@polymorphism-tech/morph-spec 7.9.0 → 7.9.1

package/src/lib/validators/validation-runner.js

@@ -1,349 +1,349 @@
-/**
- * MORPH-SPEC Validation Runner
- *
- * Unified orchestrator that runs the right validators based on the feature's
- * active agents and decisions. Called by task-done before marking tasks complete.
- *
- * MORPH-SPEC 3.0 - Phase A: Active Validation Pipeline
- */
-
-import { existsSync, readFileSync } from 'fs';
-import { join } from 'path';
-import chalk from 'chalk';
-import { loadState } from '../../core/state/state-manager.js';
-import { getAbsoluteOutputPath, resolveContractsOutputType } from '../../core/paths/output-schema.js';
-import { getStackProfile } from '../stack/stack-profile.js';
-import { aggregateScores, loadRubric } from './score-aggregator.js';
-
-/** Validators that only make sense for .NET projects. */
-const DOTNET_ONLY_VALIDATORS = new Set([
-  'architecture', 'packages', 'contract-compliance'
-]);
-
-/**
- * Heavy validators skipped in 'light' mode (checkpoint-only).
- * Light mode runs only spec, content, and stack-specific lightweight validators.
- */
-const HEAVY_VALIDATORS = new Set([
-  'architecture', 'packages', 'contract-compliance',
-  'css', 'design-system'
-]);
-
-/**
- * Load agent → validators map from agents.json (data-driven)
- * @param {string} projectPath - Root path of the project
- * @returns {Object} Map of agent IDs to validator arrays
- */
-function loadAgentValidatorMap(projectPath) {
-  try {
-    const agentsPath = join(projectPath, '.morph/framework/agents.json');
-    const agentsConfig = JSON.parse(readFileSync(agentsPath, 'utf8'));
-
-    const map = {};
-    Object.entries(agentsConfig.agents || {}).forEach(([agentId, agent]) => {
-      if (!agentId.startsWith('_comment') && agent.validators && agent.validators.length > 0) {
-        map[agentId] = agent.validators;
-      }
-    });
-
-    return map;
-  } catch (err) {
-    console.warn(chalk.yellow('⚠️  Failed to load agents.json - no validators will run'));
-    console.warn(chalk.gray(`   Run 'morph-spec init' to set up MORPH-SPEC configuration`));
-    return {}; // Empty map = honest failure
-  }
-}
-
-/**
- * Run all relevant validators for a feature
- *
- * @param {string} projectPath - Project root path
- * @param {string} featureName - Feature name from state.json
- * @param {Object} options - Options
- * @param {boolean} options.verbose - Show detailed output
- * @param {string[]} options.validators - Specific validators to run (overrides agent-based detection)
- * @returns {Object} { passed, errors, warnings, issues, summary }
- */
-export async function runValidation(projectPath, featureName, options = {}) {
-  const result = {
-    passed: true,
-    errors: 0,
-    warnings: 0,
-    issues: [],
-    summary: '',
-    results: {} // Per-validator results for hooks integration
-  };
-
-  // Decision constraints support (stub - decision-constraint-loader removed as orphaned code)
-  const constraints = {
-    enabledValidators: [], // No constraint-based validators
-    validators: {} // No validator-specific constraints
-  };
-
-  // Determine which validators to run
-  const validatorIds = options.validators || detectValidators(featureName, projectPath);
-
-  // Filter by mode: 'light' skips heavy validators, 'full' (default) runs all
-  const mode = options.mode || 'full';
-  if (mode === 'light') {
-    const beforeCount = validatorIds.length;
-    for (let i = validatorIds.length - 1; i >= 0; i--) {
-      if (HEAVY_VALIDATORS.has(validatorIds[i])) {
-        validatorIds.splice(i, 1);
-      }
-    }
-  }
-
-  // Merge constraint-enabled validators
-  validatorIds.push(...constraints.enabledValidators);
-
-  if (validatorIds.length === 0) {
-    // Distinguish: no agents vs. no validators mapped
-    const state = loadState(false);
-    const activeAgents = state?.features?.[featureName]?.activeAgents || [];
-    if (activeAgents.length === 0) {
-      result.summary = 'No validators ran — feature has no active agents';
-      console.log(chalk.gray('\n  ℹ️  No validators configured (no active agents in state.json)'));
-      console.log(chalk.gray('     Add agents: morph-spec state add-agent ' + featureName + ' <agent-id>'));
-    } else {
-      result.summary = `No validators mapped for active agents: ${activeAgents.join(', ')}`;
