code-ai-installer 4.0.0 → 4.0.1-b

package/dist/shared/frontmatter.js

@@ -1,5 +1,12 @@
 import { z } from "zod";
-import { DomainId, GateName, SkillType, TechSeed, TopicSeed, } from "./vocabulary.js";
+import { DomainId, GateName, SkillType, TechSeed, TopicSeed, gateBelongsToDomain, } from "./vocabulary.js";
+/**
+ * Single source of truth for the `budget_lines` schema caps. Used by the zod
+ * schemas below AND imported by audit_budget_compliance (which previously
+ * hardcoded duplicate copies — ADR-DEV-108 R1). Change here, not in two places.
+ */
+export const SKILL_BUDGET_LINES_MAX = 800; // ADR-DEV-034 (state-zustand-beast-practices-reference at 750)
+export const ROLE_BUDGET_LINES_MAX = 650; // ADR-DEV-107 (raised 250→500); 500→550 for content agents; 550→650 for product agents (layouter 614, data_analyst 558 + frontmatter, Phase 3)
 /**
  * Skill frontmatter — the structural anti-drift contract.
  *
@@ -55,25 +62,66 @@ export const SkillFrontmatter = z.object({
      *  up to 400 (precedent ADR-DEV-021 raised k8s-manifests-conventions workflow to 350).
      *  Raised to 800 in ADR-DEV-034 for state-zustand-beast-practices-reference (750)
      *  — densest examples skill in codebase, DEN-locked rule prevents trim. */
-    budget_lines: z.number().int().positive().max(800).default(300),
+    budget_lines: z.number().int().positive().max(SKILL_BUDGET_LINES_MAX).default(300),
     /** Frontmatter version. Bumped when SkillFrontmatter shape changes. */
     schema_version: z.literal(1).default(1),
     /** Optional provenance preserved from pre-migration frontmatter (license/source). */
     license: z.string().optional(),
     source: z.string().url().or(z.string().min(1)).optional(),
+}).superRefine((val, ctx) => {
+    // Domain isolation: every gate a skill applies at must belong to the skill's
+    // own domain. GateName is the cross-domain union, so without this clause a
+    // skill could silently declare a foreign-domain gate. Mirrors the identical
+    // RoleFrontmatter clause for agents (signs_off_at).
+    for (const gate of val.gates) {
+        if (!gateBelongsToDomain(gate, val.domain)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["gates"],
+                message: `gate '${gate}' does not belong to domain '${val.domain}'`,
+            });
+        }
+    }
 });
 /**
  * Role frontmatter — agent.md header. Defines the role's tool allowlist (referenced by name;
  * MCP resolves to concrete tool set) and which gates the role can sign off on.
  */
-export const RoleFrontmatter = z.object({
+export const RoleFrontmatter = z
+    .object({
     name: AgentName,
     description: z.string().min(1).max(1000),
     domain: DomainId,
-    /** Gates where this role is authorized to sign off. */
-    signs_off_at: z.array(GateName).min(1),
+    /**
+     * "gate"  — orchestra role that signs delivery gates (the 8 dev agents).
+     * "meta"  — maintenance agent beside the pipeline that signs NO gates
+     *           (the Auditor, ADR-DEV-122). Default keeps every existing
+     *           agent.md (which omits the field) a gate role.
+     */
+    kind: z.enum(["gate", "meta"]).default("gate"),
+    /** Gates where this role signs off. Required for gate roles; empty for meta. */
+    signs_off_at: z.array(GateName).default([]),
     /** Named tool-allowlist policy. MCP looks up the concrete tool list by name. */
     tool_allowlist: z.string().min(1),
-    budget_lines: z.number().int().positive().max(250).default(250),
+    budget_lines: z.number().int().positive().max(ROLE_BUDGET_LINES_MAX).default(250),
     schema_version: z.literal(1).default(1),
+})
+    .superRefine((val, ctx) => {
+    if (val.kind === "gate" && val.signs_off_at.length === 0) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["signs_off_at"],
+            message: "gate-kind role must sign off on at least one gate",
+        });
+    }
+    // Domain isolation: every signed gate must belong to the role's own domain.
+    for (const gate of val.signs_off_at) {
+        if (!gateBelongsToDomain(gate, val.domain)) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["signs_off_at"],
+                message: `gate '${gate}' does not belong to domain '${val.domain}'`,
+            });
+        }
+    }
 });

package/dist/shared/index.d.ts

@@ -8,11 +8,6 @@
  * Pre-DEV-100 this lived as a separate `@denish1209/types` npm package;
  * DEV-100 consolidated it into `code-ai-installer/src/shared/`. The legacy
  * `@denish1209/types@0.1.0` is deprecated on npm.
- *
- * See ../../../docs/architecture-redesign/ for the source-of-truth specs:
- *   - persona-base.md / persona-architecture.md
- *   - 2026-05-23-context.md (paradigm shift, principles, artifact caps)
- *   - dev-domain-planning-kickoff.md (pipeline.yaml scope)
  */
 export declare const VERSION = "0.0.0";
 export * from "./vocabulary.js";

package/dist/shared/index.js

@@ -8,11 +8,6 @@
  * Pre-DEV-100 this lived as a separate `@denish1209/types` npm package;
  * DEV-100 consolidated it into `code-ai-installer/src/shared/`. The legacy
  * `@denish1209/types@0.1.0` is deprecated on npm.
- *
- * See ../../../docs/architecture-redesign/ for the source-of-truth specs:
- *   - persona-base.md / persona-architecture.md
- *   - 2026-05-23-context.md (paradigm shift, principles, artifact caps)
- *   - dev-domain-planning-kickoff.md (pipeline.yaml scope)
  */
 export const VERSION = "0.0.0";
 export * from "./vocabulary.js";

