@ttfw/envoi 1.0.0

package/dist/types/workspace_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace_state.d.ts","sourceRoot":"","sources":["../../src/types/workspace_state.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,oDAAoD;IACpD,KAAK,EAAE,MAAM,CAAC;IACd,8DAA8D;IAC9D,kBAAkB,EAAE,MAAM,CAAC;IAC3B,yDAAyD;IACzD,aAAa,EAAE,MAAM,CAAC;IACtB,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;AAEjD;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAE/D;;GAEG;AACH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,SAAS,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE/E;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,oDAAoD;IACpD,EAAE,EAAE,MAAM,CAAC;IACX,yBAAyB;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,YAAY,EAAE,MAAM,CAAC;IACrB,uCAAuC;IACvC,MAAM,EAAE,aAAa,GAAG,KAAK,GAAG,KAAK,CAAC;IACtC,8BAA8B;IAC9B,MAAM,EAAE,UAAU,CAAC;IACnB,6CAA6C;IAC7C,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mCAAmC;IACnC,gBAAgB,CAAC,EAAE,mBAAmB,CAAC;IACvC,oDAAoD;IACpD,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,wCAAwC;IACxC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+CAA+C;IAC/C,mBAAmB,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,+BAA+B;IAC/B,MAAM,EAAE,MAAM,CAAC;IACf,uBAAuB;IACvB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,wBAAwB;IACxB,UAAU,EAAE,MAAM,CAAC;IACnB,wBAAwB;IACxB,QAAQ,EAAE,OAAO,CAAC;IAClB,oCAAoC;IACpC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oCAAoC;IACpC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B,2DAA2D;IAC3D,OAAO,EAAE,YAAY,CAAC;IAEtB;;;;OAIG;IACH,cAAc,EAAE,OAAO,CAAC;IAExB,+DAA+D;IAC/D,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAE3B,yDAAyD;IACzD,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAE5B,6CAA6C;IAC7C,UAAU,CAAC,EAAE,cAAc,EAAE,CAAC;IAE9B,oDAAoD;IACpD,eAAe,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAExC,gEAAgE;IAChE,sBAAsB,CAAC,EAAE,eAAe,EAAE,CAAC;CAC5C"}

package/dist/types/workspace_state.js

@@ -0,0 +1,10 @@
+/**
+ * TypeScript interfaces for workspace state persistence.
+ *
+ * WorkspaceState tracks milestone progress and budget consumption
+ * across restarts, enabling budget enforcement and crash recovery.
+ *
+ * @see docs/NEW-PLAN.md lines 32-45
+ */
+export {};
+//# sourceMappingURL=workspace_state.js.map

package/dist/types/workspace_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace_state.js","sourceRoot":"","sources":["../../src/types/workspace_state.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/envoi.config.json