-      console.log(chalk.gray(`\n  ℹ️  Agents [${activeAgents.join(', ')}] have no validators in agents.json`));
-    }
-    result._skipReason = result.summary;
-    return result;
-  }
-
-  // Always show what's running (even non-verbose) — helps confirm validators are active
-  console.log(chalk.gray(`\n  Running ${validatorIds.length} validator(s): ${validatorIds.join(', ')}`));
-  if (constraints.enabledValidators.length > 0) {
-    console.log(chalk.gray(`  (+ ${constraints.enabledValidators.length} from decisions)`));
-  }
-
-  // Always run contract compliance if the contracts file exists (stack-aware)
-  if (!options.skipContracts) {
-    const _profileForContracts = getStackProfile(projectPath);
-    const contractsType = resolveContractsOutputType(_profileForContracts.stack);
-    const contractsPath = getAbsoluteOutputPath(projectPath, featureName, contractsType);
-    if (existsSync(contractsPath) && !_profileForContracts.isNextjs) {
-      validatorIds.push('contract-compliance');
-    }
-  }
-
-  // Deduplicate
-  const uniqueValidators = [...new Set(validatorIds)];
-
-  // Run each validator
-  for (const validatorId of uniqueValidators) {
-    try {
-      // Pass validator-specific constraints from decisions.md
-      const validatorOptions = {
-        ...options,
-        constraints: constraints.validators[validatorId] || {}
-      };
-
-      const validatorResult = await runSingleValidator(validatorId, projectPath, featureName, validatorOptions);
-
-      if (validatorResult) {
-        result.errors += validatorResult.errors || 0;
-        result.warnings += validatorResult.warnings || 0;
-
-        if (validatorResult.issues) {
-          result.issues.push(...validatorResult.issues);
-        }
-
-        // Store per-validator results for hooks
-        result.results[validatorId] = {
-          passed: (validatorResult.errors || 0) === 0,
-          issues: validatorResult.issues || []
-        };
-      }
-    } catch (err) {
-      if (options.verbose) {
-        console.log(chalk.yellow(`  ⚠ Validator '${validatorId}' failed: ${err.message}`));
-      }
-      result.results[validatorId] = {
-        passed: false,
-        error: err.message
-      };
-    }
-  }
-
-  result.passed = result.errors === 0;
-  result.summary = result.passed
-    ? `✅ All validations passed (${result.warnings} warnings)`
-    : `❌ ${result.errors} error(s), ${result.warnings} warning(s)`;
-
-  // Score aggregation — layered on top of pass/fail
-  try {
-    const rubricId = readRubricConfig(projectPath);
-    const rubric = loadRubric(projectPath, rubricId);
-    const thresholdOverrides = readThresholdConfig(projectPath);
-    result.scores = aggregateScores(result, rubric, thresholdOverrides);
-  } catch {
-    // Score aggregation is non-blocking — if it fails, pass/fail still works
-    result.scores = null;
-  }
-
-  return result;
-}
-
-/**
- * Detect which validators to run based on feature's active agents
- * @param {string} featureName - Feature name
- * @param {string} projectPath - Project root path (default: current directory)
- * @returns {string[]} Array of validator IDs to run
- */
-function detectValidators(featureName, projectPath = '.') {
-  const profile = getStackProfile(projectPath);
-  const state = loadState(false);
-
-  if (!state || !state.features[featureName]) {
-    return [...profile.defaultValidators]; // stack-aware defaults
-  }
-
-  const feature = state.features[featureName];
-  const agents = feature.activeAgents || [];
-  const validatorSet = new Set(profile.defaultValidators); // stack defaults first
-
-  const agentValidatorMap = loadAgentValidatorMap(projectPath);
-  for (const agentId of agents) {
-    const validators = agentValidatorMap[agentId] || [];
-    validators.forEach(v => validatorSet.add(v));
-  }
-
-  // Filter out .NET-only validators for non-.NET projects
-  if (!profile.isDotnet) {
-    for (const v of DOTNET_ONLY_VALIDATORS) {
-      validatorSet.delete(v);
-    }
-  }
-
-  return Array.from(validatorSet);
-}
-
-/**
- * Run a single validator by ID
- */
-async function runSingleValidator(validatorId, projectPath, featureName, options) {
-  switch (validatorId) {
-    case 'architecture': {
-      const { validateArchitecture } = await import('./architecture/architecture-validator.js');