package/dist/shared/persona.d.ts

@@ -2,7 +2,7 @@ import { z } from "zod";
 /**
  * Persona schema — two layers + merge result.
  *
- * Per docs/architecture-redesign/persona-architecture.md:
+ * Persona model (base + user layers, merged by load_role):
  *   - persona-base.md ships universal principles (loaded by every install)
  *   - persona-user-{handle}.md is local-only (gitignored, frontmatter flag, files-whitelist excluded)
  *   - the merged persona is what `load_role` returns to SessionStart
@@ -50,9 +50,9 @@ export type PersonaProperty = z.infer<typeof PersonaProperty>;
  */
 export declare const PersonaSection: z.ZodEnum<{
     values: "values";
-    style: "style";
     epistemic_stance: "epistemic_stance";
     defaults: "defaults";
+    style: "style";
 }>;
 export type PersonaSection = z.infer<typeof PersonaSection>;
 /** Base persona — ships universal principles. Hard cap 200 lines (enforced at submit time, not in zod). */

package/dist/shared/persona.js

@@ -2,7 +2,7 @@ import { z } from "zod";
 /**
  * Persona schema — two layers + merge result.
  *
- * Per docs/architecture-redesign/persona-architecture.md:
+ * Persona model (base + user layers, merged by load_role):
  *   - persona-base.md ships universal principles (loaded by every install)
  *   - persona-user-{handle}.md is local-only (gitignored, frontmatter flag, files-whitelist excluded)
  *   - the merged persona is what `load_role` returns to SessionStart

package/dist/shared/pipeline.d.ts

@@ -41,6 +41,21 @@ export declare const GateConfig: z.ZodObject<{
         OPS: "OPS";
         TEST: "TEST";
         RG: "RG";
+        STRATEGIST: "STRATEGIST";
+        RESEARCHER: "RESEARCHER";
+        COPYWRITER: "COPYWRITER";
+        VISUAL_CONCEPT: "VISUAL_CONCEPT";
+        REVIEWER: "REVIEWER";
+        RELEASE_GATE: "RELEASE_GATE";
+        INTERVIEWER: "INTERVIEWER";
+        DATA_ANALYST: "DATA_ANALYST";
+        MEDIATOR: "MEDIATOR";
+        DESIGNER: "DESIGNER";
+        LAYOUTER: "LAYOUTER";
+        DISCOVERY: "DISCOVERY";
+        PRODUCT_STRATEGIST: "PRODUCT_STRATEGIST";
+        UX_DESIGNER: "UX_DESIGNER";
+        TECH_LEAD: "TECH_LEAD";
     }>;
     produced_by: z.ZodDefault<z.ZodArray<z.ZodString>>;
     signs_off: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -74,6 +89,21 @@ export declare const ModeConfig: z.ZodObject<{
             OPS: "OPS";
             TEST: "TEST";
             RG: "RG";
+            STRATEGIST: "STRATEGIST";
+            RESEARCHER: "RESEARCHER";
+            COPYWRITER: "COPYWRITER";
+            VISUAL_CONCEPT: "VISUAL_CONCEPT";
+            REVIEWER: "REVIEWER";
+            RELEASE_GATE: "RELEASE_GATE";
+            INTERVIEWER: "INTERVIEWER";
+            DATA_ANALYST: "DATA_ANALYST";
+            MEDIATOR: "MEDIATOR";
+            DESIGNER: "DESIGNER";
+            LAYOUTER: "LAYOUTER";
+            DISCOVERY: "DISCOVERY";
+            PRODUCT_STRATEGIST: "PRODUCT_STRATEGIST";
+            UX_DESIGNER: "UX_DESIGNER";
+            TECH_LEAD: "TECH_LEAD";
         }>;
         produced_by: z.ZodDefault<z.ZodArray<z.ZodString>>;
         signs_off: z.ZodDefault<z.ZodArray<z.ZodString>>;
@@ -151,8 +181,8 @@ export declare const PipelineYaml: z.ZodObject<{
         hotfix: "hotfix";
     }>>;
     default_signer: z.ZodDefault<z.ZodEnum<{
-        mcp: "mcp";
         den: "den";
+        mcp: "mcp";
         system: "system";
     }>>;
     modes: z.ZodArray<z.ZodObject<{
@@ -171,6 +201,21 @@ export declare const PipelineYaml: z.ZodObject<{
                 OPS: "OPS";
                 TEST: "TEST";
                 RG: "RG";
+                STRATEGIST: "STRATEGIST";
+                RESEARCHER: "RESEARCHER";
+                COPYWRITER: "COPYWRITER";
+                VISUAL_CONCEPT: "VISUAL_CONCEPT";
+                REVIEWER: "REVIEWER";
+                RELEASE_GATE: "RELEASE_GATE";
+                INTERVIEWER: "INTERVIEWER";
+                DATA_ANALYST: "DATA_ANALYST";
+                MEDIATOR: "MEDIATOR";
+                DESIGNER: "DESIGNER";
+                LAYOUTER: "LAYOUTER";
+                DISCOVERY: "DISCOVERY";
+                PRODUCT_STRATEGIST: "PRODUCT_STRATEGIST";
+                UX_DESIGNER: "UX_DESIGNER";
+                TECH_LEAD: "TECH_LEAD";
             }>;
             produced_by: z.ZodDefault<z.ZodArray<z.ZodString>>;
             signs_off: z.ZodDefault<z.ZodArray<z.ZodString>>;