@odavl/guardian 2.0.0 → 2.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (172) hide show
  1. package/CHANGELOG.md +210 -210
  2. package/LICENSE +21 -21
  3. package/README.md +297 -184
  4. package/bin/guardian.js +2242 -2221
  5. package/config/README.md +59 -59
  6. package/config/guardian.config.json +54 -54
  7. package/config/guardian.policy.json +12 -12
  8. package/config/profiles/docs.yaml +18 -18
  9. package/config/profiles/ecommerce.yaml +17 -17
  10. package/config/profiles/landing-demo.yaml +16 -16
  11. package/config/profiles/marketing.yaml +18 -18
  12. package/config/profiles/saas.yaml +21 -21
  13. package/flows/example-login-flow.json +36 -36
  14. package/flows/example-signup-flow.json +44 -44
  15. package/package.json +124 -116
  16. package/policies/enterprise.json +12 -12
  17. package/policies/landing-demo.json +22 -22
  18. package/policies/saas.json +12 -12
  19. package/policies/startup.json +12 -12
  20. package/src/enterprise/audit-logger.js +166 -166
  21. package/src/enterprise/pdf-exporter.js +267 -267
  22. package/src/enterprise/rbac-gate.js +142 -142
  23. package/src/enterprise/rbac.js +239 -239
  24. package/src/enterprise/site-manager.js +180 -180
  25. package/src/founder/feedback-system.js +156 -156
  26. package/src/founder/founder-tracker.js +213 -213
  27. package/src/founder/usage-signals.js +141 -141
  28. package/src/guardian/action-hints.js +439 -439
  29. package/src/guardian/alert-ledger.js +121 -121
  30. package/src/guardian/artifact-sanitizer.js +56 -56
  31. package/src/guardian/attempt-engine.js +1069 -1029
  32. package/src/guardian/attempt-registry.js +267 -267
  33. package/src/guardian/attempt-relevance.js +106 -106
  34. package/src/guardian/attempt-reporter.js +513 -507
  35. package/src/guardian/attempt.js +274 -273
  36. package/src/guardian/attempts-filter.js +63 -63
  37. package/src/guardian/auto-attempt-builder.js +283 -283
  38. package/src/guardian/baseline-registry.js +177 -177
  39. package/src/guardian/baseline-reporter.js +143 -143
  40. package/src/guardian/baseline-storage.js +285 -285
  41. package/src/guardian/baseline.js +535 -534
  42. package/src/guardian/behavioral-signals.js +261 -261
  43. package/src/guardian/breakage-intelligence.js +224 -224
  44. package/src/guardian/browser-pool.js +131 -131
  45. package/src/guardian/browser.js +119 -119
  46. package/src/guardian/canonical-truth.js +308 -308
  47. package/src/guardian/ci-cli.js +121 -121
  48. package/src/guardian/ci-gate.js +96 -96
  49. package/src/guardian/ci-mode.js +15 -15
  50. package/src/guardian/ci-output.js +55 -38
  51. package/src/guardian/cli-summary.js +102 -102
  52. package/src/guardian/confidence-signals.js +251 -251
  53. package/src/guardian/config-loader.js +161 -161
  54. package/src/guardian/config-validator.js +285 -283
  55. package/src/guardian/coverage-model.js +239 -239
  56. package/src/guardian/coverage-packs.js +58 -58
  57. package/src/guardian/crawler.js +142 -142
  58. package/src/guardian/data-guardian-detector.js +189 -189
  59. package/src/guardian/decision-authority.js +746 -725
  60. package/src/guardian/detection-layers.js +271 -271
