@getarbiter/cli 0.5.0

package/dist/compatibility/probe.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+import{existsSync}from"node:fs";import{join}from"node:path";import{runCli,CliError}from"../utils/run-cli.js";import{detectLanguage}from"../detectors/language.js";import{detectPackageManager}from"../detectors/package-manager.js";import{matches,UnparseableConstraintError,validateRanges}from"./matcher.js";import{parseNodeVersion,parseNpmVersion,parseJavaVersion,parseGradleVersion,parseMavenVersion,parseRustVersion,parseCargoVersion,parseGoVersion,parsePythonVersion,parsePipVersion,parseRuffVersion,parseLintImportsVersion,parseKotlinVersion}from"./parsers.js";import{makeVerifyReport}from"./schema.js";import matrixJson from"./matrix.json"with{type:"json"};const TOOL_SPECS={node:{args:["--version"],channel:"stdout",parse:parseNodeVersion},npm:{args:["--version"],channel:"stdout",parse:parseNpmVersion},java:{args:["-version"],channel:"stderr",parse:parseJavaVersion},gradle:{args:["--version"],channel:"stdout",parse:parseGradleVersion},mvn:{args:["--version"],channel:"stdout",parse:parseMavenVersion},rustc:{args:["--version"],channel:"stdout",parse:parseRustVersion},cargo:{args:["--version"],channel:"stdout",parse:parseCargoVersion},go:{args:["version"],channel:"stdout",parse:parseGoVersion},python3:{args:["--version"],channel:"stdout",parse:parsePythonVersion},pip:{args:["--version"],channel:"stdout",parse:parsePipVersion},ruff:{args:["--version"],channel:"stdout",parse:parseRuffVersion},"lint-imports":{args:["--version"],channel:"stdout",parse:parseLintImportsVersion},kotlinc:{args:["-version"],channel:"stderr",parse:parseKotlinVersion}};function parseTimeoutEnv(name,fallback){const raw=process.env[name];if(raw===void 0||raw==="")return fallback;const n=Number(raw);return Number.isFinite(n)&&n>0?n:fallback}const PROBE_TIMEOUT_MS=parseTimeoutEnv("ARBITER_PROBE_TIMEOUT_MS",1e4),BUILD_PROBE_TIMEOUT_MS=parseTimeoutEnv("ARBITER_BUILD_PROBE_TIMEOUT_MS",6e4),TSC_BUILD_PROBE={name:"tsc:noEmit",command:"npx",args:["tsc","--noEmit"],requires:"tsconfig.json"},GRADLEW_BUILD_PROBE={name:"gradlew:version",command:"./gradlew",args:["--version"],requires:"gradlew"},CARGO_BUILD_PROBE={name:"cargo:check",command:"cargo",args:["check"],requires:"Cargo.toml"},GO_BUILD_PROBE={name:"go:build",command:"go",args:["build","-n","./..."],requires:"go.mod"};function buildProbesFor(lang){switch(lang){case"typescript":return[TSC_BUILD_PROBE];case"java":case"kotlin":return[GRADLEW_BUILD_PROBE];case"rust":return[CARGO_BUILD_PROBE];case"go":return[GO_BUILD_PROBE];case"multi":return[TSC_BUILD_PROBE,GRADLEW_BUILD_PROBE];default:return[]}}const VERSION_FLAG_UNSUPPORTED=/(no such option|unrecognized arguments?|unknown option|invalid option)[^\n]*--version/i;export function probeTool(tool,args,range,channel){const spec=TOOL_SPECS[tool];if(!spec)return{tool,status:"failed",reason:`no spec for tool: ${tool}`};const parse=spec.parse;let raw;try{const result=runCli(tool,args,{timeoutMs:PROBE_TIMEOUT_MS});raw=channel==="stderr"?result.stderr:result.stdout}catch(err){if(err instanceof CliError){if(err.notFound)return{tool,status:"skipped",reason:"toolchain-missing"};if(err.timedOut)return{tool,status:"failed",reason:`probe timeout (${PROBE_TIMEOUT_MS}ms)`};const detail=(err.stderr||err.stdout||err.message).trim().slice(0,500);return VERSION_FLAG_UNSUPPORTED.test(detail)?{tool,status:"skipped",reason:"version-flag-unsupported: tool does not support --version (cannot probe version)"}:{tool,status:"failed",reason:`exit ${err.exitCode}: ${detail}`}}throw err}const version=parse(raw);if(version===null)return{tool,status:"failed",reason:`unrecognized version output: ${raw.trim().slice(0,60)}`};let inRange;try{inRange=matches(version,range)}catch(err){if(err instanceof UnparseableConstraintError)return{tool,status:"failed",version,reason:`matrix-bug: ${err.message}`};throw err}return inRange?{tool,status:"passed",version}:{tool,status:"failed",version,reason:`version ${version.major}.${version.minor} outside ${range}`}}const REQUIRED_MATRIX_KEYS=["typescript","java","kotlin","rust","go","python"];export function validateMatrix(raw){if(typeof raw!="object"||raw===null||Array.isArray(raw))throw new Error("matrix.json: root must be an object");const obj=raw;for(const key of REQUIRED_MATRIX_KEYS){const arr=obj[key];if(!Array.isArray(arr))throw new Error(`matrix.json: ${key} must be an array`);arr.forEach((entry,i)=>{if(typeof entry!="object"||entry===null)throw new Error(`matrix.json: ${key}[${i}] must be an object`);const e=entry;if(typeof e.tool!="string")throw new Error(`matrix.json: ${key}[${i}].tool expected string, got ${typeof e.tool}`);if(typeof e.range!="string")throw new Error(`matrix.json: ${key}[${i}].range expected string, got ${typeof e.range}`)})}return obj}const MATRIX=validateMatrix(matrixJson);function assertMatrixRangesParseable(matrix){const allEntries=[];for(const key of REQUIRED_MATRIX_KEYS)for(const entry of matrix[key])allEntries.push({tool:entry.tool,range:entry.range});const failures=validateRanges(allEntries);if(failures.length>0){const summary=failures.map(f=>`  ${f.tool}: ${f.reason}`).join(`
+`);throw new Error(`matrix.json contains ${failures.length} unparseable range(s):
+${summary}`)}}assertMatrixRangesParseable(MATRIX);const CompilerErrorPatterns=[/\berror(\[E\d+\])?:/i,/\bTS\d{4,}:/,/\bFAILED\b/,/\bfatal error\b/i,/compilation (failed|error)/i];export function runBuildProbe(dir,spec){if(spec.requires!==""&&!existsSync(join(dir,spec.requires)))return{tool:spec.name,status:"skipped",kind:"build",reason:`build-file-not-found: ${spec.requires}`};if(spec.command==="npx"&&!existsSync(join(dir,"node_modules")))return{tool:spec.name,status:"skipped",kind:"build",reason:"node-modules-missing: run `npm install`, then `arbiter validate` to verify"};try{const stderr=runCli(spec.command,spec.args,{cwd:dir,timeoutMs:BUILD_PROBE_TIMEOUT_MS}).stderr.trim();return stderr!==""&&CompilerErrorPatterns.some(p=>p.test(stderr))?{tool:spec.name,status:"failed",kind:"build",reason:`exit 0 with compiler errors on stderr: ${stderr.slice(0,500)}`}:stderr!==""?{tool:spec.name,status:"passed",kind:"build",reason:`stderr warnings (exit 0): ${stderr.slice(0,200)}`}:{tool:spec.name,status:"passed",kind:"build"}}catch(err){if(err instanceof CliError){if(err.notFound)return{tool:spec.name,status:"skipped",kind:"build",reason:"toolchain-missing"};if(err.timedOut)return{tool:spec.name,status:"failed",kind:"build",reason:`build timeout (${BUILD_PROBE_TIMEOUT_MS}ms)`};const detail=(err.stderr||err.stdout||err.message).trim().slice(0,500);return{tool:spec.name,status:"failed",kind:"build",reason:`exit ${err.exitCode}: ${detail}`}}throw err}}function matrixEntriesFor(lang){switch(lang){case"typescript":return MATRIX.typescript;case"java":return MATRIX.java;case"kotlin":return MATRIX.kotlin;case"rust":return MATRIX.rust;case"go":return MATRIX.go;case"python":return MATRIX.python;case"multi":return[...MATRIX.typescript,...MATRIX.java];default:return[]}}export function runProbes(dir){const lang=detectLanguage(dir),packageManager=detectPackageManager(dir),entries=matrixEntriesFor(lang),probes=entries.map(({tool,range})=>{if(tool==="npm"&&packageManager.name!=="npm")return{tool:"npm",status:"skipped",reason:`package-manager: ${packageManager.name} is configured for this project \u2014 the npm probe does not apply`};const spec=TOOL_SPECS[tool];return spec?probeTool(tool,spec.args,range,spec.channel):{tool,status:"failed",reason:`no spec for tool: ${tool}`}});entries.length===0&&probes.push({tool:"matrix",status:"skipped",reason:`no matrix coverage for stack '${lang}'`});for(const buildSpec of buildProbesFor(lang))probes.push(runBuildProbe(dir,buildSpec));const hooksProbe=probeHooksPath(dir);return hooksProbe!==null&&probes.push(hooksProbe),makeVerifyReport(dir,lang,probes)}export function probeHooksPath(dir){const preCommitPath=join(dir,".githooks","pre-commit");if(!existsSync(preCommitPath))return null;let configuredPath;try{configuredPath=runCli("git",["config","--get","core.hooksPath"],{cwd:dir,timeoutMs:PROBE_TIMEOUT_MS}).stdout.trim()}catch{configuredPath=null}return configuredPath===".githooks"?{tool:"hooksPath",status:"passed"}:{tool:"hooksPath",status:"warning",reason:".githooks/pre-commit exists but core.hooksPath is not set to .githooks. Run: git config core.hooksPath .githooks (or ./scripts/setup-hooks.sh for non-Node projects)."}}

