@evolith/core-domain 1.0.0

package/dist/application/validators/evaluators/handlers/dependency-rule.handler.js

@@ -0,0 +1,163 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DependencyRuleHandler = void 0;
+const path = __importStar(require("path"));
+class DependencyRuleHandler {
+    constructor(fs) {
+        this.fs = fs;
+    }
+    canHandle(rule) {
+        return rule.category === 'version-pinning' || rule.id.startsWith('DEP-0') || rule.id.startsWith('DEP-1');
+    }
+    async evaluate(rule, ctx) {
+        if (rule.id === 'DEP-04')
+            return this.evalLockFile(rule, ctx);
+        if (rule.id === 'DEP-05')
+            return this.evalCiInstall(rule, ctx);
+        if (rule.id === 'DEP-06' || rule.id === 'DEP-07')
+            return this.evalCiAudit(rule, ctx);
+        if (rule.id === 'DEP-09')
+            return this.evalDependabot(rule, ctx);
+        if (rule.category === 'version-pinning')
+            return this.evalVersionPinning(rule, ctx);
+        return { rule, result: 'skipped', message: 'Unhandled DEP rule' };
+    }
+    async evalVersionPinning(rule, ctx) {
+        const violations = [];
+        const targets = rule.id === 'DEP-10'
+            ? await this.findWorkspacePackageJsons(ctx.satellitePath)
+            : [path.join(ctx.satellitePath, 'package.json')];
+        for (const pkgPath of targets) {
+            if (!await this.fs.exists(pkgPath))
+                continue;
+            const raw = await this.fs.readJson(pkgPath);
+            const depsGroups = ['dependencies', 'devDependencies', 'peerDependencies', 'optionalDependencies'];
+            for (const group of depsGroups) {
+                const deps = raw[group];
+                if (!deps)
+                    continue;
+                for (const [pkg, version] of Object.entries(deps)) {
+                    const v = String(version ?? '');
+                    if ((rule.id === 'DEP-01' && v.startsWith('^')) ||
+                        (rule.id === 'DEP-02' && v.startsWith('~')) ||
+                        (rule.id === 'DEP-03' && ['*', 'latest', 'x', 'X', ''].includes(v)) ||
+                        (rule.id === 'DEP-10' && (v.startsWith('^') || v.startsWith('~')))) {
+                        violations.push(`${path.basename(pkgPath)}#${group}.${pkg}=${v}`);
+                    }
+                }
+            }
+        }
+        if (violations.length > 0) {
+            return {
+                rule,
+                result: 'failed',
+                message: `Unpinned dependencies: ${violations.slice(0, 5).join(', ')}${violations.length > 5 ? ` (+${violations.length - 5} more)` : ''}`,
+            };
+        }
+        return { rule, result: 'passed' };
+    }
+    async evalLockFile(rule, ctx) {
+        const candidates = [
+            path.join(ctx.satellitePath, 'package-lock.json'),
+            path.join(ctx.corePath, 'package-lock.json'),
+        ];
+        for (const p of candidates) {
+            if (await this.fs.exists(p))
+                return { rule, result: 'passed' };
+        }
+        return { rule, result: 'failed', message: 'package-lock.json not found at project or workspace root' };
+    }
+    async evalCiInstall(rule, ctx) {
+        return this.evalCiWorkflowContains(rule, ctx, 'npm ci', 'CI workflow does not use "npm ci"');
+    }
+    async evalCiAudit(rule, ctx) {
+        return this.evalCiWorkflowContains(rule, ctx, 'npm audit', 'CI workflow does not run "npm audit"');
+    }
+    async evalDependabot(rule, ctx) {
+        const candidates = [
+            path.join(ctx.satellitePath, '.github', 'dependabot.yml'),
+            path.join(ctx.satellitePath, '.renovaterc.json'),
+            path.join(ctx.corePath, '.github', 'dependabot.yml'),
+        ];
+        for (const p of candidates) {
+            if (await this.fs.exists(p))
+                return { rule, result: 'passed' };
+        }
+        return { rule, result: 'failed', message: 'No .github/dependabot.yml or .renovaterc.json found' };
+    }
+    async evalCiWorkflowContains(rule, ctx, needle, failMsg) {
+        const workflowDir = path.join(ctx.satellitePath, '.github', 'workflows');
+        if (!await this.fs.exists(workflowDir)) {
+            return { rule, result: 'skipped', message: 'No .github/workflows directory found' };
+        }
+        const files = await this.fs.readdirNames(workflowDir);
+        for (const f of files) {
+            if (!f.endsWith('.yml') && !f.endsWith('.yaml'))
+                continue;
+            const content = await this.fs.readFile(path.join(workflowDir, f));
+            if (content.includes(needle))
+                return { rule, result: 'passed' };
+        }
+        return { rule, result: 'failed', message: failMsg };
+    }
+    async findWorkspacePackageJsons(rootPath) {
+        const rootPkg = path.join(rootPath, 'package.json');
+        const files = [];
+        if (await this.fs.exists(rootPkg)) {
+            files.push(rootPkg);
+            const raw = await this.fs.readJson(rootPkg);
+            const workspaces = raw['workspaces'];
+            const patterns = Array.isArray(workspaces)
+                ? workspaces
+                : (workspaces?.packages ?? []);
+            for (const pattern of patterns) {
+                const base = pattern.replace(/\/\*.*$/, '');
+                const wsBase = path.join(rootPath, base);
+                if (await this.fs.exists(wsBase)) {
+                    const entries = await this.fs.readdirNames(wsBase);
+                    for (const entry of entries) {
+                        const pkgPath = path.join(wsBase, entry, 'package.json');
+                        if (await this.fs.exists(pkgPath))
+                            files.push(pkgPath);
+                    }
+                }
+            }
+        }
+        return files.length > 0 ? files : [rootPkg];
+    }
+}
+exports.DependencyRuleHandler = DependencyRuleHandler;
+//# sourceMappingURL=dependency-rule.handler.js.map

