@oscharko-dev/keiko-contracts 0.2.0

package/dist/unit-test-events.d.ts

@@ -0,0 +1,87 @@
+import type { TestFramework } from "./workspace.js";
+import type { VerificationStatus } from "./verification.js";
+export type WorkflowStatus = "completed" | "dry-run" | "rejected" | "cancelled" | "failed";
+export type FileNamingStyle = "sibling" | "mirrored" | "unknown";
+export interface WorkflowLimits {
+    readonly maxModelCalls: number;
+    readonly maxRetries: number;
+    readonly contextBudgetBytes: number;
+    readonly maxBytesPerFile: number;
+}
+export declare const DEFAULT_WORKFLOW_LIMITS: WorkflowLimits;
+interface BaseWorkflowEvent {
+    readonly schemaVersion: "1";
+    readonly runId: string;
+    readonly fingerprint: string;
+    readonly seq: number;
+    readonly ts: number;
+}
+export interface WorkflowStartedEvent extends BaseWorkflowEvent {
+    readonly type: "workflow:started";
+    readonly workflowId: "unit-test-generation";
+    readonly modelId: string;
+    readonly applyEnabled: boolean;
+    readonly limits: WorkflowLimits;
+}
+export interface ConventionsDetectedEvent extends BaseWorkflowEvent {
+    readonly type: "conventions:detected";
+    readonly framework: TestFramework;
+    readonly testDirs: readonly string[];
+    readonly fileNamingStyle: FileNamingStyle;
+}
+export interface ContextSelectedEvent extends BaseWorkflowEvent {
+    readonly type: "context:selected";
+    readonly entryCount: number;
+    readonly usedBytes: number;
+    readonly budgetBytes: number;
+    readonly droppedForBudget: number;
+}
+export interface ModelCallStartedEvent extends BaseWorkflowEvent {
+    readonly type: "workflow:model:call:started";
+    readonly attempt: number;
+    readonly contextBytes: number;
+}
+export interface ModelCallCompletedEvent extends BaseWorkflowEvent {
+    readonly type: "workflow:model:call:completed";
+    readonly attempt: number;
+    readonly finishReason: string;
+    readonly promptTokens: number;
+    readonly completionTokens: number;
+    readonly latencyMs: number;
+}
+export interface PatchValidatedEvent extends BaseWorkflowEvent {
+    readonly type: "patch:validated";
+    readonly ok: boolean;
+    readonly patchBytes: number;
+    readonly filesChanged: number;
+    readonly rejectionCode?: string | undefined;
+}
+export interface PatchAppliedEvent extends BaseWorkflowEvent {
+    readonly type: "workflow:patch:applied";
+    readonly changedFiles: number;
+    readonly created: number;
+    readonly deleted: number;
+}
+export interface VerificationResultEvent extends BaseWorkflowEvent {
+    readonly type: "workflow:verification:result";
+    readonly overallStatus: VerificationStatus;
+    readonly stepCount: number;
+    readonly passedCount: number;
+    readonly durationMs: number;
+}
+export interface WorkflowCompletedEvent extends BaseWorkflowEvent {
+    readonly type: "workflow:completed";
+    readonly status: WorkflowStatus;
+    readonly durationMs: number;
+}
+export interface WorkflowFailedEvent extends BaseWorkflowEvent {
+    readonly type: "workflow:failed";
+    readonly errorCode: string;
+    readonly message: string;
+}
+export type WorkflowEvent = WorkflowStartedEvent | ConventionsDetectedEvent | ContextSelectedEvent | ModelCallStartedEvent | ModelCallCompletedEvent | PatchValidatedEvent | PatchAppliedEvent | VerificationResultEvent | WorkflowCompletedEvent | WorkflowFailedEvent;
+export interface WorkflowEventSink {
+    readonly emit: (event: WorkflowEvent) => void;
+}
+export {};
+//# sourceMappingURL=unit-test-events.d.ts.map

