@miller-tech/uap 1.222.0 → 2.0.0

package/dist/quality/scanner.js

@@ -0,0 +1,127 @@
+/**
+ * File scanner: turns source content into metric violations.
+ *
+ * Pure (no I/O beyond what callers hand it) so the CLI, the proxy enforcer's
+ * TS-side parity tests, and future callers all share one code path. External
+ * tool overrides (lizard numbers, jscpd clones, coverage) are merged in by
+ * report.ts — this module is the always-available built-in layer.
+ */
+import { extname } from 'path';
+import { languageForFile, stripNoise } from './languages.js';
+import { analyzeComplexity } from './complexity.js';
+/** Explicit any/unknown usage patterns, per language family. Built from
+ * strings (not regex literals) on purpose: string contents are stripped
+ * before scanning, so this file does not trip the gate over its own
+ * patterns. */
+const ANY_PATTERNS = [
+    // `: any`, `as any`, `<any>`, `Array<any>`, `Record<string, unknown>`, …
+    {
+        langs: ['typescript'],
+        re: new RegExp(':\\s*any\\b|:\\s*unknown\\b|\\bas\\s+any\\b|<any>|<unknown>|Array<\\s*any\\s*>', 'g'),
+        label: 'explicit any/unknown',
+    },
+    {
+        langs: ['javascript'],
+        re: new RegExp('/\\*\\s*@type\\s*\\{[^}]*\\b(?:any|unknown)\\b[^}]*\\}\\s*\\*/', 'g'),
+        label: 'JSDoc any/unknown',
+    },
+    {
+        langs: ['python'],
+        re: new RegExp(':\\s*Any\\b|->\\s*Any\\b|cast\\(\\s*Any\\b', 'g'),
+        label: 'typing.Any',
+    },
+];
+/** Count explicit any/unknown usages in one file's content. */
+export function countAnyTypes(content, file) {
+    const lang = languageForFile(file);
+    if (!lang)
+        return { count: 0, lines: [] };
+    const stripped = stripNoise(content, lang.commentStyle);
+    const lines = stripped.split('\n');
+    const hits = [];
+    for (const pat of ANY_PATTERNS) {
+        if (!pat.langs.includes(lang.name))
+            continue;
+        for (let i = 0; i < lines.length; i++) {
+            pat.re.lastIndex = 0;
+            let m;
+            while ((m = pat.re.exec(lines[i])) !== null) {
+                hits.push(i + 1);
+                if (m[0].length === 0)
+                    pat.re.lastIndex++; // safety for zero-width
+            }
+        }
+    }
+    return { count: hits.length, lines: [...new Set(hits)].sort((a, b) => a - b) };
+}
+/**
+ * Scan one file's content for the always-available metrics:
+ * LOC/file, per-function cyclomatic + cognitive complexity, any-types.
+ * Halstead/CRAP/coverage/mutation/duplication/dead-code need external data
+ * and are merged later by report.ts.
+ */
+export function scanContent(file, content, config) {
+    const lang = languageForFile(file);
+    if (!lang)
+        return [];
+    const t = config.thresholds;
+    const out = [];
+    const { functions, loc } = analyzeComplexity(content, lang);
+    if (loc > t.maxLocPerFile) {
+        out.push({
+            file,
+            metric: 'locPerFile',
+            value: loc,
+            threshold: t.maxLocPerFile,
+            signature: `${file}::locPerFile::<file>`,
+            message: `${file}: ${loc} LOC exceeds max ${t.maxLocPerFile}`,
+        });
+    }
+    for (const fn of functions) {
+        if (fn.cyclomatic > t.maxCyclomatic) {
+            out.push({
+                file,
+                metric: 'cyclomatic',
+                value: fn.cyclomatic,
+                threshold: t.maxCyclomatic,
+                signature: `${file}::cyclomatic::${fn.name}@${fn.line}`,
+                message: `${file}:${fn.line} ${fn.name}() cyclomatic ${fn.cyclomatic} exceeds max ${t.maxCyclomatic}`,
+            });
+        }
+        if (fn.cognitive > t.maxCognitive) {
+            out.push({
+                file,
+                metric: 'cognitive',
+                value: fn.cognitive,
+                threshold: t.maxCognitive,
+                signature: `${file}::cognitive::${fn.name}@${fn.line}`,
+                message: `${file}:${fn.line} ${fn.name}() cognitive ${fn.cognitive} exceeds max ${t.maxCognitive}`,
+            });
+        }
+    }
+    const anyResult = countAnyTypes(content, file);
+    if (anyResult.count > t.maxAnyTypes) {
+        out.push({
+            file,
+            metric: 'anyTypes',
+            value: anyResult.count,
