@paths.design/caws-cli 10.2.0 → 11.1.0

package/dist/shell/gates/disposition.js

@@ -0,0 +1,117 @@
+"use strict";
+// Policy-derived gate disposition.
+//
+// Given (parsed quality-gates report, parsed policy), produce one
+// `GateDisposition` per policy-declared gate. This is the SOLE place
+// where final block/warn/skip semantics are decided. The subprocess
+// reports violations; this module decides what they mean.
+//
+// Rules:
+//
+//   policy.gates[gate].mode === 'skip'      → result: 'skipped',  blocks=false
+//   policy.gates[gate].enabled === false    → result: 'skipped',  blocks=false
+//   any matched violation + mode==='block'  → result: 'fail',     blocks=true
+//   any matched violation + mode==='warn'   → result: 'fail',     blocks=false
+//   no matched violation                    → result: 'pass',     blocks=false
+//
+// A violation is "matched" to a policy gate iff the violation's `gate`
+// field equals the policy gate id. Violations targeting unknown gate
+// names (subprocess-specific checks like 'naming') are surfaced
+// separately as `unmatchedViolations` so the renderer can show them,
+// but they do NOT drive policy disposition.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.deriveDispositions = deriveDispositions;
+const KNOWN_GATE_IDS = [
+    'budget_limit',
+    'spec_completeness',
+    'scope_boundary',
+    'god_object',
+    'todo_detection',
+];
+/**
+ * Mechanical aliases from subprocess gate names to canonical policy
+ * gate IDs. Each alias must be a clear naming-only translation, never a
+ * semantic repurposing. Adding a new alias here requires evidence that
+ * the subprocess gate and the policy gate measure the same thing under
+ * different names.
+ *
+ * Current aliases:
+ *   - `god_objects` (subprocess plural) → `god_object` (policy singular).
+ *     Same intent: detect files exceeding size threshold.
+ *   - `hidden-todo` (subprocess internal name) → `todo_detection` (policy
+ *     canonical). Same intent: detect hidden incomplete implementations.
+ *     NOTE: the subprocess `runHiddenTodoQualityGate` currently throws on
+ *     errors instead of emitting violations, so this alias is only useful
+ *     once that producer path is fixed (LEGACY-TEST-RECONCILE-001 follow-up).
+ *
+ * Refused aliases (semantically distinct, not naming variants):
+ *   - `code_freeze` → `budget_limit` (crisis-response vs risk-tier budget)
+ *   - `naming` → `spec_completeness` (identifier conventions vs spec health)
+ *   - `duplication`, `documentation`, `placeholders`, `simplification`:
+ *     no policy correspondent; remain in `unmatchedViolations`.
+ */
+const SUBPROCESS_GATE_TO_POLICY_GATE = {
+    god_objects: 'god_object',
+    'hidden-todo': 'todo_detection',
+};
+function canonicalGateName(subprocessGate) {
+    return SUBPROCESS_GATE_TO_POLICY_GATE[subprocessGate] ?? subprocessGate;
+}
+function gateConfigFor(policy, gateId) {
+    const cfg = policy.gates[gateId];
+    if (cfg === undefined)
+        return undefined;
+    return { enabled: cfg.enabled, mode: cfg.mode };
+}
+function deriveDispositions(report, policy) {
+    // Group violations by canonical gate name (applying mechanical aliases).
+    const byGate = new Map();
+    for (const v of report.violations) {
+        const canonical = canonicalGateName(v.gate);
+        const list = byGate.get(canonical);
+        if (list === undefined)
+            byGate.set(canonical, [v]);
+        else
+            list.push(v);
+    }
+    const dispositions = [];
+    for (const gateId of KNOWN_GATE_IDS) {
+        const cfg = gateConfigFor(policy, gateId);
+        if (cfg === undefined)
+            continue; // gate not declared in policy
+        const violations = byGate.get(gateId) ?? [];
+        byGate.delete(gateId);
+        let outcome;
+        let blocks;
+        if (cfg.enabled === false || cfg.mode === 'skip') {
+            outcome = 'skipped';
+            blocks = false;
+        }
+        else if (violations.length === 0) {
+            outcome = 'pass';
+            blocks = false;
+        }
+        else {
+            outcome = 'fail';
+            blocks = cfg.mode === 'block';
+        }
+        dispositions.push({
+            gate_id: gateId,
+            mode: cfg.mode,
+            outcome,
+            blocks,
+            violations,
+        });
+    }
+    // Whatever remains in byGate are unmatched violations (gates the
+    // subprocess reported but policy doesn't declare).
+    const unmatchedViolations = [];
+    for (const list of byGate.values())
+        unmatchedViolations.push(...list);
+    return {
+        dispositions,
+        unmatchedViolations,
+        anyBlocks: dispositions.some((d) => d.blocks),
+    };
+}
+//# sourceMappingURL=disposition.js.map

