@iowarp/clio-coder 0.4.9 → 0.5.0

package/dist/chunk-6CTHLZFB.js

@@ -0,0 +1,563 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  compareCodepoints,
+  normalizeNumericTolerance
+} from "./chunk-2KUBKL63.js";
+import {
+  isProjectVerifierCheckId
+} from "./chunk-M4KFUXS7.js";
+import {
+  require_dist
+} from "./chunk-B5GGDIHT.js";
+import {
+  SAFE_EXEC_DEFAULT_TIMEOUT_MS,
+  resolveSafeCwd
+} from "./chunk-M2IPMWCN.js";
+import {
+  __toESM,
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/tools/verify/catalog.ts
+init_esm_shims();
+var import_yaml = __toESM(require_dist(), 1);
+import { existsSync, readFileSync, realpathSync, statSync } from "node:fs";
+import path from "node:path";
+
+// src/tools/verify/perf.ts
+init_esm_shims();
+import { arch, cpus, hostname, platform, totalmem } from "node:os";
+var PERF_ENVIRONMENT_FIELDS = [
+  "hostname",
+  "platform",
+  "arch",
+  "cpuModel",
+  "cpuCount",
+  "totalMemoryBytes",
+  "nodeVersion"
+];
+var PERF_BASELINE_VERSION = 2;
+var SUPPORTED_BASELINE_VERSIONS = [1, PERF_BASELINE_VERSION];
+function normalizePerfBudget(value) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    return new Error("budget must be an object with wallTimeMs");
+  }
+  const record = value;
+  const unknown = Object.keys(record).filter((key) => key !== "wallTimeMs" && key !== "tolerance");
+  if (unknown.length > 0) return new Error(`budget has unknown field(s): ${unknown.sort().join(", ")}`);
+  if (typeof record.wallTimeMs !== "number" || !Number.isFinite(record.wallTimeMs) || record.wallTimeMs <= 0) {
+    return new Error("budget.wallTimeMs must be a positive number of milliseconds");
+  }
+  const spec = { wallTimeMs: record.wallTimeMs };
+  if (Object.hasOwn(record, "tolerance")) {
+    const tolerance = normalizePerfTolerance(record.tolerance, "budget.tolerance");
+    if (tolerance instanceof Error) return tolerance;
+    spec.tolerance = tolerance;
+  }
+  return spec;
+}
+function normalizePerfTolerance(value, location) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    return new Error(`${location} must be an object with relative`);
+  }
+  const record = value;
+  const unknown = Object.keys(record).filter((key) => key !== "relative");
+  if (unknown.length > 0) return new Error(`${location} has unknown field(s): ${unknown.sort().join(", ")}`);
+  if (!Object.hasOwn(record, "relative")) return {};
+  if (typeof record.relative !== "number" || !Number.isFinite(record.relative) || record.relative < 0) {
+    return new Error(`${location}.relative must be a finite non-negative number`);
+  }
+  return { relative: record.relative };
+}
+function capturePerfEnvironment() {
+  const processors = cpus();
+  return {
+    hostname: hostname(),
+    platform: platform(),
+    arch: arch(),
+    cpuModel: processors[0]?.model.trim() ?? "unknown",
+    cpuCount: processors.length,
+    totalMemoryBytes: totalmem(),
+    nodeVersion: process.version
+  };
+}
+function parsePerfEnvironment(value, label) {
+  if (value === null || typeof value !== "object" || Array.isArray(value)) {
+    return new Error(`${label} must be an object describing the recording host`);
+  }
+  const record = value;
+  const unknown = Object.keys(record).filter((key) => !PERF_ENVIRONMENT_FIELDS.includes(key));
+  if (unknown.length > 0) return new Error(`${label} has unknown field(s): ${unknown.sort().join(", ")}`);
+  for (const field of ["hostname", "platform", "arch", "cpuModel", "nodeVersion"]) {
+    if (typeof record[field] !== "string") return new Error(`${label}.${field} must be a string`);
+  }
+  if (typeof record.cpuCount !== "number" || !Number.isInteger(record.cpuCount) || record.cpuCount < 0) {
+    return new Error(`${label}.cpuCount must be a non-negative integer`);
