@cleocode/core 2026.3.42 → 2026.3.43

package/dist/validation/operation-verification-gates.d.ts

@@ -0,0 +1,274 @@
+/**
+ * Operation Verification Gate System for CLEO
+ *
+ * Implements 4-layer validation gate system for MCP/dispatch operations:
+ * Layer 1: Schema Validation (JSON Schema compliance)
+ * Layer 2: Semantic Validation (Business rules)
+ * Layer 3: Referential Validation (Cross-entity integrity)
+ * Layer 4: Protocol Validation (RCASD-IVTR+C lifecycle)
+ *
+ * Moved from src/mcp/lib/verification-gates.ts to core for proper layering.
+ *
+ * @task T2936
+ * @task T5707
+ * @epic T2908
+ */
+import { type ProtocolType } from '../compliance/protocol-enforcement.js';
+import { ErrorCategory, ErrorSeverity, ProtocolExitCode } from '../compliance/protocol-types.js';
+/**
+ * Gate layer enumeration
+ */
+export declare enum GateLayer {
+    SCHEMA = 1,
+    SEMANTIC = 2,
+    REFERENTIAL = 3,
+    PROTOCOL = 4
+}
+/**
+ * Gate status for each layer
+ */
+export declare enum GateStatus {
+    PENDING = "pending",
+    PASSED = "passed",
+    FAILED = "failed",
+    BLOCKED = "blocked",
+    SKIPPED = "skipped"
+}
+/**
+ * Violation detail for a specific gate layer
+ */
+export interface GateViolation {
+    layer: GateLayer;
+    severity: ErrorSeverity;
+    code: string;
+    message: string;
+    field?: string;
+    value?: unknown;
+    constraint?: string;
+    fix?: string;
+}
+/**
+ * Result from a single gate layer validation
+ */
+export interface LayerResult {
+    layer: GateLayer;
+    status: GateStatus;
+    passed: boolean;
+    violations: GateViolation[];
+    duration_ms: number;
+}
+/**
+ * Complete verification result across all 4 layers
+ */
+export interface VerificationResult {
+    passed: boolean;
+    layers: Record<GateLayer, LayerResult>;
+    totalViolations: number;
+    exitCode: ProtocolExitCode;
+    category: ErrorCategory;
+    summary: string;
+    blockedAt?: GateLayer;
+}
+/**
+ * Operation context for gate validation
+ */
+export interface OperationContext {
+    domain: string;
+    operation: string;
+    gateway: 'query' | 'mutate';
+    params?: Record<string, unknown>;
+    taskId?: string;
+    protocolType?: ProtocolType;
+}
+/**
+ * Main Verification Gate class
+ *
+ * Orchestrates 4-layer validation and determines pass/fail status.
+ * Each layer must pass before proceeding to the next.
+ */
+export declare class VerificationGate {
+    private protocolEnforcer;
+    private strictMode;
+    constructor(strictMode?: boolean);
+    /**
+     * Execute all 4 gate layers sequentially
+     *
+     * Stops at first failure unless in advisory mode.
+     */
+    verifyOperation(context: OperationContext): Promise<VerificationResult>;
+    /**
+     * Run a single validation layer with timing
+     */
+    private runLayer;
+    /**
+     * Build success result when all gates pass
+     */
+    private buildSuccessResult;
+    /**
+     * Build failure result when a gate fails
+     */
+    private buildFailureResult;
+    /**
+     * Determine semantic layer exit code from violations
+     */
+    private determineSemanticExitCode;
+    /**
+     * Determine referential layer exit code from violations
+     */
+    private determineReferentialExitCode;
+    /**
+     * Determine protocol layer exit code from violations
+     */
+    private determineProtocolExitCode;
+    /**
+     * Check if an operation requires gate validation
+     *
+     * All mutate operations require validation.
+     * Query operations skip validation for performance.
+     */
+    static requiresValidation(context: OperationContext): boolean;
+    /**
+     * Get human-readable layer name
+     */
+    static getLayerName(layer: GateLayer): string;
+}
+/**
+ * Factory function for creating verification gates
+ */
+export declare function createVerificationGate(strictMode?: boolean): VerificationGate;
+/**
+ * Export gate layer sequence for external use
+ */