@@ -0,0 +1,191 @@
+{
+  "version": "1.0",
+  "product_name": "envoi",
+  "workspace_dir": "envoi",
+  "runner": {
+    "require_git": true,
+    "max_tick_seconds": 900,
+    "default_loop_mode": "task",
+    "lockfile": "envoi/lock.json",
+    "runner_owned_globs": [
+      "envoi/STATE.json",
+      "envoi/TASK.json",
+      "envoi/REPORT.json",
+      "envoi/REPORT.md",
+      "envoi/BLOCKED.json",
+      "envoi/FACTS.md",
+      "envoi/PRD.md",
+      "envoi/history/**",
+      "envoi/lock.json",
+      "envoi/schemas/**",
+      "envoi/prompts/**"
+    ],
+    "crash_cleanup": {
+      "delete_tmp_glob": "envoi/*.tmp",
+      "validate_runner_json_files": true
+    },
+    "render_report_md": {
+      "enabled": true,
+      "max_chars": 6000
+    },
+    "autonomy": {
+      "profile": "balanced",
+      "command_trust": [],
+      "fs_policy": "workspace_write",
+      "network_policy": "deny"
+    }
+  },
+  "claude_code_cli": {
+    "command": "claude",
+    "output_format": "json",
+    "no_session_persistence": true
+  },
+  "models": {
+    "orchestrator_model": "opus",
+    "orchestrator_fallback_model": "sonnet",
+    "builder_model": "sonnet",
+    "builder_fallback_model": "haiku"
+  },
+  "orchestrator": {
+    "max_turns": 3,
+    "permission_mode": "plan",
+    "allowed_tools": "",
+    "system_prompt_file": "envoi/prompts/orchestrator.system.txt",
+    "user_prompt_file": "envoi/prompts/orchestrator.user.txt",
+    "task_schema_file": "envoi/schemas/task.schema.json",
+    "max_parse_retries_per_tick": 1,
+    "max_budget_usd": 0.4
+  },
+  "builder": {
+    "default_mode": "cursor",
+    "allow_patch_mode": true,
+    "claude_code": {
+      "max_turns": 8,
+      "permission_mode": "bypassPermissions",
+      "allowed_tools": "Read,Edit,Glob,Grep,Bash",
+      "system_prompt_file": "envoi/prompts/builder.system.txt",
+      "user_prompt_file": "envoi/prompts/builder.user.txt",
+      "builder_result_schema_file": "envoi/schemas/builder_result.schema.json",
+      "max_budget_usd": 1.5,
+      "strict_builder_json": false
+    },
+    "patch": {
+      "max_patch_attempts_per_milestone": 10
+    },
+    "cursor": {
+      "driver_kind": "cursor_agent",
+      "command": "cursor",
+      "args": [
+        "agent",
+        "--print",
+        "--output-format",
+        "text",
+        "--workspace",
+        ".",
+        "--force"
+      ],
+      "timeout_seconds": 300,
+      "output_file": "BUILDER_RESULT.json"
+    }
+  },
+  "scope": {
+    "default_allowed_globs": [
+      "src/**",
+      "app/**",
+      "packages/**",
+      "tests/**",
+      "README.md"
+    ],
+    "default_forbidden_globs": [
+      ".git/**",
+      "envoi/**",
+      "**/.env*",
+      "**/*secret*",
+      "**/*token*",
+      "**/node_modules/**"
+    ],
+    "default_allow_new_files": false,
+    "default_allow_lockfile_changes": false,
+    "lockfiles": [
+      "pnpm-lock.yaml",
+      "package-lock.json",
+      "yarn.lock",
+      "bun.lockb"
+    ]
+  },
+  "diff_limits": {
+    "default_max_files_touched": 12,
+    "default_max_lines_changed": 400
+  },
+  "verification": {
+    "execution_mode": "argv_no_shell",
+    "max_param_len": 128,
+    "reject_whitespace_in_params": true,
+    "reject_dotdot": true,
+    "reject_metachars_regex": "[;&|$\\\\><(){}\\[\\]`\\n\\r\\t\\0]",
+    "timeout_fast_seconds": 90,
+    "timeout_slow_seconds": 600,
+    "templates": [
+      {
+        "id": "lint",
+        "cmd": "pnpm",
+        "args": [
+          "lint"
+        ]
+      },
+      {
+        "id": "typecheck",
+        "cmd": "pnpm",
+        "args": [
+          "typecheck"
+        ]
+      },
+      {
+        "id": "test",
+        "cmd": "pnpm",
+        "args": [
+          "test"
+        ]
+      },
+      {
+        "id": "test_filter",
+        "cmd": "pnpm",
+        "args": [
+          "test",
+          "--filter",
+          "{{pkg}}"
+        ],
+        "params": {
+          "pkg": {
+            "kind": "string_token"
+          }
+        }
+      }
+    ]
+  },
+  "budgets": {
+    "per_milestone": {
+      "max_ticks": 200,
+      "max_orchestrator_calls": 260,
+      "max_builder_calls": 200,
+      "max_verify_runs": 600,
+      "max_estimated_cost_usd": 80
+    },
+    "warn_at_fraction": 0.8
+  },
+  "history": {
+    "enabled": true,
+    "dir": "history",
+    "max_mb": 500,
+    "include_diff_patch": true,
+    "include_verify_log": true
+  },
+  "git": {
+    "branching": {
+      "mode": "off",
+      "name_template": "envoi/{{task_id}}",
+      "base_ref": "HEAD",
+      "n_tasks": 5
+    }
+  }
+}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@ttfw/envoi",
+  "version": "1.0.0",
+  "description": "Deterministic orchestration runner for AI workflows: planner -> builder -> checker",
+  "type": "module",
+  "main": "dist/index.js",
+  "bin": {
+    "envoi": "dist/index.js",
+    "relais": "dist/index.js"
+  },
+  "files": [
+    "dist/**",
+    "relais/prompts/**",
+    "relais/schemas/**",
+    "envoi.config.json",
+    "README.md"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "scripts": {
+    "build": "tsc",
+    "pack:check": "node scripts/pack-check.mjs",
+    "prepack": "npm run -s build && node scripts/pack-check.mjs",
+    "dev": "tsx src/index.ts",
+    "start": "node dist/index.js",
+    "test": "pnpm -s build && vitest",
+    "typecheck": "tsc --noEmit"
+  },
+  "keywords": [
+    "claude",
+    "orchestration",
+    "ai",
+    "automation"
+  ],
+  "author": "",
+  "license": "ISC",
+  "packageManager": "pnpm@10.24.0",
+  "dependencies": {
+    "ajv": "^8.17.1",
+    "commander": "^14.0.2",
+    "micromatch": "^4.0.8"
+  },
+  "devDependencies": {
+    "@types/micromatch": "^4.0.9",
+    "@types/node": "^25.0.10",
+    "@vitest/coverage-v8": "^4.0.18",
+    "tsx": "^4.21.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.18"
+  }
+}

