@ztothez/design-engineering 2.0.0

package/dist/src/portfolio/vault.js

@@ -0,0 +1,176 @@
+import { readdir, rm, unlink } from "node:fs/promises";
+import { join, resolve } from "node:path";
+import { z } from "zod";
+export const evidenceClassSchema = z.enum([
+    "private-raw",
+    "redacted-report",
+    "approved-screenshot",
+    "public-synthetic",
+    "aggregate-metrics",
+]);
+export const policyDecisionSchema = z.enum([
+    "retained-by-policy",
+    "redacted-machine-path",
+    "screenshot-opt-in-approved",
+    "screenshot-disabled-by-policy",
+    "public-synthetic",
+]);
+const SECRET_PATTERNS = [
+    { name: "AWS Access Key", regex: /\bAKIA[0-9A-Z]{16}\b/g },
+    { name: "AWS Secret Key", regex: /(?:aws_secret_access_key|aws_secret_key)\s*[:=]\s*['"]?([A-Za-z0-9/+=]{40})['"]?/gi },
+    { name: "Bearer Token", regex: /\bBearer\s+[A-Za-z0-9._~+/-]+=*\b/gi },
+    { name: "Private Key Header", regex: /-----BEGIN\s+(?:[A-Z\s]+)?PRIVATE\s+KEY-----/g },
+    { name: "Generic API Key Assignment", regex: /(?:api[_-]?key|secret[_-]?key|auth[_-]?token|access[_-]?token)\s*[:=]\s*['"]([A-Za-z0-9._~+/-]{16,})['"]/gi },
+    { name: "Password Assignment", regex: /(?:password|passwd|pwd)\s*[:=]\s*['"]([^'"]{6,})['"]/gi },
+];
+const PROHIBITED_PATH_PATTERNS = [
+    { name: "Unix Home Directory", regex: /\/(?:home|Users)\/[A-Za-z0-9_-]+\/[^\s"':;()<>]+/g },
+    { name: "Windows User Directory", regex: /[A-Za-z]:\\Users\\[A-Za-z0-9_-]+\\[^\s"':;()<>]+/g },
+];
+export function scanTextForSecretsAndPaths(content, options = {}) {
+    const violations = [];
+    for (const pattern of SECRET_PATTERNS) {
+        pattern.regex.lastIndex = 0;
+        let match;
+        while ((match = pattern.regex.exec(content)) !== null) {
+            const snippet = match[0].slice(0, 60);
+            violations.push({
+                type: "secret",
+                pattern: pattern.name,
+                snippet,
+            });
+        }
+    }
+    for (const pattern of PROHIBITED_PATH_PATTERNS) {
+        pattern.regex.lastIndex = 0;
+        let match;
+        while ((match = pattern.regex.exec(content)) !== null) {
+            const pathMatch = match[0];
+            if (options.allowWorkspaceRoot &&
+                (pathMatch === options.allowWorkspaceRoot || pathMatch.startsWith(`${options.allowWorkspaceRoot}/`))) {
+                continue;
+            }
+            if (options.allowSourceRoot &&
+                (pathMatch === options.allowSourceRoot || pathMatch.startsWith(`${options.allowSourceRoot}/`))) {
+                continue;
+            }
+            violations.push({
+                type: "prohibited-absolute-path",
+                pattern: pattern.name,
+                snippet: pathMatch.slice(0, 80),
+            });
+        }
+    }
+    return {
+        passed: violations.length === 0,
+        violations,
+    };
+}
+export function redactMachinePathsAndSecrets(content, context = {}) {
+    let redacted = content;
+    if (context.sourceRoot) {
+        const canonical = resolve(context.sourceRoot);
+        redacted = redacted.replaceAll(canonical, "[source]");
+    }
+    if (context.workspaceRoot) {
+        const canonical = resolve(context.workspaceRoot);
+        redacted = redacted.replaceAll(canonical, "[workspace]");
+    }
+    redacted = redacted.replace(/\/(?:home|Users)\/[A-Za-z0-9_-]+/g, "[home]");
+    redacted = redacted.replace(/[A-Za-z]:\\Users\\[A-Za-z0-9_-]+/g, "[home]");
