@enwithai/product-check 0.1.0 → 0.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/ATTRIBUTION.md +6 -6
- package/CHANGELOG.md +66 -0
- package/NOTICE.md +5 -3
- package/README.md +34 -19
- package/SECURITY.md +5 -1
- package/dashboard/assurance.css +71 -0
- package/dashboard/assurance.js +21 -0
- package/dashboard/dashboard.css +6 -0
- package/dist/assurance/adapters.d.ts +32 -0
- package/dist/assurance/adapters.js +76 -0
- package/dist/assurance/approvals.d.ts +34 -0
- package/dist/assurance/approvals.js +133 -0
- package/dist/assurance/cli.d.ts +13 -0
- package/dist/assurance/cli.js +863 -0
- package/dist/assurance/dashboard.d.ts +18 -0
- package/dist/assurance/dashboard.js +267 -0
- package/dist/assurance/diff.d.ts +20 -0
- package/dist/assurance/diff.js +99 -0
- package/dist/assurance/evidence-log.d.ts +20 -0
- package/dist/assurance/evidence-log.js +100 -0
- package/dist/assurance/fix-packets.d.ts +12 -0
- package/dist/assurance/fix-packets.js +178 -0
- package/dist/assurance/gate.d.ts +37 -0
- package/dist/assurance/gate.js +324 -0
- package/dist/assurance/lanes.d.ts +61 -0
- package/dist/assurance/lanes.js +380 -0
- package/dist/assurance/policy.d.ts +10 -0
- package/dist/assurance/policy.js +85 -0
- package/dist/assurance/proof.d.ts +35 -0
- package/dist/assurance/proof.js +146 -0
- package/dist/assurance/register.d.ts +41 -0
- package/dist/assurance/register.js +480 -0
- package/dist/assurance/render-md.d.ts +17 -0
- package/dist/assurance/render-md.js +212 -0
- package/dist/assurance/repo-state.d.ts +15 -0
- package/dist/assurance/repo-state.js +79 -0
- package/dist/assurance/review.d.ts +52 -0
- package/dist/assurance/review.js +408 -0
- package/dist/assurance/risk.d.ts +21 -0
- package/dist/assurance/risk.js +184 -0
- package/dist/assurance/types.d.ts +573 -0
- package/dist/assurance/types.js +6 -0
- package/dist/assurance/util.d.ts +24 -0
- package/dist/assurance/util.js +89 -0
- package/dist/assurance/verification.d.ts +30 -0
- package/dist/assurance/verification.js +212 -0
- package/dist/assurance/verify.d.ts +26 -0
- package/dist/assurance/verify.js +304 -0
- package/dist/blueprint/build.d.ts +3 -1
- package/dist/blueprint/build.js +41 -5
- package/dist/cli/run.js +103 -5
- package/dist/contract/contract.d.ts +4 -0
- package/dist/contract/contract.js +16 -0
- package/dist/dashboard/render.d.ts +5 -0
- package/dist/dashboard/render.js +107 -3
- package/dist/discovery/pops.d.ts +2 -0
- package/dist/discovery/pops.js +7 -5
- package/dist/exec/process.d.ts +27 -0
- package/dist/exec/process.js +175 -0
- package/dist/importers/operational.d.ts +56 -0
- package/dist/importers/operational.js +217 -0
- package/dist/importers/reports.d.ts +24 -0
- package/dist/importers/reports.js +37 -1
- package/dist/inspectors/source/surface.d.ts +30 -0
- package/dist/inspectors/source/surface.js +529 -0
- package/dist/parse/yaml.d.ts +4 -0
- package/dist/parse/yaml.js +39 -0
- package/dist/reporting/markdown.d.ts +1 -0
- package/dist/reporting/markdown.js +18 -1
- package/dist/reporting/spec-markdown.d.ts +9 -0
- package/dist/reporting/spec-markdown.js +144 -0
- package/dist/run.d.ts +2 -0
- package/dist/run.js +52 -2
- package/dist/schema/registry.js +10 -0
- package/dist/scoring/score.js +1 -1
- package/dist/spec/build.d.ts +28 -0
- package/dist/spec/build.js +278 -0
- package/dist/types.d.ts +78 -2
- package/dist/types.js +6 -1
- package/dist/validation/catalog.d.ts +1 -1
- package/dist/validation/catalog.js +125 -2
- package/dist/validation/context.d.ts +6 -1
- package/dist/validation/import-evaluators.js +37 -3
- package/dist/validation/integrity.js +4 -0
- package/dist/validation/operational-evaluators.d.ts +3 -0
- package/dist/validation/operational-evaluators.js +153 -0
- package/dist/validation/source-evaluators.js +1 -1
- package/package.json +4 -1
- package/schemas/approval.schema.json +98 -0
- package/schemas/as-built-spec.schema.json +356 -0