package/relais/prompts/builder.system.txt

@@ -0,0 +1,13 @@
+You are Envoi's builder.
+
+Execute TASK safely and minimally.
+
+Rules:
+- Output exactly one JSON object matching `builder_result.schema.json`.
+- No markdown, no code fences, no extra text.
+- Obey TASK scope: only allowed_globs, never forbidden_globs.
+- Do not touch runner-owned files, `.git/**`, secrets, or `node_modules`.
+- Keep diff focused; no drive-by refactors or formatting.
+- Do not change lockfiles unless `allow_lockfile_changes=true`.
+- Do not create files unless `allow_new_files=true`.
+- If blocked, return builder_result with clear notes and stop.

package/relais/prompts/builder.user.txt

@@ -0,0 +1,15 @@
+Execute this task.
+
+Return ONLY one `builder_result` JSON object matching `builder_result.schema.json`.
+
+TASK_JSON:
+{{TASK_JSON}}
+
+Constraints:
+- allowed_globs={{ALLOWED_GLOBS}}
+- forbidden_globs={{FORBIDDEN_GLOBS}}
+- allow_new_files={{ALLOW_NEW_FILES}}
+- allow_lockfile_changes={{ALLOW_LOCKFILE_CHANGES}}
+- diff_limits=files<= {{MAX_FILES_TOUCHED}}, lines<= {{MAX_LINES_CHANGED}}
+- If `task_kind` is `verify_only` or `question`, do not modify files.
+- Do not invent verification results; runner executes verification separately.

package/relais/prompts/orchestrator.system.txt

@@ -0,0 +1,37 @@
+You are Envoi's orchestrator.
+
+Return exactly ONE task JSON object. Nothing else.
+
+Core rules:
+- Output must be valid JSON matching `task.schema.json`.
+- No markdown, no code fences, no commentary.
+- Propose the smallest safe next step.
+- Respect budgets, scope constraints, and builder capabilities in the user prompt.
+- Never touch runner-owned files or forbidden paths.
+- If a safe task is not possible, emit `task_kind="question"` with a clear product-level prompt.
+
+Task policy:
+- `execute`: code edits expected.
+- `verify_only` / `question`: zero-diff tasks.
+- Use minimal `allowed_globs`; keep `forbidden_globs` strict.
+- Keep `allow_new_files=false` and `allow_lockfile_changes=false` unless required.
+- Use conservative `diff_limits`.
+- Use only provided verification template IDs.
+
+Builder policy:
+- Prefer `mode="cursor"` only when cursor is configured.
+- Otherwise use `mode="claude_code"`.
+- Keep `max_turns` tight (typically 4-8).
+- `instructions` must be concrete and implementation-ready.
+
+PM policy for idea intake:
+- Integrate pending ideas into roadmap decisions.
+- Do not push technical choices to the user.
+- Ask only high-impact product clarifications (timeline, urgency, testability).
+- Include `planning_decision` when ideas are considered:
+  - `decision`: `schedule_now` | `schedule_next` | `defer`
+  - concise rationale and milestone hint when useful.
+
+Anti-loop policy:
+- Avoid re-dispatching the same failed task fingerprint.
+- If you need to retry, change intent/scope/verification so fingerprint differs.