+export declare const GATE_SEQUENCE: readonly [GateLayer.SCHEMA, GateLayer.SEMANTIC, GateLayer.REFERENTIAL, GateLayer.PROTOCOL];
+/**
+ * Workflow gate names per MCP-SERVER-SPECIFICATION.md Section 7.1
+ *
+ * @task T3141
+ */
+export declare enum WorkflowGateName {
+    IMPLEMENTED = "implemented",
+    TESTS_PASSED = "testsPassed",
+    QA_PASSED = "qaPassed",
+    CLEANUP_DONE = "cleanupDone",
+    SECURITY_PASSED = "securityPassed",
+    DOCUMENTED = "documented"
+}
+/**
+ * Workflow gate status values per Section 7.3
+ */
+export type WorkflowGateStatus = null | 'passed' | 'failed' | 'blocked';
+/**
+ * Agent responsible for each gate per Section 7.2
+ */
+export type WorkflowGateAgent = 'coder' | 'testing' | 'qa' | 'cleanup' | 'security' | 'docs';
+/**
+ * Individual workflow gate definition per Section 7.2
+ */
+export interface WorkflowGateDefinition {
+    name: WorkflowGateName;
+    agent: WorkflowGateAgent;
+    dependsOn: WorkflowGateName[];
+    description: string;
+}
+/**
+ * State of a single workflow gate
+ */
+export interface WorkflowGateState {
+    name: WorkflowGateName;
+    status: WorkflowGateStatus;
+    agent: WorkflowGateAgent;
+    updatedAt: string | null;
+    failureReason?: string;
+}
+/**
+ * Complete workflow gate definitions per Section 7.2
+ */
+export declare const WORKFLOW_GATE_DEFINITIONS: WorkflowGateDefinition[];
+/**
+ * Ordered workflow gate sequence per Section 7.1
+ */
+export declare const WORKFLOW_GATE_SEQUENCE: WorkflowGateName[];
+/**
+ * WorkflowGateTracker
+ *
+ * Tracks the status of all 6 workflow verification gates for a task.
+ * Implements Section 7.4 failure cascade behavior: when a gate fails,
+ * all downstream gates reset to null.
+ *
+ * @task T3141
+ */
+export declare class WorkflowGateTracker {
+    private gates;
+    constructor();
+    /**
+     * Get the status of a specific gate
+     */
+    getGateStatus(gateName: WorkflowGateName): WorkflowGateStatus;
+    /**
+     * Get the full state of a specific gate
+     */
+    getGateState(gateName: WorkflowGateName): WorkflowGateState | undefined;
+    /**
+     * Get all gate states
+     */
+    getAllGates(): WorkflowGateState[];
+    /**
+     * Check if a gate can be attempted (all dependencies passed)
+     */
+    canAttempt(gateName: WorkflowGateName): boolean;
+    /**
+     * Mark a gate as passed.
+     */
+    passGate(gateName: WorkflowGateName, agent?: string): boolean;
+    /**
+     * Mark a gate as failed.
+     *
+     * Per Section 7.4: When a gate fails, all downstream gates reset to null.
+     */
+    failGate(gateName: WorkflowGateName, reason?: string): boolean;
+    /**
+     * Reset a gate and all downstream gates to null.
+     */
+    private cascadeReset;
+    /**
+     * Update blocked status for all gates based on current state.
+     */
+    updateBlockedStatus(): void;
+    /**
+     * Check if all gates have passed
+     */
+    allPassed(): boolean;
+    /**
+     * Get all gates that are currently blocked or have null status
+     */
+    getPendingGates(): WorkflowGateState[];
+    /**
+     * Get the next gate that can be attempted
+     */
+    getNextAttemptable(): WorkflowGateName | null;
+    /**
+     * Get downstream gates of a given gate (not including the gate itself)
+     */
+    getDownstreamGates(gateName: WorkflowGateName): WorkflowGateName[];
+    /**
+     * Serialize gate states to a plain record
+     */
+    toRecord(): Record<string, WorkflowGateStatus>;
+    /**
+     * Restore gate states from a record
+     */
+    fromRecord(record: Record<string, WorkflowGateStatus>): void;
+    /**
+     * Check if a gate name is valid
+     */
+    private isValidGate;
+}
+/**
+ * Validate a workflow gate name string
+ */
+export declare function isValidWorkflowGateName(name: string): name is WorkflowGateName;
+/**
+ * Get the definition for a workflow gate
+ */
+export declare function getWorkflowGateDefinition(name: WorkflowGateName): WorkflowGateDefinition | undefined;
+//# sourceMappingURL=operation-verification-gates.d.ts.map