+            threshold: t.maxAnyTypes,
+            signature: `${file}::anyTypes::<file>`,
+            message: `${file}: ${anyResult.count} explicit any/unknown usage(s) (lines ${anyResult.lines.slice(0, 8).join(',')}) exceed max ${t.maxAnyTypes}`,
+        });
+    }
+    return out;
+}
+/** True when `file` is a scannable source path under the config's rules. */
+export function isScannableSource(file, config) {
+    const norm = file.replace(/\\/g, '/');
+    const ext = extname(norm).toLowerCase();
+    if (!config.sourceExts.includes(ext))
+        return false;
+    for (const dir of config.excludeDirs) {
+        if (norm.includes(`/${dir}/`) || norm.startsWith(`${dir}/`))
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=scanner.js.map

package/dist/quality/scanner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanner.js","sourceRoot":"","sources":["../../src/quality/scanner.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AA8BpD;;;eAGe;AACf,MAAM,YAAY,GAA0D;IAC1E,yEAAyE;IACzE;QACE,KAAK,EAAE,CAAC,YAAY,CAAC;QACrB,EAAE,EAAE,IAAI,MAAM,CAAC,gFAAgF,EAAE,GAAG,CAAC;QACrG,KAAK,EAAE,sBAAsB;KAC9B;IACD;QACE,KAAK,EAAE,CAAC,YAAY,CAAC;QACrB,EAAE,EAAE,IAAI,MAAM,CAAC,gEAAgE,EAAE,GAAG,CAAC;QACrF,KAAK,EAAE,mBAAmB;KAC3B;IACD;QACE,KAAK,EAAE,CAAC,QAAQ,CAAC;QACjB,EAAE,EAAE,IAAI,MAAM,CAAC,4CAA4C,EAAE,GAAG,CAAC;QACjE,KAAK,EAAE,YAAY;KACpB;CACF,CAAC;AAEF,+DAA+D;AAC/D,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,IAAY;IACzD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,GAAG,IAAI,YAAY,EAAE,CAAC;QAC/B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,GAAG,CAAC,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC;YACrB,IAAI,CAAyB,CAAC;YAC9B,OAAO,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;gBACjB,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;oBAAE,GAAG,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,CAAC,wBAAwB;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AACjF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,OAAe,EAAE,MAAqB;IAC9E,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC;IAC5B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAE5B,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAE5D,IAAI,GAAG,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,GAAG;YACV,SAAS,EAAE,CAAC,CAAC,aAAa;YAC1B,SAAS,EAAE,GAAG,IAAI,sBAAsB;YACxC,OAAO,EAAE,GAAG,IAAI,KAAK,GAAG,oBAAoB,CAAC,CAAC,aAAa,EAAE;SAC9D,CAAC,CAAC;IACL,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,SAAS,EAAE,CAAC;QAC3B,IAAI,EAAE,CAAC,UAAU,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,MAAM,EAAE,YAAY;gBACpB,KAAK,EAAE,EAAE,CAAC,UAAU;gBACpB,SAAS,EAAE,CAAC,CAAC,aAAa;gBAC1B,SAAS,EAAE,GAAG,IAAI,iBAAiB,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE;gBACvD,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,iBAAiB,EAAE,CAAC,UAAU,gBAAgB,CAAC,CAAC,aAAa,EAAE;aACtG,CAAC,CAAC;QACL,CAAC;QACD,IAAI,EAAE,CAAC,SAAS,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC;gBACP,IAAI;gBACJ,MAAM,EAAE,WAAW;gBACnB,KAAK,EAAE,EAAE,CAAC,SAAS;gBACnB,SAAS,EAAE,CAAC,CAAC,YAAY;gBACzB,SAAS,EAAE,GAAG,IAAI,gBAAgB,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,EAAE;gBACtD,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,gBAAgB,EAAE,CAAC,SAAS,gBAAgB,CAAC,CAAC,YAAY,EAAE;aACnG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC/C,IAAI,SAAS,CAAC,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,MAAM,EAAE,UAAU;YAClB,KAAK,EAAE,SAAS,CAAC,KAAK;YACtB,SAAS,EAAE,CAAC,CAAC,WAAW;YACxB,SAAS,EAAE,GAAG,IAAI,oBAAoB;YACtC,OAAO,EAAE,GAAG,IAAI,KAAK,SAAS,CAAC,KAAK,yCAAyC,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,WAAW,EAAE;SAClJ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,MAAqB;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,GAAG,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/quality/tools.d.ts

@@ -0,0 +1,28 @@
+import { Violation } from './scanner.js';
+import { QualityConfig } from './config.js';
+export declare function toolAvailable(name: string): boolean;
+export interface ToolStatus {
+    name: string;
+    available: boolean;
+    provides: string[];
+}
+/** Probe every optional tool the gate can use. */
+export declare function probeTools(): ToolStatus[];
+/**
+ * Run lizard over the given files; returns cyclomatic violations using
+ * lizard's authoritative CC numbers. Null when lizard is absent.