+  }
+  if (typeof record.totalMemoryBytes !== "number" || !Number.isFinite(record.totalMemoryBytes) || record.totalMemoryBytes < 0) {
+    return new Error(`${label}.totalMemoryBytes must be a non-negative number`);
+  }
+  return {
+    hostname: record.hostname,
+    platform: record.platform,
+    arch: record.arch,
+    cpuModel: record.cpuModel,
+    cpuCount: record.cpuCount,
+    totalMemoryBytes: record.totalMemoryBytes,
+    nodeVersion: record.nodeVersion
+  };
+}
+function parsePerfBaseline(text, label) {
+  let parsed;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error) {
+    return new Error(`${label} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) {
+    return new Error(`${label} must be a JSON object with wallTimeMs`);
+  }
+  const record = parsed;
+  if (Object.hasOwn(record, "version")) {
+    if (typeof record.version !== "number" || !SUPPORTED_BASELINE_VERSIONS.includes(record.version)) {
+      return new Error(`${label}.version must be one of ${SUPPORTED_BASELINE_VERSIONS.join(", ")}`);
+    }
+  }
+  if (typeof record.wallTimeMs !== "number" || !Number.isFinite(record.wallTimeMs) || record.wallTimeMs <= 0) {
+    return new Error(`${label}.wallTimeMs must be a positive number of milliseconds`);
+  }
+  const baseline = { wallTimeMs: record.wallTimeMs };
+  if (typeof record.recordedAt === "string") baseline.recordedAt = record.recordedAt;
+  if (typeof record.check === "string") baseline.check = record.check;
+  if (Object.hasOwn(record, "environment") && record.environment !== void 0) {
+    const environment = parsePerfEnvironment(record.environment, `${label}.environment`);
+    if (environment instanceof Error) return environment;
+    baseline.environment = environment;
+  }
+  return baseline;
+}
+function renderPerfBaseline(input) {
+  return `${JSON.stringify(
+    {
+      version: PERF_BASELINE_VERSION,
+      check: input.check,
+      wallTimeMs: input.wallTimeMs,
+      recordedAt: input.recordedAt,
+      environment: {
+        hostname: input.environment.hostname,
+        platform: input.environment.platform,
+        arch: input.environment.arch,
+        cpuModel: input.environment.cpuModel,
+        cpuCount: input.environment.cpuCount,
+        totalMemoryBytes: input.environment.totalMemoryBytes,
+        nodeVersion: input.environment.nodeVersion
+      }
+    },
+    null,
+    2
+  )}
+`;
+}
+function comparePerfEnvironments(baseline, current) {
+  if (baseline === void 0) return { baseline: null, current, differing: [] };
+  const differing = PERF_ENVIRONMENT_FIELDS.filter((field) => baseline[field] !== current[field]);
+  return { baseline, current, differing };
+}
+function evaluatePerfBudget(measuredMs, spec) {
+  if (!Number.isFinite(measuredMs) || measuredMs < 0)
+    return new Error("measured wall time must be a non-negative number");
+  let source;
+  let referenceMs;
+  let relative;
+  let comparison;
+  if (spec.budget !== void 0) {
+    source = "budget";
+    referenceMs = spec.budget.wallTimeMs;
+    relative = spec.budget.tolerance?.relative ?? 0;
+  } else if (spec.baseline !== void 0) {
+    source = "baseline";
+    referenceMs = spec.baseline.wallTimeMs;
+    relative = spec.relative ?? 0;
+    if (spec.environment !== void 0) comparison = comparePerfEnvironments(spec.baseline.environment, spec.environment);
+  } else {
+    return new Error("perf-budget needs a budget or a recorded baseline");
+  }
+  const budgetMs = referenceMs * (1 + relative);
+  const ratio = Math.round(measuredMs / budgetMs * 1e3) / 1e3;
+  const passed = measuredMs <= budgetMs;
+  const bound = `${Math.round(budgetMs)}ms (${source} ${Math.round(referenceMs)}ms${relative > 0 ? ` +${Math.round(relative * 100)}%` : ""})`;