package/dist/validation/operation-verification-gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"operation-verification-gates.d.ts","sourceRoot":"","sources":["../../src/validation/operation-verification-gates.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAoB,KAAK,YAAY,EAAE,MAAM,uCAAuC,CAAC;AAC5F,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAQjG;;GAEG;AACH,oBAAY,SAAS;IACnB,MAAM,IAAI;IACV,QAAQ,IAAI;IACZ,WAAW,IAAI;IACf,QAAQ,IAAI;CACb;AAED;;GAEG;AACH,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,MAAM,WAAW;IACjB,MAAM,WAAW;IACjB,OAAO,YAAY;IACnB,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,SAAS,CAAC;IACjB,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,UAAU,CAAC;IACnB,MAAM,EAAE,OAAO,CAAC;IAChB,UAAU,EAAE,aAAa,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IACvC,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,SAAS,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED;;;;;GAKG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,gBAAgB,CAAmB;IAC3C,OAAO,CAAC,UAAU,CAAU;gBAEhB,UAAU,GAAE,OAAc;IAKtC;;;;OAIG;IACG,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA6C7E;;OAEG;YACW,QAAQ;IA6BtB;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAW1B;;OAEG;IACH,OAAO,CAAC,kBAAkB;IAuC1B;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAWjC;;OAEG;IACH,OAAO,CAAC,4BAA4B;IASpC;;OAEG;IACH,OAAO,CAAC,yBAAyB;IAgBjC;;;;;OAKG;IACH,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO;IAO7D;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM;CAS9C;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,UAAU,GAAE,OAAc,GAAG,gBAAgB,CAEnF;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,4FAKhB,CAAC;AAMX;;;;GAIG;AACH,oBAAY,gBAAgB;IAC1B,WAAW,gBAAgB;IAC3B,YAAY,gBAAgB;IAC5B,SAAS,aAAa;IACtB,YAAY,gBAAgB;IAC5B,eAAe,mBAAmB;IAClC,UAAU,eAAe;CAC1B;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,CAAC;AAExE;;GAEG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;AAE7F;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,gBAAgB,CAAC;IACvB,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,gBAAgB,EAAE,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,gBAAgB,CAAC;IACvB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,KAAK,EAAE,iBAAiB,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED;;GAEG;AACH,eAAO,MAAM,yBAAyB,EAAE,sBAAsB,EAqC7D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAAgB,EAOpD,CAAC;AASF;;;;;;;;GAQG;AACH,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,KAAK,CAA2C;;IAcxD;;OAEG;IACH,aAAa,CAAC,QAAQ,EAAE,gBAAgB,GAAG,kBAAkB;IAK7D;;OAEG;IACH,YAAY,CAAC,QAAQ,EAAE,gBAAgB,GAAG,iBAAiB,GAAG,SAAS;IAIvE;;OAEG;IACH,WAAW,IAAI,iBAAiB,EAAE;IAIlC;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,gBAAgB,GAAG,OAAO;IAa/C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO;IAe7D;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO;IAc9D;;OAEG;IACH,OAAO,CAAC,YAAY;IAapB;;OAEG;IACH,mBAAmB,IAAI,IAAI;IAY3B;;OAEG;IACH,SAAS,IAAI,OAAO;IAOpB;;OAEG;IACH,eAAe,IAAI,iBAAiB,EAAE;IAItC;;OAEG;IACH,kBAAkB,IAAI,gBAAgB,GAAG,IAAI;IAU7C;;OAEG;IACH,kBAAkB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,gBAAgB,EAAE;IAMlE;;OAEG;IACH,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC;IAQ9C;;OAEG;IACH,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,GAAG,IAAI;IAS5D;;OAEG;IACH,OAAO,CAAC,WAAW;CAGpB;AAED;;GAEG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,gBAAgB,CAE9E;AAED;;GAEG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,gBAAgB,GACrB,sBAAsB,GAAG,SAAS,CAEpC"}

