@mmerterden/multi-agent-pipeline 12.6.0 → 12.7.0

package/pipeline/scripts/triage-memory.mjs

@@ -53,8 +53,10 @@ for (let i = 1; i < argv.length; i++) {
   if (a.startsWith("--")) {
     const k = a.slice(2);
     const v = argv[i + 1];
-    if (v !== undefined && !v.startsWith("--")) { flags[k] = v; i++; }
-    else flags[k] = true;
+    if (v !== undefined && !v.startsWith("--")) {
+      flags[k] = v;
+      i++;
+    } else flags[k] = true;
   }
 }
 
@@ -75,7 +77,7 @@ function repoSlug() {
     const commonDir = execFileSync(
       "git",
       ["rev-parse", "--path-format=absolute", "--git-common-dir"],
-      { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] }
+      { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] },
     ).trim();
     if (commonDir) {
       const base = basename(commonDir);
@@ -83,19 +85,30 @@ function repoSlug() {
       const slug = basename(root);
       if (slug) return slug;
     }
-  } catch { /* not a git repo, or git too old for --path-format */ }
+  } catch {
+    /* not a git repo, or git too old for --path-format */
+  }
   try {
     const top = execFileSync("git", ["rev-parse", "--show-toplevel"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
     }).trim();
     if (top) return basename(top);
-  } catch { /* not a git repo */ }
+  } catch {
+    /* not a git repo */
+  }
   return "default";
 }
 
 function corpusPath(slug) {
-  return join(homedir(), ".claude", "memory", "multi-agent", slug || repoSlug(), "triage-corpus.jsonl");
+  return join(
+    homedir(),
+    ".claude",
+    "memory",
+    "multi-agent",
+    slug || repoSlug(),
+    "triage-corpus.jsonl",
+  );
 }
 
 function ensureDir(p) {
@@ -107,10 +120,12 @@ function ensureDir(p) {
 // flagged stale so a reused finding is verified, not trusted blindly.
 function repoTop() {
   try {
-    return execFileSync("git", ["rev-parse", "--show-toplevel"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"],
-    }).trim() || null;
+    return (
+      execFileSync("git", ["rev-parse", "--show-toplevel"], {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+      }).trim() || null
+    );
   } catch {
     return null;
   }
@@ -119,27 +134,84 @@ function repoTop() {
 function fileSha(file, top) {
   if (!file || !top) return null;
   try {
-    return execFileSync("git", ["hash-object", "--", file], {
-      cwd: top,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"],
-    }).trim() || null;
+    return (
+      execFileSync("git", ["hash-object", "--", file], {
+        cwd: top,
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "ignore"],
+      }).trim() || null
+    );
   } catch {
     return null;
   }
 }
 
 const STOP = new Set([
-  "the","a","an","and","or","but","of","in","on","at","to","for","with","by","is","are",
-  "be","been","being","this","that","these","those","it","its","as","not","no","do","does",
-  "did","done","have","has","had","will","would","should","could","may","might","can","cant",
-  "don","wont","you","your","i","we","they","them","he","she","his","her","our","their"
+  "the",
+  "a",
+  "an",
+  "and",
+  "or",
+  "but",
+  "of",
+  "in",
+  "on",
+  "at",
+  "to",
+  "for",
+  "with",
+  "by",
+  "is",
+  "are",
+  "be",
+  "been",
+  "being",
+  "this",
+  "that",
+  "these",
+  "those",
+  "it",
+  "its",
+  "as",
+  "not",
+  "no",
+  "do",
+  "does",
+  "did",
+  "done",
+  "have",
+  "has",
+  "had",
+  "will",
+  "would",
+  "should",
+  "could",
+  "may",
+  "might",
+  "can",
+  "cant",
+  "don",
+  "wont",
+  "you",
+  "your",
+  "i",
+  "we",
+  "they",
+  "them",
+  "he",
+  "she",
+  "his",
+  "her",
+  "our",
+  "their",
 ]);
 