package/dist/shell/gates/disposition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"disposition.js","sourceRoot":"","sources":["../../../src/shell/gates/disposition.ts"],"names":[],"mappings":";AAAA,mCAAmC;AACnC,EAAE;AACF,kEAAkE;AAClE,qEAAqE;AACrE,oEAAoE;AACpE,0DAA0D;AAC1D,EAAE;AACF,SAAS;AACT,EAAE;AACF,+EAA+E;AAC/E,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,+EAA+E;AAC/E,EAAE;AACF,uEAAuE;AACvE,qEAAqE;AACrE,gEAAgE;AAChE,qEAAqE;AACrE,4CAA4C;;AA4E5C,gDAoDC;AApGD,MAAM,cAAc,GAAG;IACrB,cAAc;IACd,mBAAmB;IACnB,gBAAgB;IAChB,YAAY;IACZ,gBAAgB;CACR,CAAC;AAEX;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,8BAA8B,GAAqC;IACvE,WAAW,EAAE,YAAY;IACzB,aAAa,EAAE,gBAAgB;CAChC,CAAC;AAEF,SAAS,iBAAiB,CAAC,cAAsB;IAC/C,OAAO,8BAA8B,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC;AAC1E,CAAC;AAED,SAAS,aAAa,CACpB,MAAc,EACd,MAAuC;IAEvC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,GAAG,CAAC,IAAgB,EAAE,CAAC;AAC9D,CAAC;AAED,SAAgB,kBAAkB,CAChC,MAAmB,EACnB,MAAc;IAEd,yEAAyE;IACzE,MAAM,MAAM,GAAG,IAAI,GAAG,EAA4B,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACnC,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;;YAC9C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,YAAY,GAAsB,EAAE,CAAC;IAC3C,KAAK,MAAM,MAAM,IAAI,cAAc,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1C,IAAI,GAAG,KAAK,SAAS;YAAE,SAAS,CAAC,8BAA8B;QAC/D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAEtB,IAAI,OAAoB,CAAC;QACzB,IAAI,MAAe,CAAC;QACpB,IAAI,GAAG,CAAC,OAAO,KAAK,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACjD,OAAO,GAAG,SAAS,CAAC;YACpB,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;aAAM,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACnC,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,CAAC;YACjB,MAAM,GAAG,GAAG,CAAC,IAAI,KAAK,OAAO,CAAC;QAChC,CAAC;QAED,YAAY,CAAC,IAAI,CAAC;YAChB,OAAO,EAAE,MAAM;YACf,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO;YACP,MAAM;YACN,UAAU;SACX,CAAC,CAAC;IACL,CAAC;IAED,iEAAiE;IACjE,mDAAmD;IACnD,MAAM,mBAAmB,GAAqB,EAAE,CAAC;IACjD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,EAAE;QAAE,mBAAmB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;IAEtE,OAAO;QACL,YAAY;QACZ,mBAAmB;QACnB,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;KAC9C,CAAC;AACJ,CAAC"}

package/dist/shell/gates/gate-result-contract.d.ts

@@ -0,0 +1,39 @@
+import { type Result } from '@paths.design/caws-kernel';
+export interface GatesViolation {
+    /** The gate that detected this violation. May be any string. */
+    readonly gate: string;
+    /** Optional violation type id (e.g. 'banned_modifier', 'timeout'). */
+    readonly type?: string;
+    readonly message?: string;
+    readonly file?: string;
+    readonly line?: number;
+    readonly rule?: string;
+    /** Subprocess-reported severity. NOT trusted for blocking — policy decides. */
+    readonly severity?: string;
+}
+export interface GatesWarning {
+    readonly gate?: string;
+    readonly type?: string;
+    readonly message?: string;
+}
+export interface GatesReport {
+    readonly timestamp: string;
+    readonly context: string;
+    readonly files_scoped: number;
+    readonly warnings: readonly GatesWarning[];
+    readonly violations: readonly GatesViolation[];
+    readonly waivers?: {
+        readonly active: number;
+        readonly applied: number;
+    };
+    readonly performance?: {
+        readonly total_execution_time_ms?: number;
+    };
+}
+/**
+ * Parse + validate the subprocess JSON. Returns Ok(GatesReport) only when
+ * EVERY required field is present and well-typed. Returns Err with a
+ * specific shell.gates.* rule otherwise. Never throws on bad input.
+ */
+export declare function validateGatesReport(raw: string): Result<GatesReport>;
+//# sourceMappingURL=gate-result-contract.d.ts.map