package/dist/compatibility/report.js

@@ -0,0 +1,2 @@
+const REMEDIATION={node:"Upgrade Node.js: https://nodejs.org/en/download",npm:"Upgrade npm: npm install -g npm",java:"Upgrade JDK: https://adoptium.net",gradle:"Upgrade Gradle wrapper: ./gradlew wrapper --gradle-version=8.x",mvn:"Upgrade Maven: https://maven.apache.org/download.cgi",rustc:"Upgrade Rust: rustup update stable",cargo:"Upgrade Cargo (via rustup): rustup update stable",go:"Upgrade Go: https://go.dev/dl",python3:"Upgrade Python: https://python.org/downloads",pip:"Upgrade pip: python3 -m pip install --upgrade pip",ruff:"Install/upgrade ruff: pip install --upgrade ruff",kotlinc:"Upgrade Kotlin: https://kotlinlang.org/docs/releases.html","gradlew:version":"Check Gradle wrapper version: ./gradlew wrapper --gradle-version=X","tsc:noEmit":"Fix TypeScript errors or install: npm install --save-dev typescript","cargo:check":"Fix Rust compile errors: cargo check","go:build":"Fix Go build errors: go build ./..."};function versionStr(p){const v="version"in p?p.version:void 0;return v?`${v.major}.${v.minor}.${v.patch}`:""}export function formatText(report){const lines=[];lines.push(`arbiter verify \u2014 stack: ${report.stack}  dir: ${report.dir}`),lines.push("");for(const p of report.probes){const ver=versionStr(p),detail=p.reason?`  (${p.reason})`:ver?`  ${ver}`:"",prefix=p.status==="warning"?"\u26A0 ":"";if(lines.push(`  [${p.status}] ${prefix}${p.tool}${detail}`),p.status==="failed"){const hint=REMEDIATION[p.tool]??"See tool documentation";lines.push(`    \u2192 ${hint}`)}p.status==="warning"&&p.reason&&lines.push(`    \u2192 ${p.reason}`)}if(lines.push(""),report.hasFailures?lines.push("Result: FAIL"):lines.push("Result: OK"),report.hasWarnings){const warnCount=report.probes.filter(p=>p.status==="warning").length;lines.push(`\u26A0 ${warnCount} warning(s): run suggested commands above`)}return lines.join(`
+`)}

package/dist/compatibility/schema.d.ts

@@ -0,0 +1,80 @@
+import type { SemVer } from './parsers.js';
+/** One tool probe entry within the matrix */
+export interface MatrixEntry {
+    /** CLI tool name (e.g. "node", "java") */
+    tool: string;
+    /** Version range expression (e.g. ">=18 <22") */
+    range: string;
+}
+/** Per-language set of required tools */
+export interface LanguageMatrix {
+    typescript: MatrixEntry[];
+    java: MatrixEntry[];
+    kotlin: MatrixEntry[];
+    rust: MatrixEntry[];
+    go: MatrixEntry[];
+    python: MatrixEntry[];
+}
+/** Result of probing a single tool */
+export type ProbeStatus = 'passed' | 'skipped' | 'failed' | 'warning';
+/** Whether probe checks installed tool version or invokes a build command */
+type ProbeKind = 'version' | 'build';
+/** Fields shared by every probe outcome regardless of `status`. */
+interface ProbeResultBase {
+    tool: string;
+    /** Distinguishes version checks from build-invocation probes */
+    kind?: ProbeKind;
+}
+/**
+ * Result of probing a single tool, discriminated on `status` (#1533 item 3).
+ * Modelling the four outcomes as a union — rather than a flat record with three
+ * independent optionals — makes the real invariants compile-time facts: a
+ * `failed`/`skipped`/`warning` probe ALWAYS carries a `reason`, and only the
+ * version-bearing states expose `version`. Consumers no longer defensively
+ * null-check fields the type can prove present (or absent).
+ */
+export type ProbeResult = (ProbeResultBase & {
+    status: 'passed';
+    /** Parsed version when this was a version probe that found the tool. */
+    version?: SemVer;
+    /** Optional advisory trail (e.g. build stderr warnings on a zero exit). */
+    reason?: string;
+}) | (ProbeResultBase & {
+    status: 'failed';
+    /** Present when a version probe found-but-rejected the tool. */
+    version?: SemVer;
+    /** Human-readable failure cause — always present for a failure. */
+    reason: string;
+}) | (ProbeResultBase & {
+    status: 'skipped';
+    /** Why the probe was skipped (e.g. toolchain-missing). */
+    reason: string;
+}) | (ProbeResultBase & {
+    status: 'warning';
+    /** Human-readable warning detail — always present for a warning. */
+    reason: string;
+});
+/**
+ * Aggregated report for all probed tools. `hasFailures`/`hasWarnings` are DERIVED from `probes`
+ * and `probes` is readonly, so the invariant cannot drift — always build one via
+ * {@link makeVerifyReport}, never by hand-setting the two booleans alongside a mutable array.
+ */
+export interface VerifyReport {
+    /** Target directory that was probed */
+    readonly dir: string;
+    /** Detected language stack */
+    readonly stack: string;
+    /** Results for each probed tool */
+    readonly probes: readonly ProbeResult[];
+    /** true if any probe has status "failed" (derived from `probes`) */
+    readonly hasFailures: boolean;
+    /** true if any probe has status "warning" (derived from `probes`) */
+    readonly hasWarnings: boolean;
+}
+/**
+ * Construct a {@link VerifyReport}, deriving `hasFailures`/`hasWarnings` from `probes` in the one
+ * place they are computed. This is the only sanctioned constructor — it keeps the two summary
+ * booleans in lock-step with the probe array so no producer can leave them out of sync (#1533).
+ */
+export declare function makeVerifyReport(dir: string, stack: string, probes: readonly ProbeResult[]): VerifyReport;
+export {};

package/dist/compatibility/schema.js

@@ -0,0 +1 @@
+export function makeVerifyReport(dir,stack,probes){return{dir,stack,probes,hasFailures:probes.some(p=>p.status==="failed"),hasWarnings:probes.some(p=>p.status==="warning")}}