+  const verdict = passed ? `perf-budget passed: measured ${Math.round(measuredMs)}ms within ${bound}, ratio ${ratio}` : `perf-budget failed: measured ${Math.round(measuredMs)}ms exceeds ${bound}, ratio ${ratio}`;
+  const environmentNote = comparison === void 0 ? "" : comparison.baseline === null ? "; baseline records no environment" : comparison.differing.length > 0 ? `; environment differs: ${comparison.differing.join(", ")}` : "";
+  return {
+    kind: "perf-budget",
+    passed,
+    measuredMs,
+    budgetMs,
+    ratio,
+    source,
+    referenceMs,
+    relative,
+    summary: `${verdict}${environmentNote}`,
+    ...comparison !== void 0 ? { environment: comparison } : {}
+  };
+}
+
+// src/tools/verify/catalog.ts
+var PROJECT_VERIFIER_CATALOG_RELATIVE_PATH = ".clio-coder/verifiers.yaml";
+var PROJECT_VERIFIER_CATALOG_VERSION = 2;
+var SUPPORTED_CATALOG_VERSIONS = [1, PROJECT_VERIFIER_CATALOG_VERSION];
+var PROJECT_VERIFIER_CATALOG_CAPS = Object.freeze({
+  fileBytes: 256 * 1024,
+  checks: 128,
+  idBytes: 64,
+  descriptionBytes: 512,
+  argvEntries: 64,
+  argumentBytes: 4096,
+  cwdBytes: 512,
+  timeoutMs: 9e5,
+  tags: 16,
+  tagBytes: 32
+});
+var DECLARED_CHECK_KINDS = ["command", "numeric-compare", "perf-budget"];
+var ROOT_FIELDS = /* @__PURE__ */ new Set(["version", "checks"]);
+var CHECK_FIELDS = /* @__PURE__ */ new Set(["id", "description", "command", "cwd", "timeoutMs", "tags"]);
+var CHECK_FIELDS_V2 = /* @__PURE__ */ new Set([...CHECK_FIELDS, "kind", "reference", "tolerance", "budget", "baseline"]);
+var TAG_PATTERN = /^[a-z0-9][a-z0-9._-]*$/;
+var SHELL_EXECUTABLES = /* @__PURE__ */ new Set([
+  "bash",
+  "cmd",
+  "command.com",
+  "dash",
+  "fish",
+  "ksh",
+  "powershell",
+  "pwsh",
+  "sh",
+  "tcsh",
+  "zsh"
+]);
+function isRecord(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function utf8Bytes(value) {
+  return Buffer.byteLength(value, "utf8");
+}
+function hasControlCharacter(value) {
+  for (let index = 0; index < value.length; index += 1) {
+    const code = value.charCodeAt(index);
+    if (code <= 31 || code === 127) return true;
+  }
+  return false;
+}
+function catalogDiagnostic(message) {
+  return { ok: false, reason: `${PROJECT_VERIFIER_CATALOG_RELATIVE_PATH}: ${message}` };
+}
+function unknownFields(record, allowed) {
+  return Object.keys(record).filter((key) => !allowed.has(key)).sort(compareCodepoints);
+}
+function relativeCwd(workspaceRoot, resolved) {
+  const relative = path.relative(workspaceRoot, resolved);
+  return relative.length === 0 ? "." : relative.split(path.sep).join("/");
+}
+function safelyResolveCatalogCwd(rawCwd, workspaceRoot, location) {
+  if (path.isAbsolute(rawCwd) || path.win32.isAbsolute(rawCwd)) {
+    return new Error(`${location} must be repository-relative; absolute cwd '${rawCwd}' is not allowed`);
+  }
+  let resolved;
+  try {
+    resolved = resolveSafeCwd(rawCwd, workspaceRoot);
+  } catch {
+    return new Error(`${location} escapes the workspace root: '${rawCwd}'`);
+  }
+  let realCwd;
+  try {
+    const cwdStat = statSync(resolved);
+    if (!cwdStat.isDirectory()) return new Error(`${location} is not a directory: '${rawCwd}'`);
+    const realRoot = realpathSync(workspaceRoot);
+    realCwd = realpathSync(resolved);
+    resolveSafeCwd(realCwd, realRoot);
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    if (message.includes("escapes workspace root")) {
+      return new Error(`${location} escapes the workspace root through a symbolic link: '${rawCwd}'`);
+    }
+    return new Error(`${location} cannot be resolved as a repository directory: '${rawCwd}' (${message})`);
+  }
+  return { declared: relativeCwd(workspaceRoot, resolved), execution: realCwd };
+}
+function validateRepositoryFile(value, location) {