package/dist/shell/gates/gate-result-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-result-contract.d.ts","sourceRoot":"","sources":["../../../src/shell/gates/gate-result-contract.ts"],"names":[],"mappings":"AAwBA,OAAO,EAA4B,KAAK,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAIlF,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,CAAC;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;IAC/C,QAAQ,CAAC,OAAO,CAAC,EAAE;QACjB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,QAAQ,CAAC,WAAW,CAAC,EAAE;QACrB,QAAQ,CAAC,uBAAuB,CAAC,EAAE,MAAM,CAAC;KAC3C,CAAC;CACH;AAiED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CA0GpE"}

package/dist/shell/gates/gate-result-contract.js

@@ -0,0 +1,150 @@
+"use strict";
+// Runtime validator for `caws-quality-gates --json` output.
+//
+// The subprocess emits a SINGLE aggregated JSON payload describing the full
+// gate run. We do NOT trust the shape — TypeScript types do not survive
+// `JSON.parse`. The validator below enforces the minimal contract the
+// vNext command needs to make a policy-derived decision.
+//
+// Accepted shape (narrowed; the real payload may carry more fields, which
+// we ignore):
+//
+//   {
+//     timestamp:    string  (ISO-8601)
+//     context:      string  (e.g. 'cli', 'commit', 'ci')
+//     files_scoped: number
+//     warnings:     Array<{ gate?: string; ... }>
+//     violations:   Array<{ gate: string; ... }>
+//     waivers?:     { active: number; applied: number; details: ... }
+//     performance?: { total_execution_time_ms?: number; ... }
+//   }
+//
+// Anything else is rejected. The contract is intentionally tighter than the
+// subprocess's actual payload — the command should only consume fields it
+// has validated.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateGatesReport = validateGatesReport;
+const caws_kernel_1 = require("@paths.design/caws-kernel");
+const rules_1 = require("../rules");
+function diag(rule, message, data) {
+    const base = {
+        rule,
+        authority: 'kernel/diagnostics',
+        severity: 'error',
+        message,
+    };
+    return data !== undefined ? { ...base, data } : base;
+}
+function isObject(v) {
+    return typeof v === 'object' && v !== null && !Array.isArray(v);
+}
+function validateViolation(value, idx) {
+    if (!isObject(value)) {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, `violations[${idx}] is not an object.`, { index: idx }));
+    }
+    if (typeof value['gate'] !== 'string' || value['gate'].length === 0) {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, `violations[${idx}] is missing required string field 'gate'.`, { index: idx }));
+    }
+    const out = { gate: value['gate'] };
+    if (typeof value['type'] === 'string')
+        out.type = value['type'];
+    if (typeof value['message'] === 'string')
+        out.message = value['message'];
+    if (typeof value['file'] === 'string')
+        out.file = value['file'];
+    if (typeof value['line'] === 'number')
+        out.line = value['line'];
+    if (typeof value['rule'] === 'string')
+        out.rule = value['rule'];
+    if (typeof value['severity'] === 'string')
+        out.severity = value['severity'];
+    return (0, caws_kernel_1.ok)(out);
+}
+function validateWarning(value, idx) {
+    if (!isObject(value)) {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, `warnings[${idx}] is not an object.`, { index: idx }));
+    }
+    const out = {};
+    if (typeof value['gate'] === 'string')
+        out.gate = value['gate'];
+    if (typeof value['type'] === 'string')
+        out.type = value['type'];
+    if (typeof value['message'] === 'string')
+        out.message = value['message'];
+    return (0, caws_kernel_1.ok)(out);
+}
+/**
+ * Parse + validate the subprocess JSON. Returns Ok(GatesReport) only when
+ * EVERY required field is present and well-typed. Returns Err with a
+ * specific shell.gates.* rule otherwise. Never throws on bad input.
+ */
+function validateGatesReport(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (e) {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_NOT_JSON, `quality-gates output is not valid JSON: ${e.message}`));
+    }
+    if (!isObject(parsed)) {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, 'quality-gates output is not a JSON object.'));
+    }
+    if (typeof parsed['timestamp'] !== 'string') {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, 'quality-gates output missing required string field `timestamp`.'));
+    }
+    if (typeof parsed['context'] !== 'string') {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, 'quality-gates output missing required string field `context`.'));
+    }
+    if (typeof parsed['files_scoped'] !== 'number') {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, 'quality-gates output missing required number field `files_scoped`.'));
+    }
+    const rawViolations = parsed['violations'];
+    if (!Array.isArray(rawViolations)) {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, 'quality-gates output missing required array field `violations`.'));
+    }
+    const violations = [];
+    for (let i = 0; i < rawViolations.length; i++) {
+        const r = validateViolation(rawViolations[i], i);
+        if (!r.ok)
+            return r;
+        violations.push(r.value);
+    }
+    const rawWarnings = parsed['warnings'];
+    if (!Array.isArray(rawWarnings)) {
+        return (0, caws_kernel_1.err)(diag(rules_1.SHELL_RULES.GATES_REPORT_INVALID_SHAPE, 'quality-gates output missing required array field `warnings`.'));
+    }
+    const warnings = [];
+    for (let i = 0; i < rawWarnings.length; i++) {
+        const r = validateWarning(rawWarnings[i], i);
+        if (!r.ok)
+            return r;
+        warnings.push(r.value);
+    }
+    const out = {
+        timestamp: parsed['timestamp'],
+        context: parsed['context'],
+        files_scoped: parsed['files_scoped'],
+        warnings,
+        violations,
+    };
+    // Optional fields — defensive: accept if shaped right, ignore otherwise.
+    if (isObject(parsed['waivers'])) {
+        const w = parsed['waivers'];
+        if (typeof w['active'] === 'number' && typeof w['applied'] === 'number') {
+            out.waivers = {
+                active: w['active'],
+                applied: w['applied'],
+            };
+        }
+    }
+    if (isObject(parsed['performance'])) {
+        const p = parsed['performance'];
+        if (typeof p['total_execution_time_ms'] === 'number') {
+            out.performance = {
+                total_execution_time_ms: p['total_execution_time_ms'],
+            };
+        }
+    }
+    return (0, caws_kernel_1.ok)(out);
+}
+//# sourceMappingURL=gate-result-contract.js.map

