@williambeto/ai-workflow 2.9.4 → 2.9.6

package/{chunk-PP42PB7M.js → chunk-D2W2ZW3Y.js}

@@ -1062,4 +1062,4 @@ export {
   EvidenceCollector,
   ValidationPlanner
 };
-//# sourceMappingURL=chunk-PP42PB7M.js.map
+//# sourceMappingURL=chunk-D2W2ZW3Y.js.map

package/{chunk-JDSEOEYW.js → chunk-E7DHZFTN.js}

@@ -1795,7 +1795,7 @@ var Finalizer = class {
     const evidencePath = path7.join(this.cwd, "EVIDENCE.json");
     const hasEvidence = await fs8.access(evidencePath).then(() => true).catch(() => false);
     if (hasEvidence) {
-      const { EvidenceValidator } = await import("./evidence-validator-HS3NTWAB.js");
+      const { EvidenceValidator } = await import("./evidence-validator-6GD442JE.js");
       const isTest = process.env.NODE_ENV === "test" || process.env.VITEST === "true";
       const evidenceValidator = new EvidenceValidator({ cwd: this.cwd, skipFileCheck: isTest, skipGitCheck: isTest });
       const valResult = await evidenceValidator.validate();
@@ -2121,4 +2121,4 @@ export {
   ExecutionPlanner,
   WorkflowStateMachine
 };
-//# sourceMappingURL=chunk-JDSEOEYW.js.map
+//# sourceMappingURL=chunk-E7DHZFTN.js.map

package/{chunk-FNT7DN3N.js → chunk-XRYGVFHF.js}

@@ -6548,6 +6548,7 @@ import fs from "fs/promises";
 import path from "path";
 import { execFileSync } from "child_process";
 import { fileURLToPath } from "url";
+var Ajv = import_ajv.default;
 var EvidenceValidator = class {
   cwd;
   skipFileCheck;
@@ -6587,7 +6588,7 @@ var EvidenceValidator = class {
     try {
       const schemaContent = await fs.readFile(schemaPath, "utf8");
       const schema = JSON.parse(schemaContent);
-      const ajv = new import_ajv.default({ allErrors: true, allowUnionTypes: true });
+      const ajv = new Ajv({ allErrors: true, allowUnionTypes: true });
       const validateSchema = ajv.compile(schema);
       const valid = validateSchema(evidence);
       if (!valid) {
@@ -6678,4 +6679,4 @@ export {
   require_ajv,
   EvidenceValidator
 };
-//# sourceMappingURL=chunk-FNT7DN3N.js.map
+//# sourceMappingURL=chunk-XRYGVFHF.js.map

package/core/index.d.ts

@@ -269,7 +269,9 @@ declare class DelegationController {
     /**
      * Runs validation locally without logging Sage since no validation agent runtime was executed.
      */
-    validate(taskSlug: string, profile: string, verifyFn: () => Promise<Record<string, unknown>>, evidencePolicy?: "optional" | "required" | null): Promise<Record<string, unknown>>;
+    validate<T extends {
+        overallStatus: string;
+    }>(taskSlug: string, profile: string, verifyFn: () => Promise<T>, evidencePolicy?: "optional" | "required" | null): Promise<T>;
 }
 
 interface HandoffGenerateOptions {

package/core/index.js

@@ -12,7 +12,7 @@ import {
   WorkflowStateMachine,
   createRuntimeAdapter,
   resolveRuntime
-} from "../chunk-JDSEOEYW.js";
+} from "../chunk-E7DHZFTN.js";
 import {
   MergeGate
 } from "../chunk-H7GIKXFO.js";

package/dist-assets/commands/atlas.md

@@ -31,6 +31,13 @@ Route user requests safely, proportionately, and securely according to the permi
 - Route workspace implementation to Astra, never directly to a skill-backed specialist.
 - Printed code is not a substitute for a requested repository change.
 
+## Canonical policies
+Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
+- `01-BRANCH_GATE.md`
+- `03-QUALITY_GATE.md`
+- `05-AGENT_CONTRACT.md`
+- `06-FINAL_EVIDENCE_CONTRACT.md`
+
 ## Allowed tools
 - classify request
 - evaluate routing permissions

package/dist-assets/commands/deploy.md

@@ -32,6 +32,12 @@ Execute package publication or deployment securely after passing validation chec
 - Do not deploy if any validation check fails.
 - Do not claim deploy execution without verified deploy logs.
 
+## Canonical policies
+Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
+- `01-BRANCH_GATE.md`
+- `06-FINAL_EVIDENCE_CONTRACT.md`
+- `07-RELEASE_GATE.md`
+
 ## Allowed tools
 - execute deployment scripts
 - run environment smoke tests

package/dist-assets/commands/implement.md

@@ -31,6 +31,13 @@ Implement a small task with defined scope, verifying changes incrementally.
 - Do not claim implementation without validation evidence.
 - Treat the finalizer exit code and public status as authoritative.
 
