@getarbiter/cli 0.5.0

package/dist/wizard/types.d.ts

@@ -0,0 +1,637 @@
+export type InvariantTier = 'architectural' | 'data' | 'security' | 'operational' | 'governance';
+export type InvariantPreset = 'essential' | 'standard' | 'full';
+type CrossModelReviewProvider = 'codex';
+type CrossModelReviewUnavailablePolicy = 'degrade' | 'fail';
+interface CrossModelReviewConfig {
+    enabled: boolean;
+    diffEgressConsent: boolean;
+    providers: CrossModelReviewProvider[];
+    slots: {
+        codeReview: number;
+        redTeamReview: number;
+    };
+    timeoutMs: number;
+    onUnavailable: CrossModelReviewUnavailablePolicy;
+}
+export type { CrossModelReviewProvider, CrossModelReviewUnavailablePolicy, CrossModelReviewConfig };
+/**
+ * Meta-preset that bundles governance, compliance, observability, and auth config
+ * into a single opt-in. Providers remain 'none' — user fills them in separately.
+ */
+export type ProjectPreset = 'none' | 'industrial-grade' | 'solo-homelab';
+export type WizardFlow = 'greenfield' | 'brownfield';
+/**
+ * #1291/#1261 (ADR-093 §4) — ship autonomy level, the Project Profile automation
+ * axis. L0 ask-each-step · L1 auto-advance/auto-merge · L2 + fix-on-red attempt ·
+ * L3 full-auto wave + autonomous fix push + sub-agent spawn.
+ * Lives here (not config/schema.ts) so WizardAnswers can use it without an
+ * import cycle; config/schema.ts re-exports it for its existing consumers.
+ */
+export type AutonomyLevel = 'L0' | 'L1' | 'L2' | 'L3';
+export interface WizardAnswers {
+    description: string;
+    tools: AiTool[];
+    language: Language;
+    governanceLevel: GovernanceLevel;
+    invariantPreset?: InvariantPreset;
+    archetype: Archetype;
+    architectureStyle: ArchitectureStyle;
+    hasDatabase: boolean;
+    hasPublicApi: boolean;
+    isMultiTenant: boolean;
+    decompositionBackend?: 'github' | 'markdown';
+    /** Phase 9.5 ML: set only when hasPublicApi=true. Absent = default "none". */
+    contractType?: ContractType;
+    /**
+     * ADR-051: collaboration mode axis. Drives branching strategy, CI shape, and merge method.
+     * When absent, defaults to 'peer-review' (safe default). Overrides soloDevMode when both present.
+     */
+    collaborationMode?: CollaborationMode;
+    /**
+     * ADR-051: branching strategy. When absent, derived from collaborationMode.
+     * Explicit value overrides the derived default.
+     */
+    branchingStrategy?: BranchingStrategy;
+    /**
+     * #470: solo-dev mode — skip PR CI, merge directly after local L2 gate passes. Default false.
+     * @deprecated Use collaborationMode: 'trunk-solo' instead. Deprecated in 0.2.0, removed in
+     * 1.0.0 — see the Active table in docs/DEPRECATIONS.md.
+     */
+    soloDevMode?: boolean;
+    /** #1005: container registry / cloud deploy target. Absent = 'none'. */
+    deployTarget?: DeployTarget;
+    /** Pipeline style: controls which GitHub Actions workflow set is emitted. Default 'standard'. */
+    pipelineStyle?: 'starter' | 'standard' | 'industrial';
+    /** Brownfield class: how mature the target repo is. Auto-detected; user can override. */
+    brownfieldClass?: 'gold' | 'light' | 'medium' | 'heavy';
+    /**
+     * #1254: industry compliance overlay axis surfaced in the wizard. Absent = 'none'.
+     * Drives the gdpr/iso27001/iso9001/pharma overlay generators and the
+     * (overlay × governanceLevel) coherence advisory.
+     */
+    industryOverlay?: 'pharma' | 'sox' | 'gdpr' | 'generic' | 'iso27001' | 'iso9001' | 'regulated' | 'none';
+    /**
+     * #1261: ship autonomy level chosen in the wizard. Absent = 'L0'
+     * (ask at each ship step — the safe default).
+     */
+    autonomy?: AutonomyLevel;
+    /**
+     * #1693 (ADR-101): runner profile axis. 'solo' moves the fuzz + soak-e2e
+     * heavy jobs from nightly to weekly cadence (single self-hosted runner).
+     * Default 'fleet' — current behavior, jobs stay nightly.
+     */
+    runnerProfile?: 'solo' | 'fleet';
+    /**
+     * #1835 (Task B, #1825): opt-in collapsed 5-lane CI doctrine, asked only when
+     * the decomposition backend is GitHub. Mirrors config.enableFiveLaneCi.
+     * Default false.