  61. package/src/guardian/determinism.js +146 -146
  62. package/src/guardian/discovery-engine.js +661 -661
  63. package/src/guardian/drift-detector.js +100 -100
  64. package/src/guardian/enhanced-html-reporter.js +522 -522
  65. package/src/guardian/env-guard.js +128 -127
  66. package/src/guardian/error-clarity.js +399 -399
  67. package/src/guardian/export-contract.js +196 -196
  68. package/src/guardian/fail-safe.js +212 -212
  69. package/src/guardian/failure-intelligence.js +173 -173
  70. package/src/guardian/failure-taxonomy.js +169 -169
  71. package/src/guardian/final-outcome.js +206 -206
  72. package/src/guardian/first-run-profile.js +89 -89
  73. package/src/guardian/first-run.js +65 -67
  74. package/src/guardian/flag-validator.js +111 -111
  75. package/src/guardian/flow-executor.js +641 -639
  76. package/src/guardian/flow-registry.js +67 -67
  77. package/src/guardian/honesty.js +394 -394
  78. package/src/guardian/html-reporter.js +416 -416
  79. package/src/guardian/human-intent-resolver.js +296 -296
  80. package/src/guardian/human-interaction-model.js +351 -351
  81. package/src/guardian/human-journey-context.js +184 -184
  82. package/src/guardian/human-navigator.js +544 -544
  83. package/src/guardian/human-reporter.js +435 -431
  84. package/src/guardian/index.js +226 -221
  85. package/src/guardian/init-command.js +143 -143
  86. package/src/guardian/intent-detector.js +148 -146
  87. package/src/guardian/journey-definitions.js +132 -132
  88. package/src/guardian/journey-scan-cli.js +142 -145
  89. package/src/guardian/journey-scanner.js +583 -583
  90. package/src/guardian/junit-reporter.js +281 -281
  91. package/src/guardian/language-detection.js +99 -99
  92. package/src/guardian/live-alert.js +56 -56
  93. package/src/guardian/live-baseline-compare.js +146 -146
  94. package/src/guardian/live-cli.js +95 -95
  95. package/src/guardian/live-guardian.js +210 -210
  96. package/src/guardian/live-scheduler-runner.js +137 -137
  97. package/src/guardian/live-scheduler-state.js +167 -168
  98. package/src/guardian/live-scheduler.js +146 -146
  99. package/src/guardian/live-state.js +110 -110
  100. package/src/guardian/market-criticality.js +335 -335
  101. package/src/guardian/market-reporter.js +577 -577
  102. package/src/guardian/network-trace.js +178 -178
  103. package/src/guardian/obs-logger.js +110 -110
  104. package/src/guardian/observed-capabilities.js +427 -427
  105. package/src/guardian/output-contract.js +154 -0
  106. package/src/guardian/output-readability.js +264 -264
  107. package/src/guardian/parallel-executor.js +116 -116
  108. package/src/guardian/path-safety.js +56 -56
  109. package/src/guardian/pattern-analyzer.js +348 -348
  110. package/src/guardian/policy.js +432 -434
  111. package/src/guardian/prelaunch-gate.js +193 -193
  112. package/src/guardian/prerequisite-checker.js +101 -101
  113. package/src/guardian/preset-loader.js +152 -157
  114. package/src/guardian/profile-loader.js +96 -96
  115. package/src/guardian/reality.js +3025 -2826
  116. package/src/guardian/realworld-scenarios.js +94 -94
  117. package/src/guardian/reporter.js +167 -167