+  if (typeof value !== "string" || value.length === 0) {
+    return new Error(`${location} must be a non-empty repository-relative path`);
+  }
+  if (value.includes("\0")) return new Error(`${location} must not contain a NUL byte`);
+  if (utf8Bytes(value) > PROJECT_VERIFIER_CATALOG_CAPS.cwdBytes) {
+    return new Error(`${location} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.cwdBytes}-byte cap`);
+  }
+  if (path.isAbsolute(value) || path.win32.isAbsolute(value)) {
+    return new Error(`${location} must be repository-relative; absolute path '${value}' is not allowed`);
+  }
+  const normalized = path.posix.normalize(value.split(path.sep).join("/"));
+  if (normalized === ".." || normalized.startsWith("../")) {
+    return new Error(`${location} escapes the workspace root: '${value}'`);
+  }
+  return normalized;
+}
+function validateCheckKind(value, location, version) {
+  const kindValue = Object.hasOwn(value, "kind") ? value.kind : "command";
+  if (typeof kindValue !== "string" || !DECLARED_CHECK_KINDS.includes(kindValue)) {
+    return new Error(`${location}.kind must be one of ${DECLARED_CHECK_KINDS.join(", ")}`);
+  }
+  const kind = kindValue;
+  const present = (field) => Object.hasOwn(value, field);
+  const accepted = {
+    command: [],
+    "numeric-compare": ["reference", "tolerance"],
+    "perf-budget": ["budget", "baseline", "tolerance"]
+  };
+  const stray = ["reference", "tolerance", "budget", "baseline"].filter(
+    (field) => present(field) && !accepted[kind].includes(field)
+  );
+  if (stray.length > 0) return new Error(`${location} kind '${kind}' does not accept ${stray.join(", ")}`);
+  if (version === 1 && kind !== "command") return new Error(`${location}.kind requires catalog version 2`);
+  if (kind === "command") return { kind };
+  if (kind === "numeric-compare") {
+    if (!present("reference")) return new Error(`${location}.reference is required for kind numeric-compare`);
+    if (!present("tolerance")) return new Error(`${location}.tolerance is required for kind numeric-compare`);
+    const reference = validateRepositoryFile(value.reference, `${location}.reference`);
+    if (reference instanceof Error) return reference;
+    const tolerance = normalizeNumericTolerance(value.tolerance);
+    if (tolerance instanceof Error) return new Error(`${location}.${tolerance.message}`);
+    return { kind, numeric: { reference, tolerance } };
+  }
+  if (present("budget") === present("baseline")) {
+    return new Error(`${location} kind 'perf-budget' requires exactly one of budget or baseline`);
+  }
+  if (present("budget")) {
+    if (present("tolerance")) return new Error(`${location}.tolerance belongs inside budget when budget is given`);
+    const budget = normalizePerfBudget(value.budget);
+    if (budget instanceof Error) return new Error(`${location}.${budget.message}`);
+    return { kind, perf: { budget } };
+  }
+  const baseline = validateRepositoryFile(value.baseline, `${location}.baseline`);
+  if (baseline instanceof Error) return baseline;
+  const perf = { baseline };
+  if (present("tolerance")) {
+    const tolerance = normalizePerfTolerance(value.tolerance, `${location}.tolerance`);
+    if (tolerance instanceof Error) return tolerance;
+    perf.tolerance = tolerance;
+  }
+  return { kind, perf };
+}
+function resolveProjectVerifierExecutionCwd(rawCwd, workspaceRoot) {
+  const resolution = safelyResolveCatalogCwd(rawCwd, workspaceRoot, "project check cwd");
+  return resolution instanceof Error ? resolution : resolution.execution;
+}
+function validateId(value, location) {
+  if (typeof value !== "string" || value.length === 0) return new Error(`${location} must be a non-empty string`);
+  if (utf8Bytes(value) > PROJECT_VERIFIER_CATALOG_CAPS.idBytes) {
