guardian-framework 0.1.52 → 0.1.54

package/templates/pi/extensions/goal-loop.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Goal Loop Extension for pi
  *
  * Persistent standing goals with validator-backed judge.
@@ -151,7 +154,10 @@ const BUILTIN_VALIDATORS: Record<string, string> = {
 	integration: ".pi/scripts/validate-integration.sh",
 };
 
-/** Discover custom validators from `.pi/scripts/validate-*.sh` */
+/**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+ Discover custom validators from `.pi/scripts/validate-*.sh` */
 function discoverCustomValidators(cwd: string): Record<string, string> {
 	const scriptsDir = join(cwd, ".pi/scripts");
 	if (!existsSync(scriptsDir)) return {};
@@ -230,15 +236,16 @@ async function runLLMJudge(
 
 	const prompt = `Goal:\n${truncatedGoal}\n${subgoalsBlock}\n\nAgent's most recent response:\n${truncatedResponse}\n\nIs the goal satisfied?`;
 
-	// Check if git diff is accessible (for heuristic judgment)
+	// Use guardian_coordinate to run an LLM-based judgment
 	try {
-		await ctx.shell.execute("git rev-parse --git-dir 2>/dev/null", {});
+		const result = await ctx.tools.execute("guardian_scope", {});
+		// We can't directly call LLM from extension — instead return a heuristic judgment
+		// The LLM judge runs via the agent itself being prompted to self-assess
+		// For now, return continue to let the agent decide
+		return { done: false, reason: "LLM judge requires agent self-assessment turn" };
 	} catch {
-		// Not a git repo — continue anyway
+		return { done: false, reason: "judge unavailable, continuing" };
 	}
-	// The LLM judge runs via the agent itself being prompted to self-assess
-	// For now, return continue to let the agent decide
-	return { done: false, reason: "LLM judge requires agent self-assessment turn" };
 }
 
 function truncate(text: string, limit: number): string {

package/templates/pi/extensions/hooks.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Shell Hooks Extension for pi
  *
  * Declarative shell-script hooks that fire on lifecycle events.

package/templates/pi/extensions/kanban.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Kanban Extension for pi
  *
  * Durable JSON-backed task board for multi-agent collaboration.

package/templates/pi/extensions/plan-mode.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Plan Mode Extension for pi
  *
  * Intercepts mutating tool calls (edit, write_file, create_directory) and queues

package/templates/pi/extensions/project-scaffolder.ts

@@ -20,8 +20,7 @@
  */
 
 import { type ExecSyncOptions, execSync } from "node:child_process";
-import { existsSync, readFileSync, readdirSync } from "node:fs";
-import * as path from "node:path";
+import { existsSync, readdirSync } from "node:fs";
 import { join } from "node:path";
 
 // ── Types ──
@@ -151,19 +150,7 @@ export default function (pi: ExtensionAPI) {
 
 				const lang = String(parsed.lang || parsed.language || "").toLowerCase();
 				const buildTool = String(parsed.buildTool || "").toLowerCase() || undefined;
-
-				// Read groupId from manifest if not passed via CLI (matches guardian CLI behavior)
-				let groupId = String(parsed.groupId || parsed.group || "");
-				if (!groupId) {
-					try {
-						const manifestPath = path.join(ctx.cwd, "guardian-manifest.json");
-						if (fs.existsSync(manifestPath)) {
-							const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
-							groupId = manifest.groupId || "";
-						}
-					} catch { /* ignore malformed manifest */ }
-				}
-				if (!groupId) groupId = "com.example";
+				const groupId = String(parsed.groupId || parsed.group || "com.example");
 				const validators = String(parsed.validators || "ci,tests");
 				const dryRun = parsed.dryRun === true || parsed["dry-run"] === true || parsed.d === true;
 				const force = parsed.force === true || parsed.f === true;

package/templates/pi/extensions/read-only-mode.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Read-Only Mode Extension for pi
  *
  * Hard-enforces a tiny tool allowlist: read, grep, find, ls.

package/templates/pi/extensions/redaction.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Redaction Extension for pi
  *
  * Automatically redacts sensitive data from tool results, terminal output,
@@ -40,6 +43,9 @@ const PATTERNS: Array<{ kind: string; re: RegExp }> = [
 ];
 
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Redact sensitive data from text. Returns the redacted string.
  */
 export function redactSensitive(text: string): string {
@@ -58,6 +64,9 @@ export function redactSensitive(text: string): string {
 }
 
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Count redactions made (for logging/telemetry-free reporting).
  */
 export function countRedactions(text: string): number {

package/templates/pi/extensions/session-persistence.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Session Persistence Extension for pi
  *
  * Provides structured session lifecycle with:

package/templates/pi/extensions/slash-commands.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Slash Commands Extension for pi
  *
  * Intercepts user input starting with `/` and transforms slash commands into

package/templates/pi/extensions/snippets.ts

@@ -1,4 +1,7 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+
  * Snippets Extension for pi
  *
  * Manages reusable prompt fragments (snippets) that can be referenced via
@@ -57,7 +60,10 @@ function normalizeHandle(raw: string): string {
 		.replace(/^-+|-+$/g, "");
 }
 
