@lumenflow/cli 5.5.0 → 5.7.14

package/dist/gates/prod-migration-drift.js

@@ -0,0 +1,207 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
+/**
+ * prod-migration-drift gate (WU-2944, INIT-069 Item 14)
+ *
+ * Detects when the production database is N+ migrations behind the canonical
+ * migrations/ directory on main. Driver: cloud INIT-105 item 14 — prod
+ * silently accumulated 7+ migrations of drift before any human noticed; no
+ * automated detection caught it.
+ *
+ * Contract (INIT-068 / WU-2926):
+ *   - checkApplicability: 'applicable' iff repo has migrations/ AND
+ *     `software_delivery.gates.overrides.prod-migration-drift.connection_string_env_var`
+ *     is configured. Default behaviour for repos that have not opted in is
+ *     'not-applicable' (clean opt-out — no DB credentials required).
+ *   - checkPreconditions: 'satisfied' iff the configured env var resolves AND
+ *     the prod DB is reachable (probe). Otherwise 'missing'.
+ *   - prereq_strategy:    'auto-skip' (advisory; non-prod / disconnected runs
+ *     auto-skip rather than block).
+ *   - skippable_default:  true (per-repo override surface to make safety-critical).
+ *
+ * NOT registered into local `wu:prep` by default — most repos won't have
+ * PROD_DATABASE_URL configured locally. The gate auto-skips not-applicable
+ * until the override is set, so adding it to the registry is safe.
+ *
+ * Per-repo override surface:
+ *   software_delivery.gates.overrides.prod-migration-drift.connection_string_env_var=PROD_DATABASE_URL
+ *   software_delivery.gates.overrides.prod-migration-drift.threshold=5
+ *   software_delivery.gates.overrides.prod-migration-drift.skippable=false  # tighten
+ *
+ * @module gates/prod-migration-drift
+ */
+import { existsSync, readdirSync, statSync } from 'node:fs';
+import path from 'node:path';
+import { GATE_NAMES } from '@lumenflow/core/wu-constants';
+import { getGatesSection } from '@lumenflow/packs-software-delivery/policy/gates-config-internal';
+import { makeGateLogger } from '../gates-utils.js';
+/** WU-2944: default drift threshold (failed when drift > threshold). */
+export const DEFAULT_DRIFT_THRESHOLD = 5;
+/** WU-2944: canonical override key for `pnpm config:set`. */
+export const PROD_MIGRATION_DRIFT_OVERRIDE_KEY = 'software_delivery.gates.overrides.prod-migration-drift';
+const MIGRATIONS_DIRNAME = 'migrations';
+const SQL_FILE_PATTERN = /\.sql$/i;
+/**
+ * Compute the set of migrations present on main but not applied to prod.
+ *
+ * Pure function: deterministic, no IO. The "drift" we surface is one-directional
+ * (main → prod). Migrations applied on prod that no longer exist on main are
+ * a separate concern (rollback / stale snapshot) and not flagged here.
+ */
+export function detectMigrationDrift(input) {
+    const applied = new Set(input.appliedMigrations);
+    const missingFromProd = input.mainMigrations.filter((m) => !applied.has(m));
+    const driftCount = missingFromProd.length;
+    return {
+        missingFromProd,
+        driftCount,
+        failed: driftCount > input.threshold,
+    };
+}
+/**
+ * Read the canonical migrations/ directory and return `.sql` filenames in
+ * lexicographic order. Returns `[]` when the directory does not exist (which
+ * is also the clean opt-out signal for `checkApplicability`).
+ */
+export function readMigrationsDir(cwd) {
+    const dir = path.join(cwd, MIGRATIONS_DIRNAME);
+    try {
+        if (!existsSync(dir))
+            return [];
+        if (!statSync(dir).isDirectory())
+            return [];
+        return readdirSync(dir)
+            .filter((f) => SQL_FILE_PATTERN.test(f))
+            .sort();
+    }
+    catch {
+        return [];
+    }
+}
+/**
+ * Read `software_delivery.gates.overrides.prod-migration-drift` from
+ * workspace.yaml. Returns undefined when missing or malformed so callers
+ * fall through to "not-applicable" (clean opt-out).
+ */
+function readOverride(cwd) {
+    try {
+        const section = getGatesSection(cwd);
+        const raw = section?.overrides?.[GATE_NAMES.PROD_MIGRATION_DRIFT];
+        if (raw && typeof raw === 'object' && !Array.isArray(raw)) {
+            return raw;
+        }
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function resolveThreshold(override) {
+    const t = override?.threshold;
+    if (typeof t === 'number' && Number.isInteger(t) && t >= 0)
+        return t;
+    return DEFAULT_DRIFT_THRESHOLD;
+}
+/**
+ * Default probe: refuses to attempt a real DB connection from the gate
+ * runtime — the gate intentionally ships without a Postgres driver dependency
+ * to keep `@lumenflow/cli` slim. Real prod-drift detection happens in CI
+ * workflows (or via a project-supplied probe), not on every local `wu:prep`.