package/dist/unit-test-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"unit-test-events.d.ts","sourceRoot":"","sources":["../src/unit-test-events.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AACpD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAI5D,MAAM,MAAM,cAAc,GACtB,WAAW,GACX,SAAS,GACT,UAAU,GACV,WAAW,GACX,QAAQ,CAAC;AAIb,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AAIjE,MAAM,WAAW,cAAc;IAE7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAE/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IAEpC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,eAAO,MAAM,uBAAuB,EAAE,cAK5B,CAAC;AAIX,UAAU,iBAAiB;IACzB,QAAQ,CAAC,aAAa,EAAE,GAAG,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,sBAAsB,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAGD,MAAM,WAAW,wBAAyB,SAAQ,iBAAiB;IACjE,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;CAC3C;AAGD,MAAM,WAAW,oBAAqB,SAAQ,iBAAiB;IAC7D,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAGD,MAAM,WAAW,qBAAsB,SAAQ,iBAAiB;IAC9D,QAAQ,CAAC,IAAI,EAAE,6BAA6B,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAGD,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC;IAC/C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAGD,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAE9B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAGD,MAAM,WAAW,iBAAkB,SAAQ,iBAAiB;IAC1D,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAGD,MAAM,WAAW,uBAAwB,SAAQ,iBAAiB;IAChE,QAAQ,CAAC,IAAI,EAAE,8BAA8B,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,sBAAuB,SAAQ,iBAAiB;IAC/D,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,WAAW,mBAAoB,SAAQ,iBAAiB;IAC5D,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GACrB,oBAAoB,GACpB,wBAAwB,GACxB,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,GACvB,mBAAmB,GACnB,iBAAiB,GACjB,uBAAuB,GACvB,sBAAsB,GACtB,mBAAmB,CAAC;AAExB,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,aAAa,KAAK,IAAI,CAAC;CAC/C"}

package/dist/unit-test-events.js

@@ -0,0 +1,14 @@
+// The WorkflowEvent discriminated union and its BaseWorkflowEvent envelope (ADR-0008 D4) plus the
+// sibling status / limits / file-naming-style names the event types reference. The envelope reuses
+// the harness BaseEvent field shape ({ schemaVersion, runId, fingerprint, seq, ts }) by structural
+// convention — NOT a TypeScript import — so the #10 audit ledger and #13 UI can narrow workflow
+// events with the same envelope logic they apply to HarnessEvent. This union is SEPARATE from
+// HarnessEvent because the workflow does not pass through the harness state machine. No runtime
+// logic lives here beyond the frozen DEFAULT_WORKFLOW_LIMITS table. Every SENSITIVE field is
+// redacted before emit.
+export const DEFAULT_WORKFLOW_LIMITS = {
+    maxModelCalls: 3,
+    maxRetries: 2,
+    contextBudgetBytes: 65_536,
+    maxBytesPerFile: 8_192,
+};

package/dist/verification-summary.d.ts

@@ -0,0 +1,38 @@
+import type { ResourceLimitDecision, VerificationResult, VerificationStatus } from "./verification.js";
+export interface VerificationResultSummary {
+    readonly kind: VerificationResult["kind"];
+    readonly scriptName: string | undefined;
+    readonly command: string;
+    readonly status: VerificationStatus;
+    readonly exitCode: number | null;
+    readonly durationMs: number;
+    readonly truncated: boolean;
+    readonly outputSummary: string;
+    readonly appliedLimits: readonly ResourceLimitDecision[];
+    readonly detail: string | undefined;
+}
+export interface VerificationSummary {
+    readonly workspaceRoot: string;
+    readonly overallStatus: VerificationStatus;
+    readonly durationMs: number;
+    readonly counts: Readonly<Record<VerificationStatus, number>>;
+    readonly results: readonly VerificationResultSummary[];
+}
+export interface AuditResultEntry {
+    readonly kind: VerificationResult["kind"];
+    readonly scriptName: string | undefined;
+    readonly command: string;
+    readonly status: VerificationStatus;
+    readonly exitCode: number | null;
+    readonly durationMs: number;
+    readonly truncated: boolean;
+    readonly appliedLimits: readonly ResourceLimitDecision[];
+}
+export interface VerificationAuditSummary {
+    readonly workspaceRoot: string;
+    readonly overallStatus: VerificationStatus;
+    readonly durationMs: number;
+    readonly counts: Readonly<Record<VerificationStatus, number>>;
+    readonly results: readonly AuditResultEntry[];
+}
+//# sourceMappingURL=verification-summary.d.ts.map