+     */
+    enableFiveLaneCi?: boolean;
+    /** #2356: optional, explicit consent for sending diffs to the external reviewer CLI. */
+    crossModelReview?: CrossModelReviewConfig;
+}
+export interface MigrationPlan {
+    preserved: string[];
+    merged: string[];
+    replaced: string[];
+    created: string[];
+}
+export type Language = 'typescript' | 'java' | 'kotlin' | 'rust' | 'python' | 'go' | 'multi' | 'unknown';
+export type GovernanceLevel = 'L1' | 'L2' | 'L3' | 'L4';
+export type AiTool = 'claude' | 'codex';
+export declare const SUPPORTED_AI_TOOLS: readonly AiTool[];
+export type Archetype = 'backend-web-db' | 'cli' | 'library' | 'data-pipeline' | 'frontend-spa' | 'embedded';
+export type DeployTarget = 'ghcr' | 'azure-container-app' | 'aws-ecs' | 'gcp-cloud-run' | 'nas-compose' | 'none';
+export type ArchitectureStyle = 'hexagonal' | 'layered' | 'modular-monolith' | 'none';
+export type Lane = 'frontend' | 'backend' | 'docs';
+/**
+ * Computed from (language, archetype, architectureStyle) at generation time.
+ * Not persisted on ProjectConfig — passed to EJS templates as `metricsProfile`.
+ */
+export interface MetricsProfile {
+    /** frontend-spa + typescript only: include bundle size metric */
+    includeBundleSize: boolean;
+    /** library + typescript: include public-API surface count */
+    includePublicApiSurface: boolean;
+    /** backend-web-db or library: include branch coverage in addition to line */
+    includeBranchCoverage: boolean;
+    /** java only: emit SpotBugs config and collect spotbugsViolations */
+    spotbugsEnabled: boolean;
+    /** java + architectureStyle !== 'none': collect archunitFailingRules */
+    archunitEnabled: boolean;
+}
+export interface LanguageHook {
+    /** Name of the hook script to generate (e.g. "check-no-any.mjs") */
+    name: string;
+    /** What it enforces (for AGENTS.md invariant docs) */
+    description: string;
+    /** Hook body (Node.js ESM) */
+    body: string;
+}
+/**
+ * ADR-051: collaboration-mode axis — replaces soloDevMode/teamSize as the
+ * primary driver for branching, CI shape, and merge method.
+ * trunk-solo  = one author; direct push or opt-in pr-ff.
+ * peer-review = 1+ reviewers, shared trust; mandatory PR with ff-only merge.
+ * gated-review = CODEOWNERS, merge queue, attestation chain.
+ */
+export type CollaborationMode = 'trunk-solo' | 'peer-review' | 'gated-review';
+/**
+ * ADR-051: branching strategy driven by collaborationMode.
+ * trunk-direct            = push directly to main (no long-lived branches).
+ * github-flow             = feature branches → main only.
+ * github-flow-with-develop = feature branches → develop → main.
+ */
+export type BranchingStrategy = 'trunk-direct' | 'github-flow' | 'github-flow-with-develop';
+/** ADR-051: merge method for trunk-solo mode. */
+export type SoloMergeMode = 'direct' | 'pr-ff';
+/** ADR-051: whether /task auto-opens a worktree. */
+export type WorktreeAutoMode = 'always' | 'optional' | 'never';
+type WorktreeLinkStrategy = 'symlink' | 'copy' | 'symlink-children';
+export interface WorktreeLinkSpec {
+    /** Relative path inside the repo (e.g. ".env", ".claude/settings.local.json") */
+    path: string;
+    /** Throw if source is missing instead of silently skipping */
+    required?: boolean;
+    /** Fallback: copy from this template path if source is absent */
+    template?: string;
+    /** How to materialize the link (default: "symlink") */
+    strategy?: WorktreeLinkStrategy;
+    /** Whether this is a file or directory link (default: "file") */
+    type?: 'file' | 'directory';
+}
+export interface WorktreeConfig {
+    /** Absolute path to the directory that holds all worktrees.
+     *  null → sibling of the repo: <parent>/<repoName>.worktrees */
+    base: string | null;
+    /** Files/dirs to symlink (or copy) from the main repo into each worktree */
+    links: WorktreeLinkSpec[];
+    /** Opt-in build-artifact links (target/, dist/, .next/) — activated via --with-build-links */
+    buildLinks?: WorktreeLinkSpec[];
+    /** Optional script to run before removing the worktree on close.