+ *
+ * In CI, the gate is invoked with a probe injected via
+ * `ctx.__prodDriftProbe` (see scheduled prod-drift workflow). When no probe
+ * is supplied, we report unreachable so the runtime cleanly auto-skips
+ * (`prereq_strategy: 'auto-skip'`) rather than fabricating a passing result.
+ */
+const defaultProbe = () => Promise.resolve({ reachable: false, applied: [] });
+function readProbe(ctx) {
+    const ext = ctx;
+    return ext.__prodDriftProbe ?? defaultProbe;
+}
+// ─────────────────────────────────────────────────────────────────────────
+// Gate definition (INIT-068 contract)
+// ─────────────────────────────────────────────────────────────────────────
+async function checkApplicability(ctx) {
+    const cwd = ctx.cwd ?? process.cwd();
+    const override = readOverride(cwd);
+    if (!override?.connection_string_env_var)
+        return 'not-applicable';
+    if (readMigrationsDir(cwd).length === 0)
+        return 'not-applicable';
+    return 'applicable';
+}
+async function checkPreconditions(ctx) {
+    const cwd = ctx.cwd ?? process.cwd();
+    const override = readOverride(cwd);
+    const envVar = override?.connection_string_env_var;
+    if (!envVar)
+        return 'missing';
+    const connectionString = process.env[envVar];
+    if (!connectionString || connectionString.length === 0)
+        return 'missing';
+    // Probe reachability. Default probe always reports unreachable so missing
+    // CI/probe injection auto-skips cleanly under `prereq_strategy: 'auto-skip'`.
+    const probe = readProbe(ctx);
+    try {
+        const result = await probe({ connectionString, cwd });
+        return result.reachable ? 'satisfied' : 'missing';
+    }
+    catch {
+        return 'missing';
+    }
+}
+async function run(ctx) {
+    const start = Date.now();
+    const cwd = ctx.cwd ?? process.cwd();
+    const logLine = makeGateLogger({
+        agentLog: ctx.agentLog ?? null,
+        useAgentMode: ctx.useAgentMode,
+    });
+    logLine('\n> prod-migration-drift check\n');
+    const override = readOverride(cwd);
+    const envVar = override?.connection_string_env_var;
+    if (!envVar) {
+        // checkApplicability should have prevented this; defensive auto-pass.
+        logLine('ℹ️  No prod-migration-drift override configured; skipping.');
+        return { ok: true, duration: Date.now() - start };
+    }
+    const connectionString = process.env[envVar];
+    if (!connectionString) {
+        logLine(`ℹ️  Env var ${envVar} not set; skipping (auto-skip).`);
+        return { ok: true, duration: Date.now() - start };
+    }
+    const mainMigrations = readMigrationsDir(cwd);
+    const probe = readProbe(ctx);
+    const probeResult = await probe({ connectionString, cwd });
+    if (!probeResult.reachable) {
+        logLine(`⚠️  Prod DB unreachable via ${envVar}; skipping (auto-skip).`);
+        return { ok: true, duration: Date.now() - start };
+    }
+    const threshold = resolveThreshold(override);
+    const drift = detectMigrationDrift({
+        mainMigrations,
+        appliedMigrations: probeResult.applied,
+        threshold,
+    });
+    if (!drift.failed) {
+        logLine(`prod-migration-drift check passed (drift=${drift.driftCount}, threshold=${threshold}).`);
+        return { ok: true, duration: Date.now() - start };
+    }
+    logLine(`❌ prod-migration-drift: prod is ${drift.driftCount} migration(s) behind main (threshold=${threshold}).`);
+    for (const m of drift.missingFromProd) {
+        logLine(`   - missing from prod: ${m}`);
+    }
+    logLine('Hint: review the migration backlog before deploying. Apply migrations to prod incrementally, ' +
+        'or split deploys to land smaller migration sequences. To raise/lower the threshold per repo: ' +
+        `\`pnpm config:set ${PROD_MIGRATION_DRIFT_OVERRIDE_KEY}.threshold=<n>\`.`);
+    return { ok: false, duration: Date.now() - start };
+}
+export const prodMigrationDriftGate = {
+    name: GATE_NAMES.PROD_MIGRATION_DRIFT,
+    run,
+    skippable_default: true,
+    prereq_strategy: 'auto-skip',
+    checkApplicability,
+    checkPreconditions,
+};
+//# sourceMappingURL=prod-migration-drift.js.map