 function tokenize(text) {
   if (!text) return new Set();
   const out = new Set();
-  for (const m of String(text).toLowerCase().matchAll(/[a-z][a-z0-9_]{2,}/g)) {
+  for (const m of String(text)
+    .toLowerCase()
+    .matchAll(/[a-z][a-z0-9_]{2,}/g)) {
     if (!STOP.has(m[0])) out.add(m[0]);
   }
   return out;
@@ -175,8 +247,11 @@ function readCorpus(slug) {
   const rows = [];
   for (const line of raw.split("\n")) {
     if (!line.trim()) continue;
-    try { rows.push(JSON.parse(line)); }
-    catch { /* skip corrupted line */ }
+    try {
+      rows.push(JSON.parse(line));
+    } catch {
+      /* skip corrupted line */
+    }
   }
   return rows;
 }
@@ -198,18 +273,23 @@ function ingest() {
   const slug = repoSlug();
 
   let triage;
-  try { triage = JSON.parse(readFileSync(triagePath, "utf8")); }
-  catch (e) { die(`cannot parse triage JSON: ${e.message}`, 1); }
+  try {
+    triage = JSON.parse(readFileSync(triagePath, "utf8"));
+  } catch (e) {
+    die(`cannot parse triage JSON: ${e.message}`, 1);
+  }
 
   const ts = new Date().toISOString();
   const top = repoTop();
   const corpus = readCorpus(slug);
-  const seen = new Set(corpus.map((r) => `${r.task_id}::${r.classification}::${r.file}::${r.issue}`));
+  const seen = new Set(
+    corpus.map((r) => `${r.task_id}::${r.classification}::${r.file}::${r.issue}`),
+  );
 
   const buckets = [
-    ["accepted",  triage.accepted  || []],
-    ["deferred",  (triage.deferred || []).map((d) => ({ ...d.finding, _reason: d.reason }))],
-    ["rejected",  (triage.rejected || []).map((d) => ({ ...d.finding, _reason: d.reason }))],
+    ["accepted", triage.accepted || []],
+    ["deferred", (triage.deferred || []).map((d) => ({ ...d.finding, _reason: d.reason }))],
+    ["rejected", (triage.rejected || []).map((d) => ({ ...d.finding, _reason: d.reason }))],
   ];
 
   let written = 0;
@@ -283,12 +363,16 @@ function query() {
         score: Math.round(score * 1000) / 1000,
       };
     });
-  process.stdout.write(JSON.stringify({ ok: true, slug, total: filtered.length, hits: ranked }) + "\n");
+  process.stdout.write(
+    JSON.stringify({ ok: true, slug, total: filtered.length, hits: ranked }) + "\n",
+  );
   process.exit(0);
 }
 
 function pathCmd() {
-  process.stdout.write(corpusPath(flags["repo-slug"] ? String(flags["repo-slug"]) : repoSlug()) + "\n");
+  process.stdout.write(
+    corpusPath(flags["repo-slug"] ? String(flags["repo-slug"]) : repoSlug()) + "\n",
+  );
   process.exit(0);
 }
 
@@ -313,10 +397,18 @@ function statsCmd() {
 }
 
 switch (SUB) {
-  case "ingest": ingest(); break;
-  case "query":  query();  break;
-  case "path":   pathCmd(); break;
-  case "stats":  statsCmd(); break;
+  case "ingest":
+    ingest();
+    break;
+  case "query":
+    query();
+    break;
+  case "path":
+    pathCmd();
+    break;
+  case "stats":
+    statsCmd();
+    break;
   default:
     process.stderr.write("usage: triage-memory.mjs <ingest|query|path|stats> [flags]\n");
     process.exit(64);

package/pipeline/scripts/uninstall.mjs

@@ -64,10 +64,7 @@ export const PIPELINE_AGENT_FILES = [
  * Non-multi-agent core skills the installer ships from
  * pipeline/skills/shared/core/ (the multi-agent* dirs are matched by prefix).
  */
-export const PIPELINE_CORE_SKILL_DIRS = [
-  "apple-archive-compliance",
-  "google-play-compliance",
-];
+export const PIPELINE_CORE_SKILL_DIRS = ["apple-archive-compliance", "google-play-compliance"];
 
 const flags = process.argv.slice(2).filter((a) => a !== "uninstall");
 
