codictator 0.0.0 → 0.1.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (840) hide show
  1. package/LICENSE +9 -0
  2. package/README.md +5 -0
  3. package/dist/builtin-packs/core/fixtures/agent-assets-present/passing/basic/case.json +10 -0
  4. package/dist/builtin-packs/core/fixtures/agent-assets-present/violating/basic/case.json +10 -0
  5. package/dist/builtin-packs/core/fixtures/arch-boundaries/passing/basic/case.json +10 -0
  6. package/dist/builtin-packs/core/fixtures/arch-boundaries/violating/basic/case.json +10 -0
  7. package/dist/builtin-packs/core/fixtures/arch-module-mapped/passing/basic/case.json +10 -0
  8. package/dist/builtin-packs/core/fixtures/arch-module-mapped/violating/basic/case.json +10 -0
  9. package/dist/builtin-packs/core/fixtures/arch-module-size/passing/basic/case.json +10 -0
  10. package/dist/builtin-packs/core/fixtures/arch-module-size/violating/basic/case.json +10 -0
  11. package/dist/builtin-packs/core/fixtures/arch-no-cycles/passing/basic/case.json +10 -0
  12. package/dist/builtin-packs/core/fixtures/arch-no-cycles/violating/basic/case.json +10 -0
  13. package/dist/builtin-packs/core/fixtures/arch-profile-declared/passing/basic/case.json +10 -0
  14. package/dist/builtin-packs/core/fixtures/arch-profile-declared/violating/basic/case.json +10 -0
  15. package/dist/builtin-packs/core/fixtures/arch-public-entry/passing/basic/case.json +10 -0
  16. package/dist/builtin-packs/core/fixtures/arch-public-entry/violating/basic/case.json +10 -0
  17. package/dist/builtin-packs/core/fixtures/branch-protection/passing/basic/case.json +10 -0
  18. package/dist/builtin-packs/core/fixtures/branch-protection/violating/basic/case.json +10 -0
  19. package/dist/builtin-packs/core/fixtures/bug-registry/passing/basic/case.json +10 -0
  20. package/dist/builtin-packs/core/fixtures/bug-registry/violating/basic/case.json +10 -0
  21. package/dist/builtin-packs/core/fixtures/bug-rows-immutable/passing/basic/case.json +10 -0
  22. package/dist/builtin-packs/core/fixtures/bug-rows-immutable/violating/basic/case.json +10 -0
  23. package/dist/builtin-packs/core/fixtures/ci-actions-pinned/passing/basic/case.json +10 -0
  24. package/dist/builtin-packs/core/fixtures/ci-actions-pinned/violating/basic/case.json +10 -0
  25. package/dist/builtin-packs/core/fixtures/ci-present/passing/basic/case.json +10 -0
  26. package/dist/builtin-packs/core/fixtures/ci-present/violating/basic/case.json +10 -0
  27. package/dist/builtin-packs/core/fixtures/ci-required-check/passing/basic/case.json +10 -0
  28. package/dist/builtin-packs/core/fixtures/ci-required-check/violating/basic/case.json +10 -0
  29. package/dist/builtin-packs/core/fixtures/compiler-strict/passing/basic/case.json +10 -0
  30. package/dist/builtin-packs/core/fixtures/compiler-strict/violating/basic/case.json +10 -0
  31. package/dist/builtin-packs/core/fixtures/complexity/passing/basic/case.json +10 -0
  32. package/dist/builtin-packs/core/fixtures/complexity/violating/basic/case.json +10 -0
  33. package/dist/builtin-packs/core/fixtures/context-hard-band/passing/basic/case.json +10 -0
  34. package/dist/builtin-packs/core/fixtures/context-hard-band/violating/basic/case.json +10 -0
  35. package/dist/builtin-packs/core/fixtures/context-soft-band/passing/basic/case.json +10 -0
  36. package/dist/builtin-packs/core/fixtures/context-soft-band/violating/basic/case.json +10 -0
  37. package/dist/builtin-packs/core/fixtures/conventional-commit/passing/basic/case.json +10 -0
  38. package/dist/builtin-packs/core/fixtures/conventional-commit/violating/basic/case.json +10 -0
  39. package/dist/builtin-packs/core/fixtures/coverage-floor/passing/basic/case.json +10 -0
  40. package/dist/builtin-packs/core/fixtures/coverage-floor/violating/basic/case.json +10 -0
  41. package/dist/builtin-packs/core/fixtures/custom-pack-selftest/passing/basic/case.json +10 -0
  42. package/dist/builtin-packs/core/fixtures/custom-pack-selftest/violating/basic/case.json +10 -0
  43. package/dist/builtin-packs/core/fixtures/dangerous-shell/passing/basic/case.json +10 -0
  44. package/dist/builtin-packs/core/fixtures/dangerous-shell/violating/basic/case.json +10 -0
  45. package/dist/builtin-packs/core/fixtures/dead-code/passing/basic/case.json +10 -0
  46. package/dist/builtin-packs/core/fixtures/dead-code/violating/basic/case.json +10 -0
  47. package/dist/builtin-packs/core/fixtures/dep-exact-pin/passing/basic/case.json +10 -0
  48. package/dist/builtin-packs/core/fixtures/dep-exact-pin/violating/basic/case.json +10 -0
  49. package/dist/builtin-packs/core/fixtures/dep-latest-stable/passing/basic/case.json +10 -0
  50. package/dist/builtin-packs/core/fixtures/dep-latest-stable/violating/basic/case.json +10 -0
  51. package/dist/builtin-packs/core/fixtures/dep-license/passing/basic/case.json +10 -0
  52. package/dist/builtin-packs/core/fixtures/dep-license/violating/basic/case.json +10 -0
  53. package/dist/builtin-packs/core/fixtures/dep-lockfile/passing/basic/case.json +10 -0
  54. package/dist/builtin-packs/core/fixtures/dep-lockfile/violating/basic/case.json +10 -0
  55. package/dist/builtin-packs/core/fixtures/dep-new-needs-reason/passing/basic/case.json +10 -0
  56. package/dist/builtin-packs/core/fixtures/dep-new-needs-reason/violating/basic/case.json +10 -0
  57. package/dist/builtin-packs/core/fixtures/dep-no-deprecated/passing/basic/case.json +10 -0
  58. package/dist/builtin-packs/core/fixtures/dep-no-deprecated/violating/basic/case.json +10 -0
  59. package/dist/builtin-packs/core/fixtures/dep-no-vulnerable/passing/basic/case.json +10 -0
  60. package/dist/builtin-packs/core/fixtures/dep-no-vulnerable/violating/basic/case.json +10 -0
  61. package/dist/builtin-packs/core/fixtures/dep-one-per-capability/passing/basic/case.json +10 -0
  62. package/dist/builtin-packs/core/fixtures/dep-one-per-capability/violating/basic/case.json +10 -0
  63. package/dist/builtin-packs/core/fixtures/diagnose-before-fix/passing/basic/case.json +10 -0
  64. package/dist/builtin-packs/core/fixtures/diagnose-before-fix/violating/basic/case.json +10 -0
  65. package/dist/builtin-packs/core/fixtures/doc-breadth/passing/basic/case.json +10 -0
  66. package/dist/builtin-packs/core/fixtures/doc-breadth/violating/basic/case.json +10 -0
  67. package/dist/builtin-packs/core/fixtures/doc-density/passing/basic/case.json +10 -0
  68. package/dist/builtin-packs/core/fixtures/doc-density/violating/basic/case.json +10 -0
  69. package/dist/builtin-packs/core/fixtures/doc-links-valid/passing/basic/case.json +10 -0
  70. package/dist/builtin-packs/core/fixtures/doc-links-valid/violating/basic/case.json +10 -0
  71. package/dist/builtin-packs/core/fixtures/doc-no-corpus-counts/passing/basic/case.json +10 -0
  72. package/dist/builtin-packs/core/fixtures/doc-no-corpus-counts/violating/basic/case.json +10 -0
  73. package/dist/builtin-packs/core/fixtures/doc-no-inline-changelog/passing/basic/case.json +10 -0
  74. package/dist/builtin-packs/core/fixtures/doc-no-inline-changelog/violating/basic/case.json +10 -0
  75. package/dist/builtin-packs/core/fixtures/doc-one-level/passing/basic/case.json +10 -0
  76. package/dist/builtin-packs/core/fixtures/doc-one-level/violating/basic/case.json +10 -0
  77. package/dist/builtin-packs/core/fixtures/doc-placement/passing/basic/case.json +10 -0
  78. package/dist/builtin-packs/core/fixtures/doc-placement/violating/basic/case.json +10 -0
  79. package/dist/builtin-packs/core/fixtures/doc-router-leaf/passing/basic/case.json +10 -0
  80. package/dist/builtin-packs/core/fixtures/doc-router-leaf/violating/basic/case.json +10 -0
  81. package/dist/builtin-packs/core/fixtures/doc-single-owner/passing/basic/case.json +10 -0
  82. package/dist/builtin-packs/core/fixtures/doc-single-owner/violating/basic/case.json +10 -0
  83. package/dist/builtin-packs/core/fixtures/doc-size/passing/basic/case.json +10 -0
  84. package/dist/builtin-packs/core/fixtures/doc-size/violating/basic/case.json +10 -0
  85. package/dist/builtin-packs/core/fixtures/duplication/passing/basic/case.json +10 -0
  86. package/dist/builtin-packs/core/fixtures/duplication/violating/basic/case.json +10 -0
  87. package/dist/builtin-packs/core/fixtures/engine-version-match/passing/basic/case.json +10 -0
  88. package/dist/builtin-packs/core/fixtures/engine-version-match/violating/basic/case.json +10 -0
  89. package/dist/builtin-packs/core/fixtures/file-naming/passing/basic/case.json +10 -0
  90. package/dist/builtin-packs/core/fixtures/file-naming/violating/basic/case.json +10 -0
  91. package/dist/builtin-packs/core/fixtures/file-size/passing/basic/case.json +10 -0
  92. package/dist/builtin-packs/core/fixtures/file-size/violating/basic/case.json +10 -0
  93. package/dist/builtin-packs/core/fixtures/function-size/passing/basic/case.json +10 -0
  94. package/dist/builtin-packs/core/fixtures/function-size/violating/basic/case.json +10 -0
  95. package/dist/builtin-packs/core/fixtures/graph-before-scan/passing/basic/case.json +10 -0
  96. package/dist/builtin-packs/core/fixtures/graph-before-scan/violating/basic/case.json +10 -0
  97. package/dist/builtin-packs/core/fixtures/guardrail-manifest/passing/basic/case.json +10 -0
  98. package/dist/builtin-packs/core/fixtures/guardrail-manifest/violating/basic/case.json +10 -0
  99. package/dist/builtin-packs/core/fixtures/history-append-only/passing/basic/case.json +10 -0
  100. package/dist/builtin-packs/core/fixtures/history-append-only/violating/basic/case.json +10 -0
  101. package/dist/builtin-packs/core/fixtures/history-entry/passing/basic/case.json +10 -0
  102. package/dist/builtin-packs/core/fixtures/history-entry/violating/basic/case.json +10 -0
  103. package/dist/builtin-packs/core/fixtures/history-entry-complete/passing/basic/case.json +10 -0
  104. package/dist/builtin-packs/core/fixtures/history-entry-complete/violating/basic/case.json +10 -0
  105. package/dist/builtin-packs/core/fixtures/hooks-active/passing/basic/case.json +10 -0