package/relais/prompts/orchestrator.user.txt

@@ -0,0 +1,34 @@
+You are orchestrating the next tick for Envoi.
+
+Return EXACTLY one JSON object matching `task.schema.json`. Nothing else.
+
+CONTEXT
+- project_goal: {{PROJECT_GOAL}}
+- milestone_id: {{MILESTONE_ID}}
+- budget_status: {{BUDGETS_SUMMARY}}
+- verify_template_ids: {{VERIFY_TEMPLATE_IDS}}
+- repo_summary: {{REPO_SUMMARY}}
+- facts_md: {{FACTS_MD}}
+- prd_md: {{PRD_MD}}
+- last_report_md: {{LAST_REPORT_MD}}
+- pending_ideas_json: {{PENDING_IDEAS_JSON}}
+- planning_digest_json: {{PLANNING_DIGEST_JSON}}
+- open_product_questions_json: {{OPEN_PRODUCT_QUESTIONS_JSON}}
+- blocked_json_or_empty: {{BLOCKED_JSON_OR_EMPTY}}
+- builder_default_mode: {{BUILDER_DEFAULT_MODE}}
+- builder_cursor_configured: {{BUILDER_CURSOR_CONFIGURED}}
+
+NON-NEGOTIABLE
+- One tick only.
+- Scope is enforced from git reality.
+- `verify_only` and `question` must produce zero diff.
+- Treat pending ideas like a PM: schedule now/next/defer, avoid technical burdens on user.
+
+OUTPUT POLICY
+- If workspace is fresh (`milestone_id="none"` or PRD changed), first return `task_kind="question"` with:
+  - 3-7 proposed milestones
+  - up to 5 product clarifying questions
+  - `control: { "action": "stop" }`
+- For `question` tasks, still fill required fields (`scope`, `diff_limits`, `verification`).
+- Otherwise return the smallest safe `execute` task.
+- If ideas are considered, include `planning_decision` with idea IDs, decision, rationale, optional milestone.

package/relais/prompts/reviewer.system.txt

@@ -0,0 +1,33 @@
+You are the Reviewer (Eyes) for Envoi.
+
+Your job: review builder output and decide whether to proceed, request a patch, or ask a clarifying question.
+
+Hard rules:
+
+- Output MUST be a single JSON object matching reviewer_result.schema.json and NOTHING ELSE.
+
+- No markdown. No code fences. No commentary.
+
+- You are READ-ONLY. You cannot modify files or execute commands.
+
+- Safety first: block anything that violates scope, introduces security risks, or breaks critical functionality.
+
+Decision meanings:
+
+- proceed: The changes are safe and acceptable. The orchestrator will merge.
+
+- force_patch: The changes need correction before proceeding. Provide patch_hint with specific guidance. The orchestrator will re-dispatch with your patch_hint.
+
+- ask_question: You need clarification from the human. Provide question object with prompt and optional choices. The orchestrator will pause and wait for human response.
+
+Review criteria:
+
+- Scope compliance: Are all touched files within allowed_globs? Any forbidden paths touched?
+
+- Risk assessment: Are there security, performance, or correctness concerns?
+
+- Verification results: Did verifications pass? Are there suspicious failures?
+
+- Diff quality: Is the diff minimal and focused? Any unnecessary changes?
+
+- Task completion: Does the output match the task intent?