@@ -79,14 +76,15 @@ const TOOL_FLAGS = [
   "--antigravity",
   "--codex",
 ];
-const explicitlyTargeted =
-  flags.some((f) => TOOL_FLAGS.includes(f)) || flags.includes("--all");
+const explicitlyTargeted = flags.some((f) => TOOL_FLAGS.includes(f)) || flags.includes("--all");
 
 const forClaude = flags.includes("--claude") || flags.includes("--all") || !explicitlyTargeted;
 const forCopilot = flags.includes("--copilot") || flags.includes("--all") || !explicitlyTargeted;
 const forCursor = flags.includes("--cursor") || flags.includes("--all") || !explicitlyTargeted;
-const forCopilotChat = flags.includes("--copilot-chat") || flags.includes("--all") || !explicitlyTargeted;
-const forAntigravity = flags.includes("--antigravity") || flags.includes("--all") || !explicitlyTargeted;
+const forCopilotChat =
+  flags.includes("--copilot-chat") || flags.includes("--all") || !explicitlyTargeted;
+const forAntigravity =
+  flags.includes("--antigravity") || flags.includes("--all") || !explicitlyTargeted;
 const forCodex = flags.includes("--codex") || flags.includes("--all") || !explicitlyTargeted;
 
 const dryRun = flags.includes("--dry-run");
@@ -194,8 +192,7 @@ function legacyTrailingContent(section) {
 function stripManagedBlock(filePath) {
   if (!existsSync(filePath)) return false;
   const content = readFileSync(filePath, "utf-8");
-  const re =
-    /\s*<!-- multi-agent-pipeline:begin -->[\s\S]*?<!-- multi-agent-pipeline:end -->\s*/m;
+  const re = /\s*<!-- multi-agent-pipeline:begin -->[\s\S]*?<!-- multi-agent-pipeline:end -->\s*/m;
   if (!re.test(content)) {
     // Copilot's install (install/copilot.mjs) does not wrap the block in
     // begin/end markers. v11.4.1+ writes an explicit end marker after the
@@ -276,8 +273,10 @@ function cleanClaudeSettings(settingsPath) {
     // entry as ours either way.
     settings.hooks.PreToolUse = settings.hooks.PreToolUse.filter(
       (h) =>
-        !((h.matcher === "Bash" || h.matcher === "Bash(git commit:*)") &&
-          h.hooks?.some((sub) => sub.command?.includes("pre-commit-check.sh"))),
+        !(
+          (h.matcher === "Bash" || h.matcher === "Bash(git commit:*)") &&
+          h.hooks?.some((sub) => sub.command?.includes("pre-commit-check.sh"))
+        ),
     );
     if (settings.hooks.PreToolUse.length < before) touched = true;
     if (settings.hooks.PreToolUse.length === 0) delete settings.hooks.PreToolUse;
@@ -313,12 +312,28 @@ export async function main() {
   if (dryRun) console.log("  [DRY-RUN] Nothing will be modified.");
   console.log("");
   console.log("  Targets:");
-  if (forClaude) console.log("    - Claude Code (~/.claude/{commands/multi-agent, scripts, multi-agent-refs, schemas, lib} + pipeline skills + pipeline agent files)");
-  if (forCopilot) console.log("    - Copilot CLI (~/.copilot/{scripts, schemas, lib} + pipeline skills + pipeline agent files + copilot-instructions.md section)");
-  if (forCursor) console.log(`    - Cursor (${adapterTarget}/.cursor/rules/multi-agent-* + .cursorrules)`);
-  if (forCopilotChat) console.log(`    - GitHub Copilot Chat (${adapterTarget}/.github/copilot-instructions.md block + .github/instructions/multi-agent-*)`);
-  if (forAntigravity) console.log(`    - Antigravity (${adapterTarget}/.agent/rules + .agent/workflows + AGENTS.md block + .agent/mcp_config.json)`);
-  if (forCodex) console.log("    - OpenAI Codex CLI (~/.codex/prompts/multi-agent.md + AGENTS.md block + config.toml mcp block)");
+  if (forClaude)
+    console.log(
+      "    - Claude Code (~/.claude/{commands/multi-agent, scripts, multi-agent-refs, schemas, lib} + pipeline skills + pipeline agent files)",
+    );
+  if (forCopilot)
+    console.log(
+      "    - Copilot CLI (~/.copilot/{scripts, schemas, lib} + pipeline skills + pipeline agent files + copilot-instructions.md section)",
+    );
+  if (forCursor)