+     *  Receives the worktree path as its first argument. */
+    closeHook: string | null;
+}
+/** Two-tier conformance scoring thresholds. Part of persisted arbiter.json config. */
+export interface ConformanceThresholds {
+    tier1Members: string[];
+    familyWeights: {
+        discipline: number;
+        'reality-contact': number;
+        'docs-convention': number;
+        'code-quality-gold': number;
+    };
+    goldTier2Gate: number;
+}
+export interface ProjectConfig {
+    /** Directory being initialized */
+    targetDir: string;
+    /** e.g. "my-app" */
+    projectName: string;
+    /** Short description (user-provided or inferred) */
+    description: string;
+    language: Language;
+    /** e.g. "express+react", "spring-boot", "tauri" */
+    framework: string | null;
+    /** Project archetype — shape of the runtime topology */
+    archetype: Archetype;
+    /** Internal module decomposition style. Default "none" = no architecture rules generated */
+    architectureStyle: ArchitectureStyle;
+    /** Whether the project handles multiple tenants sharing one deployment */
+    isMultiTenant: boolean;
+    /** Whether the project connects to a database */
+    hasDatabase: boolean;
+    /** Whether the project exposes a public API (REST, GraphQL, gRPC, etc.) */
+    hasPublicApi: boolean;
+    /** e.g. "npm", "gradle", "cargo" */
+    buildTool: string;
+    /** JavaScript package manager detected during project discovery. */
+    packageManager?: 'npm' | 'pnpm' | 'yarn' | 'bun';
+    buildCommand: string;
+    testCommand: string;
+    lintCommand: string;
+    formatCommand: string;
+    tools: AiTool[];
+    governanceLevel: GovernanceLevel;
+    /** #2356: explicit opt-in and diff-egress consent for external review slots. */
+    crossModelReview?: CrossModelReviewConfig;
+    useGitHub: boolean;
+    permitGitHub?: boolean;
+    decompositionBackend?: 'github' | 'markdown';
+    githubOwner: string | null;
+    githubRepo: string | null;
+    existing: {
+        agentsMd: boolean;
+        claudeDir: boolean;
+        agentsDir: boolean;
+        aiRulez: boolean;
+        settingsJson: boolean;
+        checkAllScript: boolean;
+        geminiDir: boolean;
+        windsurfRules: boolean;
+        aiderConf: boolean;
+        tests: boolean;
+        ciWorkflows: boolean;
+        lintConfig: boolean;
+    };
+    languageHooks: LanguageHook[];
+    /** Whether to generate tech debt prevention gates (coverage, complexity, dead code). Defaults to true for L2+. */
+    enableDebtGates: boolean;
+    /** Whether to generate suppression templates and the check-suppressions.mjs expiry gate. Defaults to true for all governance levels. */
+    enableSuppressions: boolean;
+    /**
+     * Which database engine the project uses. Set when hasDatabase=true. Still
+     * consumed by KIT applicability gating for dims N08/N73/N74/N75
+     * (src/kit/applicability.ts) — NOT dead. Auto-detection is not yet
+     * implemented (tracked by #1058); until then this is set manually or left unset
+     * (requiresDbEngine dims fail-closed to NA). #1157.
+     */
+    databaseEngine?: 'postgresql' | 'mysql' | 'mongodb' | 'sqlite' | 'other' | 'none';
+    /** Whether to generate security scanning gates (PII scan, gitleaks, dep audit). Defaults to true for L2+. */
+    enableSecurityScanning: boolean;
+    /** Which invariant tiers to include in generated AGENTS.md. Derived from InvariantPreset. */
+    invariantTiers: InvariantTier[];
+    /** Base Java package (e.g. "com.example.myapp"). Detected from pom.xml/build.gradle for Java projects. */
+    basePackage?: string;
+    /**
+     * #257/#1524/#1616: domain-specific test-taxonomy dimensions. Consumed by the
+     * test-taxonomy generator and round-tripped through arbiter.json so custom
+     * dimensions survive `arbiter update`. Structural-typed here (not imported from
+     * config/schema) to keep the wizard layer free of a config→wizard back-edge.
+     */
+    taxonomy?: {
+        domainDims?: string[];
+    };
+    /** Whether to generate mutation testing configuration. Default true for L2+. */
+    enableMutationTesting?: boolean;
+    /** Whether to generate contract testing configuration. Default from contractType. */
+    enableContractTesting?: boolean;
+    /** Whether to generate evidence retention configuration. Default true for L3. */
+    enableEvidenceHarness?: boolean;
+    /** Whether to generate the A/B/C self-validation drill harness. Default true. */
+    enableSelfValidationHarness?: boolean;
+    /**
+     * #1835: opt-in toolchain/workflow-inventory audit (`scripts/audit-toolchain.mjs`).
+     * Explicit opt-in (default false/undefined) — the script's required-file lists are
+     * a coarse fleet-wide inventory, not derived per-project, so it is wired ADVISORY
+     * (never blocks the gate) only when a project deliberately turns it on.
+     */
+    enableAuditToolchain?: boolean;
+    /**
+     * ADR-051: collaboration mode axis. Primary driver for branching, CI shape, merge method.
+     * Absent = legacy mode (falls back to enableSoloDevMode → peer-review).
+     */
+    collaborationMode?: CollaborationMode;
+    /**
+     * ADR-051: branching strategy. When absent, derived from collaborationMode defaults table.
+     * github-flow-with-develop gates `develop` branch references in CI templates.
+     */
+    branchingStrategy?: BranchingStrategy;
+    /**
+     * ADR-051: worktree auto-open behavior for /task command.
+     * Derived from collaborationMode when absent.
+     */
+    tasks?: {
+        worktree: WorktreeAutoMode;
+    };
+    /**
+     * ADR-051: trunk-solo merge method.
+     * 'direct' = git push --ff-only without PR.
+     * 'pr-ff'  = gh pr create + ff-only merge (audit trail preserved).
+     * Only meaningful when collaborationMode = 'trunk-solo'.
+     */
+    solo?: {
+        mergeMode: SoloMergeMode;
+    };
+    /**
+     * #1291 — ship autonomy gating (ADR-093 §4). Absent ⇒ L0.
+     * #1306 (ADR-094 §Decision.4) — extended with two optional orchestration prefs;
+     * all derived per collaboration mode / governance level when the wizard builds the
+     * profile (see buildProfileAxes). Absent fields fall to their derived defaults.
+     */
+    automation?: {
+        autonomy: AutonomyLevel;
+        maxParallelWorktrees?: number;
+        defaultGateLevel?: 'L1' | 'L2';
+    };
+    /**
+     * Whether to enable solo-dev mode: skip PR CI ceremony, nightly drift shadow. Default false.