  106. package/dist/builtin-packs/core/fixtures/hooks-active/violating/basic/case.json +10 -0
  107. package/dist/builtin-packs/core/fixtures/loop-breaker/passing/basic/case.json +10 -0
  108. package/dist/builtin-packs/core/fixtures/loop-breaker/violating/basic/case.json +10 -0
  109. package/dist/builtin-packs/core/fixtures/max-file-bytes/passing/basic/case.json +10 -0
  110. package/dist/builtin-packs/core/fixtures/max-file-bytes/violating/basic/case.json +10 -0
  111. package/dist/builtin-packs/core/fixtures/mcp-declared/passing/basic/case.json +10 -0
  112. package/dist/builtin-packs/core/fixtures/mcp-declared/violating/basic/case.json +10 -0
  113. package/dist/builtin-packs/core/fixtures/no-assertion-loss/passing/basic/case.json +10 -0
  114. package/dist/builtin-packs/core/fixtures/no-assertion-loss/violating/basic/case.json +10 -0
  115. package/dist/builtin-packs/core/fixtures/no-baseline-raise/passing/basic/case.json +10 -0
  116. package/dist/builtin-packs/core/fixtures/no-baseline-raise/violating/basic/case.json +10 -0
  117. package/dist/builtin-packs/core/fixtures/no-bypass/passing/basic/case.json +10 -0
  118. package/dist/builtin-packs/core/fixtures/no-bypass/violating/basic/case.json +10 -0
  119. package/dist/builtin-packs/core/fixtures/no-fixture-shrink/passing/basic/case.json +10 -0
  120. package/dist/builtin-packs/core/fixtures/no-fixture-shrink/violating/basic/case.json +10 -0
  121. package/dist/builtin-packs/core/fixtures/no-guard-removal/passing/basic/case.json +10 -0
  122. package/dist/builtin-packs/core/fixtures/no-guard-removal/violating/basic/case.json +10 -0
  123. package/dist/builtin-packs/core/fixtures/no-new-suppressions/passing/basic/case.json +10 -0
  124. package/dist/builtin-packs/core/fixtures/no-new-suppressions/violating/basic/case.json +10 -0
  125. package/dist/builtin-packs/core/fixtures/no-secret-reads/passing/basic/case.json +10 -0
  126. package/dist/builtin-packs/core/fixtures/no-secret-reads/violating/basic/case.json +10 -0
  127. package/dist/builtin-packs/core/fixtures/no-secrets/passing/basic/case.json +10 -0
  128. package/dist/builtin-packs/core/fixtures/no-secrets/violating/basic/case.json +10 -0
  129. package/dist/builtin-packs/core/fixtures/no-skipped-tests/passing/basic/case.json +10 -0
  130. package/dist/builtin-packs/core/fixtures/no-skipped-tests/violating/basic/case.json +10 -0
  131. package/dist/builtin-packs/core/fixtures/no-speculative-abstraction/passing/basic/case.json +10 -0
  132. package/dist/builtin-packs/core/fixtures/no-speculative-abstraction/violating/basic/case.json +10 -0
  133. package/dist/builtin-packs/core/fixtures/no-threshold-lowering/passing/basic/case.json +10 -0
  134. package/dist/builtin-packs/core/fixtures/no-threshold-lowering/violating/basic/case.json +10 -0
  135. package/dist/builtin-packs/core/fixtures/perf-budgets/passing/basic/case.json +10 -0
  136. package/dist/builtin-packs/core/fixtures/perf-budgets/violating/basic/case.json +10 -0
  137. package/dist/builtin-packs/core/fixtures/ratchet-touched-improves/passing/basic/case.json +10 -0
  138. package/dist/builtin-packs/core/fixtures/ratchet-touched-improves/violating/basic/case.json +10 -0
  139. package/dist/builtin-packs/core/fixtures/read-dedupe/passing/basic/case.json +10 -0
  140. package/dist/builtin-packs/core/fixtures/read-dedupe/violating/basic/case.json +10 -0
  141. package/dist/builtin-packs/core/fixtures/red-before-green/passing/basic/case.json +10 -0
  142. package/dist/builtin-packs/core/fixtures/red-before-green/violating/basic/case.json +10 -0
  143. package/dist/builtin-packs/core/fixtures/regression-test-for-fix/passing/basic/case.json +10 -0
  144. package/dist/builtin-packs/core/fixtures/regression-test-for-fix/violating/basic/case.json +10 -0
  145. package/dist/builtin-packs/core/fixtures/remediation-step-size/passing/basic/case.json +10 -0
  146. package/dist/builtin-packs/core/fixtures/remediation-step-size/violating/basic/case.json +10 -0
  147. package/dist/builtin-packs/core/fixtures/repo-hygiene/passing/basic/case.json +10 -0
  148. package/dist/builtin-packs/core/fixtures/repo-hygiene/violating/basic/case.json +10 -0
  149. package/dist/builtin-packs/core/fixtures/review-gate/passing/basic/case.json +10 -0
  150. package/dist/builtin-packs/core/fixtures/review-gate/violating/basic/case.json +10 -0
  151. package/dist/builtin-packs/core/fixtures/review-round-cap/passing/basic/case.json +10 -0
  152. package/dist/builtin-packs/core/fixtures/review-round-cap/violating/basic/case.json +10 -0
  153. package/dist/builtin-packs/core/fixtures/session-tool-call-limit/passing/basic/case.json +10 -0
  154. package/dist/builtin-packs/core/fixtures/session-tool-call-limit/violating/basic/case.json +10 -0
  155. package/dist/builtin-packs/core/fixtures/spec-trace/passing/basic/case.json +10 -0
  156. package/dist/builtin-packs/core/fixtures/spec-trace/violating/basic/case.json +10 -0
  157. package/dist/builtin-packs/core/fixtures/test-command-intact/passing/basic/case.json +10 -0
  158. package/dist/builtin-packs/core/fixtures/test-command-intact/violating/basic/case.json +10 -0
  159. package/dist/builtin-packs/core/fixtures/test-kinds-by-scenario/passing/basic/case.json +10 -0
  160. package/dist/builtin-packs/core/fixtures/test-kinds-by-scenario/violating/basic/case.json +10 -0
  161. package/dist/builtin-packs/core/fixtures/waivers-valid/passing/basic/case.json +10 -0
  162. package/dist/builtin-packs/core/fixtures/waivers-valid/violating/basic/case.json +10 -0
  163. package/dist/builtin-packs/core/fixtures/workflow-gates/passing/basic/case.json +10 -0
  164. package/dist/builtin-packs/core/fixtures/workflow-gates/violating/basic/case.json +10 -0
  165. package/dist/builtin-packs/core/fixtures/write-confinement/passing/basic/case.json +10 -0
  166. package/dist/builtin-packs/core/fixtures/write-confinement/violating/basic/case.json +10 -0
  167. package/dist/builtin-packs/core/fixtures/writes-within-plan/passing/basic/case.json +10 -0
  168. package/dist/builtin-packs/core/fixtures/writes-within-plan/violating/basic/case.json +10 -0
  169. package/dist/builtin-packs/core/index.ts +8 -0
  170. package/dist/builtin-packs/core/pack.json +2057 -0
  171. package/dist/builtin-packs/dotnet/index.ts +47 -0
  172. package/dist/builtin-packs/python/extract.ts +245 -0
  173. package/dist/builtin-packs/python/fixtures/lint/passing/basic/case.json +10 -0
  174. package/dist/builtin-packs/python/fixtures/lint/violating/basic/case.json +10 -0
  175. package/dist/builtin-packs/python/fixtures/no-phantom-import/passing/basic/case.json +12 -0
  176. package/dist/builtin-packs/python/fixtures/no-phantom-import/violating/basic/case.json +11 -0
  177. package/dist/builtin-packs/python/fixtures/security-patterns/passing/basic/case.json +10 -0
  178. package/dist/builtin-packs/python/fixtures/security-patterns/violating/basic/case.json +10 -0
  179. package/dist/builtin-packs/python/fixtures/typecheck/passing/basic/case.json +10 -0
  180. package/dist/builtin-packs/python/fixtures/typecheck/violating/basic/case.json +10 -0
  181. package/dist/builtin-packs/python/index.ts +57 -0
  182. package/dist/builtin-packs/python/pack.json +116 -0
  183. package/dist/builtin-packs/typescript/extract-clauses.ts +153 -0
  184. package/dist/builtin-packs/typescript/extract-literals.ts +111 -0
  185. package/dist/builtin-packs/typescript/extract-words.ts +79 -0
  186. package/dist/builtin-packs/typescript/extract.ts +77 -0
  187. package/dist/builtin-packs/typescript/fixtures/lint/passing/basic/case.json +10 -0
  188. package/dist/builtin-packs/typescript/fixtures/lint/passing/exported/case.json +8 -0
  189. package/dist/builtin-packs/typescript/fixtures/lint/violating/basic/case.json +10 -0
  190. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/passing/basic/case.json +10 -0
  191. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/passing/host-provided/case.json +10 -0
  192. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/violating/basic/case.json +10 -0
  193. package/dist/builtin-packs/typescript/fixtures/no-phantom-import/violating/host-provided/case.json +10 -0
  194. package/dist/builtin-packs/typescript/fixtures/security-patterns/passing/basic/case.json +10 -0
  195. package/dist/builtin-packs/typescript/fixtures/security-patterns/violating/basic/case.json +10 -0
  196. package/dist/builtin-packs/typescript/fixtures/typecheck/passing/basic/case.json +10 -0
  197. package/dist/builtin-packs/typescript/fixtures/typecheck/violating/basic/case.json +10 -0
  198. package/dist/builtin-packs/typescript/index.ts +85 -0
  199. package/dist/builtin-packs/typescript/lex.ts +199 -0
  200. package/dist/builtin-packs/typescript/measures-exports.ts +173 -0
  201. package/dist/builtin-packs/typescript/measures-functions.ts +138 -0
  202. package/dist/builtin-packs/typescript/measures.ts +10 -0
  203. package/dist/builtin-packs/typescript/naming.ts +47 -0
  204. package/dist/builtin-packs/typescript/pack.json +169 -0
  205. package/dist/builtin-packs/typescript/patterns.ts +93 -0
  206. package/dist/builtin-packs/typescript/resolve.ts +224 -0
  207. package/dist/builtin-packs/typescript/strict.ts +177 -0
  208. package/dist/builtin-packs/typescript/titles.ts +184 -0
  209. package/dist/cli/baseline.d.ts +3 -0
  210. package/dist/cli/baseline.js +67 -0
  211. package/dist/cli/ci-bot-change.d.ts +3 -0
  212. package/dist/cli/ci-bot-change.js +54 -0
  213. package/dist/cli/ci-range.d.ts +18 -0
  214. package/dist/cli/ci-range.js +228 -0
  215. package/dist/cli/ci-summary.d.ts +3 -0
  216. package/dist/cli/ci-summary.js +45 -0
  217. package/dist/cli/ci.d.ts +4 -0
  218. package/dist/cli/ci.js +195 -0
  219. package/dist/cli/commands.d.ts +5 -0
  220. package/dist/cli/commands.js +39 -0
  221. package/dist/cli/deps.d.ts +3 -0
  222. package/dist/cli/deps.js +115 -0
  223. package/dist/cli/drift.d.ts +11 -0
  224. package/dist/cli/drift.js +91 -0
