agentic-engineering-harness 0.4.16

package/dist/utils/process.js

@@ -0,0 +1,94 @@
+import { spawn } from "node:child_process";
+import fs from "node:fs/promises";
+import path from "node:path";
+const toolchainPathCache = new Map();
+export function clearToolchainEnvCache() { toolchainPathCache.clear(); }
+export async function runProcess(command, options) {
+    const started = Date.now();
+    const inherited = { ...process.env, ...(options.env ?? {}) };
+    if (options.toolchain !== false) {
+        const prefix = await toolchainPathPrefix(options.cwd);
+        if (prefix)
+            inherited.PATH = `${prefix}${path.delimiter}${inherited.PATH ?? ""}`;
+    }
+    return await new Promise((resolve, reject) => {
+        const child = spawn(command, {
+            cwd: options.cwd,
+            shell: options.shell ?? true,
+            env: inherited,
+            stdio: ["ignore", "pipe", "pipe"]
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (chunk) => { stdout += chunk.toString(); });
+        child.stderr?.on("data", (chunk) => { stderr += chunk.toString(); });
+        const timer = options.timeoutMs
+            ? setTimeout(() => child.kill("SIGTERM"), options.timeoutMs)
+            : undefined;
+        child.on("error", reject);
+        child.on("close", (code) => {
+            if (timer)
+                clearTimeout(timer);
+            resolve({ exitCode: code ?? 1, stdout, stderr, durationMs: Date.now() - started });
+        });
+    });
+}
+export async function commandExists(command, cwd) {
+    const result = await runProcess(`command -v ${shell(command)}`, { cwd });
+    return result.exitCode === 0;
+}
+async function toolchainPathPrefix(cwd) {
+    const key = path.resolve(cwd);
+    if (toolchainPathCache.has(key))
+        return toolchainPathCache.get(key);
+    const roots = await candidateRoots(key);
+    for (const root of roots) {
+        try {
+            const state = JSON.parse(await fs.readFile(path.join(root, ".harness", "toolchain.state.json"), "utf8"));
+            const valid = [];
+            for (const item of state.binPaths ?? []) {
+                try {
+                    await fs.access(item);
+                    valid.push(item);
+                }
+                catch { /* stale machine-local path */ }
+            }
+            const prefix = valid.length ? valid.join(path.delimiter) : undefined;
+            toolchainPathCache.set(key, prefix);
+            return prefix;
+        }
+        catch { /* try another root */ }
+    }
+    toolchainPathCache.set(key, undefined);
+    return undefined;
+}
+async function candidateRoots(start) {
+    const roots = [];
+    let current = start;
+    while (true) {
+        roots.push(current);
+        const gitFile = path.join(current, ".git");
+        try {
+            const stat = await fs.stat(gitFile);
+            if (stat.isFile()) {
+                const value = await fs.readFile(gitFile, "utf8");
+                const gitDir = value.match(/^gitdir:\s*(.+)\s*$/m)?.[1];
+                if (gitDir) {
+                    const absolute = path.resolve(current, gitDir);
+                    const marker = `${path.sep}.git${path.sep}worktrees${path.sep}`;
+                    const index = absolute.indexOf(marker);
+                    if (index >= 0)
+                        roots.push(absolute.slice(0, index));
+                }
+            }
+        }
+        catch { /* not a worktree root */ }
+        const parent = path.dirname(current);
+        if (parent === current)
+            break;
+        current = parent;
+    }
+    return [...new Set(roots)];
+}
+function shell(value) { return `'${value.replaceAll("'", "'\\''")}'`; }
+//# sourceMappingURL=process.js.map

package/dist/utils/process.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"process.js","sourceRoot":"","sources":["../../src/utils/process.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAS7B,MAAM,kBAAkB,GAAG,IAAI,GAAG,EAA8B,CAAC;AACjE,MAAM,UAAU,sBAAsB,KAAW,kBAAkB,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAE9E,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,OAA4H;IAE5H,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,MAAM,SAAS,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7D,IAAI,OAAO,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtD,IAAI,MAAM;YAAE,SAAS,CAAC,IAAI,GAAG,GAAG,MAAM,GAAG,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE;YAC3B,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;YAC5B,GAAG,EAAE,SAAS;YACd,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAA6B,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7F,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAA6B,EAAE,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE7F,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS;YAC7B,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC;YAC5D,CAAC,CAAC,SAAS,CAAC;QAEd,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC1B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACxC,IAAI,KAAK;gBAAE,YAAY,CAAC,KAAK,CAAC,CAAC;YAC/B,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,GAAW;IAC9D,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,cAAc,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,GAAW;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAAC,IAAI,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,kBAAkB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACnG,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;YACpI,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;gBAAC,IAAI,CAAC;oBAAC,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,8BAA8B,CAAC,CAAC;YAAC,CAAC;YACtI,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAAC,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAAC,OAAO,MAAM,CAAC;QAC3H,CAAC;QAAC,MAAM,CAAC,CAAC,sBAAsB,CAAC,CAAC;IACpC,CAAC;IACD,kBAAkB,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAAC,OAAO,SAAS,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,KAAa;IACzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAAC,IAAI,OAAO,GAAG,KAAK,CAAC;IAChD,OAAO,IAAI,EAAE,CAAC;QACZ,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBAAC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;gBAC1G,IAAI,MAAM,EAAE,CAAC;oBACX,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;oBAAC,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,YAAY,IAAI,CAAC,GAAG,EAAE,CAAC;oBAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;oBACxJ,IAAI,KAAK,IAAI,CAAC;wBAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC,CAAC,yBAAyB,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,MAAM,KAAK,OAAO;YAAE,MAAM;QAAC,OAAO,GAAG,MAAM,CAAC;IACxF,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7B,CAAC;AACD,SAAS,KAAK,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC"}