package/dist/validation/param-utils.d.ts

@@ -0,0 +1,121 @@
+/**
+ * Param derivation utilities (Core).
+ *
+ * Converts operation parameter definitions into the shapes required by:
+ *  - Commander.js (CLI adapter): positionals + option strings
+ *  - MCP JSON Schema (MCP adapter): input_schema object
+ *
+ * Canonical location: src/core/validation/param-utils.ts
+ * Re-exported from: src/dispatch/lib/param-utils.ts (backward compat)
+ *
+ * @task T4894
+ * @task T4900
+ * @task T5706
+ */
+interface OperationDef {
+    gateway: string;
+    domain: string;
+    operation: string;
+    description: string;
+    tier: number;
+    params?: ParamDef[];
+    [key: string]: unknown;
+}
+type ParamType = 'string' | 'number' | 'boolean' | 'array' | 'object';
+interface ParamCliDef {
+    positional?: boolean;
+    variadic?: boolean;
+    alias?: string;
+    flag?: string;
+    short?: string;
+    hidden?: boolean;
+    [key: string]: unknown;
+}
+interface ParamMcpDef {
+    name?: string;
+    description?: string;
+    enum?: string[];
+    hidden?: boolean;
+    [key: string]: unknown;
+}
+interface ParamDef {
+    name: string;
+    type: ParamType;
+    required: boolean;
+    description: string;
+    default?: unknown;
+    enum?: string[];
+    items?: {
+        type: ParamType;
+    };
+    cli?: ParamCliDef;
+    mcp?: ParamMcpDef;
+}
+export type JsonSchemaType = 'string' | 'number' | 'boolean' | 'array' | 'object';
+export interface JsonSchemaProperty {
+    type: JsonSchemaType;
+    description: string;
+    enum?: readonly string[];
+    items?: {
+        type: JsonSchemaType;
+    };
+}
+export interface JSONSchemaObject {
+    type: 'object';
+    properties: Record<string, JsonSchemaProperty>;
+    required: string[];
+}
+/**
+ * Build a JSON Schema `input_schema` object from an `OperationDef`.
+ *
+ * Algorithm:
+ *  1. Iterate `def.params`
+ *  2. Skip params where `mcp.hidden === true`
+ *  3. Map ParamType → JSON Schema type
+ *  4. Collect names where `required === true` into `required[]`
+ *  5. Return { type: 'object', properties, required }
+ */
+export declare function buildMcpInputSchema(def: OperationDef): JSONSchemaObject;
+export interface CommanderArgSplit {
+    /** Params that map to `.argument('<name>')` or `.argument('[name]')`. */
+    positionals: ParamDef[];
+    /** Params that map to `.option(...)` calls. */
+    options: ParamDef[];
+}
+/**
+ * Split `OperationDef.params` into positional arguments and option flags,
+ * suitable for Commander.js registration.
+ *
+ * - `cli.positional === true` → goes into `positionals[]`
+ * - everything else with a `cli` key → goes into `options[]`
+ * - Params with no `cli` key → MCP-only; excluded from both arrays
+ */
+export declare function buildCommanderArgs(def: OperationDef): CommanderArgSplit;
+/**
+ * Build the Commander option string for a single non-positional ParamDef.
+ *
+ * Examples:
+ *   { name:'taskId', type:'string', cli:{} }
+ *     → '--taskId <taskId>'
+ *   { name:'status', type:'string', cli:{short:'-s', flag:'status'} }
+ *     → '-s, --status <status>'
+ *   { name:'dryRun', type:'boolean', cli:{flag:'dry-run'} }
+ *     → '--dry-run'
+ *   { name:'limit', type:'number', cli:{} }
+ *     → '--limit <limit>'
+ */
+export declare function buildCommanderOptionString(param: ParamDef): string;
+/**
+ * Convert a camelCase string to kebab-case.
+ * e.g. 'includeArchive' → 'include-archive'
+ */
+export declare function camelToKebab(s: string): string;
+/**
+ * Validates that all required parameters are present in the request.
+ * Returns an array of missing parameter names.
+ *
+ * Replaces the old `requiredParams: string[]` check in registry.ts.
+ */
+export declare function validateRequiredParamsDef(def: OperationDef, params?: Record<string, unknown>): string[];
+export {};
+//# sourceMappingURL=param-utils.d.ts.map