+ */
+export declare function lizardViolations(files: string[], root: string, config: QualityConfig): Violation[] | null;
+/**
+ * Run rust-code-analysis over the given files; returns cognitive-complexity
+ * and Halstead-difficulty violations. Null when the tool is absent.
+ */
+export declare function rcaViolations(files: string[], root: string, config: QualityConfig): Violation[] | null;
+/**
+ * Run jscpd duplication detection. Returns one violation per clone pair over
+ * the threshold count. Null when jscpd is absent or the run produced no fresh
+ * report (a failed/timed-out run must never re-read a STALE report and block
+ * on clones that no longer exist).
+ */
+export declare function jscpdViolations(root: string, config: QualityConfig): Violation[] | null;
+//# sourceMappingURL=tools.d.ts.map

package/dist/quality/tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.d.ts","sourceRoot":"","sources":["../../src/quality/tools.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,aAAa,EAAqB,MAAM,aAAa,CAAC;AAE/D,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAGnD;AAED,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,kDAAkD;AAClD,wBAAgB,UAAU,IAAI,UAAU,EAAE,CASzC;AAuDD;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,GACpB,SAAS,EAAE,GAAG,IAAI,CAepB;AA8DD;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,MAAM,EAAE,EACf,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,aAAa,GACpB,SAAS,EAAE,GAAG,IAAI,CAgBpB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,aAAa,GAAG,SAAS,EAAE,GAAG,IAAI,CAoCvF"}

package/dist/quality/tools.js

@@ -0,0 +1,189 @@
+/**
+ * External tool adapters. Every adapter follows the same contract:
+ * unavailable tool -> null (the metric is SKIPPED with a logged warning),
+ * available tool -> authoritative numbers that override the built-in
+ * heuristics. Nothing here throws on a missing binary.
+ */
+import { spawnSync } from 'child_process';
+import { existsSync, mkdtempSync, readFileSync, rmSync } from 'fs';
+import { tmpdir } from 'os';
+import { join } from 'path';
+export function toolAvailable(name) {
+    const r = spawnSync('which', [name], { encoding: 'utf-8', timeout: 5_000 });
+    return r.status === 0;
+}
+/** Probe every optional tool the gate can use. */
+export function probeTools() {
+    return [
+        { name: 'lizard', available: toolAvailable('lizard'), provides: ['cyclomatic', 'locPerFile'] },
+        { name: 'rust-code-analysis', available: toolAvailable('rust-code-analysis'), provides: ['cognitive', 'halsteadDifficulty'] },
+        { name: 'jscpd', available: toolAvailable('jscpd'), provides: ['duplicateBlocks'] },
+        { name: 'knip', available: toolAvailable('knip'), provides: ['deadCode'] },
+        { name: 'vulture', available: toolAvailable('vulture'), provides: ['deadCode (python)'] },
+        { name: 'stryker', available: toolAvailable('stryker'), provides: ['survivingMutants'] },
+    ];
+}
+function relFromRoot(abs, root) {
+    return abs.startsWith(root) ? abs.slice(root.length + 1) : abs;
+}
+function lizardFnViolation(fn, rel, t) {
+    if (fn.cyclomatic_complexity <= t.maxCyclomatic)
+        return null;
+    const name = (fn.long_name ?? fn.name).split('(')[0].trim();
+    const line = (fn.start_line ?? 0) + 1;
+    return {
+        file: rel,
+        metric: 'cyclomatic',
+        value: fn.cyclomatic_complexity,
+        threshold: t.maxCyclomatic,
+        signature: `${rel}::cyclomatic::${name}@${line}`,
+        message: `${rel}:${line} ${name}() cyclomatic ${fn.cyclomatic_complexity} (lizard) exceeds max ${t.maxCyclomatic}`,
+    };
+}
+function lizardFileViolations(f, root, t) {
+    const rel = relFromRoot(f.filename, root);
+    const out = [];
+    if (typeof f.nloc === 'number' && f.nloc > t.maxLocPerFile) {
+        out.push({
+            file: rel,
+            metric: 'locPerFile',
+            value: f.nloc,
+            threshold: t.maxLocPerFile,
+            signature: `${rel}::locPerFile::<file>`,
+            message: `${rel}: ${f.nloc} NLOC (lizard) exceeds max ${t.maxLocPerFile}`,
+        });
+    }
+    for (const fn of f.function_list ?? []) {
+        const v = lizardFnViolation(fn, rel, t);
+        if (v)
+            out.push(v);
+    }
+    return out;
+}
+/**
+ * Run lizard over the given files; returns cyclomatic violations using
+ * lizard's authoritative CC numbers. Null when lizard is absent.