+    return new Error(`${location} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.idBytes}-byte cap`);
+  }
+  if (!isProjectVerifierCheckId(value)) {
+    return new Error(`${location} must match /^[a-z0-9][a-z0-9._:-]*$/`);
+  }
+  if (value === "frontend") return new Error(`${location} uses reserved built-in check id 'frontend'`);
+  return value;
+}
+function validateDescription(value, location) {
+  if (typeof value !== "string" || value.length === 0) return new Error(`${location} must be a non-empty string`);
+  if (value.trim() !== value || hasControlCharacter(value)) {
+    return new Error(`${location} must be trimmed, single-line text without control characters`);
+  }
+  if (utf8Bytes(value) > PROJECT_VERIFIER_CATALOG_CAPS.descriptionBytes) {
+    return new Error(`${location} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.descriptionBytes}-byte cap`);
+  }
+  return value;
+}
+function validateCommand(value, location) {
+  if (!Array.isArray(value) || value.length === 0) {
+    return new Error(`${location} must be a non-empty argv string array; shell command strings are not allowed`);
+  }
+  if (value.length > PROJECT_VERIFIER_CATALOG_CAPS.argvEntries) {
+    return new Error(`${location} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.argvEntries}-entry cap`);
+  }
+  const command = [];
+  for (const [index, entry] of value.entries()) {
+    const entryLocation = `${location}[${index}]`;
+    if (typeof entry !== "string" || entry.length === 0) {
+      return new Error(`${entryLocation} must be a non-empty string`);
+    }
+    if (entry.includes("\0")) return new Error(`${entryLocation} must not contain a NUL byte`);
+    if (utf8Bytes(entry) > PROJECT_VERIFIER_CATALOG_CAPS.argumentBytes) {
+      return new Error(`${entryLocation} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.argumentBytes}-byte cap`);
+    }
+    command.push(entry);
+  }
+  const executable = command[0] ?? "";
+  if (/\s/u.test(executable)) {
+    return new Error(`${location}[0] must be one executable token, not a shell command string`);
+  }
+  const executableName = path.basename(executable).toLowerCase().replace(/\.exe$/u, "");
+  if (SHELL_EXECUTABLES.has(executableName)) {
+    return new Error(`${location}[0] may not invoke shell executable '${executable}'`);
+  }
+  return command;
+}
+function validateTimeout(value, location) {
+  if (!Number.isInteger(value) || typeof value !== "number" || value <= 0) {
+    return new Error(`${location} must be a positive integer number of milliseconds`);
+  }
+  if (value > PROJECT_VERIFIER_CATALOG_CAPS.timeoutMs) {
+    return new Error(`${location} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.timeoutMs}ms cap`);
+  }
+  return value;
+}
+function validateTags(value, location) {
+  if (!Array.isArray(value)) return new Error(`${location} must be an array of bounded tag strings`);
+  if (value.length > PROJECT_VERIFIER_CATALOG_CAPS.tags) {
+    return new Error(`${location} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.tags}-tag cap`);
+  }
+  const tags = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const [index, entry] of value.entries()) {
+    const entryLocation = `${location}[${index}]`;
+    if (typeof entry !== "string" || entry.length === 0) {
+      return new Error(`${entryLocation} must be a non-empty string`);
+    }
+    if (utf8Bytes(entry) > PROJECT_VERIFIER_CATALOG_CAPS.tagBytes) {
+      return new Error(`${entryLocation} exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.tagBytes}-byte cap`);
+    }
+    if (!TAG_PATTERN.test(entry)) return new Error(`${entryLocation} must match /^[a-z0-9][a-z0-9._-]*$/`);
+    if (seen.has(entry)) return new Error(`${location} contains duplicate tag '${entry}'`);