+## Canonical policies
+Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
+- `01-BRANCH_GATE.md`
+- `03-QUALITY_GATE.md`
+- `06-FINAL_EVIDENCE_CONTRACT.md`
+- `PROCEDURE_UI_CHECKLIST.md`
+
 ## Allowed tools
 - read files
 - edit source files

package/dist-assets/commands/release.md

@@ -32,6 +32,12 @@ Coordinate the release process, verifying package status and generating release
 - Do not push to remote, publish to npm, or create git tags without user approval.
 - Do not claim release readiness without release evidence document.
 
+## Canonical policies
+Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
+- `01-BRANCH_GATE.md`
+- `06-FINAL_EVIDENCE_CONTRACT.md`
+- `07-RELEASE_GATE.md`
+
 ## Allowed tools
 - read version configuration
 - update changelog

package/dist-assets/commands/validate.md

@@ -29,6 +29,12 @@ Execute validation checks and compile an evidence report showing quality status.
 - All validation commands must exit 0.
 - Do not claim validation success without evidence log.
 
+## Canonical policies
+Resolve these policy files from the policies directory declared in `.ai-workflow/config.json`:
+- `03-QUALITY_GATE.md`
+- `06-FINAL_EVIDENCE_CONTRACT.md`
+- `PROCEDURE_UI_CHECKLIST.md`
+
 ## Allowed tools
 - execute test commands
 - run code linters

package/dist-assets/docs/cli-reference.md

@@ -128,7 +128,7 @@ Runs observed project validation and collects structured evidence.
 
 **Synopsis:**
 ```bash
-ai-workflow collect-evidence [--task=<slug>] [--mode=<mode>] [--dry-run] [--visual-dist=<path>] [--port=<port>]
+ai-workflow collect-evidence [--task=<slug>] [--mode=<mode>] [--base-ref=<git-ref>] [--dry-run] [--visual-dist=<path>] [--port=<port>]
 ```
 
 **Description:**
@@ -139,6 +139,7 @@ Executes validation scripts, collects results, and produces a delivery summary.
 | `--task=<slug>` | Optional task slug to associate with the evidence |
 | `--evidence-policy=<policy>` | Controls whether EVIDENCE.json is persisted: `optional` or `required` |
 | `--mode=<mode>` | (Deprecated) Legacy validation mode compatibility mapping: `quick`, `standard`, or `full` |
+| `--base-ref=<git-ref>` | Include committed changes since the merge base with this Git ref, plus current uncommitted changes |
 | `--dry-run` | Run checks without writing `EVIDENCE.json` |
 | `--visual-dist=<path>` | Path to built frontend assets for visual validation |
 | `--port=<port>` | Port for serving frontend assets |
@@ -146,6 +147,7 @@ Executes validation scripts, collects results, and produces a delivery summary.
 **Example:**
 ```bash
 ai-workflow collect-evidence --evidence-policy=required --task=auth-feature
+ai-workflow collect-evidence --evidence-policy=required --task=release-2-9-6 --base-ref=v2.9.5
 ai-workflow collect-evidence --dry-run
 ```
 

package/{evidence-validator-HS3NTWAB.js → evidence-validator-6GD442JE.js}

@@ -1,8 +1,8 @@
 import {
   EvidenceValidator
-} from "./chunk-FNT7DN3N.js";
+} from "./chunk-XRYGVFHF.js";
 import "./chunk-5WRI5ZAA.js";
 export {
   EvidenceValidator
 };
-//# sourceMappingURL=evidence-validator-HS3NTWAB.js.map
+//# sourceMappingURL=evidence-validator-6GD442JE.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@williambeto/ai-workflow",
-  "version": "2.9.4",
+  "version": "2.9.6",
   "description": "AI Workflow Kit — OpenCode-first software delivery workflow with agents, commands, skills, validation, and evidence",
   "license": "MIT",
   "author": "José Willams",
@@ -55,6 +55,6 @@
     "CHANGELOG.md"
   ],
   "dependencies": {
-    "@opencode-ai/sdk": "1.17.18"
+    "@opencode-ai/sdk": "1.18.3"
   }
 }

package/{validate-7G3HBE2K.js → validate-YMBSICJL.js}

@@ -3,7 +3,7 @@ import {
   QualityGuard,
   ValidationPlanner,
   VisualVerifier
-} from "./chunk-PP42PB7M.js";
+} from "./chunk-D2W2ZW3Y.js";
 import "./chunk-H7GIKXFO.js";
 import "./chunk-5WRI5ZAA.js";
 
@@ -86,4 +86,4 @@ async function runValidate({
 export {
   runValidate
 };
-//# sourceMappingURL=validate-7G3HBE2K.js.map
+//# sourceMappingURL=validate-YMBSICJL.js.map