@getarbiter/cli 0.5.0

package/dist/config/schema.d.ts

@@ -0,0 +1,480 @@
+import type { AiTool, Archetype, ArchitectureStyle, AuthConfig, AutonomyLevel, BranchingStrategy, CollaborationMode, ConformanceThresholds, ContractType, CrossModelReviewConfig, DeployTarget, EvidenceRetentionConfig, FrontendConfig, GovernanceLevel, InvariantTier, Lane, Language, ObservabilityConfig, ProjectPreset, SoloMergeMode, StrictnessTier, TaskTiers, ThresholdProfile, ThresholdsV2, WorktreeConfig } from '../wizard/types.js';
+import type { BrownfieldClass } from '../kit/thresholds.js';
+import type { Invariant } from '../invariants/types.js';
+export interface FeatureFlags {
+    contractTesting: boolean;
+    mutationTesting: boolean;
+    securityScanning: boolean;
+    evidenceHarness: boolean;
+    /** INV-138: acceptance-criteria anchor gate (scripts/check-acceptance.mjs). Opt-in — absent ⇒ false. */
+    acceptanceAnchor?: boolean;
+    selfValidationHarness?: boolean;
+    /** #1835: opt-in toolchain/workflow-inventory audit (scripts/audit-toolchain.mjs). */
+    auditToolchain?: boolean;
+    /** #1835 (Task B, #1825): opt-in collapsed 5-lane CI doctrine (see enableFiveLaneCi). */
+    fiveLaneCi?: boolean;
+    debtGates: boolean;
+    suppressions: boolean;
+    soloDevMode?: boolean;
+    /** #1887-A: persistence of enableMcpFallback (opt-in — omitted/absent ⇒ false). */
+    mcpFallback?: boolean;
+    /** #1887-A: persistence of enableNoSkippedTests (opt-out — absent ⇒ true). */
+    noSkippedTests?: boolean;
+    /**
+     * #1887-A: compliance doc-pack, set only by applyPreset('industrial-grade').
+     * Without persistence a preset-initialized project silently dropped these
+     * generators on the next `arbiter update`/`diff`. All opt-in — absent ⇒ false.
+     */
+    riskRegister?: boolean;
+    operationsHandbook?: boolean;
+    iso27001Mapping?: boolean;
+    nis2Mapping?: boolean;
+    gdprMapping?: boolean;
+    /**
+     * #1887-A: 3 more generators built + gated on the ProjectConfig field but with
+     * no public activation path at all — same round-trip-drop class. Opt-in,
+     * absent ⇒ false.
+     */
+    codeownersNotify?: boolean;
+    taxonomy25d?: boolean;
+    perfTesting?: boolean;
+}
+export type DecompositionBackendId = 'github' | 'markdown';
+export declare const DEFAULT_TASK_TIERS: TaskTiers;
+export declare const DEFAULT_CROSS_MODEL_REVIEW: CrossModelReviewConfig;
+interface DecompositionConfig {
+    backend: DecompositionBackendId;
+    markdown?: {
+        dir: string;
+    };
+    github?: {
+        owner: string;
+        repo: string;
+    };
+}
+/**
+ * File-pattern to ADR mapping for CONTEXT_PACK generation (#254).
+ * Pattern supports `*` (non-slash wildcard) and `**` (any-path wildcard).
+ */
+interface ContextPackAdrMapping {
+    pattern: string;
+    adr: string;
+}
+/**
+ * Configuration for the CONTEXT_PACK generator (#254).
+ * Stored under `contextPack` in `arbiter.json`.
+ */
+export type { AutonomyLevel };
+export declare const AUTONOMY_LEVELS: readonly AutonomyLevel[];
+/**
+ * #1306 (ADR-094 §Decision.4) — the gate level `arbiter verify` runs by default.
+ * Deliberately ONLY L1/L2 (the runnable gate levels): a defaultGateLevel is a
+ * per-run gate selector, not a governance tier, so L3/L4 are not valid values.
+ */
+export type GateLevel = 'L1' | 'L2';
+export declare const VALID_GATE_LEVELS: readonly GateLevel[];
+export interface AutomationConfig {
+    autonomy: AutonomyLevel;
+    /**
+     * #1306 (ADR-094 §Decision.4) — max wave worktrees that may run concurrently.
+     * Positive integer. Absent ⇒ derived per collaboration mode (1 for trunk-solo,
+     * which never uses worktrees; >1 for peer/gated). trunk-solo + >1 is incoherent.
+     */
+    maxParallelWorktrees?: number;
+    /** #1306 (ADR-094 §Decision.4) — default gate level for verification. Absent ⇒ derived from governance level. */
+    defaultGateLevel?: GateLevel;
+}
+/**
+ * #2043 (AC-2043.2): the per-project smoke-journey acceptance floor. Declared in
+ * arbiter.json so the generated check-smoke-journeys.mjs gate enforces a genuine
+ * login/CRUD/authz floor per project — not just the journeys a team happened to
+ * declare. Absent ⇒ the gate falls back to the login/CRUD/authz trio.
+ */
+export interface SmokeJourneyPolicy {
+    /** Journey ids that must ALL be declared in smoke-journeys.json. Default: ['auth','crud','authz']. */
+    requiredJourneys?: string[];
+    /** Per-project floor: minimum number of DECLARED journeys (2..4). Default: 3. */
+    minJourneys?: number;
+}
+/**
+ * #2043 (AC-2043.4/5): the e2e escalation policy — the configurable
+ * consecutive-failure ladder replacing the hardcoded 2-strike rule. Absent ⇒ the
+ * ship tick prompt and the ledger gate (check-e2e-escalation.mjs) both fall back
+ * to the pre-#2043 2-strike default. Present ⇒ ship tick prompt renders off
+ * `escalation.maxStrikes`; the ledger gate consumes `escalation.strikes`
+ * per-rung when present (#2248), else falls back to the scalar `maxStrikes`
+ * check (legacy).
+ */
+export interface E2eEscalationPolicy {
+    escalation: {
+        /**
+         * Consecutive-failure ladder — each entry widens the response (e.g. [2, 3, 5]:
+         * widen scope at 2, force the full suite at 3, hard-stop at 5). Validated
+         * (an array of numbers) and consumed per-rung by check-e2e-escalation.mjs
+         * (#2248, AC-2248.2): the highest rung the ledger's trailing consecutive-
+         * REGRESSION count crosses drives distinct exit messaging (widen /
+         * force-full-suite / hard-stop-to-needs-human).
+         */
+        strikes: number[];
+        /**
+         * Required once `escalation` is declared. Drives the ship tick prompt's
+         * within-run strike count unconditionally; drives check-e2e-escalation.mjs's
+         * escalate/no-escalate decision only when `strikes` above is absent/invalid
+         * (the pre-#2248 scalar path, kept for backward compatibility). No
+         * config-layer default: when the whole `e2ePolicy` key is ABSENT, both
+         * check-e2e-escalation.mjs and TICK_PROMPT.md.ejs fall back to 2 (the
+         * pre-#2043 hardcoded 2-strike rule) — see the interface doc above.
+         */
+        maxStrikes: number;
+    };
+}
+/**
+ * #2401 — `/ship` ceremony bounds. The train (one worktree/branch/gate/PR carrying N issues)
+ * is the DEFAULT unit of ceremony, so how far it may grow is a per-project decision rather
+ * than a constant. Absent ⇒ {@link DEFAULT_TRAIN_LIMITS} (maxChain 10, maxAgeMinutes 480).
+ */
+export interface ShipConfig {
+    /** Sealed-train bounds, resolved by `resolveTrainLimits` (src/commands/ship-train.ts). */
+    train?: {
+        /** Total ids on the branch (primary + chained) at which the next append is refused. Absent ⇒ 10. */
+        maxChain?: number;
+        /** Age of the open train, in minutes, past which the next append is refused. Absent ⇒ 480. */
+        maxAgeMinutes?: number;
+    };
+    review?: {
+        /**
+         * Review rounds the `refactor` phase may spend before the change must land with its
+         * remaining findings parked. Absent ⇒ {@link DEFAULT_REVIEW_MAX_ROUNDS} (2). Enforced by
+         * `arbiter ship`: the round past the cap is refused unless `--force-review` is passed.
+         */
+        maxRounds?: number;
+    };
+}
+interface ContextPackConfig {
+    /** File-pattern to ADR mappings. Used by `arbiter context-pack` to annotate @source: citations. */
+    adrMappings?: ContextPackAdrMapping[];
+}
+/**
+ * Integer migration-routing version (#605 / R1.K7).
+ *
+ * `version` (string) remains the human-facing semver-ish marker
+ * ("0.1", "0.2", ...). `$schemaVersion` is the machine routing key the
+ * migration registry consults — bumped only on a config-shape change.
+ *
+ * Loading a config with `$schemaVersion > CURRENT_CONFIG_SCHEMA_VERSION`
+ * is a hard error (do not silently load); see `loadConfig`.
+ *
+ * #1524: kept in lock-step with the migration terminus. The chain ends at
+ * `migrateV3ToV4`, which stamps `$schemaVersion: 4`, so a freshly-migrated
+ * config is a `4`. There is no `v4-to-v5` migration, so advertising `5` here
+ * desynced the loader's ceiling from the highest version this build can emit.
+ * The `migration-terminus` invariant test guards this equality.
+ */
+export declare const CURRENT_CONFIG_SCHEMA_VERSION = 4;
+/**
+ * #257/#1524: domain-specific test-taxonomy configuration. Its `domainDims[]`
+ * flow into the TEST_TAXONOMY template. Declared here (the config SSOT) so the
+ * generator can read it through the type system instead of an untyped cast.
+ */
+export interface TaxonomyConfig {
+    /** Project-specific taxonomy dimensions appended to the archetype defaults. */
+    domainDims?: string[];
+}
+export interface ArbiterConfigV2 {
+    version: string;
+    $schemaVersion?: number;
+    /**
+     * #1978: durable project name, resolved once at `init` time via
+     * {@link resolveProjectName} (stored name → package.json → git remote → cwd
+     * basename) and persisted here so `arbiter update`/`diff` never re-derive it
+     * from the cwd basename — which breaks every worktree-based invocation
+     * (a worktree dir like `1978-fix-cwd` would otherwise become the project
+     * name). Absent on configs written before this field existed; callers fall
+     * back through the same precedence chain in that case.