package/dist/validators/commands.d.ts

@@ -0,0 +1,2 @@
+import type { ValidationCheck, ValidationCommand } from "../core/types.js";
+export declare function runValidationCommand(root: string, command: ValidationCommand): Promise<ValidationCheck>;

package/dist/validators/commands.js

@@ -0,0 +1,28 @@
+import path from "node:path";
+import { runProcess } from "../utils/process.js";
+export async function runValidationCommand(root, command) {
+    const cwd = path.resolve(root, command.workingDirectory ?? ".");
+    const result = await runProcess(command.command, {
+        cwd,
+        timeoutMs: (command.timeoutSeconds ?? 900) * 1000
+    });
+    return {
+        id: `command.${command.id}`,
+        category: "command",
+        status: result.exitCode === 0 ? "PASS" : (command.required === false ? "WARN" : "FAIL"),
+        message: result.exitCode === 0 ? `${command.id} passed.` : `${command.id} failed with exit code ${result.exitCode}.`,
+        durationMs: result.durationMs,
+        details: {
+            command: command.command,
+            cwd,
+            exitCode: result.exitCode,
+            stdout: trimOutput(result.stdout),
+            stderr: trimOutput(result.stderr)
+        }
+    };
+}
+function trimOutput(value) {
+    const max = 12000;
+    return value.length <= max ? value : `${value.slice(0, max)}\n...[truncated]`;
+}
+//# sourceMappingURL=commands.js.map

package/dist/validators/commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../../src/validators/commands.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAA0B;IACjF,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,gBAAgB,IAAI,GAAG,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC,OAAO,EAAE;QAC/C,GAAG;QACH,SAAS,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,GAAG,CAAC,GAAG,IAAI;KAClD,CAAC,CAAC;IAEH,OAAO;QACL,EAAE,EAAE,WAAW,OAAO,CAAC,EAAE,EAAE;QAC3B,QAAQ,EAAE,SAAS;QACnB,MAAM,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;QACvF,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,EAAE,0BAA0B,MAAM,CAAC,QAAQ,GAAG;QACpH,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE;YACP,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,GAAG;YACH,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;YACjC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;SAClC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,MAAM,GAAG,GAAG,KAAK,CAAC;IAClB,OAAO,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,kBAAkB,CAAC;AAChF,CAAC"}

package/dist/validators/constraints.d.ts

@@ -0,0 +1,6 @@
+import type { TaskContract, ValidationCheck } from "../core/types.js";
+export declare function validateDiffBudget(contract: TaskContract, stats: {
+    files: number;
+    added: number;
+    deleted: number;
+}): ValidationCheck[];

package/dist/validators/constraints.js

@@ -0,0 +1,30 @@
+export function validateDiffBudget(contract, stats) {
+    const c = contract.constraints ?? {};
+    const checks = [];
+    if (c.maxFilesChanged !== undefined) {
+        checks.push({
+            id: "budget.files",
+            category: "diff-budget",
+            status: stats.files <= c.maxFilesChanged ? "PASS" : "FAIL",
+            message: `${stats.files}/${c.maxFilesChanged} changed files.`
+        });
+    }
+    if (c.maxLinesAdded !== undefined) {
+        checks.push({
+            id: "budget.lines-added",
+            category: "diff-budget",
+            status: stats.added <= c.maxLinesAdded ? "PASS" : "FAIL",
+            message: `${stats.added}/${c.maxLinesAdded} lines added.`
+        });
+    }
+    if (c.maxLinesDeleted !== undefined) {
+        checks.push({
+            id: "budget.lines-deleted",
+            category: "diff-budget",
+            status: stats.deleted <= c.maxLinesDeleted ? "PASS" : "FAIL",
+            message: `${stats.deleted}/${c.maxLinesDeleted} lines deleted.`
+        });
+    }
+    return checks;
+}
+//# sourceMappingURL=constraints.js.map