+    redacted = redacted.replace(/([?&](?:token|key|secret|auth|password|access_token)=)[^&\s]+/gi, "$1[redacted]");
+    for (const pattern of SECRET_PATTERNS) {
+        pattern.regex.lastIndex = 0;
+        redacted = redacted.replace(pattern.regex, "[REDACTED_SECRET]");
+    }
+    return redacted;
+}
+export function enforceArtifactPublicationPolicy(artifacts, project, sourceDigest) {
+    const retainedArtifacts = [];
+    const purgedArtifacts = [];
+    const screenshotAllowed = project.publication.screenshots &&
+        project.confidentiality !== "restricted" &&
+        project.ownership !== "unknown";
+    for (const artifact of artifacts) {
+        const isScreenshot = artifact.kind === "screenshot" || /[.]png$/i.test(artifact.path);
+        if (isScreenshot) {
+            if (screenshotAllowed) {
+                retainedArtifacts.push({
+                    ...artifact,
+                    evidenceClass: "approved-screenshot",
+                    policyDecision: "screenshot-opt-in-approved",
+                    sourceDigest: sourceDigest ?? artifact.sourceDigest,
+                });
+            }
+            else {
+                purgedArtifacts.push({
+                    ...artifact,
+                    evidenceClass: "private-raw",
+                    policyDecision: "screenshot-disabled-by-policy",
+                    sourceDigest: sourceDigest ?? artifact.sourceDigest,
+                });
+            }
+        }
+        else {
+            const isReport = artifact.kind === "report" || /[.](?:json|md|ya?ml)$/i.test(artifact.path);
+            const evidenceClass = isReport
+                ? "redacted-report"
+                : artifact.kind === "log"
+                    ? "private-raw"
+                    : "private-raw";
+            const policyDecision = "retained-by-policy";
+            retainedArtifacts.push({
+                ...artifact,
+                evidenceClass,
+                policyDecision,
+                sourceDigest: sourceDigest ?? artifact.sourceDigest,
+            });
+        }
+    }
+    return { retainedArtifacts, purgedArtifacts };
+}
+export async function deleteProjectEvidence(runRoot, runId, projectId) {
+    const targetDir = projectId
+        ? join(resolve(runRoot), runId, projectId)
+        : join(resolve(runRoot), runId);
+    let deletedFiles = 0;
+    const removeEntries = async (directory) => {
+        let entries;
+        try {
+            entries = await readdir(directory, { withFileTypes: true });
+        }
+        catch {
+            return;
+        }
+        for (const entry of entries) {
+            const fullPath = join(directory, entry.name);
+            if (entry.name === "report.json" && !projectId) {
+                continue;
+            }
+            if (entry.isDirectory()) {
+                await removeEntries(fullPath);
+                try {
+                    await rm(fullPath, { recursive: true, force: true });
+                }
+                catch {
+                    // Ignore removal errors for non-empty dirs
+                }
+            }
+            else if (entry.isFile()) {
+                await unlink(fullPath);
+                deletedFiles += 1;
+            }
+        }
+    };
+    await removeEntries(targetDir);
+    if (projectId) {
+        try {
+            await rm(targetDir, { recursive: true, force: true });
+        }
+        catch {
+            // Ignore if dir cannot be removed
+        }
+    }
+    return { deletedFiles, runId, projectId };
+}
+//# sourceMappingURL=vault.js.map