+ */
+export function lizardViolations(files, root, config) {
+    if (!toolAvailable('lizard') || files.length === 0)
+        return null;
+    const r = spawnSync('lizard', ['--json', ...files], {
+        cwd: root,
+        encoding: 'utf-8',
+        timeout: 120_000,
+        maxBuffer: 64 * 1024 * 1024,
+    });
+    if (r.status !== 0 && !r.stdout)
+        return null;
+    try {
+        const filesOut = JSON.parse(r.stdout);
+        return filesOut.flatMap((f) => lizardFileViolations(f, root, config.thresholds));
+    }
+    catch {
+        return null;
+    }
+}
+function* walkRca(unit) {
+    yield unit;
+    for (const s of unit.spaces ?? [])
+        yield* walkRca(s);
+}
+function rcaUnitViolations(unit, rel, t) {
+    const out = [];
+    const fnName = unit['function-name'] ?? '<unit>';
+    const line = (unit['start-line'] ?? 0) + 1;
+    const cog = unit.metrics?.cognitive?.sum;
+    if (typeof cog === 'number' && cog > t.maxCognitive) {
+        out.push({
+            file: rel,
+            metric: 'cognitive',
+            value: Math.round(cog),
+            threshold: t.maxCognitive,
+            signature: `${rel}::cognitive::${fnName}@${line}`,
+            message: `${rel}:${line} ${fnName}() cognitive ${Math.round(cog)} (rust-code-analysis) exceeds max ${t.maxCognitive}`,
+        });
+    }
+    const hd = unit.metrics?.halstead?.difficulty;
+    if (typeof hd === 'number' && hd > t.maxHalsteadDifficulty) {
+        out.push({
+            file: rel,
+            metric: 'halsteadDifficulty',
+            value: Math.round(hd * 10) / 10,
+            threshold: t.maxHalsteadDifficulty,
+            signature: `${rel}::halsteadDifficulty::${fnName}@${line}`,
+            message: `${rel}:${line} ${fnName}() Halstead difficulty ${hd.toFixed(1)} exceeds max ${t.maxHalsteadDifficulty}`,
+        });
+    }
+    return out;
+}
+function rcaFileViolations(f, root, t) {
+    const rel = relFromRoot(f['file-name'] ?? '', root);
+    return (f.spaces ?? []).flatMap((sp) => [...walkRca(sp)].flatMap((unit) => rcaUnitViolations(unit, rel, t)));
+}
+/**
+ * Run rust-code-analysis over the given files; returns cognitive-complexity
+ * and Halstead-difficulty violations. Null when the tool is absent.
+ */
+export function rcaViolations(files, root, config) {
+    if (!toolAvailable('rust-code-analysis') || files.length === 0)
+        return null;
+    const r = spawnSync('rust-code-analysis', ['--metrics', '-O', 'json', '-p', ...files], {
+        cwd: root,
+        encoding: 'utf-8',
+        timeout: 120_000,
+        maxBuffer: 64 * 1024 * 1024,
+    });
+    if (!r.stdout)
+        return null;
+    try {
+        const parsed = JSON.parse(r.stdout);
+        const files = Array.isArray(parsed) ? parsed : Object.values(parsed);
+        return files.flatMap((f) => rcaFileViolations(f, root, config.thresholds));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Run jscpd duplication detection. Returns one violation per clone pair over
+ * the threshold count. Null when jscpd is absent or the run produced no fresh
+ * report (a failed/timed-out run must never re-read a STALE report and block
+ * on clones that no longer exist).
+ */
+export function jscpdViolations(root, config) {
+    if (!toolAvailable('jscpd'))
+        return null;
+    // Per-run output dir: a fixed /tmp path collides across concurrent runs and
+    // leaks stale results into the next run.