package/dist/validators/constraints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constraints.js","sourceRoot":"","sources":["../../src/validators/constraints.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,kBAAkB,CAChC,QAAsB,EACtB,KAAwD;IAExD,MAAM,CAAC,GAAG,QAAQ,CAAC,WAAW,IAAI,EAAE,CAAC;IACrC,MAAM,MAAM,GAAsB,EAAE,CAAC;IAErC,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,cAAc;YAClB,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC1D,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,eAAe,iBAAiB;SAC9D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,oBAAoB;YACxB,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YACxD,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,IAAI,CAAC,CAAC,aAAa,eAAe;SAC1D,CAAC,CAAC;IACL,CAAC;IACD,IAAI,CAAC,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,sBAAsB;YAC1B,QAAQ,EAAE,aAAa;YACvB,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC5D,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,eAAe,iBAAiB;SAChE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/validators/diffScope.d.ts

@@ -0,0 +1,2 @@
+import type { TaskContract, ValidationCheck } from "../core/types.js";
+export declare function validateDiffScope(changedFiles: string[], contract: TaskContract, globalFrozen?: string[]): ValidationCheck[];

package/dist/validators/diffScope.js

@@ -0,0 +1,36 @@
+import { minimatch } from "minimatch";
+function matches(file, patterns) {
+    return patterns.some((pattern) => minimatch(file, pattern, { dot: true, matchBase: false }));
+}
+export function validateDiffScope(changedFiles, contract, globalFrozen = []) {
+    const checks = [];
+    const allowed = contract.scope?.allowed ?? [];
+    const forbidden = contract.scope?.forbidden ?? [];
+    const frozen = [...globalFrozen, ...(contract.scope?.frozen ?? [])];
+    const outsideAllowed = allowed.length > 0 ? changedFiles.filter((f) => !matches(f, allowed)) : [];
+    checks.push({
+        id: "diff.allowed-scope",
+        category: "diff",
+        status: outsideAllowed.length ? "FAIL" : "PASS",
+        message: outsideAllowed.length ? `Files outside allowed scope: ${outsideAllowed.join(", ")}` : "All changed files are within allowed scope.",
+        details: { outsideAllowed }
+    });
+    const forbiddenChanged = forbidden.length ? changedFiles.filter((f) => matches(f, forbidden)) : [];
+    checks.push({
+        id: "diff.forbidden-paths",
+        category: "diff",
+        status: forbiddenChanged.length ? "FAIL" : "PASS",
+        message: forbiddenChanged.length ? `Forbidden paths changed: ${forbiddenChanged.join(", ")}` : "No forbidden paths changed.",
+        details: { forbiddenChanged }
+    });
+    const frozenChanged = frozen.length ? changedFiles.filter((f) => matches(f, frozen)) : [];
+    checks.push({
+        id: "diff.frozen-paths",
+        category: "trust-boundary",
+        status: frozenChanged.length ? "FAIL" : "PASS",
+        message: frozenChanged.length ? `Frozen validation/contract paths changed: ${frozenChanged.join(", ")}` : "Frozen paths were not modified.",
+        details: { frozenChanged }
+    });
+    return checks;
+}
+//# sourceMappingURL=diffScope.js.map

package/dist/validators/diffScope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diffScope.js","sourceRoot":"","sources":["../../src/validators/diffScope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAGtC,SAAS,OAAO,CAAC,IAAY,EAAE,QAAkB;IAC/C,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,YAAsB,EAAE,QAAsB,EAAE,eAAyB,EAAE;IAC3G,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,EAAE,OAAO,IAAI,EAAE,CAAC;IAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,IAAI,EAAE,CAAC;IAClD,MAAM,MAAM,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;IAEpE,MAAM,cAAc,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,oBAAoB;QACxB,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC/C,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,gCAAgC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,6CAA6C;QAC5I,OAAO,EAAE,EAAE,cAAc,EAAE;KAC5B,CAAC,CAAC;IAEH,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnG,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,sBAAsB;QAC1B,QAAQ,EAAE,MAAM;QAChB,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACjD,OAAO,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,4BAA4B,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,6BAA6B;QAC5H,OAAO,EAAE,EAAE,gBAAgB,EAAE;KAC9B,CAAC,CAAC;IAEH,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1F,MAAM,CAAC,IAAI,CAAC;QACV,EAAE,EAAE,mBAAmB;QACvB,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QAC9C,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,6CAA6C,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,iCAAiC;QAC3I,OAAO,EAAE,EAAE,aAAa,EAAE;KAC3B,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/validators/evidence.d.ts