package/dist/compatibility/skills-matrix.json

@@ -0,0 +1,98 @@
+{
+  "$schemaVersion": 1,
+  "_lastUpdated": "2026-05-16",
+  "_refreshCadence": "monthly",
+  "_promotionCriteria": "proven = used in >=3 arbiter recipes + verified version range; beta = present but not exercised by CI fixtures; unknown = detected but no matrix entry yet",
+  "skills": [
+    {
+      "skillId": "superpowers:test-driven-development",
+      "pluginOwner": "superpowers",
+      "versionRange": ">=5.0.0",
+      "role": "TDD enforcement",
+      "integrationStatus": "proven",
+      "replaces": ["tdd"],
+      "referenceUrl": "https://github.com/obra/superpowers"
+    },
+    {
+      "skillId": "superpowers:verification-before-completion",
+      "pluginOwner": "superpowers",
+      "versionRange": ">=5.0.0",
+      "role": "completion-claim verification",
+      "integrationStatus": "proven",
+      "replaces": ["verification"],
+      "referenceUrl": "https://github.com/obra/superpowers"
+    },
+    {
+      "skillId": "superpowers:brainstorming",
+      "pluginOwner": "superpowers",
+      "versionRange": ">=5.0.0",
+      "role": "pre-implementation design",
+      "integrationStatus": "beta",
+      "replaces": [],
+      "referenceUrl": "https://github.com/obra/superpowers"
+    },
+    {
+      "skillId": "superpowers:writing-plans",
+      "pluginOwner": "superpowers",
+      "versionRange": ">=5.0.0",
+      "role": "plan authoring",
+      "integrationStatus": "beta",
+      "replaces": [],
+      "referenceUrl": "https://github.com/obra/superpowers"
+    },
+    {
+      "skillId": "superpowers:systematic-debugging",
+      "pluginOwner": "superpowers",
+      "versionRange": ">=5.0.0",
+      "role": "debug discipline",
+      "integrationStatus": "beta",
+      "replaces": [],
+      "referenceUrl": "https://github.com/obra/superpowers"
+    },
+    {
+      "skillId": "superpowers:subagent-driven-development",
+      "pluginOwner": "superpowers",
+      "versionRange": ">=5.0.0",
+      "role": "parallel implementation",
+      "integrationStatus": "beta",
+      "replaces": [],
+      "referenceUrl": "https://github.com/obra/superpowers"
+    },
+    {
+      "skillId": "superpowers:using-superpowers",
+      "pluginOwner": "superpowers",
+      "versionRange": ">=5.0.0",
+      "role": "session bootstrap (skill discovery)",
+      "integrationStatus": "beta",
+      "replaces": [],
+      "referenceUrl": "https://github.com/obra/superpowers"
+    },
+    {
+      "skillId": "pr-review-toolkit:review-pr",
+      "pluginOwner": "pr-review-toolkit",
+      "versionRange": ">=1.0.0",
+      "role": "PR code review",
+      "integrationStatus": "proven",
+      "replaces": [],
+      "referenceUrl": "https://github.com/anthropics/claude-code"
+    },
+    {
+      "skillId": "frontend-design:frontend-design",
+      "pluginOwner": "frontend-design",
+      "versionRange": ">=1.0.0",
+      "role": "UI/UX guidance for frontend-spa",
+      "integrationStatus": "proven",
+      "replaces": [],
+      "referenceUrl": ""
+    },
+    {
+      "skillId": "ponytail:ponytail",
+      "pluginOwner": "ponytail",
+      "versionRange": ">=4.0.0",
+      "role": "YAGNI drafting persona (/ship green-phase companion, #1730)",
+      "integrationStatus": "beta",
+      "replaces": [],
+      "referenceUrl": "https://github.com/DietrichGebert/ponytail"
+    }
+  ]
+}

package/dist/compatibility/skills-validator.d.ts

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+import type { SkillMatrixEntry } from '../integrations/types.js';
+declare const SkillsMatrixSchema: z.ZodObject<{
+    $schemaVersion: z.ZodLiteral<1>;
+    _lastUpdated: z.ZodString;
+    _refreshCadence: z.ZodString;
+    _promotionCriteria: z.ZodString;
+    skills: z.ZodArray<z.ZodObject<{
+        skillId: z.ZodString;
+        pluginOwner: z.ZodString;
+        versionRange: z.ZodString;
+        role: z.ZodString;
+        integrationStatus: z.ZodEnum<{
+            unknown: "unknown";
+            beta: "beta";
+            proven: "proven";
+        }>;
+        replaces: z.ZodArray<z.ZodString>;
+        referenceUrl: z.ZodString;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export type SkillsMatrix = z.infer<typeof SkillsMatrixSchema>;
+export interface ValidationResult {
+    valid: boolean;
+    errors: string[];
+}
+export declare function validateSkillsMatrix(raw: unknown): ValidationResult;
+export declare function loadSkillsMatrix(): SkillsMatrix;
+export declare function getSkillsMatrixEntries(): SkillMatrixEntry[];
+export {};

package/dist/compatibility/skills-validator.js

@@ -0,0 +1,4 @@
+// SPDX-License-Identifier: Apache-2.0
+import{z}from"zod";import skillsMatrixJson from"./skills-matrix.json"with{type:"json"};import skillNames from"../generators/skill-names.json"with{type:"json"};const VALID_SKILL_NAMES=new Set(skillNames),SkillEntrySchema=z.object({skillId:z.string().min(1),pluginOwner:z.string().min(1),versionRange:z.string().min(1),role:z.string(),integrationStatus:z.enum(["proven","beta","unknown"]),replaces:z.array(z.string()),referenceUrl:z.string()}),SkillsMatrixSchema=z.object({$schemaVersion:z.literal(1),_lastUpdated:z.string(),_refreshCadence:z.string(),_promotionCriteria:z.string(),skills:z.array(SkillEntrySchema)});export function validateSkillsMatrix(raw){const errors=[],parsed=SkillsMatrixSchema.safeParse(raw);if(!parsed.success){for(const issue of parsed.error.issues)errors.push(`${issue.path.join(".")}: ${issue.message}`);return{valid:!1,errors}}for(const entry of parsed.data.skills)for(const name of entry.replaces)VALID_SKILL_NAMES.has(name)||errors.push(`skills-matrix: "${entry.skillId}" replaces unknown SKILL_NAME "${name}". Valid names: ${[...VALID_SKILL_NAMES].join(", ")}`);return{valid:errors.length===0,errors}}export function loadSkillsMatrix(){const raw=skillsMatrixJson,result=validateSkillsMatrix(raw);if(!result.valid)throw new Error(`skills-matrix.json is invalid:
+${result.errors.join(`
+`)}`);return raw}export function getSkillsMatrixEntries(){return loadSkillsMatrix().skills.map(s=>({skillId:s.skillId,pluginOwner:s.pluginOwner,versionRange:s.versionRange,role:s.role,integrationStatus:s.integrationStatus,replaces:s.replaces,referenceUrl:s.referenceUrl}))}

package/dist/compatibility/tooling-proposals.json

@@ -0,0 +1,5 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "description": "Tooling proposals for stacks not yet in cross-language-matrix.json. Status lifecycle: proposed → accepted → promotable → promoted → demoted.",
+  "proposals": []
+}