  118. package/src/guardian/retry-policy.js +123 -123
  119. package/src/guardian/root-cause-analysis.js +171 -171
  120. package/src/guardian/rules-engine.js +558 -558
  121. package/src/guardian/run-artifacts.js +212 -212
  122. package/src/guardian/run-cleanup.js +207 -207
  123. package/src/guardian/run-export.js +522 -522
  124. package/src/guardian/run-latest.js +90 -90
  125. package/src/guardian/run-list.js +211 -211
  126. package/src/guardian/run-summary.js +20 -20
  127. package/src/guardian/runtime-root.js +246 -246
  128. package/src/guardian/safety.js +248 -248
  129. package/src/guardian/scan-presets.js +133 -149
  130. package/src/guardian/screenshot.js +152 -152
  131. package/src/guardian/secret-hygiene.js +44 -44
  132. package/src/guardian/selector-fallbacks.js +394 -394
  133. package/src/guardian/semantic-contact-detection.js +255 -255
  134. package/src/guardian/semantic-contact-finder.js +201 -201
  135. package/src/guardian/semantic-targets.js +234 -234
  136. package/src/guardian/site-intelligence.js +588 -588
  137. package/src/guardian/site-introspection.js +257 -257
  138. package/src/guardian/sitemap.js +225 -225
  139. package/src/guardian/smoke.js +283 -258
  140. package/src/guardian/snapshot-schema.js +177 -290
  141. package/src/guardian/snapshot.js +430 -397
  142. package/src/guardian/stability-scorer.js +169 -169
  143. package/src/guardian/success-evaluator.js +214 -214
  144. package/src/guardian/template-command.js +184 -184
  145. package/src/guardian/text-formatters.js +426 -426
  146. package/src/guardian/timeout-profiles.js +57 -57
  147. package/src/guardian/truth/attempt.contract.js +158 -0
  148. package/src/guardian/truth/decision.contract.js +275 -0
  149. package/src/guardian/truth/snapshot.contract.js +363 -0
  150. package/src/guardian/validators.js +323 -323
  151. package/src/guardian/verdict-card.js +474 -474
  152. package/src/guardian/verdict-clarity.js +298 -298
  153. package/src/guardian/verdict-policy.js +363 -363
  154. package/src/guardian/verdict.js +333 -333
  155. package/src/guardian/verdicts.js +79 -74
  156. package/src/guardian/visual-diff.js +247 -247
  157. package/src/guardian/wait-for-outcome.js +119 -119
  158. package/src/guardian/watch-runner.js +181 -181
  159. package/src/guardian/watchdog-diff.js +167 -167
  160. package/src/guardian/webhook.js +206 -206
  161. package/src/payments/stripe-checkout.js +169 -169
  162. package/src/plans/plan-definitions.js +148 -148
  163. package/src/plans/plan-manager.js +211 -211
  164. package/src/plans/usage-tracker.js +210 -210
  165. package/src/recipes/recipe-engine.js +188 -188
  166. package/src/recipes/recipe-failure-analysis.js +159 -159
  167. package/src/recipes/recipe-registry.js +134 -134
  168. package/src/recipes/recipe-runtime.js +507 -507
  169. package/src/recipes/recipe-store.js +410 -410
  170. package/SECURITY.md +0 -77
  171. package/VERSIONING.md +0 -100
  172. package/guardian-contract-v1.md +0 -502
@@ -1,67 +1,65 @@
1
- /**
2
- * Guardian First-Run Detection & Initialization
3
- * Deterministically detects first run and coordinates welcome behavior.