+    const outDir = mkdtempSync(join(tmpdir(), 'uap-jscpd-'));
+    try {
+        // jscpd exits non-zero when clones are found — its exit code is signal,
+        // not failure. The report file's existence is what we trust.
+        spawnSync('jscpd', [root, '--reporters', 'json', '--output', outDir, '--silent', '--ignore', config.excludeDirs.map((d) => `**/${d}/**`).join(',')], { cwd: root, encoding: 'utf-8', timeout: 180_000, maxBuffer: 64 * 1024 * 1024 });
+        const reportPath = join(outDir, 'jscpd-report.json');
+        if (!existsSync(reportPath))
+            return null;
+        const report = JSON.parse(readFileSync(reportPath, 'utf-8'));
+        const dups = report.duplicates ?? [];
+        if (dups.length <= config.thresholds.maxDuplicateBlocks)
+            return [];
+        return dups.slice(0, 50).map((d) => {
+            const file = (d.firstFile?.name ?? '<unknown>').replace(/\\/g, '/');
+            return {
+                file,
+                metric: 'duplicateBlocks',
+                value: dups.length,
+                threshold: config.thresholds.maxDuplicateBlocks,
+                signature: `${file}::duplicateBlocks::<clone>`,
+                message: `${file}: duplicated block (${dups.length} clone(s) exceed max ${config.thresholds.maxDuplicateBlocks})`,
+            };
+        });
+    }
+    catch {
+        return null;
+    }
+    finally {
+        rmSync(outDir, { recursive: true, force: true });
+    }
+}
+//# sourceMappingURL=tools.js.map

package/dist/quality/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../src/quality/tools.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAI5B,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACxB,CAAC;AAQD,kDAAkD;AAClD,MAAM,UAAU,UAAU;IACxB,OAAO;QACL,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC,EAAE;QAC9F,EAAE,IAAI,EAAE,oBAAoB,EAAE,SAAS,EAAE,aAAa,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC,EAAE;QAC7H,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,OAAO,CAAC,EAAE,QAAQ,EAAE,CAAC,iBAAiB,CAAC,EAAE;QACnF,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,EAAE;QAC1E,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,mBAAmB,CAAC,EAAE;QACzF,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,EAAE;KACzF,CAAC;AACJ,CAAC;AAiBD,SAAS,WAAW,CAAC,GAAW,EAAE,IAAY;IAC5C,OAAO,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;AACjE,CAAC;AAED,SAAS,iBAAiB,CAAC,EAAkB,EAAE,GAAW,EAAE,CAAoB;IAC9E,IAAI,EAAE,CAAC,qBAAqB,IAAI,CAAC,CAAC,aAAa;QAAE,OAAO,IAAI,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,SAAS,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACtC,OAAO;QACL,IAAI,EAAE,GAAG;QACT,MAAM,EAAE,YAAY;QACpB,KAAK,EAAE,EAAE,CAAC,qBAAqB;QAC/B,SAAS,EAAE,CAAC,CAAC,aAAa;QAC1B,SAAS,EAAE,GAAG,GAAG,iBAAiB,IAAI,IAAI,IAAI,EAAE;QAChD,OAAO,EAAE,GAAG,GAAG,IAAI,IAAI,IAAI,IAAI,iBAAiB,EAAE,CAAC,qBAAqB,yBAAyB,CAAC,CAAC,aAAa,EAAE;KACnH,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,CAAa,EAAE,IAAY,EAAE,CAAoB;IAC7E,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,YAAY;YACpB,KAAK,EAAE,CAAC,CAAC,IAAI;YACb,SAAS,EAAE,CAAC,CAAC,aAAa;YAC1B,SAAS,EAAE,GAAG,GAAG,sBAAsB;YACvC,OAAO,EAAE,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,8BAA8B,CAAC,CAAC,aAAa,EAAE;SAC1E,CAAC,CAAC;IACL,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,KAAe,EACf,IAAY,EACZ,MAAqB;IAErB,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,EAAE;QAClD,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAiB,CAAC;QACtD,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oBAAoB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACnF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAqBD,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAa;IAC7B,MAAM,IAAI,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,EAAE;QAAE,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,GAAW,EAAE,CAAoB;IACzE,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,QAAQ,CAAC;IACjD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,YAAY,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,WAAW;YACnB,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC;YACtB,SAAS,EAAE,CAAC,CAAC,YAAY;YACzB,SAAS,EAAE,GAAG,GAAG,gBAAgB,MAAM,IAAI,IAAI,EAAE;YACjD,OAAO,EAAE,GAAG,GAAG,IAAI,IAAI,IAAI,MAAM,gBAAgB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC,YAAY,EAAE;SACtH,CAAC,CAAC;IACL,CAAC;IACD,MAAM,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,UAAU,CAAC;IAC9C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,GAAG,CAAC,CAAC,qBAAqB,EAAE,CAAC;QAC3D,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,GAAG;YACT,MAAM,EAAE,oBAAoB;YAC5B,