package/dist/validation/param-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"param-utils.d.ts","sourceRoot":"","sources":["../../src/validation/param-utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAKH,UAAU,YAAY;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC;IACpB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,KAAK,SAAS,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEtE,UAAU,WAAW;IACnB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,WAAW;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,UAAU,QAAQ;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,SAAS,CAAA;KAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,GAAG,CAAC,EAAE,WAAW,CAAC;CACnB;AAMD,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,QAAQ,GAAG,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAElF,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,cAAc,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,KAAK,CAAC,EAAE;QAAE,IAAI,EAAE,cAAc,CAAA;KAAE,CAAC;CAClC;AAED,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;IAC/C,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAMD;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,gBAAgB,CA6BvE;AAqBD,MAAM,WAAW,iBAAiB;IAChC,yEAAyE;IACzE,WAAW,EAAE,QAAQ,EAAE,CAAC;IACxB,+CAA+C;IAC/C,OAAO,EAAE,QAAQ,EAAE,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,iBAAiB,CAgBvE;AAMD;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAWlE;AAED;;;GAGG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE9C;AAMD;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,YAAY,EACjB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,MAAM,EAAE,CASV"}

package/dist/validation/protocol-common.d.ts

@@ -0,0 +1,77 @@
+/**
+ * Protocol validation common utilities - ported from lib/validation/protocol-validation-common.sh
+ *
+ * Reusable validation functions for checking output files, manifest fields,
+ * return message format, key findings count, status validity, and provenance.
+ *
+ * @task T4527
+ * @epic T4454
+ */
+export interface ProtocolViolation {
+    requirement: string;
+    severity: 'error' | 'warning';
+    message: string;
+    fix?: string;
+}
+export interface ProtocolValidationResult {
+    valid: boolean;
+    violations: ProtocolViolation[];
+    score: number;
+}
+/**
+ * Check if expected output file exists.
+ * @task T4527
+ */
+export declare function checkOutputFileExists(taskId: string, expectedDir: string, pattern?: string): boolean;
+/**
+ * Check if file contains required documentation sections.
+ * @task T4527
+ */
+export declare function checkDocumentationSections(filePath: string, sections: string[]): boolean;
+/**
+ * Check if return message follows protocol format.
+ * Expected: "<Type> <status>. See MANIFEST.jsonl for <detail>."
+ * @task T4527
+ */
+export declare function checkReturnMessageFormat(message: string, _protocolType?: string): boolean;
+/**
+ * Check if manifest entry has a required field (non-null, non-empty).
+ * @task T4527
+ */
+export declare function checkManifestFieldPresent(entry: Record<string, unknown>, fieldName: string): boolean;
+/**
+ * Check if manifest field has expected type.
+ * @task T4527
+ */
+export declare function checkManifestFieldType(entry: Record<string, unknown>, fieldName: string, expectedType: 'string' | 'array' | 'number' | 'boolean' | 'object'): boolean;
+/**
+ * Check if key_findings array has valid count (3-7).
+ * @task T4527
+ */
+export declare function checkKeyFindingsCount(entry: Record<string, unknown>): boolean;
+/**
+ * Check if status is valid enum value.
+ * @task T4527
+ */
+export declare function checkStatusValid(entry: Record<string, unknown>): boolean;
+/**
+ * Check if agent_type matches expected value.
+ * @task T4527
+ */
+export declare function checkAgentType(entry: Record<string, unknown>, expectedType: string): boolean;
+/**
+ * Check if linked_tasks array contains required task IDs.
+ * @task T4527
+ */
+export declare function checkLinkedTasksPresent(entry: Record<string, unknown>, requiredIds: string[]): boolean;
+/**
+ * Check if file contains @task provenance tag.
+ * @task T4527
+ */
+export declare function checkProvenanceTags(filePath: string, taskId?: string): boolean;
+/**
+ * Validate common manifest requirements across all protocols.
+ * @task T4527
+ */
+export declare function validateCommonManifestRequirements(entry: Record<string, unknown>, _protocolType?: string): ProtocolValidationResult;
+//# sourceMappingURL=protocol-common.d.ts.map