package/dist/gates/prod-migration-drift.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prod-migration-drift.js","sourceRoot":"","sources":["../../src/gates/prod-migration-drift.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,4DAA4D;AAE5D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5D,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,iEAAiE,CAAC;AAGlG,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,wEAAwE;AACxE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,6DAA6D;AAC7D,MAAM,CAAC,MAAM,iCAAiC,GAC5C,wDAAwD,CAAC;AAE3D,MAAM,kBAAkB,GAAG,YAAY,CAAC;AACxC,MAAM,gBAAgB,GAAG,SAAS,CAAC;AAwBnC;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA0B;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACjD,MAAM,eAAe,GAAG,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC;IAC1C,OAAO;QACL,eAAe;QACf,UAAU;QACV,MAAM,EAAE,UAAU,GAAG,KAAK,CAAC,SAAS;KACrC,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;IAC/C,IAAI,CAAC;QACH,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,CAAC;QAC5C,OAAO,WAAW,CAAC,GAAG,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;aACvC,IAAI,EAAE,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAYD;;;;GAIG;AACH,SAAS,YAAY,CAAC,GAAW;IAC/B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAmD,CAAC;QACvF,MAAM,GAAG,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,UAAU,CAAC,oBAAoB,CAAC,CAAC;QAClE,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1D,OAAO,GAAwB,CAAC;QAClC,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAuC;IAC/D,MAAM,CAAC,GAAG,QAAQ,EAAE,SAAS,CAAC;IAC9B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,CAAC;IACrE,OAAO,uBAAuB,CAAC;AACjC,CAAC;AAiBD;;;;;;;;;;GAUG;AACH,MAAM,YAAY,GAAmB,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC;AAU9F,SAAS,SAAS,CAAC,GAAmB;IACpC,MAAM,GAAG,GAAG,GAA8C,CAAC;IAC3D,OAAO,GAAG,CAAC,gBAAgB,IAAI,YAAY,CAAC;AAC9C,CAAC;AAED,4EAA4E;AAC5E,sCAAsC;AACtC,4EAA4E;AAE5E,KAAK,UAAU,kBAAkB,CAAC,GAAmB;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,EAAE,yBAAyB;QAAE,OAAO,gBAAgB,CAAC;IAClE,IAAI,iBAAiB,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACjE,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,GAAmB;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,EAAE,yBAAyB,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,GAAmB;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,CAAC;QAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;QAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC,CAAC;IACH,OAAO,CAAC,kCAAkC,CAAC,CAAC;IAE5C,MAAM,QAAQ,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,QAAQ,EAAE,yBAAyB,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,sEAAsE;QACtE,OAAO,CAAC,4DAA4D,CAAC,CAAC;QACtE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,gBAAgB,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,OAAO,CAAC,eAAe,MAAM,iCAAiC,CAAC,CAAC;QAChE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,MAAM,KAAK,CAAC,EAAE,gBAAgB,EAAE,GAAG,EAAE,CAAC,CAAC;IAC3D,IAAI,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAC3B,OAAO,CAAC,+BAA+B,MAAM,yBAAyB,CAAC,CAAC;QACxE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,oBAAoB,CAAC;QACjC,cAAc;QACd,iBAAiB,EAAE,WAAW,CAAC,OAAO;QACtC,SAAS;KACV,CAAC,CAAC;IAEH,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,OAAO,CACL,4CAA4C,KAAK,CAAC,UAAU,eAAe,SAAS,IAAI,CACzF,CAAC;QACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,CACL,mCAAmC,KAAK,CAAC,UAAU,wCAAwC,SAAS,IAAI,CACzG,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,2BAA2B,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,CACL,+FAA+F;QAC7F,+FAA+F;QAC/F,qBAAqB,iCAAiC,mBAAmB,CAC5E,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAmB;IACpD,IAAI,EAAE,UAAU,CAAC,oBAAoB;IACrC,GAAG;IACH,iBAAiB,EAAE,IAAI;IACvB,eAAe,EAAE,WAAW;IAC5B,kBAAkB;IAClB,kBAAkB;CACnB,CAAC"}

package/dist/gates/test-over-deletion-guard.js

@@ -0,0 +1,280 @@
+// Copyright (c) 2026 Hellmai Ltd
+// SPDX-License-Identifier: LicenseRef-LumenFlow-Proprietary
+/**
+ * test-over-deletion-guard (WU-2943, INIT-069 Item 12)
+ *
+ * Heuristic gate riding the INIT-068 GateDefinition contract. When `wu:prep`
+ * runs, scan deleted `.test.ts` / `.test.tsx` files; parse top-level
+ * `describe()` / `describe.each()` string literals; flag any whose described
+ * symbols are NOT inside the current WU's `code_paths`.