package/dist/application/validators/evaluators/handlers/dependency-rule.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-rule.handler.js","sourceRoot":"","sources":["../../../../../src/application/validators/evaluators/handlers/dependency-rule.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAM7B,MAAa,qBAAqB;IAChC,YAA6B,EAAe;QAAf,OAAE,GAAF,EAAE,CAAa;IAAG,CAAC;IAEhD,SAAS,CAAC,IAAoB;QAC5B,OAAO,IAAI,CAAC,QAAQ,KAAK,iBAAiB,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC3G,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,GAAsB;QACzD,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC9D,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACrF,IAAI,IAAI,CAAC,EAAE,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChE,IAAI,IAAI,CAAC,QAAQ,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAEnF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IACpE,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,IAAoB,EAAE,GAAsB;QAC3E,MAAM,UAAU,GAAa,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,EAAE,KAAK,QAAQ;YAClC,CAAC,CAAC,MAAM,IAAI,CAAC,yBAAyB,CAAC,GAAG,CAAC,aAAa,CAAC;YACzD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC,CAAC;QAEnD,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;gBAAE,SAAS;YAE7C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAA4B,CAAC;YACvE,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,sBAAsB,CAAC,CAAC;YAEnG,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAuC,CAAC;gBAC9D,IAAI,CAAC,IAAI;oBAAE,SAAS;gBAEpB,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;oBAClD,MAAM,CAAC,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;oBAChC,IACE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;wBAC3C,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;wBAC3C,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;wBACnE,CAAC,IAAI,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAClE,CAAC;wBACD,UAAU,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC;oBACpE,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC1B,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,0BAA0B,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE;aAC1I,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,IAAoB,EAAE,GAAsB;QACrE,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,mBAAmB,CAAC;YACjD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,mBAAmB,CAAC;SAC7C,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,0DAA0D,EAAE,CAAC;IACzG,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,IAAoB,EAAE,GAAsB;QACtE,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,EAAE,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IAC/F,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,IAAoB,EAAE,GAAsB;QACpE,OAAO,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,sCAAsC,CAAC,CAAC;IACrG,CAAC;IAEO,KAAK,CAAC,cAAc,CAAC,IAAoB,EAAE,GAAsB;QACvE,MAAM,UAAU,GAAG;YACjB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,gBAAgB,CAAC;YACzD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,kBAAkB,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,gBAAgB,CAAC;SACrD,CAAC;QAEF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;YAC3B,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QACjE,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;IACpG,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAClC,IAAoB,EACpB,GAAsB,EACtB,MAAc,EACd,OAAe;QAEf,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,aAAa,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACzE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,sCAAsC,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,SAAS;YAC1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;YAClE,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;QAClE,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACtD,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,QAAgB;QACtD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;QACpD,MAAM,KAAK,GAAa,EAAE,CAAC;QAE3B,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,OAAO,CAA4B,CAAC;YACvE,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAmD,CAAC;YACvF,MAAM,QAAQ,GAAa,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC;gBAClD,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,CAAC,UAAU,EAAE,QAAQ,IAAI,EAAE,CAAC,CAAC;YAEjC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;gBAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;gBACzC,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;oBACnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;wBAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,CAAC,CAAC;wBACzD,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;4BAAE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;oBACzD,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC9C,CAAC;CACF;AA7ID,sDA6IC"}