4
- */
5
-
6
- const fs = require('fs');
7
- const path = require('path');
8
-
9
- const STATE_FILE = '.odavl-guardian/.first-run-state.json';
10
-
11
- function hasRunBefore(stateDir = '.odavl-guardian') {
12
- try {
13
- const filePath = path.join(stateDir, '.first-run-state.json');
14
- return fs.existsSync(filePath);
15
- } catch {
16
- return false;
17
- }
18
- }
19
-
20
- function markAsRun(stateDir = '.odavl-guardian') {
21
- try {
22
- fs.mkdirSync(stateDir, { recursive: true });
23
- const filePath = path.join(stateDir, '.first-run-state.json');
24
- fs.writeFileSync(filePath, JSON.stringify({ firstRunAt: new Date().toISOString() }, null, 2));
25
- } catch (e) {
26
- // Silently ignore state write failures (e.g., permission issues)
27
- }
28
- }
29
-
30
- function isFirstRun(stateDir = '.odavl-guardian') {
31
- return !hasRunBefore(stateDir);
32
- }
33
-
34
- function printWelcome(label = 'ODAVL Guardian') {
35
- const lines = [
36
- '',
37
- `Welcome to ${label}!`,
38
- 'Running first-time setup…',
39
- ''
40
- ];
41
- console.log(lines.join('\n'));
42
- }
43
-
44
- function printFirstRunHint() {
45
- console.log("\nTip: Try 'guardian smoke <url>' for a fast CI-ready check.\n");
46
- }
47
-
48
- function printFirstRunIntroIfNeeded(config, argv) {
49
- // Detect quiet mode from config or CLI args
50
- const isQuiet = (config && config.output && config.output.quiet) || argv.includes('--quiet');
51
- const isCI = process.env.CI === 'true';
52
-
53
- // Only print welcome on first run and not in CI/quiet mode
54
- if (isFirstRun() && !isQuiet && !isCI) {
55
- printWelcome();
56
- printFirstRunHint();
57
- }
58
- }
59
-
60
- module.exports = {
61
- isFirstRun,
62
- hasRunBefore,
63
- markAsRun,
64
- printWelcome,
65
- printFirstRunHint,
66
- printFirstRunIntroIfNeeded
67
- };
1
+ /**
2
+ * Guardian First-Run Detection & Initialization
3
+ * Deterministically detects first run and coordinates welcome behavior.
4
+ */
5
+
6
+ const fs = require('fs');
7
+ const path = require('path');
8
+
9
+ function hasRunBefore(stateDir = '.odavl-guardian') {
10
+ try {
11
+ const filePath = path.join(stateDir, '.first-run-state.json');
12
+ return fs.existsSync(filePath);
13
+ } catch {
14
+ return false;
15
+ }
16
+ }
17
+
18
+ function markAsRun(stateDir = '.odavl-guardian') {
19
+ try {
20
+ fs.mkdirSync(stateDir, { recursive: true });
21
+ const filePath = path.join(stateDir, '.first-run-state.json');
22
+ fs.writeFileSync(filePath, JSON.stringify({ firstRunAt: new Date().toISOString() }, null, 2));
23
+ } catch (e) {
24
+ // Silently ignore state write failures (e.g., permission issues)
25
+ }
26
+ }
27
+
28
+ function isFirstRun(stateDir = '.odavl-guardian') {
29
+ return !hasRunBefore(stateDir);
30
+ }
31
+
32
+ function printWelcome(label = 'ODAVL Guardian') {
33
+ const lines = [
34
+ '',
35
+ `Welcome to ${label}!`,
36
+ 'Running first-time setup…',
37
+ ''
38
+ ];
39
+ console.log(lines.join('\n'));
40
+ }
41
+
42
+ function printFirstRunHint() {
43
+ console.log("\nTip: Try 'guardian smoke <url>' for a fast CI-ready check.\n");
44
+ }
45
+
46
+ function printFirstRunIntroIfNeeded(config, argv) {
47
+ // Detect quiet mode from config or CLI args
48
+ const isQuiet = (config && config.output && config.output.quiet) || argv.includes('--quiet');
49
+ const isCI = process.env.CI === 'true';
50
+
51
+ // Only print welcome on first run and not in CI/quiet mode
52
+ if (isFirstRun() && !isQuiet && !isCI) {
53
+ printWelcome();
54
+ printFirstRunHint();
55
+ }
56
+ }
57
+
58
+ module.exports = {
59
+ isFirstRun,
60
+ hasRunBefore,
61
+ markAsRun,
62
+ printWelcome,
63
+ printFirstRunHint,
64
+ printFirstRunIntroIfNeeded
65
+ };
@@ -1,111 +1,111 @@
1
- /**
2
- * Guardian Flag Validation
3
- * Early validation of flags and options to catch errors before module load.