package/relais/prompts/reviewer.user.txt

@@ -0,0 +1,35 @@
+Review this builder output and decide: proceed, force_patch, or ask_question.
+
+Return ONLY reviewer_result JSON matching reviewer_result.schema.json. Nothing else.
+
+=== RISK FLAGS ===
+
+{{RISK_FLAGS}}
+
+=== TASK ===
+
+{{TASK_JSON}}
+
+=== LAST REPORT ===
+
+{{LAST_REPORT_MD}}
+
+=== DIFF PATCH ===
+
+{{DIFF_PATCH_OR_EMPTY}}
+
+=== VERIFY LOG EXCERPT ===
+
+{{VERIFY_LOG_EXCERPT_OR_EMPTY}}
+
+=== TOUCHED PATHS ===
+
+{{TOUCHED_PATHS}}
+
+=== YOUR DECISION ===
+
+Review the above and output your decision:
+
+- proceed: Changes are safe and acceptable
+- force_patch: Changes need correction (provide patch_hint)
+- ask_question: Need human clarification (provide question object)

package/relais/schemas/builder_result.schema.json

@@ -0,0 +1,29 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://envoi.local/schemas/builder_result.schema.json",
+  "title": "Envoi Builder Result",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["summary", "files_intended", "commands_ran", "notes"],
+  "properties": {
+    "summary": { "type": "string", "minLength": 1, "maxLength": 800 },
+    "files_intended": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1, "maxLength": 300 },
+      "minItems": 0,
+      "maxItems": 200
+    },
+    "commands_ran": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1, "maxLength": 300 },
+      "minItems": 0,
+      "maxItems": 50
+    },
+    "notes": {
+      "type": "array",
+      "items": { "type": "string", "minLength": 1, "maxLength": 300 },
+      "minItems": 0,
+      "maxItems": 20
+    }
+  }
+}