-      return await validateArchitecture(projectPath, options);
-    }
-
-    case 'packages': {
-      const { validatePackages } = await import('./packages/package-validator.js');
-      return await validatePackages(projectPath, options);
-    }
-
-    case 'contrast': {
-      const { validateContrast } = await import('./ui/ui-contrast-validator.js');
-      return await validateContrast(projectPath, options);
-    }
-
-    case 'css': {
-      const { validateCss } = await import('./css/css-validator.js');
-      return await validateCss(projectPath, options);
-    }
-
-    case 'contract-compliance': {
-      const { validateContracts } = await import('./contracts/contract-compliance-validator.js');
-      return await validateContracts(projectPath, featureName, options);
-    }
-
-    case 'design-system': {
-      const { validateDesignSystem } = await import('./design-system/design-system-validator.js');
-      return await validateDesignSystem(projectPath, featureName, options);
-    }
-
-    case 'nextjs-component': {
-      const { validateNextComponentFiles } = await import('./nextjs/next-component-validator.js');
-      return await validateNextComponentFiles(projectPath, options);
-    }
-
-    default:
-      if (options.verbose) {
-        console.log(chalk.gray(`  Unknown validator: ${validatorId}`));
-      }
-      return null;
-  }
-}
-
-/**
- * Format validation results for console output
- */
-export function formatValidationResults(result) {
-  if (result.passed && result.warnings === 0) {
-    const ranCount = Object.keys(result.results || {}).length;
-    const countLabel = ranCount > 0 ? ` (${ranCount} validator${ranCount !== 1 ? 's' : ''})` : '';
-    console.log(chalk.green(`\n  ✅ All validations passed${countLabel}!\n`));
-    return;
-  }
-
-  if (result.passed && result.warnings > 0) {
-    console.log(chalk.yellow(`\n  ⚠️  Passed with ${result.warnings} warning(s)\n`));
-  } else {
-    console.log(chalk.red(`\n  ❌ Validation FAILED: ${result.errors} error(s), ${result.warnings} warning(s)\n`));
-  }
-
-  // Group issues by level
-  const errors = result.issues.filter(i => i.level === 'error');
-  const warnings = result.issues.filter(i => i.level === 'warning');
-
-  if (errors.length > 0) {
-    console.log(chalk.red.bold('  Errors:'));
-    for (const issue of errors.slice(0, 10)) {
-      console.log(chalk.red(`    ✗ ${issue.message}`));
-      if (issue.file) console.log(chalk.gray(`      ${issue.file}${issue.line ? ':' + issue.line : ''}`));
-      if (issue.solution) console.log(chalk.cyan(`      Fix: ${issue.solution}`));
-    }
-    if (errors.length > 10) {
-      console.log(chalk.gray(`    ... and ${errors.length - 10} more errors`));
-    }
-  }
-
-  if (warnings.length > 0) {
-    console.log(chalk.yellow('\n  Warnings:'));
-    for (const issue of warnings.slice(0, 5)) {
-      console.log(chalk.yellow(`    ⚠ ${issue.message}`));
-      if (issue.file) console.log(chalk.gray(`      ${issue.file}`));
-    }
-    if (warnings.length > 5) {
-      console.log(chalk.gray(`    ... and ${warnings.length - 5} more warnings`));
-    }
-  }
-
-  console.log('');
-}
-
-/**
- * Read rubric ID from project config.
- * @param {string} projectPath
- * @returns {string}
- */
-function readRubricConfig(projectPath) {
-  try {
-    const configPath = join(projectPath, '.morph', 'config', 'config.json');
-    if (!existsSync(configPath)) return 'default';
-    const config = JSON.parse(readFileSync(configPath, 'utf8'));
-    return config.validation?.rubric ?? 'default';
-  } catch {
-    return 'default';
-  }
-}
-
-/**
- * Read threshold overrides from project config.
- * @param {string} projectPath
- * @returns {Object} { approve?: number, retry?: number }
- */
-function readThresholdConfig(projectPath) {
-  try {
-    const configPath = join(projectPath, '.morph', 'config', 'config.json');
-    if (!existsSync(configPath)) return {};
-    const config = JSON.parse(readFileSync(configPath, 'utf8'));
-    return config.validation?.thresholds ?? {};
-  } catch {
-    return {};
-  }
-}
+/**
+ * MORPH-SPEC Validation Runner
+ *
+ * Unified orchestrator that runs the right validators based on the feature's
+ * active agents and decisions. Called by task-done before marking tasks complete.