@@ -0,0 +1,6 @@
+export interface PolicyEvidence {
+    newDependencies: string[];
+    schemaChanged: boolean;
+    schemaFiles: string[];
+}
+export declare function collectPolicyEvidence(changedFiles: string[]): PolicyEvidence;

package/dist/validators/evidence.js

@@ -0,0 +1,8 @@
+const dependencyPatterns = [/(^|\/)package\.json$/, /(^|\/)package-lock\.json$/, /(^|\/)pnpm-lock\.yaml$/, /(^|\/)yarn\.lock$/, /\.csproj$/, /(^|\/)Directory\.Packages\.props$/, /(^|\/)pyproject\.toml$/, /(^|\/)requirements[^/]*\.txt$/, /(^|\/)go\.mod$/, /(^|\/)Cargo\.toml$/];
+const schemaPatterns = [/(^|\/)migrations?\//i, /(^|\/)schema\.prisma$/i, /(^|\/)openapi\.(json|ya?ml)$/i, /(^|\/)swagger\.(json|ya?ml)$/i, /\.sql$/i];
+export function collectPolicyEvidence(changedFiles) {
+    const dependencies = changedFiles.filter((file) => dependencyPatterns.some((pattern) => pattern.test(file)));
+    const schemaFiles = changedFiles.filter((file) => schemaPatterns.some((pattern) => pattern.test(file)));
+    return { newDependencies: dependencies, schemaChanged: schemaFiles.length > 0, schemaFiles };
+}
+//# sourceMappingURL=evidence.js.map

package/dist/validators/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../src/validators/evidence.ts"],"names":[],"mappings":"AAMA,MAAM,kBAAkB,GAAG,CAAC,sBAAsB,EAAE,2BAA2B,EAAE,wBAAwB,EAAE,mBAAmB,EAAE,WAAW,EAAE,mCAAmC,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC;AACrR,MAAM,cAAc,GAAG,CAAC,sBAAsB,EAAE,wBAAwB,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,SAAS,CAAC,CAAC;AAEvJ,MAAM,UAAU,qBAAqB,CAAC,YAAsB;IAC1D,MAAM,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7G,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACxG,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,aAAa,EAAE,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,WAAW,EAAE,CAAC;AAC/F,CAAC"}

package/dist/validators/external.d.ts

@@ -0,0 +1,3 @@
+import type { ValidationCheck } from "../core/types.js";
+import type { ValidationContext } from "./types.js";
+export declare function runExternalToolValidator(context: ValidationContext): Promise<ValidationCheck>;

package/dist/validators/external.js

@@ -0,0 +1,22 @@
+import { commandExists } from "../utils/process.js";
+import { missingTool, runSpecCommand } from "./toolCommand.js";
+export async function runExternalToolValidator(context) {
+    const adapter = context.spec.adapter;
+    const configured = context.spec.command?.trim();
+    const defaults = {
+        opengrep: { tool: "opengrep", command: "opengrep scan --json --error .", category: "security" },
+        trivy: { tool: "trivy", command: "trivy fs --exit-code 1 --severity HIGH,CRITICAL --scanners vuln,misconfig,secret .", category: "security" },
+        playwright: { tool: "npx", command: "npx playwright test --grep \"{taskId}\" --reporter=line", category: "e2e" },
+        pact: { tool: "", category: "contract" },
+        mutation: { tool: "", category: "test-quality" },
+        property: { tool: "", category: "test-quality" },
+        command: { tool: "", category: "custom" }
+    };
+    const definition = defaults[adapter] ?? { tool: "", category: "custom" };
+    if (!configured && !definition.command)
+        return { id: context.spec.id, category: definition.category, status: context.spec.required ? "FAIL" : "WARN", message: `${adapter} requires an explicit command in .harness/project.yaml.` };
+    if (!configured && definition.tool && !(await commandExists(definition.tool, context.root)))
+        return missingTool(context.spec, definition.tool, definition.category);
+    return runSpecCommand(context, configured ?? definition.command, definition.category);
+}
+//# sourceMappingURL=external.js.map

package/dist/validators/external.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external.js","sourceRoot":"","sources":["../../src/validators/external.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAA0B;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;IACrC,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,MAAM,QAAQ,GAAyE;QACrF,QAAQ,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,gCAAgC,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC/F,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,oFAAoF,EAAE,QAAQ,EAAE,UAAU,EAAE;QAC7I,UAAU,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,yDAAyD,EAAE,QAAQ,EAAE,KAAK,EAAE;QAChH,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE;QACxC,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;QAChD,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE;QAChD,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE;KAC1C,CAAC;IACF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;IACzE,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,GAAG,OAAO,yDAAyD,EAAE,CAAC;IACrO,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;IACpK,OAAO,cAAc,CAAC,OAAO,EAAE,UAAU,IAAI,UAAU,CAAC,OAAQ,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC;AACzF,CAAC"}