package/dist/config/arbiter-ignore.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+import{existsSync,readFileSync}from"node:fs";import{join}from"node:path";import{globMatch}from"../conformance/shared.js";export const IGNORE_FILE_NAME=".arbiterignore";export function loadIgnorePatterns(targetDir){const path=join(targetDir,IGNORE_FILE_NAME);if(!existsSync(path))return[];let raw;try{raw=readFileSync(path,"utf-8")}catch{return[]}return raw.split(`
+`).map(line=>line.trim()).filter(line=>line.length>0&&!line.startsWith("#"))}function patternGlobs(pattern){const dirOnly=pattern.endsWith("/"),stripped=dirOnly?pattern.slice(0,-1):pattern,anchored=stripped.startsWith("/"),body=anchored?stripped.slice(1):stripped;if(body.length===0)return[];const base=anchored||body.includes("/")?body:`**/${body}`;return dirOnly?[`${base}/**`]:[base,`${base}/**`]}function matchesPattern(pattern,key){return patternGlobs(pattern).some(glob=>globMatch(glob,key))}export function isIgnored(patterns,key){let ignored=!1;for(const raw of patterns){const negated=raw.startsWith("!"),pattern=negated?raw.slice(1):raw;matchesPattern(pattern,key)&&(ignored=!negated)}return ignored}export function matchesOnly(globs,key){return globs.some(glob=>matchesPattern(glob,key))}export function buildSelectionPredicate(opts){return key=>isIgnored(opts.patterns,key)?"ignored":opts.only.length>0&&!matchesOnly(opts.only,key)?"deselected":"emit"}

package/dist/config/collaboration-mode-defaults.js

@@ -0,0 +1 @@
+import{levelAtLeast}from"./levels.js";const PIPELINE_STYLE_TABLE={"trunk-solo":{L1:"starter",L2:"starter",L3:"standard",L4:"standard"},"peer-review":{L1:"starter",L2:"standard",L3:"standard",L4:"standard"},"gated-review":{L1:"standard",L2:"standard",L3:"industrial",L4:"industrial"}},BRANCHING_STRATEGY_DEFAULTS={"trunk-solo":"trunk-direct","peer-review":"github-flow","gated-review":"github-flow"},WORKTREE_MODE_DEFAULTS={"trunk-solo":"optional","peer-review":"always","gated-review":"always"},MERGE_MODE_DEFAULTS={"trunk-solo":"direct","peer-review":"pr-ff","gated-review":"pr-ff"};export const DEFAULT_AUTONOMY="L0";const MAX_PARALLEL_WORKTREES_DEFAULTS={"trunk-solo":1,"peer-review":3,"gated-review":3};export function resolveDefaultMaxParallelWorktrees(mode){return MAX_PARALLEL_WORKTREES_DEFAULTS[mode]}export function resolveMaxParallelWorktrees(config){return config.automation?.maxParallelWorktrees??resolveDefaultMaxParallelWorktrees(resolveCollaborationMode(config))}export function resolveDefaultGateLevel(level){return levelAtLeast(level,"L3")?"L2":"L1"}export function resolvePipelineStyle(mode,level){return PIPELINE_STYLE_TABLE[mode][level]}export function resolveDefaultBranchingStrategy(mode){return BRANCHING_STRATEGY_DEFAULTS[mode]}export function resolveDefaultWorktreeMode(mode){return WORKTREE_MODE_DEFAULTS[mode]}export function resolveDefaultMergeMode(mode){return MERGE_MODE_DEFAULTS[mode]}export function collaborationModeFromAnswers(answers){return answers.collaborationMode?answers.collaborationMode:answers.soloDevMode===!0?"trunk-solo":"peer-review"}export function resolveCollaborationMode(config){return config.collaborationMode!==void 0?config.collaborationMode:config.enableSoloDevMode===!0?"trunk-solo":"peer-review"}export function resolveCollaborationAxes(config){const collaborationMode=resolveCollaborationMode(config);return{collaborationMode,mergeMode:config.solo?.mergeMode??resolveDefaultMergeMode(collaborationMode),worktreeMode:config.tasks?.worktree??resolveDefaultWorktreeMode(collaborationMode),branchingStrategy:config.branchingStrategy??resolveDefaultBranchingStrategy(collaborationMode),pipelineStyle:config.pipelineStyle??resolvePipelineStyle(collaborationMode,config.governanceLevel)}}

package/dist/config/diff.js

@@ -0,0 +1 @@
+const AXIS_FIELDS=new Set(["governanceLevel","archetype","architectureStyle","isMultiTenant","hasDatabase","databaseEngine","hasPublicApi","contractType","language"]),FIELD_DEFAULTS={contractType:"none",architectureStyle:"none",archetype:"library",isMultiTenant:!1,hasDatabase:!1,databaseEngine:"none",hasPublicApi:!1};function normField(key,val){return val===void 0&&key in FIELD_DEFAULTS?FIELD_DEFAULTS[key]:val}const PATH_TO_KEYS={tools:["agents-md","claude","codex","skills","agents-claude","githooks","ship-driver"],useGitHub:["github","root","check-all"],permitGitHub:["github","root","check-all","ci-tier","github-setup"],"features.debtGates":["debt-gates","debt-ratchet","coverage","duplication","stride-enforcement","anti-drift-validators"],"features.securityScanning":["security"],"features.mutationTesting":["mutation","check-all","nightly"],"features.contractTesting":["contract-testing","integration-testing","github"],"features.evidenceHarness":["evidence-retention","nightly"],"features.selfValidationHarness":["self-validation","anti-drift-validators","check-all"],"features.auditToolchain":["audit-toolchain","check-all"],"features.fiveLaneCi":["ci-five-lane","github","ci-tier","github-setup"],"features.suppressions":["suppressions"],"features.soloDevMode":["github","githooks"],collaborationMode:["github","githooks","root","check-all","claude"],solo:["claude","github"],branchingStrategy:["claude","github"],"thresholds.lineCoverage":["check-all","coverage"],"thresholds.branchCoverage":["check-all","coverage"],"thresholds.mutationScore":["mutation","check-all"],"thresholds.cyclomaticComplexity":["debt-gates"],"thresholds.methodLength":["debt-gates"],"thresholds.maxParams":["debt-gates"],invariantTiers:["global-invariants","agents-md"],basePackage:["archunit","mutation","modulith","api-middleware","behavioral-tests","integration-testing","contract-testing"],strictnessTier:["root","debt-gates","rust-boundaries"],runnerProfile:["github"],thresholdProfile:["root","coverage","debt-gates"],evidenceRetention:["evidence-retention","baseline-gitignore","nightly"],taxonomy:["test-taxonomy","api-e2e"],hasPublicApi:["api-middleware"],deployTarget:["github","infra","ci-tier"],industryOverlay:["pharma","iso27001-controls","iso9001","regulated-overlay"],"observability.provider":["observability"],"auth.provider":["auth"],frontend:["frontend-governance","frontend-quality"],"frontend.framework":["frontend-governance","frontend-quality"],"frontend.stateManager":["frontend-governance"],"frontend.validationLib":["frontend-governance"],lanes:["frontend-governance","frontend-quality","playwright-ts","playwright-python"]};function diffLeaf(prefix,a,b,paths){if(Array.isArray(a)||Array.isArray(b)){JSON.stringify(a)!==JSON.stringify(b)&&paths.push(prefix);return}if(typeof a=="object"&&a!==null&&typeof b=="object"&&b!==null){const keys=new Set([...Object.keys(a),...Object.keys(b)]);for(const k of keys)diffLeaf(`${prefix}.${k}`,a[k],b[k],paths);return}a!==b&&paths.push(prefix)}export function diffConfig(stored,next){const paths=[],s=stored,n=next,keys=new Set([...Object.keys(s),...Object.keys(n)]);for(const k of keys){const a=normField(k,s[k]),b=normField(k,n[k]);k==="features"||k==="thresholds"||k==="observability"||k==="auth"||k==="frontend"?diffLeaf(k,a,b,paths):JSON.stringify(a)!==JSON.stringify(b)&&paths.push(k)}return{paths}}export function impactedGenerators(diff){const result=new Set;for(const path of diff.paths)if(AXIS_FIELDS.has(path))return result.add("*"),result;for(const path of diff.paths){const keys=PATH_TO_KEYS[path];if(!keys)return result.add("*"),result;for(const k of keys)result.add(k)}return result}