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;YAC/B,SAAS,EAAE,CAAC,CAAC,qBAAqB;YAClC,SAAS,EAAE,GAAG,GAAG,yBAAyB,MAAM,IAAI,IAAI,EAAE;YAC1D,OAAO,EAAE,GAAG,GAAG,IAAI,IAAI,IAAI,MAAM,0BAA0B,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,qBAAqB,EAAE;SAClH,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,CAAU,EAAE,IAAY,EAAE,CAAoB;IACvE,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;IACpD,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CACrC,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CACpE,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAe,EACf,IAAY,EACZ,MAAqB;IAErB,IAAI,CAAC,aAAa,CAAC,oBAAoB,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5E,MAAM,CAAC,GAAG,SAAS,CAAC,oBAAoB,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,EAAE;QACrF,GAAG,EAAE,IAAI;QACT,QAAQ,EAAE,OAAO;QACjB,OAAO,EAAE,OAAO;QAChB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;KAC5B,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAwC,CAAC;QAC3E,MAAM,KAAK,GAAc,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChF,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,MAAqB;IACjE,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,4EAA4E;IAC5E,yCAAyC;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,wEAAwE;QACxE,6DAA6D;QAC7D,SAAS,CACP,OAAO,EACP,CAAC,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAChI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAChF,CAAC;QACF,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC;QACrD,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAE1D,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,IAAI,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,kBAAkB;YAAE,OAAO,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACjC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACpE,OAAO;gBACL,IAAI;gBACJ,MAAM,EAAE,iBAA0B;gBAClC,KAAK,EAAE,IAAI,CAAC,MAAM;gBAClB,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,kBAAkB;gBAC/C,SAAS,EAAE,GAAG,IAAI,4BAA4B;gBAC9C,OAAO,EAAE,GAAG,IAAI,uBAAuB,IAAI,CAAC,MAAM,wBAAwB,MAAM,CAAC,UAAU,CAAC,kBAAkB,GAAG;aAClH,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/dist/types/config.d.ts

@@ -963,16 +963,19 @@ export declare const WorktreeSchema: z.ZodObject<{
     directory: z.ZodDefault<z.ZodString>;
     branchPrefix: z.ZodDefault<z.ZodString>;
     autoCleanup: z.ZodDefault<z.ZodBoolean>;
+    enforce: z.ZodDefault<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     enabled: boolean;
     directory: string;
     branchPrefix: string;
     autoCleanup: boolean;
+    enforce: boolean;
 }, {
     enabled?: boolean | undefined;
     directory?: string | undefined;
     branchPrefix?: string | undefined;
     autoCleanup?: boolean | undefined;
+    enforce?: boolean | undefined;
 }>;
 export declare const DroidSchema: z.ZodObject<{
     name: z.ZodString;
@@ -1768,11 +1771,44 @@ export declare const DeliverySchema: z.ZodObject<{
     escalateAfterFailures: z.ZodOptional<z.ZodNumber>;
     escalateAfterEdits: z.ZodOptional<z.ZodNumber>;
     complexEditChars: z.ZodOptional<z.ZodNumber>;
+    model: z.ZodOptional<z.ZodString>;
+    routing: z.ZodOptional<z.ZodString>;
+    criticality: z.ZodOptional<z.ZodEnum<["money", "normal", "sandbox"]>>;
+    gates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodOptional<z.ZodString>;
+        cmd: z.ZodString;
+        cwd: z.ZodOptional<z.ZodString>;
+        scope: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        required: z.ZodDefault<z.ZodBoolean>;
+        tier: z.ZodOptional<z.ZodEnum<["fast", "runtime", "integration", "deploy-dev", "final", "ci", "deploy-staging", "deploy-prod"]>>;
+        timeoutSec: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        required: boolean;
+        cmd: string;
+        name?: string | undefined;
+        cwd?: string | undefined;
+        scope?: string[] | undefined;
+        tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+        timeoutSec?: number | undefined;
+    }, {
+        id: string;
+        cmd: string;
+        name?: string | undefined;
+        required?: boolean | undefined;
+        cwd?: string | undefined;
+        scope?: string[] | undefined;
+        tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+        timeoutSec?: number | undefined;
+    }>, "many">>;
 }, "strip", z.ZodTypeAny, {
     enforcement: "off" | "block" | "advisory" | "escalate";
     localMode: "block" | "advisory" | "escalate" | "deliver";
     runtimeVerify: boolean;
     userValidation: "off" | "block" | "advisory";
+    routing?: string | undefined;
+    model?: string | undefined;
     maxRunMinutes?: number | undefined;