package/dist/shell/gates/gate-result-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate-result-contract.js","sourceRoot":"","sources":["../../../src/shell/gates/gate-result-contract.ts"],"names":[],"mappings":";AAAA,4DAA4D;AAC5D,EAAE;AACF,4EAA4E;AAC5E,wEAAwE;AACxE,sEAAsE;AACtE,yDAAyD;AACzD,EAAE;AACF,0EAA0E;AAC1E,cAAc;AACd,EAAE;AACF,MAAM;AACN,uCAAuC;AACvC,yDAAyD;AACzD,2BAA2B;AAC3B,kDAAkD;AAClD,iDAAiD;AACjD,sEAAsE;AACtE,8DAA8D;AAC9D,MAAM;AACN,EAAE;AACF,4EAA4E;AAC5E,0EAA0E;AAC1E,iBAAiB;;AA4GjB,kDA0GC;AApND,2DAAkF;AAElF,oCAAuC;AAoCvC,SAAS,IAAI,CAAC,IAAY,EAAE,OAAe,EAAE,IAA8B;IACzE,MAAM,IAAI,GAAe;QACvB,IAAI;QACJ,SAAS,EAAE,oBAAoB;QAC/B,QAAQ,EAAE,OAAO;QACjB,OAAO;KACR,CAAC;IACF,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACvD,CAAC;AAED,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,GAAW;IACpD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,cAAc,GAAG,qBAAqB,EACtC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,cAAc,GAAG,4CAA4C,EAC7D,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CACF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAmB,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IACpD,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAG,GAAyB,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;QACrC,GAA4B,CAAC,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAG,GAAyB,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAG,GAAyB,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAG,GAAyB,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,UAAU,CAAC,KAAK,QAAQ;QACtC,GAA6B,CAAC,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9D,OAAO,IAAA,gBAAE,EAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,GAAW;IAClD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,YAAY,GAAG,qBAAqB,EACpC,EAAE,KAAK,EAAE,GAAG,EAAE,CACf,CACF,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAG,GAAyB,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;QAAG,GAAyB,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IACvF,IAAI,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,QAAQ;QACrC,GAA4B,CAAC,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3D,OAAO,IAAA,gBAAE,EAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAgB,mBAAmB,CAAC,GAAW;IAC7C,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,qBAAqB,EACjC,2CAA4C,CAAW,CAAC,OAAO,EAAE,CAClE,CACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,4CAA4C,CAC7C,CACF,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,iEAAiE,CAClE,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,+DAA+D,CAChE,CACF,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC/C,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,oEAAoE,CACrE,CACF,CAAC;IACJ,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAClC,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,iEAAiE,CAClE,CACF,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IACvC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,OAAO,IAAA,iBAAG,EACR,IAAI,CACF,mBAAW,CAAC,0BAA0B,EACtC,+DAA+D,CAChE,CACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7C,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,OAAO,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,GAAG,GAAgB;QACvB,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC;QAC9B,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC;QAC1B,YAAY,EAAE,MAAM,CAAC,cAAc,CAAC;QACpC,QAAQ;QACR,UAAU;KACX,CAAC;IAEF,yEAAyE;IACzE,IAAI,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAA4B,CAAC;QACvD,IAAI,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,SAAS,CAAC,KAAK,QAAQ,EAAE,CAAC;YACvE,GAAyD,CAAC,OAAO,GAAG;gBACnE,MAAM,EAAE,CAAC,CAAC,QAAQ,CAAC;gBACnB,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC;aACtB,CAAC;QACJ,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,GAAG,MAAM,CAAC,aAAa,CAA4B,CAAC;QAC3D,IAAI,OAAO,CAAC,CAAC,yBAAyB,CAAC,KAAK,QAAQ,EAAE,CAAC;YACpD,GAA8D,CAAC,WAAW,GAAG;gBAC5E,uBAAuB,EAAE,CAAC,CAAC,yBAAyB,CAAC;aACtD,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAA,gBAAE,EAAC,GAAG,CAAC,CAAC;AACjB,CAAC"}