+ *
+ * MORPH-SPEC 3.0 - Phase A: Active Validation Pipeline
+ */
+
+import { existsSync, readFileSync } from 'fs';
+import { join } from 'path';
+import chalk from 'chalk';
+import { loadState } from '../../core/state/state-manager.js';
+import { getAbsoluteOutputPath, resolveContractsOutputType } from '../../core/paths/output-schema.js';
+import { getStackProfile } from '../stack/stack-profile.js';
+import { aggregateScores, loadRubric } from './score-aggregator.js';
+
+/** Validators that only make sense for .NET projects. */
+const DOTNET_ONLY_VALIDATORS = new Set([
+  'architecture', 'packages', 'contract-compliance'
+]);
+
+/**
+ * Heavy validators skipped in 'light' mode (checkpoint-only).
+ * Light mode runs only spec, content, and stack-specific lightweight validators.
+ */
+const HEAVY_VALIDATORS = new Set([
+  'architecture', 'packages', 'contract-compliance',
+  'css', 'design-system'
+]);
+
+/**
+ * Load agent → validators map from agents.json (data-driven)
+ * @param {string} projectPath - Root path of the project
+ * @returns {Object} Map of agent IDs to validator arrays
+ */
+function loadAgentValidatorMap(projectPath) {
+  try {
+    const agentsPath = join(projectPath, '.morph/framework/agents.json');
+    const agentsConfig = JSON.parse(readFileSync(agentsPath, 'utf8'));
+
+    const map = {};
+    Object.entries(agentsConfig.agents || {}).forEach(([agentId, agent]) => {
+      if (!agentId.startsWith('_comment') && agent.validators && agent.validators.length > 0) {
+        map[agentId] = agent.validators;
+      }
+    });
+
+    return map;
+  } catch (err) {
+    console.warn(chalk.yellow('⚠️  Failed to load agents.json - no validators will run'));
+    console.warn(chalk.gray(`   Run 'morph-spec init' to set up MORPH-SPEC configuration`));
+    return {}; // Empty map = honest failure
+  }
+}
+
+/**
+ * Run all relevant validators for a feature
+ *
+ * @param {string} projectPath - Project root path
+ * @param {string} featureName - Feature name from state.json
+ * @param {Object} options - Options
+ * @param {boolean} options.verbose - Show detailed output
+ * @param {string[]} options.validators - Specific validators to run (overrides agent-based detection)
+ * @returns {Object} { passed, errors, warnings, issues, summary }
+ */
+export async function runValidation(projectPath, featureName, options = {}) {
+  const result = {
+    passed: true,
+    errors: 0,
+    warnings: 0,
+    issues: [],
+    summary: '',
+    results: {} // Per-validator results for hooks integration
+  };
+
+  // Decision constraints support (stub - decision-constraint-loader removed as orphaned code)
+  const constraints = {
+    enabledValidators: [], // No constraint-based validators
+    validators: {} // No validator-specific constraints
+  };
+
+  // Determine which validators to run
+  const validatorIds = options.validators || detectValidators(featureName, projectPath);
+
+  // Filter by mode: 'light' skips heavy validators, 'full' (default) runs all
+  const mode = options.mode || 'full';
+  if (mode === 'light') {
+    const beforeCount = validatorIds.length;
+    for (let i = validatorIds.length - 1; i >= 0; i--) {
+      if (HEAVY_VALIDATORS.has(validatorIds[i])) {
+        validatorIds.splice(i, 1);
+      }
+    }
+  }
+
+  // Merge constraint-enabled validators
+  validatorIds.push(...constraints.enabledValidators);
+
+  if (validatorIds.length === 0) {
+    // Distinguish: no agents vs. no validators mapped
+    const state = loadState(false);
+    const activeAgents = state?.features?.[featureName]?.activeAgents || [];
+    if (activeAgents.length === 0) {
+      result.summary = 'No validators ran — feature has no active agents';
+      console.log(chalk.gray('\n  ℹ️  No validators configured (no active agents in state.json)'));
+      console.log(chalk.gray('     Add agents: morph-spec state add-agent ' + featureName + ' <agent-id>'));
+    } else {
+      result.summary = `No validators mapped for active agents: ${activeAgents.join(', ')}`;
+      console.log(chalk.gray(`\n  ℹ️  Agents [${activeAgents.join(', ')}] have no validators in agents.json`));
+    }
