@dzhechkov/harness-core 0.3.100 → 0.3.102

package/src/publish.ts

@@ -9,6 +9,8 @@ import { existsSync, readFileSync, writeFileSync, readdirSync } from 'node:fs';
 import { join } from 'node:path';
 import { execSync } from 'node:child_process';
 
+import { claimCheck } from './claim-check.js';
+
 /** Result for a single package publish attempt. */
 export interface PublishResult {
   readonly name: string;
@@ -16,6 +18,12 @@ export interface PublishResult {
   readonly newVersion: string;
   readonly status: 'published' | 'skipped' | 'error';
   readonly error?: string | undefined;
+  /**
+   * Pre-publish claim-check summary for this package's README, present only when the
+   * opt-in `claimCheck` gate ran (`'warn'`/`'block'`). Additive: absent by default so an
+   * unmodified `publishPackages` call is byte-compatible with pre-gate behavior.
+   */
+  readonly claimCheck?: { readonly findings: number; readonly high: number } | undefined;
 }
 
 /** Full publish report. */
@@ -203,6 +211,14 @@ export function publishPackages(
     dryRun?: boolean | undefined;
     filter?: string[] | undefined;
     bumpOnly?: boolean | undefined;
+    /**
+     * Pre-publish claim-check gate over each package's README (ADR-001). Default `'warn'`:
+     * records the finding count on the result but NEVER changes publish status — additive, so the
+     * existing publish path and its tests are unaffected. `'error'` flips ONLY a package with a
+     * `high` finding to `status: 'error'`, leaving the rest of the batch unaffected. `'off'`
+     * disables the gate entirely (no `claimCheck` field is emitted).
+     */
+    claimGate?: 'off' | 'warn' | 'error' | undefined;
   } = {},
 ): PublishReport {
   const packages = discoverPackages(monorepoRoot);
@@ -238,8 +254,41 @@ export function publishPackages(
       continue;
     }
 
+    // Pre-publish claim-check gate. Default `'warn'` per ADR-001: publishing SURFACES a
+    // README's untagged claims by default, but `'warn'` NEVER changes publish status, so the
+    // existing publish path is unaffected. `'error'` fails only THIS package when it carries a
+    // high-severity claim; `'off'` disables the gate entirely (no `claimCheck` field emitted).
+    // Runs BEFORE the dry-run short-circuit so `--dry-run` previews surface what a live publish
+    // would. Reading the README never blocks the gate itself — unreadable ⇒ "no findings".
+    const claimGate = opts.claimGate ?? 'warn';
+    let claimCheckSummary: { findings: number; high: number } | undefined;
+    if (claimGate !== 'off') {
+      const readmePath = join(pkg.dir, 'README.md');
+      if (existsSync(readmePath)) {
+        try {
+          const text = readFileSync(readmePath, 'utf-8');
+          const result = claimCheck(text);
+          const high = result.findings.filter((f) => f.severity === 'high').length;
+          claimCheckSummary = { findings: result.findings.length, high };
+          if (claimGate === 'error' && high > 0) {
+            results.push({
+              name: pkg.name,
+              oldVersion,
+              newVersion,
+              status: 'error',
+              error: `claim-check: ${high} high-severity claim(s) in README.md — tag MEASURED with a reproducer or CLAIMED/SYNTHETIC before publishing.`,
+              claimCheck: claimCheckSummary,
+            });
+            continue;
+          }
+        } catch {
+          /* unreadable README never blocks the gate itself */
+        }
+      }
+    }
+
     if (opts.dryRun) {
-      results.push({ name: pkg.name, oldVersion, newVersion, status: 'skipped' });
+      results.push({ name: pkg.name, oldVersion, newVersion, status: 'skipped', claimCheck: claimCheckSummary });
       continue;
     }
 
@@ -254,7 +303,7 @@ export function publishPackages(
       originalReadme = syncReadmeVersion(pkg.dir, oldVersion, newVersion);
 
       if (opts.bumpOnly) {
-        results.push({ name: pkg.name, oldVersion, newVersion, status: 'published' });
+        results.push({ name: pkg.name, oldVersion, newVersion, status: 'published', claimCheck: claimCheckSummary });
         continue;
       }
 
@@ -272,7 +321,7 @@ export function publishPackages(
         env: { ...process.env },
       });
 
-      results.push({ name: pkg.name, oldVersion, newVersion, status: 'published' });
+      results.push({ name: pkg.name, oldVersion, newVersion, status: 'published', claimCheck: claimCheckSummary });
     } catch (err) {
       // The version was written BEFORE build+publish; on any failure restore the
       // original package.json (and README, if we rewrote its version) so a failed
@@ -288,6 +337,7 @@ export function publishPackages(
         newVersion,
         status: 'error',
         error: err instanceof Error ? err.message : String(err),
+        claimCheck: claimCheckSummary,
       });
     }
   }