codictator 0.0.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (835) hide show
  1. package/LICENSE +9 -0
  2. package/README.md +5 -0
  3. package/dist/builtin-packs/core/fixtures/agent-assets-present/passing/basic/case.json +10 -0
  4. package/dist/builtin-packs/core/fixtures/agent-assets-present/violating/basic/case.json +10 -0
  5. package/dist/builtin-packs/core/fixtures/arch-boundaries/passing/basic/case.json +10 -0
  6. package/dist/builtin-packs/core/fixtures/arch-boundaries/violating/basic/case.json +10 -0
  7. package/dist/builtin-packs/core/fixtures/arch-module-mapped/passing/basic/case.json +10 -0
  8. package/dist/builtin-packs/core/fixtures/arch-module-mapped/violating/basic/case.json +10 -0
  9. package/dist/builtin-packs/core/fixtures/arch-module-size/passing/basic/case.json +10 -0
  10. package/dist/builtin-packs/core/fixtures/arch-module-size/violating/basic/case.json +10 -0
  11. package/dist/builtin-packs/core/fixtures/arch-no-cycles/passing/basic/case.json +10 -0
  12. package/dist/builtin-packs/core/fixtures/arch-no-cycles/violating/basic/case.json +10 -0
  13. package/dist/builtin-packs/core/fixtures/arch-profile-declared/passing/basic/case.json +10 -0
  14. package/dist/builtin-packs/core/fixtures/arch-profile-declared/violating/basic/case.json +10 -0
  15. package/dist/builtin-packs/core/fixtures/arch-public-entry/passing/basic/case.json +10 -0
  16. package/dist/builtin-packs/core/fixtures/arch-public-entry/violating/basic/case.json +10 -0
  17. package/dist/builtin-packs/core/fixtures/branch-protection/passing/basic/case.json +10 -0
  18. package/dist/builtin-packs/core/fixtures/branch-protection/violating/basic/case.json +10 -0
  19. package/dist/builtin-packs/core/fixtures/bug-registry/passing/basic/case.json +10 -0
  20. package/dist/builtin-packs/core/fixtures/bug-registry/violating/basic/case.json +10 -0
  21. package/dist/builtin-packs/core/fixtures/bug-rows-immutable/passing/basic/case.json +10 -0
  22. package/dist/builtin-packs/core/fixtures/bug-rows-immutable/violating/basic/case.json +10 -0
  23. package/dist/builtin-packs/core/fixtures/ci-actions-pinned/passing/basic/case.json +10 -0
  24. package/dist/builtin-packs/core/fixtures/ci-actions-pinned/violating/basic/case.json +10 -0
  25. package/dist/builtin-packs/core/fixtures/ci-present/passing/basic/case.json +10 -0
  26. package/dist/builtin-packs/core/fixtures/ci-present/violating/basic/case.json +10 -0
  27. package/dist/builtin-packs/core/fixtures/ci-required-check/passing/basic/case.json +10 -0
  28. package/dist/builtin-packs/core/fixtures/ci-required-check/violating/basic/case.json +10 -0
  29. package/dist/builtin-packs/core/fixtures/compiler-strict/passing/basic/case.json +10 -0
  30. package/dist/builtin-packs/core/fixtures/compiler-strict/violating/basic/case.json +10 -0
  31. package/dist/builtin-packs/core/fixtures/complexity/passing/basic/case.json +10 -0
  32. package/dist/builtin-packs/core/fixtures/complexity/violating/basic/case.json +10 -0
  33. package/dist/builtin-packs/core/fixtures/context-hard-band/passing/basic/case.json +10 -0
  34. package/dist/builtin-packs/core/fixtures/context-hard-band/violating/basic/case.json +10 -0
  35. package/dist/builtin-packs/core/fixtures/context-soft-band/passing/basic/case.json +10 -0
  36. package/dist/builtin-packs/core/fixtures/context-soft-band/violating/basic/case.json +10 -0
  37. package/dist/builtin-packs/core/fixtures/conventional-commit/passing/basic/case.json +10 -0
  38. package/dist/builtin-packs/core/fixtures/conventional-commit/violating/basic/case.json +10 -0
  39. package/dist/builtin-packs/core/fixtures/coverage-floor/passing/basic/case.json +10 -0
  40. package/dist/builtin-packs/core/fixtures/coverage-floor/violating/basic/case.json +10 -0
  41. package/dist/builtin-packs/core/fixtures/custom-pack-selftest/passing/basic/case.json +10 -0
  42. package/dist/builtin-packs/core/fixtures/custom-pack-selftest/violating/basic/case.json +10 -0
  43. package/dist/builtin-packs/core/fixtures/dangerous-shell/passing/basic/case.json +10 -0
  44. package/dist/builtin-packs/core/fixtures/dangerous-shell/violating/basic/case.json +10 -0
  45. package/dist/builtin-packs/core/fixtures/dead-code/passing/basic/case.json +10 -0
  46. package/dist/builtin-packs/core/fixtures/dead-code/violating/basic/case.json +10 -0
  47. package/dist/builtin-packs/core/fixtures/dep-exact-pin/passing/basic/case.json +10 -0
  48. package/dist/builtin-packs/core/fixtures/dep-exact-pin/violating/basic/case.json +10 -0
  49. package/dist/builtin-packs/core/fixtures/dep-latest-stable/passing/basic/case.json +10 -0
  50. package/dist/builtin-packs/core/fixtures/dep-latest-stable/violating/basic/case.json +10 -0
  51. package/dist/builtin-packs/core/fixtures/dep-license/passing/basic/case.json +10 -0
  52. package/dist/builtin-packs/core/fixtures/dep-license/violating/basic/case.json +10 -0
  53. package/dist/builtin-packs/core/fixtures/dep-lockfile/passing/basic/case.json +10 -0
  54. package/dist/builtin-packs/core/fixtures/dep-lockfile/violating/basic/case.json +10 -0
  55. package/dist/builtin-packs/core/fixtures/dep-new-needs-reason/passing/basic/case.json +10 -0
  56. package/dist/builtin-packs/core/fixtures/dep-new-needs-reason/violating/basic/case.json +10 -0
  57. package/dist/builtin-packs/core/fixtures/dep-no-deprecated/passing/basic/case.json +10 -0
  58. package/dist/builtin-packs/core/fixtures/dep-no-deprecated/violating/basic/case.json +10 -0
  59. package/dist/builtin-packs/core/fixtures/dep-no-vulnerable/passing/basic/case.json +10 -0
  60. package/dist/builtin-packs/core/fixtures/dep-no-vulnerable/violating/basic/case.json +10 -0
  61. package/dist/builtin-packs/core/fixtures/dep-one-per-capability/passing/basic/case.json +10 -0
  62. package/dist/builtin-packs/core/fixtures/dep-one-per-capability/violating/basic/case.json +10 -0
  63. package/dist/builtin-packs/core/fixtures/diagnose-before-fix/passing/basic/case.json +10 -0
  64. package/dist/builtin-packs/core/fixtures/diagnose-before-fix/violating/basic/case.json +10 -0
  65. package/dist/builtin-packs/core/fixtures/doc-breadth/passing/basic/case.json +10 -0
  66. package/dist/builtin-packs/core/fixtures/doc-breadth/violating/basic/case.json +10 -0
  67. package/dist/builtin-packs/core/fixtures/doc-density/passing/basic/case.json +10 -0
  68. package/dist/builtin-packs/core/fixtures/doc-density/violating/basic/case.json +10 -0
  69. package/dist/builtin-packs/core/fixtures/doc-links-valid/passing/basic/case.json +10 -0
  70. package/dist/builtin-packs/core/fixtures/doc-links-valid/violating/basic/case.json +10 -0
  71. package/dist/builtin-packs/core/fixtures/doc-no-corpus-counts/passing/basic/case.json +10 -0
  72. package/dist/builtin-packs/core/fixtures/doc-no-corpus-counts/violating/basic/case.json +10 -0
  73. package/dist/builtin-packs/core/fixtures/doc-no-inline-changelog/passing/basic/case.json +10 -0
  74. package/dist/builtin-packs/core/fixtures/doc-no-inline-changelog/violating/basic/case.json +10 -0
  75. package/dist/builtin-packs/core/fixtures/doc-one-level/passing/basic/case.json +10 -0
  76. package/dist/builtin-packs/core/fixtures/doc-one-level/violating/basic/case.json +10 -0
  77. package/dist/builtin-packs/core/fixtures/doc-placement/passing/basic/case.json +10 -0
  78. package/dist/builtin-packs/core/fixtures/doc-placement/violating/basic/case.json +10 -0
  79. package/dist/builtin-packs/core/fixtures/doc-router-leaf/passing/basic/case.json +10 -0
  80. package/dist/builtin-packs/core/fixtures/doc-router-leaf/violating/basic/case.json +10 -0
  81. package/dist/builtin-packs/core/fixtures/doc-single-owner/passing/basic/case.json +10 -0
  82. package/dist/builtin-packs/core/fixtures/doc-single-owner/violating/basic/case.json +10 -0
  83. package/dist/builtin-packs/core/fixtures/doc-size/passing/basic/case.json +10 -0
  84. package/dist/builtin-packs/core/fixtures/doc-size/violating/basic/case.json +10 -0
  85. package/dist/builtin-packs/core/fixtures/duplication/passing/basic/case.json +10 -0
  86. package/dist/builtin-packs/core/fixtures/duplication/violating/basic/case.json +10 -0
  87. package/dist/builtin-packs/core/fixtures/engine-version-match/passing/basic/case.json +10 -0
  88. package/dist/builtin-packs/core/fixtures/engine-version-match/violating/basic/case.json +10 -0
  89. package/dist/builtin-packs/core/fixtures/file-naming/passing/basic/case.json +10 -0
  90. package/dist/builtin-packs/core/fixtures/file-naming/violating/basic/case.json +10 -0
  91. package/dist/builtin-packs/core/fixtures/file-size/passing/basic/case.json +10 -0
  92. package/dist/builtin-packs/core/fixtures/file-size/violating/basic/case.json +10 -0
  93. package/dist/builtin-packs/core/fixtures/function-size/passing/basic/case.json +10 -0
  94. package/dist/builtin-packs/core/fixtures/function-size/violating/basic/case.json +10 -0
  95. package/dist/builtin-packs/core/fixtures/graph-before-scan/passing/basic/case.json +10 -0
  96. package/dist/builtin-packs/core/fixtures/graph-before-scan/violating/basic/case.json +10 -0
  97. package/dist/builtin-packs/core/fixtures/guardrail-manifest/passing/basic/case.json +10 -0
  98. package/dist/builtin-packs/core/fixtures/guardrail-manifest/violating/basic/case.json +10 -0
  99. package/dist/builtin-packs/core/fixtures/history-append-only/passing/basic/case.json +10 -0
  100. package/dist/builtin-packs/core/fixtures/history-append-only/violating/basic/case.json +10 -0
  101. package/dist/builtin-packs/core/fixtures/history-entry/passing/basic/case.json +10 -0
  102. package/dist/builtin-packs/core/fixtures/history-entry/violating/basic/case.json +10 -0
  103. package/dist/builtin-packs/core/fixtures/history-entry-complete/passing/basic/case.json +10 -0
  104. package/dist/builtin-packs/core/fixtures/history-entry-complete/violating/basic/case.json +10 -0
  105. package/dist/builtin-packs/core/fixtures/hooks-active/passing/basic/case.json +10 -0