+     */
+    projectName?: string;
+    tools: AiTool[];
+    governanceLevel: GovernanceLevel;
+    useGitHub?: boolean;
+    permitGitHub?: boolean;
+    decomposition?: DecompositionConfig;
+    features: FeatureFlags;
+    thresholds: ThresholdsV2;
+    /**
+     * Project language. Persisted so it is authoritative over raw filesystem detection
+     * (#1343 `resolveLanguage`): a Go-primary repo with a frontend-lane package.json keeps
+     * `go`. It is re-detected only on a genuine on-disk migration — when this stored
+     * language's build-file signal is gone — so `arbiter update` still picks up language
+     * migrations and re-runs language-gated generators.
+     */
+    language?: Language;
+    /** JavaScript package manager used by generated package-script gate checks. */
+    packageManager?: 'npm' | 'pnpm' | 'yarn' | 'bun';
+    archetype?: Archetype;
+    architectureStyle?: ArchitectureStyle;
+    isMultiTenant?: boolean;
+    /**
+     * #1317: legacy/derived database flag. Kept for back-compat — derived from
+     * {@link databaseEngine} (`hasDatabase = databaseEngine != null && databaseEngine !== 'none'`).
+     * Persisting both is fine; the axis derivation in detectors/axis.ts keeps them in sync.
+     */
+    hasDatabase?: boolean;
+    /**
+     * #1317: database engine axis. Source of truth for integration-testing scaffolding
+     * (sqlite ⇒ containerless TestMain; none ⇒ no DB test; postgresql/mysql ⇒ testcontainers).
+     * Absent ⇒ derived from {@link hasDatabase} (legacy `hasDatabase:true` ⇒ 'postgresql').
+     */
+    databaseEngine?: 'postgresql' | 'mysql' | 'mongodb' | 'sqlite' | 'other' | 'none';
+    hasPublicApi?: boolean;
+    acceptBetaTools?: boolean;
+    evidenceRetention?: EvidenceRetentionConfig;
+    thresholdProfile?: ThresholdProfile;
+    strictnessTier?: StrictnessTier;
+    graceEndsAt?: string;
+    graceFromLevel?: GovernanceLevel;
+    contractType?: ContractType;
+    /**
+     * #1254: industry compliance overlay axis. Persisted so `arbiter doctor`
+     * can flag incoherent (overlay × governanceLevel) cells and `arbiter update`
+     * re-emits the overlay artefacts. Absent = 'none'.
+     */
+    industryOverlay?: 'pharma' | 'sox' | 'gdpr' | 'generic' | 'iso27001' | 'iso9001' | 'regulated' | 'none';
+    basePackage?: string;
+    /**
+     * #1616: deploy target axis. Consumed by the github (04-deploy-test/10-deploy-prod
+     * workflows) and infra (azure-container-app) generators. Persisted so `arbiter
+     * update`/`diff` re-emit deploy workflows + infra instead of silently coercing to
+     * 'none' on every backend-web-db project's round-trip.
+     */
+    deployTarget?: DeployTarget;
+    invariantTiers?: InvariantTier[];
+    worktree?: WorktreeConfig;
+    plugins?: string[];
+    /**
+     * #1730 — per-companion overrides for /ship companion-plugin activation, keyed by bare skill
+     * name or full skillId (e.g. "ponytail"). Absent ⇒ any installed companion auto-activates in
+     * its policy-default mode on product repos. `enabled:false` disables without uninstalling;
+     * `mode` forces lite|full. Never activates on arbiter-self regardless of this setting.
+     */
+    companions?: Record<string, {
+        enabled?: boolean;
+        mode?: 'lite' | 'full';
+    }>;
+    lanes?: Lane[];
+    taskTiers?: TaskTiers;
+    /**
+     * #257/#1524: domain-specific test-taxonomy dimensions. Consumed by the
+     * TEST_TAXONOMY generator (`generateTestTaxonomy`) and surfaced in
+     * docs/TEST_TAXONOMY.md. Declared on the SSOT type so a key typo or rename is
+     * a compile error rather than a silent fall-through to `[]`.
+     */
+    taxonomy?: TaxonomyConfig;
+    /** CONTEXT_PACK generator configuration (#254). */
+    contextPack?: ContextPackConfig;
+    /** #1291 — ship autonomy gating (ADR-093 §4). Absent ⇒ L0 (ask each step). */
+    automation?: AutomationConfig;
+    /** #2356 — opt-in external review and explicit code-egress consent. */
+    crossModelReview?: CrossModelReviewConfig;
+    /** Observability provider configuration. Absent = no observability files generated. */
+    observability?: ObservabilityConfig;
+    /** Auth provider configuration. Absent = no auth setup files generated. */
+    auth?: AuthConfig;
+    /** Frontend framework + tooling configuration. Absent = no framework-specific governance text. */
+    frontend?: FrontendConfig;
+    /** Active project preset for audit/drift detection. Absent = no preset applied. */
+    preset?: ProjectPreset;
+    /** Release channel preference. Controls `arbiter doctor` reporting + downgrade warnings. Default: latest. */
+    channel?: 'latest' | 'beta' | 'canary';
+    /** Governance policy overrides. Absent = default behaviour. */
+    governance?: GovernanceConfig;
+    /** KIT install state. Populated by `arbiter kit install` (not under --dry-run). */
+    kit?: {
+        measure: Record<string, {
+            status: 'present' | 'partial' | 'missing';
+            evidence: string[];
+        }>;
+    };
+    /** ADR-051: collaboration-mode axis. Absent = inferred from features.soloDevMode or defaults to 'peer-review'. */
+    collaborationMode?: CollaborationMode;
+    /**
+     * ADR-051: branching strategy. When absent, derived from collaborationMode defaults table.
+     * Persisted only when set via `arbiter configure --set branchingStrategy=…`.
+     */
+    branchingStrategy?: BranchingStrategy;
+    /**
+     * ADR-051: trunk-solo merge method override.
+     * 'direct' = push to trunk, no PR. 'pr-ff' = gh pr + ff-only merge.
+     * Persisted only when set via `arbiter configure --set solo.mergeMode=…`.
+     */
+    solo?: {
+        mergeMode: SoloMergeMode;
+    };
+    /**
+     * #1394/#1623: conformance scoring override. When present (and valid), it is merged
+     * over the level-default + brownfield overlay so a project can pin its own tier-1
+     * members / family weights / gold gate. validateConfig validates it; runConformance
+     * reads + applies it. Absent ⇒ the governance×brownfield default drives the bar.
+     */
+    conformanceThresholds?: ConformanceThresholds;
+    /**
+     * #1693 (ADR-101): runner profile axis, orthogonal to collaborationMode/pipelineStyle.
+     * 'fleet' (default) = current behavior: fuzz + soak-e2e heavy jobs run at nightly
+     *   cadence, hard-gated by nightly-required.
+     * 'solo' = fuzz + soak-e2e move to weekly cadence instead (single self-hosted
+     *   runner), preserving the same hard-gate + issue-filing semantics at weekly
+     *   cadence. Absent field treated as 'fleet'.
+     */
+    runnerProfile?: 'solo' | 'fleet';
+    /** #2043 (AC-2043.2): per-project smoke-journey acceptance floor. Absent ⇒ {@link DEFAULT_SMOKE_JOURNEYS}. */
+    smokeJourneys?: SmokeJourneyPolicy;
+    /** #2043 (AC-2043.4/5): configurable e2e escalation ladder. Absent ⇒ {@link DEFAULT_E2E_ESCALATION}. */
+    e2ePolicy?: E2eEscalationPolicy;
+    /** #2401: `/ship` ceremony bounds — train size/age and the review round cap. */
+    ship?: ShipConfig;
+}
+interface GovernanceConfig {
+    /**
+     * Invariant catalog scope.
+     * 'core' (default): INV-01..INV-61 only.
+     * 'extended': also includes opt-in extended set (INV-62..INV-71).
+     */
+    invariants_catalog?: 'core' | 'extended';
+    /**
+     * INV-115 constraint-scan gate toggle (#2037).
+     * 'on' (default): fail-closed when scripts/constraint-map.json is missing.
+     * 'off': explicit, visible opt-out — the gate SKIPs instead of running.
+     */
+    constraintScan?: 'on' | 'off';
+    /**
+     * #2045: repo-relative substrings guarded by pre-edit-ssot-guard.mjs, read at hook
+     * runtime (not baked into the hook), ADDED to the hook's own DEFAULT_SSOT_PATTERNS
+     * (AGENTS.md, .claude/CLAUDE.md, .agents/CODEX.md, docs/METHOD/, docs/SYSTEM/DECISIONS,
+     * docs/SYSTEM/CANON.md, docs/ADR/). Additive only — cannot remove a default-guarded
+     * path, so a config typo or an empty list never silently weakens the guard.
+     */
+    ssotGuardPatterns?: string[];
+    /**
+     * #2035: project-declared invariants (PROJ-NN namespace). The project is the
+     * author of its own catalog additions — merged with the built-in catalog at
+     * getFilteredInvariants. Ids MUST be PROJ-NN (never INV-NN — the built-in
+     * namespace is reserved); duplicates and retired entries are rejected.
+     */
+    projectInvariants?: Invariant[];
+    /**
+     * #2044 (AC-2044.5/6): live-SSOT surfaces — the declared-live matrix/ledger
+     * files that a code change MUST update in the SAME commit. check-drift
+     * (--live-ssot) binds the commit to the declared surfaces; the obligation is
+     * LIMITED to these surfaces (not every commit).
+     */
+    liveSsot?: {
+        surfaces: {
+            path: string;
+            kind: 'matrix' | 'ledger';
+            keys?: string[];
+        }[];
+    };
+}
+export type ValidateResult = {
+    ok: true;
+    config: ArbiterConfigV2;
+} | {
+    ok: false;
+    errors: string[];
+};
+export declare const DEFAULT_THRESHOLDS: Record<GovernanceLevel, ThresholdsV2>;
+export declare function validateConformanceThresholds(raw: unknown): string[];
+export declare function autoFillConformanceThresholds(level: GovernanceLevel, cls?: BrownfieldClass): ConformanceThresholds;
+export declare const GOVERNANCE_LEVELS: ReadonlySet<string>;
+export declare const INDUSTRY_OVERLAYS: ReadonlySet<string>;
+export declare const VALID_COLLABORATION_MODES: ReadonlySet<string>;
+export declare const VALID_SOLO_MERGE_MODES: ReadonlySet<string>;
+export declare const VALID_BRANCHING_STRATEGIES: ReadonlySet<string>;
+/**
+ * Canonical AI-tool allow-list — the single source of truth for tool validation.
+ * #1594: exported so the v1→v2 migration filter imports it instead of keeping a
+ * stale hand-copy that silently strips tools.