package/dist/src/portfolio/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../../src/portfolio/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAY,EAAE,EAAQ,MAAM,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAc,IAAI,EAAY,OAAO,EAAO,MAAM,WAAW,CAAC;AACrE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC;IACxC,aAAa;IACb,iBAAiB;IACjB,qBAAqB;IACrB,kBAAkB;IAClB,mBAAmB;CACpB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,oBAAoB;IACpB,uBAAuB;IACvB,4BAA4B;IAC5B,+BAA+B;IAC/B,kBAAkB;CACnB,CAAC,CAAC;AAwBH,MAAM,eAAe,GAAG;IACtB,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,uBAAuB,EAAE;IAC1D,EAAE,IAAI,EAAE,gBAAgB,EAAE,KAAK,EAAE,oFAAoF,EAAE;IACvH,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,qCAAqC,EAAE;IACtE,EAAE,IAAI,EAAE,oBAAoB,EAAE,KAAK,EAAE,+CAA+C,EAAE;IACtF,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,4GAA4G,EAAE;IAC3J,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,wDAAwD,EAAE;CACjG,CAAC;AAEF,MAAM,wBAAwB,GAAG;IAC/B,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,mDAAmD,EAAE;IAC3F,EAAE,IAAI,EAAE,wBAAwB,EAAE,KAAK,EAAE,mDAAmD,EAAE;CAC/F,CAAC;AAEF,MAAM,UAAU,0BAA0B,CACxC,OAAe,EACf,UAAqE,EAAE;IAEvE,MAAM,UAAU,GAA6B,EAAE,CAAC;IAEhD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtC,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO;aACR,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,wBAAwB,EAAE,CAAC;QAC/C,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,IAAI,KAA6B,CAAC;QAClC,OAAO,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YACtD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC3B,IACE,OAAO,CAAC,kBAAkB;gBAC1B,CAAC,SAAS,KAAK,OAAO,CAAC,kBAAkB,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,kBAAkB,GAAG,CAAC,CAAC,EACpG,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IACE,OAAO,CAAC,eAAe;gBACvB,CAAC,SAAS,KAAK,OAAO,CAAC,eAAe,IAAI,SAAS,CAAC,UAAU,CAAC,GAAG,OAAO,CAAC,eAAe,GAAG,CAAC,CAAC,EAC9F,CAAC;gBACD,SAAS;YACX,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACd,IAAI,EAAE,0BAA0B;gBAChC,OAAO,EAAE,OAAO,CAAC,IAAI;gBACrB,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM,KAAK,CAAC;QAC/B,UAAU;KACX,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,4BAA4B,CAC1C,OAAe,EACf,UAII,EAAE;IAEN,IAAI,QAAQ,GAAG,OAAO,CAAC;IAEvB,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;QACvB,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC9C,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;QACjD,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAC3D,CAAC;IAED,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;IAC3E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,mCAAmC,EAAE,QAAQ,CAAC,CAAC;IAE3E,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,iEAAiE,EAAE,cAAc,CAAC,CAAC;IAE/G,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC;QAC5B,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;IAClE,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,gCAAgC,CAC9C,SAA+B,EAC/B,OAAyB,EACzB,YAAqB;IAKrB,MAAM,iBAAiB,GAAyB,EAAE,CAAC;IACnD,MAAM,eAAe,GAAyB,EAAE,CAAC;IAEjD,MAAM,iBAAiB,GACrB,OAAO,CAAC,WAAW,CAAC,WAAW;QAC/B,OAAO,CAAC,eAAe,KAAK,YAAY;QACxC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC;IAElC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,KAAK,YAAY,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEtF,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,iBAAiB,EAAE,CAAC;gBACtB,iBAAiB,CAAC,IAAI,CAAC;oBACrB,GAAG,QAAQ;oBACX,aAAa,EAAE,qBAAqB;oBACpC,cAAc,EAAE,4BAA4B;oBAC5C,YAAY,EAAE,YAAY,IAAI,QAAQ,CAAC,YAAY;iBACpD,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,eAAe,CAAC,IAAI,CAAC;oBACnB,GAAG,QAAQ;oBACX,aAAa,EAAE,aAAa;oBAC5B,cAAc,EAAE,+BAA+B;oBAC/C,YAAY,EAAE,YAAY,IAAI,QAAQ,CAAC,YAAY;iBACpD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,wBAAwB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5F,MAAM,aAAa,GAAkB,QAAQ;gBAC3C,CAAC,CAAC,iBAAiB;gBACnB,CAAC,CAAC,QAAQ,CAAC,IAAI,KAAK,KAAK;oBACvB,CAAC,CAAC,aAAa;oBACf,CAAC,CAAC,aAAa,CAAC;YACpB,MAAM,cAAc,GAAmB,oBAAoB,CAAC;YAE5D,iBAAiB,CAAC,IAAI,CAAC;gBACrB,GAAG,QAAQ;gBACX,aAAa;gBACb,cAAc;gBACd,YAAY,EAAE,YAAY,IAAI,QAAQ,CAAC,YAAY;aACpD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAe,EACf,KAAa,EACb,SAAkB;IAElB,MAAM,SAAS,GAAG,SAAS;QACzB,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,CAAC;QAC1C,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IAElC,IAAI,YAAY,GAAG,CAAC,CAAC;IAErB,MAAM,aAAa,GAAG,KAAK,EAAE,SAAiB,EAAiB,EAAE;QAC/D,IAAI,OAAO,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC/C,SAAS;YACX,CAAC;YACD,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;gBACxB,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;gBAC9B,IAAI,CAAC;oBACH,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvD,CAAC;gBAAC,MAAM,CAAC;oBACP,2CAA2C;gBAC7C,CAAC;YACH,CAAC;iBAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC1B,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;gBACvB,YAAY,IAAI,CAAC,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,aAAa,CAAC,SAAS,CAAC,CAAC;IAE/B,IAAI,SAAS,EAAE,CAAC;QACd,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;IACH,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC"}