  106. package/dist/builtin-packs/core/fixtures/hooks-active/violating/basic/case.json +10 -0
  107. package/dist/builtin-packs/core/fixtures/loop-breaker/passing/basic/case.json +10 -0
  108. package/dist/builtin-packs/core/fixtures/loop-breaker/violating/basic/case.json +10 -0
  109. package/dist/builtin-packs/core/fixtures/max-file-bytes/passing/basic/case.json +10 -0
  110. package/dist/builtin-packs/core/fixtures/max-file-bytes/violating/basic/case.json +10 -0
  111. package/dist/builtin-packs/core/fixtures/mcp-declared/passing/basic/case.json +10 -0
  112. package/dist/builtin-packs/core/fixtures/mcp-declared/violating/basic/case.json +10 -0
  113. package/dist/builtin-packs/core/fixtures/no-assertion-loss/passing/basic/case.json +10 -0
  114. package/dist/builtin-packs/core/fixtures/no-assertion-loss/violating/basic/case.json +10 -0
  115. package/dist/builtin-packs/core/fixtures/no-baseline-raise/passing/basic/case.json +10 -0
  116. package/dist/builtin-packs/core/fixtures/no-baseline-raise/violating/basic/case.json +10 -0
  117. package/dist/builtin-packs/core/fixtures/no-bypass/passing/basic/case.json +10 -0
  118. package/dist/builtin-packs/core/fixtures/no-bypass/violating/basic/case.json +10 -0
  119. package/dist/builtin-packs/core/fixtures/no-fixture-shrink/passing/basic/case.json +10 -0
  120. package/dist/builtin-packs/core/fixtures/no-fixture-shrink/violating/basic/case.json +10 -0
  121. package/dist/builtin-packs/core/fixtures/no-guard-removal/passing/basic/case.json +10 -0
  122. package/dist/builtin-packs/core/fixtures/no-guard-removal/violating/basic/case.json +10 -0
  123. package/dist/builtin-packs/core/fixtures/no-new-suppressions/passing/basic/case.json +10 -0
  124. package/dist/builtin-packs/core/fixtures/no-new-suppressions/violating/basic/case.json +10 -0
  125. package/dist/builtin-packs/core/fixtures/no-secret-reads/passing/basic/case.json +10 -0
  126. package/dist/builtin-packs/core/fixtures/no-secret-reads/violating/basic/case.json +10 -0
  127. package/dist/builtin-packs/core/fixtures/no-secrets/passing/basic/case.json +10 -0
  128. package/dist/builtin-packs/core/fixtures/no-secrets/violating/basic/case.json +10 -0
  129. package/dist/builtin-packs/core/fixtures/no-skipped-tests/passing/basic/case.json +10 -0
  130. package/dist/builtin-packs/core/fixtures/no-skipped-tests/violating/basic/case.json +10 -0
  131. package/dist/builtin-packs/core/fixtures/no-speculative-abstraction/passing/basic/case.json +10 -0
  132. package/dist/builtin-packs/core/fixtures/no-speculative-abstraction/violating/basic/case.json +10 -0
  133. package/dist/builtin-packs/core/fixtures/no-threshold-lowering/passing/basic/case.json +10 -0
  134. package/dist/builtin-packs/core/fixtures/no-threshold-lowering/violating/basic/case.json +10 -0
  135. package/dist/builtin-packs/core/fixtures/perf-budgets/passing/basic/case.json +10 -0
  136. package/dist/builtin-packs/core/fixtures/perf-budgets/violating/basic/case.json +10 -0
  137. package/dist/builtin-packs/core/fixtures/ratchet-touched-improves/passing/basic/case.json +10 -0
  138. package/dist/builtin-packs/core/fixtures/ratchet-touched-improves/violating/basic/case.json +10 -0
  139. package/dist/builtin-packs/core/fixtures/read-dedupe/passing/basic/case.json +10 -0
  140. package/dist/builtin-packs/core/fixtures/read-dedupe/violating/basic/case.json +10 -0
  141. package/dist/builtin-packs/core/fixtures/red-before-green/passing/basic/case.json +10 -0
  142. package/dist/builtin-packs/core/fixtures/red-before-green/violating/basic/case.json +10 -0
  143. package/dist/builtin-packs/core/fixtures/regression-test-for-fix/passing/basic/case.json +10 -0
  144. package/dist/builtin-packs/core/fixtures/regression-test-for-fix/violating/basic/case.json +10 -0
  145. package/dist/builtin-packs/core/fixtures/remediation-step-size/passing/basic/case.json +10 -0
  146. package/dist/builtin-packs/core/fixtures/remediation-step-size/violating/basic/case.json +10 -0
  147. package/dist/builtin-packs/core/fixtures/repo-hygiene/passing/basic/case.json +10 -0
  148. package/dist/builtin-packs/core/fixtures/repo-hygiene/violating/basic/case.json +10 -0
  149. package/dist/builtin-packs/core/fixtures/review-gate/passing/basic/case.json +10 -0
  150. package/dist/builtin-packs/core/fixtures/review-gate/violating/basic/case.json +10 -0
  151. package/dist/builtin-packs/core/fixtures/review-round-cap/passing/basic/case.json +10 -0
  152. package/dist/builtin-packs/core/fixtures/review-round-cap/violating/basic/case.json +10 -0
  153. package/dist/builtin-packs/core/fixtures/session-tool-call-limit/passing/basic/case.json +10 -0
  154. package/dist/builtin-packs/core/fixtures/session-tool-call-limit/violating/basic/case.json +10 -0
  155. package/dist/builtin-packs/core/fixtures/spec-trace/passing/basic/case.json +10 -0
  156. package/dist/builtin-packs/core/fixtures/spec-trace/violating/basic/case.json +10 -0
  157. package/dist/builtin-packs/core/fixtures/test-command-intact/passing/basic/case.json +10 -0
  158. package/dist/builtin-packs/core/fixtures/test-command-intact/violating/basic/case.json +10 -0
  159. package/dist/builtin-packs/core/fixtures/test-kinds-by-scenario/passing/basic/case.json +10 -0
  160. package/dist/builtin-packs/core/fixtures/test-kinds-by-scenario/violating/basic/case.json +10 -0
  161. package/dist/builtin-packs/core/fixtures/waivers-valid/passing/basic/case.json +10 -0
  162. package/dist/builtin-packs/core/fixtures/waivers-valid/violating/basic/case.json +10 -0
  163. package/dist/builtin-packs/core/fixtures/workflow-gates/passing/basic/case.json +10 -0
  164. package/dist/builtin-packs/core/fixtures/workflow-gates/violating/basic/case.json +10 -0
  165. package/dist/builtin-packs/core/fixtures/write-confinement/passing/basic/case.json +10 -0
  166. package/dist/builtin-packs/core/fixtures/write-confinement/violating/basic/case.json +10 -0
  167. package/dist/builtin-packs/core/fixtures/writes-within-plan/passing/basic/case.json +10 -0
  168. package/dist/builtin-packs/core/fixtures/writes-within-plan/violating/basic/case.json +10 -0
  169. package/dist/builtin-packs/core/index.ts +8 -0
  170. package/dist/builtin-packs/core/pack.json +2057 -0
  171. package/dist/builtin-packs/dotnet/index.ts +47 -0
  172. package/dist/builtin-packs/python/extract.ts +245 -0
  173. package/dist/builtin-packs/python/fixtures/lint/passing/basic/case.json +10 -0
  174. package/dist/builtin-packs/python/fixtures/lint/violating/basic/case.json +10 -0
  175. package/dist/builtin-packs/python/fixtures/no-phantom-import/passing/basic/case.json +12 -0
  176. package/dist/builtin-packs/python/fixtures/no-phantom-import/violating/basic/case.json +11 -0
  177. package/dist/builtin-packs/python/fixtures/security-patterns/passing/basic/case.json +10 -0
  178. package/dist/builtin-packs/python/fixtures/security-patterns/violating/basic/case.json +10 -0
  179. package/dist/builtin-packs/python/fixtures/typecheck/passing/basic/case.json +10 -0
  180. package/dist/builtin-packs/python/fixtures/typecheck/violating/basic/case.json +10 -0
  181. package/dist/builtin-packs/python/index.ts +57 -0
  182. package/dist/builtin-packs/python/pack.json +116 -0
  183. package/dist/builtin-packs/typescript/extract-clauses.ts +153 -0
  184. package/dist/builtin-packs/typescript/extract-literals.ts +111 -0
  185. package/dist/builtin-packs/typescript/extract-words.ts +79 -0
  186. package/dist/builtin-packs/typescript/extract.ts +77 -0
  187. package/dist/builtin-packs/typescript/fixtures/lint/passing/basic/case.json +10 -0
  188. package/dist/builtin-packs/typescript/fixtures/lint/violating/basic/case.json +10 -0
  189. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/passing/basic/case.json +10 -0
  190. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/passing/host-provided/case.json +10 -0
  191. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/violating/basic/case.json +10 -0
  192. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/violating/host-provided/case.json +10 -0
  193. package/dist/builtin-packs/typescript/fixtures/security-patterns/passing/basic/case.json +10 -0
  194. package/dist/builtin-packs/typescript/fixtures/security-patterns/violating/basic/case.json +10 -0
  195. package/dist/builtin-packs/typescript/fixtures/typecheck/passing/basic/case.json +10 -0
  196. package/dist/builtin-packs/typescript/fixtures/typecheck/violating/basic/case.json +10 -0
  197. package/dist/builtin-packs/typescript/index.ts +85 -0
  198. package/dist/builtin-packs/typescript/lex.ts +199 -0
  199. package/dist/builtin-packs/typescript/measures-exports.ts +173 -0
  200. package/dist/builtin-packs/typescript/measures-functions.ts +138 -0
  201. package/dist/builtin-packs/typescript/measures.ts +10 -0
  202. package/dist/builtin-packs/typescript/naming.ts +47 -0
  203. package/dist/builtin-packs/typescript/pack.json +169 -0
  204. package/dist/builtin-packs/typescript/patterns.ts +93 -0
  205. package/dist/builtin-packs/typescript/resolve.ts +224 -0
  206. package/dist/builtin-packs/typescript/strict.ts +177 -0
  207. package/dist/builtin-packs/typescript/titles.ts +184 -0
  208. package/dist/cli/baseline.d.ts +3 -0
  209. package/dist/cli/baseline.js +67 -0
  210. package/dist/cli/ci-bot-change.d.ts +3 -0
  211. package/dist/cli/ci-bot-change.js +54 -0
  212. package/dist/cli/ci-range.d.ts +18 -0
  213. package/dist/cli/ci-range.js +228 -0
  214. package/dist/cli/ci-summary.d.ts +3 -0
  215. package/dist/cli/ci-summary.js +45 -0
  216. package/dist/cli/ci.d.ts +4 -0
  217. package/dist/cli/ci.js +195 -0
  218. package/dist/cli/commands.d.ts +5 -0
  219. package/dist/cli/commands.js +39 -0
  220. package/dist/cli/deps.d.ts +3 -0
  221. package/dist/cli/deps.js +115 -0
  222. package/dist/cli/drift.d.ts +11 -0
  223. package/dist/cli/drift.js +91 -0
  224. package/dist/cli/evaluate.d.ts +20 -0
  225. package/dist/cli/evaluate.js +213 -0