package/dist/verification-summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification-summary.d.ts","sourceRoot":"","sources":["../src/verification-summary.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,EACnB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACxD;AAID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC/C"}

package/dist/verification-summary.js

@@ -0,0 +1,5 @@
+// Pure type interfaces for the verification summary layer (ADR-0007). The runtime functions
+// (buildVerificationSummary, summarizeForAudit, renderMarkdownSummary) stay in
+// packages/keiko-verification/src/summary.ts. These types were extracted to contracts (issue #158) so the
+// audit ledger (#10) and evidence layer can reference them without a circular dependency.
+export {};

package/dist/verification.d.ts

@@ -0,0 +1,64 @@
+import type { NetworkPolicy } from "./tools.js";
+export type VerificationKind = "test" | "targeted-test" | "typecheck" | "lint" | "build";
+export type VerificationStatus = "passed" | "failed" | "skipped" | "denied" | "timed-out" | "cancelled" | "resource-exceeded";
+export type ResourceDimension = "wall-time" | "output-size" | "memory" | "network";
+export interface ResourceLimitDecision {
+    readonly dimension: ResourceDimension;
+    readonly limit: number | string;
+    readonly enforced: boolean;
+    readonly note?: string | undefined;
+    readonly breached?: boolean | undefined;
+}
+export interface VerificationResourceLimits {
+    readonly wallTimeMs: number;
+    readonly maxOutputBytes: number;
+    readonly maxMemoryBytes: number | undefined;
+    readonly network: NetworkPolicy;
+}
+export declare const DEFAULT_VERIFICATION_LIMITS: VerificationResourceLimits;
+export interface VerificationStep {
+    readonly kind: VerificationKind;
+    readonly scriptName: string | undefined;
+    readonly command: string;
+    readonly args: readonly string[];
+    readonly limits: VerificationResourceLimits;
+    readonly skipReason?: string | undefined;
+}
+export interface VerificationPlan {
+    readonly workspaceRoot: string;
+    readonly steps: readonly VerificationStep[];
+}
+export interface VerificationResult {
+    readonly kind: VerificationKind;
+    readonly scriptName: string | undefined;
+    readonly command: string;
+    readonly args: readonly string[];
+    readonly status: VerificationStatus;
+    readonly exitCode: number | null;
+    readonly signal: string | null;
+    readonly durationMs: number;
+    readonly truncated: boolean;
+    readonly redacted: boolean;
+    readonly outputSummary: string;
+    readonly appliedLimits: readonly ResourceLimitDecision[];
+    readonly detail?: string | undefined;
+}
+export interface VerificationReport {
+    readonly workspaceRoot: string;
+    readonly results: readonly VerificationResult[];
+    readonly overallStatus: VerificationStatus;
+    readonly startedAtMs: number;
+    readonly durationMs: number;
+    readonly counts: Readonly<Record<VerificationStatus, number>>;
+}
+export interface ScriptCatalog {
+    readonly scripts: Readonly<Record<string, string>>;
+    readonly mapping: ScriptMapping;
+}
+export interface ScriptMapping {
+    readonly test: string | undefined;
+    readonly typecheck: string | undefined;
+    readonly lint: string | undefined;
+    readonly build: string | undefined;
+}
+//# sourceMappingURL=verification.d.ts.map

package/dist/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../src/verification.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAIhD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,eAAe,GAAG,WAAW,GAAG,MAAM,GAAG,OAAO,CAAC;AAKzF,MAAM,MAAM,kBAAkB,GAC1B,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,QAAQ,GACR,WAAW,GACX,WAAW,GACX,mBAAmB,CAAC;AAIxB,MAAM,MAAM,iBAAiB,GAAG,WAAW,GAAG,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AAKnF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,SAAS,EAAE,iBAAiB,CAAC;IAEtC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAEhC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAID,eAAO,MAAM,2BAA2B,EAAE,0BAKhC,CAAC;AAIX,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAGhC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAC;IAE5C,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAE5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAE3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,aAAa,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAEzD,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,kBAAkB,EAAE,CAAC;IAChD,QAAQ,CAAC,aAAa,EAAE,kBAAkB,CAAC;IAC3C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC,CAAC;CAC/D;AAKD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;CACjC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CACpC"}