+    result._skipReason = result.summary;
+    return result;
+  }
+
+  // Always show what's running (even non-verbose) — helps confirm validators are active
+  console.log(chalk.gray(`\n  Running ${validatorIds.length} validator(s): ${validatorIds.join(', ')}`));
+  if (constraints.enabledValidators.length > 0) {
+    console.log(chalk.gray(`  (+ ${constraints.enabledValidators.length} from decisions)`));
+  }
+
+  // Always run contract compliance if the contracts file exists (stack-aware)
+  if (!options.skipContracts) {
+    const _profileForContracts = getStackProfile(projectPath);
+    const contractsType = resolveContractsOutputType(_profileForContracts.stack);
+    const contractsPath = getAbsoluteOutputPath(projectPath, featureName, contractsType);
+    if (existsSync(contractsPath) && !_profileForContracts.isNextjs) {
+      validatorIds.push('contract-compliance');
+    }
+  }
+
+  // Deduplicate
+  const uniqueValidators = [...new Set(validatorIds)];
+
+  // Run each validator
+  for (const validatorId of uniqueValidators) {
+    try {
+      // Pass validator-specific constraints from decisions.md
+      const validatorOptions = {
+        ...options,
+        constraints: constraints.validators[validatorId] || {}
+      };
+
+      const validatorResult = await runSingleValidator(validatorId, projectPath, featureName, validatorOptions);
+
+      if (validatorResult) {
+        result.errors += validatorResult.errors || 0;
+        result.warnings += validatorResult.warnings || 0;
+
+        if (validatorResult.issues) {
+          result.issues.push(...validatorResult.issues);
+        }
+
+        // Store per-validator results for hooks
+        result.results[validatorId] = {
+          passed: (validatorResult.errors || 0) === 0,
+          issues: validatorResult.issues || []
+        };
+      }
+    } catch (err) {
+      if (options.verbose) {
+        console.log(chalk.yellow(`  ⚠ Validator '${validatorId}' failed: ${err.message}`));
+      }
+      result.results[validatorId] = {
+        passed: false,
+        error: err.message
+      };
+    }
+  }
+
+  result.passed = result.errors === 0;
+  result.summary = result.passed
+    ? `✅ All validations passed (${result.warnings} warnings)`
+    : `❌ ${result.errors} error(s), ${result.warnings} warning(s)`;
+
+  // Score aggregation — layered on top of pass/fail
+  try {
+    const rubricId = readRubricConfig(projectPath);
+    const rubric = loadRubric(projectPath, rubricId);
+    const thresholdOverrides = readThresholdConfig(projectPath);
+    result.scores = aggregateScores(result, rubric, thresholdOverrides);
+  } catch {
+    // Score aggregation is non-blocking — if it fails, pass/fail still works
+    result.scores = null;
+  }
+
+  return result;
+}
+
+/**
+ * Detect which validators to run based on feature's active agents
+ * @param {string} featureName - Feature name
+ * @param {string} projectPath - Project root path (default: current directory)
+ * @returns {string[]} Array of validator IDs to run
+ */
+function detectValidators(featureName, projectPath = '.') {
+  const profile = getStackProfile(projectPath);
+  const state = loadState(false);
+
+  if (!state || !state.features[featureName]) {
+    return [...profile.defaultValidators]; // stack-aware defaults
+  }
+
+  const feature = state.features[featureName];
+  const agents = feature.activeAgents || [];
+  const validatorSet = new Set(profile.defaultValidators); // stack defaults first
+
+  const agentValidatorMap = loadAgentValidatorMap(projectPath);
+  for (const agentId of agents) {
+    const validators = agentValidatorMap[agentId] || [];
+    validators.forEach(v => validatorSet.add(v));
+  }
+
+  // Filter out .NET-only validators for non-.NET projects
+  if (!profile.isDotnet) {
+    for (const v of DOTNET_ONLY_VALIDATORS) {
+      validatorSet.delete(v);
+    }
+  }
+
+  return Array.from(validatorSet);
+}
+
+/**
+ * Run a single validator by ID
+ */
+async function runSingleValidator(validatorId, projectPath, featureName, options) {
+  switch (validatorId) {
+    case 'architecture': {