package/relais/schemas/report.schema.json

@@ -0,0 +1,195 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://envoi.local/schemas/report.schema.json",
+  "title": "Envoi Report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "run_id",
+    "started_at",
+    "ended_at",
+    "duration_ms",
+    "base_commit",
+    "head_commit",
+    "task",
+    "verdict",
+    "code",
+    "blast_radius",
+    "scope",
+    "diff",
+    "verification",
+    "budgets"
+  ],
+  "properties": {
+    "run_id": { "type": "string", "minLength": 8, "maxLength": 80 },
+    "started_at": { "type": "string", "format": "date-time" },
+    "ended_at": { "type": "string", "format": "date-time" },
+    "duration_ms": { "type": "integer", "minimum": 0 },
+    "base_commit": { "type": "string", "minLength": 7, "maxLength": 64 },
+    "head_commit": { "type": "string", "minLength": 7, "maxLength": 64 },
+    "task": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["task_id", "milestone_id", "task_kind", "intent"],
+      "properties": {
+        "task_id": { "type": "string" },
+        "milestone_id": { "type": "string" },
+        "task_kind": { "type": "string", "enum": ["execute", "verify_only", "question"] },
+        "intent": { "type": "string" }
+      }
+    },
+    "verdict": { "type": "string", "enum": ["success", "stop", "blocked"] },
+    "code": {
+      "type": "string",
+      "enum": [
+        "SUCCESS",
+        "STOP_SCOPE_VIOLATION_FORBIDDEN",
+        "STOP_SCOPE_VIOLATION_OUTSIDE_ALLOWED",
+        "STOP_SCOPE_VIOLATION_NEW_FILE",
+        "STOP_LOCKFILE_CHANGE_FORBIDDEN",
+        "STOP_DIFF_TOO_LARGE",
+        "STOP_VERIFY_FAILED_FAST",
+        "STOP_VERIFY_FAILED_SLOW",
+        "STOP_VERIFY_TAINTED",
+        "STOP_VERIFY_ONLY_SIDE_EFFECTS",
+        "STOP_QUESTION_SIDE_EFFECTS",
+        "STOP_RUNNER_OWNED_MUTATION",
+        "STOP_BUILDER_JSON_PARSE",
+        "STOP_BUILDER_SCHEMA_INVALID",
+        "STOP_BUILDER_SHAPE_INVALID",
+        "STOP_BUILDER_CLI_ERROR",
+        "STOP_BUILDER_TIMEOUT",
+        "STOP_HEAD_MOVED",
+        "STOP_INTERRUPTED",
+        "STOP_REVIEWER_FORCED_PATCH",
+        "STOP_REVIEWER_ASK_QUESTION",
+        "STOP_ORCHESTRATOR_ASK_QUESTION",
+        "STOP_REDISPATCH_IDENTICAL_TASK",
+        "STOP_VERIFY_FLAKY_OR_TIMEOUT",
+        "STOP_ORCHESTRATOR_TIMEOUT",
+        "STOP_MERGE_DIRTY_WORKTREE",
+        "STOP_BRANCH_MISMATCH",
+        "STOP_EVIDENCE_INCOMPLETE",
+        "BLOCKED_BUDGET_EXHAUSTED",
+        "BLOCKED_DIRTY_WORKTREE",
+        "BLOCKED_LOCK_HELD",
+        "BLOCKED_CRASH_RECOVERY_REQUIRED",
+        "BLOCKED_ORCHESTRATOR_OUTPUT_INVALID",
+        "BLOCKED_HISTORY_CAP_CLEANUP_REQUIRED",
+        "BLOCKED_MISSING_CONFIG",
+        "BLOCKED_BUDGET_CAP",
+        "BLOCKED_TRANSPORT_STALLED",
+        "BLOCKED_ROLLBACK_FAILED",
+        "BLOCKED_ROLLBACK_DIRTY",
+        "BLOCKED_BUILDER_COMMAND_NOT_FOUND",
+        "BLOCKED_BRANCH_FAILED"
+      ]
+    },
+    "blast_radius": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["files_touched", "lines_added", "lines_deleted", "new_files"],
+      "properties": {
+        "files_touched": { "type": "integer", "minimum": 0 },
+        "lines_added": { "type": "integer", "minimum": 0 },
+        "lines_deleted": { "type": "integer", "minimum": 0 },
+        "new_files": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "scope": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["ok", "violations", "touched_paths"],
+      "properties": {
+        "ok": { "type": "boolean" },
+        "violations": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 200 },
+          "minItems": 0,
+          "maxItems": 200
+        },
+        "touched_paths": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 400 },
+          "minItems": 0,
+          "maxItems": 500
+        }
+      }
+    },
+    "diff": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["files_changed", "lines_changed", "diff_patch_path"],
+      "properties": {
+        "files_changed": { "type": "integer", "minimum": 0 },
+        "lines_changed": { "type": "integer", "minimum": 0 },
+        "diff_patch_path": { "type": "string", "minLength": 1, "maxLength": 300 }
+      }
+    },
+    "verification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["exec_mode", "runs", "verify_log_path"],
+      "properties": {
+        "exec_mode": { "type": "string", "enum": ["argv_no_shell"] },
+        "runs": {
+          "type": "array",
+          "items": {
+            "type": "object",
+            "additionalProperties": false,
+            "required": ["template_id", "phase", "cmd", "args", "exit_code", "duration_ms", "timed_out"],
+            "properties": {
+              "template_id": { "type": "string", "minLength": 1, "maxLength": 64 },
+              "phase": { "type": "string", "enum": ["fast", "slow"] },
+              "cmd": { "type": "string", "minLength": 1, "maxLength": 120 },
+              "args": {
+                "type": "array",
+                "items": { "type": "string", "maxLength": 200 },
+                "minItems": 0,
+                "maxItems": 40
+              },
+              "exit_code": { "type": "integer", "minimum": -1, "maximum": 255 },
+              "duration_ms": { "type": "integer", "minimum": 0 },
+              "timed_out": { "type": "boolean" }
+            }
+          },
+          "minItems": 0,
+          "maxItems": 40
+        },
+        "verify_log_path": { "type": "string", "minLength": 1, "maxLength": 300 }
+      }
+    },
+    "budgets": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["milestone_id", "ticks", "orchestrator_calls", "builder_calls", "verify_runs", "estimated_cost_usd", "warnings"],
+      "properties": {
+        "milestone_id": { "type": "string" },
+        "ticks": { "type": "integer", "minimum": 0 },
+        "orchestrator_calls": { "type": "integer", "minimum": 0 },
+        "builder_calls": { "type": "integer", "minimum": 0 },
+        "verify_runs": { "type": "integer", "minimum": 0 },
+        "estimated_cost_usd": { "type": "number", "minimum": 0 },
+        "warnings": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1, "maxLength": 200 },
+          "minItems": 0,
+          "maxItems": 20
+        }
+      }
+    },
+    "pointers": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "report_md_path": { "type": "string" },
+        "history_dir": { "type": "string" }
+      }
+    },
+    "reviewer_error": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 1000
+    }
+  }
+}