+     * @deprecated Use collaborationMode: 'trunk-solo' instead. Deprecated in 0.2.0, removed in
+     * 1.0.0 — see the Active table in docs/DEPRECATIONS.md.
+     */
+    enableSoloDevMode?: boolean;
+    /** Whether to generate the MCP fallback determinism rule (45-mcp-fallback.md). Default false (opt-in). */
+    enableMcpFallback?: boolean;
+    /** Whether to generate check-no-skipped-tests.mjs hook. Default true for all governance levels. */
+    enableNoSkippedTests?: boolean;
+    /** Whether to use the 25-dimension test taxonomy template instead of the base 17-dimension one. Default false. */
+    enableTaxonomy25d?: boolean;
+    /** Whether to generate the operations handbook (4-signal observability, RC checklist, runbooks). Default false. */
+    enableOperationsHandbook?: boolean;
+    /** Whether to generate the risk register + P×I assessment template (ISO 27001 §6.1.2). Default false. */
+    enableRiskRegister?: boolean;
+    /** Whether to include ISO 27001 Annex A gate-to-control mapping in the compliance document. Default false. */
+    enableIso27001Mapping?: boolean;
+    /** Whether to include NIS2 Art.21.2 gate-to-requirement mapping in the compliance document. Default false. */
+    enableNis2Mapping?: boolean;
+    /** Whether to include GDPR article gate-to-control mapping in the compliance document. Default false. */
+    enableGdprMapping?: boolean;
+    /** Observability provider configuration. Default: absent (no observability files generated). */
+    observability?: ObservabilityConfig;
+    /** Auth provider configuration. Default: absent (no auth setup files generated). */
+    auth?: AuthConfig;
+    /** Frontend framework + tooling configuration. Absent = no framework-specific governance text. */
+    frontend?: FrontendConfig;
+    /**
+     * User explicitly acknowledges that one or more beta tools will be used.
+     * Set by --accept-beta-tools on `arbiter init`. Persisted in arbiter.json for audit.
+     * Beta tools (maturity="beta") require this flag; unsafe tools are never allowed.
+     */
+    acceptBetaTools?: boolean;
+    /**
+     * Phase 9.5 MG: coverage/mutation threshold profile.
+     * "scaled" = LoC-based ramp (no coverage <1000 LoC, no mutation <5000 LoC, 60%→85%).
+     * "fixed"  = flat 80% (L2) / 85% (L3) regardless of project size.
+     * Default: "scaled".
+     */
+    thresholdProfile?: ThresholdProfile;
+    /**
+     * Phase 9.5 MG: enforcement strictness tier.
+     * "practical" = standard rules for most teams.
+     * "pedantic"  = additional rules: noUncheckedIndexedAccess (TS), clippy pedantic (Rust), etc.
+     * Default: "practical".
+     */
+    strictnessTier?: StrictnessTier;
+    /**
+     * Phase 9.5 MG: detected or estimated lines of code in the target project.
+     * Used by "scaled" threshold profile to compute coverage/mutation gates.
+     * 0 = unknown; treated same as <1000 LoC for scaled profile (coverage and mutation gates disabled).
+     */
+    linesOfCode?: number;
+    /**
+     * Phase 9.5 MJ: evidence harness retention policy.
+     * Controls how many evidence runs to keep and where to store them.
+     * Default: { mode: "local-last-N", count: 5 }
+     */
+    evidenceRetention?: EvidenceRetentionConfig;
+    /**
+     * Phase 9.5 ML: contract testing strategy — see ADR-028.
+     * Wizard asks only if hasPublicApi === true. Default: "none".
+     */
+    contractType: ContractType;
+    /**
+     * M25: path to k6 load test script (relative to project root).
+     * Used by the generated nightly.yml. L3-only. Default: "tests/load/default.js".
+     */
+    k6ScriptPath?: string;
+    thresholds?: ThresholdsV2;
+    /** Detected project lanes (FE/BE/docs). Empty array = single-lane / no lane awareness. */
+    lanes: Lane[];
+    /** Task-tier configuration (XS/S/Standard) — review agent count + plan depth (#237). */
+    taskTiers?: TaskTiers;
+    /** Active project preset, if any. Stored for audit/drift detection. */
+    preset?: ProjectPreset;
+    /** Include extended opt-in invariants (INV-62..INV-71). True when governance.invariants_catalog = 'extended'. */
+    includeExtendedInvariants?: boolean;
+    /** #2035: project-declared invariants (PROJ-NN), merged at getFilteredInvariants. */
+    projectInvariants?: Invariant[];
+    /** #2044: declared-live SSOT surfaces bound by check-drift --live-ssot. */
+    liveSsot?: LiveSsotConfig;
+    /**
+     * CI tier emission mode.
+     * @deprecated Use pipelineStyle instead. Deprecated in 0.2.0, removed in 1.0.0 —
+     * see the Active table in docs/DEPRECATIONS.md.
+     * 'baseline' = emit the 4-workflow baseline set (01/02/03/09) for self-CI migration.
+     * 'full'     = emit all 8 standard CI tier workflows (default for target projects).
+     */
+    ciTierMode?: 'baseline' | 'full';
+    /**
+     * Container registry / cloud deploy target.
+     * 'ghcr' = default for backend-web-db (home scenario). All others = paid-cloud targets.
+     * 'none' = no deploy workflows emitted (default for all non-service archetypes).