+ *
+ * #2367 (ADR-119): narrowed to the two tools arbiter actually emits for. The
+ * five retired experimental targets (cursor/copilot/gemini/windsurf/aider) are
+ * now unknown values — `sanitizeCoercibleFields` filters them out of an older
+ * `arbiter.json` and falls back to `['claude','codex']` (ADR-105 never-brick),
+ * so an existing config is coerced with a report line, never rejected outright.
+ * Must stay identical to `AiTool` and `SUPPORTED_AI_TOOLS` in wizard/types.ts.
+ */
+export declare const AI_TOOLS: ReadonlySet<string>;
+export declare const DATABASE_ENGINES: ReadonlySet<string>;
+export declare const STRICTNESS_TIERS: ReadonlySet<string>;
+export declare const RUNNER_PROFILES: ReadonlySet<string>;
+export declare const PACKAGE_MANAGERS: ReadonlySet<string>;
+export declare const THRESHOLD_PROFILES: ReadonlySet<string>;
+export declare const CONTRACT_TYPES: ReadonlySet<string>;
+export declare const AUTH_PROVIDERS: ReadonlySet<string>;
+export declare const OBSERVABILITY_PROVIDERS: ReadonlySet<string>;
+export declare const DEPLOY_TARGETS: ReadonlySet<string>;
+/**
+ * #1677: type-narrowing validator for the `--deploy-target` non-interactive flag.
+ * Mirrors the `validateProviders` membership-check pattern; rejecting at the CLI cast
+ * site (no silent coercion) keeps an unknown value from reaching buildNonInteractiveConfig.
+ */
+export declare function isDeployTarget(value: string): value is DeployTarget;
+/**
+ * #1585: single source of truth for threshold range validity — coverage keys are
+ * 1..100, the positive keys are > 0. Exported so the env-override layer
+ * (env-overrides.ts) reuses the exact same bounds validateThresholds enforces and
+ * the two definitions cannot drift. An out-of-range env override is dropped+warned
+ * by the override layer instead of flowing through and bricking validateConfig.
+ */
+export declare function isThresholdValueInRange(key: string, value: number): boolean;
+export declare function validateConfig(raw: unknown): ValidateResult;
+/** One field sanitizeCoercibleFields rewrote because its value failed validateConfig. */
+export interface CoercedField {
+    /** Top-level field name that was coerced (e.g. "contractType"). */
+    field: string;
+    /** The original (invalid) value that was present. */
+    from: unknown;
+    /**
+     * The value substituted in its place. `undefined` means the field was
+     * dropped entirely — it becomes absent, which validateConfig already
+     * treats as "not configured" for every field in the coercible set.
+     */
+    to: unknown;
+}
+export interface SanitizeResult {
+    draft: Record<string, unknown>;
+    report: CoercedField[];
+}
+/**
+ * Never-brick fallback (T0 — total config migration).
+ *
+ * `loadConfig` calls this ONLY after a strict `validateConfig()` pass has
+ * already failed — a config that validates cleanly never reaches this
+ * function, so the happy path is byte-for-byte unchanged.
+ *
+ * Deliberately narrow: this repairs only the closed set of "axis/identity"
+ * fields that steer template/generator SELECTION. It does NOT touch
+ * `features`, `thresholds`, `decomposition`, `frontend`, `automation`,
+ * `contextPack`, `taskTiers`, `kit`, `companions`, `governance`,
+ * `conformanceThresholds` or `channel` — a bad shape in any of those
+ * controls gate strictness or CI composition directly, so silently
+ * defaulting it could mask a real misconfiguration instead of a stale
+ * migration. Those stay FATAL (loadConfig still throws E_CONFIG_INVALID).
+ *
+ * Coercible set, each with a safe, already-precedented default:
+ *   - `contractType`, `databaseEngine`, `strictnessTier`, `thresholdProfile`,
+ *     `runnerProfile`, `industryOverlay` — unknown/removed enum value → the
+ *     field is dropped (becomes absent/"not configured").
+ *   - `lanes` — invalid entries are filtered out; valid entries are kept.
+ *   - `governanceLevel` — absent → defaults to `'L2'`. A present but invalid
+ *     value is FATAL: this field defines what “green” means, so it must fail
+ *     closed like a syntax error rather than silently weakening governance.
+ *   - `tools` — unknown entries filtered to the known `AI_TOOLS` set;
+ *     falls back to `['claude', 'codex']` if that would empty the array.
+ *   - `useGitHub`/`permitGitHub` — neither present as a boolean → defaults
+ *     `permitGitHub: false`.
+ *
+ * Never mutates its input; returns a fresh draft plus a `report` of every
+ * field it touched. An empty report means nothing here was coercible — the
+ * caller should treat the original validation failure as fatal.
+ */
+export declare function sanitizeCoercibleFields(raw: Record<string, unknown>): SanitizeResult;
+export declare const VALID_LANES: ReadonlySet<string>;

package/dist/config/schema.js

@@ -0,0 +1 @@
+export const DEFAULT_TASK_TIERS={XS:{planDepth:"minimal",reviewAgentCount:1},S:{planDepth:"brief",reviewAgentCount:1},Standard:{planDepth:"full",reviewAgentCount:2}},DEFAULT_CROSS_MODEL_REVIEW={enabled:!1,diffEgressConsent:!1,providers:["codex"],slots:{codeReview:1,redTeamReview:0},timeoutMs:3e5,onUnavailable:"degrade"},AUTONOMY_LEVELS=["L0","L1","L2","L3"],VALID_GATE_LEVELS=["L1","L2"],CURRENT_CONFIG_SCHEMA_VERSION=4,DEFAULT_THRESHOLDS={L1:{lineCoverage:60,branchCoverage:50,mutationScore:70,cyclomaticComplexity:20,methodLength:100,maxParams:8},L2:{lineCoverage:80,branchCoverage:70,mutationScore:80,cyclomaticComplexity:15,methodLength:65,maxParams:7},L3:{lineCoverage:85,branchCoverage:88,mutationScore:85,cyclomaticComplexity:10,methodLength:40,maxParams:5},L4:{lineCoverage:85,branchCoverage:88,mutationScore:85,cyclomaticComplexity:10,methodLength:40,maxParams:5}};const TIER1_MEMBERS_DEFAULT=["D-TEST-LEVELS","D-GATE-GREEN","D-DONE-EVIDENCE","D-NO-OVERCLAIM","D-LIVE-E2E","D-FE-RENDER-GATE","D-DOMAIN-API","D-COVERAGE-THRESHOLDS","D-INVARIANTS-ENFORCED","D-COMMIT-HYGIENE","DISC-finding-hygiene"],DEFAULT_FAMILY_WEIGHTS={discipline:.15,"reality-contact":.35,"docs-convention":.2,"code-quality-gold":.3},DEFAULT_CONFORMANCE_THRESHOLDS={L1:{tier1Members:TIER1_MEMBERS_DEFAULT,familyWeights:DEFAULT_FAMILY_WEIGHTS,goldTier2Gate:.85},L2:{tier1Members:TIER1_MEMBERS_DEFAULT,familyWeights:DEFAULT_FAMILY_WEIGHTS,goldTier2Gate:.88},L3:{tier1Members:TIER1_MEMBERS_DEFAULT,familyWeights:DEFAULT_FAMILY_WEIGHTS,goldTier2Gate:.9},L4:{tier1Members:TIER1_MEMBERS_DEFAULT,familyWeights:DEFAULT_FAMILY_WEIGHTS,goldTier2Gate:.92}},BROWNFIELD_CONFORMANCE_OVERLAYS={gold:{goldTier2Gate:.9},light:{goldTier2Gate:.8},medium:{goldTier2Gate:.75},heavy:{goldTier2Gate:.7}};export function validateConformanceThresholds(raw){const errors=[];if(typeof raw!="object"||raw===null)return errors.push("conformanceThresholds must be an object"),errors;const t=raw;return Array.isArray(t.tier1Members)||errors.push("conformanceThresholds.tier1Members must be an array"),(typeof t.familyWeights!="object"||t.familyWeights===null)&&errors.push("conformanceThresholds.familyWeights must be an object"),typeof t.goldTier2Gate!="number"&&errors.push("conformanceThresholds.goldTier2Gate must be a number"),errors}export function autoFillConformanceThresholds(level,cls){const base={...DEFAULT_CONFORMANCE_THRESHOLDS[level]};if(cls!==void 0){const overlay=BROWNFIELD_CONFORMANCE_OVERLAYS[cls];return{...base,...overlay}}return base}export const GOVERNANCE_LEVELS=new Set(["L1","L2","L3","L4"]),INDUSTRY_OVERLAYS=new Set(["pharma","sox","gdpr","generic","iso27001","iso9001","regulated","none"]),VALID_COLLABORATION_MODES=new Set(["trunk-solo","peer-review","gated-review"]),VALID_SOLO_MERGE_MODES=new Set(["direct","pr-ff"]),VALID_BRANCHING_STRATEGIES=new Set(["trunk-direct","github-flow","github-flow-with-develop"]),AI_TOOLS=new Set(["claude","codex"]);const DATABASE_ENGINE_VALUES={postgresql:!0,mysql:!0,mongodb:!0,sqlite:!0,other:!0,none:!0},STRICTNESS_TIER_VALUES={practical:!0,pedantic:!0},RUNNER_PROFILE_VALUES={solo:!0,fleet:!0},PACKAGE_MANAGER_VALUES={npm:!0,pnpm:!0,yarn:!0,bun:!0},THRESHOLD_PROFILE_VALUES={scaled:!0,fixed:!0},CONTRACT_TYPE_VALUES={"rest-owned":!0,"rest-public":!0,graphql:!0,grpc:!0,"message-queue":!0,none:!0},AUTH_PROVIDER_VALUES={none:!0,"app-level-ts":!0,authelia:!0,authentik:!0,"ory-stack":!0,zitadel:!0,keycloak:!0,"saas-clerk":!0,"saas-auth0":!0,"saas-supabase-auth":!0,"saas-cognito":!0},OBSERVABILITY_PROVIDER_VALUES={none:!0,"stdout-minimal":!0,"victoria-vector-quickwit":!0,signoz:!0,openobserve:!0,"prom-grafana-loki-jaeger":!0,"saas-sentry":!0,"saas-datadog":!0,"saas-axiom":!0,"saas-betterstack":!0};export const DATABASE_ENGINES=new Set(Object.keys(DATABASE_ENGINE_VALUES)),STRICTNESS_TIERS=new Set(Object.keys(STRICTNESS_TIER_VALUES)),RUNNER_PROFILES=new Set(Object.keys(RUNNER_PROFILE_VALUES)),PACKAGE_MANAGERS=new Set(Object.keys(PACKAGE_MANAGER_VALUES)),THRESHOLD_PROFILES=new Set(Object.keys(THRESHOLD_PROFILE_VALUES)),CONTRACT_TYPES=new Set(Object.keys(CONTRACT_TYPE_VALUES)),AUTH_PROVIDERS=new Set(Object.keys(AUTH_PROVIDER_VALUES)),OBSERVABILITY_PROVIDERS=new Set(Object.keys(OBSERVABILITY_PROVIDER_VALUES));const DEPLOY_TARGET_VALUES={ghcr:!0,"azure-container-app":!0,"aws-ecs":!0,"gcp-cloud-run":!0,"nas-compose":!0,none:!0};export const DEPLOY_TARGETS=new Set(Object.keys(DEPLOY_TARGET_VALUES));export function isDeployTarget(value){return DEPLOY_TARGETS.has(value)}function isRecord(val){return typeof val=="object"&&val!