package/dist/shell/gates/local-evaluators/budget-limit.d.ts

@@ -0,0 +1,24 @@
+import type { Spec } from '@paths.design/caws-kernel';
+import type { Policy } from '@paths.design/caws-kernel';
+import type { GatesViolation } from '../gate-result-contract';
+import { type StagedFileChange } from './diff-helpers';
+export interface BudgetLimitInput {
+    readonly spec: Spec;
+    readonly policy: Policy;
+    readonly repoRoot: string;
+    /** Override the staged-diff source (tests). */
+    readonly stagedChanges?: readonly StagedFileChange[];
+}
+export interface BudgetLimitResult {
+    readonly violations: readonly GatesViolation[];
+    /** Observed budget consumption, regardless of whether a violation fired.
+     *  Useful for telemetry/diagnostics; not used for blocking. */
+    readonly observed: {
+        readonly files_changed: number;
+        readonly loc_changed: number;
+        readonly max_files: number;
+        readonly max_loc: number;
+    };
+}
+export declare function evaluateBudgetLimit(input: BudgetLimitInput): BudgetLimitResult;
+//# sourceMappingURL=budget-limit.d.ts.map

package/dist/shell/gates/local-evaluators/budget-limit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-limit.d.ts","sourceRoot":"","sources":["../../../../src/shell/gates/local-evaluators/budget-limit.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,2BAA2B,CAAC;AACtD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAExD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAAsC,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAE3F,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;IAC/C;mEAC+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AASD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,iBAAiB,CA2C9E"}

package/dist/shell/gates/local-evaluators/budget-limit.js

@@ -0,0 +1,67 @@
+"use strict";
+// budget_limit evaluator.
+//
+// Compares staged diff size to the policy's per-risk-tier budget.
+//
+// Rules:
+//   - Risk tier comes from the active spec (1, 2, or 3).
+//   - Budget comes from policy.risk_tiers[tier] (max_files, max_loc).
+//   - A violation fires when files_changed > max_files or
+//     loc_changed > max_loc. Each threshold breach is one violation.
+//
+// This evaluator is local (caws-cli concern). The quality-gates
+// subprocess does not emit `budget_limit` violations; v11 deliberately
+// keeps risk-tier budget enforcement in the CLI where the active spec
+// and staged diff are authoritative.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateBudgetLimit = evaluateBudgetLimit;
+const diff_helpers_1 = require("./diff-helpers");
+function tierKey(tier) {
+    if (tier === 1)
+        return '1';
+    if (tier === 2)
+        return '2';
+    if (tier === 3)
+        return '3';
+    return undefined;
+}
+function evaluateBudgetLimit(input) {
+    const changes = input.stagedChanges ?? (0, diff_helpers_1.listStagedChanges)(input.repoRoot);
+    const files_changed = changes.length;
+    const loc_changed = (0, diff_helpers_1.totalInsertions)(changes);
+    const tk = tierKey(input.spec.risk_tier);
+    if (tk === undefined) {
+        // Spec carries a risk_tier the schema accepts (1, 2, 3); anything
+        // else is a spec-completeness problem, not a budget violation.
+        return {
+            violations: [],
+            observed: { files_changed, loc_changed, max_files: 0, max_loc: 0 },
+        };
+    }
+    const budget = input.policy.risk_tiers[tk];
+    const { max_files, max_loc } = budget;
+    const violations = [];
+    if (files_changed > max_files) {
+        violations.push({
+            gate: 'budget_limit',
+            type: 'max_files_exceeded',
+            message: `Staged change touches ${files_changed} file(s); risk-tier ${input.spec.risk_tier} ` +
+                `budget allows up to ${max_files}.`,
+            severity: 'fail',
+        });
+    }
+    if (loc_changed > max_loc) {
+        violations.push({
+            gate: 'budget_limit',
+            type: 'max_loc_exceeded',
+            message: `Staged change adds ${loc_changed} line(s); risk-tier ${input.spec.risk_tier} ` +
+                `budget allows up to ${max_loc}.`,
+            severity: 'fail',
+        });
+    }
+    return {
+        violations,
+        observed: { files_changed, loc_changed, max_files, max_loc },
+    };
+}
+//# sourceMappingURL=budget-limit.js.map