package/dist/validators/gherkin.d.ts

@@ -0,0 +1,3 @@
+import type { ValidationCheck } from "../core/types.js";
+import type { ValidationContext } from "./types.js";
+export declare function runGherkinValidator(context: ValidationContext): Promise<ValidationCheck>;

package/dist/validators/gherkin.js

@@ -0,0 +1,59 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { commandExists } from "../utils/process.js";
+import { missingTool, runSpecCommand } from "./toolCommand.js";
+export async function runGherkinValidator(context) {
+    if (context.spec.command)
+        return runSpecCommand(context, context.spec.command, "acceptance");
+    if (!(await commandExists("dotnet", context.root)))
+        return missingTool(context.spec, "dotnet", "acceptance");
+    const project = await findReqnrollProject(context.root);
+    if (!project) {
+        return {
+            id: context.spec.id,
+            category: "acceptance",
+            status: context.spec.required ? "FAIL" : "WARN",
+            message: "No .NET project referencing Reqnroll was found. Configure validator.command for non-.NET Gherkin runners."
+        };
+    }
+    const content = await fs.readFile(project, "utf8");
+    const filterProperty = /Reqnroll\.xUnit/i.test(content) ? "Category" : "TestCategory";
+    const command = `dotnet test ${quote(project)} --filter "${filterProperty}=${context.contract.task.id}"`;
+    const check = await runSpecCommand(context, command, "acceptance", { project, filterProperty });
+    const output = `${String(check.details?.stdout ?? "")}\n${String(check.details?.stderr ?? "")}`;
+    if (check.status === "PASS" && /No test matches|Total tests:\s*0|0 tests?\b/i.test(output)) {
+        return { ...check, status: "FAIL", message: `Reqnroll executed but no scenarios tagged @${context.contract.task.id} were discovered.` };
+    }
+    return check;
+}
+async function findReqnrollProject(root) {
+    for (const file of await walk(root)) {
+        if (!file.endsWith(".csproj"))
+            continue;
+        try {
+            const content = await fs.readFile(file, "utf8");
+            if (/Reqnroll\./i.test(content))
+                return file;
+        }
+        catch { /* ignore generated/vendor projects */ }
+    }
+    return undefined;
+}
+async function walk(root) {
+    const out = [];
+    const visit = async (dir) => {
+        for (const entry of await fs.readdir(dir, { withFileTypes: true })) {
+            if (entry.name === ".git" || entry.name === "node_modules" || entry.name === "bin" || entry.name === "obj")
+                continue;
+            const file = path.join(dir, entry.name);
+            if (entry.isDirectory())
+                await visit(file);
+            else
+                out.push(file);
+        }
+    };
+    await visit(root);
+    return out;
+}
+function quote(value) { return `'${value.replaceAll("'", "'\\''")}'`; }
+//# sourceMappingURL=gherkin.js.map

package/dist/validators/gherkin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gherkin.js","sourceRoot":"","sources":["../../src/validators/gherkin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEpD,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAE/D,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,OAA0B;IAClE,IAAI,OAAO,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC7F,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,CAAC,CAAC;IAE7G,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE;YACnB,QAAQ,EAAE,YAAY;YACtB,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;YAC/C,OAAO,EAAE,2GAA2G;SACrH,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACnD,MAAM,cAAc,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAC;IACtF,MAAM,OAAO,GAAG,eAAe,KAAK,CAAC,OAAO,CAAC,cAAc,cAAc,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC;IACzG,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,CAAC,CAAC;IAChG,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;IAChG,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,IAAI,8CAA8C,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,8CAA8C,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAC1I,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,IAAY;IAC7C,KAAK,MAAM,IAAI,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,SAAS;QACxC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAChD,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC,CAAC,sCAAsC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,IAAY;IAC9B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,KAAK,EAAE,GAAW,EAAiB,EAAE;QACjD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YACnE,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;gBAAE,SAAS;YACrH,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;;gBAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC;IAClB,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,KAAK,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC"}

package/dist/validators/graphify.d.ts

@@ -0,0 +1,4 @@
+import type { HarnessProjectConfig, ValidationCheck } from "../core/types.js";
+import type { ValidationContext } from "./types.js";
+export declare function snapshotGraph(root: string, config: HarnessProjectConfig, taskId: string, phase: "before" | "after"): Promise<string | undefined>;
+export declare function runGraphifyValidator(context: ValidationContext): Promise<ValidationCheck>;