  225. package/dist/cli/evaluate.d.ts +20 -0
  226. package/dist/cli/evaluate.js +213 -0
  227. package/dist/cli/gate-scope.d.ts +11 -0
  228. package/dist/cli/gate-scope.js +93 -0
  229. package/dist/cli/git-hook.d.ts +3 -0
  230. package/dist/cli/git-hook.js +184 -0
  231. package/dist/cli/guardrail.d.ts +5 -0
  232. package/dist/cli/guardrail.js +190 -0
  233. package/dist/cli/index.d.ts +12 -0
  234. package/dist/cli/index.js +198 -0
  235. package/dist/cli/init-plan.d.ts +23 -0
  236. package/dist/cli/init-plan.js +135 -0
  237. package/dist/cli/init.d.ts +3 -0
  238. package/dist/cli/init.js +122 -0
  239. package/dist/cli/inspect-status.d.ts +8 -0
  240. package/dist/cli/inspect-status.js +164 -0
  241. package/dist/cli/inspect.d.ts +5 -0
  242. package/dist/cli/inspect.js +98 -0
  243. package/dist/cli/main.d.ts +2 -0
  244. package/dist/cli/main.js +60 -0
  245. package/dist/cli/pack-adapters.d.ts +3 -0
  246. package/dist/cli/pack-adapters.js +81 -0
  247. package/dist/cli/packs.d.ts +6 -0
  248. package/dist/cli/packs.js +131 -0
  249. package/dist/cli/plan-launcher.d.ts +2 -0
  250. package/dist/cli/plan-launcher.js +272 -0
  251. package/dist/cli/plan.d.ts +25 -0
  252. package/dist/cli/plan.js +121 -0
  253. package/dist/cli/proofs-test.d.ts +3 -0
  254. package/dist/cli/proofs-test.js +77 -0
  255. package/dist/cli/proofs.d.ts +3 -0
  256. package/dist/cli/proofs.js +168 -0
  257. package/dist/cli/remediation.d.ts +3 -0
  258. package/dist/cli/remediation.js +107 -0
  259. package/dist/cli/report.d.ts +4 -0
  260. package/dist/cli/report.js +93 -0
  261. package/dist/cli/serve-eval.d.ts +2 -0
  262. package/dist/cli/serve-eval.js +165 -0
  263. package/dist/cli/serve-log.d.ts +2 -0
  264. package/dist/cli/serve-log.js +150 -0
  265. package/dist/cli/serve-methods.d.ts +2 -0
  266. package/dist/cli/serve-methods.js +181 -0
  267. package/dist/cli/serve-protocol.d.ts +35 -0
  268. package/dist/cli/serve-protocol.js +97 -0
  269. package/dist/cli/serve-run.d.ts +9 -0
  270. package/dist/cli/serve-run.js +135 -0
  271. package/dist/cli/serve-server.d.ts +5 -0
  272. package/dist/cli/serve-server.js +120 -0
  273. package/dist/cli/serve-shared.d.ts +34 -0
  274. package/dist/cli/serve-shared.js +20 -0
  275. package/dist/cli/serve-status.d.ts +2 -0
  276. package/dist/cli/serve-status.js +130 -0
  277. package/dist/cli/serve-transport.d.ts +2 -0
  278. package/dist/cli/serve-transport.js +114 -0
  279. package/dist/cli/shared.d.ts +35 -0
  280. package/dist/cli/shared.js +181 -0
  281. package/dist/cli/task-advance.d.ts +3 -0
  282. package/dist/cli/task-advance.js +144 -0
  283. package/dist/cli/task-phases.d.ts +3 -0
  284. package/dist/cli/task-phases.js +77 -0
  285. package/dist/cli/tasks.d.ts +12 -0
  286. package/dist/cli/tasks.js +176 -0
  287. package/dist/cli/transparency.d.ts +4 -0
  288. package/dist/cli/transparency.js +197 -0
  289. package/dist/cli/waivers.d.ts +3 -0
  290. package/dist/cli/waivers.js +195 -0
  291. package/dist/features/adapters/claude-code.d.ts +8 -0
  292. package/dist/features/adapters/claude-code.js +198 -0
  293. package/dist/features/adapters/claude-shaped.d.ts +4 -0
  294. package/dist/features/adapters/claude-shaped.js +174 -0
  295. package/dist/features/adapters/codex-cli.d.ts +8 -0
  296. package/dist/features/adapters/codex-cli.js +180 -0
  297. package/dist/features/adapters/contract.d.ts +104 -0
  298. package/dist/features/adapters/contract.js +17 -0
  299. package/dist/features/adapters/copilot-capabilities.d.ts +2 -0
  300. package/dist/features/adapters/copilot-capabilities.js +46 -0
  301. package/dist/features/adapters/copilot.d.ts +8 -0
  302. package/dist/features/adapters/copilot.js +200 -0
  303. package/dist/features/adapters/cursor.d.ts +8 -0
  304. package/dist/features/adapters/cursor.js +245 -0
  305. package/dist/features/adapters/custom-event.d.ts +3 -0
  306. package/dist/features/adapters/custom-event.js +180 -0
  307. package/dist/features/adapters/custom-load.d.ts +3 -0
  308. package/dist/features/adapters/custom-load.js +185 -0
  309. package/dist/features/adapters/custom-shape.d.ts +21 -0
  310. package/dist/features/adapters/custom-shape.js +87 -0
  311. package/dist/features/adapters/custom.d.ts +9 -0
  312. package/dist/features/adapters/custom.js +130 -0
  313. package/dist/features/adapters/effective-cache.d.ts +5 -0
  314. package/dist/features/adapters/effective-cache.js +45 -0
  315. package/dist/features/adapters/gemini-cli.d.ts +6 -0
  316. package/dist/features/adapters/gemini-cli.js +160 -0
  317. package/dist/features/adapters/gemini-tables.d.ts +7 -0
  318. package/dist/features/adapters/gemini-tables.js +104 -0
  319. package/dist/features/adapters/hook-dispatch.d.ts +7 -0
  320. package/dist/features/adapters/hook-dispatch.js +97 -0
  321. package/dist/features/adapters/hook-injection.d.ts +12 -0
  322. package/dist/features/adapters/hook-injection.js +75 -0
  323. package/dist/features/adapters/hook-load.d.ts +15 -0
  324. package/dist/features/adapters/hook-load.js +152 -0
  325. package/dist/features/adapters/hook-scope.d.ts +3 -0
  326. package/dist/features/adapters/hook-scope.js +54 -0
  327. package/dist/features/adapters/index.d.ts +22 -0
  328. package/dist/features/adapters/index.js +86 -0
  329. package/dist/features/adapters/muse-code.d.ts +8 -0
  330. package/dist/features/adapters/muse-code.js +223 -0
  331. package/dist/features/adapters/opencode-bridge.d.ts +1 -0
  332. package/dist/features/adapters/opencode-bridge.js +230 -0
  333. package/dist/features/adapters/opencode-capabilities.d.ts +2 -0
  334. package/dist/features/adapters/opencode-capabilities.js +47 -0
  335. package/dist/features/adapters/opencode-parse.d.ts +3 -0
  336. package/dist/features/adapters/opencode-parse.js +137 -0
  337. package/dist/features/adapters/opencode-tables.d.ts +5 -0
  338. package/dist/features/adapters/opencode-tables.js +63 -0
  339. package/dist/features/adapters/opencode.d.ts +10 -0
  340. package/dist/features/adapters/opencode.js +97 -0
  341. package/dist/features/adapters/runtime.d.ts +25 -0
  342. package/dist/features/adapters/runtime.js +148 -0
  343. package/dist/features/adapters/universal.d.ts +7 -0
  344. package/dist/features/adapters/universal.js +89 -0
  345. package/dist/features/arch/arch-profiles.d.ts +3 -0
  346. package/dist/features/arch/arch-profiles.js +5 -0
  347. package/dist/features/arch/checks.d.ts +25 -0
  348. package/dist/features/arch/checks.js +173 -0
  349. package/dist/features/arch/codictator-modules.d.ts +4 -0
  350. package/dist/features/arch/codictator-modules.js +180 -0
  351. package/dist/features/arch/cycle-walk.d.ts +1 -0
  352. package/dist/features/arch/cycle-walk.js +36 -0
  353. package/dist/features/arch/edge-checks.d.ts +13 -0
  354. package/dist/features/arch/edge-checks.js +186 -0
  355. package/dist/features/arch/graph.d.ts +32 -0
  356. package/dist/features/arch/graph.js +202 -0
  357. package/dist/features/arch/index.d.ts +29 -0
  358. package/dist/features/arch/index.js +16 -0
  359. package/dist/features/arch/layer-rules.d.ts +3 -0
  360. package/dist/features/arch/layer-rules.js +38 -0
  361. package/dist/features/arch/module-map-validation.d.ts +3 -0
  362. package/dist/features/arch/module-map-validation.js +30 -0
  363. package/dist/features/arch/module-mapping.d.ts +15 -0
  364. package/dist/features/arch/module-mapping.js +184 -0
  365. package/dist/features/arch/profiles.d.ts +4 -0
  366. package/dist/features/arch/profiles.js +8 -0
  367. package/dist/features/audit/append.d.ts +26 -0
  368. package/dist/features/audit/append.js +210 -0
  369. package/dist/features/audit/explain-table-tail.d.ts +2 -0
  370. package/dist/features/audit/explain-table-tail.js +29 -0
  371. package/dist/features/audit/explain-table.d.ts +8 -0
  372. package/dist/features/audit/explain-table.js +48 -0
  373. package/dist/features/audit/explain.d.ts +7 -0
  374. package/dist/features/audit/explain.js +87 -0
  375. package/dist/features/audit/index.d.ts +37 -0
  376. package/dist/features/audit/index.js +17 -0
  377. package/dist/features/audit/injection-event.d.ts +11 -0
  378. package/dist/features/audit/injection-event.js +17 -0
  379. package/dist/features/audit/read.d.ts +8 -0
  380. package/dist/features/audit/read.js +62 -0
  381. package/dist/features/audit/summarize.d.ts +1 -0
  382. package/dist/features/audit/summarize.js +41 -0
  383. package/dist/features/audit/surfaces.d.ts +47 -0
  384. package/dist/features/audit/surfaces.js +172 -0
  385. package/dist/features/audit/token-saver-evidence.d.ts +14 -0
  386. package/dist/features/audit/token-saver-evidence.js +85 -0
  387. package/dist/features/ci/changes.d.ts +28 -0
  388. package/dist/features/ci/changes.js +88 -0
  389. package/dist/features/ci/index.d.ts +22 -0
  390. package/dist/features/ci/index.js +75 -0
  391. package/dist/features/ci/protection-read.d.ts +3 -0
  392. package/dist/features/ci/protection-read.js +264 -0
  393. package/dist/features/ci/protection.d.ts +25 -0
  394. package/dist/features/ci/protection.js +101 -0
  395. package/dist/features/ci/workflow.d.ts +23 -0
  396. package/dist/features/ci/workflow.js +261 -0
  397. package/dist/features/config/human.d.ts +4 -0
  398. package/dist/features/config/human.js +31 -0
  399. package/dist/features/config/index.d.ts +37 -0
  400. package/dist/features/config/index.js +129 -0
  401. package/dist/features/config/pack-data.d.ts +18 -0
  402. package/dist/features/config/pack-data.js +116 -0
  403. package/dist/features/config/validate-sections.d.ts +6 -0
  404. package/dist/features/config/validate-sections.js +198 -0
  405. package/dist/features/config/validate-shared.d.ts +8 -0
  406. package/dist/features/config/validate-shared.js +69 -0
  407. package/dist/features/config/validate-tunables.d.ts +1 -0
  408. package/dist/features/config/validate-tunables.js +89 -0
  409. package/dist/features/config/validate.d.ts +2 -0