package/dist/src/product-brief/loader.d.ts

@@ -0,0 +1,2 @@
+import { type ProductDesignBrief } from "./schema.js";
+export declare function loadProductDesignBrief(path: string): Promise<ProductDesignBrief>;

package/dist/src/product-brief/loader.js

@@ -0,0 +1,21 @@
+import { readFile, stat } from "node:fs/promises";
+import { extname, resolve } from "node:path";
+import { parse } from "yaml";
+import { productDesignBriefSchema } from "./schema.js";
+const MAX_BRIEF_BYTES = 2 * 1024 * 1024;
+export async function loadProductDesignBrief(path) {
+    const resolvedPath = resolve(path);
+    if (!/^\.(?:json|ya?ml)$/i.test(extname(resolvedPath))) {
+        throw new Error("Product design briefs must end in .json, .yaml, or .yml");
+    }
+    const fileStats = await stat(resolvedPath);
+    if (!fileStats.isFile())
+        throw new Error("Product design brief path is not a regular file");
+    if (fileStats.size > MAX_BRIEF_BYTES) {
+        throw new Error(`Product design brief exceeds ${MAX_BRIEF_BYTES} bytes`);
+    }
+    const content = await readFile(resolvedPath, "utf8");
+    const parsed = resolvedPath.endsWith(".json") ? JSON.parse(content) : parse(content);
+    return productDesignBriefSchema.parse(parsed);
+}
+//# sourceMappingURL=loader.js.map

package/dist/src/product-brief/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../../src/product-brief/loader.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAE,KAAK,EAAE,MAAM,MAAM,CAAC;AAE7B,OAAO,EAAE,wBAAwB,EAA2B,MAAM,aAAa,CAAC;AAEhF,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAExC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,IAAY;IACvD,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC5F,IAAI,SAAS,CAAC,IAAI,GAAG,eAAe,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,gCAAgC,eAAe,QAAQ,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAY,YAAY,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC9F,OAAO,wBAAwB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC"}

package/dist/src/product-brief/report.d.ts

@@ -0,0 +1,2 @@
+import type { ProductBriefReport } from "./schema.js";
+export declare function formatProductBriefReport(report: ProductBriefReport): string;

package/dist/src/product-brief/report.js

@@ -0,0 +1,22 @@
+export function formatProductBriefReport(report) {
+    const lines = [
+        "# ZtotheZ Product Design Brief Validation",
+        "",
+        `- Brief: \`${report.briefId}\``,
+        `- Product: ${report.product}`,
+        `- Source: \`${report.sourcePath}\``,
+        `- Coverage: ${report.coverage.primaryAudiences} primary audiences, ${report.coverage.tasks} tasks, ${report.coverage.dataSources} data sources, ${report.coverage.requirements} requirements, ${report.coverage.acceptanceCriteria} acceptance criteria`,
+        `- Findings: ${report.summary.errors} errors, ${report.summary.warnings} warnings, ${report.summary.info} info`,
+        `- Contract result: ${report.passed ? "PASS" : "FAIL"}`,
+        `- Generation ready: ${report.generationReady ? "YES" : "NO"}`,
+    ];
+    if (report.findings.length > 0) {
+        lines.push("", "## Findings");
+        for (const finding of report.findings) {
+            lines.push("", `### ${finding.severity.toUpperCase()}: ${finding.ruleId}`, "", `- Path: \`${finding.path}\``, `- Finding: ${finding.message}`, `- Remediation: ${finding.remediation}`);
+        }
+    }
+    lines.push("", "## Limitations", "", ...report.limitations.map((entry) => `- ${entry}`));
+    return lines.join("\n");
+}
+//# sourceMappingURL=report.js.map