4
- */
5
-
6
- const VALID_SUBCOMMANDS = [
7
- 'init', 'protect', 'reality', 'attempt', 'baseline',
8
- 'presets', 'template', 'list', 'cleanup', 'evaluate', 'version', 'flow', 'scan', 'smoke', 'check',
9
- 'journey-scan', 'journey', 'live', 'plan', 'upgrade', 'ci', 'feedback',
10
- 'sites', 'users', 'audit', 'export', 'recipe'
11
- ];
12
-
13
- const VALID_GLOBAL_FLAGS = [
14
- '--help', '-h', '--version', '-v', '--debug'
15
- ];
16
-
17
- const VALID_SUBCOMMAND_FLAGS = {
18
- 'scan': ['--url', '--preset', '--artifacts', '--policy', '--headful', '--no-trace', '--no-screenshots', '--watch', '-w', '--fast', '--fail-fast', '--timeout-profile', '--attempts', '--parallel', '--help', '-h'],
19
- 'journey-scan': ['--url', '--preset', '--out', '--artifacts', '--timeout', '--headful', '--help', '-h'],
20
- 'journey': ['--url', '--preset', '--out', '--artifacts', '--timeout', '--headful', '--help', '-h'],
21
- 'live': ['--url', '--preset', '--out', '--artifacts', '--timeout', '--interval', '--cooldown', '--headful', '--help', '-h'],
22
- 'protect': ['--url', '--policy', '--webhook', '--watch', '-w', '--fast', '--fail-fast', '--timeout-profile', '--attempts', '--parallel', '--help', '-h'],
23
- 'reality': ['--url', '--attempts', '--artifacts', '--policy', '--preset', '--discover', '--universal', '--webhook', '--headful', '--watch', '-w', '--no-trace', '--no-screenshots', '--fast', '--fail-fast', '--timeout-profile', '--parallel', '--help', '-h', '--max-pages', '--max-depth', '--timeout'],
24
- 'attempt': ['--url', '--attempt', '--artifacts', '--headful', '--no-trace', '--no-screenshots', '--help', '-h'],
25
- 'smoke': ['--url', '--headful', '--budget-ms', '--help', '-h'],
26
- 'check': ['--url', '--headful', '--budget-ms', '--help', '-h'],
27
- 'baseline': [],
28
- 'init': ['--preset', '--help', '-h'],
29
- 'list': ['--artifacts', '--failed', '--site', '--limit', '--help', '-h'],
30
- 'cleanup': ['--artifacts', '--older-than', '--keep-latest', '--failed-only', '--help', '-h'],
31
- 'presets': ['--help', '-h'],
32
- 'template': ['--output', '--help', '-h'],
33
- 'sites': ['--project', '--help', '-h'],
34
- 'users': ['--help', '-h'],
35
- 'audit': ['--limit', '--action', '--user', '--help', '-h'],
36
- 'export': ['--format', '--output', '--help', '-h'],
37
- 'recipe': ['--url', '--file', '--out', '--force', '--help', '-h']
38
- };
39
-
40
- function validateFlags(argv) {
41
- const args = argv.slice(2);
42
- if (args.length === 0) return { valid: true };
43
-
44
- const subcommand = args[0];
45
-
46
- // Check if it's a global flag or help
47
- if (VALID_GLOBAL_FLAGS.includes(subcommand)) {
48
- return { valid: true };
49
- }
50
-
51
- // Check if subcommand is valid
52
- if (subcommand && !subcommand.startsWith('-') && !VALID_SUBCOMMANDS.includes(subcommand)) {
53
- return {
54
- valid: false,
55
- error: `Unknown command '${subcommand}'`,
56
- hint: `Valid commands: ${VALID_SUBCOMMANDS.slice(0, 5).join(', ')}, …`
57
- };
58
- }
59
-
60
- // If we have a valid subcommand, validate its flags
61
- if (VALID_SUBCOMMANDS.includes(subcommand)) {
62
