@juangcarmona/lighthouse-sdlc 0.8.0 → 0.10.0

package/workflows/shared/lighthouse-sdlc-stage.md

@@ -17,6 +17,10 @@ safe-outputs:
     max: 1
     report-as-issue: false
 steps:
+  - name: Install the locked consumer packages
+    run: npm ci --ignore-scripts
+  - name: Check the installed SDLC version
+    run: node node_modules/@juangcarmona/lighthouse-sdlc/src/installation.mjs
   - name: Materialize the host input
     shell: bash
     env:
@@ -24,7 +28,7 @@ steps:
     run: |
       set -euo pipefail
       mkdir -p /tmp/gh-aw/agent
-      printf '%s\n' "${STAGE_INPUT:-{}}" > /tmp/gh-aw/agent/input.json
+      printf '%s\n' "${STAGE_INPUT:-"{}"}" > /tmp/gh-aw/agent/input.json
   - name: Load the previous stage result
     if: inputs.previous-stage != ''
     uses: actions/download-artifact@v8
@@ -45,27 +49,17 @@ post-steps:
         echo "::error::The worker did not produce /tmp/gh-aw/agent/stage-result.json"
         exit 1
       fi
-  - name: Validate the stage result and declared gate
+  - name: Require completion of the dispatched stage
     if: always()
     shell: bash
     env:
       EXPECTED_STAGE: ${{ env.LIGHTHOUSE_STAGE }}
+      EXPECTED_RUN_ID: ${{ inputs.run-id }}
       RESULT_FILE: /tmp/gh-aw/agent/stage-result.json
     run: |
       set -euo pipefail
-      node src/packages/sdlc/src/sdlc.mjs stage-result --input "$RESULT_FILE" --format json
-      EXPECTED_STAGE="$EXPECTED_STAGE" RESULT_FILE="$RESULT_FILE" node --input-type=module <<'NODE'
-      import { readFileSync } from 'node:fs';
-
-      const stage = process.env.EXPECTED_STAGE;
-      const result = JSON.parse(readFileSync(process.env.RESULT_FILE, 'utf8'));
-      const contract = JSON.parse(readFileSync('src/packages/sdlc/stages.json', 'utf8'));
-      const expected = contract.stages.find((item) => item.id === stage);
-      if (!expected || result.stage !== stage || result.gate !== expected.gate) {
-        console.error(`stage-result does not match stages.json for ${stage}`);
-        process.exit(1);
-      }
-      NODE
+      node node_modules/@juangcarmona/lighthouse-sdlc/src/sdlc.mjs stage-result --input "$RESULT_FILE" \
+        --require-complete --stage "$EXPECTED_STAGE" --run-id "$EXPECTED_RUN_ID" --format json
   - name: Upload stage evidence
     if: always()
     uses: actions/upload-artifact@v7
@@ -79,3 +73,5 @@ post-steps:
 # Lighthouse SDLC worker mechanics
 
 The host input is in `/tmp/gh-aw/agent/input.json`. If this worker has a previous stage, its validated result is in `/tmp/gh-aw/agent/previous/stage-result.json`.
+
+Set `runId` to `${{ inputs.run-id }}`. A worker completes only with `status: passed`, the declared stage and gate, empty `missingEvidence`, `unavailableChecks` and `pendingReview` arrays, and evidence whose status is `passed` or `not-applicable`. Preserve unresolved work in a `ready`, `blocked` or `failed` result; it is uploaded for inspection and fails the worker. Worker completion does not approve a human gate.