  226. package/dist/cli/gate-scope.d.ts +10 -0
  227. package/dist/cli/gate-scope.js +82 -0
  228. package/dist/cli/git-hook.d.ts +3 -0
  229. package/dist/cli/git-hook.js +179 -0
  230. package/dist/cli/guardrail.d.ts +5 -0
  231. package/dist/cli/guardrail.js +190 -0
  232. package/dist/cli/index.d.ts +12 -0
  233. package/dist/cli/index.js +198 -0
  234. package/dist/cli/init-plan.d.ts +23 -0
  235. package/dist/cli/init-plan.js +135 -0
  236. package/dist/cli/init.d.ts +3 -0
  237. package/dist/cli/init.js +122 -0
  238. package/dist/cli/inspect-status.d.ts +8 -0
  239. package/dist/cli/inspect-status.js +164 -0
  240. package/dist/cli/inspect.d.ts +5 -0
  241. package/dist/cli/inspect.js +98 -0
  242. package/dist/cli/main.d.ts +2 -0
  243. package/dist/cli/main.js +60 -0
  244. package/dist/cli/pack-adapters.d.ts +3 -0
  245. package/dist/cli/pack-adapters.js +81 -0
  246. package/dist/cli/packs.d.ts +6 -0
  247. package/dist/cli/packs.js +131 -0
  248. package/dist/cli/plan-launcher.d.ts +1 -0
  249. package/dist/cli/plan-launcher.js +222 -0
  250. package/dist/cli/plan.d.ts +25 -0
  251. package/dist/cli/plan.js +121 -0
  252. package/dist/cli/proofs-test.d.ts +3 -0
  253. package/dist/cli/proofs-test.js +77 -0
  254. package/dist/cli/proofs.d.ts +3 -0
  255. package/dist/cli/proofs.js +168 -0
  256. package/dist/cli/remediation.d.ts +3 -0
  257. package/dist/cli/remediation.js +107 -0
  258. package/dist/cli/report.d.ts +4 -0
  259. package/dist/cli/report.js +93 -0
  260. package/dist/cli/serve-eval.d.ts +2 -0
  261. package/dist/cli/serve-eval.js +165 -0
  262. package/dist/cli/serve-log.d.ts +2 -0
  263. package/dist/cli/serve-log.js +150 -0
  264. package/dist/cli/serve-methods.d.ts +2 -0
  265. package/dist/cli/serve-methods.js +181 -0
  266. package/dist/cli/serve-protocol.d.ts +35 -0
  267. package/dist/cli/serve-protocol.js +97 -0
  268. package/dist/cli/serve-run.d.ts +9 -0
  269. package/dist/cli/serve-run.js +135 -0
  270. package/dist/cli/serve-server.d.ts +5 -0
  271. package/dist/cli/serve-server.js +120 -0
  272. package/dist/cli/serve-shared.d.ts +34 -0
  273. package/dist/cli/serve-shared.js +20 -0
  274. package/dist/cli/serve-status.d.ts +2 -0
  275. package/dist/cli/serve-status.js +130 -0
  276. package/dist/cli/serve-transport.d.ts +2 -0
  277. package/dist/cli/serve-transport.js +114 -0
  278. package/dist/cli/shared.d.ts +35 -0
  279. package/dist/cli/shared.js +181 -0
  280. package/dist/cli/task-advance.d.ts +3 -0
  281. package/dist/cli/task-advance.js +144 -0
  282. package/dist/cli/task-phases.d.ts +3 -0
  283. package/dist/cli/task-phases.js +77 -0
  284. package/dist/cli/tasks.d.ts +12 -0
  285. package/dist/cli/tasks.js +176 -0
  286. package/dist/cli/transparency.d.ts +4 -0
  287. package/dist/cli/transparency.js +197 -0
  288. package/dist/cli/waivers.d.ts +3 -0
  289. package/dist/cli/waivers.js +195 -0
  290. package/dist/features/adapters/claude-code.d.ts +8 -0
  291. package/dist/features/adapters/claude-code.js +198 -0
  292. package/dist/features/adapters/claude-shaped.d.ts +3 -0
  293. package/dist/features/adapters/claude-shaped.js +176 -0
  294. package/dist/features/adapters/codex-cli.d.ts +8 -0
  295. package/dist/features/adapters/codex-cli.js +180 -0
  296. package/dist/features/adapters/contract.d.ts +104 -0
  297. package/dist/features/adapters/contract.js +17 -0
  298. package/dist/features/adapters/copilot-capabilities.d.ts +2 -0
  299. package/dist/features/adapters/copilot-capabilities.js +46 -0
  300. package/dist/features/adapters/copilot.d.ts +8 -0
  301. package/dist/features/adapters/copilot.js +207 -0
  302. package/dist/features/adapters/cursor.d.ts +8 -0
  303. package/dist/features/adapters/cursor.js +245 -0
  304. package/dist/features/adapters/custom-event.d.ts +3 -0
  305. package/dist/features/adapters/custom-event.js +180 -0
  306. package/dist/features/adapters/custom-load.d.ts +3 -0
  307. package/dist/features/adapters/custom-load.js +185 -0
  308. package/dist/features/adapters/custom-shape.d.ts +21 -0
  309. package/dist/features/adapters/custom-shape.js +87 -0
  310. package/dist/features/adapters/custom.d.ts +9 -0
  311. package/dist/features/adapters/custom.js +130 -0
  312. package/dist/features/adapters/effective-cache.d.ts +5 -0
  313. package/dist/features/adapters/effective-cache.js +45 -0
  314. package/dist/features/adapters/gemini-cli.d.ts +6 -0
  315. package/dist/features/adapters/gemini-cli.js +160 -0
  316. package/dist/features/adapters/gemini-tables.d.ts +7 -0
  317. package/dist/features/adapters/gemini-tables.js +104 -0
  318. package/dist/features/adapters/hook-dispatch.d.ts +7 -0
  319. package/dist/features/adapters/hook-dispatch.js +97 -0
  320. package/dist/features/adapters/hook-injection.d.ts +12 -0
  321. package/dist/features/adapters/hook-injection.js +75 -0
  322. package/dist/features/adapters/hook-load.d.ts +15 -0
  323. package/dist/features/adapters/hook-load.js +152 -0
  324. package/dist/features/adapters/hook-scope.d.ts +3 -0
  325. package/dist/features/adapters/hook-scope.js +54 -0
  326. package/dist/features/adapters/index.d.ts +22 -0
  327. package/dist/features/adapters/index.js +86 -0
  328. package/dist/features/adapters/muse-code.d.ts +8 -0
  329. package/dist/features/adapters/muse-code.js +223 -0
  330. package/dist/features/adapters/opencode-bridge.d.ts +1 -0
  331. package/dist/features/adapters/opencode-bridge.js +230 -0
  332. package/dist/features/adapters/opencode-capabilities.d.ts +2 -0
  333. package/dist/features/adapters/opencode-capabilities.js +47 -0
  334. package/dist/features/adapters/opencode-parse.d.ts +3 -0
  335. package/dist/features/adapters/opencode-parse.js +137 -0
  336. package/dist/features/adapters/opencode-tables.d.ts +5 -0
  337. package/dist/features/adapters/opencode-tables.js +63 -0
  338. package/dist/features/adapters/opencode.d.ts +10 -0
  339. package/dist/features/adapters/opencode.js +97 -0
  340. package/dist/features/adapters/runtime.d.ts +25 -0
  341. package/dist/features/adapters/runtime.js +148 -0
  342. package/dist/features/adapters/universal.d.ts +7 -0
  343. package/dist/features/adapters/universal.js +89 -0
  344. package/dist/features/arch/arch-profiles.d.ts +3 -0
  345. package/dist/features/arch/arch-profiles.js +5 -0
  346. package/dist/features/arch/checks.d.ts +25 -0
  347. package/dist/features/arch/checks.js +173 -0
  348. package/dist/features/arch/codictator-modules.d.ts +4 -0
  349. package/dist/features/arch/codictator-modules.js +180 -0
  350. package/dist/features/arch/cycle-walk.d.ts +1 -0
  351. package/dist/features/arch/cycle-walk.js +36 -0
  352. package/dist/features/arch/edge-checks.d.ts +13 -0
  353. package/dist/features/arch/edge-checks.js +186 -0
  354. package/dist/features/arch/graph.d.ts +32 -0
  355. package/dist/features/arch/graph.js +202 -0
  356. package/dist/features/arch/index.d.ts +29 -0
  357. package/dist/features/arch/index.js +16 -0
  358. package/dist/features/arch/layer-rules.d.ts +3 -0
  359. package/dist/features/arch/layer-rules.js +38 -0
  360. package/dist/features/arch/module-map-validation.d.ts +3 -0
  361. package/dist/features/arch/module-map-validation.js +30 -0
  362. package/dist/features/arch/module-mapping.d.ts +15 -0
  363. package/dist/features/arch/module-mapping.js +184 -0
  364. package/dist/features/arch/profiles.d.ts +4 -0
  365. package/dist/features/arch/profiles.js +8 -0
  366. package/dist/features/audit/append.d.ts +26 -0
  367. package/dist/features/audit/append.js +205 -0
  368. package/dist/features/audit/explain-table-tail.d.ts +2 -0
  369. package/dist/features/audit/explain-table-tail.js +29 -0
  370. package/dist/features/audit/explain-table.d.ts +8 -0
  371. package/dist/features/audit/explain-table.js +48 -0
  372. package/dist/features/audit/explain.d.ts +7 -0
  373. package/dist/features/audit/explain.js +87 -0
  374. package/dist/features/audit/index.d.ts +37 -0
  375. package/dist/features/audit/index.js +17 -0
  376. package/dist/features/audit/injection-event.d.ts +11 -0
  377. package/dist/features/audit/injection-event.js +17 -0
  378. package/dist/features/audit/read.d.ts +8 -0
  379. package/dist/features/audit/read.js +62 -0
  380. package/dist/features/audit/summarize.d.ts +1 -0
  381. package/dist/features/audit/summarize.js +41 -0
  382. package/dist/features/audit/surfaces.d.ts +47 -0
  383. package/dist/features/audit/surfaces.js +165 -0
  384. package/dist/features/audit/token-saver-evidence.d.ts +14 -0
  385. package/dist/features/audit/token-saver-evidence.js +85 -0
  386. package/dist/features/ci/changes.d.ts +28 -0
  387. package/dist/features/ci/changes.js +88 -0
  388. package/dist/features/ci/index.d.ts +22 -0
  389. package/dist/features/ci/index.js +75 -0
  390. package/dist/features/ci/protection-read.d.ts +3 -0
  391. package/dist/features/ci/protection-read.js +264 -0
  392. package/dist/features/ci/protection.d.ts +25 -0
  393. package/dist/features/ci/protection.js +77 -0
  394. package/dist/features/ci/workflow.d.ts +23 -0
  395. package/dist/features/ci/workflow.js +261 -0
  396. package/dist/features/config/human.d.ts +4 -0
  397. package/dist/features/config/human.js +31 -0
  398. package/dist/features/config/index.d.ts +37 -0
  399. package/dist/features/config/index.js +129 -0
  400. package/dist/features/config/pack-data.d.ts +18 -0
  401. package/dist/features/config/pack-data.js +116 -0
  402. package/dist/features/config/validate-sections.d.ts +6 -0
  403. package/dist/features/config/validate-sections.js +198 -0
  404. package/dist/features/config/validate-shared.d.ts +8 -0
  405. package/dist/features/config/validate-shared.js +69 -0
  406. package/dist/features/config/validate-tunables.d.ts +1 -0
  407. package/dist/features/config/validate-tunables.js +89 -0
  408. package/dist/features/config/validate.d.ts +2 -0
  409. package/dist/features/config/validate.js +57 -0