  410. package/dist/features/config/validate.js +57 -0
  411. package/dist/features/deps/bots.d.ts +5 -0
  412. package/dist/features/deps/bots.js +39 -0
  413. package/dist/features/deps/capabilities.d.ts +3 -0
  414. package/dist/features/deps/capabilities.js +91 -0
  415. package/dist/features/deps/check.d.ts +18 -0
  416. package/dist/features/deps/check.js +70 -0
  417. package/dist/features/deps/dependabot.d.ts +10 -0
  418. package/dist/features/deps/dependabot.js +154 -0
  419. package/dist/features/deps/eval.d.ts +41 -0
  420. package/dist/features/deps/eval.js +24 -0
  421. package/dist/features/deps/fields.d.ts +4 -0
  422. package/dist/features/deps/fields.js +18 -0
  423. package/dist/features/deps/index.d.ts +67 -0
  424. package/dist/features/deps/index.js +27 -0
  425. package/dist/features/deps/lockfile.d.ts +8 -0
  426. package/dist/features/deps/lockfile.js +87 -0
  427. package/dist/features/deps/npm.d.ts +22 -0
  428. package/dist/features/deps/npm.js +187 -0
  429. package/dist/features/deps/npmrc.d.ts +12 -0
  430. package/dist/features/deps/npmrc.js +50 -0
  431. package/dist/features/deps/nuget.d.ts +25 -0
  432. package/dist/features/deps/nuget.js +112 -0
  433. package/dist/features/deps/osv-ranges.d.ts +12 -0
  434. package/dist/features/deps/osv-ranges.js +83 -0
  435. package/dist/features/deps/osv.d.ts +16 -0
  436. package/dist/features/deps/osv.js +144 -0
  437. package/dist/features/deps/pypi-pyproject.d.ts +7 -0
  438. package/dist/features/deps/pypi-pyproject.js +118 -0
  439. package/dist/features/deps/pypi.d.ts +29 -0
  440. package/dist/features/deps/pypi.js +137 -0
  441. package/dist/features/deps/registry.d.ts +29 -0
  442. package/dist/features/deps/registry.js +158 -0
  443. package/dist/features/deps/renovate.d.ts +15 -0
  444. package/dist/features/deps/renovate.js +98 -0
  445. package/dist/features/deps/selection.d.ts +20 -0
  446. package/dist/features/deps/selection.js +150 -0
  447. package/dist/features/deps/snapshot-verdicts.d.ts +16 -0
  448. package/dist/features/deps/snapshot-verdicts.js +184 -0
  449. package/dist/features/deps/stable.d.ts +19 -0
  450. package/dist/features/deps/stable.js +131 -0
  451. package/dist/features/deps/step-size.d.ts +7 -0
  452. package/dist/features/deps/step-size.js +24 -0
  453. package/dist/features/deps/upgrade.d.ts +35 -0
  454. package/dist/features/deps/upgrade.js +124 -0
  455. package/dist/features/deps/verdicts.d.ts +21 -0
  456. package/dist/features/deps/verdicts.js +219 -0
  457. package/dist/features/engine/evaluate.d.ts +12 -0
  458. package/dist/features/engine/evaluate.js +170 -0
  459. package/dist/features/engine/index.d.ts +21 -0
  460. package/dist/features/engine/index.js +24 -0
  461. package/dist/features/engine/message.d.ts +3 -0
  462. package/dist/features/engine/message.js +69 -0
  463. package/dist/features/engine/ratchet.d.ts +1 -0
  464. package/dist/features/engine/ratchet.js +63 -0
  465. package/dist/features/engine/run-enforcer.d.ts +4 -0
  466. package/dist/features/engine/run-enforcer.js +82 -0
  467. package/dist/features/engine/waivers.d.ts +23 -0
  468. package/dist/features/engine/waivers.js +169 -0
  469. package/dist/features/generator/draft.d.ts +7 -0
  470. package/dist/features/generator/draft.js +148 -0
  471. package/dist/features/generator/index.d.ts +22 -0
  472. package/dist/features/generator/index.js +8 -0
  473. package/dist/features/generator/llm-draft.d.ts +3 -0
  474. package/dist/features/generator/llm-draft.js +93 -0
  475. package/dist/features/generator/prompt.d.ts +25 -0
  476. package/dist/features/generator/prompt.js +105 -0
  477. package/dist/features/generator/self-test.d.ts +12 -0
  478. package/dist/features/generator/self-test.js +65 -0
  479. package/dist/features/generator/templates.d.ts +26 -0
  480. package/dist/features/generator/templates.js +177 -0
  481. package/dist/features/integrity/drift.d.ts +19 -0
  482. package/dist/features/integrity/drift.js +168 -0
  483. package/dist/features/integrity/hooks.d.ts +19 -0
  484. package/dist/features/integrity/hooks.js +54 -0
  485. package/dist/features/integrity/index.d.ts +10 -0
  486. package/dist/features/integrity/index.js +14 -0
  487. package/dist/features/integrity/manifest.d.ts +15 -0
  488. package/dist/features/integrity/manifest.js +26 -0
  489. package/dist/features/integrity/self-protection.d.ts +12 -0
  490. package/dist/features/integrity/self-protection.js +144 -0
  491. package/dist/features/llm/attempt.d.ts +17 -0
  492. package/dist/features/llm/attempt.js +99 -0
  493. package/dist/features/llm/errors.d.ts +5 -0
  494. package/dist/features/llm/errors.js +18 -0
  495. package/dist/features/llm/index.d.ts +23 -0
  496. package/dist/features/llm/index.js +46 -0
  497. package/dist/features/llm/presets.d.ts +25 -0
  498. package/dist/features/llm/presets.js +159 -0
  499. package/dist/features/llm/wire.d.ts +17 -0
  500. package/dist/features/llm/wire.js +163 -0
  501. package/dist/features/packs/accept.d.ts +7 -0
  502. package/dist/features/packs/accept.js +73 -0
  503. package/dist/features/packs/enforcers/arch-guards.d.ts +12 -0
  504. package/dist/features/packs/enforcers/arch-guards.js +193 -0
  505. package/dist/features/packs/enforcers/binding.d.ts +31 -0
  506. package/dist/features/packs/enforcers/binding.js +157 -0
  507. package/dist/features/packs/enforcers/ci-guards.d.ts +10 -0
  508. package/dist/features/packs/enforcers/ci-guards.js +131 -0
  509. package/dist/features/packs/enforcers/code-health.d.ts +9 -0
  510. package/dist/features/packs/enforcers/code-health.js +180 -0
  511. package/dist/features/packs/enforcers/code.d.ts +5 -0
  512. package/dist/features/packs/enforcers/code.js +129 -0
  513. package/dist/features/packs/enforcers/command-forbid.d.ts +8 -0
  514. package/dist/features/packs/enforcers/command-forbid.js +61 -0
  515. package/dist/features/packs/enforcers/deps-guards.d.ts +15 -0
  516. package/dist/features/packs/enforcers/deps-guards.js +235 -0
  517. package/dist/features/packs/enforcers/deps-policy-guards.d.ts +9 -0
  518. package/dist/features/packs/enforcers/deps-policy-guards.js +135 -0
  519. package/dist/features/packs/enforcers/docs-guards-measures.d.ts +9 -0
  520. package/dist/features/packs/enforcers/docs-guards-measures.js +117 -0
  521. package/dist/features/packs/enforcers/docs-guards.d.ts +11 -0
  522. package/dist/features/packs/enforcers/docs-guards.js +180 -0
  523. package/dist/features/packs/enforcers/engine-version-guards.d.ts +6 -0
  524. package/dist/features/packs/enforcers/engine-version-guards.js +42 -0
  525. package/dist/features/packs/enforcers/external-attribute.d.ts +18 -0
  526. package/dist/features/packs/enforcers/external-attribute.js +122 -0
  527. package/dist/features/packs/enforcers/external-bind.d.ts +4 -0
  528. package/dist/features/packs/enforcers/external-bind.js +206 -0
  529. package/dist/features/packs/enforcers/external-check.d.ts +7 -0
  530. package/dist/features/packs/enforcers/external-check.js +131 -0
  531. package/dist/features/packs/enforcers/external-output.d.ts +30 -0
  532. package/dist/features/packs/enforcers/external-output.js +144 -0
  533. package/dist/features/packs/enforcers/external-probe.d.ts +4 -0
  534. package/dist/features/packs/enforcers/external-probe.js +65 -0
  535. package/dist/features/packs/enforcers/external-runs.d.ts +33 -0
  536. package/dist/features/packs/enforcers/external-runs.js +162 -0
  537. package/dist/features/packs/enforcers/external-sarif.d.ts +3 -0
  538. package/dist/features/packs/enforcers/external-sarif.js +109 -0
  539. package/dist/features/packs/enforcers/external.d.ts +39 -0
  540. package/dist/features/packs/enforcers/external.js +11 -0
  541. package/dist/features/packs/enforcers/gate-guards.d.ts +11 -0
  542. package/dist/features/packs/enforcers/gate-guards.js +117 -0
  543. package/dist/features/packs/enforcers/health-abstraction.d.ts +5 -0
  544. package/dist/features/packs/enforcers/health-abstraction.js +126 -0
  545. package/dist/features/packs/enforcers/health-duplication.d.ts +5 -0
  546. package/dist/features/packs/enforcers/health-duplication.js +197 -0
  547. package/dist/features/packs/enforcers/health-lex-imports.d.ts +5 -0
  548. package/dist/features/packs/enforcers/health-lex-imports.js +225 -0
  549. package/dist/features/packs/enforcers/health-lex-template.d.ts +10 -0
  550. package/dist/features/packs/enforcers/health-lex-template.js +67 -0
  551. package/dist/features/packs/enforcers/health-lex.d.ts +8 -0
  552. package/dist/features/packs/enforcers/health-lex.js +227 -0
  553. package/dist/features/packs/enforcers/health-markers.d.ts +3 -0
  554. package/dist/features/packs/enforcers/health-markers.js +31 -0
  555. package/dist/features/packs/enforcers/health-measures.d.ts +26 -0
  556. package/dist/features/packs/enforcers/health-measures.js +223 -0
  557. package/dist/features/packs/enforcers/health-refs.d.ts +5 -0
  558. package/dist/features/packs/enforcers/health-refs.js +76 -0
  559. package/dist/features/packs/enforcers/integrity-guards-repo.d.ts +6 -0
  560. package/dist/features/packs/enforcers/integrity-guards-repo.js +189 -0
  561. package/dist/features/packs/enforcers/integrity-guards.d.ts +12 -0
  562. package/dist/features/packs/enforcers/integrity-guards.js +202 -0
  563. package/dist/features/packs/enforcers/jsonkey.d.ts +13 -0
  564. package/dist/features/packs/enforcers/jsonkey.js +95 -0
  565. package/dist/features/packs/enforcers/parametric.d.ts +7 -0
  566. package/dist/features/packs/enforcers/parametric.js +138 -0
  567. package/dist/features/packs/enforcers/pattern.d.ts +11 -0
  568. package/dist/features/packs/enforcers/pattern.js +88 -0
  569. package/dist/features/packs/enforcers/placement.d.ts +10 -0
  570. package/dist/features/packs/enforcers/placement.js +54 -0
  571. package/dist/features/packs/enforcers/py-checks.d.ts +7 -0