==null&&!Array.isArray(val)}const THRESHOLD_COVERAGE_KEYS=["lineCoverage","branchCoverage","mutationScore"],THRESHOLD_POSITIVE_KEYS=["cyclomaticComplexity","methodLength","maxParams"];export function isThresholdValueInRange(key,value){return THRESHOLD_COVERAGE_KEYS.includes(key)?value>0&&value<=100:THRESHOLD_POSITIVE_KEYS.includes(key)?value>0:!0}function validateThresholds(raw,errors){if(!isRecord(raw)){errors.push("thresholds must be an object");return}for(const key of THRESHOLD_COVERAGE_KEYS){const v=raw[key];(typeof v!="number"||!isThresholdValueInRange(key,v))&&errors.push(`thresholds.${key} must be a number between 1 and 100`)}for(const key of THRESHOLD_POSITIVE_KEYS){const v=raw[key];(typeof v!="number"||!isThresholdValueInRange(key,v))&&errors.push(`thresholds.${key} must be a positive number`)}}const OPTIONAL_FEATURE_FLAGS=["selfValidationHarness","auditToolchain","fiveLaneCi","soloDevMode","mcpFallback","noSkippedTests","riskRegister","operationsHandbook","iso27001Mapping","nis2Mapping","gdprMapping","codeownersNotify","taxonomy25d","perfTesting","acceptanceAnchor"];function validateFeatures(raw,errors){if(!isRecord(raw)){errors.push("features must be an object");return}const flags=["contractTesting","mutationTesting","securityScanning","evidenceHarness","debtGates","suppressions"];for(const key of flags)typeof raw[key]!="boolean"&&errors.push(`features.${key} must be a boolean`);for(const key of OPTIONAL_FEATURE_FLAGS)key in raw&&typeof raw[key]!="boolean"&&errors.push(`features.${key} must be a boolean`)}function validateCollaborationAxes(raw,errors){if("collaborationMode"in raw&&raw.collaborationMode!==void 0){const cm=raw.collaborationMode;VALID_COLLABORATION_MODES.has(cm)||errors.push(`collaborationMode must be one of trunk-solo, peer-review, gated-review \u2014 got ${cm}`)}if("branchingStrategy"in raw&&raw.branchingStrategy!==void 0){const bs=raw.branchingStrategy;VALID_BRANCHING_STRATEGIES.has(bs)||errors.push(`branchingStrategy must be one of trunk-direct, github-flow, github-flow-with-develop \u2014 got ${bs}`)}if(isRecord(raw.solo)&&raw.solo.mergeMode!==void 0){const mm=raw.solo.mergeMode;VALID_SOLO_MERGE_MODES.has(mm)||errors.push(`solo.mergeMode must be one of direct, pr-ff \u2014 got ${mm}`)}}function autoFillThresholds(raw,level){raw.thresholds===void 0&&typeof level=="string"&&GOVERNANCE_LEVELS.has(level)&&(raw.thresholds={...DEFAULT_THRESHOLDS[level]})}function validateOptionalScalars(raw,errors){if("basePackage"in raw&&raw.basePackage!==void 0&&typeof raw.basePackage!="string"&&errors.push("basePackage must be a string"),"projectName"in raw&&raw.projectName!==void 0&&typeof raw.projectName!="string"&&errors.push("projectName must be a string"),"industryOverlay"in raw&&raw.industryOverlay!==void 0){const overlay=raw.industryOverlay;(typeof overlay!="string"||!INDUSTRY_OVERLAYS.has(overlay))&&errors.push(`industryOverlay must be one of ${[...INDUSTRY_OVERLAYS].join(", ")} \u2014 got ${typeof overlay=="string"?overlay:typeof overlay}`)}}function validateOptionalEnums(raw,errors){const checks=[["databaseEngine",DATABASE_ENGINES],["strictnessTier",STRICTNESS_TIERS],["thresholdProfile",THRESHOLD_PROFILES],["contractType",CONTRACT_TYPES],["runnerProfile",RUNNER_PROFILES],["packageManager",PACKAGE_MANAGERS]];for(const[field,allowed]of checks)if(field in raw&&raw[field]!==void 0){const v=raw[field];(typeof v!="string"||!allowed.has(v))&&errors.push(`${field} must be one of ${[...allowed].join(", ")} \u2014 got ${typeof v=="string"?v:typeof v}`)}}function validateProviders(raw,errors){const checks=[["auth",AUTH_PROVIDERS],["observability",OBSERVABILITY_PROVIDERS]];for(const[field,allowed]of checks){const block=raw[field];if(isRecord(block)&&block.provider!==void 0){const v=block.provider;(typeof v!="string"||!allowed.has(v))&&errors.push(`${field}.provider must be one of ${[...allowed].join(", ")} \u2014 got ${typeof v=="string"?v:typeof v}`)}}}function validateCompanions(raw,errors){const block=raw.companions;if(block!==void 0){if(!isRecord(block)||Array.isArray(block)){errors.push(`companions must be an object map of per-companion overrides \u2014 got ${Array.isArray(block)?"array":typeof block}`);return}for(const[name,override]of Object.entries(block))validateCompanionOverride(name,override,errors)}}function validateCompanionOverride(name,override,errors){if(!isRecord(override)){errors.push(`companions.${name} must be an object \u2014 got ${typeof override}`);return}override.enabled!==void 0&&typeof override.enabled!="boolean"&&errors.push(`companions.${name}.enabled must be a boolean`);const mode=override.mode;mode!==void 0&&mode!=="lite"&&mode!=="full"&&errors.push(`companions.${name}.mode must be one of lite, full \u2014 got ${typeof mode=="string"?mode:typeof mode}`)}export function validateConfig(raw){if(!isRecord(raw))return{ok:!1,errors:["config must be a non-null object"]};const draft=structuredClone(raw),errors=[];typeof draft.version!="string"&&errors.push("version must be a string"),validateOptionalScalars(draft,errors),validateOptionalEnums(draft,errors),validateProviders(draft,errors),validateCompanions(draft,errors);const rawLevel=draft.governanceLevel,level=typeof rawLevel=="string"?rawLevel.toUpperCase():rawLevel;typeof rawLevel=="string"&&(draft.governanceLevel=level),(typeof level!="string"||!GOVERNANCE_LEVELS.has(level))&&errors.push(`governanceLevel must be one of L1, L2, L3, L4 \u2014 got ${String(rawLevel)}`),(!Array.isArray(draft.tools)||draft.tools.some(t=>!AI_TOOLS.has(t)))&&errors.push("tools must be an array of valid AI tools");const hasUseGitHub=typeof draft.useGitHub=="boolean",hasPermitGitHub=typeof draft.permitGitHub=="boolean";if(!hasUseGitHub&&!hasPermitGitHub&&errors.push("useGitHub or permitGitHub must be a boolean"),validateCollaborationAxes(draft,errors),autoFillThresholds(draft,level),validateFeatures(draft.features,errors),validateThresholds(draft.thresholds,errors),validateDecomposition(draft.decomposition,errors),validateFrontend(draft.frontend,errors),validateLanes(draft.lanes,errors),validateTaskTiers(draft.taskTiers,errors),validateContextPack(draft.contextPack,errors),validateAutomation(draft.automation,errors),validateCrossModelReview(draft.crossModelReview,errors),validateChannel(draft.channel,errors),validateGovernance(draft.governance,errors),validateKit(draft.kit,errors),validateSmokeJourneys(draft.smokeJourneys,errors),validateE2ePolicy(draft.e2ePolicy,errors),validateShip(draft.ship,errors),draft.conformanceThresholds!==void 0){const ctErrors=validateConformanceThresholds(draft.conformanceThresholds);errors.push(...ctErrors)}return errors.length>0?{ok:!1,errors}:{ok:!0,config:draft}}export function sanitizeCoercibleFields(raw){const draft=structuredClone(raw),report=[],dropIfInvalidEnum=(field,allowed)=>{const v=draft[field];v!==void 0&&(typeof v=="string"&&allowed.has(v)||(report.push({field,from:v,to:void 0}),Reflect.deleteProperty(draft,field)))};if(dropIfInvalidEnum("contractType",CONTRACT_TYPES),dropIfInvalidEnum("databaseEngine",DATABASE_ENGINES),dropIfInvalidEnum("strictnessTier",STRICTNESS_TIERS),dropIfInvalidEnum("thresholdProfile",THRESHOLD_PROFILES),dropIfInvalidEnum("runnerProfile",RUNNER_PROFILES),dropIfInvalidEnum("industryOverlay",INDUSTRY_OVERLAYS),Array.isArray(draft.lanes)){const original=draft.lanes,filtered=original.filter(v=>VALID_LANES.has(v));filtered.length!==original.length&&(report.push({field:"lanes",from:original,to:filtered}),draft.lanes=filtered)}const rawLevel=draft.governanceLevel;rawLevel===void 0&&(report.push({field:"governanceLevel",from:rawLevel,to:"L2"}),draft.governanceLevel="L2");const rawTools=draft.tools;if(!Array.isArray(rawTools)||rawTools.some(t=>!AI_TOOLS.has(t))){const filtered=Array.isArray(rawTools)?rawTools.filter(t=>AI_TOOLS.has(t)):[],fallback=filtered.length>0?filtered:["claude","codex"];report.push({field:"tools",from:rawTools,to:fallback}),draft.tools=fallback}const hasUseGitHub=typeof draft.useGitHub=="boolean",hasPermitGitHub=typeof draft.permitGitHub=="boolean";return!hasUseGitHub&&!hasPermitGitHub&&(report.push({field:"permitGitHub",from:draft.permitGitHub,to:!1}),draft.permitGitHub=!1),{draft,report}}const VALID_FRONTEND_FRAMEWORKS=new Set(["vue","react","svelte"]),FRONTEND_IDENT_RE=/^[@a-zA-Z0-9][a-zA-Z0-9@/._-]{0,59}$/;function validateFrontend(raw,errors){if(raw!