  410. package/dist/features/deps/bots.d.ts +5 -0
  411. package/dist/features/deps/bots.js +39 -0
  412. package/dist/features/deps/capabilities.d.ts +3 -0
  413. package/dist/features/deps/capabilities.js +91 -0
  414. package/dist/features/deps/check.d.ts +18 -0
  415. package/dist/features/deps/check.js +70 -0
  416. package/dist/features/deps/dependabot.d.ts +10 -0
  417. package/dist/features/deps/dependabot.js +154 -0
  418. package/dist/features/deps/eval.d.ts +41 -0
  419. package/dist/features/deps/eval.js +24 -0
  420. package/dist/features/deps/fields.d.ts +4 -0
  421. package/dist/features/deps/fields.js +18 -0
  422. package/dist/features/deps/index.d.ts +67 -0
  423. package/dist/features/deps/index.js +27 -0
  424. package/dist/features/deps/lockfile.d.ts +8 -0
  425. package/dist/features/deps/lockfile.js +87 -0
  426. package/dist/features/deps/npm.d.ts +22 -0
  427. package/dist/features/deps/npm.js +172 -0
  428. package/dist/features/deps/npmrc.d.ts +12 -0
  429. package/dist/features/deps/npmrc.js +50 -0
  430. package/dist/features/deps/nuget.d.ts +25 -0
  431. package/dist/features/deps/nuget.js +112 -0
  432. package/dist/features/deps/osv-ranges.d.ts +12 -0
  433. package/dist/features/deps/osv-ranges.js +83 -0
  434. package/dist/features/deps/osv.d.ts +16 -0
  435. package/dist/features/deps/osv.js +144 -0
  436. package/dist/features/deps/pypi-pyproject.d.ts +7 -0
  437. package/dist/features/deps/pypi-pyproject.js +118 -0
  438. package/dist/features/deps/pypi.d.ts +29 -0
  439. package/dist/features/deps/pypi.js +137 -0
  440. package/dist/features/deps/registry.d.ts +29 -0
  441. package/dist/features/deps/registry.js +147 -0
  442. package/dist/features/deps/renovate.d.ts +15 -0
  443. package/dist/features/deps/renovate.js +98 -0
  444. package/dist/features/deps/selection.d.ts +20 -0
  445. package/dist/features/deps/selection.js +150 -0
  446. package/dist/features/deps/snapshot-verdicts.d.ts +16 -0
  447. package/dist/features/deps/snapshot-verdicts.js +184 -0
  448. package/dist/features/deps/stable.d.ts +19 -0
  449. package/dist/features/deps/stable.js +106 -0
  450. package/dist/features/deps/step-size.d.ts +7 -0
  451. package/dist/features/deps/step-size.js +24 -0
  452. package/dist/features/deps/upgrade.d.ts +35 -0
  453. package/dist/features/deps/upgrade.js +114 -0
  454. package/dist/features/deps/verdicts.d.ts +21 -0
  455. package/dist/features/deps/verdicts.js +219 -0
  456. package/dist/features/engine/evaluate.d.ts +12 -0
  457. package/dist/features/engine/evaluate.js +165 -0
  458. package/dist/features/engine/index.d.ts +21 -0
  459. package/dist/features/engine/index.js +24 -0
  460. package/dist/features/engine/message.d.ts +3 -0
  461. package/dist/features/engine/message.js +69 -0
  462. package/dist/features/engine/ratchet.d.ts +1 -0
  463. package/dist/features/engine/ratchet.js +63 -0
  464. package/dist/features/engine/run-enforcer.d.ts +4 -0
  465. package/dist/features/engine/run-enforcer.js +82 -0
  466. package/dist/features/engine/waivers.d.ts +23 -0
  467. package/dist/features/engine/waivers.js +169 -0
  468. package/dist/features/generator/draft.d.ts +7 -0
  469. package/dist/features/generator/draft.js +148 -0
  470. package/dist/features/generator/index.d.ts +22 -0
  471. package/dist/features/generator/index.js +8 -0
  472. package/dist/features/generator/llm-draft.d.ts +3 -0
  473. package/dist/features/generator/llm-draft.js +93 -0
  474. package/dist/features/generator/prompt.d.ts +25 -0
  475. package/dist/features/generator/prompt.js +105 -0
  476. package/dist/features/generator/self-test.d.ts +12 -0
  477. package/dist/features/generator/self-test.js +65 -0
  478. package/dist/features/generator/templates.d.ts +26 -0
  479. package/dist/features/generator/templates.js +177 -0
  480. package/dist/features/integrity/drift.d.ts +19 -0
  481. package/dist/features/integrity/drift.js +168 -0
  482. package/dist/features/integrity/hooks.d.ts +19 -0
  483. package/dist/features/integrity/hooks.js +54 -0
  484. package/dist/features/integrity/index.d.ts +10 -0
  485. package/dist/features/integrity/index.js +14 -0
  486. package/dist/features/integrity/manifest.d.ts +15 -0
  487. package/dist/features/integrity/manifest.js +26 -0
  488. package/dist/features/integrity/self-protection.d.ts +12 -0
  489. package/dist/features/integrity/self-protection.js +144 -0
  490. package/dist/features/llm/attempt.d.ts +17 -0
  491. package/dist/features/llm/attempt.js +99 -0
  492. package/dist/features/llm/errors.d.ts +5 -0
  493. package/dist/features/llm/errors.js +18 -0
  494. package/dist/features/llm/index.d.ts +23 -0
  495. package/dist/features/llm/index.js +46 -0
  496. package/dist/features/llm/presets.d.ts +25 -0
  497. package/dist/features/llm/presets.js +159 -0
  498. package/dist/features/llm/wire.d.ts +17 -0
  499. package/dist/features/llm/wire.js +163 -0
  500. package/dist/features/packs/accept.d.ts +7 -0
  501. package/dist/features/packs/accept.js +73 -0
  502. package/dist/features/packs/enforcers/arch-guards.d.ts +12 -0
  503. package/dist/features/packs/enforcers/arch-guards.js +193 -0
  504. package/dist/features/packs/enforcers/binding.d.ts +31 -0
  505. package/dist/features/packs/enforcers/binding.js +157 -0
  506. package/dist/features/packs/enforcers/ci-guards.d.ts +10 -0
  507. package/dist/features/packs/enforcers/ci-guards.js +128 -0
  508. package/dist/features/packs/enforcers/code-health.d.ts +9 -0
  509. package/dist/features/packs/enforcers/code-health.js +180 -0
  510. package/dist/features/packs/enforcers/code.d.ts +5 -0
  511. package/dist/features/packs/enforcers/code.js +128 -0
  512. package/dist/features/packs/enforcers/command-forbid.d.ts +8 -0
  513. package/dist/features/packs/enforcers/command-forbid.js +61 -0
  514. package/dist/features/packs/enforcers/deps-guards.d.ts +15 -0
  515. package/dist/features/packs/enforcers/deps-guards.js +235 -0
  516. package/dist/features/packs/enforcers/deps-policy-guards.d.ts +9 -0
  517. package/dist/features/packs/enforcers/deps-policy-guards.js +135 -0
  518. package/dist/features/packs/enforcers/docs-guards-measures.d.ts +9 -0
  519. package/dist/features/packs/enforcers/docs-guards-measures.js +117 -0
  520. package/dist/features/packs/enforcers/docs-guards.d.ts +11 -0
  521. package/dist/features/packs/enforcers/docs-guards.js +180 -0
  522. package/dist/features/packs/enforcers/external-attribute.d.ts +18 -0
  523. package/dist/features/packs/enforcers/external-attribute.js +122 -0
  524. package/dist/features/packs/enforcers/external-bind.d.ts +4 -0
  525. package/dist/features/packs/enforcers/external-bind.js +172 -0
  526. package/dist/features/packs/enforcers/external-check.d.ts +7 -0
  527. package/dist/features/packs/enforcers/external-check.js +131 -0
  528. package/dist/features/packs/enforcers/external-output.d.ts +30 -0
  529. package/dist/features/packs/enforcers/external-output.js +144 -0
  530. package/dist/features/packs/enforcers/external-probe.d.ts +4 -0
  531. package/dist/features/packs/enforcers/external-probe.js +65 -0
  532. package/dist/features/packs/enforcers/external-runs.d.ts +33 -0
  533. package/dist/features/packs/enforcers/external-runs.js +162 -0
  534. package/dist/features/packs/enforcers/external-sarif.d.ts +3 -0
  535. package/dist/features/packs/enforcers/external-sarif.js +103 -0
  536. package/dist/features/packs/enforcers/external.d.ts +39 -0
  537. package/dist/features/packs/enforcers/external.js +11 -0
  538. package/dist/features/packs/enforcers/gate-guards.d.ts +12 -0
  539. package/dist/features/packs/enforcers/gate-guards.js +170 -0
  540. package/dist/features/packs/enforcers/health-abstraction.d.ts +5 -0
  541. package/dist/features/packs/enforcers/health-abstraction.js +126 -0
  542. package/dist/features/packs/enforcers/health-duplication.d.ts +5 -0
  543. package/dist/features/packs/enforcers/health-duplication.js +197 -0
  544. package/dist/features/packs/enforcers/health-lex-imports.d.ts +5 -0
  545. package/dist/features/packs/enforcers/health-lex-imports.js +225 -0
  546. package/dist/features/packs/enforcers/health-lex-template.d.ts +10 -0
  547. package/dist/features/packs/enforcers/health-lex-template.js +67 -0
  548. package/dist/features/packs/enforcers/health-lex.d.ts +8 -0
  549. package/dist/features/packs/enforcers/health-lex.js +227 -0
  550. package/dist/features/packs/enforcers/health-markers.d.ts +3 -0
  551. package/dist/features/packs/enforcers/health-markers.js +31 -0
  552. package/dist/features/packs/enforcers/health-measures.d.ts +24 -0
  553. package/dist/features/packs/enforcers/health-measures.js +214 -0
  554. package/dist/features/packs/enforcers/health-refs.d.ts +6 -0
  555. package/dist/features/packs/enforcers/health-refs.js +61 -0
  556. package/dist/features/packs/enforcers/integrity-guards-repo.d.ts +6 -0
  557. package/dist/features/packs/enforcers/integrity-guards-repo.js +189 -0
  558. package/dist/features/packs/enforcers/integrity-guards.d.ts +12 -0
  559. package/dist/features/packs/enforcers/integrity-guards.js +202 -0
  560. package/dist/features/packs/enforcers/jsonkey.d.ts +13 -0
  561. package/dist/features/packs/enforcers/jsonkey.js +95 -0
  562. package/dist/features/packs/enforcers/parametric.d.ts +7 -0
  563. package/dist/features/packs/enforcers/parametric.js +138 -0
  564. package/dist/features/packs/enforcers/pattern.d.ts +11 -0
  565. package/dist/features/packs/enforcers/pattern.js +88 -0
  566. package/dist/features/packs/enforcers/placement.d.ts +10 -0
  567. package/dist/features/packs/enforcers/placement.js +54 -0
  568. package/dist/features/packs/enforcers/py-checks.d.ts +7 -0
  569. package/dist/features/packs/enforcers/py-checks.js +131 -0
  570. package/dist/features/packs/enforcers/py-lex.d.ts +10 -0
  571. package/dist/features/packs/enforcers/py-lex.js +271 -0
  572. package/dist/features/packs/enforcers/py-phantom.d.ts +6 -0