  572. package/dist/features/packs/enforcers/py-checks.js +131 -0
  573. package/dist/features/packs/enforcers/py-lex.d.ts +10 -0
  574. package/dist/features/packs/enforcers/py-lex.js +271 -0
  575. package/dist/features/packs/enforcers/py-phantom.d.ts +6 -0
  576. package/dist/features/packs/enforcers/py-phantom.js +163 -0
  577. package/dist/features/packs/enforcers/py-pins.d.ts +16 -0
  578. package/dist/features/packs/enforcers/py-pins.js +184 -0
  579. package/dist/features/packs/enforcers/py-security-patterns.d.ts +18 -0
  580. package/dist/features/packs/enforcers/py-security-patterns.js +70 -0
  581. package/dist/features/packs/enforcers/records-guards.d.ts +12 -0
  582. package/dist/features/packs/enforcers/records-guards.js +178 -0
  583. package/dist/features/packs/enforcers/remediation-guards.d.ts +6 -0
  584. package/dist/features/packs/enforcers/remediation-guards.js +42 -0
  585. package/dist/features/packs/enforcers/required.d.ts +10 -0
  586. package/dist/features/packs/enforcers/required.js +65 -0
  587. package/dist/features/packs/enforcers/secret-scan.d.ts +6 -0
  588. package/dist/features/packs/enforcers/secret-scan.js +173 -0
  589. package/dist/features/packs/enforcers/shell-analyse.d.ts +14 -0
  590. package/dist/features/packs/enforcers/shell-analyse.js +105 -0
  591. package/dist/features/packs/enforcers/sizes.d.ts +10 -0
  592. package/dist/features/packs/enforcers/sizes.js +82 -0
  593. package/dist/features/packs/enforcers/steering-guards.d.ts +11 -0
  594. package/dist/features/packs/enforcers/steering-guards.js +162 -0
  595. package/dist/features/packs/enforcers/testing-guards.d.ts +10 -0
  596. package/dist/features/packs/enforcers/testing-guards.js +118 -0
  597. package/dist/features/packs/enforcers/ts-checks.d.ts +7 -0
  598. package/dist/features/packs/enforcers/ts-checks.js +147 -0
  599. package/dist/features/packs/enforcers/ts-phantom-host.d.ts +11 -0
  600. package/dist/features/packs/enforcers/ts-phantom-host.js +155 -0
  601. package/dist/features/packs/enforcers/ts-phantom.d.ts +6 -0
  602. package/dist/features/packs/enforcers/ts-phantom.js +117 -0
  603. package/dist/features/packs/enforcers/ts-security-patterns.d.ts +18 -0
  604. package/dist/features/packs/enforcers/ts-security-patterns.js +97 -0
  605. package/dist/features/packs/enforcers/workflow-guards.d.ts +10 -0
  606. package/dist/features/packs/enforcers/workflow-guards.js +117 -0
  607. package/dist/features/packs/enforcers/write-confine.d.ts +13 -0
  608. package/dist/features/packs/enforcers/write-confine.js +131 -0
  609. package/dist/features/packs/hashes.d.ts +6 -0
  610. package/dist/features/packs/hashes.js +84 -0
  611. package/dist/features/packs/index.d.ts +22 -0
  612. package/dist/features/packs/index.js +15 -0
  613. package/dist/features/packs/loader.d.ts +13 -0
  614. package/dist/features/packs/loader.js +205 -0
  615. package/dist/features/packs/manifest-decl.d.ts +13 -0
  616. package/dist/features/packs/manifest-decl.js +121 -0
  617. package/dist/features/packs/manifest.d.ts +7 -0
  618. package/dist/features/packs/manifest.js +95 -0
  619. package/dist/features/packs/params.d.ts +2 -0
  620. package/dist/features/packs/params.js +90 -0
  621. package/dist/features/packs/registry.d.ts +11 -0
  622. package/dist/features/packs/registry.js +136 -0
  623. package/dist/features/packs/selftest.d.ts +3 -0
  624. package/dist/features/packs/selftest.js +144 -0
  625. package/dist/features/records/bug-grammar.d.ts +17 -0
  626. package/dist/features/records/bug-grammar.js +128 -0
  627. package/dist/features/records/bug-registry.d.ts +9 -0
  628. package/dist/features/records/bug-registry.js +67 -0
  629. package/dist/features/records/bug-rows-immutable.d.ts +3 -0
  630. package/dist/features/records/bug-rows-immutable.js +52 -0
  631. package/dist/features/records/bugs.d.ts +2 -0
  632. package/dist/features/records/bugs.js +24 -0
  633. package/dist/features/records/docs-lines.d.ts +16 -0
  634. package/dist/features/records/docs-lines.js +36 -0
  635. package/dist/features/records/docs-prose.d.ts +14 -0
  636. package/dist/features/records/docs-prose.js +252 -0
  637. package/dist/features/records/docs-structure.d.ts +17 -0
  638. package/dist/features/records/docs-structure.js +223 -0
  639. package/dist/features/records/docs.d.ts +9 -0
  640. package/dist/features/records/docs.js +238 -0
  641. package/dist/features/records/history-checks.d.ts +6 -0
  642. package/dist/features/records/history-checks.js +94 -0
  643. package/dist/features/records/history-parse.d.ts +16 -0
  644. package/dist/features/records/history-parse.js +101 -0
  645. package/dist/features/records/history-scope.d.ts +5 -0
  646. package/dist/features/records/history-scope.js +86 -0
  647. package/dist/features/records/history.d.ts +3 -0
  648. package/dist/features/records/history.js +5 -0
  649. package/dist/features/records/index.d.ts +8 -0
  650. package/dist/features/records/index.js +11 -0
  651. package/dist/features/remediation/adoption.d.ts +32 -0
  652. package/dist/features/remediation/adoption.js +142 -0
  653. package/dist/features/remediation/index.d.ts +12 -0
  654. package/dist/features/remediation/index.js +21 -0
  655. package/dist/features/remediation/plan-chains.d.ts +3 -0
  656. package/dist/features/remediation/plan-chains.js +111 -0
  657. package/dist/features/remediation/plan-generate.d.ts +3 -0
  658. package/dist/features/remediation/plan-generate.js +129 -0
  659. package/dist/features/remediation/plan-kinds.d.ts +32 -0
  660. package/dist/features/remediation/plan-kinds.js +42 -0
  661. package/dist/features/remediation/plan-markers.d.ts +2 -0
  662. package/dist/features/remediation/plan-markers.js +155 -0
  663. package/dist/features/remediation/plan-merge.d.ts +6 -0
  664. package/dist/features/remediation/plan-merge.js +33 -0
  665. package/dist/features/remediation/plan.d.ts +4 -0
  666. package/dist/features/remediation/plan.js +7 -0
  667. package/dist/features/remediation/step-floor.d.ts +5 -0
  668. package/dist/features/remediation/step-floor.js +76 -0
  669. package/dist/features/remediation/step-gates.d.ts +18 -0
  670. package/dist/features/remediation/step-gates.js +77 -0
  671. package/dist/features/remediation/step-split.d.ts +12 -0
  672. package/dist/features/remediation/step-split.js +75 -0
  673. package/dist/features/remediation/steps.d.ts +3 -0
  674. package/dist/features/remediation/steps.js +6 -0
  675. package/dist/features/remediation/types.d.ts +37 -0
  676. package/dist/features/remediation/types.js +1 -0
  677. package/dist/features/security/index.d.ts +12 -0
  678. package/dist/features/security/index.js +142 -0
  679. package/dist/features/steering/agent-assets.d.ts +7 -0
  680. package/dist/features/steering/agent-assets.js +75 -0
  681. package/dist/features/steering/budgets.d.ts +20 -0
  682. package/dist/features/steering/budgets.js +86 -0
  683. package/dist/features/steering/checks.d.ts +7 -0
  684. package/dist/features/steering/checks.js +67 -0
  685. package/dist/features/steering/context-file.d.ts +11 -0
  686. package/dist/features/steering/context-file.js +107 -0
  687. package/dist/features/steering/graph-scan.d.ts +7 -0
  688. package/dist/features/steering/graph-scan.js +17 -0
  689. package/dist/features/steering/index.d.ts +30 -0
  690. package/dist/features/steering/index.js +45 -0
  691. package/dist/features/steering/injection.d.ts +23 -0
  692. package/dist/features/steering/injection.js +124 -0
  693. package/dist/features/steering/mcp.d.ts +2 -0
  694. package/dist/features/steering/mcp.js +18 -0
  695. package/dist/features/steering/precedence.d.ts +10 -0
  696. package/dist/features/steering/precedence.js +28 -0
  697. package/dist/features/steering/read-cache.d.ts +13 -0
  698. package/dist/features/steering/read-cache.js +51 -0
  699. package/dist/features/testing/base.d.ts +1 -0
  700. package/dist/features/testing/base.js +8 -0
  701. package/dist/features/testing/covers.d.ts +8 -0
  702. package/dist/features/testing/covers.js +50 -0
  703. package/dist/features/testing/evaluate.d.ts +19 -0
  704. package/dist/features/testing/evaluate.js +47 -0
  705. package/dist/features/testing/index.d.ts +10 -0
  706. package/dist/features/testing/index.js +13 -0
  707. package/dist/features/testing/integrity.d.ts +28 -0
  708. package/dist/features/testing/integrity.js +140 -0
  709. package/dist/features/testing/ledger.d.ts +11 -0
  710. package/dist/features/testing/ledger.js +51 -0
  711. package/dist/features/testing/proofs.d.ts +26 -0
  712. package/dist/features/testing/proofs.js +88 -0
  713. package/dist/features/testing/report.d.ts +6 -0
  714. package/dist/features/testing/report.js +16 -0
  715. package/dist/features/testing/scenarios.d.ts +34 -0
  716. package/dist/features/testing/scenarios.js +112 -0
  717. package/dist/features/testing/tap-parser.d.ts +9 -0
  718. package/dist/features/testing/tap-parser.js +96 -0
  719. package/dist/features/testing/trace.d.ts +23 -0
  720. package/dist/features/testing/trace.js +110 -0
  721. package/dist/features/workflow/index.d.ts +14 -0
  722. package/dist/features/workflow/index.js +19 -0
  723. package/dist/features/workflow/loop.d.ts +5 -0
  724. package/dist/features/workflow/loop.js +36 -0
  725. package/dist/features/workflow/phases.d.ts +10 -0
  726. package/dist/features/workflow/phases.js +184 -0
  727. package/dist/features/workflow/review.d.ts +25 -0
  728. package/dist/features/workflow/review.js +119 -0
  729. package/dist/features/workflow/tasks.d.ts +73 -0
  730. package/dist/features/workflow/tasks.js +80 -0
  731. package/dist/features/workflow/writes.d.ts +8 -0
  732. package/dist/features/workflow/writes.js +96 -0
  733. package/dist/kernel/clock.d.ts +4 -0
  734. package/dist/kernel/clock.js +5 -0
  735. package/dist/kernel/config-keys.d.ts +2 -0
  736. package/dist/kernel/config-keys.js +5 -0
  737. package/dist/kernel/config-toml-keys.d.ts +2 -0