+     * Absent field treated as 'none'. Sole gate for deploy-workflow and Azure
+     * Container Apps infra emission (#1145/#1146 removed the derived boolean flags).
+     */
+    deployTarget?: DeployTarget;
+    /**
+     * Pipeline style: controls which GitHub Actions workflow set is emitted.
+     * 'starter'    = 3 workflows (pr-fast, main-build, heartbeat)
+     * 'standard'   = 8 workflows: starter + pr-extended, nightly, release, dependabot-auto, sbom, gitleaks
+     * 'industrial' = full 18-workflow set (standard + perf, chaos, mutation, archunit-extended,
+     *                cosign, attestation, rebuild-on-demand, trivy, license-scan, policy-eval)
+     * Default: 'standard'. Takes precedence over ciTierMode when both are present.
+     */
+    pipelineStyle?: 'starter' | 'standard' | 'industrial';
+    /**
+     * A1 (#1817): opt-in collapsed 5-lane CI doctrine — pre-commit (local, via
+     * `githooks`) + 4 workflows (`ci.yml` PR-blocking / `nightly.yml` /
+     * `weekly.yml` / `release.yml`), each tier-budget-commented (AGENTS.md
+     * INV-136). Mutually exclusive with the standard `github` + `ci-tier`
+     * generators (registry.ts disables both when this is true) so a fresh
+     * repo emits exactly 4 workflow files, never a union of both shapes.
+     * Default: false/undefined (standard `pipelineStyle` shape unaffected).
+     */
+    enableFiveLaneCi?: boolean;
+    /**
+     * Brownfield class: how mature the target repo is.
+     * Determines which threshold column to apply for existing code.
+     * Auto-detected by brownfield-detect.ts; user can override via wizard prompt.
+     * 'gold'   = greenfield / already-mature (< 50 source files)
+     * 'light'  = 50–500 files, coverage > 30 %
+     * 'medium' = 500–2 000 files, coverage 5–30 %
+     * 'heavy'  = 2 000+ files, coverage < 5 %
+     */
+    brownfieldClass?: 'gold' | 'light' | 'medium' | 'heavy';
+    /**
+     * Whether to run the kit-install lifecycle (DETECT → MEASURE → SCAFFOLD → ASSESS → PLAN → VERIFY).
+     * Default: true when a supported stack is detected.
+     */
+    kitEnabled?: boolean;
+    /**
+     * Industry overlay — emits domain-specific audit-trail compliance scaffolding.
+     * 'pharma'            → pharma audit-trail overlay (KIT dims 73-75, ArchUnit R-35..R-39). Java only.
+     * 'sox'|'gdpr'|'generic' → language-neutral L4 audit-trail docs + gate rules,
+     *                       decoupled from the pharma Java scaffolding (#1156).
+     * 'iso27001'          → ISO 27001:2022 Annex-A controls→gate traceability
+     *                       overlay (security mgmt). Language-neutral (#1252).
+     * 'iso9001'           → quality-process overlay (orthogonal to audit-trail):
+     *                       requirement→test RTM, document-control register, CAPA log
+     *                       + enforceable gate. Language-neutral (#1253).
+     * 'none'              → no overlay (default).
+     * Absent field is treated as 'none'.
+     */
+    industryOverlay?: 'pharma' | 'sox' | 'gdpr' | 'generic' | 'iso27001' | 'iso9001' | 'regulated' | 'none';
+    /**
+     * F6: Emit k6 performance testing ecosystem.
+     * Includes 12+ named scenario templates, 3 Python report generators,
+     * seed SQL, validator script, and GitHub workflow.
+     * Off by default — opt in when load/performance testing is needed (#895).
+     */
+    enablePerfTesting?: boolean;
+    /**
+     * #943: emit _post-merge-notify.yml workflow that sends an email to CODEOWNERS
+     * after each merged PR (result + coverage + changed files). L2+ only.
+     * Off by default — requires MAIL_SERVER/MAIL_USERNAME/MAIL_PASSWORD secrets and
+     * a MAIL_DOMAIN_ALLOWLIST variable (set to `*` to allow all domains).
+     */
+    enableCodeownersNotify?: boolean;
+    /**
+     * #1693 (ADR-101): runner profile axis, orthogonal to collaborationMode/pipelineStyle.
+     * 'fleet' (default) = current behavior: fuzz + soak-e2e heavy jobs run at nightly
+     *   cadence, hard-gated by nightly-required.
+     * 'solo' = fuzz + soak-e2e move to weekly cadence instead (single self-hosted
+     *   runner that cannot absorb a nightly heavy sweep), while preserving the same
+     *   hard-gate + issue-filing semantics at weekly cadence.
+     * Absent field treated as 'fleet'.
+     */
+    runnerProfile?: 'solo' | 'fleet';
+}
+type PlanDepth = 'minimal' | 'brief' | 'full';
+interface TaskTierConfig {
+    planDepth: PlanDepth;
+    reviewAgentCount: number;
+}
+export interface TaskTiers {
+    XS: TaskTierConfig;
+    S: TaskTierConfig;
+    Standard: TaskTierConfig;
+}
+export interface ThresholdsV2 {
+    lineCoverage: number;
+    branchCoverage: number;
+    mutationScore: number;
+    cyclomaticComplexity: number;
+    methodLength: number;
+    maxParams: number;
+}
+export type ThresholdProfile = 'scaled' | 'fixed';
+export type StrictnessTier = 'practical' | 'pedantic';
+/**
+ * Phase 9.5 ML: contract testing strategy — see ADR-028.