package/dist/application/validators/evaluators/handlers/dependency-rule.handler.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/application/validators/evaluators/handlers/dependency-rule.handler.spec.js

@@ -0,0 +1,115 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const path = __importStar(require("path"));
+const dependency_rule_handler_1 = require("./dependency-rule.handler");
+const SAT = '/sat';
+const CORE = '/core';
+const ctx = { satellitePath: SAT, corePath: CORE };
+function fsMock(cfg = {}) {
+    const existing = new Set(cfg.existing ?? []);
+    return {
+        exists: jest.fn(async (p) => existing.has(p)),
+        readJson: jest.fn(async (p) => cfg.json?.[p] ?? {}),
+        readdirNames: jest.fn(async (p) => cfg.dirs?.[p] ?? []),
+        readFile: jest.fn(async (p) => cfg.files?.[p] ?? ''),
+    };
+}
+function rule(over) {
+    return { id: 'DEP-01', severity: 'MUST', category: 'version-pinning', title: 't', description: 'd', blocking: true, sourceFile: 's', ...over };
+}
+describe('DependencyRuleHandler', () => {
+    it('canHandle matches version-pinning and DEP ids', () => {
+        const h = new dependency_rule_handler_1.DependencyRuleHandler(fsMock());
+        expect(h.canHandle(rule({ category: 'version-pinning' }))).toBe(true);
+        expect(h.canHandle(rule({ id: 'DEP-09', category: 'x' }))).toBe(true);
+        expect(h.canHandle(rule({ id: 'OTHER', category: 'x' }))).toBe(false);
+    });
+    describe('version pinning', () => {
+        const pkg = path.join(SAT, 'package.json');
+        it('DEP-01 fails on caret ranges', async () => {
+            const h = new dependency_rule_handler_1.DependencyRuleHandler(fsMock({ existing: [pkg], json: { [pkg]: { dependencies: { a: '^1.0.0' } } } }));
+            const res = await h.evaluate(rule({ id: 'DEP-01' }), ctx);
+            expect(res.result).toBe('failed');
+        });
+        it('DEP-03 fails on latest/wildcards', async () => {
+            const h = new dependency_rule_handler_1.DependencyRuleHandler(fsMock({ existing: [pkg], json: { [pkg]: { devDependencies: { b: 'latest' } } } }));
+            const res = await h.evaluate(rule({ id: 'DEP-03' }), ctx);
+            expect(res.result).toBe('failed');
+        });
+        it('passes when all versions are pinned', async () => {
+            const h = new dependency_rule_handler_1.DependencyRuleHandler(fsMock({ existing: [pkg], json: { [pkg]: { dependencies: { a: '1.0.0' } } } }));
+            const res = await h.evaluate(rule({ id: 'DEP-01' }), ctx);
+            expect(res.result).toBe('passed');
+        });
+        it('DEP-10 scans workspace package.json files', async () => {
+            const root = path.join(SAT, 'package.json');
+            const wsBase = path.join(SAT, 'packages');
+            const wsPkg = path.join(wsBase, 'a', 'package.json');
+            const h = new dependency_rule_handler_1.DependencyRuleHandler(fsMock({
+                existing: [root, wsBase, wsPkg],
+                dirs: { [wsBase]: ['a'] },
+                json: { [root]: { workspaces: ['packages/*'] }, [wsPkg]: { dependencies: { x: '^2.0.0' } } },
+            }));
+            const res = await h.evaluate(rule({ id: 'DEP-10' }), ctx);
+            expect(res.result).toBe('failed');
+        });
+    });
+    it('DEP-04 lock file present passes, absent fails', async () => {
+        const lock = path.join(SAT, 'package-lock.json');
+        expect((await new dependency_rule_handler_1.DependencyRuleHandler(fsMock({ existing: [lock] })).evaluate(rule({ id: 'DEP-04' }), ctx)).result).toBe('passed');
+        expect((await new dependency_rule_handler_1.DependencyRuleHandler(fsMock()).evaluate(rule({ id: 'DEP-04' }), ctx)).result).toBe('failed');
+    });
+    it('DEP-05 checks CI workflow for npm ci', async () => {
+        const dir = path.join(SAT, '.github', 'workflows');
+        const wf = path.join(dir, 'ci.yml');
+        const pass = new dependency_rule_handler_1.DependencyRuleHandler(fsMock({ existing: [dir], dirs: { [dir]: ['ci.yml'] }, files: { [wf]: 'run: npm ci' } }));
+        expect((await pass.evaluate(rule({ id: 'DEP-05' }), ctx)).result).toBe('passed');
+        const fail = new dependency_rule_handler_1.DependencyRuleHandler(fsMock({ existing: [dir], dirs: { [dir]: ['ci.yml'] }, files: { [wf]: 'run: npm install' } }));
+        expect((await fail.evaluate(rule({ id: 'DEP-05' }), ctx)).result).toBe('failed');
+        const skip = new dependency_rule_handler_1.DependencyRuleHandler(fsMock());
+        expect((await skip.evaluate(rule({ id: 'DEP-05' }), ctx)).result).toBe('skipped');
+    });
+    it('DEP-09 dependabot present passes, absent fails', async () => {
+        const db = path.join(SAT, '.github', 'dependabot.yml');
+        expect((await new dependency_rule_handler_1.DependencyRuleHandler(fsMock({ existing: [db] })).evaluate(rule({ id: 'DEP-09' }), ctx)).result).toBe('passed');
+        expect((await new dependency_rule_handler_1.DependencyRuleHandler(fsMock()).evaluate(rule({ id: 'DEP-09' }), ctx)).result).toBe('failed');
+    });
+    it('skips unhandled DEP rules', async () => {
+        const res = await new dependency_rule_handler_1.DependencyRuleHandler(fsMock()).evaluate(rule({ id: 'DEP-99', category: 'x' }), ctx);
+        expect(res.result).toBe('skipped');
+    });
+});
+//# sourceMappingURL=dependency-rule.handler.spec.js.map