package/dist/src/product-brief/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../../src/product-brief/report.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,MAAM,KAAK,GAAG;QACZ,2CAA2C;QAC3C,EAAE;QACF,cAAc,MAAM,CAAC,OAAO,IAAI;QAChC,cAAc,MAAM,CAAC,OAAO,EAAE;QAC9B,eAAe,MAAM,CAAC,UAAU,IAAI;QACpC,eAAe,MAAM,CAAC,QAAQ,CAAC,gBAAgB,uBAAuB,MAAM,CAAC,QAAQ,CAAC,KAAK,WAAW,MAAM,CAAC,QAAQ,CAAC,WAAW,kBAAkB,MAAM,CAAC,QAAQ,CAAC,YAAY,kBAAkB,MAAM,CAAC,QAAQ,CAAC,kBAAkB,sBAAsB;QACzP,eAAe,MAAM,CAAC,OAAO,CAAC,MAAM,YAAY,MAAM,CAAC,OAAO,CAAC,QAAQ,cAAc,MAAM,CAAC,OAAO,CAAC,IAAI,OAAO;QAC/G,sBAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE;QACvD,uBAAuB,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;KAC/D,CAAC;IAEF,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;QAC9B,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACtC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,OAAO,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC,MAAM,EAAE,EAC1D,EAAE,EACF,aAAa,OAAO,CAAC,IAAI,IAAI,EAC7B,cAAc,OAAO,CAAC,OAAO,EAAE,EAC/B,kBAAkB,OAAO,CAAC,WAAW,EAAE,CACxC,CAAC;QACJ,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC;IACzF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/product-brief/schema.d.ts