package/dist/verification.js

@@ -0,0 +1,13 @@
+// All verification-layer interfaces and the frozen default limits. No runtime logic lives here
+// beyond the frozen constant tables the type layer exposes as values, mirroring the
+// ADR-0003/0004/0005/0006 `types.ts` precedent. `readonly` everywhere; optional props are
+// `| undefined` because exactOptionalPropertyTypes is on. Every shape is plain JSON-serializable
+// so the #10 audit ledger can persist a VerificationReport without ad-hoc parsing.
+// Wave-1 defaults. maxMemoryBytes is undefined by default: memory enforcement is opt-in and
+// Linux-only (ADR-0007 D2/D3). network defaults to the no-network posture, documented-not-enforced.
+export const DEFAULT_VERIFICATION_LIMITS = {
+    wallTimeMs: 120_000,
+    maxOutputBytes: 1_048_576,
+    maxMemoryBytes: undefined,
+    network: "none",
+};

package/dist/workflow-descriptor.d.ts

@@ -0,0 +1,21 @@
+export interface WorkflowInputSpec {
+    readonly name: string;
+    readonly type: "string" | "boolean" | "string[]" | "object";
+    readonly required: boolean;
+    readonly description: string;
+    readonly defaultValue?: unknown;
+}
+export interface WorkflowDescriptor<TLimits = object> {
+    readonly workflowId: string;
+    readonly name: string;
+    readonly description: string;
+    readonly inputs: readonly WorkflowInputSpec[];
+    readonly defaultLimits: TLimits;
+    readonly modelSelectionOptions: {
+        readonly arbitrary: boolean;
+        readonly preferredCostClass: "low" | "medium" | "high";
+    };
+    readonly supportsDryRun: boolean;
+    readonly supportsApply: boolean;
+}
+//# sourceMappingURL=workflow-descriptor.d.ts.map

package/dist/workflow-descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-descriptor.d.ts","sourceRoot":"","sources":["../src/workflow-descriptor.ts"],"names":[],"mappings":"AAQA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC5D,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;CACjC;AAED,MAAM,WAAW,kBAAkB,CAAC,OAAO,GAAG,MAAM;IAClD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC9C,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE;QAE9B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;QAE5B,QAAQ,CAAC,kBAAkB,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;KACxD,CAAC;IACF,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;CACjC"}

package/dist/workflow-descriptor.js

@@ -0,0 +1,8 @@
+// Shared UI workflow-descriptor interfaces (ADR-0009 D12). Extracted from the unit-test
+// workflow's descriptor so BOTH workflows depend on this common base and NEITHER depends on the
+// other — a clean dependency direction for the workflows layer. Pure types, no runtime logic.
+// Each workflow exports its own concrete `*_WORKFLOW_DESCRIPTOR: WorkflowDescriptor<TLimits>`
+// value; issue #13 reads those values to render the workflow UI without the implementation.
+// `TLimits` is the workflow's own frozen limits shape so each descriptor keeps precise typing on
+// `defaultLimits` (it defaults to `object` for callers that handle descriptors generically).
+export {};