package/dist/config/env-overrides.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+import{parseBooleanEnv}from"../utils/env.js";import{DEFAULT_CROSS_MODEL_REVIEW,DEFAULT_THRESHOLDS,isThresholdValueInRange}from"./schema.js";const THRESHOLD_PREFIX="ARBITER_THRESHOLD__",FEATURE_PREFIX="ARBITER_FEATURE__",VALID_THRESHOLD_KEYS=new Set(["lineCoverage","branchCoverage","mutationScore","cyclomaticComplexity","methodLength","maxParams"]),VALID_FEATURE_KEYS=new Set(["contractTesting","mutationTesting","securityScanning","evidenceHarness","acceptanceAnchor","debtGates","suppressions"]);function screamingSnakeToCamel(s){return s.toLowerCase().split("_").map((part,i)=>i===0?part:part.charAt(0).toUpperCase()+part.slice(1)).join("")}function parseNumericEnv(raw){const trimmed=raw.trim();if(trimmed==="")return;const n=Number(trimmed);if(!(Number.isNaN(n)||!Number.isFinite(n)))return n}function warnDroppedOverride(envKey,reason){process.stderr.write(`[arbiter] env override ${envKey} ignored \u2014 ${reason}; default retained
+`)}function applyThresholdOverride(thresholds,envKey,rawValue){const camel=screamingSnakeToCamel(envKey.slice(THRESHOLD_PREFIX.length));if(!VALID_THRESHOLD_KEYS.has(camel))return warnDroppedOverride(envKey,`unknown threshold field "${camel}"`),thresholds;const value=parseNumericEnv(rawValue);return value===void 0?(warnDroppedOverride(envKey,`value "${rawValue}" is not a finite number`),thresholds):isThresholdValueInRange(camel,value)?{...thresholds,[camel]:value}:(warnDroppedOverride(envKey,`value "${rawValue}" is out of range`),thresholds)}function applyFeatureOverride(features,envKey,rawValue){const camel=screamingSnakeToCamel(envKey.slice(FEATURE_PREFIX.length));if(!VALID_FEATURE_KEYS.has(camel))return warnDroppedOverride(envKey,`unknown feature flag "${camel}"`),features;const value=parseBooleanEnv(rawValue);return value===void 0?(warnDroppedOverride(envKey,`value "${rawValue}" is not a recognized boolean`),features):{...features,[camel]:value}}const THRESHOLD_KEYS=["lineCoverage","branchCoverage","mutationScore","cyclomaticComplexity","methodLength","maxParams"];function thresholdsAreDefaultFor(thresholds,level){const def=DEFAULT_THRESHOLDS[level];return THRESHOLD_KEYS.every(k=>thresholds[k]===def[k])}function applyTopLevelOverride(cfg,envKey,rawValue){const tail=envKey.slice(8);if(screamingSnakeToCamel(tail)==="governanceLevel"&&(rawValue==="L1"||rawValue==="L2"||rawValue==="L3"||rawValue==="L4")){const oldLevel=cfg.governanceLevel,next={...cfg,governanceLevel:rawValue};return rawValue===oldLevel?next:thresholdsAreDefaultFor(cfg.thresholds,oldLevel)?{...next,thresholds:{...DEFAULT_THRESHOLDS[rawValue]}}:(warnDroppedOverride(envKey,`level bumped ${oldLevel}\u2192${rawValue} but custom thresholds were kept \u2014 coverage/complexity bars still reflect ${oldLevel}`),next)}return cfg}export function applyEnvOverrides(cfg,env){let thresholds={...cfg.thresholds},features={...cfg.features},next={...cfg,thresholds,features};for(const[key,rawValue]of Object.entries(env))if(rawValue!==void 0&&key.startsWith("ARBITER_")){if(key.startsWith(THRESHOLD_PREFIX)){thresholds=applyThresholdOverride(thresholds,key,rawValue),next={...next,thresholds};continue}if(key.startsWith(FEATURE_PREFIX)){features=applyFeatureOverride(features,key,rawValue),next={...next,features};continue}if(key!=="ARBITER_NO_EVIDENCE"){if(key==="ARBITER_CROSS_MODEL_REVIEW"){const value=parseBooleanEnv(rawValue);value===void 0?warnDroppedOverride(key,`value "${rawValue}" is not a recognized boolean`):next={...next,crossModelReview:{...next.crossModelReview??DEFAULT_CROSS_MODEL_REVIEW,enabled:value}};continue}next=applyTopLevelOverride(next,key,rawValue)}}return next}