+ *
+ * Driver: cloud INIT-105 item 12. WU-1502 dropped a substrate and incidentally
+ * over-deleted tests covering other concerns. Codex flagged it during review.
+ *
+ * Contract (INIT-068 / WU-2926):
+ *   - checkApplicability: 'applicable' iff diff includes deleted .test.ts(x)
+ *   - checkPreconditions: 'satisfied' (no env prereqs)
+ *   - prereq_strategy:    'auto-skip'
+ *   - skippable_default:  true (advisory — agents can --skip-gate when intentional)
+ *   - Per-repo configurable via software_delivery.gates.overrides.<gate_id>
+ *
+ * @module gates/test-over-deletion-guard
+ */
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import { GATE_NAMES } from '@lumenflow/core/wu-constants';
+import { createGitForPath } from '@lumenflow/core/git-adapter';
+import { getCurrentWU } from '@lumenflow/core/telemetry';
+import { createWuPaths } from '@lumenflow/core/wu-paths';
+import { readWURaw } from '@lumenflow/core/wu-yaml';
+import { resolveIntegrationTargetRef } from '@lumenflow/core/integration-target';
+import { makeGateLogger } from '../gates-utils.js';
+const TEST_FILE_PATTERN = /\.test\.tsx?$/;
+// Bounded literal regex: the inner class explicitly excludes the matching
+// quote, the `[^)]{0,256}` chunk is bounded, and the outer engine is RE2-safe
+// (no nested quantifiers over the same captured class). Suppresses
+// security/detect-unsafe-regex which heuristically flags any class.
+// eslint-disable-next-line security/detect-unsafe-regex
+const DESCRIBE_LITERAL_RE = /\bdescribe(?:\.each\s*\([^)]{0,256}\))?\s*\(\s*(['"`])([^'"`]+)\1/g;
+// ─────────────────────────────────────────────────────────────────────────
+// Pure helpers (exported for tests)
+// ─────────────────────────────────────────────────────────────────────────
+/**
+ * Parse top-level describe()/describe.each() string literals from test source.
+ *
+ * Simple regex parser (no AST) per the WU-2943 spec: "via simple AST or regex".
+ * Captures the first string-literal argument of `describe(...)` and
+ * `describe.each(...)(...)`.
+ */
+export function parseDescribedSymbols(source) {
+    const out = new Set();
+    for (const match of source.matchAll(DESCRIBE_LITERAL_RE)) {
+        const literal = match[2];
+        if (typeof literal === 'string' && literal.length > 0) {
+            out.add(literal);
+        }
+    }
+    return [...out];
+}
+/**
+ * For each deleted test file, decide whether its described symbols are
+ * "outside" the current WU's code_paths.
+ *
+ * Heuristic match: a described symbol is considered IN scope if any
+ * code_paths entry's basename (without `.ts/.tsx`) equals the symbol, or if
+ * any code_paths entry's path normalised contains the symbol as a substring.
+ * Otherwise the symbol is flagged.
+ *
+ * WU-2989: `deletedSourcePaths` (paths of non-test source files removed in
+ * the same diff) also contribute scope tokens. This resolves the mutual
+ * unsatisfiability between preflight (requires every code_paths entry to
+ * exist on disk) and this gate (requires the described symbol's source to
+ * be findable from code_paths) when a WU intentionally deletes a source
+ * file alongside its co-located test file. The deletion diff itself is the
+ * symbol-provenance signal — no WU-spec schema change required.
+ */
+export function detectCrossScopeDeletions(input) {
+    const { deletedTestFiles, codePaths, deletedSourcePaths = [] } = input;
+    // Scope tokens come from BOTH live code_paths (post-delete) and source
+    // paths deleted in the same diff. Both flavours are basename- and
+    // substring-matched identically.
+    const tokens = buildScopeTokens([...codePaths, ...deletedSourcePaths]);
+    const findings = [];
+    for (const file of deletedTestFiles) {
+        const symbols = parseDescribedSymbols(file.content);
+        const unrecognised = symbols.filter((s) => !isSymbolInScope(s, tokens));
+        if (unrecognised.length > 0) {
+            findings.push({ testFile: file.path, unrecognisedSymbols: unrecognised });
+        }
+    }
+    return findings;
+}
+function buildScopeTokens(codePaths) {
+    const basenames = new Set();
+    const paths = [];
+    for (const p of codePaths) {
+        if (typeof p !== 'string' || p.length === 0)
+            continue;
+        const normalised = p.replace(/\\/g, '/').toLowerCase();
+        paths.push(normalised);
+        const base = path.basename(normalised).replace(/\.[^.]+$/, '');
+        if (base.length > 0)
+            basenames.add(base);
+        // Also kebab → camel/pascal token, so 'payment-gateway' matches 'PaymentGateway'.