=null){if(!isRecord(raw)){errors.push("frontend must be an object");return}raw.framework!=null&&(typeof raw.framework!="string"?errors.push("frontend.framework must be a string"):VALID_FRONTEND_FRAMEWORKS.has(raw.framework)||errors.push(`frontend.framework must be one of vue, react, svelte \u2014 got ${raw.framework}`));for(const k of["stateManager","validationLib"])raw[k]!=null&&(typeof raw[k]!="string"?errors.push(`frontend.${k} must be a string`):FRONTEND_IDENT_RE.test(raw[k])||errors.push(`frontend.${k} must match [a-zA-Z0-9-], max 40 chars \u2014 got ${raw[k]}`))}}const DECOMPOSITION_BACKENDS=new Set(["github","markdown"]);export const VALID_LANES=new Set(["frontend","backend","docs"]);function validateLanes(raw,errors){if(raw!=null){if(!Array.isArray(raw)){errors.push("lanes must be an array");return}for(const v of raw)VALID_LANES.has(v)||errors.push(`lanes contains invalid value: ${String(v)}`)}}function validateAutomation(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("automation must be an object");return}const level=raw.autonomy;AUTONOMY_LEVELS.includes(level)||errors.push(`automation.autonomy must be one of ${AUTONOMY_LEVELS.join("|")}`),validateAutomationPrefs(raw,errors)}function validateAutomationPrefs(raw,errors){const mpw=raw.maxParallelWorktrees;mpw!==void 0&&(typeof mpw!="number"||!Number.isInteger(mpw)||mpw<1)&&errors.push("automation.maxParallelWorktrees must be a positive integer");const gate=raw.defaultGateLevel;gate!==void 0&&!VALID_GATE_LEVELS.includes(gate)&&errors.push(`automation.defaultGateLevel must be one of ${VALID_GATE_LEVELS.join("|")}`)}function validateContextPack(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("contextPack must be an object");return}const mappings=raw.adrMappings;if(mappings!=null){if(!Array.isArray(mappings)){errors.push("contextPack.adrMappings must be an array");return}for(let i=0;i<mappings.length;i++){const m=mappings[i];if(!isRecord(m)){errors.push(`contextPack.adrMappings[${i}] must be an object`);continue}(typeof m.pattern!="string"||m.pattern.length===0)&&errors.push(`contextPack.adrMappings[${i}].pattern must be a non-empty string`),(typeof m.adr!="string"||m.adr.length===0)&&errors.push(`contextPack.adrMappings[${i}].adr must be a non-empty string`)}}}const CROSS_MODEL_REVIEW_PROVIDERS=new Set(["codex"]),CROSS_MODEL_REVIEW_POLICIES=new Set(["degrade","fail"]);function validateCrossModelReview(raw,errors){if(raw!==void 0){if(!isRecord(raw)){errors.push("crossModelReview must be an object");return}validateCrossModelBooleans(raw,errors),validateCrossModelProviders(raw,errors),validateCrossModelSlots(raw,errors),validateCrossModelTimeout(raw,errors),validateCrossModelPolicy(raw,errors)}}function validateCrossModelBooleans(raw,errors){typeof raw.enabled!="boolean"&&errors.push("crossModelReview.enabled must be a boolean"),typeof raw.diffEgressConsent!="boolean"&&errors.push("crossModelReview.diffEgressConsent must be a boolean")}function validateCrossModelProviders(raw,errors){const providers=raw.providers;(!Array.isArray(providers)||providers.length===0||providers.some(provider=>!CROSS_MODEL_REVIEW_PROVIDERS.has(provider)))&&errors.push("crossModelReview.providers must be a non-empty array containing only codex")}function validateCrossModelSlots(raw,errors){const slots=raw.slots;if(!isRecord(slots)){errors.push("crossModelReview.slots must be an object");return}const codeReview=slots.codeReview;codeReview!==0&&codeReview!==1&&errors.push("crossModelReview.slots.codeReview must be 0 or 1 in v1"),slots.redTeamReview!==0&&errors.push("crossModelReview.slots.redTeamReview must be 0 until red-team support ships")}function validateCrossModelTimeout(raw,errors){const timeoutMs=raw.timeoutMs;(typeof timeoutMs!="number"||!Number.isInteger(timeoutMs)||timeoutMs<1)&&errors.push("crossModelReview.timeoutMs must be a positive integer")}function validateCrossModelPolicy(raw,errors){CROSS_MODEL_REVIEW_POLICIES.has(raw.onUnavailable)||errors.push("crossModelReview.onUnavailable must be degrade or fail")}const VALID_INVARIANTS_CATALOG_VALUES=new Set(["core","extended"]),VALID_CONSTRAINT_SCAN_VALUES=new Set(["on","off"]);function validateGovernance(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("governance must be an object");return}const catalog=raw.invariants_catalog;catalog!==void 0&&!VALID_INVARIANTS_CATALOG_VALUES.has(catalog)&&errors.push(`governance.invariants_catalog must be 'core' or 'extended' \u2014 got ${typeof catalog=="string"?catalog:JSON.stringify(catalog)}`);const constraintScan=raw.constraintScan;constraintScan!==void 0&&!VALID_CONSTRAINT_SCAN_VALUES.has(constraintScan)&&errors.push(`governance.constraintScan must be 'on' or 'off' \u2014 got ${typeof constraintScan=="string"?constraintScan:JSON.stringify(constraintScan)}`),validateSsotGuardPatterns(raw.ssotGuardPatterns,errors),validateProjectInvariants(raw.projectInvariants,errors),validateLiveSsot(raw.liveSsot,errors)}function validateLiveSsot(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("governance.liveSsot must be an object");return}const surfaces=raw.surfaces;if(!Array.isArray(surfaces)){errors.push("governance.liveSsot.surfaces must be an array");return}for(const entry of surfaces){if(!isRecord(entry)||typeof entry.path!="string"){errors.push("governance.liveSsot.surfaces entries must be objects with a string path");continue}const kind=entry.kind;kind!=="matrix"&&kind!=="ledger"&&errors.push(`governance.liveSsot.surfaces kind must be 'matrix' or 'ledger' \u2014 got ${String(kind)}`);const keys=entry.keys;keys!==void 0&&(!Array.isArray(keys)||keys.some(k=>typeof k!="string"))&&errors.push("governance.liveSsot.surfaces keys must be an array of strings")}}function validateProjectInvariantLanguages(id,entry,errors){const languages=entry.languages;if(languages===void 0)return;if(!Array.isArray(languages)||languages.some(l=>typeof l!="string")){errors.push(`governance.projectInvariants ${id} languages must be an array of strings`);return}const languageDetail=entry.languageDetail;if(isRecord(languageDetail))for(const lang of languages)lang in languageDetail||errors.push(`governance.projectInvariants ${id} languageDetail must cover every language in languages (missing ${String(lang)})`)}function validateProjectInvariantEntry(entry,seen,errors){if(!isRecord(entry)){errors.push("governance.projectInvariants entries must be objects");return}const id=entry.id;if(typeof id!="string"||!PROJ_INVARIANT_ID_RE.test(id)){errors.push(`governance.projectInvariants id must match /^PROJ-\\d+$/ (the INV-NN namespace is reserved) \u2014 got ${String(id)}`);return}if(seen.has(id)){errors.push(`governance.projectInvariants duplicate id: ${id}`);return}seen.add(id),entry.status==="retired"&&errors.push(`governance.projectInvariants ${id} must not be retired`),(entry.tier===void 0||entry.title===void 0||entry.description===void 0)&&errors.push(`governance.projectInvariants ${id} requires tier, title, and description`),typeof entry.alwaysActive!="boolean"&&errors.push(`governance.projectInvariants ${id} requires boolean alwaysActive`),validateProjectInvariantLanguages(id,entry,errors)}function validateProjectInvariants(raw,errors){if(raw==null)return;if(!Array.isArray(raw)){errors.push("governance.projectInvariants must be an array of invariant objects");return}const seen=new Set;for(const entry of raw)validateProjectInvariantEntry(entry,seen,errors)}const PROJ_INVARIANT_ID_RE=/^PROJ-\d+$/;function validateSsotGuardPatterns(raw,errors){raw!==void 0&&(!Array.isArray(raw)||raw.some(p=>typeof p!="string"))&&errors.push("governance.ssotGuardPatterns must be an array of strings")}const VALID_KIT_STATUSES=new Set(["present","partial","missing"]);function validateKit(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("kit must be an object");return}const measure=raw.measure;if(measure!=null){if(!isRecord(measure)){errors.push("kit.measure must be an object");return}for(const[dimId,entry]of Object.entries(measure)){if(!isRecord(entry)){errors.push(`kit.measure.${dimId} must be an object`);continue}VALID_KIT_STATUSES.has(entry.status)||errors.push(`kit.measure.${dimId}.status must be present, partial, or missing`),(!Array.isArray(entry.evidence)||entry.evidence.some(e=>typeof e!="string"))&&errors.push(`kit.measure.${dimId}.evidence must be an array of strings`);const known=new Set(["status","evidence"]),extra=Object.keys(entry).filter(k=>!known.has(k));extra.length>0&&errors.push(`kit.measure.${dimId} has unknown keys: ${extra.join(", ")}`)}}}const VALID_PLAN_DEPTHS=new Set(["minimal","brief","full"]);function validateOneTier(tierName,raw,errors){if(!isRecord(raw)){errors.push(`taskTiers.${tierName} must be an object`);return}const planDepth=raw.planDepth;(typeof planDepth!