+ * "rest-owned"    → Pact consumer + provider (owned by your team).
+ * "rest-public"   → OpenAPI diff (breaking-change detection for public API).
+ * "graphql"       → Schema diff via graphql-inspector.
+ * "grpc"          → buf breaking check.
+ * "message-queue" → Schema registry integration (Avro, Protobuf).
+ * "none"          → No contract testing generated.
+ */
+export type ContractType = 'rest-owned' | 'rest-public' | 'graphql' | 'grpc' | 'message-queue' | 'none';
+export type ObservabilityProvider = 'none' | 'stdout-minimal' | 'victoria-vector-quickwit' | 'signoz' | 'openobserve' | 'prom-grafana-loki-jaeger' | 'saas-sentry' | 'saas-datadog' | 'saas-axiom' | 'saas-betterstack';
+export interface ObservabilityConfig {
+    provider: ObservabilityProvider;
+    metrics?: boolean;
+    logs?: boolean;
+    traces?: boolean;
+    alerts?: boolean;
+}
+export type AuthProvider = 'none' | 'app-level-ts' | 'authelia' | 'authentik' | 'ory-stack' | 'zitadel' | 'keycloak' | 'saas-clerk' | 'saas-auth0' | 'saas-supabase-auth' | 'saas-cognito';
+export interface AuthConfig {
+    provider: AuthProvider;
+    protocols?: Array<'oidc' | 'oauth2' | 'saml' | 'session'>;
+    tenantIsolation?: boolean;
+    themeSync?: boolean;
+}
+export interface FrontendConfig {
+    /** UI framework in use. Controls state-manager defaults in FE governance templates. */
+    framework?: 'vue' | 'react' | 'svelte';
+    /** State management library (e.g. 'pinia', 'zustand', 'svelte-store'). */
+    stateManager?: string;
+    /** Schema validation library (e.g. 'zod', 'yup', 'valibot'). */
+    validationLib?: string;
+}
+type EvidenceRetentionMode = 'local-last-N' | 'external-bucket' | 'none';
+export interface EvidenceRetentionConfig {
+    mode: EvidenceRetentionMode;
+    /** For local-last-N: number of runs to keep. Default 5. */
+    count?: number;
+    /** For external-bucket: target URL (e.g. s3://bucket/path). */
+    bucketUrl?: string;
+}
+/**
+ * #2035: lives here (not invariants/types.ts) to give ProjectConfig a
+ * dependency-free home — invariants/types.ts imports Language/GovernanceLevel
+ * from this module, so defining Invariant here keeps the graph acyclic
+ * (same trade as AutonomyLevel above). Re-exported from invariants/types.ts
+ * for its existing consumers.
+ */
+export interface Invariant {
+    /** Unique identifier, e.g. "INV-01" (built-in) or "PROJ-01" (project-declared, #2035). */
+    id: string;
+    tier: InvariantTier;
+    /** One-liner for AGENTS.md */
+    title: string;
+    /** Detailed explanation for GLOBAL_INVARIANTS.md */
+    description: string;
+    /** If set, invariant only applies to these languages. Omit for all languages. */
+    languages?: Language[];
+    /**
+     * Per-language variant of title. Used instead of title when language matches.
+     * When set, MUST cover every language declared in `languages` — enforced at
+     * gate time by the catalog-parity test (#680).
+     */
+    languageDetail?: Partial<Record<Language, string>>;
+    /**
+     * Minimum governance level required.
+     * If omitted, applies at all levels.
+     */
+    minGovernanceLevel?: GovernanceLevel;
+    /**
+     * Bypasses the invariantTiers filter — this invariant appears regardless of
+     * which tiers the caller selects. minGovernanceLevel is still enforced.
+     */
+    alwaysActive: boolean;
+    /** How this invariant is enforced (e.g. "hook + CI", "CI only", "manual") */
+    enforcement?: string;
+    /**
+     * Optional ADR id this invariant traces to, e.g. "ADR-051". When set, the
+     * referenced ADR file MUST exist under docs/internal/ADR/ — enforced by the
+     * invariant↔ADR traceability test (#1102).
+     */
+    adr?: string;
+    /**
+     * Lifecycle status. Omit (or "active") for in-use invariants.
+     * Set to "retired" when an invariant is superseded or removed — IDs must never be reused.
+     */
+    status?: 'active' | 'retired';
+    /**
+     * Required when status is "retired". Explains why and what replaced this invariant.
+     */
+    retiredReason?: string;
+    /**
+     * Optional: the ID of the invariant that supersedes this one.
+     * Only set when status is "retired".
+     */
+    redirectTo?: string;
+    /**
+     * True for invariants that only apply to arbiter's own development.
+     * These are excluded from generated target-project AGENTS.md / GLOBAL_INVARIANTS.md.
+     */
+    selfOnly?: boolean;
+    /**
+     * Opt-in group identifier. Invariants in a named group are excluded from
+     * the default filter and only appear when the caller explicitly opts in.
+     * Currently supported: 'extended' (INV-62..INV-71, enabled via
+     * arbiter.json governance.invariants_catalog = 'extended').