+    seen.add(entry);
+    tags.push(entry);
+  }
+  return tags;
+}
+function sourcePathInsideWorkspace(catalogPath, workspaceRoot) {
+  try {
+    const realRoot = realpathSync(workspaceRoot);
+    const realCatalogPath = realpathSync(catalogPath);
+    resolveSafeCwd(realCatalogPath, realRoot);
+    return realCatalogPath;
+  } catch (error) {
+    const message = error instanceof Error ? error.message : String(error);
+    return new Error(`catalog file must resolve inside the workspace root (${message})`);
+  }
+}
+function loadProjectVerifierCatalog(workspaceRoot) {
+  const catalogPath = path.join(workspaceRoot, PROJECT_VERIFIER_CATALOG_RELATIVE_PATH);
+  if (!existsSync(catalogPath)) return { ok: true, source: null };
+  const safeSourcePath = sourcePathInsideWorkspace(catalogPath, workspaceRoot);
+  if (safeSourcePath instanceof Error) return catalogDiagnostic(safeSourcePath.message);
+  let text;
+  try {
+    const stats = statSync(safeSourcePath);
+    if (!stats.isFile()) return catalogDiagnostic("catalog path must be a regular file");
+    if (stats.size > PROJECT_VERIFIER_CATALOG_CAPS.fileBytes) {
+      return catalogDiagnostic(`file exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.fileBytes}-byte cap`);
+    }
+    text = readFileSync(safeSourcePath, "utf8");
+  } catch (error) {
+    return catalogDiagnostic(`cannot read catalog (${error instanceof Error ? error.message : String(error)})`);
+  }
+  return parseProjectVerifierCatalogText(text, workspaceRoot, catalogPath);
+}
+function parseProjectVerifierCatalogText(text, workspaceRoot, catalogPath = path.join(workspaceRoot, PROJECT_VERIFIER_CATALOG_RELATIVE_PATH)) {
+  const document = (0, import_yaml.parseDocument)(text, { prettyErrors: false, strict: true, uniqueKeys: true });
+  if (document.errors.length > 0) {
+    return catalogDiagnostic(`invalid YAML: ${document.errors.map((error) => error.message).join("; ")}`);
+  }
+  let parsed;
+  try {
+    parsed = document.toJS({ maxAliasCount: 0 });
+  } catch (error) {
+    return catalogDiagnostic(`invalid YAML: ${error instanceof Error ? error.message : String(error)}`);
+  }
+  if (!isRecord(parsed)) return catalogDiagnostic("root must be an object with version and checks fields");
+  const rootUnknown = unknownFields(parsed, ROOT_FIELDS);
+  if (rootUnknown.length > 0) return catalogDiagnostic(`root has unknown field(s): ${rootUnknown.join(", ")}`);
+  if (!Object.hasOwn(parsed, "version")) return catalogDiagnostic("root.version is required");
+  if (typeof parsed.version !== "number" || !SUPPORTED_CATALOG_VERSIONS.includes(parsed.version)) {
+    return catalogDiagnostic(
+      `unsupported version ${JSON.stringify(parsed.version)}; supported versions are ${SUPPORTED_CATALOG_VERSIONS.join(" and ")}`
+    );
+  }
+  const version = parsed.version;
+  if (!Object.hasOwn(parsed, "checks")) return catalogDiagnostic("root.checks is required");
+  if (!Array.isArray(parsed.checks)) return catalogDiagnostic("root.checks must be an array");
+  if (parsed.checks.length > PROJECT_VERIFIER_CATALOG_CAPS.checks) {
+    return catalogDiagnostic(`root.checks exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.checks}-check cap`);
+  }
+  const sourceRef = { kind: "project-catalog", path: catalogPath };
+  const checks = [];
+  const ids = /* @__PURE__ */ new Map();
+  for (const [index, value] of parsed.checks.entries()) {
+    const location = `checks[${index}]`;
+    if (!isRecord(value)) return catalogDiagnostic(`${location} must be an object`);
+    const checkUnknown = unknownFields(value, version === 1 ? CHECK_FIELDS : CHECK_FIELDS_V2);
+    if (checkUnknown.length > 0) {
+      return catalogDiagnostic(`${location} has unknown field(s): ${checkUnknown.join(", ")}`);
+    }