package/dist/validation/protocol-common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol-common.d.ts","sourceRoot":"","sources":["../../src/validation/protocol-common.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,iBAAiB,EAAE,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;CACf;AAMD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAUT;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,OAAO,CAYxF;AAoBD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,OAAO,CASzF;AAMD;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,EAAE,MAAM,GAChB,OAAO,CAGT;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,GACjE,OAAO,CAkBT;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAI7E;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAIxE;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAE5F;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,WAAW,EAAE,MAAM,EAAE,GACpB,OAAO,CAIT;AAMD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAY9E;AAMD;;;GAGG;AACH,wBAAgB,kCAAkC,CAChD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,aAAa,CAAC,EAAE,MAAM,GACrB,wBAAwB,CAwE1B"}

package/dist/validation/protocols/consensus.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Consensus protocol validation.
+ * @task T4537
+ * @epic T4454
+ */
+interface ValidationResult {
+    valid: boolean;
+    violations: Array<{
+        code: string;
+        severity: string;
+        message: string;
+    }>;
+    score: number;
+    protocol: string;
+    taskId: string;
+}
+/** Validate consensus protocol for a task. */
+export declare function validateConsensusTask(taskId: string, opts: {
+    strict?: boolean;
+    votingMatrixFile?: string;
+}): Promise<ValidationResult>;
+/** Validate consensus protocol from manifest file. */
+export declare function checkConsensusManifest(manifestFile: string, opts: {
+    strict?: boolean;
+    votingMatrixFile?: string;
+}): Promise<ValidationResult>;
+export {};
+//# sourceMappingURL=consensus.d.ts.map

package/dist/validation/protocols/consensus.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consensus.d.ts","sourceRoot":"","sources":["../../../src/validation/protocols/consensus.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,UAAU,gBAAgB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,8CAA8C;AAC9C,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,gBAAgB,CAAC,CA8C3B;AAED,sDAAsD;AACtD,wBAAsB,sBAAsB,CAC1C,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,gBAAgB,CAAC,CAO3B"}

package/dist/validation/protocols/contribution.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Contribution protocol validation.
+ * @task T4537
+ * @epic T4454
+ */
+interface ValidationResult {
+    valid: boolean;
+    violations: Array<{
+        code: string;
+        severity: string;
+        message: string;
+    }>;
+    score: number;
+    protocol: string;
+    taskId: string;
+}
+/** Validate contribution protocol for a task. */
+export declare function validateContributionTask(taskId: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+/** Validate contribution protocol from manifest file. */
+export declare function checkContributionManifest(manifestFile: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+export {};
+//# sourceMappingURL=contribution.d.ts.map

package/dist/validation/protocols/contribution.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contribution.d.ts","sourceRoot":"","sources":["../../../src/validation/protocols/contribution.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,UAAU,gBAAgB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,iDAAiD;AACjD,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAiC3B;AAED,yDAAyD;AACzD,wBAAsB,yBAAyB,CAC7C,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAO3B"}

