@decantr/verifier 1.1.1 → 2.1.0

package/README.md

@@ -16,7 +16,9 @@ npm install @decantr/verifier
 - `auditProject()` for project-level Decantr audits
 - `auditBuiltDist()` for built-output runtime verification against emitted HTML, assets, and route hints
 - `critiqueFile()` for file-level review against compiled review-pack contracts
-- schema-backed report types for project audits, Project Health, file critiques, and showcase verification
+- `createContractAssertions()` for explicit route, shell, accessibility, context, and design-token assertions derived from Essence/context
+- `createEvidenceBundle()` for privacy-redacted local evidence artifacts used by AI repair loops and CI
+- schema-backed report types for project audits, Project Health, Evidence Bundles, Workspace Health, file critiques, and showcase verification
 - `ProjectHealthReport`, `ProjectHealthFinding`, and `ProjectHealthRemediation` types for the CLI's end-user health surface
 - published verifier report schemas are exercised by AJV-backed round-trip tests against real audit, critique, and shortlist-report outputs
 - project audits include runtime evidence when a built `dist/` output is present:
@@ -31,9 +33,16 @@ npm install @decantr/verifier
 ## Example
 
 ```ts
-import { auditProject, critiqueFile, type ProjectHealthReport } from '@decantr/verifier';
+import {
+  auditProject,
+  createContractAssertions,
+  createEvidenceBundle,
+  critiqueFile,
+  type ProjectHealthReport,
+} from '@decantr/verifier';
 
 const audit = await auditProject(process.cwd());
+const assertions = createContractAssertions(process.cwd(), audit);
 const critique = await critiqueFile('./src/pages/overview.tsx', process.cwd());
 
 function isBlocking(report: ProjectHealthReport) {
@@ -46,12 +55,14 @@ function isBlocking(report: ProjectHealthReport) {
 - `@decantr/verifier/schema/verification-report.common.v1.json`
 - `@decantr/verifier/schema/project-audit-report.v1.json`
 - `@decantr/verifier/schema/project-health-report.v1.json`
+- `@decantr/verifier/schema/evidence-bundle.v1.json`
+- `@decantr/verifier/schema/workspace-health-report.v1.json`
 - `@decantr/verifier/schema/file-critique-report.v1.json`
 - `@decantr/verifier/schema/showcase-shortlist-report.v1.json`
 
 ## Compatibility
 
-`@decantr/verifier` is stable in the `1.x` line for the documented verifier APIs and published report-schema exports.
+`@decantr/verifier` is stable in the `2.x` line for the documented verifier APIs and published report-schema exports.
 
 - new checks and additive report fields may appear in compatible releases
 - breaking report-shape or exported API changes require a major version

package/dist/index.d.ts

@@ -54,7 +54,7 @@ declare function emptyRuntimeAudit(failures?: string[]): RuntimeAudit;
 declare function auditBuiltDist(projectRoot: string, options?: BuiltDistAuditOptions): Promise<RuntimeAudit>;
 
 /**
- * v2.1 Tier C4 — Experiential interaction verifier.
+ * Experiential interaction verifier.
  *
  * Scans generated source files for evidence that declared `interactions[]`
  * (from pattern.v2.json) are actually implemented. This is the enforcement
@@ -119,12 +119,14 @@ declare const VERIFICATION_SCHEMA_URLS: {
     readonly common: "https://decantr.ai/schemas/verification-report.common.v1.json";
     readonly projectAudit: "https://decantr.ai/schemas/project-audit-report.v1.json";
     readonly projectHealth: "https://decantr.ai/schemas/project-health-report.v1.json";
+    readonly evidenceBundle: "https://decantr.ai/schemas/evidence-bundle.v1.json";
+    readonly workspaceHealth: "https://decantr.ai/schemas/workspace-health-report.v1.json";
     readonly fileCritique: "https://decantr.ai/schemas/file-critique-report.v1.json";
     readonly showcaseShortlist: "https://decantr.ai/schemas/showcase-shortlist-report.v1.json";
 };
 type VerificationSeverity = 'error' | 'warn' | 'info';
 type ProjectHealthStatus = 'healthy' | 'warning' | 'error';
-type ProjectHealthFindingSource = 'audit' | 'check' | 'brownfield' | 'runtime' | 'pack' | 'interaction';
+type ProjectHealthFindingSource = 'audit' | 'assertion' | 'browser' | 'check' | 'brownfield' | 'design-token' | 'runtime' | 'pack' | 'interaction';
 interface VerificationFinding {
     id: string;
     category: string;
@@ -248,6 +250,98 @@ interface ProjectHealthReport {
     };
     findings: ProjectHealthFinding[];
 }
+type ContractAssertionCategory = 'route' | 'shell' | 'region' | 'interaction' | 'accessibility' | 'design-token' | 'context' | 'policy';
+interface ContractAssertion {
+    id: string;
+    category: ContractAssertionCategory;
+    status: 'passed' | 'failed' | 'not_applicable';
+    severity: VerificationSeverity;
+    message: string;
+    evidence: string[];
+    target?: string;
+    rule: string;