package/dist/shell/gates/local-evaluators/budget-limit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"budget-limit.js","sourceRoot":"","sources":["../../../../src/shell/gates/local-evaluators/budget-limit.ts"],"names":[],"mappings":";AAAA,0BAA0B;AAC1B,EAAE;AACF,kEAAkE;AAClE,EAAE;AACF,SAAS;AACT,yDAAyD;AACzD,sEAAsE;AACtE,0DAA0D;AAC1D,qEAAqE;AACrE,EAAE;AACF,gEAAgE;AAChE,uEAAuE;AACvE,sEAAsE;AACtE,qCAAqC;;AAmCrC,kDA2CC;AAxED,iDAA2F;AAsB3F,SAAS,OAAO,CAAC,IAAY;IAC3B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC3B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IAC3B,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAuB;IACzD,MAAM,OAAO,GAAG,KAAK,CAAC,aAAa,IAAI,IAAA,gCAAiB,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzE,MAAM,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC;IACrC,MAAM,WAAW,GAAG,IAAA,8BAAe,EAAC,OAAO,CAAC,CAAC;IAE7C,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACzC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;QACrB,kEAAkE;QAClE,+DAA+D;QAC/D,OAAO;YACL,UAAU,EAAE,EAAE;YACd,QAAQ,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE;SACnE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAC3C,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;IAEtC,MAAM,UAAU,GAAqB,EAAE,CAAC;IACxC,IAAI,aAAa,GAAG,SAAS,EAAE,CAAC;QAC9B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,oBAAoB;YAC1B,OAAO,EACL,yBAAyB,aAAa,uBAAuB,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG;gBACpF,uBAAuB,SAAS,GAAG;YACrC,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,WAAW,GAAG,OAAO,EAAE,CAAC;QAC1B,UAAU,CAAC,IAAI,CAAC;YACd,IAAI,EAAE,cAAc;YACpB,IAAI,EAAE,kBAAkB;YACxB,OAAO,EACL,sBAAsB,WAAW,uBAAuB,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG;gBAC/E,uBAAuB,OAAO,GAAG;YACnC,QAAQ,EAAE,MAAM;SACjB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,UAAU;QACV,QAAQ,EAAE,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE;KAC7D,CAAC;AACJ,CAAC"}

package/dist/shell/gates/local-evaluators/diff-helpers.d.ts

@@ -0,0 +1,25 @@
+export interface StagedFileChange {
+    /** Repo-relative POSIX path of the changed file. */
+    readonly path: string;
+    /** Lines added in the staged diff. `null` for binary files. */
+    readonly insertions: number | null;
+    /** Lines deleted in the staged diff. `null` for binary files. */
+    readonly deletions: number | null;
+}
+/**
+ * List staged files with line-count deltas. Returns an empty array on
+ * any git error (no commits yet, not a repo, etc.) — the caller decides
+ * what an empty-diff means for their gate.
+ *
+ * `--cached` is used so the contract matches `--context=commit`. The
+ * caller may swap to `--diff-filter` or other working-tree shapes if a
+ * different context is needed; v11.1 only ships the commit context.
+ */
+export declare function listStagedChanges(repoRoot: string): readonly StagedFileChange[];
+/**
+ * Total inserted lines across staged changes. Binary files (`null`
+ * insertions) contribute 0 to the LOC count — they are governed by
+ * file count instead.
+ */
+export declare function totalInsertions(changes: readonly StagedFileChange[]): number;
+//# sourceMappingURL=diff-helpers.d.ts.map

package/dist/shell/gates/local-evaluators/diff-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-helpers.d.ts","sourceRoot":"","sources":["../../../../src/shell/gates/local-evaluators/diff-helpers.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,gBAAgB;IAC/B,oDAAoD;IACpD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,+DAA+D;IAC/D,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,iEAAiE;IACjE,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAUD;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CA2B/E;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAM5E"}