- const validFlags = VALID_SUBCOMMAND_FLAGS[subcommand] || [];
63
- const subArgs = args.slice(1);
64
-
65
- for (let i = 0; i < subArgs.length; i++) {
66
- const arg = subArgs[i];
67
- if (arg.startsWith('--') || arg.startsWith('-')) {
68
- const flagName = arg.split('=')[0]; // Handle --flag=value
69
- if (!validFlags.includes(flagName)) {
70
- return {
71
- valid: false,
72
- error: `Unknown flag '${flagName}' for command '${subcommand}'`,
73
- hint: `Run 'guardian ${subcommand} --help' for valid options.`
74
- };
75
- }
76
- // Check if flag expects a value
77
- if ((flagName.includes('--') && !arg.includes('=')) || (flagName === '-w')) {
78
- const expectsValue = ![
79
- '--headful', '--watch', '-w', '--discover', '--universal',
80
- '--no-trace', '--no-screenshots', '--help', '-h', '--fast', '--fail-fast'
81
- ].includes(flagName);
82
-
83
- if (expectsValue && i + 1 < subArgs.length && subArgs[i + 1].startsWith('-')) {
84
- return {
85
- valid: false,
86
- error: `Flag '${flagName}' requires a value`,
87
- hint: `Usage: guardian ${subcommand} ${flagName} <value>`
88
- };
89
- }
90
- }
91
- }
92
- }
93
- }
94
-
95
- return { valid: true };
96
- }
97
-
98
- function reportFlagError(validation) {
99
- if (!validation.valid) {
100
- console.error(`Error: ${validation.error}`);
101
- if (validation.hint) {
102
- console.error(`Hint: ${validation.hint}`);
103
- }
104
- }
105
- }
106
-
107
- module.exports = {
108
- validateFlags,
109
- reportFlagError,
110
- VALID_SUBCOMMANDS
111
- };
1
+ /**
2
+ * Guardian Flag Validation
3
+ * Early validation of flags and options to catch errors before module load.
4
+ */
5
+
6
+ const VALID_SUBCOMMANDS = [
7
+ 'init', 'protect', 'reality', 'attempt', 'baseline',
8
+ 'presets', 'template', 'list', 'cleanup', 'evaluate', 'version', 'flow', 'scan', 'smoke', 'check',
9
+ 'journey-scan', 'journey', 'live', 'plan', 'upgrade', 'ci', 'feedback',
10
+ 'sites', 'users', 'audit', 'export', 'recipe'
11
+ ];
12
+
13
+ const VALID_GLOBAL_FLAGS = [
14
+ '--help', '-h', '--version', '-v', '--debug'
15
+ ];
16
+
17
+ const VALID_SUBCOMMAND_FLAGS = {
18
+ 'scan': ['--url', '--preset', '--artifacts', '--policy', '--headful', '--no-trace', '--no-screenshots', '--watch', '-w', '--fast', '--fail-fast', '--timeout-profile', '--attempts', '--parallel', '--help', '-h'],
19
+ 'journey-scan': ['--url', '--preset', '--out', '--artifacts', '--timeout', '--headful', '--help', '-h'],
20
+ 'journey': ['--url', '--preset', '--out', '--artifacts', '--timeout', '--headful', '--help', '-h'],
21
+ 'live': ['--url', '--preset', '--out', '--artifacts', '--timeout', '--interval', '--cooldown', '--headful', '--help', '-h'],
22
+ 'protect': ['--url', '--policy', '--webhook', '--watch', '-w', '--fast', '--fail-fast', '--timeout-profile', '--attempts', '--parallel', '--help', '-h'],
23
+ 'reality': ['--url', '--attempts', '--artifacts', '--policy', '--preset', '--discover', '--universal', '--webhook', '--headful', '--watch', '-w', '--no-trace', '--no-screenshots', '--fast', '--fail-fast', '--timeout-profile', '--parallel', '--help', '-h', '--max-pages', '--max-depth', '--timeout'],