+        const camel = base.replace(/[-_]([a-z])/g, (_, c) => c.toUpperCase());
+        if (camel.length > 0)
+            basenames.add(camel.toLowerCase());
+    }
+    return { basenames, paths };
+}
+function isSymbolInScope(symbol, tokens) {
+    const lower = symbol.toLowerCase();
+    if (tokens.basenames.has(lower))
+        return true;
+    for (const p of tokens.paths) {
+        if (p.includes(lower))
+            return true;
+    }
+    return false;
+}
+async function getDiffNameStatus(cwd, baseRef) {
+    try {
+        const git = createGitForPath(cwd);
+        const out = await git.raw(['diff', '--name-status', `${baseRef}...HEAD`]);
+        return out
+            .split('\n')
+            .map((line) => line.trim())
+            .filter(Boolean)
+            .map((line) => {
+            const [status, ...rest] = line.split(/\s+/);
+            return { status: status ?? '', path: rest.join(' ') };
+        });
+    }
+    catch {
+        return [];
+    }
+}
+async function resolveMergeBase(cwd) {
+    // Prefer the configured tracking ref (origin/main or override). Fall back
+    // to local `main` when no remote exists (fresh clones, ephemeral test
+    // repos). Final fallback: empty repo with no main → null.
+    const candidates = [resolveIntegrationTargetRef(), 'main'];
+    const seen = new Set();
+    const git = createGitForPath(cwd);
+    for (const candidate of candidates) {
+        if (!candidate || seen.has(candidate))
+            continue;
+        seen.add(candidate);
+        try {
+            const base = await git.mergeBase('HEAD', candidate);
+            if (base)
+                return base;
+        }
+        catch {
+            // try next candidate
+        }
+    }
+    return null;
+}
+async function getDeletedDiffArtifacts(cwd) {
+    const mergeBase = await resolveMergeBase(cwd);
+    if (!mergeBase)
+        return { testFiles: [], sourcePaths: [] };
+    const entries = await getDiffNameStatus(cwd, mergeBase);
+    const deleted = entries.filter((e) => e.status.startsWith('D'));
+    const deletedTests = deleted.filter((e) => TEST_FILE_PATTERN.test(e.path));
+    // WU-2989: non-test deletions provide symbol provenance for the test-scope
+    // check. We don't need their content — only their paths/basenames.
+    const sourcePaths = deleted.filter((e) => !TEST_FILE_PATTERN.test(e.path)).map((e) => e.path);
+    const testFiles = [];
+    const git = createGitForPath(cwd);
+    for (const entry of deletedTests) {
+        // Read content from the merge-base (where the file still existed).
+        // showFileAtRef returns '' when the file is unreadable — treat that as
+        // a best-effort skip rather than a gate block.
+        const content = await git.showFileAtRef(mergeBase, entry.path);
+        if (content.length > 0) {
+            testFiles.push({ path: entry.path, content });
+        }
+    }
+    return { testFiles, sourcePaths };
+}
+// Back-compat thin wrapper for legacy callers that only need the test files.
+async function getDeletedTestFiles(cwd) {
+    return (await getDeletedDiffArtifacts(cwd)).testFiles;
+}
+async function loadCurrentWUCodePathsForCwd(cwd) {
+    // Mirror gates-utils.loadCurrentWUCodePaths but rooted at an arbitrary cwd
+    // (the gate runs against the worktree, not necessarily process.cwd()).
+    let wuId = getCurrentWU();
+    if (!wuId) {
+        try {
+            const branch = await createGitForPath(cwd).getCurrentBranch();
+            const m = branch.match(/wu-(\d+)/i);
+            if (m)
+                wuId = `WU-${m[1]}`;
+        }
+        catch {
+            // ignore
+        }
+    }
+    if (!wuId)
+        return [];
+    try {
+        const wuPaths = createWuPaths({ projectRoot: cwd });
+        const yamlPath = wuPaths.WU(wuId);
+        const abs = path.isAbsolute(yamlPath) ? yamlPath : path.join(cwd, yamlPath);
+        if (!existsSync(abs))
+            return [];
+        const doc = readWURaw(abs);
+        if (doc && Array.isArray(doc.code_paths)) {
+            return doc.code_paths.filter((p) => typeof p === 'string');
+        }
+    }
+    catch {
+        // ignore — return empty so gate auto-skips not-applicable on missing WU
+    }
+    return [];
+}
+// ─────────────────────────────────────────────────────────────────────────
+// Gate definition (INIT-068 contract)
+// ─────────────────────────────────────────────────────────────────────────
+async function checkApplicability(ctx) {
+    const cwd = ctx.cwd ?? process.cwd();
+    const deleted = await getDeletedTestFiles(cwd);
+    return deleted.length > 0 ? 'applicable' : 'not-applicable';
+}
+async function checkPreconditions(_ctx) {
+    // No environmental prerequisites: this gate only consults the git diff +
+    // the current WU spec, both of which are repo-local.