package/dist/shell/gates/local-evaluators/diff-helpers.js

@@ -0,0 +1,74 @@
+"use strict";
+// Staged-diff helpers for local gate evaluators.
+//
+// These helpers shell out to git to enumerate staged file changes and
+// their insertion counts. They are the only place local evaluators
+// touch git; the evaluators themselves remain pure (path lists + numbers
+// in, violations out).
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.listStagedChanges = listStagedChanges;
+exports.totalInsertions = totalInsertions;
+const node_child_process_1 = require("node:child_process");
+function runGit(args, cwd) {
+    return (0, node_child_process_1.execFileSync)('git', [...args], {
+        cwd,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'pipe'],
+    }).toString();
+}
+/**
+ * List staged files with line-count deltas. Returns an empty array on
+ * any git error (no commits yet, not a repo, etc.) — the caller decides
+ * what an empty-diff means for their gate.
+ *
+ * `--cached` is used so the contract matches `--context=commit`. The
+ * caller may swap to `--diff-filter` or other working-tree shapes if a
+ * different context is needed; v11.1 only ships the commit context.
+ */
+function listStagedChanges(repoRoot) {
+    let raw;
+    try {
+        raw = runGit(['diff', '--cached', '--numstat', '-z'], repoRoot);
+    }
+    catch {
+        return [];
+    }
+    // --numstat -z output: `\d+\t\d+\t<path>\0` per record. Binary files
+    // show `-\t-\t<path>\0`.
+    const records = [];
+    for (const rec of raw.split('\0')) {
+        if (rec.length === 0)
+            continue;
+        const tab1 = rec.indexOf('\t');
+        if (tab1 === -1)
+            continue;
+        const tab2 = rec.indexOf('\t', tab1 + 1);
+        if (tab2 === -1)
+            continue;
+        const addsRaw = rec.slice(0, tab1);
+        const delsRaw = rec.slice(tab1 + 1, tab2);
+        const path = rec.slice(tab2 + 1);
+        if (path.length === 0)
+            continue;
+        records.push({
+            path,
+            insertions: addsRaw === '-' ? null : Number.parseInt(addsRaw, 10),
+            deletions: delsRaw === '-' ? null : Number.parseInt(delsRaw, 10),
+        });
+    }
+    return records;
+}
+/**
+ * Total inserted lines across staged changes. Binary files (`null`
+ * insertions) contribute 0 to the LOC count — they are governed by
+ * file count instead.
+ */
+function totalInsertions(changes) {
+    let n = 0;
+    for (const c of changes) {
+        if (typeof c.insertions === 'number')
+            n += c.insertions;
+    }
+    return n;
+}
+//# sourceMappingURL=diff-helpers.js.map

package/dist/shell/gates/local-evaluators/diff-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-helpers.js","sourceRoot":"","sources":["../../../../src/shell/gates/local-evaluators/diff-helpers.ts"],"names":[],"mappings":";AAAA,iDAAiD;AACjD,EAAE;AACF,sEAAsE;AACtE,mEAAmE;AACnE,yEAAyE;AACzE,uBAAuB;;AA8BvB,8CA2BC;AAOD,0CAMC;AApED,2DAAkD;AAWlD,SAAS,MAAM,CAAC,IAAuB,EAAE,GAAW;IAClD,OAAO,IAAA,iCAAY,EAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,EAAE;QACpC,GAAG;QACH,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,iBAAiB,CAAC,QAAgB;IAChD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,qEAAqE;IACrE,yBAAyB;IACzB,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,IAAI,KAAK,CAAC,CAAC;YAAE,SAAS;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QACzC,IAAI,IAAI,KAAK,CAAC,CAAC;YAAE,SAAS;QAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAChC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI;YACJ,UAAU,EAAE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;YACjE,SAAS,EAAE,OAAO,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;SACjE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,OAAoC;IAClE,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;YAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;IAC1D,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/shell/gates/local-evaluators/index.d.ts

@@ -0,0 +1,28 @@
+import type { Spec, Policy } from '@paths.design/caws-kernel';
+import type { GatesViolation } from '../gate-result-contract';
+import type { StagedFileChange } from './diff-helpers';
+export type { StagedFileChange } from './diff-helpers';
+export { evaluateBudgetLimit } from './budget-limit';
+export { evaluateScopeBoundary } from './scope-boundary';
+export { evaluateSpecCompleteness } from './spec-completeness';
+export interface LocalEvaluatorsInput {
+    readonly spec: Spec;
+    readonly policy: Policy;
+    readonly repoRoot: string;
+    readonly nowIso: string;
+    /** Worktree name for scope diagnostics (optional). */
+    readonly worktreeName?: string;
+    /** Override staged-diff source (tests). When provided, all evaluators
+     *  use this list instead of shelling out to git. */
+    readonly stagedChanges?: readonly StagedFileChange[];
+}
+export interface LocalEvaluatorsResult {
+    readonly violations: readonly GatesViolation[];
+}
+/**
+ * Run all CAWS-local policy evaluators against the given spec+policy.
+ * Returns a flat list of violations tagged with canonical policy gate
+ * names (`budget_limit`, `scope_boundary`, `spec_completeness`).
+ */
+export declare function runLocalEvaluators(input: LocalEvaluatorsInput): LocalEvaluatorsResult;
+//# sourceMappingURL=index.d.ts.map

package/dist/shell/gates/local-evaluators/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/shell/gates/local-evaluators/index.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAC;AAE9D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAI9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AACrD,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sDAAsD;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;wDACoD;IACpD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACtD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,oBAAoB,GAAG,qBAAqB,CA2BrF"}