  573. package/dist/features/packs/enforcers/py-phantom.js +163 -0
  574. package/dist/features/packs/enforcers/py-pins.d.ts +16 -0
  575. package/dist/features/packs/enforcers/py-pins.js +184 -0
  576. package/dist/features/packs/enforcers/py-security-patterns.d.ts +18 -0
  577. package/dist/features/packs/enforcers/py-security-patterns.js +70 -0
  578. package/dist/features/packs/enforcers/records-guards.d.ts +12 -0
  579. package/dist/features/packs/enforcers/records-guards.js +178 -0
  580. package/dist/features/packs/enforcers/remediation-guards.d.ts +6 -0
  581. package/dist/features/packs/enforcers/remediation-guards.js +42 -0
  582. package/dist/features/packs/enforcers/required.d.ts +10 -0
  583. package/dist/features/packs/enforcers/required.js +65 -0
  584. package/dist/features/packs/enforcers/secret-scan.d.ts +22 -0
  585. package/dist/features/packs/enforcers/secret-scan.js +179 -0
  586. package/dist/features/packs/enforcers/shell-analyse.d.ts +14 -0
  587. package/dist/features/packs/enforcers/shell-analyse.js +105 -0
  588. package/dist/features/packs/enforcers/sizes.d.ts +10 -0
  589. package/dist/features/packs/enforcers/sizes.js +82 -0
  590. package/dist/features/packs/enforcers/steering-guards.d.ts +11 -0
  591. package/dist/features/packs/enforcers/steering-guards.js +162 -0
  592. package/dist/features/packs/enforcers/testing-guards.d.ts +10 -0
  593. package/dist/features/packs/enforcers/testing-guards.js +118 -0
  594. package/dist/features/packs/enforcers/ts-checks.d.ts +7 -0
  595. package/dist/features/packs/enforcers/ts-checks.js +101 -0
  596. package/dist/features/packs/enforcers/ts-phantom-host.d.ts +11 -0
  597. package/dist/features/packs/enforcers/ts-phantom-host.js +155 -0
  598. package/dist/features/packs/enforcers/ts-phantom.d.ts +6 -0
  599. package/dist/features/packs/enforcers/ts-phantom.js +117 -0
  600. package/dist/features/packs/enforcers/ts-security-patterns.d.ts +18 -0
  601. package/dist/features/packs/enforcers/ts-security-patterns.js +93 -0
  602. package/dist/features/packs/enforcers/workflow-guards.d.ts +10 -0
  603. package/dist/features/packs/enforcers/workflow-guards.js +117 -0
  604. package/dist/features/packs/enforcers/write-confine.d.ts +13 -0
  605. package/dist/features/packs/enforcers/write-confine.js +131 -0
  606. package/dist/features/packs/hashes.d.ts +6 -0
  607. package/dist/features/packs/hashes.js +84 -0
  608. package/dist/features/packs/index.d.ts +22 -0
  609. package/dist/features/packs/index.js +15 -0
  610. package/dist/features/packs/loader.d.ts +13 -0
  611. package/dist/features/packs/loader.js +205 -0
  612. package/dist/features/packs/manifest.d.ts +17 -0
  613. package/dist/features/packs/manifest.js +180 -0
  614. package/dist/features/packs/params.d.ts +2 -0
  615. package/dist/features/packs/params.js +90 -0
  616. package/dist/features/packs/registry.d.ts +11 -0
  617. package/dist/features/packs/registry.js +136 -0
  618. package/dist/features/packs/selftest.d.ts +3 -0
  619. package/dist/features/packs/selftest.js +127 -0
  620. package/dist/features/records/bug-grammar.d.ts +17 -0
  621. package/dist/features/records/bug-grammar.js +128 -0
  622. package/dist/features/records/bug-registry.d.ts +9 -0
  623. package/dist/features/records/bug-registry.js +67 -0
  624. package/dist/features/records/bug-rows-immutable.d.ts +3 -0
  625. package/dist/features/records/bug-rows-immutable.js +52 -0
  626. package/dist/features/records/bugs.d.ts +2 -0
  627. package/dist/features/records/bugs.js +24 -0
  628. package/dist/features/records/docs-lines.d.ts +16 -0
  629. package/dist/features/records/docs-lines.js +36 -0
  630. package/dist/features/records/docs-prose.d.ts +14 -0
  631. package/dist/features/records/docs-prose.js +252 -0
  632. package/dist/features/records/docs-structure.d.ts +17 -0
  633. package/dist/features/records/docs-structure.js +223 -0
  634. package/dist/features/records/docs.d.ts +9 -0
  635. package/dist/features/records/docs.js +238 -0
  636. package/dist/features/records/history-checks.d.ts +6 -0
  637. package/dist/features/records/history-checks.js +94 -0
  638. package/dist/features/records/history-parse.d.ts +16 -0
  639. package/dist/features/records/history-parse.js +101 -0
  640. package/dist/features/records/history-scope.d.ts +5 -0
  641. package/dist/features/records/history-scope.js +86 -0
  642. package/dist/features/records/history.d.ts +3 -0
  643. package/dist/features/records/history.js +5 -0
  644. package/dist/features/records/index.d.ts +8 -0
  645. package/dist/features/records/index.js +11 -0
  646. package/dist/features/remediation/adoption.d.ts +32 -0
  647. package/dist/features/remediation/adoption.js +131 -0
  648. package/dist/features/remediation/index.d.ts +12 -0
  649. package/dist/features/remediation/index.js +21 -0
  650. package/dist/features/remediation/plan-chains.d.ts +3 -0
  651. package/dist/features/remediation/plan-chains.js +111 -0
  652. package/dist/features/remediation/plan-generate.d.ts +3 -0
  653. package/dist/features/remediation/plan-generate.js +129 -0
  654. package/dist/features/remediation/plan-kinds.d.ts +32 -0
  655. package/dist/features/remediation/plan-kinds.js +42 -0
  656. package/dist/features/remediation/plan-markers.d.ts +2 -0
  657. package/dist/features/remediation/plan-markers.js +155 -0
  658. package/dist/features/remediation/plan-merge.d.ts +6 -0
  659. package/dist/features/remediation/plan-merge.js +33 -0
  660. package/dist/features/remediation/plan.d.ts +4 -0
  661. package/dist/features/remediation/plan.js +7 -0
  662. package/dist/features/remediation/step-floor.d.ts +5 -0
  663. package/dist/features/remediation/step-floor.js +76 -0
  664. package/dist/features/remediation/step-gates.d.ts +18 -0
  665. package/dist/features/remediation/step-gates.js +77 -0
  666. package/dist/features/remediation/step-split.d.ts +12 -0
  667. package/dist/features/remediation/step-split.js +75 -0
  668. package/dist/features/remediation/steps.d.ts +3 -0
  669. package/dist/features/remediation/steps.js +6 -0
  670. package/dist/features/remediation/types.d.ts +37 -0
  671. package/dist/features/remediation/types.js +1 -0
  672. package/dist/features/security/index.d.ts +12 -0
  673. package/dist/features/security/index.js +142 -0
  674. package/dist/features/steering/agent-assets.d.ts +7 -0
  675. package/dist/features/steering/agent-assets.js +75 -0
  676. package/dist/features/steering/budgets.d.ts +20 -0
  677. package/dist/features/steering/budgets.js +86 -0
  678. package/dist/features/steering/checks.d.ts +7 -0
  679. package/dist/features/steering/checks.js +67 -0
  680. package/dist/features/steering/context-file.d.ts +11 -0
  681. package/dist/features/steering/context-file.js +107 -0
  682. package/dist/features/steering/graph-scan.d.ts +7 -0
  683. package/dist/features/steering/graph-scan.js +17 -0
  684. package/dist/features/steering/index.d.ts +30 -0
  685. package/dist/features/steering/index.js +45 -0
  686. package/dist/features/steering/injection.d.ts +23 -0
  687. package/dist/features/steering/injection.js +124 -0
  688. package/dist/features/steering/mcp.d.ts +2 -0
  689. package/dist/features/steering/mcp.js +18 -0
  690. package/dist/features/steering/precedence.d.ts +10 -0
  691. package/dist/features/steering/precedence.js +28 -0
  692. package/dist/features/steering/read-cache.d.ts +13 -0
  693. package/dist/features/steering/read-cache.js +51 -0
  694. package/dist/features/testing/base.d.ts +1 -0
  695. package/dist/features/testing/base.js +8 -0
  696. package/dist/features/testing/covers.d.ts +8 -0
  697. package/dist/features/testing/covers.js +50 -0
  698. package/dist/features/testing/evaluate.d.ts +19 -0
  699. package/dist/features/testing/evaluate.js +47 -0
  700. package/dist/features/testing/index.d.ts +10 -0
  701. package/dist/features/testing/index.js +13 -0
  702. package/dist/features/testing/integrity.d.ts +28 -0
  703. package/dist/features/testing/integrity.js +140 -0
  704. package/dist/features/testing/ledger.d.ts +11 -0
  705. package/dist/features/testing/ledger.js +51 -0
  706. package/dist/features/testing/proofs.d.ts +26 -0
  707. package/dist/features/testing/proofs.js +88 -0
  708. package/dist/features/testing/report.d.ts +6 -0
  709. package/dist/features/testing/report.js +16 -0
  710. package/dist/features/testing/scenarios.d.ts +34 -0
  711. package/dist/features/testing/scenarios.js +90 -0
  712. package/dist/features/testing/tap-parser.d.ts +9 -0
  713. package/dist/features/testing/tap-parser.js +84 -0
  714. package/dist/features/testing/trace.d.ts +23 -0
  715. package/dist/features/testing/trace.js +110 -0
  716. package/dist/features/workflow/index.d.ts +14 -0
  717. package/dist/features/workflow/index.js +19 -0
  718. package/dist/features/workflow/loop.d.ts +5 -0
  719. package/dist/features/workflow/loop.js +36 -0
  720. package/dist/features/workflow/phases.d.ts +10 -0
  721. package/dist/features/workflow/phases.js +181 -0
  722. package/dist/features/workflow/review.d.ts +25 -0
  723. package/dist/features/workflow/review.js +112 -0
  724. package/dist/features/workflow/tasks.d.ts +73 -0
  725. package/dist/features/workflow/tasks.js +80 -0
  726. package/dist/features/workflow/writes.d.ts +8 -0
  727. package/dist/features/workflow/writes.js +96 -0
  728. package/dist/kernel/clock.d.ts +4 -0
  729. package/dist/kernel/clock.js +5 -0
  730. package/dist/kernel/config-keys.d.ts +2 -0
  731. package/dist/kernel/config-keys.js +5 -0
  732. package/dist/kernel/config-toml-keys.d.ts +2 -0
  733. package/dist/kernel/config-toml-keys.js +237 -0
  734. package/dist/kernel/config-yaml-keys.d.ts +2 -0
  735. package/dist/kernel/config-yaml-keys.js +177 -0
  736. package/dist/kernel/contracts.d.ts +76 -0
  737. package/dist/kernel/contracts.js +9 -0
  738. package/dist/kernel/entry.d.ts +1 -0
  739. package/dist/kernel/entry.js +31 -0
  740. package/dist/kernel/env.d.ts +4 -0