+    suggestedFix?: string;
+}
+interface EvidenceProvenanceEntry {
+    path: string;
+    present: boolean;
+    hash: string | null;
+    generatedAt: string | null;
+}
+interface EvidenceBundle {
+    $schema: string;
+    generatedAt: string;
+    project: {
+        id: string;
+        rootLabel: string;
+    };
+    toolchain: {
+        verifierVersion: string | null;
+    };
+    privacy: {
+        localOnly: boolean;
+        redactedFields: string[];
+        screenshotsLocalOnly: boolean;
+    };
+    health: {
+        status: ProjectHealthStatus;
+        score: number;
+        errorCount: number;
+        warnCount: number;
+        infoCount: number;
+        findingCount: number;
+    };
+    provenance: {
+        essence: EvidenceProvenanceEntry;
+        packManifest: EvidenceProvenanceEntry;
+        reviewPack: EvidenceProvenanceEntry;
+        workspaceConfig?: EvidenceProvenanceEntry;
+        designTokens?: EvidenceProvenanceEntry;
+    };
+    assertions: ContractAssertion[];
+    findings: Array<{
+        id: string;
+        source: ProjectHealthFindingSource;
+        category: string;
+        severity: VerificationSeverity;
+        message: string;
+        evidence: string[];
+        target?: string;
+        rule?: string;
+        suggestedFix?: string;
+        remediationSummary: string;
+        commands: string[];
+        promptCommand: string;
+    }>;
+    browser?: {
+        enabled: boolean;
+        status: 'not_requested' | 'unavailable' | 'passed' | 'failed';
+        baseUrl: string | null;
+        screenshots: string[];
+        findings: string[];
+    };
+    designTokens?: {
+        source: string;
+        status: 'not_requested' | 'passed' | 'warning' | 'error';
+        compared: number;
+        matched: number;
+        missing: string[];
+    };
+}
+interface EvidenceBundleInput {
+    projectRoot: string;
+    report: ProjectHealthReport;
+    audit?: ProjectAuditReport | null;
+    assertions?: ContractAssertion[];
+    verifierVersion?: string | null;
+    workspaceConfigPath?: string | null;
+    designTokensPath?: string | null;
+    browser?: EvidenceBundle['browser'];
+    designTokens?: EvidenceBundle['designTokens'];
+}
+declare const EVIDENCE_BUNDLE_SCHEMA_URL = "https://decantr.ai/schemas/evidence-bundle.v1.json";
+declare function createContractAssertions(projectRoot: string, audit?: ProjectAuditReport | null): ContractAssertion[];
+declare function createEvidenceBundle(input: EvidenceBundleInput): EvidenceBundle;
 interface FileCritiqueReport {
     $schema: string;
     file: string;
@@ -362,4 +456,4 @@ declare function auditProject(projectRoot: string): Promise<ProjectAuditReport>;
 declare function critiqueSource({ filePath, code, reviewPack, packManifest, treatmentsCss, }: CritiqueSourceInput): FileCritiqueReport;
 declare function critiqueFile(filePath: string, projectRoot: string): Promise<FileCritiqueReport>;
 
-export { type BuiltDistAuditOptions, type CritiqueSourceInput, type FileCritiqueReport, INTERACTION_SIGNALS, type InteractionMissingFinding, type InteractionRequirement, type InteractionSignal, type PackManifest, type ProjectAuditReport, type ProjectHealthFinding, type ProjectHealthFindingSource, type ProjectHealthPackSummary, type ProjectHealthRemediation, type ProjectHealthReport, type ProjectHealthRouteSummary, type ProjectHealthStatus, type RuntimeAudit, type ShowcaseShortlistVerificationEntry, type ShowcaseShortlistVerificationReport, VERIFICATION_SCHEMA_URLS, type VerificationFinding, type VerificationScore, type VerificationSeverity, auditBuiltDist, auditProject, critiqueFile, critiqueSource, emptyRuntimeAudit, extractRouteHintsFromEssence, listKnownInteractions, verifyInteractionsInSource };
+export { type BuiltDistAuditOptions, type ContractAssertion, type ContractAssertionCategory, type CritiqueSourceInput, EVIDENCE_BUNDLE_SCHEMA_URL, type EvidenceBundle, type EvidenceBundleInput, type EvidenceProvenanceEntry, type FileCritiqueReport, INTERACTION_SIGNALS, type InteractionMissingFinding, type InteractionRequirement, type InteractionSignal, type PackManifest, type ProjectAuditReport, type ProjectHealthFinding, type ProjectHealthFindingSource, type ProjectHealthPackSummary, type ProjectHealthRemediation, type ProjectHealthReport, type ProjectHealthRouteSummary, type ProjectHealthStatus, type RuntimeAudit, type ShowcaseShortlistVerificationEntry, type ShowcaseShortlistVerificationReport, VERIFICATION_SCHEMA_URLS, type VerificationFinding, type VerificationScore, type VerificationSeverity, auditBuiltDist, auditProject, createContractAssertions, createEvidenceBundle, critiqueFile, critiqueSource, emptyRuntimeAudit, extractRouteHintsFromEssence, listKnownInteractions, verifyInteractionsInSource };