+    return 'satisfied';
+}
+async function run(ctx) {
+    const start = Date.now();
+    const cwd = ctx.cwd ?? process.cwd();
+    const logLine = makeGateLogger({
+        agentLog: ctx.agentLog ?? null,
+        useAgentMode: ctx.useAgentMode,
+    });
+    logLine('\n> test-over-deletion check\n');
+    const { testFiles: deleted, sourcePaths: deletedSourcePaths } = await getDeletedDiffArtifacts(cwd);
+    if (deleted.length === 0) {
+        logLine('ℹ️  No deleted test files; nothing to evaluate.');
+        return { ok: true, duration: Date.now() - start };
+    }
+    const codePaths = await loadCurrentWUCodePathsForCwd(cwd);
+    if (codePaths.length === 0) {
+        // Without a WU spec we can't decide scope. Auto-pass (advisory) and warn.
+        logLine('⚠️  No WU code_paths resolvable; skipping describe()-symbol scope check.');
+        return { ok: true, duration: Date.now() - start };
+    }
+    // WU-2989: pass deleted source paths from the same diff so co-deleted
+    // source+test pairs satisfy this gate without --skip-gate.
+    const findings = detectCrossScopeDeletions({
+        deletedTestFiles: deleted,
+        codePaths,
+        deletedSourcePaths,
+    });
+    if (findings.length === 0) {
+        logLine('test-over-deletion check passed.');
+        return { ok: true, duration: Date.now() - start };
+    }
+    logLine("❌ test-over-deletion: deleted tests reference symbols outside this WU's code_paths.");
+    for (const f of findings) {
+        logLine(`   - ${f.testFile}`);
+        for (const s of f.unrecognisedSymbols) {
+            logLine(`       describe('${s}') — not found in code_paths`);
+        }
+    }
+    logLine('Hint: confirm the deletion is intentional and in scope, or split the unrelated removal into its own WU.');
+    return { ok: false, duration: Date.now() - start };
+}
+export const testOverDeletionGate = {
+    name: GATE_NAMES.TEST_OVER_DELETION,
+    run,
+    skippable_default: true,
+    prereq_strategy: 'auto-skip',
+    checkApplicability,
+    checkPreconditions,
+};
+//# sourceMappingURL=test-over-deletion-guard.js.map

package/dist/gates/test-over-deletion-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-over-deletion-guard.js","sourceRoot":"","sources":["../../src/gates/test-over-deletion-guard.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,4DAA4D;AAE5D;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,2BAA2B,EAAE,MAAM,oCAAoC,CAAC;AAGjF,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,MAAM,iBAAiB,GAAG,eAAe,CAAC;AAC1C,0EAA0E;AAC1E,8EAA8E;AAC9E,mEAAmE;AACnE,oEAAoE;AACpE,wDAAwD;AACxD,MAAM,mBAAmB,GAAG,oEAAoE,CAAC;AAEjG,4EAA4E;AAC5E,oCAAoC;AACpC,4EAA4E;AAE5E;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAc;IAClD,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACzD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAYD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,yBAAyB,CAAC,KAIzC;IACC,MAAM,EAAE,gBAAgB,EAAE,SAAS,EAAE,kBAAkB,GAAG,EAAE,EAAE,GAAG,KAAK,CAAC;IACvE,uEAAuE;IACvE,kEAAkE;IAClE,iCAAiC;IACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,GAAG,SAAS,EAAE,GAAG,kBAAkB,CAAC,CAAC,CAAC;IAEvE,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,gBAAgB,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpD,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,mBAAmB,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5E,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,gBAAgB,CAAC,SAAmB;IAC3C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QACtD,MAAM,UAAU,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACvD,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACzC,kFAAkF;QAClF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC,EAAE,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAC9E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,eAAe,CACtB,MAAc,EACd,MAAmD;IAEnD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,KAAK,UAAU,iBAAiB,CAAC,GAAW,EAAE,OAAe;IAC3D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,SAAS,CAAC,CAAC,CAAC;QAC1E,OAAO,GAAG;aACP,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;YACZ,MAAM,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAW;IACzC,0EAA0E;IAC1E,sEAAsE;IACtE,0DAA0D;IAC1D,MAAM,UAAU,GAAG,CAAC,2BAA2B,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAClC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,SAAS;QAChD,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpD,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,qBAAqB;QACvB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AASD,KAAK,UAAU,uBAAuB,CAAC,GAAW;IAChD,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IAE1D,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3E,2EAA2E;IAC3E,mEAAmE;IACnE,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE9F,MAAM,SAAS,GAAsB,EAAE,CAAC;IACxC,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,mEAAmE;QACnE,uEAAuE;QACvE,+CAA+C;QAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC;AACpC,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,OAAO,CAAC,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,4BAA4B,CAAC,GAAW;IACrD,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,IAAI,GAAG,YAAY,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,gBAAgB,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACpC,IAAI,CAAC;gBAAE,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;IACH,CAAC;IACD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,aAAa,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QAC5E,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,GAAG,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACzC,OAAO,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wEAAwE;IAC1E,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,4EAA4E;AAC5E,sCAAsC;AACtC,4EAA4E;AAE5E,KAAK,UAAU,kBAAkB,CAAC,GAAmB;IACnD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC/C,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAAC,IAAoB;IACpD,yEAAyE;IACzE,qDAAqD;IACrD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,KAAK,UAAU,GAAG,CAAC,GAAmB;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACzB,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,cAAc,CAAC;QAC7B,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,IAAI;QAC9B,YAAY,EAAE,GAAG,CAAC,YAAY;KAC/B,CAAC,CAAC;IACH,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAE1C,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,GAC3D,MAAM,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CAAC,iDAAiD,CAAC,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpD,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,4BAA4B,CAAC,GAAG,CAAC,CAAC;IAC1D,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,0EAA0E;QAC1E,OAAO,CAAC,0EAA0E,CAAC,CAAC;QACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,sEAAsE;IACtE,2DAA2D;IAC3D,MAAM,QAAQ,GAAG,yBAAyB,CAAC;QACzC,gBAAgB,EAAE,OAAO;QACzB,SAAS;QACT,kBAAkB;KACnB,CAAC,CAAC;IACH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,CAAC,kCAAkC,CAAC,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IACpD,CAAC;IAED,OAAO,CAAC,qFAAqF,CAAC,CAAC;IAC/F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,OAAO,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,mBAAmB,EAAE,CAAC;YACtC,OAAO,CAAC,oBAAoB,CAAC,8BAA8B,CAAC,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,CACL,yGAAyG,CAC1G,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAmB;IAClD,IAAI,EAAE,UAAU,CAAC,kBAAkB;IACnC,GAAG;IACH,iBAAiB,EAAE,IAAI;IACvB,eAAe,EAAE,WAAW;IAC5B,kBAAkB;IAClB,kBAAkB;CACnB,CAAC"}

package/dist/gates-runners.js

@@ -9,7 +9,7 @@
  * @module gates-runners
  */
 import { spawnSync } from 'node:child_process';
-import { existsSync, mkdirSync, readFileSync, writeFileSync, writeSync } from 'node:fs';
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync, writeSync, } from 'node:fs';
 import { access } from 'node:fs/promises';
 import { createRequire } from 'node:module';
 import path from 'node:path';
@@ -19,7 +19,7 @@ import { createGitForPath } from '@lumenflow/core/git-adapter';
 import { resolveGatesCommands, resolveTestRunner, getGatesSection, resolveScopedUnitTestExecutionPlan, formatScopedUnitTestFallbackMessage, } from '@lumenflow/packs-software-delivery/policy/gates-config';
 import { CoChangeRuleConfigSchema, ConditionalCommandConfigSchema, } from '@lumenflow/core/config-schema';
 import { validateBacklogSync } from '@lumenflow/core/validators/backlog-sync';
-import { DELIVERY_REVIEW_ARTIFACT_DIR, DeliveryReviewResultSchema, calculateDeliveryReviewVerdict, createWuPaths, flattenDeliveryReviewAcceptanceCriteria, isCodePathCoveredByChangedFiles, isDeliveryReviewSkippedForType, isPathLikeTestEntry, readWU, resolveDeliveryReviewRuntimeConfig, validateClaimValidation, } from '@lumenflow/core';