package/dist/shell/gates/local-evaluators/index.js

@@ -0,0 +1,67 @@
+"use strict";
+// Local gate evaluators — caws-cli's contribution to the gates pipeline.
+//
+// Why local evaluators exist
+// ──────────────────────────
+// The quality-gates subprocess implements *code-quality* checks (naming,
+// duplication, god objects, hidden TODOs, etc.). Those checks live in
+// `@paths.design/quality-gates` because they're general-purpose and
+// language-agnostic.
+//
+// CAWS *policy* gates (`budget_limit`, `scope_boundary`,
+// `spec_completeness`) are different in kind: they need the active spec
+// id, the spec YAML, the policy YAML, and the staged diff. Pushing them
+// into the generic subprocess would couple quality-gates to caws-cli's
+// state shape. Keeping them local preserves layering:
+//
+//   quality-gates package  : code-quality checks → JSON violations[]
+//   caws-cli local         : policy/spec/diff authority checks
+//                             → additional JSON violations[]
+//   gates command          : merge violations, apply waivers,
+//                             derive disposition, emit events
+//
+// Each evaluator returns the same `GatesViolation[]` shape the
+// subprocess emits, so the downstream disposition/waiver pipeline is
+// uniform.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateSpecCompleteness = exports.evaluateScopeBoundary = exports.evaluateBudgetLimit = void 0;
+exports.runLocalEvaluators = runLocalEvaluators;
+const budget_limit_1 = require("./budget-limit");
+const scope_boundary_1 = require("./scope-boundary");
+const spec_completeness_1 = require("./spec-completeness");
+var budget_limit_2 = require("./budget-limit");
+Object.defineProperty(exports, "evaluateBudgetLimit", { enumerable: true, get: function () { return budget_limit_2.evaluateBudgetLimit; } });
+var scope_boundary_2 = require("./scope-boundary");
+Object.defineProperty(exports, "evaluateScopeBoundary", { enumerable: true, get: function () { return scope_boundary_2.evaluateScopeBoundary; } });
+var spec_completeness_2 = require("./spec-completeness");
+Object.defineProperty(exports, "evaluateSpecCompleteness", { enumerable: true, get: function () { return spec_completeness_2.evaluateSpecCompleteness; } });
+/**
+ * Run all CAWS-local policy evaluators against the given spec+policy.
+ * Returns a flat list of violations tagged with canonical policy gate
+ * names (`budget_limit`, `scope_boundary`, `spec_completeness`).
+ */
+function runLocalEvaluators(input) {
+    const violations = [];
+    const budget = (0, budget_limit_1.evaluateBudgetLimit)({
+        spec: input.spec,
+        policy: input.policy,
+        repoRoot: input.repoRoot,
+        ...(input.stagedChanges !== undefined ? { stagedChanges: input.stagedChanges } : {}),
+    });
+    violations.push(...budget.violations);
+    const scope = (0, scope_boundary_1.evaluateScopeBoundary)({
+        spec: input.spec,
+        policy: input.policy,
+        repoRoot: input.repoRoot,
+        ...(input.worktreeName !== undefined ? { worktreeName: input.worktreeName } : {}),
+        ...(input.stagedChanges !== undefined ? { stagedChanges: input.stagedChanges } : {}),
+    });
+    violations.push(...scope.violations);
+    const completeness = (0, spec_completeness_1.evaluateSpecCompleteness)({
+        spec: input.spec,
+        nowIso: input.nowIso,
+    });
+    violations.push(...completeness.violations);
+    return { violations };
+}
+//# sourceMappingURL=index.js.map

package/dist/shell/gates/local-evaluators/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/shell/gates/local-evaluators/index.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,EAAE;AACF,6BAA6B;AAC7B,6BAA6B;AAC7B,yEAAyE;AACzE,sEAAsE;AACtE,oEAAoE;AACpE,qBAAqB;AACrB,EAAE;AACF,yDAAyD;AACzD,wEAAwE;AACxE,wEAAwE;AACxE,uEAAuE;AACvE,sDAAsD;AACtD,EAAE;AACF,qEAAqE;AACrE,+DAA+D;AAC/D,6DAA6D;AAC7D,8DAA8D;AAC9D,8DAA8D;AAC9D,EAAE;AACF,+DAA+D;AAC/D,qEAAqE;AACrE,WAAW;;;AAoCX,gDA2BC;AA1DD,iDAAqD;AACrD,qDAAyD;AACzD,2DAA+D;AAI/D,+CAAqD;AAA5C,mHAAA,mBAAmB,OAAA;AAC5B,mDAAyD;AAAhD,uHAAA,qBAAqB,OAAA;AAC9B,yDAA+D;AAAtD,6HAAA,wBAAwB,OAAA;AAkBjC;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,KAA2B;IAC5D,MAAM,UAAU,GAAqB,EAAE,CAAC;IAExC,MAAM,MAAM,GAAG,IAAA,kCAAmB,EAAC;QACjC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,IAAA,sCAAqB,EAAC;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjF,GAAG,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrF,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IAErC,MAAM,YAAY,GAAG,IAAA,4CAAwB,EAAC;QAC5C,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC,CAAC;IACH,UAAU,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IAE5C,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC"}