  741. package/dist/kernel/env.js +5 -0
  742. package/dist/kernel/errors.d.ts +7 -0
  743. package/dist/kernel/errors.js +6 -0
  744. package/dist/kernel/fs-confine.d.ts +14 -0
  745. package/dist/kernel/fs-confine.js +129 -0
  746. package/dist/kernel/fs-errors.d.ts +8 -0
  747. package/dist/kernel/fs-errors.js +37 -0
  748. package/dist/kernel/fs.d.ts +28 -0
  749. package/dist/kernel/fs.js +245 -0
  750. package/dist/kernel/git.d.ts +16 -0
  751. package/dist/kernel/git.js +125 -0
  752. package/dist/kernel/glob.d.ts +1 -0
  753. package/dist/kernel/glob.js +178 -0
  754. package/dist/kernel/hash.d.ts +3 -0
  755. package/dist/kernel/hash.js +12 -0
  756. package/dist/kernel/host.d.ts +3 -0
  757. package/dist/kernel/host.js +48 -0
  758. package/dist/kernel/index.d.ts +115 -0
  759. package/dist/kernel/index.js +33 -0
  760. package/dist/kernel/json.d.ts +4 -0
  761. package/dist/kernel/json.js +68 -0
  762. package/dist/kernel/net-allow.d.ts +8 -0
  763. package/dist/kernel/net-allow.js +45 -0
  764. package/dist/kernel/net-fetch.d.ts +5 -0
  765. package/dist/kernel/net-fetch.js +135 -0
  766. package/dist/kernel/net.d.ts +10 -0
  767. package/dist/kernel/net.js +24 -0
  768. package/dist/kernel/path.d.ts +3 -0
  769. package/dist/kernel/path.js +40 -0
  770. package/dist/kernel/pattern.d.ts +2 -0
  771. package/dist/kernel/pattern.js +116 -0
  772. package/dist/kernel/proc.d.ts +6 -0
  773. package/dist/kernel/proc.js +207 -0
  774. package/dist/kernel/read-cache.d.ts +6 -0
  775. package/dist/kernel/read-cache.js +27 -0
  776. package/dist/kernel/redact.d.ts +1 -0
  777. package/dist/kernel/redact.js +206 -0
  778. package/dist/kernel/repo-root.d.ts +3 -0
  779. package/dist/kernel/repo-root.js +29 -0
  780. package/dist/kernel/result.d.ts +10 -0
  781. package/dist/kernel/result.js +6 -0
  782. package/dist/kernel/schema-helpers.d.ts +11 -0
  783. package/dist/kernel/schema-helpers.js +101 -0
  784. package/dist/kernel/schema.d.ts +2 -0
  785. package/dist/kernel/schema.js +203 -0
  786. package/dist/kernel/secret-paths.d.ts +3 -0
  787. package/dist/kernel/secret-paths.js +56 -0
  788. package/dist/kernel/shell-bypass.d.ts +4 -0
  789. package/dist/kernel/shell-bypass.js +151 -0
  790. package/dist/kernel/shell-cmd.d.ts +6 -0
  791. package/dist/kernel/shell-cmd.js +196 -0
  792. package/dist/kernel/shell-deny-cmd.d.ts +7 -0
  793. package/dist/kernel/shell-deny-cmd.js +35 -0
  794. package/dist/kernel/shell-deny-destroy.d.ts +7 -0
  795. package/dist/kernel/shell-deny-destroy.js +71 -0
  796. package/dist/kernel/shell-deny-escalate.d.ts +7 -0
  797. package/dist/kernel/shell-deny-escalate.js +96 -0
  798. package/dist/kernel/shell-deny-target.d.ts +4 -0
  799. package/dist/kernel/shell-deny-target.js +51 -0
  800. package/dist/kernel/shell-deny.d.ts +8 -0
  801. package/dist/kernel/shell-deny.js +171 -0
  802. package/dist/kernel/shell-scan.d.ts +3 -0
  803. package/dist/kernel/shell-scan.js +226 -0
  804. package/dist/kernel/shell-word.d.ts +15 -0
  805. package/dist/kernel/shell-word.js +216 -0
  806. package/dist/kernel/shell.d.ts +22 -0
  807. package/dist/kernel/shell.js +2 -0
  808. package/dist/kernel/stdin.d.ts +2 -0
  809. package/dist/kernel/stdin.js +59 -0
  810. package/dist/kernel/test-report.d.ts +7 -0
  811. package/dist/kernel/test-report.js +112 -0
  812. package/dist/kernel/version.d.ts +2 -0
  813. package/dist/kernel/version.js +46 -0
  814. package/dist/tsconfig.build.tsbuildinfo +1 -0
  815. package/package.json +19 -11
  816. package/schema/accepted.schema.json +20 -0
  817. package/schema/baseline.schema.json +17 -0
  818. package/schema/capability.schema.json +31 -0
  819. package/schema/cli/error.schema.json +15 -0
  820. package/schema/cli/explain.schema.json +19 -0
  821. package/schema/cli/report.schema.json +15 -0
  822. package/schema/cli/status.schema.json +51 -0
  823. package/schema/cli/verify.schema.json +15 -0
  824. package/schema/config.schema.json +43 -0
  825. package/schema/event-log.schema.json +52 -0
  826. package/schema/hook-decision.schema.json +13 -0
  827. package/schema/hook-event.schema.json +50 -0
  828. package/schema/manifest.schema.json +26 -0
  829. package/schema/pack-draft.schema.json +42 -0
  830. package/schema/pack.schema.json +70 -0
  831. package/schema/registry-snapshot.schema.json +41 -0
  832. package/schema/remediation-plan.schema.json +44 -0
  833. package/schema/review-findings.schema.json +25 -0
  834. package/schema/task-record.schema.json +49 -0
  835. package/schema/waivers.schema.json +29 -0
@@ -0,0 +1,28 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ export interface IntegrityException {
3
+ readonly id: string;
4
+ readonly rule: string;
5
+ readonly path: string;
6
+ readonly reason: string;
7
+ }
8
+ export interface IntegrityContext {
9
+ readonly exceptions: ReadonlyArray<IntegrityException>;
10
+ readonly acknowledged: ReadonlyArray<string>;
11
+ }
12
+ export interface FilePair {
13
+ readonly path: string;
14
+ readonly baseText: string;
15
+ readonly headText: string;
16
+ }
17
+ export declare function countAssertions(text: string): number;
18
+ export declare function checkAssertionLoss(pair: FilePair, ctx: IntegrityContext): Array<Finding>;
19
+ export declare function checkNoSkippedTests(pair: FilePair, ctx: IntegrityContext): Array<Finding>;
20
+ export declare function checkNoNewSuppressions(pair: FilePair, ctx: IntegrityContext): Array<Finding>;
21
+ export declare function checkNoFixtureShrink(pair: FilePair, stillReferenced: boolean, ctx: IntegrityContext): Array<Finding>;
22
+ export interface Thresholds {
23
+ readonly lines: number;
24
+ readonly branches: number;
25
+ }
26
+ export declare function checkNoThresholdLowering(path: string, base: Thresholds, head: Thresholds): Array<Finding>;
27
+ export declare function checkTestCommandIntact(baseCmd: ReadonlyArray<string>, headCmd: ReadonlyArray<string>): Array<Finding>;
28
+ export declare function checkTestIntegrity(pair: FilePair, ctx: IntegrityContext): Array<Finding>;
@@ -0,0 +1,140 @@
1
+ // SPEC §6.1 TypeScript assertion, skip and suppression shapes. The language
2
+ // pack owns the full patterns; these defaults judge the self-hosted suite.
3
+ const TS_ASSERTION = /\b(?:assert\s*\(|assert\.[A-Za-z]+|expect\s*\(|expect\.[A-Za-z]+)/g;
4
+ const TS_SKIP_LINE = /^\s*(?:test|it|describe)\s*\.\s*(?:skip|only|todo)\s*\(|^\s*(?:xit|xdescribe|xtest|fit|fdescribe)\s*\(/;
5
+ const SUPPRESSIONS = [
6
+ "eslint-disable",
7
+ "biome-ignore",
8
+ "@ts-ignore",
9
+ "@ts-expect-error",
10
+ "istanbul ignore",
11
+ "c8 ignore",
12
+ "#pragma warning disable",
13
+ "SuppressMessage",
14
+ "noqa",
15
+ "type: ignore",
16
+ "pragma: no cover",
17
+ ];
18
+ export function countAssertions(text) {
19
+ return text.match(TS_ASSERTION)?.length ?? 0;
20
+ }
21
+ function addedLines(baseText, headText) {
22
+ const remaining = new Map();
23
+ for (const line of baseText.split("\n")) {
24
+ remaining.set(line, (remaining.get(line) ?? 0) + 1);
25
+ }
26
+ const added = [];
27
+ for (const line of headText.split("\n")) {
28
+ const left = remaining.get(line) ?? 0;
29
+ if (left > 0) {
30
+ remaining.set(line, left - 1);
31
+ }
32
+ else {
33
+ added.push(line);
34
+ }
35
+ }
36
+ return added;
37
+ }
38
+ function exceptionLifts(rule, path, ctx) {
39
+ return ctx.exceptions.some((exception) => exception.rule === rule &&
40
+ exception.path === path &&
41
+ exception.reason.trim().length >= 20 &&
42
+ ctx.acknowledged.includes(exception.id));
43
+ }
44
+ function integrityFinding(rule, path, message, remediation) {
45
+ return { ruleId: rule, path, message, remediation };
46
+ }
47
+ function maybeFinding(rule, path, message, remediation, ctx) {
48
+ if (exceptionLifts(rule, path, ctx)) {
49
+ return [];
50
+ }
51
+ return [integrityFinding(rule, path, message, remediation)];
52
+ }
53
+ // SPEC §4.10.4 core/no-assertion-loss: the pack assertion-token count in a
54
+ // test file falls. Deleting the file with its feature is the same loss, so
55
+ // it reports here and needs the same exception.
56
+ export function checkAssertionLoss(pair, ctx) {
57
+ const lost = countAssertions(pair.baseText) - countAssertions(pair.headText);
58
+ if (lost <= 0) {
59
+ return [];
60
+ }
61
+ return maybeFinding("core/no-assertion-loss", pair.path, `assertion count falls by ${lost} in ${pair.path}`, `Restore the ${lost} lost assertion(s) in ${pair.path}, or record an integrity exception the final review acknowledges.`, ctx);
62
+ }
63
+ // SPEC §4.10.4 core/no-skipped-tests: added skip, only, todo, focus markers.
64
+ // Ratcheted instances predate the check; only added markers report.
65
+ export function checkNoSkippedTests(pair, ctx) {
66
+ const added = addedLines(pair.baseText, pair.headText).filter((line) => TS_SKIP_LINE.test(line));
67
+ if (added.length === 0) {
68
+ return [];
69
+ }
70
+ return maybeFinding("core/no-skipped-tests", pair.path, `skip or focus marker added in ${pair.path}: ${added[0]?.trim() ?? ""}`, `Remove the marker in ${pair.path}, or record an integrity exception the final review acknowledges.`, ctx);
71
+ }
72
+ // SPEC §4.10.4 core/no-new-suppressions: added lint, type, coverage or
73
+ // analyzer suppressions, and grown ignore files, need an exception.
74
+ export function checkNoNewSuppressions(pair, ctx) {
75
+ const added = addedLines(pair.baseText, pair.headText).filter((line) => SUPPRESSIONS.some((marker) => line.includes(marker)));
76
+ if (added.length === 0) {
77
+ return [];
78
+ }
79
+ return maybeFinding("core/no-new-suppressions", pair.path, `suppression added in ${pair.path}: ${added[0]?.trim().slice(0, 80) ?? ""}`, `Remove the suppression in ${pair.path}, or record an integrity exception the final review acknowledges.`, ctx);
80
+ }
81
+ // SPEC §4.10.4 core/no-fixture-shrink: a fixture or snapshot file loses more
82
+ // lines than it gains, or is deleted while a test still references it.