="string"||!VALID_PLAN_DEPTHS.has(planDepth))&&errors.push(`taskTiers.${tierName}.planDepth must be one of minimal, brief, full`);const count=raw.reviewAgentCount;(typeof count!="number"||!Number.isInteger(count)||count<=0)&&errors.push(`taskTiers.${tierName}.reviewAgentCount must be a positive integer`)}function validateTaskTiers(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("taskTiers must be an object");return}const required=["XS","S","Standard"];for(const tier of required){if(!(tier in raw)){errors.push(`taskTiers.${tier} is required`);continue}validateOneTier(tier,raw[tier],errors)}}function validateDecomposition(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("decomposition must be an object");return}const backend=raw.backend;backend!==void 0&&!DECOMPOSITION_BACKENDS.has(backend)&&errors.push(`decomposition.backend must be "github" or "markdown" \u2014 got ${typeof backend=="string"?backend:JSON.stringify(backend)}`)}const VALID_CHANNELS=new Set(["latest","beta","canary"]);function validateChannel(raw,errors){raw!=null&&(typeof raw!="string"||!VALID_CHANNELS.has(raw))&&errors.push(`channel must be one of latest, beta, canary \u2014 got ${JSON.stringify(raw)}`)}const SMOKE_JOURNEYS_MIN=2,SMOKE_JOURNEYS_MAX=4,E2E_MAX_STRIKES_MIN=2;function validateSmokeJourneys(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("smokeJourneys must be an object");return}const requiredJourneys=raw.requiredJourneys;requiredJourneys!==void 0&&(!Array.isArray(requiredJourneys)||requiredJourneys.some(j=>typeof j!="string"))&&errors.push("smokeJourneys.requiredJourneys must be an array of strings");const minJourneys=raw.minJourneys;minJourneys!==void 0&&(typeof minJourneys=="number"&&Number.isInteger(minJourneys)&&minJourneys>=SMOKE_JOURNEYS_MIN&&minJourneys<=SMOKE_JOURNEYS_MAX||errors.push(`smokeJourneys.minJourneys must be an integer between ${SMOKE_JOURNEYS_MIN} and ${SMOKE_JOURNEYS_MAX}`))}function validateShipBound(path,raw,errors){raw!==void 0&&(typeof raw!="number"||!Number.isInteger(raw)||raw<1)&&errors.push(`${path} must be an integer >= 1`)}function validateShipSection(path,raw,bounds,errors){if(raw!=null){if(!isRecord(raw)){errors.push(`${path} must be an object`);return}for(const bound of bounds)validateShipBound(`${path}.${bound}`,raw[bound],errors)}}function validateShip(raw,errors){if(raw!=null){if(!isRecord(raw)){errors.push("ship must be an object");return}validateShipSection("ship.train",raw.train,["maxChain","maxAgeMinutes"],errors),validateShipSection("ship.review",raw.review,["maxRounds"],errors)}}function validateE2ePolicy(raw,errors){if(raw==null)return;if(!isRecord(raw)){errors.push("e2ePolicy must be an object");return}const escalation=raw.escalation;if(escalation==null)return;if(!isRecord(escalation)){errors.push("e2ePolicy.escalation must be an object");return}const strikes=escalation.strikes;(!Array.isArray(strikes)||strikes.some(s=>typeof s!="number"))&&errors.push("e2ePolicy.escalation.strikes must be an array of numbers");const maxStrikes=escalation.maxStrikes;typeof maxStrikes=="number"&&Number.isInteger(maxStrikes)&&maxStrikes>=E2E_MAX_STRIKES_MIN||errors.push(`e2ePolicy.escalation.maxStrikes must be an integer >= ${E2E_MAX_STRIKES_MIN}`)}

package/dist/config/test-pyramid-profiles.js

@@ -0,0 +1 @@
+const PROFILES={"backend-web-db":{archetype:"backend-web-db",hasUnitTests:!0,hasContainerIntegration:!0,hasPropertyTests:!1,hasE2ETests:!0,hasPerformanceTests:!0,hasContractTests:!0,levels:[{id:"L1",name:"L1 Unit",description:"Fast, isolated unit tests for business logic and domain models",tools:"JUnit/pytest/vitest/cargo test"},{id:"L2",name:"L2 Integration",description:"Service + DB integration using Testcontainers or Docker Compose",tools:"Testcontainers, RestAssured, TestClient"},{id:"L3",name:"L3 Contract",description:"Consumer-driven contract tests to verify API compatibility",tools:"Pact, Spring Cloud Contract"},{id:"L4",name:"L4 E2E",description:"End-to-end browser / API flows against a running environment",tools:"Playwright, Cypress, Postman"},{id:"L5",name:"L5 Performance",description:"Load and stress tests verifying SLAs under production-like load",tools:"k6, Gatling, Locust"}]},cli:{archetype:"cli",hasUnitTests:!0,hasContainerIntegration:!1,hasPropertyTests:!1,hasE2ETests:!1,hasPerformanceTests:!1,hasContractTests:!1,levels:[{id:"L1",name:"L1 Unit",description:"Unit tests for individual commands, parsers, and handlers",tools:"JUnit/pytest/vitest/cargo test"},{id:"L2",name:"L2 CLI Integration",description:"Integration tests invoking the CLI binary with real arguments",tools:"bats, pytest subprocess, assert_cmd"}]},library:{archetype:"library",hasUnitTests:!0,hasContainerIntegration:!1,hasPropertyTests:!0,hasE2ETests:!1,hasPerformanceTests:!1,hasContractTests:!1,levels:[{id:"L1",name:"L1 Unit",description:"Unit tests for all public API surface \u2014 every exported function/class",tools:"JUnit/pytest/vitest/cargo test"},{id:"L2",name:"L2 Property-Based",description:"Generative / property-based tests to find edge cases",tools:"fast-check, Hypothesis, proptest, QuickCheck"}]},"data-pipeline":{archetype:"data-pipeline",hasUnitTests:!0,hasContainerIntegration:!0,hasPropertyTests:!1,hasE2ETests:!1,hasPerformanceTests:!1,hasContractTests:!0,levels:[{id:"L1",name:"L1 Unit",description:"Unit tests for transforms, parsers, and aggregation logic",tools:"pytest/vitest/cargo test"},{id:"L2",name:"L2 Integration",description:"Pipeline integration with real or containerised data stores",tools:"Testcontainers, pytest-docker"},{id:"L3",name:"L3 Contract",description:"Schema / data contract tests ensuring upstream/downstream compatibility",tools:"Great Expectations, Pact, soda-core"}]},"frontend-spa":{archetype:"frontend-spa",hasUnitTests:!0,hasContainerIntegration:!1,hasPropertyTests:!1,hasE2ETests:!0,hasPerformanceTests:!1,hasContractTests:!1,levels:[{id:"L1",name:"L1 Unit",description:"Unit tests for utilities, hooks, and pure functions",tools:"vitest, jest"},{id:"L2",name:"L2 Component",description:"Component-level rendering and interaction tests",tools:"Testing Library, Storybook, Enzyme"},{id:"L3",name:"L3 E2E",description:"Full browser flows against a running or mocked backend",tools:"Playwright, Cypress"}]},embedded:{archetype:"embedded",hasUnitTests:!0,hasContainerIntegration:!1,hasPropertyTests:!1,hasE2ETests:!1,hasPerformanceTests:!1,hasContractTests:!1,levels:[{id:"L1",name:"L1 Unit",description:"Host-side unit tests for logic, state machines, and protocols",tools:"Unity, cargo test, pytest"},{id:"L2",name:"L2 Hardware Integration",description:"Tests against simulator, emulator, or real hardware in CI",tools:"QEMU, Renode, JTAG-based harness"}]}};export function getTestPyramidProfile(archetype){const profile=PROFILES[archetype];if(profile===void 0)throw new Error(`unknown archetype "${archetype}" \u2014 no test pyramid profile defined for it`);return profile}

package/dist/config/thresholds.js

@@ -0,0 +1,2 @@
+// SPDX-License-Identifier: Apache-2.0
+import{DEFAULT_THRESHOLDS}from"./schema.js";export function computeThresholds(linesOfCode,profile,governanceLevel){const levelDefaults=DEFAULT_THRESHOLDS[governanceLevel],mutationThreshold=levelDefaults.mutationScore;if(profile==="fixed")return{coverageEnabled:!0,mutationEnabled:!0,coverageThreshold:levelDefaults.lineCoverage,mutationThreshold};const coverageEnabled=linesOfCode>=1e3,mutationEnabled=linesOfCode>=5e3;let coverageThreshold;if(!coverageEnabled)coverageThreshold=60;else{const t=Math.min(1,(linesOfCode-1e3)/9e3);coverageThreshold=Math.round(60+t*25)}return{coverageEnabled,mutationEnabled,coverageThreshold,mutationThreshold}}export function resolveEffectiveThresholds(config){const profile=config.thresholdProfile??"fixed",computed=computeThresholds(config.linesOfCode??0,profile,config.governanceLevel),defaults=DEFAULT_THRESHOLDS[config.governanceLevel],lineCoverage=profile==="scaled"?computed.coverageThreshold:config.thresholds?.lineCoverage??computed.coverageThreshold,mutationScore=profile==="scaled"?computed.mutationThreshold:config.thresholds?.mutationScore??computed.mutationThreshold,branchCoverage=config.thresholds?.branchCoverage??defaults.branchCoverage;return{coverageEnabled:computed.coverageEnabled,mutationEnabled:computed.mutationEnabled,lineCoverage,branchCoverage,mutationScore}}

package/dist/conformance/dimensions.js

@@ -0,0 +1,3 @@
+// SPDX-License-Identifier: Apache-2.0