  738. package/dist/kernel/config-toml-keys.js +237 -0
  739. package/dist/kernel/config-yaml-keys.d.ts +2 -0
  740. package/dist/kernel/config-yaml-keys.js +177 -0
  741. package/dist/kernel/contracts.d.ts +76 -0
  742. package/dist/kernel/contracts.js +9 -0
  743. package/dist/kernel/entry.d.ts +1 -0
  744. package/dist/kernel/entry.js +31 -0
  745. package/dist/kernel/env.d.ts +4 -0
  746. package/dist/kernel/env.js +5 -0
  747. package/dist/kernel/errors.d.ts +7 -0
  748. package/dist/kernel/errors.js +6 -0
  749. package/dist/kernel/fs-confine.d.ts +14 -0
  750. package/dist/kernel/fs-confine.js +129 -0
  751. package/dist/kernel/fs-errors.d.ts +8 -0
  752. package/dist/kernel/fs-errors.js +37 -0
  753. package/dist/kernel/fs.d.ts +28 -0
  754. package/dist/kernel/fs.js +245 -0
  755. package/dist/kernel/git.d.ts +16 -0
  756. package/dist/kernel/git.js +128 -0
  757. package/dist/kernel/glob.d.ts +1 -0
  758. package/dist/kernel/glob.js +178 -0
  759. package/dist/kernel/hash.d.ts +3 -0
  760. package/dist/kernel/hash.js +12 -0
  761. package/dist/kernel/host.d.ts +3 -0
  762. package/dist/kernel/host.js +48 -0
  763. package/dist/kernel/index.d.ts +115 -0
  764. package/dist/kernel/index.js +33 -0
  765. package/dist/kernel/json.d.ts +4 -0
  766. package/dist/kernel/json.js +68 -0
  767. package/dist/kernel/net-allow.d.ts +8 -0
  768. package/dist/kernel/net-allow.js +45 -0
  769. package/dist/kernel/net-fetch.d.ts +5 -0
  770. package/dist/kernel/net-fetch.js +135 -0
  771. package/dist/kernel/net.d.ts +10 -0
  772. package/dist/kernel/net.js +24 -0
  773. package/dist/kernel/path.d.ts +3 -0
  774. package/dist/kernel/path.js +40 -0
  775. package/dist/kernel/pattern.d.ts +2 -0
  776. package/dist/kernel/pattern.js +150 -0
  777. package/dist/kernel/proc.d.ts +6 -0
  778. package/dist/kernel/proc.js +207 -0
  779. package/dist/kernel/read-cache.d.ts +6 -0
  780. package/dist/kernel/read-cache.js +27 -0
  781. package/dist/kernel/redact.d.ts +1 -0
  782. package/dist/kernel/redact.js +206 -0
  783. package/dist/kernel/repo-root.d.ts +3 -0
  784. package/dist/kernel/repo-root.js +29 -0
  785. package/dist/kernel/result.d.ts +10 -0
  786. package/dist/kernel/result.js +6 -0
  787. package/dist/kernel/schema-helpers.d.ts +11 -0
  788. package/dist/kernel/schema-helpers.js +101 -0
  789. package/dist/kernel/schema.d.ts +2 -0
  790. package/dist/kernel/schema.js +203 -0
  791. package/dist/kernel/secret-paths.d.ts +3 -0
  792. package/dist/kernel/secret-paths.js +70 -0
  793. package/dist/kernel/shell-bypass.d.ts +4 -0
  794. package/dist/kernel/shell-bypass.js +151 -0
  795. package/dist/kernel/shell-cmd.d.ts +6 -0
  796. package/dist/kernel/shell-cmd.js +213 -0
  797. package/dist/kernel/shell-deny-cmd.d.ts +7 -0
  798. package/dist/kernel/shell-deny-cmd.js +35 -0
  799. package/dist/kernel/shell-deny-destroy.d.ts +7 -0
  800. package/dist/kernel/shell-deny-destroy.js +71 -0
  801. package/dist/kernel/shell-deny-escalate.d.ts +7 -0
  802. package/dist/kernel/shell-deny-escalate.js +96 -0
  803. package/dist/kernel/shell-deny-target.d.ts +4 -0
  804. package/dist/kernel/shell-deny-target.js +51 -0
  805. package/dist/kernel/shell-deny.d.ts +8 -0
  806. package/dist/kernel/shell-deny.js +171 -0
  807. package/dist/kernel/shell-scan.d.ts +3 -0
  808. package/dist/kernel/shell-scan.js +226 -0
  809. package/dist/kernel/shell-word.d.ts +15 -0
  810. package/dist/kernel/shell-word.js +216 -0
  811. package/dist/kernel/shell.d.ts +22 -0
  812. package/dist/kernel/shell.js +2 -0
  813. package/dist/kernel/stdin.d.ts +2 -0
  814. package/dist/kernel/stdin.js +59 -0
  815. package/dist/kernel/test-report.d.ts +7 -0
  816. package/dist/kernel/test-report.js +112 -0
  817. package/dist/kernel/version.d.ts +2 -0
  818. package/dist/kernel/version.js +46 -0
  819. package/dist/tsconfig.build.tsbuildinfo +1 -0
  820. package/package.json +19 -11
  821. package/schema/accepted.schema.json +20 -0
  822. package/schema/baseline.schema.json +17 -0
  823. package/schema/capability.schema.json +31 -0
  824. package/schema/cli/error.schema.json +15 -0
  825. package/schema/cli/explain.schema.json +19 -0
  826. package/schema/cli/report.schema.json +15 -0
  827. package/schema/cli/status.schema.json +51 -0
  828. package/schema/cli/verify.schema.json +15 -0
  829. package/schema/config.schema.json +43 -0
  830. package/schema/event-log.schema.json +52 -0
  831. package/schema/hook-decision.schema.json +13 -0
  832. package/schema/hook-event.schema.json +50 -0
  833. package/schema/manifest.schema.json +26 -0
  834. package/schema/pack-draft.schema.json +42 -0
  835. package/schema/pack.schema.json +70 -0
  836. package/schema/registry-snapshot.schema.json +41 -0
  837. package/schema/remediation-plan.schema.json +44 -0
  838. package/schema/review-findings.schema.json +25 -0
  839. package/schema/task-record.schema.json +49 -0
  840. package/schema/waivers.schema.json +29 -0
@@ -0,0 +1,128 @@
1
+ // SPEC §7.7: the bug registry grammar — title line, blank line, the exact
2
+ // header row and one row per defect in id order. Pure over caller-supplied
3
+ // text: base revisions arrive from the Git port at the enforcer layer,
4
+ // never from here.
5
+ import { normalizeText } from "../../kernel/index.js";
6
+ const BUG_HEADER = "| Id | Status | Title | Found | Fix | Regression test |";
7
+ const BUG_SEPARATOR = "|---|---|---|---|---|---|";
8
+ const BUG_ID = /^BUG-(\d{4})$/;
9
+ const FOUND_CELL = /^(\d{4}-\d{2}-\d{2}), (T-\d{4}|none)$/;
10
+ const FIX_CELL = /^(T-\d{4}|none), (.+)$/;
11
+ function splitRow(line) {
12
+ const trimmed = line.trim();
13
+ if (!trimmed.startsWith("|") || !trimmed.endsWith("|")) {
14
+ return undefined;
15
+ }
16
+ const cells = [];
17
+ let current = "";
18
+ let escaped = false;
19
+ for (const char of trimmed.slice(1, -1)) {
20
+ if (escaped) {
21
+ current += char === "|" ? "|" : `\\${char}`;
22
+ escaped = false;
23
+ continue;
24
+ }
25
+ if (char === "\\") {
26
+ escaped = true;
27
+ continue;
28
+ }
29
+ if (char === "|") {
30
+ cells.push(current.trim());
31
+ current = "";
32
+ continue;
33
+ }
34
+ current += char;
35
+ }
36
+ cells.push(current.trim());
37
+ return cells;
38
+ }
39
+ function toStatus(value) {
40
+ if (value === "open" || value === "fixed" || value === "wontfix") {
41
+ return value;
42
+ }
43
+ return undefined;
44
+ }
45
+ // SPEC §7.7: the Bugs file holds its title line, a blank line, exactly the
46
+ // header row and one row per defect in id order.
47
+ export function parseBugFile(text) {
48
+ const errors = [];
49
+ const lines = normalizeText(text).split("\n");
50
+ const title = /^# Bugs — (\d{4})\s*$/.exec(lines[0]?.trim() ?? "");
51
+ if (title === null) {
52
+ return {
53
+ file: undefined,
54
+ errors: ["bug file misses its `# Bugs — <YYYY>` title line"],
55
+ };
56
+ }
57
+ if ((lines[1] ?? "x").trim() !== "") {
58
+ errors.push("bug file misses the blank line after its title");
59
+ }
60
+ if ((lines[2] ?? "").trim() !== BUG_HEADER) {
61
+ errors.push("bug file misses exactly the specified header row");
62
+ }
63
+ if ((lines[3] ?? "").trim() !== BUG_SEPARATOR) {
64
+ errors.push("bug file misses exactly the specified separator row");
65
+ }
66
+ const rows = [];
67
+ for (const line of lines.slice(4)) {
68
+ if (line.trim() === "") {
69
+ continue;
70
+ }
71
+ const cells = splitRow(line);
72
+ if (cells === undefined || cells.length !== 6) {
73
+ errors.push(`bug row outside the six-column grammar: "${line.trim()}"`);
74
+ continue;
75
+ }
76
+ const status = toStatus(cells[1] ?? "");
77
+ if (BUG_ID.exec(cells[0] ?? "") === null) {
78
+ errors.push(`bug id outside BUG-####: "${cells[0] ?? ""}"`);
79
+ continue;
80
+ }
81
+ if (status === undefined) {
82
+ errors.push(`bug status outside open/fixed/wontfix: "${cells[1] ?? ""}"`);
83
+ continue;
84
+ }
85
+ if (!FOUND_CELL.test(cells[3] ?? "")) {
86
+ errors.push(`bug Found cell outside "<YYYY-MM-DD>, <T-#### or none>": "${cells[3] ?? ""}"`);
87
+ continue;
88
+ }
89
+ if (status === "open") {
90
+ if ((cells[4] ?? "") !== "" || (cells[5] ?? "") !== "") {
91
+ errors.push(`open bug row ${cells[0] ?? ""} fills Fix or Regression test`);
92
+ continue;
93
+ }
94
+ }
95
+ else if (status === "fixed") {
96
+ const fix = FIX_CELL.exec(cells[4] ?? "");
97
+ if (fix === null || (fix[2] ?? "").trim() === "") {
98
+ errors.push(`fixed bug row ${cells[0] ?? ""} misses its "<T-#### or none>, <subject>" Fix`);
99
+ continue;
100
+ }
101
+ if ((cells[5] ?? "").trim() === "") {
102
+ errors.push(`fixed bug row ${cells[0] ?? ""} misses its regression test path`);
103
+ continue;
104
+ }
105
+ }
106
+ else if ((cells[4] ?? "").trim().length < 20) {
107
+ errors.push(`wontfix bug row ${cells[0] ?? ""} needs a reason of at least 20 characters`);
108
+ continue;
109
+ }
110
+ rows.push({
111
+ id: cells[0] ?? "",
112
+ status,
113
+ title: cells[2] ?? "",
114
+ found: cells[3] ?? "",
115
+ fix: cells[4] ?? "",
116
+ regressionTest: cells[5] ?? "",
117
+ });
118
+ }
119
+ const ids = rows.map((row) => row.id);
120
+ const sorted = [...ids].sort();
121
+ if (ids.join("\n") !== sorted.join("\n")) {
122
+ errors.push("bug rows outside id order");
123
+ }
124
+ return {
125
+ file: { year: title[1] ?? "", rows },
126
+ errors,
127
+ };
128
+ }
@@ -0,0 +1,9 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ import type { BugRow } from "./bug-grammar.ts";
3
+ export interface TaskRef {
4
+ readonly type: string;
5
+ readonly bug: string | undefined;
6
+ readonly diagnosis: string | undefined;
7
+ }
8
+ export declare function checkBugRegistry(task: TaskRef, rows: ReadonlyArray<BugRow>, regressionExists: (path: string) => boolean, path: string): Array<Finding>;
9
+ export declare function checkDiagnoseBeforeFix(task: TaskRef, path: string): Array<Finding>;
@@ -0,0 +1,67 @@
1
+ // SPEC §4.9.4 core/bug-registry: a fix names an existing row, and after the
2
+ // commit that row is fixed with a regression test whose path exists.