package/dist/validators/graphify.js

@@ -0,0 +1,108 @@
+import crypto from "node:crypto";
+import fs from "node:fs/promises";
+import path from "node:path";
+import { minimatch } from "minimatch";
+export async function snapshotGraph(root, config, taskId, phase) {
+    const graphPath = path.resolve(root, config.codeIntelligence?.graphPath ?? "graphify-out/graph.json");
+    try {
+        const content = await fs.readFile(graphPath, "utf8");
+        const raw = JSON.parse(content);
+        const snapshot = normalizeGraph(raw, graphPath, crypto.createHash("sha256").update(content).digest("hex"));
+        const snapshotDir = path.resolve(root, config.codeIntelligence?.snapshotDir ?? ".harness/graph");
+        const file = path.join(snapshotDir, taskId, `${phase}.json`);
+        await fs.mkdir(path.dirname(file), { recursive: true });
+        await fs.writeFile(file, `${JSON.stringify(snapshot, null, 2)}\n`);
+        return file;
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function runGraphifyValidator(context) {
+    const snapshotDir = path.resolve(context.root, context.config.codeIntelligence?.snapshotDir ?? ".harness/graph");
+    const beforeFile = path.join(snapshotDir, context.contract.task.id, "before.json");
+    const afterFile = path.join(snapshotDir, context.contract.task.id, "after.json");
+    let before;
+    let after;
+    try {
+        before = JSON.parse(await fs.readFile(beforeFile, "utf8"));
+        after = JSON.parse(await fs.readFile(afterFile, "utf8"));
+    }
+    catch {
+        return { id: context.spec.id, category: "architecture", status: context.spec.required ? "FAIL" : "WARN", message: "Graphify before/after snapshots are unavailable. Snapshot graphify-out/graph.json before and after implementation; refresh it through the Graphify skill or codeIntelligence.refreshCommand." };
+    }
+    if (context.changedFiles.length > 0 && before.sourceHash === after.sourceHash) {
+        return { id: context.spec.id, category: "architecture", status: context.spec.required ? "FAIL" : "WARN", message: "Graphify graph did not change even though source files changed; the after snapshot appears stale.", details: { sourceHash: after.sourceHash, changedFiles: context.changedFiles } };
+    }
+    const beforeEdges = new Set(before.edges);
+    const addedEdges = after.edges.filter((edge) => !beforeEdges.has(edge));
+    const beforeNodes = new Set(before.nodes);
+    const addedNodes = after.nodes.filter((node) => !beforeNodes.has(node));
+    const violations = [];
+    for (const pattern of context.contract.impact?.forbiddenEdges ?? [])
+        violations.push(...addedEdges.filter((edge) => minimatch(edge, pattern, { nocase: true })));
+    for (const pattern of context.contract.impact?.forbiddenNodes ?? [])
+        violations.push(...addedNodes.filter((node) => minimatch(node, pattern, { nocase: true })).map((node) => `node:${node}`));
+    const allowed = context.contract.impact?.allowedCommunities ?? [];
+    if (allowed.length) {
+        const touched = new Set();
+        for (const edge of addedEdges)
+            for (const node of after.nodes)
+                if (edge.includes(node) && after.communities[node])
+                    touched.add(after.communities[node]);
+        for (const community of touched)
+            if (!allowed.includes(community))
+                violations.push(`community:${community}`);
+    }
+    return { id: context.spec.id, category: "architecture", status: violations.length ? "FAIL" : "PASS", message: violations.length ? `Graphify detected ${violations.length} structural policy violation(s).` : `Graphify structural diff accepted (${addedEdges.length} new edge(s)).`, details: { addedEdges, addedNodes, violations } };
+}
+function normalizeGraph(raw, source, sourceHash) {
+    const labels = new Map();
+    const communities = {};
+    const edges = new Set();
+    const nodes = new Set();
+    const visitNodes = (value) => {
+        if (!value || typeof value !== "object")
+            return;
+        if (Array.isArray(value)) {
+            value.forEach(visitNodes);
+            return;
+        }
+        const object = value;
+        const id = scalar(object.id ?? object.key ?? object.node_id);
+        const label = scalar(object.label ?? object.name ?? object.qualified_name ?? object.title);
+        if (id && label)
+            labels.set(id, label);
+        if (label)
+            nodes.add(label);
+        const community = scalar(object.community ?? object.community_id ?? object.cluster);
+        if (label && community)
+            communities[label] = community;
+        Object.values(object).forEach(visitNodes);
+    };
+    visitNodes(raw);
+    const visitEdges = (value) => {
+        if (!value || typeof value !== "object")
+            return;
+        if (Array.isArray(value)) {
+            value.forEach(visitEdges);
+            return;
+        }
+        const object = value;
+        const sourceId = scalar(object.source ?? object.from ?? object.source_id);
+        const targetId = scalar(object.target ?? object.to ?? object.target_id);
+        if (sourceId && targetId) {
+            const from = labels.get(sourceId) ?? sourceId;
+            const to = labels.get(targetId) ?? targetId;
+            const relation = scalar(object.relation ?? object.type ?? object.kind ?? object.label) ?? "relates";
+            nodes.add(from);
+            nodes.add(to);
+            edges.add(`${from} --${relation}--> ${to}`);
+        }
+        Object.values(object).forEach(visitEdges);
+    };
+    visitEdges(raw);
+    return { createdAt: new Date().toISOString(), source, sourceHash, edges: [...edges].sort(), nodes: [...nodes].sort(), communities };
+}
+function scalar(value) { return typeof value === "string" || typeof value === "number" ? String(value) : undefined; }
+//# sourceMappingURL=graphify.js.map