+import{readdirSync}from"node:fs";import{join}from"node:path";import{safeResolve,readJson,readText,fileExists,globMatch,walkRepo}from"./shared.js";const RC_T1={family:"reality-contact",tier:1,weight:0,required_at:"L1"},DISC_T1={family:"discipline",tier:1,weight:0,required_at:"L1"},D_TEST_LEVELS_ID="D-TEST-LEVELS",D_TEST_LEVELS_TITLE="Declared test levels populated";function checkRequiredLevel(lvl,allFiles){if(typeof lvl!="object"||lvl===null)return null;const l=lvl;if((typeof l.status=="string"?l.status:"required")!=="required")return null;const matched=(Array.isArray(l.globs)?l.globs:[]).some(g=>allFiles.some(f=>globMatch(g,f))),levelName=typeof l.level=="string"?l.level:"unknown";return matched?null:levelName}export function probeDTestLevels(root){const pyramidPath=safeResolve(root,"test-pyramid.json");if(pyramidPath===null||!fileExists(pyramidPath))return{id:D_TEST_LEVELS_ID,title:D_TEST_LEVELS_TITLE,...RC_T1,verdict:"N",evidence:{file:"test-pyramid.json",detail:"missing \u2014 no test pyramid declared"}};const manifest=readJson(pyramidPath);if(manifest===null||typeof manifest!="object")return{id:D_TEST_LEVELS_ID,title:D_TEST_LEVELS_TITLE,...RC_T1,verdict:"N",evidence:{file:"test-pyramid.json",detail:"parse error"}};const m=manifest,levels=Array.isArray(m.levels)?m.levels:[];if(levels.length===0)return{id:D_TEST_LEVELS_ID,title:D_TEST_LEVELS_TITLE,...RC_T1,verdict:"N",evidence:{file:"test-pyramid.json",detail:"no levels declared"}};const allFiles=walkRepo(root),failures=levels.map(lvl=>checkRequiredLevel(lvl,allFiles)).filter(r=>r!==null);return failures.length>0?{id:D_TEST_LEVELS_ID,title:D_TEST_LEVELS_TITLE,...RC_T1,verdict:"N",evidence:{file:"test-pyramid.json",detail:`empty required levels: ${failures.join(", ")}`}}:{id:D_TEST_LEVELS_ID,title:D_TEST_LEVELS_TITLE,...RC_T1,verdict:"Y",evidence:{file:"test-pyramid.json",detail:"all required levels populated"}}}const SERVICE_ARCHETYPES=new Set(["backend","backend-web-db","backend-api","backend-service","service","fullstack","fullstack-web"]);export function probeDLiveE2e(root,archetype){if(!(archetype!==null&&(SERVICE_ARCHETYPES.has(archetype)||archetype.startsWith("backend")||archetype==="fullstack")))return{id:"D-LIVE-E2E",title:"Non-mocked live API e2e layer exists and runs",...RC_T1,verdict:"NA",evidence:{file:"arbiter.json",detail:`archetype "${archetype??"unset"}" is not a service type \u2014 not applicable`}};const manifestPath=safeResolve(root,"api-e2e.json");if(manifestPath===null||!fileExists(manifestPath))return{id:"D-LIVE-E2E",title:"Non-mocked live API e2e layer exists and runs",...RC_T1,verdict:"N",evidence:{file:"api-e2e.json",detail:"missing \u2014 no e2e manifest declared"}};const manifest=readJson(manifestPath);if(manifest===null||typeof manifest!="object")return{id:"D-LIVE-E2E",title:"Non-mocked live API e2e layer exists and runs",...RC_T1,verdict:"N",evidence:{file:"api-e2e.json",detail:"parse error"}};const m=manifest,suiteCount=typeof m.suiteCount=="number"?m.suiteCount:0;return suiteCount>0?{id:"D-LIVE-E2E",title:"Non-mocked live API e2e layer exists and runs",...RC_T1,verdict:"Y",evidence:{file:"api-e2e.json",detail:`suiteCount=${suiteCount}`}}:{id:"D-LIVE-E2E",title:"Non-mocked live API e2e layer exists and runs",...RC_T1,verdict:"N",evidence:{file:"api-e2e.json",detail:"suiteCount=0 \u2014 no e2e suites registered"}}}const D_FE_RENDER_GATE_ID="D-FE-RENDER-GATE",D_FE_RENDER_GATE_TITLE="FE archetypes have behavioural/visual gate",FE_ARCHETYPES=new Set(["frontend","frontend-web","frontend-spa","fullstack","fullstack-web"]),FE_RENDER_EVIDENCE_FILES=["playwright.config.ts","playwright.config.js","vitest.browser.config.ts","vitest.browser.config.js","chromatic.config.ts","chromatic.config.js"];export function probeDFeRenderGate(root,archetype){if(!(archetype!==null&&(FE_ARCHETYPES.has(archetype)||archetype.startsWith("frontend")||archetype==="fullstack")))return{id:D_FE_RENDER_GATE_ID,title:D_FE_RENDER_GATE_TITLE,...RC_T1,verdict:"NA",evidence:{file:"arbiter.json",detail:`archetype "${archetype??"unset"}" is not a frontend type \u2014 not applicable`}};for(const file of FE_RENDER_EVIDENCE_FILES){const abs=safeResolve(root,file);if(abs!==null&&fileExists(abs))return{id:D_FE_RENDER_GATE_ID,title:D_FE_RENDER_GATE_TITLE,...RC_T1,verdict:"Y",evidence:{file}}}return{id:D_FE_RENDER_GATE_ID,title:D_FE_RENDER_GATE_TITLE,...RC_T1,verdict:"N",evidence:{file:"arbiter.json",detail:"no playwright/vitest-browser/chromatic config found for frontend archetype"}}}export function probeDDomainApi(root){const manifestPath=safeResolve(root,"domain-api-surface.json");if(manifestPath!==null&&fileExists(manifestPath)){const manifest=readJson(manifestPath);if(manifest!==null&&typeof manifest=="object"){const m=manifest,checks=Array.isArray(m.checks)?m.checks:[];return checks.length>0?{id:"D-DOMAIN-API",title:"Domain-API surface completeness checked",...RC_T1,verdict:"Y",evidence:{file:"domain-api-surface.json",detail:`${checks.length} check(s) defined`}}:{id:"D-DOMAIN-API",title:"Domain-API surface completeness checked",...RC_T1,verdict:"N",evidence:{file:"domain-api-surface.json",detail:"checks array is empty"}}}}const legacyFiles=["openapi.yaml","openapi.yml","openapi.json","api/openapi.yaml","api/openapi.yml","api/openapi.json","pact.config.ts","pact.config.js",".pact"];for(const file of legacyFiles){const abs=safeResolve(root,file);if(abs!==null&&fileExists(abs))return{id:"D-DOMAIN-API",title:"Domain-API surface completeness checked",...RC_T1,verdict:"Y",evidence:{file}}}return{id:"D-DOMAIN-API",title:"Domain-API surface completeness checked",...RC_T1,verdict:"N",evidence:{file:"domain-api-surface.json",detail:"missing \u2014 no domain-api-surface.json or openapi/pact config found"}}}const D_DONE_EVIDENCE_ID="D-DONE-EVIDENCE",D_DONE_EVIDENCE_TITLE="Done-evidence requires reality-contact",LAST_DONE_EVIDENCE_PATH=".claude/.last-done-evidence.json";export function probeDDoneEvidence(root){const evidencePath=safeResolve(root,LAST_DONE_EVIDENCE_PATH);if(evidencePath===null||!fileExists(evidencePath))return{id:D_DONE_EVIDENCE_ID,title:D_DONE_EVIDENCE_TITLE,...RC_T1,verdict:"N",evidence:{file:LAST_DONE_EVIDENCE_PATH,detail:"absent \u2014 no done-evidence recorded"}};const manifest=readJson(evidencePath);if(manifest===null||typeof manifest!="object")return{id:D_DONE_EVIDENCE_ID,title:D_DONE_EVIDENCE_TITLE,...RC_T1,verdict:"N",evidence:{file:LAST_DONE_EVIDENCE_PATH,detail:"parse error"}};const rc=manifest.reality_contact;return typeof rc=="object"&&rc!==null&&rc.passed===!0?{id:D_DONE_EVIDENCE_ID,title:D_DONE_EVIDENCE_TITLE,...RC_T1,verdict:"Y",evidence:{file:LAST_DONE_EVIDENCE_PATH,detail:"reality_contact.passed=true"}}:{id:D_DONE_EVIDENCE_ID,title:D_DONE_EVIDENCE_TITLE,...RC_T1,verdict:"N",evidence:{file:LAST_DONE_EVIDENCE_PATH,detail:"reality_contact.passed is not true"}}}const GATE_RESULT_PATH=".arbiter/gate/local-result.json";export function probeGateGreen(root){const resultPath=safeResolve(root,GATE_RESULT_PATH);if(resultPath!==null&&fileExists(resultPath)){const manifest=readJson(resultPath);if(manifest!==null&&typeof manifest=="object"){const m=manifest;return m.pass===!0?{id:"D-GATE-GREEN",title:"Local gate most recently ran green",...DISC_T1,verdict:"Y",evidence:{file:GATE_RESULT_PATH,detail:"pass=true"}}:m.pass===!1?{id:"D-GATE-GREEN",title:"Local gate most recently ran green",...DISC_T1,verdict:"N",evidence:{file:GATE_RESULT_PATH,detail:"pass=false \u2014 gate ran, not green"}}:{id:"D-GATE-GREEN",title:"Local gate most recently ran green",...DISC_T1,verdict:"NV",evidence:{file:GATE_RESULT_PATH,detail:"gate result missing pass field (not verified)"}}}return{id:"D-GATE-GREEN",title:"Local gate most recently ran green",...DISC_T1,verdict:"NV",evidence:{file:GATE_RESULT_PATH,detail:"gate result unparseable (not verified)"}}}return{id:"D-GATE-GREEN",title:"Local gate most recently ran green",...DISC_T1,verdict:"NV",evidence:{file:GATE_RESULT_PATH,detail:"gate has not been run (not verified)"}}}const COVERAGE_SUMMARY_PATH="coverage/coverage-summary.json",COVERAGE_THRESHOLD=80;export function probeCoverageThresholds(root){const summaryPath=safeResolve(root,COVERAGE_SUMMARY_PATH);if(summaryPath===null||!fileExists(summaryPath))return{id:"D-COVERAGE-THRESHOLDS",title:`All coverage metrics >= ${COVERAGE_THRESHOLD}%`,...DISC_T1,verdict:"NV",evidence:{file:COVERAGE_SUMMARY_PATH,detail:"absent \u2014 coverage has not been collected"}};const manifest=readJson(summaryPath);if(manifest===null||typeof manifest!="object")return{id:"D-COVERAGE-THRESHOLDS",title:`All coverage metrics >= ${COVERAGE_THRESHOLD}%`,...DISC_T1,verdict:"NV",evidence:{file:COVERAGE_SUMMARY_PATH,detail:"parse error"}};const total=manifest.total;if(typeof total!="object"||total===null)return{id:"D-COVERAGE-THRESHOLDS",title:`All coverage metrics >= ${COVERAGE_THRESHOLD}%`,...DISC_T1,verdict:"NV",evidence:{file:COVERAGE_SUMMARY_PATH,detail:"total field missing"}};const t=total,metrics=["lines","branches","functions","statements"],below=[];for(const metric of metrics){const entry=t[metric];if(typeof entry=="object"&&entry!==null){const pct=entry.pct;typeof pct=="number"&&pct<COVERAGE_THRESHOLD&&below.push(`${metric}=${pct}%`)}}return below.length>0?