@@ -0,0 +1,367 @@
+import { z } from "zod";
+export declare const evidenceKindSchema: z.ZodEnum<{
+    "user-provided": "user-provided";
+    stakeholder: "stakeholder";
+    "user-research": "user-research";
+    "product-analytics": "product-analytics";
+    "support-record": "support-record";
+    "existing-product": "existing-product";
+    "technical-source": "technical-source";
+    "public-standard": "public-standard";
+    "agent-assumption": "agent-assumption";
+}>;
+export declare const dataModeSchema: z.ZodEnum<{
+    demo: "demo";
+    live: "live";
+    hybrid: "hybrid";
+    "user-input": "user-input";
+    imported: "imported";
+    cached: "cached";
+    "local-static": "local-static";
+}>;
+export declare const interfaceStateSchema: z.ZodEnum<{
+    error: "error";
+    success: "success";
+    offline: "offline";
+    disconnected: "disconnected";
+    loading: "loading";
+    empty: "empty";
+    partial: "partial";
+    stale: "stale";
+    unauthorized: "unauthorized";
+    blocked: "blocked";
+}>;
+export declare const briefVerificationMethodSchema: z.ZodEnum<{
+    "human-expert": "human-expert";
+    "representative-user": "representative-user";
+    "static-analysis": "static-analysis";
+    "unit-test": "unit-test";
+    "integration-test": "integration-test";
+    "browser-test": "browser-test";
+    "manual-human": "manual-human";
+}>;
+export declare const productDesignBriefSchema: z.ZodObject<{
+    version: z.ZodLiteral<"1.0">;
+    id: z.ZodString;
+    product: z.ZodString;
+    status: z.ZodEnum<{
+        draft: "draft";
+        validated: "validated";
+    }>;
+    preparedAt: z.ZodString;
+    preparedBy: z.ZodObject<{
+        type: z.ZodEnum<{
+            agent: "agent";
+            human: "human";
+            mixed: "mixed";
+        }>;
+        name: z.ZodString;
+    }, z.core.$strict>;
+    evidenceSources: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            "user-provided": "user-provided";
+            stakeholder: "stakeholder";
+            "user-research": "user-research";
+            "product-analytics": "product-analytics";
+            "support-record": "support-record";
+            "existing-product": "existing-product";
+            "technical-source": "technical-source";
+            "public-standard": "public-standard";
+            "agent-assumption": "agent-assumption";
+        }>;
+        description: z.ZodString;
+        location: z.ZodOptional<z.ZodString>;
+        owner: z.ZodString;
+    }, z.core.$strict>>;
+    problem: z.ZodObject<{
+        statement: z.ZodString;
+        currentOutcome: z.ZodString;
+        desiredOutcome: z.ZodString;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    scope: z.ZodObject<{
+        included: z.ZodArray<z.ZodString>;
+        excluded: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>;
+    audiences: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        role: z.ZodString;
+        priority: z.ZodEnum<{
+            primary: "primary";
+            secondary: "secondary";
+            affected: "affected";
+        }>;
+        goals: z.ZodArray<z.ZodString>;
+        contexts: z.ZodArray<z.ZodString>;
+        constraints: z.ZodArray<z.ZodString>;
+        accessibilityNeeds: z.ZodArray<z.ZodString>;
+        expertise: z.ZodEnum<{
+            unknown: "unknown";
+            mixed: "mixed";
+            novice: "novice";
+            intermediate: "intermediate";
+            expert: "expert";
+        }>;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    outcomes: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            operational: "operational";
+            user: "user";
+            business: "business";
+            "risk-reduction": "risk-reduction";
+        }>;
+        statement: z.ZodString;
+        measure: z.ZodObject<{
+            signal: z.ZodString;
+            baseline: z.ZodDiscriminatedUnion<[z.ZodObject<{
+                status: z.ZodLiteral<"known">;
+                value: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                status: z.ZodLiteral<"unknown">;
+                reason: z.ZodString;
+            }, z.core.$strict>, z.ZodObject<{
+                status: z.ZodLiteral<"not-applicable">;
+                reason: z.ZodString;
+            }, z.core.$strict>], "status">;
+            target: z.ZodString;
+        }, z.core.$strict>;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    dataSources: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        name: z.ZodString;
+        mode: z.ZodEnum<{
+            demo: "demo";
+            live: "live";
+            hybrid: "hybrid";
+            "user-input": "user-input";
+            imported: "imported";
+            cached: "cached";
+            "local-static": "local-static";
+        }>;
+        latency: z.ZodEnum<{
+            unknown: "unknown";
+            immediate: "immediate";
+            async: "async";
+            streaming: "streaming";
+        }>;
+        classification: z.ZodEnum<{
+            public: "public";
+            internal: "internal";
+            confidential: "confidential";
+            restricted: "restricted";
+        }>;
+        sourceEvidenceRef: z.ZodString;
+        freshness: z.ZodString;
+        limitations: z.ZodArray<z.ZodString>;
+        fallback: z.ZodObject<{
+            kind: z.ZodEnum<{
+                demo: "demo";
+                none: "none";
+                import: "import";
+                cache: "cache";
+                manual: "manual";
+            }>;
+            disclosure: z.ZodString;
+            preservesOrigin: z.ZodBoolean;
+        }, z.core.$strict>;
+    }, z.core.$strict>>;
+    tasks: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        audienceRefs: z.ZodArray<z.ZodString>;
+        outcomeRefs: z.ZodArray<z.ZodString>;
+        dataRefs: z.ZodArray<z.ZodString>;
+        trigger: z.ZodString;
+        goal: z.ZodString;
+        frequency: z.ZodEnum<{
+            continuous: "continuous";
+            daily: "daily";
+            weekly: "weekly";
+            monthly: "monthly";