     dockerFeatureCheck?: boolean | undefined;
     trivialEditChars?: number | undefined;
@@ -1781,7 +1817,20 @@ export declare const DeliverySchema: z.ZodObject<{
     escalateAfterFailures?: number | undefined;
     escalateAfterEdits?: number | undefined;
     complexEditChars?: number | undefined;
+    criticality?: "money" | "normal" | "sandbox" | undefined;
+    gates?: {
+        id: string;
+        required: boolean;
+        cmd: string;
+        name?: string | undefined;
+        cwd?: string | undefined;
+        scope?: string[] | undefined;
+        tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+        timeoutSec?: number | undefined;
+    }[] | undefined;
 }, {
+    routing?: string | undefined;
+    model?: string | undefined;
     enforcement?: "off" | "block" | "advisory" | "escalate" | undefined;
     localMode?: "block" | "advisory" | "escalate" | "deliver" | undefined;
     runtimeVerify?: boolean | undefined;
@@ -1794,6 +1843,17 @@ export declare const DeliverySchema: z.ZodObject<{
     escalateAfterFailures?: number | undefined;
     escalateAfterEdits?: number | undefined;
     complexEditChars?: number | undefined;
+    criticality?: "money" | "normal" | "sandbox" | undefined;
+    gates?: {
+        id: string;
+        cmd: string;
+        name?: string | undefined;
+        required?: boolean | undefined;
+        cwd?: string | undefined;
+        scope?: string[] | undefined;
+        tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+        timeoutSec?: number | undefined;
+    }[] | undefined;
 }>;
 export declare const DesignSchema: z.ZodObject<{
     enabled: z.ZodDefault<z.ZodBoolean>;
@@ -2510,16 +2570,19 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         directory: z.ZodDefault<z.ZodString>;
         branchPrefix: z.ZodDefault<z.ZodString>;
         autoCleanup: z.ZodDefault<z.ZodBoolean>;
+        enforce: z.ZodDefault<z.ZodBoolean>;
     }, "strip", z.ZodTypeAny, {
         enabled: boolean;
         directory: string;
         branchPrefix: string;
         autoCleanup: boolean;
+        enforce: boolean;
     }, {
         enabled?: boolean | undefined;
         directory?: string | undefined;
         branchPrefix?: string | undefined;
         autoCleanup?: boolean | undefined;
+        enforce?: boolean | undefined;
     }>>;
     droids: z.ZodOptional<z.ZodArray<z.ZodObject<{
         name: z.ZodString;
@@ -3186,11 +3249,44 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         escalateAfterFailures: z.ZodOptional<z.ZodNumber>;
         escalateAfterEdits: z.ZodOptional<z.ZodNumber>;
         complexEditChars: z.ZodOptional<z.ZodNumber>;
+        model: z.ZodOptional<z.ZodString>;
+        routing: z.ZodOptional<z.ZodString>;
+        criticality: z.ZodOptional<z.ZodEnum<["money", "normal", "sandbox"]>>;
+        gates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            id: z.ZodString;
+            name: z.ZodOptional<z.ZodString>;
+            cmd: z.ZodString;
+            cwd: z.ZodOptional<z.ZodString>;
+            scope: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+            required: z.ZodDefault<z.ZodBoolean>;
+            tier: z.ZodOptional<z.ZodEnum<["fast", "runtime", "integration", "deploy-dev", "final", "ci", "deploy-staging", "deploy-prod"]>>;
+            timeoutSec: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            id: string;
+            required: boolean;
+            cmd: string;
+            name?: string | undefined;
+            cwd?: string | undefined;
+            scope?: string[] | undefined;
+            tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+            timeoutSec?: number | undefined;
+        }, {
+            id: string;
+            cmd: string;
+            name?: string | undefined;
+            required?: boolean | undefined;
+            cwd?: string | undefined;
+            scope?: string[] | undefined;
+            tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+            timeoutSec?: number | undefined;
+        }>, "many">>;
     }, "strip", z.ZodTypeAny, {
         enforcement: "off" | "block" | "advisory" | "escalate";
         localMode: "block" | "advisory" | "escalate" | "deliver";
         runtimeVerify: boolean;
         userValidation: "off" | "block" | "advisory";
+        routing?: string | undefined;
+        model?: string | undefined;
         maxRunMinutes?: number | undefined;
         dockerFeatureCheck?: boolean | undefined;
         trivialEditChars?: number | undefined;