package/dist/application/validators/evaluators/handlers/dependency-rule.handler.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dependency-rule.handler.spec.js","sourceRoot":"","sources":["../../../../../src/application/validators/evaluators/handlers/dependency-rule.handler.spec.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,uEAAkE;AAGlE,MAAM,GAAG,GAAG,MAAM,CAAC;AACnB,MAAM,IAAI,GAAG,OAAO,CAAC;AACrB,MAAM,GAAG,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAEnD,SAAS,MAAM,CAAC,MAAgI,EAAE;IAChJ,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3D,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KAClD,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,IAA6B;IACzC,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;AACjJ,CAAC;AAED,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,GAAG,IAAI,+CAAqB,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;QAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAE3C,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,CAAC,GAAG,IAAI,+CAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACrH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;YAChD,MAAM,CAAC,GAAG,IAAI,+CAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,eAAe,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACxH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;YACnD,MAAM,CAAC,GAAG,IAAI,+CAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YACpH,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;YACzD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;YAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,cAAc,CAAC,CAAC;YACrD,MAAM,CAAC,GAAG,IAAI,+CAAqB,CAAC,MAAM,CAAC;gBACzC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC;gBAC/B,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE;gBACzB,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;aAC7F,CAAC,CAAC,CAAC;YACJ,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;YAC1D,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,MAAM,IAAI,+CAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpI,MAAM,CAAC,CAAC,MAAM,IAAI,+CAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,IAAI,+CAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC;QACjI,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,+CAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;QACtI,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjF,MAAM,IAAI,GAAG,IAAI,+CAAqB,CAAC,MAAM,EAAE,CAAC,CAAC;QACjD,MAAM,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gDAAgD,EAAE,KAAK,IAAI,EAAE;QAC9D,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,EAAE,gBAAgB,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,MAAM,IAAI,+CAAqB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClI,MAAM,CAAC,CAAC,MAAM,IAAI,+CAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,+CAAqB,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3G,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/application/validators/evaluators/handlers/evidence-rule.handler.d.ts