package/dist/validators/graphify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graphify.js","sourceRoot":"","sources":["../../src/validators/graphify.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAatC,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,MAA4B,EAAE,MAAc,EAAE,KAAyB;IACvH,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,EAAE,SAAS,IAAI,yBAAyB,CAAC,CAAC;IACtG,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;QAC3C,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC3G,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,gBAAgB,EAAE,WAAW,IAAI,gBAAgB,CAAC,CAAC;QACjG,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC;QAC7D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,SAAS,CAAC;IAAC,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA0B;IACnE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,WAAW,IAAI,gBAAgB,CAAC,CAAC;IACjH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACnF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,YAAY,CAAC,CAAC;IACjF,IAAI,MAAqB,CAAC;IAC1B,IAAI,KAAoB,CAAC;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAkB,CAAC;QAC5E,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,CAAkB,CAAC;IAC5E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,8LAA8L,EAAE,CAAC;IACrT,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,EAAE,CAAC;QAC9E,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,mGAAmG,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC;IACzS,CAAC;IACD,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACxE,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACjK,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,cAAc,IAAI,EAAE;QAAE,UAAU,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/L,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,IAAI,EAAE,CAAC;IAClE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,KAAK,MAAM,IAAI,IAAI,UAAU;YAAE,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK;gBAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACxJ,KAAK,MAAM,SAAS,IAAI,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,IAAI,CAAC,aAAa,SAAS,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,qBAAqB,UAAU,CAAC,MAAM,kCAAkC,CAAC,CAAC,CAAC,sCAAsC,UAAU,CAAC,MAAM,gBAAgB,EAAE,OAAO,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,CAAC;AAC1U,CAAC;AAED,SAAS,cAAc,CAAC,GAAY,EAAE,MAAc,EAAE,UAAkB;IACtE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,MAAM,WAAW,GAA2B,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3F,IAAI,EAAE,IAAI,KAAK;YAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QACvC,IAAI,KAAK;YAAE,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QACpF,IAAI,KAAK,IAAI,SAAS;YAAE,WAAW,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC;QACvD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,MAAM,UAAU,GAAG,CAAC,KAAc,EAAQ,EAAE;QAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO;QAChD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YAAC,OAAO;QAAC,CAAC;QAChE,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;QAC1E,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,QAAQ,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;YAC9C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC;YAC5C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC;YACpG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAAC,KAAK,CAAC,GAAG,CAAC,GAAG,IAAI,MAAM,QAAQ,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5C,CAAC,CAAC;IACF,UAAU,CAAC,GAAG,CAAC,CAAC;IAChB,OAAO,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,WAAW,EAAE,CAAC;AACtI,CAAC;AACD,SAAS,MAAM,CAAC,KAAc,IAAwB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC"}

package/dist/validators/opa.d.ts

@@ -0,0 +1,3 @@
+import type { HarnessProjectConfig, TaskContract, ValidationCheck } from "../core/types.js";
+import type { PolicyEvidence } from "./evidence.js";
+export declare function runOpaPolicies(root: string, config: HarnessProjectConfig, contract: TaskContract, changedFiles: string[], frozenChangedFiles: string[], evidence: PolicyEvidence, policyRoot?: string): Promise<ValidationCheck>;