package/dist/config/env-registry.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{parseBooleanEnv}from"../utils/env.js";export const ARBITER_ENV_FLAGS=[{name:"ARBITER_RUN_ID",type:"string",purpose:"Trace ID for the current process; minted once and exported so subprocesses inherit it.",isGateBypass:!1},{name:"ARBITER_LOG_LEVEL",type:"enum",enumValues:["error","warn","info","debug","trace"],default:"info",purpose:"Minimum log level. CLI --log-level takes precedence; invalid values fall back to info.",isGateBypass:!1},{name:"ARBITER_LOG_FORMAT",type:"enum",enumValues:["text","json"],default:"text",purpose:"Log output format. CLI --log-format takes precedence.",isGateBypass:!1},{name:"ARBITER_LOCALE",type:"string",purpose:'Override the UI locale. Falls back to LC_ALL, LC_MESSAGES, LANG, then "en".',isGateBypass:!1},{name:"ARBITER_EXPERIMENTAL",type:"string",purpose:"JSON map of enabled experimental flags; set by the CLI for downstream command access.",isGateBypass:!1},{name:"ARBITER_LEVEL",type:"enum",enumValues:["L1","L2","L3","L4"],purpose:"Governance level override for local gate runs.",isGateBypass:!1},{name:"ARBITER_THRESHOLD__",type:"prefix",purpose:"Prefix: override a thresholds.<field> value (e.g. ARBITER_THRESHOLD__LINE_COVERAGE=80).",isGateBypass:!1},{name:"ARBITER_FEATURE__",type:"prefix",purpose:"Prefix: override a features.<flag> value (e.g. ARBITER_FEATURE__MUTATION_TESTING=1).",isGateBypass:!1},{name:"ARBITER_CONSUMER_",type:"prefix",purpose:"Credential namespace used only by the trusted consumer-reliability preparation process; stripped before verification.",isGateBypass:!1},{name:"ARBITER_EVIDENCE_HARNESS",type:"boolean",default:!1,purpose:'Override the guard-done-evidence hook activation flag (#1872). "1"/"true" enforces, "0"/"false" disarms; unset falls through to features.evidenceHarness in arbiter.json.',isGateBypass:!1},{name:"ARBITER_CROSS_MODEL_REVIEW",type:"boolean",default:!1,purpose:"Per-run override for crossModelReview.enabled; disabling it weakens the optional adversarial review axis.",isGateBypass:!0},{name:"ARBITER_ACCEPTANCE_ANCHOR",type:"boolean",default:!1,purpose:'Override the acceptance-criteria anchor gate activation (INV-138, scripts/check-acceptance.mjs). "1"/"true" enforces, "0"/"false" disarms; unset falls through to features.acceptanceAnchor in arbiter.json. Bespoke var (not ARBITER_FEATURE__*): the gate script cannot run TS config resolution.',isGateBypass:!1},{name:"ARBITER_EVIDENCE_DIR",type:"string",purpose:"Path to the evidence artifact directory.",isGateBypass:!1},{name:"ARBITER_WORKTREES_DIR",type:"string",purpose:"Override the base directory where `arbiter worktree open` creates worktrees.",isGateBypass:!1},{name:"ARBITER_GITHUB",type:"string",purpose:'Set to "1" to activate live GitHub API calls (opt-in).',isGateBypass:!1},{name:"ARBITER_DIFF_BASE",type:"string",purpose:"Base git ref for diff-scoped checks (plugin API stability).",isGateBypass:!1},{name:"ARBITER_MATRIX_LEVEL",type:"string",purpose:"Governance level filter for the feature-matrix check.",isGateBypass:!1},{name:"ARBITER_HOOK_GIT_CWD",type:"string",purpose:"Working directory hooks resolve git operations against.",isGateBypass:!1},{name:"ARBITER_HOOK_BASENAMES",type:"string",purpose:"Override the set of hook basenames considered by hook dispatch.",isGateBypass:!1},{name:"ARBITER_HOOK_DEBOUNCE_MS",type:"number",default:2e4,purpose:"Debounce window (ms) for expensive post-edit hooks.",isGateBypass:!1},{name:"ARBITER_FINDING_LOSS_HARD",type:"boolean",default:!1,purpose:"Escalates stop-finding-loss.mjs (E6b #1948) from advisory (exit 0) to hard block (exit 2) when 2+ research dispatches persisted zero findings since session start.",isGateBypass:!1},{name:"ARBITER_SPAWN_GUARD_HARD",type:"boolean",default:!1,purpose:"Escalates pre-spawn-worktree-guard.mjs (E5 #1947) from advisory (exit 0) to hard block (exit 2) on a second write-intent spawn onto the main tree or a multi-task dispatch.",isGateBypass:!1},{name:"ARBITER_PROBE_TIMEOUT_MS",type:"number",default:1e4,purpose:"Per-tool compatibility probe timeout (ms).",isGateBypass:!1},{name:"ARBITER_BUILD_PROBE_TIMEOUT_MS",type:"number",default:6e4,purpose:"Build-step probe timeout (ms).",isGateBypass:!1},{name:"ARBITER_EXTERNAL_PROBE_TIMEOUT_MS",type:"number",default:5e3,purpose:'External-model availability probe timeout (ms) \u2014 the `<provider> --version` spawn in src/detectors/external-model.ts. Five seconds is ample on an idle machine, but this is a wall-clock probe against a spawned process: on a loaded box the spawn alone can exceed it and the provider is then reported unavailable for a reason unrelated to the provider, so the cross-model seat degrades and the caller cannot tell that from "codex is not installed" (#2501).',isGateBypass:!1},{name:"ARBITER_MAX_NEEDS_CHAIN",type:"number",default:3,purpose:"Maximum allowed length of a workflow `needs:` dependency chain.",isGateBypass:!1},{name:"ARBITER_SELECTIVE_GATE",type:"boolean",default:!1,purpose:"Opt-in local-only speed mode (#2094): skip gate checks whose affects-registry entry proves untouched by the current diff vs origin/main. Never gates CI or a real push \u2014 the full unfiltered gate is the only merge authority.",isGateBypass:!1},{name:"ARBITER_GATE_MUTEX_MODE",type:"string",default:"wait",purpose:"How a gate behaves when another gate already holds the per-repo mutex: `wait` (default \u2014 block, announcing the wait on stderr immediately, then fail closed when the budget expires), `fail` (refuse at once, never queue), `off` (run unserialised; also the automatic fallback where flock(1) does not exist).",isGateBypass:!1},{name:"ARBITER_GATE_MUTEX_WAIT_SEC",type:"number",default:1800,purpose:"Seconds a queued gate blocks on the per-repo mutex before failing closed (#2427). Sized above one full L2 run so a legitimate queue is not cut short.",isGateBypass:!1},{name:"ARBITER_GATE_MUTEX_HELD",type:"string",default:"",purpose:"Set BY the mutex wrapper (and by `arbiter gate-exec`) to the lock path it already holds, so a nested gate recognises the mutex as taken instead of self-deadlocking waiting on it (#2427). Not a user-facing knob.",isGateBypass:!1},{name:"ARBITER_GATE_PARENT_PID",type:"string",default:"",purpose:"Set BY the mutex wrapper to the pid of the process the gate exists to serve. The gate checks it between checks and aborts when it is gone, so a SIGKILL that no signal can forward cannot leave an orphan gate stamping evidence (#2427). Not a user-facing knob.",isGateBypass:!1},{name:"ARBITER_BYPASS_LOG_PATH",type:"string",purpose:"Override the JSONL path the loud-bypass audit contract appends to.",isGateBypass:!1},{name:"ARBITER_BYPASS_BRANCH",type:"string",purpose:"Branch name recorded in the loud-bypass audit line.",isGateBypass:!1},{name:"ARBITER_EVIDENCE_MAX_AGE_MIN",type:"number",default:240,purpose:"Maximum age (minutes) of a gate-pass marker before every consumer refuses it (#2328).",isGateBypass:!1},{name:"ARBITER_PREPUSH_MAX_AGE_MIN",type:"number",default:240,purpose:"Maximum age (minutes) of the freshest evidence file before a push is blocked.",isGateBypass:!1},{name:"ARBITER_PREPUSH_EVIDENCE_DIR",type:"string",default:".arbiter/evidence",purpose:"Override the evidence directory the pre-push freshness gate inspects.",isGateBypass:!1},{name:"ARBITER_PREPUSH_BYPASS_REASON",type:"string",purpose:"Free-form justification recorded in the loud-bypass JSONL line.",isGateBypass:!1},{name:"ARBITER_NO_EVIDENCE",type:"boolean",default:!1,purpose:"Suppress evidence-file writing for the current run (mirrors --no-evidence).",isGateBypass:!0},{name:"ARBITER_AUDIT_MODE",type:"boolean",default:!0,purpose:"Read by a generated consumer's check-all.mjs (#9003 gate-registry `audit: true` field) as on/off (parseBooleanEnv shape) \u2014 off (\"ARBITER_AUDIT_MODE=off\") skips audit-only gates, a level-orthogonal axis (the #9003 design brief). Not read by arbiter's own CLI \u2014 the flag lives in the emitted script, not this process.",isGateBypass:!0},{name:"ARBITER_SKIP_PLAN_REVIEW",type:"boolean",default:!1,purpose:"Bypass the plan-review gate and write an audit bypass record. Refused under CI.",isGateBypass:!0},{name:"ARBITER_PLAN_BYPASS",type:"boolean",default:!1,purpose:"Bypass the pre-edit plan-anchor hook (CANON-14). Emergency use only; logged.",isGateBypass:!0},{name:"ARBITER_POST_CLEAR",type:"boolean",default:!1,purpose:"Signal a post-/clear re-entry (mirrors --post-clear); controls handoff strategy.",isGateBypass:!1},{name:"ARBITER_SKIP_DOCS",type:"boolean",default:!1,purpose:"Skip the docs-freshness gate. Routed through the loud-bypass audit contract.",isGateBypass:!0},{name:"ARBITER_SKIP_TDD",type:"boolean",default:!1,purpose:"Skip the TDD-evidence gate. For non-#NNN hygiene/chore commits only.",isGateBypass:!0},{name:"ARBITER_SKIP_GATE_MARKER",type:"boolean",default:!1,purpose:"Bypass the gate-pass marker requirement in the pre-PR hook and task phase gate. Refused under CI.",isGateBypass:!0},{name:"ARBITER_SSOT_BYPASS",type:"boolean",default:!1,purpose:"Bypass the pre-edit SSOT guard hook.",isGateBypass:!0},{name:"ARBITER_GATE_BYPASS",type:"boolean",default:!1,purpose:"Generic gate bypass switch (loud-bypass audited).",isGateBypass:!0},{name:"ARBITER_PREPUSH_BYPASS",type:"boolean",default:!1,purpose:'Bypass the pre-push freshness gate (exact "true"); loud-bypass audited.',isGateBypass:!0},{name:"ARBITER_PREPUSH_SKIP",type:"boolean",default:!1,purpose:"Skip the pre-push freshness gate silently. Reserved for hook recursion / test harness.",isGateBypass:!0},{name:"ARBITER_ALLOW_CHANNEL_DOWNGRADE",type:"boolean",default:!1,purpose:"Allow a release-channel downgrade without an interactive TTY prompt.",isGateBypass:!0}];const FLAG_BY_NAME=new Map(ARBITER_ENV_FLAGS.map(f=>[f.name,f]));export const KNOWN_ARBITER_FLAGS=new Set(FLAG_BY_NAME.keys());export function getBoolFlag(name,env=process.env){const spec=FLAG_BY_NAME.get(name);if(spec===void 0||spec.type!=="boolean")throw new Error(`getBoolFlag: "${name}" is not a registered boolean ARBITER_* flag (#1538)`);const parsed=parseBooleanEnv(env[name]);return parsed!==void 0?parsed:spec.default===!0}export function getNumberFlag(name,env=process.env){const spec=FLAG_BY_NAME.get(name);if(spec===void 0||spec.type!=="number")throw new Error(`getNumberFlag: "${name}" is not a registered numeric ARBITER_* flag (#1538)`);const fallback=typeof spec.default=="number"?spec.default:0,parsed=Number(env[name]);return Number.isFinite(parsed)&&parsed>0?parsed:fallback}