24
+ 'attempt': ['--url', '--attempt', '--artifacts', '--headful', '--no-trace', '--no-screenshots', '--help', '-h'],
25
+ 'smoke': ['--url', '--headful', '--budget-ms', '--help', '-h'],
26
+ 'check': ['--url', '--headful', '--budget-ms', '--help', '-h'],
27
+ 'baseline': [],
28
+ 'init': ['--preset', '--help', '-h'],
29
+ 'list': ['--artifacts', '--failed', '--site', '--limit', '--help', '-h'],
30
+ 'cleanup': ['--artifacts', '--older-than', '--keep-latest', '--failed-only', '--help', '-h'],
31
+ 'presets': ['--help', '-h'],
32
+ 'template': ['--output', '--help', '-h'],
33
+ 'sites': ['--project', '--help', '-h'],
34
+ 'users': ['--help', '-h'],
35
+ 'audit': ['--limit', '--action', '--user', '--help', '-h'],
36
+ 'export': ['--format', '--output', '--help', '-h'],
37
+ 'recipe': ['--url', '--file', '--out', '--force', '--help', '-h']
38
+ };
39
+
40
+ function validateFlags(argv) {
41
+ const args = argv.slice(2);
42
+ if (args.length === 0) return { valid: true };
43
+
44
+ const subcommand = args[0];
45
+
46
+ // Check if it's a global flag or help
47
+ if (VALID_GLOBAL_FLAGS.includes(subcommand)) {
48
+ return { valid: true };
49
+ }
50
+
51
+ // Check if subcommand is valid
52
+ if (subcommand && !subcommand.startsWith('-') && !VALID_SUBCOMMANDS.includes(subcommand)) {
53
+ return {
54
+ valid: false,
55
+ error: `Unknown command '${subcommand}'`,
56
+ hint: `Valid commands: ${VALID_SUBCOMMANDS.slice(0, 5).join(', ')}, …`
57
+ };
58
+ }
59
+
60
+ // If we have a valid subcommand, validate its flags
61
+ if (VALID_SUBCOMMANDS.includes(subcommand)) {
62
+ const validFlags = VALID_SUBCOMMAND_FLAGS[subcommand] || [];
63
+ const subArgs = args.slice(1);
64
+
65
+ for (let i = 0; i < subArgs.length; i++) {
66
+ const arg = subArgs[i];
67
+ if (arg.startsWith('--') || arg.startsWith('-')) {
68
+ const flagName = arg.split('=')[0]; // Handle --flag=value
69
+ if (!validFlags.includes(flagName)) {
70
+ return {
71
+ valid: false,
72
+ error: `Unknown flag '${flagName}' for command '${subcommand}'`,
73
+ hint: `Run 'guardian ${subcommand} --help' for valid options.`
74
+ };
75
+ }
76
+ // Check if flag expects a value
77
+ if ((flagName.includes('--') && !arg.includes('=')) || (flagName === '-w')) {
78
+ const expectsValue = ![
79
+ '--headful', '--watch', '-w', '--discover', '--universal',
80
+ '--no-trace', '--no-screenshots', '--help', '-h', '--fast', '--fail-fast'
81
+ ].includes(flagName);
82
+
83
+ if (expectsValue && i + 1 < subArgs.length && subArgs[i + 1].startsWith('-')) {
84
+ return {
85
+ valid: false,
86
+ error: `Flag '${flagName}' requires a value`,
87
+ hint: `Usage: guardian ${subcommand} ${flagName} <value>`
88
+ };
89
+ }
90
+ }
91
+ }
92
+ }
93
+ }
94
+
95
+ return { valid: true };
96
+ }
97
+
98
+ function reportFlagError(validation) {
99
+ if (!validation.valid) {
100
+ console.error(`Error: ${validation.error}`);
101
+ if (validation.hint) {
102
+ console.error(`Hint: ${validation.hint}`);
103
+ }
104
+ }
105
+ }
106
+
107
+ module.exports = {
108
+ validateFlags,
109
+ reportFlagError,
110
+ VALID_SUBCOMMANDS
111
+ };