3
+ export function checkBugRegistry(task, rows, regressionExists, path) {
4
+ if (task.type !== "fix") {
5
+ return [];
6
+ }
7
+ if (task.bug === undefined || task.bug === "") {
8
+ return [
9
+ {
10
+ ruleId: "core/bug-registry",
11
+ path,
12
+ message: "fix task names no bug row",
13
+ remediation: `Name the registry row in the history entry Bug field, e.g. Bug: BUG-0001, and fix that row in ${path}.`,
14
+ },
15
+ ];
16
+ }
17
+ const row = rows.find((entry) => entry.id === task.bug);
18
+ if (row === undefined) {
19
+ return [
20
+ {
21
+ ruleId: "core/bug-registry",
22
+ path,
23
+ message: `fix task names unknown bug row ${task.bug}`,
24
+ remediation: `Add the ${task.bug} row to ${path} first, or name the existing row the fix covers.`,
25
+ },
26
+ ];
27
+ }
28
+ if (row.status !== "fixed") {
29
+ return [
30
+ {
31
+ ruleId: "core/bug-registry",
32
+ path,
33
+ message: `fix task row ${task.bug} is ${row.status}, want fixed`,
34
+ remediation: `Move ${task.bug} to fixed in ${path} with its Fix cell and regression test.`,
35
+ },
36
+ ];
37
+ }
38
+ if (row.regressionTest === "" || !regressionExists(row.regressionTest)) {
39
+ return [
40
+ {
41
+ ruleId: "core/bug-registry",
42
+ path,
43
+ message: `fix task row ${task.bug} names a missing regression test`,
44
+ remediation: `Add the regression test for ${task.bug} and name its repo path in ${path}.`,
45
+ },
46
+ ];
47
+ }
48
+ return [];
49
+ }
50
+ // SPEC §4.9.4 core/diagnose-before-fix: a fix task carries diagnosis,
51
+ // reproduction and root cause, in its record.
52
+ export function checkDiagnoseBeforeFix(task, path) {
53
+ if (task.type !== "fix") {
54
+ return [];
55
+ }
56
+ if (task.diagnosis !== undefined && task.diagnosis.trim() !== "") {
57
+ return [];
58
+ }
59
+ return [
60
+ {
61
+ ruleId: "core/diagnose-before-fix",
62
+ path,
63
+ message: "fix task enters implementation without diagnosis",
64
+ remediation: "Record the reproduction and root cause in the task diagnosis before implementing.",
65
+ },
66
+ ];
67
+ }
@@ -0,0 +1,3 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ import type { BugRow } from "./bug-grammar.ts";
3
+ export declare function checkBugRowsImmutable(base: ReadonlyArray<BugRow>, head: ReadonlyArray<BugRow>, path: string): Array<Finding>;
@@ -0,0 +1,52 @@
1
+ export function checkBugRowsImmutable(base, head, path) {
2
+ const findings = [];
3
+ const before = new Map(base.map((row) => [row.id, row]));
4
+ for (const row of head) {
5
+ const prior = before.get(row.id);
6
+ before.delete(row.id);
7
+ if (prior === undefined) {
8
+ if (row.status !== "open") {
9
+ findings.push(immutableFinding(path, `bug row ${row.id} added as ${row.status}, want open`));
10
+ }
11
+ continue;
12
+ }
13
+ if (row.id !== prior.id ||
14
+ row.title !== prior.title ||
15
+ row.found !== prior.found) {
16
+ findings.push(immutableFinding(path, `bug row ${row.id} changes its immutable cells`));
17
+ }
18
+ if (row.status === prior.status) {
19
+ if (row.fix !== prior.fix ||
20
+ row.regressionTest !== prior.regressionTest) {
21
+ findings.push(immutableFinding(path, `bug row ${row.id} changes without a status transition`));
22
+ }
23
+ continue;
24
+ }
25
+ if (prior.status !== "open") {
26
+ findings.push(immutableFinding(path, `bug row ${row.id} moves from ${prior.status}, only open rows transition`));
27
+ continue;
28
+ }
29
+ if (row.status !== "fixed" && row.status !== "wontfix") {
30
+ findings.push(immutableFinding(path, `bug row ${row.id} moves to ${row.status}, want fixed or wontfix`));
31
+ continue;
32
+ }
33
+ if (row.fix.trim() === "") {
34
+ findings.push(immutableFinding(path, `bug row ${row.id} transitions without its Fix cell`));
35
+ }
36
+ if (row.status === "fixed" && row.regressionTest.trim() === "") {
37
+ findings.push(immutableFinding(path, `bug row ${row.id} fixes without its regression test`));
38
+ }
39
+ }
40
+ for (const missing of before.keys()) {
41
+ findings.push(immutableFinding(path, `bug row ${missing} disappears; a recurring defect gets a new row`));
42
+ }
43
+ return findings;
44
+ }
45
+ function immutableFinding(path, message) {
46
+ return {
47
+ ruleId: "core/bug-rows-immutable",
48
+ path,
49
+ message,
50
+ remediation: `Revert the ${path} edit: rows move once from open to fixed or wontfix, filling Fix and the regression test, and never disappear.`,
51
+ };
52
+ }
@@ -0,0 +1,2 @@
1
+ import type { CheckContext, Finding } from "../engine/index.ts";
2
+ export declare function checkBugs(ctx: CheckContext, text: string, baseText?: string): Promise<Array<Finding>>;
@@ -0,0 +1,24 @@
1
+ import { parseBugFile } from "./bug-grammar.js";
2
+ import { checkBugRowsImmutable } from "./bug-rows-immutable.js";
3
+ function bugFileOf(files) {
4
+ return [...files].filter((file) => file.startsWith("docs/BUGS/")).sort()[0];
5
+ }
6
+ // The evaluation-path entry: grammar over the head text, rows-immutable
7
+ // when the base text is supplied.
8
+ export function checkBugs(ctx, text, baseText) {
9
+ const path = bugFileOf(ctx.scope.files) ?? "docs/BUGS/";
10
+ const parsed = parseBugFile(text);
11
+ const findings = parsed.errors.map((message) => ({
12
+ ruleId: "core/bug-registry",
13
+ path,
14
+ message: `bug file grammar: ${message}`,
15
+ remediation: `Write ${path} per the SPEC §7.7 bug grammar: title line, blank line, the exact header, one row per defect in id order.`,
16
+ }));
17
+ if (baseText !== undefined && parsed.file !== undefined) {
18
+ const base = parseBugFile(baseText);
19
+ if (base.file !== undefined) {
20
+ findings.push(...checkBugRowsImmutable(base.file.rows, parsed.file.rows, path));
21
+ }
22
+ }
23
+ return Promise.resolve(findings);
24
+ }
@@ -0,0 +1,16 @@
1
+ export interface DocFile {
2
+ readonly path: string;
3
+ readonly text: string;
4
+ }
5
+ export interface DocLimits {
6
+ readonly maxBytes: number;
7
+ readonly maxLines: number;
8
+ readonly maxH2: number;
9
+ readonly maxFilesPerFolder: number;
10
+ readonly maxSentenceWords: number;
11
+ readonly maxParagraphSentences: number;
12
+ }
13
+ export declare function isTableRow(line: string): boolean;
14
+ export declare function isHeading(line: string): boolean;
15
+ export declare function isLinkOnlyLine(line: string): boolean;
16
+ export declare function stripFences(text: string): string;
@@ -0,0 +1,36 @@
1
+ // SPEC §4.9.2: shared doc line vocabulary — the file/limit types plus
2
+ // the fence and line classifiers every doc check imports. Types and
3
+ // pure functions only; no runtime consts. Never touches the filesystem
4
+ // (SPEC §3.3, §10.3 item 3).
5
+ import { normalizeText } from "../../kernel/index.js";
6
+ export function isTableRow(line) {
7
+ return line.trimStart().startsWith("|");
8
+ }
9
+ export function isHeading(line) {
10
+ return /^#{1,6}\s/.test(line.trimStart());
11
+ }
12
+ export function isLinkOnlyLine(line) {
13
+ const stripped = line.trim();
14
+ if (stripped === "") {
15
+ return false;
16
+ }
17
+ const withoutLinks = stripped.replace(/!?\[.*?\]\(.*?\)/g, "").trim();
18
+ // \x60 keeps the literal backtick out of the class: the pack lexer
19
+ // has no regex awareness, so a backtick would hide later code.
20
+ return withoutLinks.replace(/[*_~\x60|>\s-]/g, "") === "";
21
+ }
22
+ export function stripFences(text) {
23
+ return normalizeText(text)
24
+ .split("\n")
25
+ .filter((_, index, all) => {
26
+ let fenced = false;
27
+ for (let scan = 0; scan < index; scan += 1) {
28
+ if (all[scan]?.trimStart().startsWith("```") === true) {
29
+ fenced = !fenced;
30
+ }
31
+ }
32
+ const line = all[index] ?? "";
33
+ return !fenced && !line.trimStart().startsWith("```");
34
+ })
35
+ .join("\n");
36
+ }
@@ -0,0 +1,14 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ import type { DocFile, DocLimits } from "./docs-lines.ts";
3
+ export declare function wordsOf(sentence: string): Array<string>;
4
+ export declare function splitSentences(paragraph: string): Array<string>;
5
+ export declare function densityParagraphs(text: string): Array<string>;
6
+ export declare function checkDocDensity(files: ReadonlyArray<DocFile>, limits?: DocLimits): Array<Finding>;
7
+ export declare function githubSlug(heading: string): string;
8
+ export interface DocLink {
9
+ readonly target: string;
10
+ readonly anchor: string | undefined;
11
+ readonly line: number;
12
+ }
13
+ export declare function checkDocLinksValid(files: ReadonlyArray<DocFile>, known: ReadonlyMap<string, string>): Array<Finding>;
14
+ export declare function checkDocNoCorpusCounts(files: ReadonlyArray<DocFile>): Array<Finding>;
@@ -0,0 +1,252 @@
1
+ // SPEC §4.9.2: doc prose checks — sentence splitting, density, link
2
+ // validity, corpus counts. All functions are pure over caller-supplied
3
+ // trees; this module never touches the filesystem (SPEC §3.3, §10.3 item 3).