+     */
+    optInGroup?: 'extended';
+    /**
+     * The minimum number of required items that must be present to satisfy the
+     * invariant in self-mode during a partial rollout (e.g. INV-73's W4→W10 CI-tier
+     * ramp). Read by scripts/check-ci-tiers.mjs as the sole rollout knob.
+     */
+    minPresent?: number;
+}
+/**
+ * #2044 (AC-2044.5/6): declared-live SSOT surfaces (matrix/ledger) that a code
+ * change must update in the SAME commit — bound by check-drift --live-ssot.
+ * Obligation is limited to these surfaces (the softening).
+ */
+export interface LiveSsotSurface {
+    path: string;
+    kind: 'matrix' | 'ledger';
+    /** Optional key column names the drift check may use for finer binding. */
+    keys?: string[];
+}
+export interface LiveSsotConfig {
+    surfaces: LiveSsotSurface[];
+}

package/dist/wizard/types.js

@@ -0,0 +1 @@
+export const SUPPORTED_AI_TOOLS=["claude","codex"];

package/dist/worktree/harvest.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{existsSync,statSync}from"node:fs";import{copyFileTranslated,ensureDir}from"../utils/fs.js";import{dirname,join}from"node:path";import{runCli}from"../utils/run-cli.js";function parsePorcelainStatus(output){const files=[],records=output.split("\0");for(let i=0;i<records.length;i++){const record=records[i];if(record===void 0||record==="")continue;const xy=record.slice(0,2),path=record.slice(3);xy==="??"?path&&files.push(path):xy[0]==="R"||xy[0]==="C"?(path&&files.push(path),i++):path&&files.push(path)}return files}function parseUntrackedPaths(output){const files=[],records=output.split("\0");for(const record of records){if(!record)continue;const xy=record.slice(0,2),path=record.slice(3);xy==="??"&&path&&files.push(path)}return files}function captureParentSnapshot(mainRepoPath){const branch=runCli("git",["rev-parse","--abbrev-ref","HEAD"],{cwd:mainRepoPath}).stdout.trim(),statusOutput=runCli("git",["status","--porcelain=v1","-z","--untracked-files=all"],{cwd:mainRepoPath}).stdout;return{branch,untracked:parseUntrackedPaths(statusOutput)}}export function harvestFiles(opts){const{worktreePath,mainRepoPath,onFile}=opts,result={copied:[],skipped:[],protectedUntracked:[]};if(opts.captureParentState){const snapshot=captureParentSnapshot(mainRepoPath);result.parentBranchBefore=snapshot.branch,result.parentUntrackedBefore=snapshot.untracked}const statusOutput=runCli("git",["status","--porcelain=v1","-z","--untracked-files=all"],{cwd:worktreePath}).stdout;if(statusOutput.length===0)return result;const changedFiles=parsePorcelainStatus(statusOutput);if(changedFiles.length===0)return result;for(const filePath of changedFiles){const srcPath=join(worktreePath,filePath),destPath=join(mainRepoPath,filePath);if(existsSync(srcPath)&&!statSync(srcPath).isDirectory()){if(destConflict(mainRepoPath,filePath,destPath,result)){onFile?.(filePath,"skip");continue}ensureDir(dirname(destPath)),copyFileTranslated(srcPath,destPath),result.copied.push(filePath),onFile?.(filePath,"copy")}}return result}function destConflict(mainRepoPath,filePath,destPath,result){return existsSync(destPath)?fileIsUntrackedInMainRepo(mainRepoPath,filePath)?(result.protectedUntracked.push(filePath),!0):fileHasUncommittedChanges(mainRepoPath,filePath)?(result.skipped.push(filePath),!0):!1:!1}function fileIsUntrackedInMainRepo(mainRepoPath,filePath){try{return runCli("git",["ls-files","--",filePath],{cwd:mainRepoPath}).stdout.trim()===""}catch{return!1}}function fileHasUncommittedChanges(mainRepoPath,filePath){try{return runCli("git",["diff","--quiet","--",filePath],{cwd:mainRepoPath}),runCli("git",["diff","--quiet","--cached","--",filePath],{cwd:mainRepoPath}),!1}catch{return!0}}

package/dist/worktree/links.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{existsSync,lstatSync,readdirSync,readlinkSync,statSync}from"node:fs";import{copyFileTranslated,copyTreeTranslated,ensureDir,symlinkTranslated,toFsError}from"../utils/fs.js";import{dirname,join,resolve}from"node:path";const SYMLINK_CHILDREN_EXCLUSIONS=new Set([".vite",".cache",".vite-temp",".arbiter-test-scratch"]);function symlinkSafe(srcPath,destPath,linkResult){try{symlinkTranslated(srcPath,destPath)}catch(e){if(e.code==="EEXIST"&&lstatSync(destPath).isSymbolicLink())return linkResult;throw e}return linkResult}export function materializeLink(spec,mainRepoPath,worktreePath){const sourcePath=resolve(mainRepoPath,spec.path),destPath=resolve(worktreePath,spec.path),linkType=spec.type??"file",strategy=spec.strategy??"symlink";if(existsSync(destPath)&&!(linkType==="directory"&&strategy==="symlink-children")){if(!lstatSync(destPath).isSymbolicLink())throw new Error(`Cannot materialize '${spec.path}': a non-symlink already exists at ${destPath}. Remove it manually then retry.