+      const { validateArchitecture } = await import('./architecture/architecture-validator.js');
+      return await validateArchitecture(projectPath, options);
+    }
+
+    case 'packages': {
+      const { validatePackages } = await import('./packages/package-validator.js');
+      return await validatePackages(projectPath, options);
+    }
+
+    case 'contrast': {
+      const { validateContrast } = await import('./ui/ui-contrast-validator.js');
+      return await validateContrast(projectPath, options);
+    }
+
+    case 'css': {
+      const { validateCss } = await import('./css/css-validator.js');
+      return await validateCss(projectPath, options);
+    }
+
+    case 'contract-compliance': {
+      const { validateContracts } = await import('./contracts/contract-compliance-validator.js');
+      return await validateContracts(projectPath, featureName, options);
+    }
+
+    case 'design-system': {
+      const { validateDesignSystem } = await import('./design-system/design-system-validator.js');
+      return await validateDesignSystem(projectPath, featureName, options);
+    }
+
+    case 'nextjs-component': {
+      const { validateNextComponentFiles } = await import('./nextjs/next-component-validator.js');
+      return await validateNextComponentFiles(projectPath, options);
+    }
+
+    default:
+      if (options.verbose) {
+        console.log(chalk.gray(`  Unknown validator: ${validatorId}`));
+      }
+      return null;
+  }
+}
+
+/**
+ * Format validation results for console output
+ */
+export function formatValidationResults(result) {
+  if (result.passed && result.warnings === 0) {
+    const ranCount = Object.keys(result.results || {}).length;
+    const countLabel = ranCount > 0 ? ` (${ranCount} validator${ranCount !== 1 ? 's' : ''})` : '';
+    console.log(chalk.green(`\n  ✅ All validations passed${countLabel}!\n`));
+    return;
+  }
+
+  if (result.passed && result.warnings > 0) {
+    console.log(chalk.yellow(`\n  ⚠️  Passed with ${result.warnings} warning(s)\n`));
+  } else {
+    console.log(chalk.red(`\n  ❌ Validation FAILED: ${result.errors} error(s), ${result.warnings} warning(s)\n`));
+  }
+
+  // Group issues by level
+  const errors = result.issues.filter(i => i.level === 'error');
+  const warnings = result.issues.filter(i => i.level === 'warning');
+
+  if (errors.length > 0) {
+    console.log(chalk.red.bold('  Errors:'));
+    for (const issue of errors.slice(0, 10)) {
+      console.log(chalk.red(`    ✗ ${issue.message}`));
+      if (issue.file) console.log(chalk.gray(`      ${issue.file}${issue.line ? ':' + issue.line : ''}`));
+      if (issue.solution) console.log(chalk.cyan(`      Fix: ${issue.solution}`));
+    }
+    if (errors.length > 10) {
+      console.log(chalk.gray(`    ... and ${errors.length - 10} more errors`));
+    }
+  }
+
+  if (warnings.length > 0) {
+    console.log(chalk.yellow('\n  Warnings:'));
+    for (const issue of warnings.slice(0, 5)) {
+      console.log(chalk.yellow(`    ⚠ ${issue.message}`));
+      if (issue.file) console.log(chalk.gray(`      ${issue.file}`));
+    }
+    if (warnings.length > 5) {
+      console.log(chalk.gray(`    ... and ${warnings.length - 5} more warnings`));
+    }
+  }
+
+  console.log('');
+}
+
+/**
+ * Read rubric ID from project config.
+ * @param {string} projectPath
+ * @returns {string}
+ */
+function readRubricConfig(projectPath) {
+  try {
+    const configPath = join(projectPath, '.morph', 'config', 'config.json');
+    if (!existsSync(configPath)) return 'default';
+    const config = JSON.parse(readFileSync(configPath, 'utf8'));
+    return config.validation?.rubric ?? 'default';
+  } catch {
+    return 'default';
+  }
+}
+
+/**
+ * Read threshold overrides from project config.
+ * @param {string} projectPath
+ * @returns {Object} { approve?: number, retry?: number }
+ */
+function readThresholdConfig(projectPath) {
+  try {
+    const configPath = join(projectPath, '.morph', 'config', 'config.json');
+    if (!existsSync(configPath)) return {};
+    const config = JSON.parse(readFileSync(configPath, 'utf8'));
+    return config.validation?.thresholds ?? {};
+  } catch {
+    return {};
+  }
+}