+    for (const field of CHECK_FIELDS) {
+      if (!Object.hasOwn(value, field)) return catalogDiagnostic(`${location}.${field} is required`);
+    }
+    const id = validateId(value.id, `${location}.id`);
+    if (id instanceof Error) return catalogDiagnostic(id.message);
+    const duplicateIndex = ids.get(id);
+    if (duplicateIndex !== void 0) {
+      return catalogDiagnostic(`${location}.id duplicates '${id}' from checks[${duplicateIndex}].id`);
+    }
+    const description = validateDescription(value.description, `${location}.description`);
+    if (description instanceof Error) return catalogDiagnostic(description.message);
+    const command = validateCommand(value.command, `${location}.command`);
+    if (command instanceof Error) return catalogDiagnostic(command.message);
+    if (typeof value.cwd !== "string" || value.cwd.length === 0) {
+      return catalogDiagnostic(`${location}.cwd must be a non-empty repository-relative string`);
+    }
+    if (value.cwd.includes("\0")) return catalogDiagnostic(`${location}.cwd must not contain a NUL byte`);
+    if (utf8Bytes(value.cwd) > PROJECT_VERIFIER_CATALOG_CAPS.cwdBytes) {
+      return catalogDiagnostic(`${location}.cwd exceeds the ${PROJECT_VERIFIER_CATALOG_CAPS.cwdBytes}-byte cap`);
+    }
+    const cwdResolution = safelyResolveCatalogCwd(value.cwd, workspaceRoot, `${location}.cwd`);
+    if (cwdResolution instanceof Error) return catalogDiagnostic(cwdResolution.message);
+    const cwd = cwdResolution.declared;
+    const timeoutMs = validateTimeout(value.timeoutMs, `${location}.timeoutMs`);
+    if (timeoutMs instanceof Error) return catalogDiagnostic(timeoutMs.message);
+    const tags = validateTags(value.tags, `${location}.tags`);
+    if (tags instanceof Error) return catalogDiagnostic(tags.message);
+    const kindFields = validateCheckKind(value, location, version);
+    if (kindFields instanceof Error) return catalogDiagnostic(kindFields.message);
+    ids.set(id, index);
+    checks.push({ id, description, command, cwd, timeoutMs, tags, source: { ...sourceRef }, ...kindFields });
+  }
+  checks.sort((left, right) => compareCodepoints(left.id, right.id));
+  return { ok: true, source: { ...sourceRef, checks } };
+}
+function packageDeclaredCheck(id, packagePath, cwd, tags) {
+  return {
+    id,
+    description: `Run package.json script '${id}'.`,
+    command: ["npm", "run", id],
+    cwd,
+    timeoutMs: SAFE_EXEC_DEFAULT_TIMEOUT_MS,
+    tags,
+    source: { kind: "package.json", path: packagePath },
+    kind: "command"
+  };
+}
+
+export {
+  capturePerfEnvironment,
+  parsePerfBaseline,
+  renderPerfBaseline,
+  evaluatePerfBudget,
+  PROJECT_VERIFIER_CATALOG_RELATIVE_PATH,
+  PROJECT_VERIFIER_CATALOG_VERSION,
+  PROJECT_VERIFIER_CATALOG_CAPS,
+  DECLARED_CHECK_KINDS,
+  resolveProjectVerifierExecutionCwd,
+  loadProjectVerifierCatalog,
+  parseProjectVerifierCatalogText,
+  packageDeclaredCheck
+};
+//# sourceMappingURL=chunk-6CTHLZFB.js.map

package/dist/chunk-6EJYVCTN.js

@@ -0,0 +1,23 @@
+import { createRequire as __clioCreateRequire } from "node:module"; const require = __clioCreateRequire(import.meta.url);
+import {
+  init_esm_shims
+} from "./chunk-ECBHH7LU.js";
+
+// src/domains/providers/eligibility.ts
+init_esm_shims();
+function isTargetEligibleRuntime(runtime) {
+  return runtime.kind === "http" || runtime.id === "claude-sdk" || runtime.id === "claude-code" || runtime.id === "antigravity-code";
+}
+function isOrchestratorEligibleRuntime(runtime) {
+  return runtime.kind === "http";
+}
+function isDispatchEligibleRuntime(runtime) {
+  return isTargetEligibleRuntime(runtime);
+}
+
+export {
+  isTargetEligibleRuntime,
+  isOrchestratorEligibleRuntime,
+  isDispatchEligibleRuntime
+};
+//# sourceMappingURL=chunk-6EJYVCTN.js.map