package/dist/validators/opa.js

@@ -0,0 +1,43 @@
+import path from "node:path";
+import { commandExists, runProcess } from "../utils/process.js";
+export async function runOpaPolicies(root, config, contract, changedFiles, frozenChangedFiles, evidence, policyRoot = root) {
+    if (!config.validation?.opa?.enabled)
+        return { id: "policy.opa", category: "policy", status: "SKIP", message: "OPA policy evaluation disabled." };
+    if (!(await commandExists("opa", root)))
+        return { id: "policy.opa", category: "policy", status: "WARN", message: "OPA is enabled but the opa executable is not installed." };
+    const policyDirs = config.validation.opa.policyDirs ?? [];
+    if (!policyDirs.length)
+        return { id: "policy.opa", category: "policy", status: "WARN", message: "OPA is enabled but no policyDirs are configured." };
+    const args = policyDirs.map((dir) => `--data ${quote(path.resolve(policyRoot, dir))}`).join(" ");
+    const input = { workerRole: "implementation-worker", changedFiles, frozenChangedFiles, taskContract: contract, ...evidence };
+    const command = `printf %s ${quote(JSON.stringify(input))} | opa eval --format=json ${args} --stdin-input data`;
+    const result = await runProcess(command, { cwd: root, timeoutMs: 30_000 });
+    if (result.exitCode !== 0)
+        return { id: "policy.opa", category: "policy", status: "FAIL", message: "OPA policy evaluation failed to execute.", details: { stderr: result.stderr, stdout: result.stdout } };
+    try {
+        const parsed = JSON.parse(result.stdout);
+        const denies = collectDenies(parsed.result?.[0]?.expressions?.[0]?.value);
+        return { id: "policy.opa", category: "policy", status: denies.length ? "FAIL" : "PASS", message: denies.length ? `OPA denied the change: ${denies.join("; ")}` : "OPA policies allowed the change.", details: { denies, evidence } };
+    }
+    catch (error) {
+        return { id: "policy.opa", category: "policy", status: "FAIL", message: "OPA returned an unreadable result.", details: { error: String(error), stdout: result.stdout } };
+    }
+}
+function collectDenies(value) { const out = []; const visit = (node) => { if (!node || typeof node !== "object")
+    return; if (Array.isArray(node)) {
+    for (const item of node)
+        visit(item);
+    return;
+} for (const [key, child] of Object.entries(node)) {
+    if (key === "deny") {
+        if (Array.isArray(child))
+            out.push(...child.map(String));
+        else if (child && typeof child === "object")
+            out.push(...Object.keys(child));
+        else if (child)
+            out.push(String(child));
+    }
+    visit(child);
+} }; visit(value); return [...new Set(out)]; }
+function quote(value) { return `'${value.replaceAll("'", "'\\''")}'`; }
+//# sourceMappingURL=opa.js.map

package/dist/validators/opa.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"opa.js","sourceRoot":"","sources":["../../src/validators/opa.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAGhE,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,MAA4B,EAAE,QAAsB,EAAE,YAAsB,EAAE,kBAA4B,EAAE,QAAwB,EAAE,UAAU,GAAG,IAAI;IACxM,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IAClJ,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;IAC7K,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IAC1D,IAAI,CAAC,UAAU,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;IACrJ,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,EAAE,UAAU,EAAE,uBAAuB,EAAE,YAAY,EAAE,kBAAkB,EAAE,YAAY,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,CAAC;IAC7H,MAAM,OAAO,GAAG,aAAa,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,6BAA6B,IAAI,qBAAqB,CAAC;IAChH,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;IAC3E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,0CAA0C,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAC3M,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAqE,CAAC;QAC7G,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC1E,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,kCAAkC,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;IACvO,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,YAAY,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,oCAAoC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC;IAAC,CAAC;AAC/L,CAAC;AACD,SAAS,aAAa,CAAC,KAAc,IAAc,MAAM,GAAG,GAAa,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;IAAE,OAAO,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;IAAC,KAAK,MAAM,IAAI,IAAI,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC;IAAC,OAAO;AAAC,CAAC,CAAC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAA+B,CAAC,EAAE,CAAC;IAAC,IAAI,GAAG,KAAK,MAAM,EAAE,CAAC;QAAC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC,CAAC;aAAM,IAAI,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,KAAK,CAAC,KAAK,CAAC,CAAC;AAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9lB,SAAS,KAAK,CAAC,KAAa,IAAY,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC"}

package/dist/validators/openapi.d.ts

@@ -0,0 +1,25 @@
+import type { ValidationCheck } from "../core/types.js";
+import type { ValidationContext } from "./types.js";
+export declare function runOpenApiValidator(context: ValidationContext): Promise<ValidationCheck>;
+interface OpenApiDocument {
+    paths?: Record<string, Record<string, Operation>>;
+    components?: {
+        schemas?: Record<string, JsonSchema>;
+    };
+}
+interface Operation {
+    parameters?: Parameter[];
+    responses?: Record<string, unknown>;
+}
+interface Parameter {
+    name?: string;
+    in?: string;
+    required?: boolean;
+}
+interface JsonSchema {
+    type?: string;
+    properties?: Record<string, JsonSchema>;
+    required?: string[];
+}
+export declare function compareOpenApi(before: OpenApiDocument, after: OpenApiDocument): string[];
+export {};