoutMs`). The `kind` discriminant selects the variant.
+ *
+ * @example
+ * ```ts
+ * const gate: AcceptanceGate = {
+ *   kind: 'test',
+ *   command: 'pnpm test',
+ *   expect: 'pass',
+ *   minCount: 3,
+ *   description: '≥3 tests must pass',
+ * };
+ * ```
+ */
+export type AcceptanceGate = TestGate | FileGate | CommandGate | LintGate | HttpGate | ManualGate;
+/** All valid `kind` discriminants for `AcceptanceGate`. */
+export type AcceptanceGateKind = AcceptanceGate['kind'];
+/**
+ * Result of running one acceptance gate.
+ *
+ * Persisted to `lifecycle_gate_results` and summarised in
+ * `task.verification.gateResults`.
+ *
+ * NOTE: Named `AcceptanceGateResult` (not `GateResult`) to avoid collision
+ * with the existing {@link GateResult} from `./warp-chain.js` which describes
+ * WarpChain LOOM-gate evaluation outcomes.
+ */
+export interface AcceptanceGateResult {
+    /** Zero-based index in the task's acceptance array. */
+    index: number;
+    /** REQ-ID if the gate had one, else `undefined`. */
+    req?: string;
+    /** Gate variant. */
+    kind: AcceptanceGateKind;
+    /** Outcome of the gate execution. */
+    result: 'pass' | 'fail' | 'warn' | 'skipped' | 'error';
+    /** Wall-clock duration of the gate execution in milliseconds. */
+    durationMs: number;
+    /** Truncated stdout/stderr or file snippet shown in failure messages. */
+    evidence?: string;
+    /** Error message when `result` is `"error"` (the gate runner itself crashed). */
+    errorMessage?: string;
+    /** ISO 8601 timestamp at which the gate ran. */
+    checkedAt: string;
+    /** Agent identifier or `"human"` that ran or attested the gate. */
+    checkedBy: string;
+}
+//# sourceMappingURL=acceptance-gate.d.ts.map

package/dist/acceptance-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-gate.d.ts","sourceRoot":"","sources":["../src/acceptance-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH,yCAAyC;AACzC,MAAM,WAAW,QAAQ;IACvB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IAEb;;;;OAIG;IACH,WAAW,EAAE,MAAM,CAAC;IAEpB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;IAEnB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8EAA8E;IAC9E,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,aAAa,EAAE,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnC;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GACD;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtC;;;GAGG;AACH,MAAM,WAAW,WAAY,SAAQ,QAAQ;IAC3C,IAAI,EAAE,SAAS,CAAC;IAChB,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,2CAA2C;IAC3C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sCAAsC;IACtC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9B;AAED;;;GAGG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,8BAA8B;IAC9B,IAAI,EAAE,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,UAAU,GAAG,OAAO,GAAG,QAAQ,CAAC;IACnE;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;;;OAGG;IACH,MAAM,EAAE,OAAO,GAAG,UAAU,CAAC;IAC7B,kDAAkD;IAClD,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;;;GAIG;AACH,MAAM,WAAW,QAAS,SAAQ,QAAQ;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,GAAG,EAAE,MAAM,CAAC;IACZ,0DAA0D;IAC1D,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,CAAC;IACpD,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,mFAAmF;IACnF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,UAAW,SAAQ,QAAQ;IAC1C,IAAI,EAAE,QAAQ,CAAC;IACf,8EAA8E;IAC9E,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CACzC;AAID;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,WAAW,GAAG,QAAQ,GAAG,QAAQ,GAAG,UAAU,CAAC;AAElG,2DAA2D;AAC3D,MAAM,MAAM,kBAAkB,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;AAIxD;;;;;;;;;GASG;AACH,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,oBAAoB;IACpB,IAAI,EAAE,kBAAkB,CAAC;IACzB,qCAAqC;IACrC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IACvD,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gDAAgD;IAChD,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/dist/acceptance-gate.js

@@ -0,0 +1,22 @@
+/**
+ * Acceptance gate discriminated union and result types.
+ *
+ * A machine-verifiable acceptance gate. Gates coexist with free-text criteria
+ * in `Task.acceptance`; the runtime executes only gates and records results in
+ * `task.verification.gateResults` and in the `lifecycle_gate_results` DB table.
+ *
+ * Six gate kinds are supported:
+ * - `test`    — run a command and assert exit code / test-count
+ * - `file`    — assert properties of a file on disk
+ * - `command` — run any CLI command and assert exit code / stdout
+ * - `lint`    — run a static-analysis tool and require a clean result
+ * - `http`    — hit a URL and assert status + optional body
+ * - `manual`  — explicit escape hatch requiring human/agent verdict
+ *
+ * @epic T760
+ * @task T763
+ * @task T779
+ * @see {@link https://github.com/kryptobaseddev/cleo} T760 RCASD hardening
+ */
+export {};
+//# sourceMappingURL=acceptance-gate.js.map

package/dist/acceptance-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"acceptance-gate.js","sourceRoot":"","sources":["../src/acceptance-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG"}