@@ -3199,7 +3295,20 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         escalateAfterFailures?: number | undefined;
         escalateAfterEdits?: number | undefined;
         complexEditChars?: number | undefined;
+        criticality?: "money" | "normal" | "sandbox" | undefined;
+        gates?: {
+            id: string;
+            required: boolean;
+            cmd: string;
+            name?: string | undefined;
+            cwd?: string | undefined;
+            scope?: string[] | undefined;
+            tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+            timeoutSec?: number | undefined;
+        }[] | undefined;
     }, {
+        routing?: string | undefined;
+        model?: string | undefined;
         enforcement?: "off" | "block" | "advisory" | "escalate" | undefined;
         localMode?: "block" | "advisory" | "escalate" | "deliver" | undefined;
         runtimeVerify?: boolean | undefined;
@@ -3212,6 +3321,17 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         escalateAfterFailures?: number | undefined;
         escalateAfterEdits?: number | undefined;
         complexEditChars?: number | undefined;
+        criticality?: "money" | "normal" | "sandbox" | undefined;
+        gates?: {
+            id: string;
+            cmd: string;
+            name?: string | undefined;
+            required?: boolean | undefined;
+            cwd?: string | undefined;
+            scope?: string[] | undefined;
+            tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+            timeoutSec?: number | undefined;
+        }[] | undefined;
     }>>;
     design: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -3452,6 +3572,7 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         directory: string;
         branchPrefix: string;
         autoCleanup: boolean;
+        enforce: boolean;
     } | undefined;
     droids?: {
         name: string;
@@ -3584,6 +3705,8 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         localMode: "block" | "advisory" | "escalate" | "deliver";
         runtimeVerify: boolean;
         userValidation: "off" | "block" | "advisory";
+        routing?: string | undefined;
+        model?: string | undefined;
         maxRunMinutes?: number | undefined;
         dockerFeatureCheck?: boolean | undefined;
         trivialEditChars?: number | undefined;
@@ -3592,6 +3715,17 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         escalateAfterFailures?: number | undefined;
         escalateAfterEdits?: number | undefined;
         complexEditChars?: number | undefined;
+        criticality?: "money" | "normal" | "sandbox" | undefined;
+        gates?: {
+            id: string;
+            required: boolean;
+            cmd: string;
+            name?: string | undefined;
+            cwd?: string | undefined;
+            scope?: string[] | undefined;
+            tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+            timeoutSec?: number | undefined;
+        }[] | undefined;
     } | undefined;
     reactor?: {
         enabled: boolean;
@@ -3773,6 +3907,7 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         directory?: string | undefined;
         branchPrefix?: string | undefined;
         autoCleanup?: boolean | undefined;
+        enforce?: boolean | undefined;
     } | undefined;
     droids?: {
         name: string;
@@ -3901,6 +4036,8 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         } | undefined;
     } | undefined;
     delivery?: {
+        routing?: string | undefined;
+        model?: string | undefined;
         enforcement?: "off" | "block" | "advisory" | "escalate" | undefined;
         localMode?: "block" | "advisory" | "escalate" | "deliver" | undefined;
         runtimeVerify?: boolean | undefined;
@@ -3913,6 +4050,17 @@ export declare const AgentContextConfigSchema: z.ZodObject<{
         escalateAfterFailures?: number | undefined;
         escalateAfterEdits?: number | undefined;
         complexEditChars?: number | undefined;
+        criticality?: "money" | "normal" | "sandbox" | undefined;
+        gates?: {
+            id: string;
+            cmd: string;
+            name?: string | undefined;
+            required?: boolean | undefined;
+            cwd?: string | undefined;
+            scope?: string[] | undefined;
+            tier?: "fast" | "runtime" | "integration" | "deploy-dev" | "final" | "ci" | "deploy-staging" | "deploy-prod" | undefined;
+            timeoutSec?: number | undefined;
+        }[] | undefined;
     } | undefined;
     reactor?: {
         enabled?: boolean | undefined;