+import { DELIVERY_REVIEW_ARTIFACT_DIR, DeliveryReviewResultSchema, calculateDeliveryReviewVerdict, createWuPaths, flattenDeliveryReviewAcceptanceCriteria, isCodePathCoveredByChangedFiles, isDeliveryReviewSkippedForType, isPathLikeTestEntry, readWU, resolveDeliveryReviewRuntimeConfig, validateClaimValidation, DOCS_LAYOUT_PRESETS, } from '@lumenflow/core';
 import { runSupabaseDocsLinter } from '@lumenflow/core/validators/supabase-docs-linter';
 import { isIntegrationMainBranch, resolveIntegrationTargetRef, } from '@lumenflow/core/integration-target';
 import { PACKAGES, PKG_MANAGER, ESLINT_FLAGS, ESLINT_COMMANDS, ESLINT_DEFAULTS, SCRIPTS, CACHE_STRATEGIES, DIRECTORIES, EXIT_CODES, FILE_SYSTEM, } from '@lumenflow/core/wu-constants';
@@ -49,6 +49,8 @@ const DEFAULT_MIGRATION_VERIFY_PATTERNS = [
     'prisma/migrations/**',
     'drizzle/migrations/**',
 ];
+const WU_DB_IMPACTING_FIELD = 'db_impacting';
+const WU_YAML_EXTENSION = '.yaml';
 const DELIVERY_REVIEW_HIGH_RISK_PATH_PATTERN = /(auth|permission|secret|token|credential|billing|payment|migration|schema|policy|sandbox|security|hook)/i;
 const DELIVERY_REVIEW_TEST_PATH_PATTERN = /(^|\/)(__tests__\/|.*\.(test|spec)\.[A-Za-z0-9]+$)/i;
 function asStringArray(value) {
@@ -785,6 +787,38 @@ export function getMatchingCoChangeRulesForPaths(options) {
 export function shouldRunMigrationVerifyForChanges(options) {
     return hasPatternMatch(options.changedFiles, [...DEFAULT_MIGRATION_VERIFY_PATTERNS]);
 }
+async function isDbImpactingDisabledForCurrentWU(cwd) {
+    const wuId = (await detectCurrentWUForCwd(cwd)) ?? findSingleWuIdInWuDirectory(cwd);
+    if (!wuId) {
+        return false;
+    }
+    try {
+        const wuPaths = createWuPaths({ projectRoot: cwd });
+        const wuPath = path.join(cwd, wuPaths.WU(wuId));
+        const wu = readWU(wuPath, wuId);
+        return wu[WU_DB_IMPACTING_FIELD] === false;
+    }
+    catch {
+        return false;
+    }
+}
+function findSingleWuIdInWuDirectory(cwd) {
+    try {
+        const wuPaths = createWuPaths({ projectRoot: cwd });
+        const wuDir = path.join(cwd, wuPaths.WU_DIR());
+        if (!existsSync(wuDir)) {
+            return null;
+        }
+        const wuFiles = readdirSync(wuDir).filter((entry) => entry.endsWith(WU_YAML_EXTENSION));
+        if (wuFiles.length !== 1) {
+            return null;
+        }
+        return path.basename(wuFiles[0], WU_YAML_EXTENSION);
+    }
+    catch {
+        return null;
+    }
+}
 function resolveConditionalCommandGuidanceRefs(commands, projectRoot, logWarning) {
     return commands.map((command) => {
         if (!command.guidance_ref) {
@@ -928,6 +962,10 @@ export async function runMigrationVerifyGate({ agentLog, useAgentMode, cwd }) {
         logLine('ℹ️  No changed files detected; skipping migration verification.');
         return { ok: true, duration: Date.now() - start };
     }
+    if (await isDbImpactingDisabledForCurrentWU(effectiveCwd)) {
+        logLine('ℹ️  WU declares db_impacting:false; skipping migration verification.');
+        return { ok: true, duration: Date.now() - start };
+    }
     const conditionalCommands = getResolvedConditionalCommands(effectiveCwd, (msg) => logLine(`⚠️  ${msg}`));
     const matchingConditionalCommands = getMatchingConditionalCommandsForPaths({
         filePaths: changedFiles,
@@ -1360,6 +1398,9 @@ function readApplicabilityPathsOverride(gateId, cwd) {
  */
 export async function checkMigrationVerifyApplicability(ctx) {
     try {
+        if (await isDbImpactingDisabledForCurrentWU(ctx.cwd ?? process.cwd())) {
+            return 'not-applicable';
+        }
         const git = createGitForPath(ctx.cwd ?? process.cwd());
         const changed = await getChangedFilesForIncremental({ git });
         return shouldRunMigrationVerifyForChanges({ changedFiles: changed })
@@ -1395,7 +1436,7 @@ export function checkInvariantsPreconditions(ctx) {
         'invariants.yaml',
         'invariants.yml',
         '.lumenflow/invariants.yaml',
-        'docs/operations/_frameworks/lumenflow/invariants.yaml',
+        `${DOCS_LAYOUT_PRESETS.arc42.operations}/_frameworks/lumenflow/invariants.yaml`,
     ];
     for (const rel of candidates) {
         if (existsSync(path.join(cwd, rel)))