83
+ export function checkNoFixtureShrink(pair, stillReferenced, ctx) {
84
+ const baseLines = pair.baseText.split("\n").length;
85
+ const headLines = pair.headText.split("\n").length;
86
+ const deleted = pair.headText === "";
87
+ const shrinks = deleted ? stillReferenced : headLines < baseLines;
88
+ if (!shrinks) {
89
+ return [];
90
+ }
91
+ return maybeFinding("core/no-fixture-shrink", pair.path, deleted
92
+ ? `fixture deleted while still referenced: ${pair.path}`
93
+ : `fixture shrinks from ${baseLines} to ${headLines} lines: ${pair.path}`, `Restore ${pair.path}, or record an integrity exception the final review acknowledges.`, ctx);
94
+ }
95
+ // SPEC §4.10.4 core/no-threshold-lowering: a coverage threshold in a
96
+ // pack-known config key falls. Tightening is free.
97
+ export function checkNoThresholdLowering(path, base, head) {
98
+ const findings = [];
99
+ if (head.lines < base.lines) {
100
+ findings.push(integrityFinding("core/no-threshold-lowering", path, `line coverage threshold falls ${base.lines} to ${head.lines} in ${path}`, `Restore the line coverage threshold in ${path}; tightening only.`));
101
+ }
102
+ if (head.branches < base.branches) {
103
+ findings.push(integrityFinding("core/no-threshold-lowering", path, `branch coverage threshold falls ${base.branches} to ${head.branches} in ${path}`, `Restore the branch coverage threshold in ${path}; tightening only.`));
104
+ }
105
+ return findings;
106
+ }
107
+ const COMMAND_WEAKENERS = [
108
+ "|| true",
109
+ "; exit 0",
110
+ "--passWithNoTests",
111
+ "continue-on-error",
112
+ ];
113
+ // SPEC §4.10.4 core/test-command-intact: the test command never weakens.
114
+ export function checkTestCommandIntact(baseCmd, headCmd) {
115
+ const base = baseCmd.join(" ");
116
+ const head = headCmd.join(" ");
117
+ for (const weakener of COMMAND_WEAKENERS) {
118
+ if (!base.includes(weakener) && head.includes(weakener)) {
119
+ return [
120
+ integrityFinding("core/test-command-intact", "(test command)", `test command weakens with "${weakener}"`, `Remove "${weakener}" from the test command; a passing run must mean passing tests.`),
121
+ ];
122
+ }
123
+ }
124
+ const baseGlobs = baseCmd.filter((token) => token.includes("tests/"));
125
+ const dropped = baseGlobs.filter((glob) => !head.includes(glob));
126
+ if (dropped.length > 0) {
127
+ return [
128
+ integrityFinding("core/test-command-intact", "(test command)", `test command drops its globs: ${dropped.join(", ")}`, `Restore the dropped test globs; the test command keeps its scope.`),
129
+ ];
130
+ }
131
+ return [];
132
+ }
133
+ // The per-file evaluation entry: loss, skips and suppressions together.
134
+ export function checkTestIntegrity(pair, ctx) {
135
+ return [
136
+ ...checkAssertionLoss(pair, ctx),
137
+ ...checkNoSkippedTests(pair, ctx),
138
+ ...checkNoNewSuppressions(pair, ctx),
139
+ ];
140
+ }
@@ -0,0 +1,11 @@
1
+ export interface LedgerFile {
2
+ readonly version: 1;
3
+ readonly red: readonly string[];
4
+ }
5
+ export declare function formatTestId(file: string, title: string): string;
6
+ export interface SplitTestId {
7
+ readonly file: string;
8
+ readonly title: string;
9
+ }
10
+ export declare function splitTestId(testId: string): SplitTestId | undefined;
11
+ export declare function parseLedgerFile(value: unknown): LedgerFile;
@@ -0,0 +1,51 @@
1
+ export function formatTestId(file, title) {
2
+ return `${file}::${title}`;
3
+ }
4
+ export function splitTestId(testId) {
5
+ const separator = testId.indexOf("::");
6
+ if (separator < 1 || separator + 2 >= testId.length) {
7
+ return undefined;
8
+ }
9
+ return {
10
+ file: testId.slice(0, separator),
11
+ title: testId.slice(separator + 2),
12
+ };
13
+ }
14
+ function isLedgerShape(value) {
15
+ return typeof value === "object" && value !== null;
16
+ }
17
+ function isStringArray(value) {
18
+ return (Array.isArray(value) && value.every((entry) => typeof entry === "string"));
19
+ }
20
+ function checkSortedUnique(red) {
21
+ for (let index = 1; index < red.length; index += 1) {
22
+ const previous = red[index - 1];
23
+ const current = red[index];
24
+ if (previous === undefined ||
25
+ current === undefined ||
26
+ !(previous < current)) {
27
+ throw new Error(`red ledger entries must be sorted with no duplicates; fix entry ${index}`);
28
+ }
29
+ }
30
+ }
31
+ // The kernel will own Result<T> (§4.1); until it lands, invalid ledger content
32
+ // is a fail-closed throw caught by the driver, never a silent default-allow.
33
+ export function parseLedgerFile(value) {
34
+ if (!isLedgerShape(value)) {
35
+ throw new Error("red ledger must be a JSON object with version 1 and a red list");
36
+ }
37
+ if (value.version !== 1) {
38
+ throw new Error("red ledger version must be 1");
39
+ }
40
+ const red = value.red;
41
+ if (!isStringArray(red)) {
42
+ throw new Error("red ledger red must be a list of test id strings");
43
+ }
44
+ for (const entry of red) {
45
+ if (splitTestId(entry) === undefined) {
46
+ throw new Error("red ledger entry must look like <test file path>::<full test title>");
47
+ }
48
+ }
49
+ checkSortedUnique(red);
50
+ return { version: 1, red };
51
+ }
@@ -0,0 +1,26 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ export interface DeclaredTest {
3
+ readonly path: string;
4
+ readonly title: string;
5
+ }
6
+ export type ProofRule = "core/red-before-green" | "core/regression-test-for-fix";
7
+ export interface RedProofInput {
8
+ readonly declared: ReadonlyArray<DeclaredTest>;
9
+ readonly reportXml: string;
10
+ readonly implementationStarted: boolean;
11
+ readonly rule?: ProofRule;
12
+ }
13
+ export interface GreenProofInput {
14
+ readonly declared: ReadonlyArray<DeclaredTest>;
15
+ readonly reportXml: string;
16
+ readonly rule?: ProofRule;
17
+ }
18
+ export interface ReRunInput {
19
+ readonly declared: ReadonlyArray<DeclaredTest>;
20
+ readonly rerunReportXml: string;
21
+ readonly rule?: ProofRule;
22
+ }
23
+ export declare function checkRedProof(input: RedProofInput): Array<Finding>;
24
+ export declare function checkGreenProof(input: GreenProofInput): Array<Finding>;
25
+ export declare function checkRedProofReRun(input: ReRunInput): Array<Finding>;
26
+ export declare function checkRunnerAvailable(runnerPresent: boolean, runner: string): Array<Finding>;
@@ -0,0 +1,88 @@
1
+ // SPEC §4.10.2: red and green proofs from JUnit reports. The runner
2
+ // produces the report and the Git port performs the worktree re-run; these
3
+ // checks judge the recorded inputs, so a forged record fails against the
4
+ // re-run report. Report parsing reuses the kernel JUnit reader.
5
+ import { readTestReport } from "../../kernel/index.js";
6
+ function ruleOf(rule) {
7
+ return rule ?? "core/red-before-green";
8
+ }
9
+ function proofFinding(rule, code, path, message, remediation) {
10
+ return { ruleId: rule, path, code, message, remediation };
11
+ }
12
+ function reportCases(reportXml) {
13
+ const parsed = readTestReport(reportXml);
14
+ if (!parsed.ok) {
15
+ return undefined;
16
+ }
17
+ const byTitle = new Map();
18
+ for (const testCase of parsed.value) {
19
+ if (!byTitle.has(testCase.title)) {
20
+ byTitle.set(testCase.title, testCase.outcome);
21
+ }
22
+ }
23
+ return byTitle;
24
+ }
25
+ // SPEC §4.10.2: non-test files untouched (implementationStarted false) and
26
+ // every declared test executed and failed; an absent test never counts, so
27
+ // an uncompilable test file is CDX-E602, not a proof.
28
+ export function checkRedProof(input) {
29
+ const rule = ruleOf(input.rule);
30
+ if (input.implementationStarted) {
31
+ return [
32
+ proofFinding(rule, "CDX-E601", input.declared[0]?.path ?? "(task)", "red proof attempted after implementation began", "Restore the base non-test files, then re-run the declared tests to record the red proof."),
33
+ ];
34
+ }
35
+ const cases = reportCases(input.reportXml);
36
+ const findings = [];
37
+ for (const test of input.declared) {
38
+ const outcome = cases?.get(test.title);
39
+ if (outcome !== "failed") {
40
+ findings.push(proofFinding(rule, "CDX-E602", test.path, outcome === undefined
41
+ ? `declared test absent from the report, not a red proof: ${test.title}`
42
+ : `declared test did not fail its red proof: ${test.title}`, `Run the declared tests first and record the failing run; a test absent from the report (load or compile failure) never counts.`));
43
+ }
44
+ }
45
+ return findings;
46
+ }
47
+ // SPEC §4.10.2: the green proof runs the same tests and requires all to pass.
48
+ export function checkGreenProof(input) {
49
+ const rule = ruleOf(input.rule);
50
+ const cases = reportCases(input.reportXml);
51
+ const findings = [];
52
+ for (const test of input.declared) {
53
+ const outcome = cases?.get(test.title);
54
+ if (outcome !== "passed") {
55
+ findings.push(proofFinding(rule, "CDX-E602", test.path, `declared test not passing its green proof: ${test.title}`, `Fix ${test.path} until every declared test passes, then record the green proof.`));
56
+ }
57
+ }
58
+ return findings;
59
+ }
60
+ // SPEC §4.10.2 L4: CI checks out redProof.commit in a temporary worktree and
61
+ // re-runs the declared tests; any passing (or absent) test fails the gate,
62
+ // so a forged record cannot stand.
63
+ export function checkRedProofReRun(input) {
64
+ const rule = ruleOf(input.rule);
65
+ const cases = reportCases(input.rerunReportXml);
66
+ const findings = [];
67
+ for (const test of input.declared) {
68
+ const outcome = cases?.get(test.title);
69
+ if (outcome !== "failed") {
70
+ findings.push(proofFinding(rule, "CDX-E602", test.path, `red-proof re-run does not fail: ${test.title}`, `The red-proof record claims failure at its commit, but the worktree re-run shows otherwise; record an honest red proof.`));
71
+ }
72
+ }
73
+ return findings;
74
+ }
75
+ // SPEC §4.10.5 EC-14: a missing runner blocks with CDX-E903.