`);return{spec,result:linkType==="directory"?"LINKED_DIR":"LINKED"}}const sourceExists=existsSync(sourcePath);if(linkType==="directory"){const result=sourceExists?materializeDirectory(spec,strategy,sourcePath,destPath,mainRepoPath):missingOrThrow(spec,`Required directory missing: ${spec.path} in ${mainRepoPath}`);return{spec,result}}return{spec,result:materializeFile(spec,sourcePath,destPath,mainRepoPath)}}function materializeDirectory(spec,strategy,sourcePath,destPath,mainRepoPath){if(!statSync(sourcePath).isDirectory())throw new Error(`Expected directory but found file at: ${spec.path} in ${mainRepoPath}`);return ensureDir(dirname(destPath)),strategy==="symlink"?symlinkSafe(sourcePath,destPath,"LINKED_DIR"):strategy==="symlink-children"?materializeChildren(sourcePath,destPath,spec.path):(copyTreeTranslated(sourcePath,destPath,{recursive:!0}),"COPIED_DIR")}function materializeFile(spec,sourcePath,destPath,mainRepoPath){if(existsSync(sourcePath))return ensureDir(dirname(destPath)),symlinkSafe(sourcePath,destPath,"LINKED");if(spec.template){const templatePath=resolve(mainRepoPath,spec.template);if(existsSync(templatePath))return ensureDir(dirname(destPath)),copyFileTranslated(templatePath,destPath),"COPIED_TEMPLATE"}return missingOrThrow(spec,`Required link source missing: ${spec.path} in ${mainRepoPath}`)}function missingOrThrow(spec,message){if(spec.required===!0)throw new Error(message);return"MISSING"}function materializeChildren(sourcePath,destPath,specPath){if(existsSync(destPath)&&lstatSync(destPath).isSymbolicLink())throw new Error(`Cannot materialize '${specPath}' with strategy 'symlink-children': ${destPath} is a whole-directory symlink (old 'symlink' strategy). Remove it manually then retry.`);ensureDir(destPath);for(const child of readdirSync(sourcePath)){if(SYMLINK_CHILDREN_EXCLUSIONS.has(child))continue;const childDest=join(destPath,child);existsSync(childDest)||lstatSync2IsLink(childDest)||symlinkTranslated(join(sourcePath,child),childDest)}return"LINKED_CHILDREN"}function lstatSync2IsLink(path){try{return lstatSync(path).isSymbolicLink()}catch{return!1}}export function checkLinkIntegrity(specs,worktreePath){const dangling=[];for(const spec of specs){const linkPath=resolve(worktreePath,spec.path);try{const stat=lstatSync(linkPath);stat.isSymbolicLink()?pushIfDangling(linkPath,spec.path,dangling):stat.isDirectory()&&spec.strategy==="symlink-children"&&checkChildLinks(linkPath,spec.path,dangling)}catch(e){if(e.code!=="ENOENT")throw toFsError(e,linkPath)}}return dangling}function checkChildLinks(dirPath,specPath,dangling){for(const child of readdirSync(dirPath)){const childPath=join(dirPath,child);lstatSync(childPath).isSymbolicLink()&&pushIfDangling(childPath,`${specPath}/${child}`,dangling)}}function pushIfDangling(linkPath,displayPath,dangling){const target=readlinkSync(linkPath),resolvedTarget=resolve(dirname(linkPath),target);existsSync(resolvedTarget)||dangling.push(`${displayPath} \u2192 ${target} (target missing)`)}

package/dist/worktree/paths.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{dirname,basename,join}from"node:path";export function sanitizeTaskId(raw){const trimmed=raw.trim(),core=trimmed.startsWith("#")?trimmed.slice(1):trimmed;if(core.length===0)throw new Error(`Invalid task ID (empty): ${JSON.stringify(raw)}`);if(!/^[A-Za-z0-9._-]+$/.test(core))throw new Error(`Invalid task ID (illegal characters, must match [A-Za-z0-9._-]): ${raw}`);if(core.startsWith("-"))throw new Error(`Invalid task ID (must not start with '-'): ${raw}`);if(core.includes(".."))throw new Error(`Invalid task ID (must not contain '..'): ${raw}`);return`#${core}`}export function sanitizeSlug(raw){return raw.trim().toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,40)}export function branchNameFor(taskId,slug){const id=sanitizeTaskId(taskId);return slug?`task/${id}-${sanitizeSlug(slug)}`:`task/${id}`}export function worktreeDirectoryName(taskId,slug){const id=sanitizeTaskId(taskId).replace(/^#/,"");return slug?`${id}-${sanitizeSlug(slug)}`:id}export function resolveWorktreeBase(gitRoot,configBase,envOverride){if(envOverride)return envOverride;if(configBase)return configBase;const parent=dirname(gitRoot),repoName=basename(gitRoot);return join(parent,`${repoName}.worktrees`)}export function worktreePathFor(worktreeBase,taskId,slug){return join(worktreeBase,worktreeDirectoryName(taskId,slug))}export function siblingWorktreePathFor(gitRoot,siblingSlug){if(siblingSlug.length===0||/[/\\]/.test(siblingSlug)||siblingSlug.includes(".."))throw new Error(`Invalid sibling worktree name (must not be empty or contain path separators or '..'): ${JSON.stringify(siblingSlug)}`);const parent=dirname(gitRoot),repoName=basename(gitRoot);return join(parent,`${repoName}.worktrees`,siblingSlug)}