+    console.log(`    - Cursor (${adapterTarget}/.cursor/rules/multi-agent-* + .cursorrules)`);
+  if (forCopilotChat)
+    console.log(
+      `    - GitHub Copilot Chat (${adapterTarget}/.github/copilot-instructions.md block + .github/instructions/multi-agent-*)`,
+    );
+  if (forAntigravity)
+    console.log(
+      `    - Antigravity (${adapterTarget}/.agent/rules + .agent/workflows + AGENTS.md block + .agent/mcp_config.json)`,
+    );
+  if (forCodex)
+    console.log(
+      "    - OpenAI Codex CLI (~/.codex/prompts/multi-agent.md + AGENTS.md block + config.toml mcp block)",
+    );
   console.log("");
   if (allData) {
     console.log("  FULL CLEANUP (--all-data) also removes:");
@@ -327,7 +342,9 @@ export async function main() {
     console.log("");
   }
   console.log("  PRESERVED (never touched):");
-  console.log("    - Personal access tokens in OS credential store (Keychain / Credential Manager / libsecret)");
+  console.log(
+    "    - Personal access tokens in OS credential store (Keychain / Credential Manager / libsecret)",
+  );
   console.log("    - ~/.claude/CLAUDE.md (your customizations)");
   console.log("    - ~/.claude/rules/ (user-owned; installed write-if-missing, never overwritten)");
   if (!allData) console.log("    - ~/.claude/multi-agent-preferences.json (your settings)");
@@ -357,8 +374,18 @@ export async function main() {
     // (e.g. the git-attribution rule) -- asymmetric data loss. Leave rules
     // in place on uninstall, exactly like CLAUDE.md and preferences.
     const skills = join(CLAUDE, "skills");
-    let n = rmMatchingDirs(skills, (name) => name === "multi-agent" || name.startsWith("multi-agent-"));
-    n += rmMatchingDirs(skills, (name) => name === "figma-ios" || name === "figma-android" || name === "figma-common" || name === "figma-to-component");
+    let n = rmMatchingDirs(
+      skills,
+      (name) => name === "multi-agent" || name.startsWith("multi-agent-"),
+    );
+    n += rmMatchingDirs(
+      skills,
+      (name) =>
+        name === "figma-ios" ||
+        name === "figma-android" ||
+        name === "figma-common" ||
+        name === "figma-to-component",
+    );
     n += rmMatchingDirs(skills, (name) => PIPELINE_CORE_SKILL_DIRS.includes(name));
     if (n > 0) console.log(`    removed ${n} skill dir(s) under ${skills}`);
     rmIfExists(join(skills, ".skills-index.json"));
@@ -380,8 +407,18 @@ export async function main() {
     rmIfExists(join(COP, "lib"));
     rmIfExists(join(COP, ".pipeline-version"));
     const skills = join(COP, "skills");
-    let n = rmMatchingDirs(skills, (name) => name === "multi-agent" || name.startsWith("multi-agent-"));
-    n += rmMatchingDirs(skills, (name) => name === "figma-ios" || name === "figma-android" || name === "figma-common" || name === "figma-to-component");
+    let n = rmMatchingDirs(
+      skills,
+      (name) => name === "multi-agent" || name.startsWith("multi-agent-"),
+    );
+    n += rmMatchingDirs(
+      skills,
+      (name) =>
+        name === "figma-ios" ||
+        name === "figma-android" ||
+        name === "figma-common" ||
+        name === "figma-to-component",
+    );
     n += rmMatchingDirs(skills, (name) => PIPELINE_CORE_SKILL_DIRS.includes(name));
     if (n > 0) console.log(`    removed ${n} skill dir(s) under ${skills}`);
     rmIfExists(join(skills, ".skills-index.json"));
@@ -434,7 +471,9 @@ export async function main() {
     if (n > 0) console.log(`    removed ${n} .agent file(s)`);
     stripManagedBlock(join(adapterTarget, "AGENTS.md"));
     if (existsSync(join(adapterTarget, ".agent", "mcp_config.json")))
-      console.log("    note: .agent/mcp_config.json left untouched (may hold user servers)  -  remove pipeline entries manually if present");
+      console.log(
+        "    note: .agent/mcp_config.json left untouched (may hold user servers)  -  remove pipeline entries manually if present",
+      );
   }
 