@@ -0,0 +1,10 @@
+import { IFileSystem } from '../../../../domain/interfaces';
+import { NormalizedRule } from '../../../../domain/models/normalized-rule';
+import { EvaluationContext, RuleEvaluationResult } from '../evaluator.interface';
+import { INativeRuleHandler } from './rule-handler.interface';
+export declare class EvidenceRuleHandler implements INativeRuleHandler {
+    private readonly fs;
+    constructor(fs: IFileSystem);
+    canHandle(rule: NormalizedRule): boolean;
+    evaluate(rule: NormalizedRule, ctx: EvaluationContext): Promise<RuleEvaluationResult>;
+}

package/dist/application/validators/evaluators/handlers/evidence-rule.handler.js

@@ -0,0 +1,102 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EvidenceRuleHandler = void 0;
+const path = __importStar(require("path"));
+class EvidenceRuleHandler {
+    constructor(fs) {
+        this.fs = fs;
+    }
+    canHandle(rule) {
+        return rule.id.startsWith('EVD-');
+    }
+    async evaluate(rule, ctx) {
+        const evidenceDir = path.join(ctx.corePath, '.harness', 'evidence');
+        if (!await this.fs.exists(evidenceDir)) {
+            return { rule, result: 'failed', message: '.harness/evidence directory not found' };
+        }
+        const files = await this.fs.readdirNames(evidenceDir);
+        const jsonFiles = files.filter(f => f.endsWith('.json'));
+        if (jsonFiles.length === 0) {
+            return { rule, result: 'failed', message: 'No evidence manifests found in .harness/evidence/' };
+        }
+        for (const file of jsonFiles) {
+            const content = await this.fs.readFile(path.join(evidenceDir, file));
+            let manifest;
+            try {
+                manifest = JSON.parse(content);
+            }
+            catch {
+                return { rule, result: 'failed', message: `Invalid JSON in evidence file: ${file}` };
+            }
+            switch (rule.id) {
+                case 'EVD-01': {
+                    const required = ['id', 'source', 'generatedAt', 'producer'];
+                    const missing = required.filter(k => !manifest[k]);
+                    if (missing.length > 0) {
+                        return { rule, result: 'failed', message: `${file} missing fields: ${missing.join(', ')}` };
+                    }
+                    if (!manifest['evaluatedRules'] && !manifest['relatedRuleIds'] && !manifest['relatedGateId']) {
+                        return { rule, result: 'failed', message: `${file} missing evaluatedRules or relatedGateId` };
+                    }
+                    break;
+                }
+                case 'EVD-02': {
+                    if (!manifest['sourceRef']) {
+                        return { rule, result: 'failed', message: `${file} missing sourceRef` };
+                    }
+                    break;
+                }
+                case 'EVD-03': {
+                    const required = ['status', 'evaluatedRules', 'blockingFailures'];
+                    const missing = required.filter(k => !manifest[k]);
+                    if (missing.length > 0) {
+                        return { rule, result: 'failed', message: `${file} missing fields: ${missing.join(', ')}` };
+                    }
+                    break;
+                }
+                case 'EVD-04': {
+                    if (!manifest['retentionPeriod'] || !manifest['owner']) {
+                        return { rule, result: 'failed', message: `${file} missing retentionPeriod or owner` };
+                    }
+                    break;
+                }
+            }
+        }
+        return { rule, result: 'passed' };
+    }
+}
+exports.EvidenceRuleHandler = EvidenceRuleHandler;
+//# sourceMappingURL=evidence-rule.handler.js.map