- package/schemas/assurance-common.schema.json +291 -0
- package/schemas/assurance-policy.schema.json +185 -0
- package/schemas/blueprint.schema.json +3 -0
- package/schemas/change-review.schema.json +711 -0
- package/schemas/closure-register.schema.json +499 -0
- package/schemas/evidence-record.schema.json +94 -0
- package/schemas/fix-packet.schema.json +272 -0
- package/schemas/release-gate.schema.json +308 -0
- package/schemas/reviewer-findings.schema.json +49 -0
- package/schemas/scan-contract.schema.json +20 -0
- package/schemas/scorecard.schema.json +1 -1
- package/schemas/verification-run.schema.json +199 -0
|
@@ -0,0 +1,13 @@
|
|
|
1
|
+
/** I/O seam (same as the main CLI). */
|
|
2
|
+
export interface AssuranceIO {
|
|
3
|
+
stdout: (text: string) => void;
|
|
4
|
+
stderr: (text: string) => void;
|
|
5
|
+
cwd: string;
|
|
6
|
+
now?: () => Date;
|
|
7
|
+
}
|
|
8
|
+
export declare const ASSURANCE_COMMANDS: readonly ["proof", "review", "register", "transition", "fix", "verify", "keygen", "approve", "close", "accept-risk", "reject", "learn", "fix-packets", "gate", "assure"];
|
|
9
|
+
export declare const ASSURANCE_HELP = "Vibe-code review and verified closure (CT3 v3.2). Workspace: --workspace <dir> (default .product-check)\n product-check run --repo . --out-dir .product-check VC-P0 baseline scan (unchanged; never executes code)\n product-check proof --repo . --policy <p.json> [--allow-exec]\n VC-P1 author-side proof: runs the policy's required checks at HEAD\n product-check review --repo . --base <rev> [--head <rev>] [--change <ref>] [--policy <p.json>]\n [--impact-check f] [--spec-check f] [--outcome-check f] [--reviewer-findings f] [--diff f]\n VC-P2/P3 layered change review, independent verification, risk routing\n product-check register [--results f] [--repo .] create/sync the closure register (VC-P2 verification)\n product-check transition --finding F-001 --to ACKNOWLEDGED|IN_PROGRESS|DEFERRED|OPEN --reason \"\u2026\" --actor <id>\n product-check fix --finding F-001 --sha <commit> --actor <id> [--actor-type agent|human] [--repro-cmd \"\u2026\"]\n record a proposed fix \u2192 RETEST_REQUIRED (never fixed by itself)\n product-check verify --finding F-001 --head <sha> [--allow-exec] [--policy p] [--contract c] [--test-results f]\n VC-P5 targeted + regression verification at the exact fix commit\n product-check keygen --approver <id> --out-dir <dir> Ed25519 key pair for a human approver\n product-check approve --scope change:<ref>|closure:F-001|risk-acceptance:F-001|false-positive:F-001|continue:F-001|release:<name>\n --sha <commit> --approver <id> --key <private.pem> [--decision approve|reject] [--comment \"\u2026\"]\n product-check close --finding F-001 --evidence VR-001 --approver <id> --policy <p.json>\n product-check accept-risk --finding F-002 --owner <id> --risk-scope \"\u2026\" --rationale \"\u2026\" --compensating \"\u2026\"\n --review-date YYYY-MM-DD --expires YYYY-MM-DD --closure-condition \"\u2026\" --policy <p.json>\n product-check reject --finding F-003 --reason \"\u2026\" --actor <id> [--policy p] false positive\n product-check learn --finding F-001 --cmd \"node --test test/x.test.mjs\" --origin escaped-incident|regressed-finding|verified-fix\n product-check fix-packets | gate | assure [--from <results.json>] [--policy p] [--fail-on NO_GO,UNKNOWN]\n product-check dashboard --from <results.json> \u00B7 product-check blueprint --from <results.json>\nCommands run only with --allow-exec, only from the policy/fix/corpus, as argv without a shell.";
|
|
10
|
+
/** Splits a command string into argv (quotes respected; no shell expansion of any kind). */
|
|
11
|
+
export declare function splitCommand(text: string): string[];
|
|
12
|
+
/** Runs one assurance command. */
|
|
13
|
+
export declare function runAssurance(command: string, argv: string[], io: AssuranceIO): Promise<number>;
|