package/dist/config/levels.js

@@ -0,0 +1 @@
+export const LEVEL_ORDER=["L1","L2","L3","L4"];export function levelRank(level){return LEVEL_ORDER.indexOf(level)}export function levelAtLeast(actual,min){return levelRank(actual)>=levelRank(min)}

package/dist/config/migrations/index.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{CURRENT_CONFIG_SCHEMA_VERSION}from"../schema.js";import{migrateV0ToV1}from"./v0-to-v1.js";import{migrateV1ToV2}from"./v1-to-v2.js";import{migrateV2ToV3}from"./v2-to-v3.js";import{migrateV3ToV4}from"./v3-to-v4.js";function isRecord(val){return typeof val=="object"&&val!==null&&!Array.isArray(val)}export function migrate(raw){if(!isRecord(raw))throw new Error("arbiter.json must be a non-null object");const schemaVersion=raw.$schemaVersion;if(schemaVersion!==void 0){const numericVersion=typeof schemaVersion=="number"?schemaVersion:Number(schemaVersion);if(Number.isNaN(numericVersion)||numericVersion>CURRENT_CONFIG_SCHEMA_VERSION)throw new Error(`arbiter.json has $schemaVersion=${JSON.stringify(schemaVersion)} but this arbiter build understands at most ${CURRENT_CONFIG_SCHEMA_VERSION}. Upgrade arbiter or downgrade the config file.`)}const version=raw.version;if(version==="0.2")return migrateV3ToV4(migrateV2ToV3(migrateV1ToV2(raw)));if(version==="0.1")return migrateV3ToV4(migrateV2ToV3(migrateV1ToV2(raw)));const v1=migrateV0ToV1(raw);return migrateV3ToV4(migrateV2ToV3(migrateV1ToV2(v1)))}

package/dist/config/migrations/v0-to-v1.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+function isRecord(val){return typeof val=="object"&&val!==null&&!Array.isArray(val)}export function migrateV0ToV1(raw){if(!isRecord(raw))throw new Error("arbiter.json must be a non-null object");return{...raw,version:"0.1"}}

package/dist/config/migrations/v1-to-v2.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{AI_TOOLS,DEFAULT_THRESHOLDS,GOVERNANCE_LEVELS,validateConfig}from"../schema.js";import{getLogger}from"../../utils/logger.js";import{levelAtLeast}from"../levels.js";function isRecord(val){return typeof val=="object"&&val!==null&&!Array.isArray(val)}function warnUseGitHubDeprecated(){getLogger().warn("config.useGitHub_deprecated",{},"`useGitHub` is deprecated. Use `permitGitHub` in arbiter.json and the `--github` flag for live API calls.")}function migratePermitGitHub(cfg){const raw=cfg;if(!("useGitHub"in raw))return cfg;const{useGitHub,...rest}=raw;return"permitGitHub"in rest?rest:(warnUseGitHubDeprecated(),{...rest,permitGitHub:useGitHub})}function deriveEvidenceHarness(evidenceRetention,level){if(isRecord(evidenceRetention)){const legacy=evidenceRetention;if(typeof legacy.enabled=="boolean")return legacy.enabled}return levelAtLeast(level,"L3")}function deriveFeatureFlags(raw,level){const nonL1=level!=="L1";return{debtGates:typeof raw.enableDebtGates=="boolean"?raw.enableDebtGates:nonL1,securityScanning:typeof raw.enableSecurityScanning=="boolean"?raw.enableSecurityScanning:nonL1,suppressions:typeof raw.enableSuppressions=="boolean"?raw.enableSuppressions:!0,mutationTesting:nonL1,contractTesting:typeof raw.contractType=="string"&&raw.contractType!=="none",evidenceHarness:deriveEvidenceHarness(raw.evidenceRetention,level),selfValidationHarness:!0}}function applyDecompositionAlias(cfg){if(cfg.decomposition?.backend)return cfg;const backend=cfg.permitGitHub??cfg.useGitHub??!1?"github":"markdown";return{...cfg,decomposition:{backend}}}export function migrateV1ToV2(raw){if(!isRecord(raw))throw new Error("arbiter.json must be a non-null object");if(raw.version==="0.2"){const result=validateConfig(raw);if(result.ok){const migrated2=migratePermitGitHub(result.config);return{...applyDecompositionAlias(migrated2),$schemaVersion:2}}getLogger().warn("config.v2_passthrough_invalid",{errors:result.errors.join("; ")},`arbiter.json (v0.2) failed strict validation (${result.errors.join("; ")}) \u2014 deferring to the migration fallback`);const migrated=migratePermitGitHub(raw);return{...applyDecompositionAlias(migrated),$schemaVersion:2}}const rawLevel=raw.governanceLevel,upperLevel=typeof rawLevel=="string"?rawLevel.toUpperCase():rawLevel;let level;if(rawLevel===void 0)level="L2";else if(typeof upperLevel=="string"&&GOVERNANCE_LEVELS.has(upperLevel))level=upperLevel;else throw new Error(`arbiter.json governanceLevel must be one of L1, L2, L3, L4 \u2014 got ${typeof rawLevel=="string"?rawLevel:JSON.stringify(rawLevel)}`);const features=deriveFeatureFlags(raw,level),thresholds=DEFAULT_THRESHOLDS[level],stripKeys=new Set(["version","enableDebtGates","enableSecurityScanning","enableSuppressions","useGitHub"]),rest=Object.fromEntries(Object.entries(raw).filter(([k])=>!stripKeys.has(k))),permitGitHub=typeof raw.useGitHub=="boolean"?raw.useGitHub:!1,migratedBackend=permitGitHub?"github":"markdown",decomposition=isRecord(raw.decomposition)&&raw.decomposition.backend?raw.decomposition:{backend:migratedBackend};return{...rest,version:"0.2",$schemaVersion:2,tools:Array.isArray(raw.tools)?raw.tools.filter(t=>AI_TOOLS.has(t)):["claude","codex"],governanceLevel:level,permitGitHub,decomposition,features,thresholds}}

package/dist/config/migrations/v2-to-v3.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+export function migrateV2ToV3(config){return{...config,$schemaVersion:3}}

package/dist/config/migrations/v3-to-v4.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+export function migrateV3ToV4(config){return{...config,$schemaVersion:4,kit:{...config.kit??{},measure:config.kit?.measure??{}}}}

package/dist/config/override-resolver.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{loadConfig}from"../utils/config.js";import{getLogger}from"../utils/logger.js";import{parseValue}from"../commands/configure.js";import{readOverride}from"../commands/task-state.js";import{DEFAULT_AUTONOMY}from"./collaboration-mode-defaults.js";const DERIVED_DEFAULTS={"automation.autonomy":DEFAULT_AUTONOMY,"automation.defaultGateLevel":"L1","crossModelReview.enabled":"false"};function profileRawValue(root,path){let config;try{config=loadConfig(root)}catch{return}if(config===null)return;const raw=config,parts=path.split(".");let cursor=raw;for(const part of parts){if(typeof cursor!="object"||cursor===null)return;cursor=cursor[part]}if(typeof cursor=="string")return cursor;if(typeof cursor=="number"||typeof cursor=="boolean")return String(cursor)}function validCandidate(path,raw,layer){if(raw!==void 0)try{return parseValue(path,raw),raw}catch{getLogger().warn("override.invalid_candidate",{path,raw,layer},`ignoring invalid ${path}="${raw}" from ${layer} layer; falling through (fail-closed)`);return}}export function resolveSetting(path,ctx){const fromOverride=validCandidate(path,ctx.overrides?.[path],"override");if(fromOverride!==void 0)return fromOverride;const fromSession=validCandidate(path,readOverride(ctx.root,path),"session");if(fromSession!==void 0)return fromSession;const profileRaw=ctx.profileValue??profileRawValue(ctx.root,path),fromProfile=validCandidate(path,profileRaw,"profile");if(fromProfile!==void 0)return fromProfile;const fallback=DERIVED_DEFAULTS[path];if(fallback===void 0)throw new Error(`resolveSetting: no derived default registered for path "${path}"`);return fallback}