package/dist/application/validators/evaluators/handlers/evidence-rule.handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-rule.handler.js","sourceRoot":"","sources":["../../../../../src/application/validators/evaluators/handlers/evidence-rule.handler.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAM7B,MAAa,mBAAmB;IAC9B,YAA6B,EAAe;QAAf,OAAE,GAAF,EAAE,CAAa;IAAG,CAAC;IAEhD,SAAS,CAAC,IAAoB;QAC5B,OAAO,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACpC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAoB,EAAE,GAAsB;QACzD,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;YACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACtD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAEzD,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;QAClG,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC;YACrE,IAAI,QAAiC,CAAC;YACtC,IAAI,CAAC;gBACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAA4B,CAAC;YAC5D,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,kCAAkC,IAAI,EAAE,EAAE,CAAC;YACvF,CAAC;YAED,QAAQ,IAAI,CAAC,EAAE,EAAE,CAAC;gBAChB,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC;oBAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBAC9F,CAAC;oBACD,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;wBAC7F,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,0CAA0C,EAAE,CAAC;oBAChG,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;wBAC3B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,oBAAoB,EAAE,CAAC;oBAC1E,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,MAAM,QAAQ,GAAG,CAAC,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,CAAC;oBAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;oBACnD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACvB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;oBAC9F,CAAC;oBACD,MAAM;gBACR,CAAC;gBACD,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACd,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;wBACvD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,IAAI,mCAAmC,EAAE,CAAC;oBACzF,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpC,CAAC;CACF;AAlED,kDAkEC"}

package/dist/application/validators/evaluators/handlers/evidence-rule.handler.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/application/validators/evaluators/handlers/evidence-rule.handler.spec.js

@@ -0,0 +1,94 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const path = __importStar(require("path"));
+const evidence_rule_handler_1 = require("./evidence-rule.handler");
+const CORE = '/core';
+const ctx = { satellitePath: '/sat', corePath: CORE };
+const evDir = path.join(CORE, '.harness', 'evidence');
+function fsMock(cfg = {}) {
+    const existing = new Set(cfg.existing ?? []);
+    return {
+        exists: jest.fn(async (p) => existing.has(p)),
+        readdirNames: jest.fn(async (p) => cfg.dirs?.[p] ?? []),
+        readFile: jest.fn(async (p) => cfg.files?.[p] ?? ''),
+    };
+}
+function rule(id) {
+    return { id, severity: 'MUST', category: 'evidence', title: 't', description: 'd', blocking: true, sourceFile: 's' };
+}
+function withManifest(id, manifest) {
+    const file = path.join(evDir, 'm.json');
+    return new evidence_rule_handler_1.EvidenceRuleHandler(fsMock({
+        existing: [evDir],
+        dirs: { [evDir]: ['m.json'] },
+        files: { [file]: JSON.stringify(manifest) },
+    })).evaluate(rule(id), ctx);
+}
+describe('EvidenceRuleHandler', () => {
+    it('canHandle matches EVD- prefix', () => {
+        expect(new evidence_rule_handler_1.EvidenceRuleHandler(fsMock()).canHandle(rule('EVD-01'))).toBe(true);
+        expect(new evidence_rule_handler_1.EvidenceRuleHandler(fsMock()).canHandle(rule('GOV-01'))).toBe(false);
+    });
+    it('fails when the evidence directory is missing', async () => {
+        expect((await new evidence_rule_handler_1.EvidenceRuleHandler(fsMock()).evaluate(rule('EVD-01'), ctx)).result).toBe('failed');
+    });
+    it('fails when there are no JSON manifests', async () => {
+        const h = new evidence_rule_handler_1.EvidenceRuleHandler(fsMock({ existing: [evDir], dirs: { [evDir]: ['readme.txt'] } }));
+        expect((await h.evaluate(rule('EVD-01'), ctx)).result).toBe('failed');
+    });
+    it('fails on invalid JSON', async () => {
+        const file = path.join(evDir, 'm.json');
+        const h = new evidence_rule_handler_1.EvidenceRuleHandler(fsMock({ existing: [evDir], dirs: { [evDir]: ['m.json'] }, files: { [file]: '{bad' } }));
+        expect((await h.evaluate(rule('EVD-01'), ctx)).result).toBe('failed');
+    });
+    it('EVD-01 enforces required fields and rule linkage', async () => {
+        expect((await withManifest('EVD-01', { id: 'x', source: 's', generatedAt: 't' })).result).toBe('failed');
+        expect((await withManifest('EVD-01', { id: 'x', source: 's', generatedAt: 't', producer: 'p', relatedGateId: 'g' })).result).toBe('passed');
+    });
+    it('EVD-02 requires sourceRef', async () => {
+        expect((await withManifest('EVD-02', { id: 'x' })).result).toBe('failed');
+        expect((await withManifest('EVD-02', { sourceRef: 'ref' })).result).toBe('passed');
+    });
+    it('EVD-03 requires status/evaluatedRules/blockingFailures', async () => {
+        expect((await withManifest('EVD-03', { status: 'ok' })).result).toBe('failed');
+        expect((await withManifest('EVD-03', { status: 'ok', evaluatedRules: 3, blockingFailures: 1 })).result).toBe('passed');
+    });
+    it('EVD-04 requires retentionPeriod and owner', async () => {
+        expect((await withManifest('EVD-04', { owner: 'o' })).result).toBe('failed');
+        expect((await withManifest('EVD-04', { owner: 'o', retentionPeriod: '90d' })).result).toBe('passed');
+    });
+});
+//# sourceMappingURL=evidence-rule.handler.spec.js.map