4
+ import { normalizeText } from "../../kernel/index.js";
5
+ import { isHeading, isLinkOnlyLine, isTableRow, stripFences, } from "./docs-lines.js";
6
+ import { DEFAULT_DOC_LIMITS } from "./docs-structure.js";
7
+ const ABBREVIATIONS = new Set([
8
+ "e.g.",
9
+ "i.e.",
10
+ "etc.",
11
+ "vs.",
12
+ "cf.",
13
+ ]);
14
+ // \x60 keeps literal backticks out of the span patterns: the pack lexer
15
+ // blanks template bodies without regex awareness, so a backtick char
16
+ // would hide later code.
17
+ export function wordsOf(sentence) {
18
+ return sentence
19
+ .replace(/\x60[^\x60]*\x60/g, "X")
20
+ .split(/\s+/)
21
+ .filter((token) => /[A-Za-z0-9]/.test(token));
22
+ }
23
+ function shouldSplitAt(masked, index) {
24
+ const char = masked[index] ?? "";
25
+ if (char !== "." && char !== "!" && char !== "?") {
26
+ return false;
27
+ }
28
+ const rest = masked.slice(index + 1);
29
+ if (rest.trim() !== "" && /^[ \t]+([^a-z])/.exec(rest) === null) {
30
+ return false;
31
+ }
32
+ const before = masked
33
+ .slice(0, index + 1)
34
+ .split(/\s+/)
35
+ .pop() ?? "";
36
+ return !ABBREVIATIONS.has(before.toLowerCase());
37
+ }
38
+ // SPEC §4.9.2 core/doc-density: tables, code, headings and link-only lines
39
+ // are excluded; each list item is one paragraph. A sentence ends at . ! ?
40
+ // followed by whitespace and then anything but a lowercase letter, or at the
41
+ // paragraph end; never inside a code span or after the listed abbreviations.
42
+ export function splitSentences(paragraph) {
43
+ const masked = paragraph.replace(/\x60[^\x60]*\x60/g, (span) => "X".repeat(span.length));
44
+ const sentences = [];
45
+ let start = 0;
46
+ const flush = (end) => {
47
+ const piece = paragraph.slice(start, end).trim();
48
+ if (piece !== "") {
49
+ sentences.push(piece);
50
+ }
51
+ start = end;
52
+ };
53
+ for (let index = 0; index < masked.length; index += 1) {
54
+ if (shouldSplitAt(masked, index)) {
55
+ flush(index + 1);
56
+ }
57
+ }
58
+ flush(paragraph.length);
59
+ return sentences;
60
+ }
61
+ export function densityParagraphs(text) {
62
+ const paragraphs = [];
63
+ let current = [];
64
+ const flush = () => {
65
+ if (current.length > 0) {
66
+ paragraphs.push(current.join(" "));
67
+ current = [];
68
+ }
69
+ };
70
+ for (const raw of stripFences(text).split("\n")) {
71
+ const line = raw.trim();
72
+ if (line === "" || isHeading(raw) || isTableRow(raw)) {
73
+ flush();
74
+ continue;
75
+ }
76
+ const noSpans = raw.replace(/\x60[^\x60]*\x60/g, "X").trim();
77
+ if (noSpans !== "" && isLinkOnlyLine(raw)) {
78
+ continue;
79
+ }
80
+ if (/^\s*([-*+]|\d+[.)])\s+/.test(raw)) {
81
+ flush();
82
+ paragraphs.push(raw.trim());
83
+ continue;
84
+ }
85
+ current.push(raw.trim());
86
+ }
87
+ flush();
88
+ return paragraphs.filter((paragraph) => paragraph !== "");
89
+ }
90
+ export function checkDocDensity(files, limits = DEFAULT_DOC_LIMITS) {
91
+ const findings = [];
92
+ for (const file of files) {
93
+ for (const paragraph of densityParagraphs(file.text)) {
94
+ const sentences = splitSentences(paragraph);
95
+ if (sentences.length > limits.maxParagraphSentences) {
96
+ findings.push({
97
+ ruleId: "core/doc-density",
98
+ path: file.path,
99
+ message: `paragraph over the sentence limit in ${file.path}: ${sentences.length} sentences, limit ${limits.maxParagraphSentences}`,
100
+ remediation: `Split the paragraph in ${file.path} under ${limits.maxParagraphSentences} sentences.`,
101
+ });
102
+ }
103
+ for (const sentence of sentences) {
104
+ const count = wordsOf(sentence).length;
105
+ if (count > limits.maxSentenceWords) {
106
+ findings.push({
107
+ ruleId: "core/doc-density",
108
+ path: file.path,
109
+ message: `sentence over the word limit in ${file.path}: ${count} words, limit ${limits.maxSentenceWords}`,
110
+ remediation: `Split the sentence in ${file.path} under ${limits.maxSentenceWords} words.`,
111
+ });
112
+ }
113
+ }
114
+ }
115
+ }
116
+ return findings;
117
+ }
118
+ export function githubSlug(heading) {
119
+ return heading
120
+ .trim()
121
+ .toLowerCase()
122
+ .replace(/\x60[^\x60]*\x60/g, "")
123
+ .replace(/[^\w\s-]/g, "")
124
+ .trim()
125
+ .replace(/\s+/g, "-");
126
+ }
127
+ function editDistance(a, b) {
128
+ const previous = Array.from({ length: b.length + 1 }, (_, index) => index);
129
+ for (let i = 1; i <= a.length; i += 1) {
130
+ let diagonal = previous[0] ?? 0;
131
+ previous[0] = i;
132
+ for (let j = 1; j <= b.length; j += 1) {
133
+ const above = previous[j] ?? 0;
134
+ const left = previous[j - 1] ?? 0;
135
+ previous[j] =
136
+ a[i - 1] === b[j - 1] ? diagonal : Math.min(diagonal, above, left) + 1;
137
+ diagonal = above;
138
+ }
139
+ }
140
+ return previous[b.length] ?? 0;
141
+ }
142
+ function nearestSlug(wanted, slugs) {
143
+ return [...slugs]
144
+ .sort((a, b) => editDistance(wanted, a) - editDistance(wanted, b) || (a < b ? -1 : 1))
145
+ .slice(0, 3)
146
+ .join(", ");
147
+ }
148
+ function headingSlugs(text) {
149
+ const slugs = new Set();
150
+ for (const line of stripFences(text).split("\n")) {
151
+ const match = /^#{1,6}\s+(.+?)\s*$/.exec(line.trim());
152
+ if (match !== null) {
153
+ slugs.add(githubSlug(match[1] ?? ""));
154
+ }
155
+ }
156
+ return slugs;
157
+ }
158
+ function docLinks(text) {
159
+ const links = [];
160
+ normalizeText(text)
161
+ .split("\n")
162
+ .forEach((line, index) => {
163
+ const pattern = /\[.*?\]\(([^)\s]+)\)/g;
164
+ let match = pattern.exec(line);
165
+ while (match !== null) {
166
+ const raw = match[1] ?? "";
167
+ if (!/^(https?|mailto):/.test(raw)) {
168
+ const hash = raw.indexOf("#");
169
+ links.push({
170
+ target: hash < 0 ? raw : raw.slice(0, hash),
171
+ anchor: hash < 0 ? undefined : raw.slice(hash + 1),
172
+ line: index + 1,
173
+ });
174
+ }
175
+ match = pattern.exec(line);
176
+ }
177
+ });
178
+ return links;
179
+ }
180
+ function resolveRelative(from, target) {
181
+ if (target === "") {
182
+ return from;
183
+ }
184
+ const parts = from.split("/").slice(0, -1);
185
+ for (const piece of target.split("/")) {
186
+ if (piece === "." || piece === "") {
187
+ continue;
188
+ }
189
+ if (piece === "..") {
190
+ parts.pop();
191
+ continue;
192
+ }
193
+ parts.push(piece);
194
+ }
195
+ return parts.join("/");
196
+ }
197
+ // SPEC §4.9.2 core/doc-links-valid: every relative link resolves; every
198
+ // anchor matches a GitHub-style heading slug in the target.
199
+ export function checkDocLinksValid(files, known) {
200
+ const findings = [];
201
+ for (const file of files) {
202
+ for (const link of docLinks(file.text)) {
203
+ const resolved = resolveRelative(file.path, link.target);
204
+ const targetText = link.target === "" ? file.text : known.get(resolved);
205
+ if (targetText === undefined) {
206
+ findings.push({
207
+ ruleId: "core/doc-links-valid",
208
+ path: file.path,
209
+ line: link.line,
210
+ message: `link target missing: ${link.target || "(self)"} from ${file.path} resolves to ${resolved}`,
211
+ remediation: `Fix the link in ${file.path} line ${link.line} so it resolves to an existing file.`,
212
+ });
213
+ continue;
214
+ }
215
+ if (link.anchor !== undefined) {
216
+ const slugs = headingSlugs(targetText);
217
+ if (!slugs.has(link.anchor.toLowerCase())) {
218
+ const nearest = nearestSlug(link.anchor.toLowerCase(), slugs);
219
+ findings.push({
220
+ ruleId: "core/doc-links-valid",
221
+ path: file.path,
222
+ line: link.line,
223
+ message: `link anchor missing: #${link.anchor} matches no heading in ${resolved}`,
224
+ remediation: `Change #${link.anchor} to #${nearest.split(", ")[0] ?? ""} in ${file.path} line ${link.line}${nearest === "" ? "" : ` (nearest: ${nearest})`}.`,
225
+ });
226
+ }
227
+ }
228
+ }
229
+ }
230
+ return findings;
231
+ }
232
+ const CORPUS_COUNT = /\b(this|the)\s+(corpus|repository|repos|docs?|spec|prd|folder)\s+(has|contains|holds|consists of)\s+\d+/i;
233
+ // SPEC §4.9.2 core/doc-no-corpus-counts: counts rot, so sentences stating
234
+ // them are banned.
235
+ export function checkDocNoCorpusCounts(files) {
236
+ const findings = [];
237
+ for (const file of files) {
238
+ for (const paragraph of densityParagraphs(file.text)) {
239
+ for (const sentence of splitSentences(paragraph)) {
240
+ if (CORPUS_COUNT.test(sentence)) {
241
+ findings.push({
242
+ ruleId: "core/doc-no-corpus-counts",
243
+ path: file.path,
244
+ message: `corpus count in ${file.path}: "${sentence.slice(0, 80)}"`,
245
+ remediation: `Remove the hardcoded count from ${file.path}; point at the source of truth instead.`,
246
+ });
247
+ }
248
+ }
249
+ }
250
+ }
251
+ return findings;
252
+ }
@@ -0,0 +1,17 @@
1
+ import type { Finding } from "../engine/index.ts";
2
+ import type { DocFile, DocLimits } from "./docs-lines.ts";
3
+ export type { DocFile, DocLimits } from "./docs-lines.ts";
4
+ export { isTableRow } from "./docs-lines.ts";
5
+ export declare const DEFAULT_DOC_LIMITS: DocLimits;
6
+ export interface RouterLeaf {
7
+ readonly name: string;
8
+ readonly text: string;
9
+ }
10
+ export interface RouterTree {
11
+ readonly routerPath: string;
12
+ readonly routerText: string;
13
+ readonly leaves: ReadonlyArray<RouterLeaf>;
14
+ }
15
+ export declare function checkDocRouterLeaf(tree: RouterTree): Array<Finding>;
16
+ export declare function checkDocSize(files: ReadonlyArray<DocFile>, limits?: DocLimits): Array<Finding>;
17
+ export declare function checkDocBreadth(files: ReadonlyArray<DocFile>, filesPerFolder?: Readonly<Record<string, number>>, limits?: DocLimits): Array<Finding>;