package/dist/workflow-handoff.d.ts

@@ -0,0 +1,69 @@
+export declare const WORKFLOW_HANDOFF_SCHEMA_VERSION: "1";
+export interface PatchScopeLimits {
+    readonly maxFileCount: number;
+    readonly maxPatchBytes: number;
+    readonly maxNewFiles: number;
+    readonly elapsedMsMax: number;
+}
+export declare const DEFAULT_PATCH_SCOPE_LIMITS: PatchScopeLimits;
+export type ExpectedCheck = "verify" | "lint" | "typecheck" | "tests" | "manual";
+export declare const EXPECTED_CHECKS: readonly ExpectedCheck[];
+export interface PatchScope {
+    readonly schemaVersion: typeof WORKFLOW_HANDOFF_SCHEMA_VERSION;
+    readonly editablePaths: readonly string[];
+    readonly readOnlyPaths: readonly string[];
+    readonly evidenceAtomIds: readonly string[];
+    readonly limits: PatchScopeLimits;
+    readonly expectedChecks: readonly ExpectedCheck[];
+    readonly unknowns: readonly string[];
+}
+export type WorkflowKind = "unit-test-generation" | "bug-investigation" | "verification";
+export declare const WORKFLOW_KINDS: readonly WorkflowKind[];
+export interface WorkflowHandoffRequest {
+    readonly schemaVersion: typeof WORKFLOW_HANDOFF_SCHEMA_VERSION;
+    readonly contextPackStableId: string;
+    readonly workflowKind: WorkflowKind;
+    readonly patchScope: PatchScope;
+    readonly requestedAtMs: number;
+    readonly userApprovalToken: string;
+}
+export interface UserApprovalTokenInput {
+    readonly contextPackStableId: string;
+    readonly workflowKind: WorkflowKind;
+    readonly editablePaths: readonly string[];
+    readonly readOnlyPaths: readonly string[];
+    readonly evidenceAtomIds: readonly string[];
+    readonly limits: PatchScopeLimits;
+    readonly expectedChecks: readonly ExpectedCheck[];
+    readonly unknowns: readonly string[];
+}
+export type PatchScopeViolationKind = "outside-editable-set" | "exceeds-max-file-count" | "exceeds-max-patch-bytes" | "exceeds-max-new-files" | "no-expected-checks" | "invalid-patch-scope" | "invalid-patch-entry";
+export interface PatchScopeViolation {
+    readonly kind: PatchScopeViolationKind;
+    readonly path: string | undefined;
+    readonly observed: number | undefined;
+    readonly limit: number | undefined;
+    readonly message: string;
+}
+export type PatchScopeCheck = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly violations: readonly PatchScopeViolation[];
+};
+export interface ProposedPatchEntry {
+    readonly path: string;
+    readonly newFile: boolean;
+    readonly patchBytes: number;
+}
+export type ValidationResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly reasons: readonly string[];
+};
+export declare function isApprovalTokenShape(token: string): boolean;
+export declare function validatePatchScope(scope: unknown): ValidationResult;
+export declare function validateWorkflowHandoffRequest(request: unknown): ValidationResult;
+export declare function checkPatchAgainstScope(scope: PatchScope, proposed: readonly ProposedPatchEntry[]): PatchScopeCheck;
+//# sourceMappingURL=workflow-handoff.d.ts.map

package/dist/workflow-handoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workflow-handoff.d.ts","sourceRoot":"","sources":["../src/workflow-handoff.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,+BAA+B,EAAG,GAAY,CAAC;AAU5D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,eAAO,MAAM,0BAA0B,EAAE,gBAK/B,CAAC;AAGX,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,OAAO,GAAG,QAAQ,CAAC;AAEjF,eAAO,MAAM,eAAe,EAAE,SAAS,aAAa,EAM1C,CAAC;AAGX,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,aAAa,EAAE,OAAO,+BAA+B,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAOD,MAAM,MAAM,YAAY,GAAG,sBAAsB,GAAG,mBAAmB,GAAG,cAAc,CAAC;AAEzF,eAAO,MAAM,cAAc,EAAE,SAAS,YAAY,EAIxC,CAAC;AAGX,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,aAAa,EAAE,OAAO,+BAA+B,CAAC;IAC/D,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAI/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAMD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,SAAS,aAAa,EAAE,CAAC;IAClD,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAGD,MAAM,MAAM,uBAAuB,GAC/B,sBAAsB,GACtB,wBAAwB,GACxB,yBAAyB,GACzB,uBAAuB,GACvB,oBAAoB,GACpB,qBAAqB,GACrB,qBAAqB,CAAC;AAE1B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,EAAE,CAAA;CAAE,CAAC;AAEhF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAGD,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AA4EhE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE3D;AAuJD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,gBAAgB,CAanE;AAGD,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,CAqCjF;AA4LD,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,SAAS,kBAAkB,EAAE,GACtC,eAAe,CAyBjB"}