package/dist/application/validators/evaluators/handlers/evidence-rule.handler.spec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-rule.handler.spec.js","sourceRoot":"","sources":["../../../../../src/application/validators/evaluators/handlers/evidence-rule.handler.spec.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAA6B;AAC7B,mEAA8D;AAG9D,MAAM,IAAI,GAAG,OAAO,CAAC;AACrB,MAAM,GAAG,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACtD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC;AAEtD,SAAS,MAAM,CAAC,MAAgG,EAAE;IAChH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrD,YAAY,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/D,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAS,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KAClD,CAAC;AACf,CAAC;AAED,SAAS,IAAI,CAAC,EAAU;IACtB,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC;AACvH,CAAC;AAED,SAAS,YAAY,CAAC,EAAU,EAAE,QAAiB;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACxC,OAAO,IAAI,2CAAmB,CAAC,MAAM,CAAC;QACpC,QAAQ,EAAE,CAAC,KAAK,CAAC;QACjB,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE;QAC7B,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE;KAC5C,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,+BAA+B,EAAE,GAAG,EAAE;QACvC,MAAM,CAAC,IAAI,2CAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/E,MAAM,CAAC,IAAI,2CAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;QAC5D,MAAM,CAAC,CAAC,MAAM,IAAI,2CAAmB,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,CAAC,GAAG,IAAI,2CAAmB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACpG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QACxC,MAAM,CAAC,GAAG,IAAI,2CAAmB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3H,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QAChE,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzG,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9I,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1E,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,KAAK,IAAI,EAAE;QACtE,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC7E,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACvG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/application/validators/evaluators/handlers/executive-scorecard-rule.handler.d.ts

@@ -0,0 +1,15 @@
+import { IFileSystem } from '../../../../domain/interfaces';
+import { NormalizedRule } from '../../../../domain/models/normalized-rule';
+import { EvaluationContext, RuleEvaluationResult } from '../evaluator.interface';
+import { INativeRuleHandler } from './rule-handler.interface';
+export declare class ExecutiveScorecardRuleHandler implements INativeRuleHandler {
+    private readonly fs;
+    constructor(fs: IFileSystem);
+    canHandle(rule: NormalizedRule): boolean;
+    evaluate(rule: NormalizedRule, ctx: EvaluationContext): Promise<RuleEvaluationResult>;
+    private evalDora;
+    private evalSpace;
+    private evalDrift;
+    private checkPhaseGateVisibility;
+    private checkExecutiveSponsor;
+}