   if (forCodex && HOME) {
@@ -444,23 +483,29 @@ export async function main() {
     rmIfExists(join(CODEX, "prompts", "multi-agent.md"));
     stripManagedBlock(join(CODEX, "AGENTS.md"));
     if (existsSync(join(CODEX, "config.toml")))
-      console.log("    note: ~/.codex/config.toml left untouched (may hold user MCP servers)  -  remove pipeline entries manually if present");
+      console.log(
+        "    note: ~/.codex/config.toml left untouched (may hold user MCP servers)  -  remove pipeline entries manually if present",
+      );
   }
 
   console.log("");
   console.log("  ✓ Pipeline removed.");
   if (!allData) {
     console.log("");
-    console.log("  Kept your pipeline settings + logs. To remove those too, re-run with --all-data.");
+    console.log(
+      "  Kept your pipeline settings + logs. To remove those too, re-run with --all-data.",
+    );
   } else {
     console.log("");
-    console.log("  Full cleanup done. Still on disk (user-owned, remove by hand if you want a bare system):");
+    console.log(
+      "  Full cleanup done. Still on disk (user-owned, remove by hand if you want a bare system):",
+    );
     console.log("    - ~/.claude/CLAUDE.md");
     console.log("    - ~/.claude/rules/");
   }
   console.log("");
   console.log("  Personal access tokens were NOT touched. Inspect with:");
-  console.log("    macOS:   security find-generic-password -s \"<service>\" -w");
+  console.log('    macOS:   security find-generic-password -s "<service>" -w');
   console.log("    Windows: cmdkey /list:<target>");
   console.log("    Linux:   secret-tool search service <service>");
   console.log("");
@@ -470,8 +515,7 @@ export async function main() {
 
 // Run only when executed directly (node uninstall.mjs). Guard lets tests
 // import the exported constants without triggering the uninstall.
-const isMainModule =
-  process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
+const isMainModule = process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href;
 if (isMainModule) {
   main().catch((e) => {
     console.error("uninstall failed:", e.message);

package/pipeline/scripts/validate-analysis-doc.mjs

@@ -131,7 +131,9 @@ function main() {
       headingBlobLower.includes("ui test") ||
       headingBlobLower.includes("ui-test");
     if (!hasUi) {
-      errors.push("front-matter ui_tests: true but no Section 15.6 UI test scenarios found (Locked 31)");
+      errors.push(
+        "front-matter ui_tests: true but no Section 15.6 UI test scenarios found (Locked 31)",
+      );
     }
   }
   if (a11yDepth === "full") {
@@ -140,7 +142,9 @@ function main() {
       headingBlobLower.includes("walkthrough") ||
       headingBlobLower.includes("gezinme");
     if (!hasWalkthrough) {
-      errors.push("front-matter a11y_depth: full but no Section 16.2 screen-reader walkthrough found");
+      errors.push(
+        "front-matter a11y_depth: full but no Section 16.2 screen-reader walkthrough found",
+      );
     }
   }
 
@@ -156,7 +160,9 @@ function main() {
 
   // 4. Placeholder whole-section bodies (Locked 2)
   if (/^\s*(TBD|Not applicable|N\/A)\s*$/im.test(text)) {
-    warns.push('a line is a bare "TBD"/"Not applicable"/"N/A" body; omit the section instead (Locked 2)');
+    warns.push(
+      'a line is a bare "TBD"/"Not applicable"/"N/A" body; omit the section instead (Locked 2)',
+    );
   }
 
   // 5. Traceability (Full mode only, Locked 31)
@@ -173,7 +179,9 @@ function main() {
     }
     for (const [id, n] of counts) {
       if (n < 2) {
-        warns.push(`business rule ${id} is defined but never referenced downstream (test/acceptance/analytics) - Locked 31 traceability`);
+        warns.push(
+          `business rule ${id} is defined but never referenced downstream (test/acceptance/analytics) - Locked 31 traceability`,
+        );
       }
     }
   }
@@ -182,7 +190,9 @@ function main() {
   for (const w of warns) console.error(`WARN: ${w}`);
   for (const e of errors) console.error(`ERROR: ${e}`);
   if (errors.length > 0) {
-    console.error(`validate-analysis-doc: FAIL (${errors.length} error(s), ${warns.length} warning(s))`);
+    console.error(
+      `validate-analysis-doc: FAIL (${errors.length} error(s), ${warns.length} warning(s))`,
+    );
     process.exit(1);
   }
   if (strict && warns.length > 0) {