package/dist/validation/protocols/decomposition.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Decomposition protocol validation.
+ * @task T4537
+ * @epic T4454
+ */
+interface ValidationResult {
+    valid: boolean;
+    violations: Array<{
+        code: string;
+        severity: string;
+        message: string;
+    }>;
+    score: number;
+    protocol: string;
+    taskId: string;
+}
+/** Validate decomposition protocol for a task. */
+export declare function validateDecompositionTask(taskId: string, opts: {
+    strict?: boolean;
+    epicId?: string;
+}): Promise<ValidationResult>;
+/** Validate decomposition protocol from manifest file. */
+export declare function checkDecompositionManifest(manifestFile: string, opts: {
+    strict?: boolean;
+    epicId?: string;
+}): Promise<ValidationResult>;
+export {};
+//# sourceMappingURL=decomposition.d.ts.map

package/dist/validation/protocols/decomposition.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"decomposition.d.ts","sourceRoot":"","sources":["../../../src/validation/protocols/decomposition.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,UAAU,gBAAgB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,kDAAkD;AAClD,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAAC,gBAAgB,CAAC,CAiC3B;AAED,0DAA0D;AAC1D,wBAAsB,0BAA0B,CAC9C,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C,OAAO,CAAC,gBAAgB,CAAC,CAO3B"}

package/dist/validation/protocols/implementation.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Implementation protocol validation.
+ * @task T4537
+ * @epic T4454
+ */
+interface ValidationResult {
+    valid: boolean;
+    violations: Array<{
+        code: string;
+        severity: string;
+        message: string;
+    }>;
+    score: number;
+    protocol: string;
+    taskId: string;
+}
+/** Validate implementation protocol for a task. */
+export declare function validateImplementationTask(taskId: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+/** Validate implementation protocol from manifest file. */
+export declare function checkImplementationManifest(manifestFile: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+export {};
+//# sourceMappingURL=implementation.d.ts.map

package/dist/validation/protocols/implementation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"implementation.d.ts","sourceRoot":"","sources":["../../../src/validation/protocols/implementation.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAOH,UAAU,gBAAgB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,mDAAmD;AACnD,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAiC3B;AAED,2DAA2D;AAC3D,wBAAsB,2BAA2B,CAC/C,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAO3B"}

package/dist/validation/protocols/release-protocol.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Release protocol validation.
+ * IVTR Stage: R (Release)
+ * @task T4804
+ * @epic T4798
+ */
+interface ValidationResult {
+    valid: boolean;
+    violations: Array<{
+        code: string;
+        severity: string;
+        message: string;
+    }>;
+    score: number;
+    protocol: string;
+    taskId: string;
+}
+/** Validate release protocol for a task. */
+export declare function validateReleaseTask(taskId: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+/** Validate release protocol from manifest file. */
+export declare function checkReleaseManifest(manifestFile: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+export {};
+//# sourceMappingURL=release-protocol.d.ts.map

package/dist/validation/protocols/release-protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-protocol.d.ts","sourceRoot":"","sources":["../../../src/validation/protocols/release-protocol.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAOH,UAAU,gBAAgB;IACxB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD,4CAA4C;AAC5C,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAiC3B;AAED,oDAAoD;AACpD,wBAAsB,oBAAoB,CACxC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACzB,OAAO,CAAC,gBAAgB,CAAC,CAO3B"}

package/dist/validation/protocols/research.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Research protocol validation.
+ * @task T4804
+ * @epic T4798
+ */
+interface ValidationResult {
+    valid: boolean;
+    violations: Array<{
+        code: string;
+        severity: string;
+        message: string;
+    }>;
+    score: number;
+    protocol: string;
+    taskId: string;
+}
+/** Validate research protocol for a task. */
+export declare function validateResearchTask(taskId: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+/** Validate research protocol from manifest file. */
+export declare function checkResearchManifest(manifestFile: string, opts: {
+    strict?: boolean;
+}): Promise<ValidationResult>;
+export {};
+//# sourceMappingURL=research.d.ts.map