+            occasional: "occasional";
+            "one-time": "one-time";
+        }>;
+        criticality: z.ZodEnum<{
+            high: "high";
+            medium: "medium";
+            low: "low";
+            critical: "critical";
+        }>;
+        consequential: z.ZodBoolean;
+        inputs: z.ZodArray<z.ZodString>;
+        successSignal: z.ZodString;
+        failureImpact: z.ZodString;
+        recovery: z.ZodString;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    states: z.ZodArray<z.ZodObject<{
+        state: z.ZodEnum<{
+            error: "error";
+            success: "success";
+            offline: "offline";
+            disconnected: "disconnected";
+            loading: "loading";
+            empty: "empty";
+            partial: "partial";
+            stale: "stale";
+            unauthorized: "unauthorized";
+            blocked: "blocked";
+        }>;
+        taskRefs: z.ZodArray<z.ZodString>;
+        behavior: z.ZodString;
+        recovery: z.ZodString;
+        disclosure: z.ZodString;
+    }, z.core.$strict>>;
+    platforms: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        kind: z.ZodEnum<{
+            "responsive-web": "responsive-web";
+            "desktop-web": "desktop-web";
+            "mobile-web": "mobile-web";
+            "native-mobile": "native-mobile";
+            "desktop-app": "desktop-app";
+        }>;
+        priority: z.ZodEnum<{
+            primary: "primary";
+            secondary: "secondary";
+        }>;
+        viewports: z.ZodArray<z.ZodNumber>;
+        inputModes: z.ZodArray<z.ZodEnum<{
+            keyboard: "keyboard";
+            pointer: "pointer";
+            touch: "touch";
+            "assistive-technology": "assistive-technology";
+        }>>;
+        constraints: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    constraints: z.ZodArray<z.ZodString>;
+    requirements: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        category: z.ZodEnum<{
+            accessibility: "accessibility";
+            maintainability: "maintainability";
+            content: "content";
+            brand: "brand";
+            security: "security";
+            reliability: "reliability";
+            functional: "functional";
+            usability: "usability";
+            privacy: "privacy";
+            performance: "performance";
+        }>;
+        priority: z.ZodEnum<{
+            must: "must";
+            should: "should";
+            could: "could";
+            wont: "wont";
+        }>;
+        statement: z.ZodString;
+        rationale: z.ZodString;
+        taskRefs: z.ZodArray<z.ZodString>;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>;
+    assumptions: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        statement: z.ZodString;
+        risk: z.ZodEnum<{
+            high: "high";
+            medium: "medium";
+            low: "low";
+        }>;
+        status: z.ZodEnum<{
+            validated: "validated";
+            rejected: "rejected";
+            unresolved: "unresolved";
+        }>;
+        evidenceRefs: z.ZodArray<z.ZodString>;
+        validationMethod: z.ZodString;
+    }, z.core.$strict>>;
+    acceptanceCriteria: z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        statement: z.ZodString;
+        requirementRefs: z.ZodArray<z.ZodString>;
+        taskRefs: z.ZodArray<z.ZodString>;
+        method: z.ZodEnum<{
+            "human-expert": "human-expert";
+            "representative-user": "representative-user";
+            "static-analysis": "static-analysis";
+            "unit-test": "unit-test";
+            "integration-test": "integration-test";
+            "browser-test": "browser-test";
+            "manual-human": "manual-human";
+        }>;
+        expectedEvidence: z.ZodString;
+        blocking: z.ZodBoolean;
+    }, z.core.$strict>>;
+    downstreamContracts: z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<{
+            "information-design": "information-design";
+            "product-task": "product-task";
+            "interface-trust": "interface-trust";
+            "design-deliverable": "design-deliverable";
+        }>;
+        status: z.ZodEnum<{
+            "not-applicable": "not-applicable";
+            planned: "planned";
+            exists: "exists";
+        }>;
+        path: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export declare const productBriefFindingSchema: z.ZodObject<{
+    ruleId: z.ZodString;
+    severity: z.ZodEnum<{
+        error: "error";
+        warning: "warning";
+        info: "info";
+    }>;
+    path: z.ZodString;
+    message: z.ZodString;
+    remediation: z.ZodString;
+}, z.core.$strict>;
+export declare const productBriefReportSchema: z.ZodObject<{
+    version: z.ZodString;
+    generatedAt: z.ZodString;
+    sourcePath: z.ZodString;
+    briefId: z.ZodString;
+    product: z.ZodString;
+    findings: z.ZodArray<z.ZodObject<{
+        ruleId: z.ZodString;
+        severity: z.ZodEnum<{
+            error: "error";
+            warning: "warning";
+            info: "info";
+        }>;
+        path: z.ZodString;
+        message: z.ZodString;
+        remediation: z.ZodString;
+    }, z.core.$strict>>;
+    coverage: z.ZodObject<{
+        evidenceSources: z.ZodNumber;
+        audiences: z.ZodNumber;
+        primaryAudiences: z.ZodNumber;
+        outcomes: z.ZodNumber;
+        tasks: z.ZodNumber;
+        dataSources: z.ZodNumber;
+        states: z.ZodNumber;
+        platforms: z.ZodNumber;
+        requirements: z.ZodNumber;
+        acceptanceCriteria: z.ZodNumber;
+    }, z.core.$strict>;
+    summary: z.ZodObject<{
+        errors: z.ZodNumber;
+        warnings: z.ZodNumber;
+        info: z.ZodNumber;
+    }, z.core.$strict>;
+    passed: z.ZodBoolean;
+    generationReady: z.ZodBoolean;
+    limitations: z.ZodArray<z.ZodString>;
+}, z.core.$strict>;
+export type ProductDesignBrief = z.infer<typeof productDesignBriefSchema>;
+export type ProductBriefFinding = z.infer<typeof productBriefFindingSchema>;
+export type ProductBriefReport = z.infer<typeof productBriefReportSchema>;