package/pipeline/scripts/validate-diff-risk.mjs

@@ -49,22 +49,27 @@ function validate(obj) {
   if (typeof obj !== "object" || obj === null || Array.isArray(obj)) {
     return ["root must be an object"];
   }
-  if (obj.schemaVersion !== "1.1.0") errors.push(`schemaVersion must be "1.1.0", got ${JSON.stringify(obj.schemaVersion)}`);
+  if (obj.schemaVersion !== "1.1.0")
+    errors.push(`schemaVersion must be "1.1.0", got ${JSON.stringify(obj.schemaVersion)}`);
 
   if (typeof obj.task !== "object" || obj.task === null) {
     errors.push("task must be an object");
   } else {
-    if (typeof obj.task.base !== "string" || !obj.task.base.length) errors.push("task.base must be a non-empty string");
-    if (typeof obj.task.head !== "string" || !obj.task.head.length) errors.push("task.head must be a non-empty string");
+    if (typeof obj.task.base !== "string" || !obj.task.base.length)
+      errors.push("task.base must be a non-empty string");
+    if (typeof obj.task.head !== "string" || !obj.task.head.length)
+      errors.push("task.head must be a non-empty string");
   }
 
   if (typeof obj.totals !== "object" || obj.totals === null) {
     errors.push("totals must be an object");
   } else {
     for (const k of ["files", "loc_added", "loc_removed"]) {
-      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0) errors.push(`totals.${k} must be a non-negative integer`);
+      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0)
+        errors.push(`totals.${k} must be a non-negative integer`);
     }
-    if (typeof obj.totals.max_score !== "number" || obj.totals.max_score < 0) errors.push("totals.max_score must be a non-negative number");
+    if (typeof obj.totals.max_score !== "number" || obj.totals.max_score < 0)
+      errors.push("totals.max_score must be a non-negative number");
   }
 
   if (!Array.isArray(obj.files)) {
@@ -73,25 +78,33 @@ function validate(obj) {
     obj.files.forEach((row, i) => {
       const p = `files[${i}]`;
       if (typeof row !== "object" || row === null) {
-        errors.push(`${p} must be an object`); return;
+        errors.push(`${p} must be an object`);
+        return;
       }
-      if (typeof row.path !== "string" || !row.path.length) errors.push(`${p}.path must be a non-empty string`);
-      if (typeof row.score !== "number" || row.score < 0) errors.push(`${p}.score must be a non-negative number`);
+      if (typeof row.path !== "string" || !row.path.length)
+        errors.push(`${p}.path must be a non-empty string`);
+      if (typeof row.score !== "number" || row.score < 0)
+        errors.push(`${p}.score must be a non-negative number`);
       for (const k of ["loc_added", "loc_removed"]) {
-        if (!Number.isInteger(row[k]) || row[k] < 0) errors.push(`${p}.${k} must be a non-negative integer`);
+        if (!Number.isInteger(row[k]) || row[k] < 0)
+          errors.push(`${p}.${k} must be a non-negative integer`);
       }
       if (!Array.isArray(row.signals)) errors.push(`${p}.signals must be an array`);
-      else row.signals.forEach((s, j) => {
-        const sp = `${p}.signals[${j}]`;
-        if (!ALLOWED_SIGNALS.has(s.name)) errors.push(`${sp}.name "${s.name}" not in allowed set`);
-        if (typeof s.weight !== "number") errors.push(`${sp}.weight must be a number`);
-        if (typeof s.value !== "number") errors.push(`${sp}.value must be a number`);
-      });
+      else
+        row.signals.forEach((s, j) => {
+          const sp = `${p}.signals[${j}]`;
+          if (!ALLOWED_SIGNALS.has(s.name))
+            errors.push(`${sp}.name "${s.name}" not in allowed set`);
+          if (typeof s.weight !== "number") errors.push(`${sp}.weight must be a number`);
+          if (typeof s.value !== "number") errors.push(`${sp}.value must be a number`);
+        });
     });
     // Sort invariant
     for (let i = 1; i < obj.files.length; i++) {
       if (obj.files[i].score > obj.files[i - 1].score) {
-        errors.push(`files[] must be sorted by score descending (row ${i} score ${obj.files[i].score} > row ${i - 1} score ${obj.files[i - 1].score})`);
+        errors.push(
+          `files[] must be sorted by score descending (row ${i} score ${obj.files[i].score} > row ${i - 1} score ${obj.files[i - 1].score})`,
+        );
         break;
       }
     }
@@ -103,8 +116,9 @@ function validate(obj) {
 (async () => {
   const raw = await readInput();
   let obj;
-  try { obj = JSON.parse(raw); }
-  catch (e) {
+  try {
+    obj = JSON.parse(raw);
+  } catch (e) {
     console.log(JSON.stringify({ ok: false, errors: [`JSON parse error: ${e.message}`] }));
     process.exit(1);
   }