76
+ export function checkRunnerAvailable(runnerPresent, runner) {
77
+ if (runnerPresent) {
78
+ return [];
79
+ }
80
+ return [
81
+ {
82
+ ruleId: "core/red-before-green",
83
+ code: "CDX-E903",
84
+ message: `test runner missing from the machine: ${runner}`,
85
+ remediation: `Install ${runner} before recording proofs; without it no red proof can run.`,
86
+ },
87
+ ];
88
+ }
@@ -0,0 +1,6 @@
1
+ import type { RunVerdict } from "./evaluate.ts";
2
+ export interface PackageRunReport {
3
+ readonly packageName: string;
4
+ readonly verdict: RunVerdict;
5
+ }
6
+ export declare function formatRunReport(reports: readonly PackageRunReport[]): string;
@@ -0,0 +1,16 @@
1
+ export function formatRunReport(reports) {
2
+ const lines = [];
3
+ for (const report of reports) {
4
+ const verdict = report.verdict;
5
+ const status = verdict.ok ? "ok" : "FAIL";
6
+ lines.push(`${status} ${report.packageName}: ${verdict.passed} passed, ${verdict.failed} failed, ${verdict.expectedRed.length} expected-red`);
7
+ for (const testId of verdict.expectedRed) {
8
+ lines.push(` red ${testId}`);
9
+ }
10
+ for (const violation of verdict.violations) {
11
+ const detail = violation.detail === undefined ? "" : ` ${violation.detail}`;
12
+ lines.push(` FAIL ${violation.mode} ${violation.testId}${detail}`);
13
+ }
14
+ }
15
+ return lines.join("\n");
16
+ }
@@ -0,0 +1,34 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ export type TestKind = "acceptance" | "unit" | "integration" | "architecture" | "stress" | "load" | "regression";
3
+ export interface ScenarioChange {
4
+ readonly path: string;
5
+ readonly trivialOnly: boolean;
6
+ readonly isTest: boolean;
7
+ readonly isDoc: boolean;
8
+ readonly isEntryPoint: boolean;
9
+ readonly addsCrossModuleImport: boolean;
10
+ readonly importsIoPackage: boolean;
11
+ readonly isNewModule: boolean;
12
+ readonly isDeletedModule: boolean;
13
+ readonly isRenamedModule: boolean;
14
+ }
15
+ export interface ScenarioOptions {
16
+ readonly hotPaths: ReadonlyArray<string>;
17
+ readonly taskType: string;
18
+ readonly archConfigChanged: boolean;
19
+ }
20
+ export interface ChangedTest {
21
+ readonly path: string;
22
+ readonly imports: ReadonlyArray<string>;
23
+ }
24
+ export interface TestKindsInput {
25
+ readonly required: ReadonlyArray<TestKind>;
26
+ readonly changedTests: ReadonlyArray<ChangedTest>;
27
+ readonly changedModules: ReadonlyArray<string>;
28
+ readonly importMap: Readonly<Record<string, ReadonlyArray<string>>>;
29
+ readonly mappedModules: ReadonlyArray<string>;
30
+ readonly kindGlobs: Readonly<Record<string, ReadonlyArray<string>>>;
31
+ readonly budgets: Readonly<Record<string, boolean>>;
32
+ }
33
+ export declare function requiredTestKinds(changes: ReadonlyArray<ScenarioChange>, options: ScenarioOptions): Array<TestKind>;
34
+ export declare function checkTestKinds(input: TestKindsInput): Array<Finding>;
@@ -0,0 +1,90 @@
1
+ // SPEC §4.10.3: the scenario classifier. Inputs are caller-supplied facts
2
+ // (changed paths, import edges, pack patterns); the import graph of §4.11
3
+ // arrives as data, so this module never imports it.
4
+ import { globMatch } from "../../kernel/index.js";
5
+ // SPEC §4.10.3: the detected facts map to required kinds.
6
+ export function requiredTestKinds(changes, options) {
7
+ const required = new Set();
8
+ for (const change of changes) {
9
+ if (change.isTest || change.isDoc || change.trivialOnly) {
10
+ continue;
11
+ }
12
+ required.add("acceptance");
13
+ required.add("unit");
14
+ if (change.isEntryPoint ||
15
+ change.addsCrossModuleImport ||
16
+ change.importsIoPackage) {
17
+ required.add("integration");
18
+ }
19
+ if (change.isNewModule ||
20
+ change.isDeletedModule ||
21
+ change.isRenamedModule ||
22
+ change.addsCrossModuleImport ||
23
+ options.archConfigChanged) {
24
+ required.add("architecture");
25
+ }
26
+ if (options.hotPaths.some((glob) => globMatch(glob, change.path))) {
27
+ required.add("stress");
28
+ required.add("load");
29
+ }
30
+ }
31
+ if (options.taskType === "fix") {
32
+ required.add("regression");
33
+ }
34
+ return [...required].sort();
35
+ }
36
+ function reachableModules(test, importMap) {
37
+ const reached = new Set(test.imports);
38
+ for (const direct of test.imports) {
39
+ for (const second of importMap[direct] ?? []) {
40
+ reached.add(second);
41
+ }
42
+ }
43
+ return reached;
44
+ }
45
+ // A kind is satisfied by a changed test file under its kind globs that
46
+ // imports (transitively, depth 2) a changed module. Architecture is
47
+ // satisfied when config.architecture maps every changed module, because
48
+ // the arch guard (§4.11) is the architecture test. Stress and load tests
49
+ // each declare a codictator:budget line.
50
+ export function checkTestKinds(input) {
51
+ const findings = [];
52
+ const changed = new Set(input.changedModules);
53
+ for (const kind of input.required) {
54
+ if (kind === "architecture") {
55
+ const unmapped = [...changed].filter((module) => !input.mappedModules.includes(module));
56
+ if (unmapped.length === 0) {
57
+ continue;
58
+ }
59
+ findings.push(kindFinding(`architecture test missing: ${unmapped.join(", ")} map to no architecture module`, `Map ${unmapped.join(", ")} in config.architecture so the arch guard covers them.`));
60
+ continue;
61
+ }
62
+ const globs = input.kindGlobs[kind] ?? [];
63
+ const covering = input.changedTests.filter((test) => {
64
+ if (!globs.some((glob) => globMatch(glob, test.path))) {
65
+ return false;
66
+ }
67
+ const reached = reachableModules(test, input.importMap);
68
+ return [...changed].some((module) => reached.has(module));
69
+ });
70
+ if (covering.length === 0) {
71
+ findings.push(kindFinding(`${kind} test missing for changed ${[...changed].join(", ") || "files"}`, `Add a ${kind} test under ${globs.join(", ") || "its kind globs"} importing a changed module.`));
72
+ continue;
73
+ }
74
+ if (kind === "stress" || kind === "load") {
75
+ for (const test of covering) {
76
+ if (input.budgets[test.path] !== true) {
77
+ findings.push(kindFinding(`${kind} test without a budget line: ${test.path}`, `Declare a codictator:budget line (p95, p99, rps or maxMs) in ${test.path}.`));
78
+ }
79
+ }
80
+ }
81
+ }
82
+ return findings;
83
+ }
84
+ function kindFinding(message, remediation) {
85
+ return {
86
+ ruleId: "core/test-kinds-by-scenario",
87
+ message,
88
+ remediation,
89
+ };
90
+ }
@@ -0,0 +1,9 @@
1
+ export interface TapOutcome {
2
+ readonly title: string;
3
+ readonly passed: boolean;
4
+ }
5
+ export interface TapFileResult {
6
+ readonly outcomes: readonly TapOutcome[];
7
+ readonly loadFailed: boolean;
8
+ }
9
+ export declare function parseTap(tap: string, filePath: string): TapFileResult;
@@ -0,0 +1,84 @@
1
+ function unescapeTapName(name) {
2
+ return name.replace(/\\\\/g, "\\");
3
+ }
4
+ function countIndent(line) {
5
+ let indent = 0;
6
+ while (line.charCodeAt(indent) === 32) {
7
+ indent += 1;
8
+ }
9
+ return indent;
10
+ }
11
+ function openChild(parent) {
12
+ const top = parent[parent.length - 1];
13
+ if (top !== undefined) {
14
+ top.hasChildren = true;
15
+ }
16
+ }
17
+ function closeSubtests(stack, indent) {
18
+ while (stack.length > 0) {
19
+ const top = stack[stack.length - 1];
20
+ if (top === undefined || top.indent <= indent) {
21
+ return;
22
+ }
23
+ stack.pop();
24
+ }
25
+ }
26
+ function recordResult(stack, indent, name, passed, outcomes) {
27
+ closeSubtests(stack, indent);
28
+ const top = stack[stack.length - 1];
29
+ if (top !== undefined && top.indent === indent && top.name === name) {
30
+ stack.pop();
31
+ if (!top.hasChildren) {
32
+ outcomes.push({
33
+ title: stack
34
+ .map((entry) => entry.name)
35
+ .concat(name)
36
+ .join(" > "),
37
+ passed,
38
+ });
39
+ }
40
+ return top.hasChildren;
41
+ }
42
+ outcomes.push({
43
+ title: stack
44
+ .map((entry) => entry.name)
45
+ .concat(name)
46
+ .join(" > "),
47
+ passed,
48
+ });
49
+ return false;
50
+ }
51
+ export function parseTap(tap, filePath) {
52
+ const stack = [];
53
+ const outcomes = [];
54
+ for (const rawLine of tap.split("\n")) {
55
+ const line = rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine;
56
+ const trimmed = line.trimStart();
57
+ if (trimmed.startsWith("# Subtest: ")) {
58
+ openChild(stack);
59
+ stack.push({
60
+ name: unescapeTapName(trimmed.slice("# Subtest: ".length).trimEnd()),
61
+ indent: countIndent(line),
62
+ hasChildren: false,
63
+ });
64
+ continue;
65
+ }
66
+ if (trimmed.startsWith("#")) {
67
+ continue;
68
+ }
69
+ const match = /^( *)(not )?ok [0-9]+ - (.*)$/.exec(line);
70
+ if (match === null) {
71
+ continue;
72
+ }
73
+ const indent = (match[1] ?? "").length;
74
+ const passed = match[2] === undefined;
75
+ const name = unescapeTapName((match[3] ?? "").trimEnd());
76
+ recordResult(stack, indent, name, passed, outcomes);
77
+ }
78
+ const leaves = outcomes.filter((outcome) => outcome.title !== filePath);
79
+ const fileLevelFailed = outcomes.some((outcome) => outcome.title === filePath && !outcome.passed);
80
+ return {
81
+ outcomes: leaves,
82
+ loadFailed: fileLevelFailed && leaves.length === 0,
83
+ };
84
+ }
@@ -0,0 +1,23 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ export declare const DEFAULT_REF_PATTERN = "\\[(\u00A7[\\d.]+(?: EC-\\d+)?)\\]";
3
+ export interface SpecReference {
4
+ readonly section: string;
5
+ readonly ec: number | undefined;
6
+ readonly raw: string;
7
+ }
8
+ export interface SpecIndex {
9
+ readonly headings: ReadonlySet<string>;
10
+ readonly ecRows: ReadonlyMap<string, ReadonlySet<number>>;
11
+ }
12
+ export interface TracedTest {
13
+ readonly path: string;
14
+ readonly title: string;
15
+ }
16
+ export declare function parseSpecRefs(title: string, refPattern?: string): Array<SpecReference>;
17
+ export declare function checkSpecTrace(tests: ReadonlyArray<TracedTest>, spec: SpecIndex, acceptanceGlobs?: ReadonlyArray<string>, refPattern?: string): Array<Finding>;
18
+ export interface PlannedTask {
19
+ readonly type: string;
20
+ readonly specRefs: ReadonlyArray<string>;
21
+ readonly declaredTests: ReadonlyArray<TracedTest>;
22
+ }
23
+ export declare function checkPlanningGate(task: PlannedTask): Array<Finding>;