{id:"D-COVERAGE-THRESHOLDS",title:`All coverage metrics >= ${COVERAGE_THRESHOLD}%`,...DISC_T1,verdict:"N",evidence:{file:COVERAGE_SUMMARY_PATH,detail:`below ${COVERAGE_THRESHOLD}%: ${below.join(", ")}`}}:{id:"D-COVERAGE-THRESHOLDS",title:`All coverage metrics >= ${COVERAGE_THRESHOLD}%`,...DISC_T1,verdict:"Y",evidence:{file:COVERAGE_SUMMARY_PATH,detail:`all metrics >= ${COVERAGE_THRESHOLD}%`}}}const INVARIANTS_CATALOG_PATH="src/invariants/catalog.ts",GLOBAL_INVARIANTS_PATH="GLOBAL_INVARIANTS.md",NON_TRIVIAL_INV=/##\s\S|INV-\d+/;export function probeInvariantsEnforced(root){const catalogPath=safeResolve(root,INVARIANTS_CATALOG_PATH);if(catalogPath!==null&&fileExists(catalogPath))return{id:"D-INVARIANTS-ENFORCED",title:"Invariants catalog is present",...DISC_T1,verdict:"Y",evidence:{file:INVARIANTS_CATALOG_PATH}};const arbiterInvPath=safeResolve(root,".arbiter/invariants.json");if(arbiterInvPath!==null&&fileExists(arbiterInvPath))return{id:"D-INVARIANTS-ENFORCED",title:"Invariants catalog is present",...DISC_T1,verdict:"Y",evidence:{file:".arbiter/invariants.json"}};const globalInvPath=safeResolve(root,GLOBAL_INVARIANTS_PATH);if(globalInvPath!==null){const content=readText(globalInvPath);if(content!==null&&NON_TRIVIAL_INV.test(content))return{id:"D-INVARIANTS-ENFORCED",title:"Invariants catalog is present",...DISC_T1,verdict:"Y",evidence:{file:GLOBAL_INVARIANTS_PATH}}}return invariantTierStatus(root)==="none"?{id:"D-INVARIANTS-ENFORCED",title:"Invariants catalog is present",...DISC_T1,verdict:"NA",evidence:{file:"arbiter.json",detail:"no optional invariant tiers (data/security/operational) \u2014 catalog not prescribed at this preset"}}:{id:"D-INVARIANTS-ENFORCED",title:"Invariants catalog is present",...DISC_T1,verdict:"NV",evidence:{file:INVARIANTS_CATALOG_PATH,detail:"no invariants catalog found"}}}function invariantTierStatus(root){const OPTIONAL_INV_TIERS=new Set(["data","security","operational"]),cfgPath=safeResolve(root,"arbiter.json");if(cfgPath===null)return"absent";const cfg=readJson(cfgPath);if(cfg===null||typeof cfg!="object")return"absent";const tiers=cfg.invariantTiers;return Array.isArray(tiers)?tiers.some(t=>OPTIONAL_INV_TIERS.has(String(t)))?"some":"none":"absent"}export function probeNoOverclaim(root){const evidencePath=safeResolve(root,LAST_DONE_EVIDENCE_PATH);if(evidencePath===null||!fileExists(evidencePath))return{id:"D-NO-OVERCLAIM",title:"Done-evidence explicitly asserts no overclaim",...DISC_T1,verdict:"NV",evidence:{file:LAST_DONE_EVIDENCE_PATH,detail:"absent \u2014 no done-evidence recorded"}};const manifest=readJson(evidencePath);return manifest!==null&&typeof manifest=="object"&&manifest.no_overclaim===!0?{id:"D-NO-OVERCLAIM",title:"Done-evidence explicitly asserts no overclaim",...DISC_T1,verdict:"Y",evidence:{file:LAST_DONE_EVIDENCE_PATH,detail:"no_overclaim=true"}}:{id:"D-NO-OVERCLAIM",title:"Done-evidence explicitly asserts no overclaim",...DISC_T1,verdict:"N",evidence:{file:LAST_DONE_EVIDENCE_PATH,detail:"no_overclaim is not true"}}}const HOOKS_DIRS=[".githooks",".husky"],COMMITLINT_CONFIGS=["commitlint.config.js",".commitlintrc.json",".commitlintrc.js"];function nonEmptyDir(abs){try{return readdirSync(abs).length>0}catch{return!1}}function nonEmptyFile(abs){const txt=readText(abs);return txt!==null&&txt.trim().length>0}export function probeCommitHygiene(root){const hooksDir=HOOKS_DIRS.find(d=>{const p=safeResolve(root,d);return p!==null&&fileExists(p)&&nonEmptyDir(p)}),commitlintConfig=COMMITLINT_CONFIGS.find(c=>{const p=safeResolve(root,c);return p!==null&&nonEmptyFile(p)});if(hooksDir&&commitlintConfig)return{id:"D-COMMIT-HYGIENE",title:"Commit message hygiene enforced",...DISC_T1,verdict:"Y",evidence:{file:commitlintConfig,detail:`${hooksDir}/ and ${commitlintConfig} present`}};const missing=[];return hooksDir||missing.push(".husky/ (or .githooks/)"),commitlintConfig||missing.push(".commitlintrc.json (or commitlint.config.js / .commitlintrc.js)"),{id:"D-COMMIT-HYGIENE",title:"Commit message hygiene enforced",...DISC_T1,verdict:"N",evidence:{file:".commitlintrc.json",detail:`missing: ${missing.join(", ")}`}}}const FINDING_HYGIENE_ID="DISC-finding-hygiene",FINDING_HYGIENE_TITLE="Incidental findings drained, not just filed",FINDINGS_DIR=".arbiter/findings",FINDING_HYGIENE_BASELINE=".arbiter/finding-hygiene-baseline.json",FINDING_STALE_DAYS=14,MS_PER_DAY=1440*60*1e3;function accumulateShard(text,acc){for(const line of text.split(`
+`)){const trimmed=line.trim();if(trimmed.length===0)continue;let entry;try{entry=JSON.parse(trimmed)}catch{continue}if(typeof entry!="object"||entry===null)continue;const e=entry,fp=typeof e.fingerprint=="string"?e.fingerprint:trimmed;acc.fingerprints.add(fp);const ts=typeof e.ts=="string"?Date.parse(e.ts):NaN;!Number.isNaN(ts)&&(acc.oldestTs===null||ts<acc.oldestTs)&&(acc.oldestTs=ts)}}function readFindingsSpool(root){const dirAbs=safeResolve(root,FINDINGS_DIR);if(dirAbs===null||!fileExists(dirAbs))return null;let shards;try{shards=readdirSync(dirAbs).filter(f=>f.endsWith(".jsonl"))}catch{return{openCount:0,oldestAgeDays:0}}const acc={fingerprints:new Set,oldestTs:null};for(const shard of shards){const text=readText(join(dirAbs,shard));text!==null&&accumulateShard(text,acc)}const oldestAgeDays=acc.oldestTs===null?0:Math.max(0,Math.floor((Date.now()-acc.oldestTs)/MS_PER_DAY));return{openCount:acc.fingerprints.size,oldestAgeDays}}function readFindingHygienePrior(root){const abs=safeResolve(root,FINDING_HYGIENE_BASELINE);if(abs===null||!fileExists(abs))return null;const parsed=readJson(abs);if(parsed===null||typeof parsed!="object")return null;const v=parsed.openFindingsCount;return typeof v=="number"?v:null}export function probeFindingHygiene(root){const base={id:FINDING_HYGIENE_ID,title:FINDING_HYGIENE_TITLE,...DISC_T1},stats=readFindingsSpool(root);if(stats===null)return{...base,verdict:"NA",evidence:{file:FINDINGS_DIR,detail:"no findings spool \u2014 not governed for incidental-finding hygiene"}};const prior=readFindingHygienePrior(root);return prior!==null&&stats.openCount>prior?{...base,verdict:"N",evidence:{file:FINDINGS_DIR,detail:`openFindingsCount rose ${prior} \u2192 ${stats.openCount} \u2014 findings filed without draining`}}:stats.openCount>0&&stats.oldestAgeDays>FINDING_STALE_DAYS?{...base,verdict:"P",evidence:{file:FINDINGS_DIR,detail:`oldest open finding is ${stats.oldestAgeDays}d (> ${FINDING_STALE_DAYS}d) \u2014 promote or drain`}}:{...base,verdict:"Y",evidence:{file:FINDINGS_DIR,detail:stats.openCount===0?"spool drained \u2014 no open findings":`${stats.openCount} open finding(s), fresh and non-regressing`}}}const E2E_QUARANTINE_ID="DISC-e2e-quarantine",E2E_QUARANTINE_TITLE="E2E quarantine registry has no expired entries",E2E_QUARANTINE_PATH=".arbiter/e2e/quarantine.json",QUARANTINE_REQUIRED_FIELDS=["id","fingerprint","reason","owner","added","expires","issue"];function quarantineEntries(registry){return Array.isArray(registry)?registry:registry!==null&&typeof registry=="object"&&Array.isArray(registry.entries)?registry.entries:null}function findExpiredOrInvalid(entries,now){for(const[idx,e]of entries.entries()){if(e===null||typeof e!="object")return`entry[${idx}]: not an object`;const rec=e,rawId=rec.id,rawFp=rec.fingerprint,label=typeof rawId=="string"&&rawId?rawId:typeof rawFp=="string"&&rawFp?rawFp:`entry[${idx}]`;for(const f of QUARANTINE_REQUIRED_FIELDS)if(rec[f]===void 0||rec[f]===null||rec[f]==="")return`${label}: missing required field '${f}'`;const expMs=new Date(rec.expires).getTime();if(Number.isNaN(expMs))return`${label}: 'expires' is not a valid date`;if(expMs<now)return`${label}: quarantine expired on ${String(rec.expires)}`}return null}const E2E_CONSTITUTION_REF="See docs/GOVERNANCE/E2E_CONSTITUTION.md for the full E2E determinism rule set (#1817, A4).";export function probeE2eQuarantine(root){const base={id:E2E_QUARANTINE_ID,title:E2E_QUARANTINE_TITLE,...DISC_T1},abs=safeResolve(root,E2E_QUARANTINE_PATH);if(abs===null||!fileExists(abs))return{...base,verdict:"NA",evidence:{file:E2E_QUARANTINE_PATH,detail:`no quarantine registry \u2014 vacuous pass (INV-130). ${E2E_CONSTITUTION_REF}`}};const parsed=readJson(abs);if(parsed===null)return{...base,verdict:"N",evidence:{file:E2E_QUARANTINE_PATH,detail:"registry present but not valid JSON"}};const entries=quarantineEntries(parsed);if(entries===null)return{...base,verdict:"N",evidence:{file:E2E_QUARANTINE_PATH,detail:"registry must be an array or { entries: [...] }"}};const problem=findExpiredOrInvalid(entries,Date.now());return problem!==null?{...base,verdict:"N",evidence:{file:E2E_QUARANTINE_PATH,detail:problem}}:{...base,verdict:"Y",evidence:{file:E2E_QUARANTINE_PATH,detail:`${entries.length} quarantine entry(ies), all complete and unexpired. ${E2E_CONSTITUTION_REF}`}}}