package/pipeline/scripts/validate-test-gap.mjs

@@ -34,15 +34,18 @@ function readInput() {
 
 function validate(obj) {
   const errors = [];
-  if (typeof obj !== "object" || obj === null || Array.isArray(obj)) return ["root must be an object"];
+  if (typeof obj !== "object" || obj === null || Array.isArray(obj))
+    return ["root must be an object"];
   if (obj.schemaVersion !== "1.0.0") errors.push(`schemaVersion must be "1.0.0"`);
-  if (!ALLOWED_STACK.has(obj.stack)) errors.push(`stack must be one of ${Array.from(ALLOWED_STACK).join(",")}`);
+  if (!ALLOWED_STACK.has(obj.stack))
+    errors.push(`stack must be one of ${Array.from(ALLOWED_STACK).join(",")}`);
 
   if (typeof obj.totals !== "object" || obj.totals === null) {
     errors.push("totals must be an object");
   } else {
     for (const k of ["sourcesScanned", "testsScanned", "gapCount"]) {
-      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0) errors.push(`totals.${k} must be a non-negative integer`);
+      if (!Number.isInteger(obj.totals[k]) || obj.totals[k] < 0)
+        errors.push(`totals.${k} must be a non-negative integer`);
     }
     if (typeof obj.totals.gapBySeverity !== "object" || obj.totals.gapBySeverity === null) {
       errors.push("totals.gapBySeverity must be an object");
@@ -60,12 +63,17 @@ function validate(obj) {
   } else {
     obj.gaps.forEach((g, i) => {
       const p = `gaps[${i}]`;
-      if (typeof g !== "object" || g === null) { errors.push(`${p} must be object`); return; }
-      if (typeof g.sourcePath !== "string" || !g.sourcePath.length) errors.push(`${p}.sourcePath required`);
+      if (typeof g !== "object" || g === null) {
+        errors.push(`${p} must be object`);
+        return;
+      }
+      if (typeof g.sourcePath !== "string" || !g.sourcePath.length)
+        errors.push(`${p}.sourcePath required`);
       if (typeof g.symbol !== "string" || !g.symbol.length) errors.push(`${p}.symbol required`);
       if (typeof g.kind !== "string" || !g.kind.length) errors.push(`${p}.kind required`);
       if (!ALLOWED_SEVERITY.has(g.severity)) errors.push(`${p}.severity invalid: ${g.severity}`);
-      if (!Array.isArray(g.expectedTestPaths) || g.expectedTestPaths.length === 0) errors.push(`${p}.expectedTestPaths must be a non-empty array`);
+      if (!Array.isArray(g.expectedTestPaths) || g.expectedTestPaths.length === 0)
+        errors.push(`${p}.expectedTestPaths must be a non-empty array`);
       if (typeof g.hint !== "string") errors.push(`${p}.hint must be a string`);
     });
   }
@@ -76,7 +84,9 @@ function validate(obj) {
 (async () => {
   const raw = await readInput();
   let obj;
-  try { obj = JSON.parse(raw); } catch (e) {
+  try {
+    obj = JSON.parse(raw);
+  } catch (e) {
     console.log(JSON.stringify({ ok: false, errors: [`JSON parse error: ${e.message}`] }));
     process.exit(1);
   }