package/dist/config/resolve-project-config.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{resolveLanguage}from"../detectors/language.js";import{detectBuildCommands}from"../detectors/build.js";import{detectFramework}from"../detectors/framework.js";import{detectGitInfo}from"../detectors/git.js";import{detectExisting}from"../detectors/existing.js";import{getLanguageHooks}from"../detectors/language-hooks.js";import{resolveAxisFields}from"../detectors/axis.js";import{presetToTiers,defaultPresetForLevel}from"../invariants/filter.js";import{resolveCollaborationMode}from"./collaboration-mode-defaults.js";function resolveExtendedInvariants(stored){return stored.governance?.invariants_catalog==="extended"}function storedAxisFields(stored){return{...stored.solo!==void 0?{solo:stored.solo}:{},...stored.branchingStrategy!==void 0?{branchingStrategy:stored.branchingStrategy}:{},...stored.evidenceRetention!==void 0?{evidenceRetention:stored.evidenceRetention}:{},...stored.thresholdProfile!==void 0?{thresholdProfile:stored.thresholdProfile}:{},...stored.strictnessTier!==void 0?{strictnessTier:stored.strictnessTier}:{},...stored.runnerProfile!==void 0?{runnerProfile:stored.runnerProfile}:{}}}function storedProviderFields(stored){return{...stored.industryOverlay!==void 0&&stored.industryOverlay!=="none"?{industryOverlay:stored.industryOverlay}:{},...stored.basePackage!==void 0?{basePackage:stored.basePackage}:{},...stored.taskTiers!==void 0?{taskTiers:stored.taskTiers}:{},...stored.deployTarget!==void 0?{deployTarget:stored.deployTarget}:{},...stored.taxonomy!==void 0?{taxonomy:stored.taxonomy}:{},...stored.observability!==void 0?{observability:stored.observability}:{},...stored.auth!==void 0?{auth:stored.auth}:{},...stored.frontend!==void 0?{frontend:stored.frontend}:{}}}function storedOptionalFields(stored){return{...storedAxisFields(stored),...storedProviderFields(stored)}}function storedFeatureFlagFields(stored){return{enableSelfValidationHarness:stored.features.selfValidationHarness??!0,enableAuditToolchain:stored.features.auditToolchain??!1,enableFiveLaneCi:stored.features.fiveLaneCi??!1,enableSoloDevMode:stored.features.soloDevMode??!1,enableMcpFallback:stored.features.mcpFallback??!1,enableNoSkippedTests:stored.features.noSkippedTests??!0,enableRiskRegister:stored.features.riskRegister??!1,enableOperationsHandbook:stored.features.operationsHandbook??!1,enableIso27001Mapping:stored.features.iso27001Mapping??!1,enableNis2Mapping:stored.features.nis2Mapping??!1,enableGdprMapping:stored.features.gdprMapping??!1,enableCodeownersNotify:stored.features.codeownersNotify??!1,enableTaxonomy25d:stored.features.taxonomy25d??!1,enablePerfTesting:stored.features.perfTesting??!1}}function v2ToProjectConfig(stored,detectorFields){const level=stored.governanceLevel;return{...detectorFields,projectName:detectorFields.projectName,description:`${detectorFields.projectName} project`,tools:stored.tools,governanceLevel:level,enableDebtGates:stored.features.debtGates,enableSuppressions:stored.features.suppressions,enableSecurityScanning:stored.features.securityScanning,enableMutationTesting:stored.features.mutationTesting,enableContractTesting:stored.features.contractTesting,enableEvidenceHarness:stored.features.evidenceHarness,...storedFeatureFlagFields(stored),collaborationMode:resolveCollaborationMode({...stored.collaborationMode!==void 0?{collaborationMode:stored.collaborationMode}:{},...stored.features.soloDevMode!==void 0?{enableSoloDevMode:stored.features.soloDevMode}:{}}),...storedOptionalFields(stored),invariantTiers:stored.invariantTiers??presetToTiers(defaultPresetForLevel(level)),acceptBetaTools:stored.acceptBetaTools??!1,contractType:detectorFields.contractType,thresholds:stored.thresholds,lanes:detectorFields.lanes,includeExtendedInvariants:resolveExtendedInvariants(stored),...stored.governance?.projectInvariants!==void 0?{projectInvariants:stored.governance.projectInvariants}:{},...stored.governance?.liveSsot!==void 0?{liveSsot:stored.governance.liveSsot}:{}}}export function gitHubPermitted(stored){return stored.permitGitHub??stored.useGitHub??!1}export function resolveProjectConfig(targetDir,projectName,stored,useGitHubBackend=!1){const language=resolveLanguage(targetDir,stored),framework=detectFramework(targetDir,language),buildCmds=detectBuildCommands(targetDir,language),gitInfo=detectGitInfo(targetDir),existing=detectExisting(targetDir),axisFields=resolveAxisFields(stored,targetDir,language,framework),{archetype,architectureStyle,isMultiTenant,hasDatabase,databaseEngine,hasPublicApi,contractType,lanes}=axisFields,detectorFields={targetDir,projectName,language,framework,buildTool:buildCmds.buildTool,packageManager:stored.packageManager??buildCmds.packageManager??"npm",buildCommand:buildCmds.buildCommand,testCommand:buildCmds.testCommand,lintCommand:buildCmds.lintCommand,formatCommand:buildCmds.formatCommand,useGitHub:useGitHubBackend,permitGitHub:gitHubPermitted(stored),githubOwner:gitInfo.githubOwner,githubRepo:gitInfo.githubRepo,existing,languageHooks:getLanguageHooks(language),archetype,architectureStyle,isMultiTenant,hasDatabase,databaseEngine,hasPublicApi,contractType,lanes};return{config:v2ToProjectConfig(stored,detectorFields),detectorFields}}

package/dist/config/resolve-project-name.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{existsSync,readFileSync}from"node:fs";import{basename,join}from"node:path";import{detectGitInfo}from"../detectors/git.js";import{getLogger}from"../utils/logger.js";export function slugifyProjectName(raw){return raw.replace(/[^A-Za-z0-9._-]+/g,"-").replace(/^[-.]+|[-.]+$/g,"")||"app"}function unscopePackageName(name){const slashIndex=name.indexOf("/");return name.startsWith("@")&&slashIndex!==-1?name.slice(slashIndex+1):name}function readPackageJsonName(dir){const pkgPath=join(dir,"package.json");if(!existsSync(pkgPath))return null;try{const pkg=JSON.parse(readFileSync(pkgPath,"utf-8"));return typeof pkg.name=="string"&&pkg.name.trim()!==""?unscopePackageName(pkg.name.trim()):null}catch{return null}}export function resolveProjectName(dir,stored){if(stored?.projectName)return stored.projectName;const fromPackageJson=readPackageJsonName(dir);if(fromPackageJson)return fromPackageJson;const fromGitRemote=detectGitInfo(dir).projectName;if(fromGitRemote)return fromGitRemote;const fallback=basename(dir);return getLogger().warn("config.project_name_cwd_fallback",{dir,fallback},`no stored arbiter.json name, package.json name, or git remote found \u2014 falling back to the current directory name "${fallback}" as the project name. If this directory is a git worktree, the project name may be wrong; set it explicitly via arbiter.json.`),slugifyProjectName(fallback)}