-/** Expand #handle tokens in text, returning the body with tokens stripped and snippet XML blocks. */
+/**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-05-31
+ Expand #handle tokens in text, returning the body with tokens stripped and snippet XML blocks. */
 function expandSnippetTokens(
 	text: string,
 	snippets: readonly Snippet[],

package/templates/pi/extensions/validation-runner.ts

@@ -1,10 +1,17 @@
 /**
+ * Canonical Reference: .pi/architecture/modules/core-libraries.md
+ * Last Sync: 2026-06-02
+
  * Validation Runner Extension for pi
  *
  * Runs validation scripts as pi tools and commands.
+ * Supports language-specific validators from scripts/languages/{lang}/.
  * See coordinator.ts for guardian_scope and guardian_validate tools.
  */
 
+import * as fs from "node:fs";
+import * as path from "node:path";
+
 type ShellResult = {
 	exitCode: number;
 	stdout: string;
@@ -12,6 +19,7 @@ type ShellResult = {
 };
 
 type ExtensionContext = {
+	cwd: string;
 	ui: { notify(message: string, level?: string): void };
 	shell: { execute(command: string, options?: { signal?: AbortSignal }): Promise<ShellResult> };
 	tools: { execute(name: string, params: Record<string, unknown>): Promise<unknown> };
@@ -41,7 +49,7 @@ type ExtensionAPI = {
 	): void;
 };
 
-const VALIDATORS = {
+const BASE_VALIDATORS: Record<string, string> = {
 	architecture: ".pi/scripts/validate-architecture.sh",
 	canonical: ".pi/scripts/validate-canonical.sh",
 	ci: ".pi/scripts/validate-ci.sh",
@@ -49,34 +57,82 @@ const VALIDATORS = {
 	operations: ".pi/scripts/validate-operations.sh",
 	security: ".pi/scripts/validate-security.sh",
 	tests: ".pi/scripts/validate-tests.sh",
-} as const;
+};
 
-type ValidatorName = keyof typeof VALIDATORS;
+type ValidatorName = string;
 
-function isValidatorName(value: string): value is ValidatorName {
-	return Object.hasOwn(VALIDATORS, value);
+/**
+ * Get the project language from the manifest, if available.
+ */
+function getProjectLanguage(cwd: string): string | null {
+	try {
+		const manifestPath = path.join(cwd, "guardian-manifest.json");
+		if (fs.existsSync(manifestPath)) {
+			const manifest = JSON.parse(fs.readFileSync(manifestPath, "utf-8"));
+			return manifest.language || null;
+		}
+	} catch {
+		// Ignore parse errors
+	}
+	return null;
+}
+
+/**
+ * Discover language-specific validators from scripts/languages/{lang}/ directory.
+ */
+function getLanguageValidators(cwd: string, language: string | null): Record<string, string> {
+	if (!language) return {};
+
+	const langDir = path.join(cwd, `.pi/scripts/languages/${language}`);
+	if (!fs.existsSync(langDir)) return {};
+
+	const validators: Record<string, string> = {};
+	try {
+		const files = fs.readdirSync(langDir);
+		for (const file of files) {
+			if (file.endsWith(".sh")) {
+				const name = file.replace("validate-", "").replace(".sh", "");
+				validators[`${language}:${name}`] = `.pi/scripts/languages/${language}/${file}`;
+			}
+		}
+	} catch {
+		// Ignore read errors
+	}
+	return validators;
 }
 
 export default function (pi: ExtensionAPI) {
-	// Session initialization
+	let language: string | null = null;
+
+	// Session initialization — detect project language
 	pi.on("session_start", async (_event, ctx) => {
-		ctx.ui.notify("Guardian validation runner initialized", "info");
+		language = getProjectLanguage(ctx.cwd);
+		if (language) {
+			ctx.ui.notify(`Guardian validation runner initialized (language: ${language})`, "info");
+		} else {
+			ctx.ui.notify("Guardian validation runner initialized", "info");
+		}
 	});
 
 	// Register validate command — runs scripts directly via shell
 	pi.registerCommand("validate", {
 		description: "Run all or specific validators",
 		handler: async (args, ctx) => {
+			// Build full validator map (base + language-specific)
+			const langValidators = getLanguageValidators(ctx.cwd, language);
+			const allValidators = { ...BASE_VALIDATORS, ...langValidators };
+
 			const validators =
 				args.length > 0
-					? args.filter(isValidatorName)
-					: ["ci", "tests", "operations", "security", "canonical"];
+					? args.filter((v) => Object.hasOwn(allValidators, v))
+					: Object.keys(allValidators);
+
 			ctx.ui.notify(`Running validators: ${validators.join(", ")}`, "info");
 
 			const results: Record<string, { passed: boolean; output: string }> = {};
 
 			for (const validator of validators) {
-				const scriptPath = VALIDATORS[validator];
+				const scriptPath = allValidators[validator];
 				try {
 					const result = await ctx.shell.execute(`bash ${scriptPath}`);
 					results[validator] = {

package/templates/pi/preflight_report.json

@@ -1,5 +1,5 @@
 {
-  "timestamp": "2026-07-04T14:56:34Z",
+  "timestamp": "2026-07-08T11:39:04Z",
   "mode": "all",
   "stages_run": [],
   "summary": {

package/templates/pi/validators/default.toml

@@ -178,6 +178,17 @@ keep_lines_matching = ["FAILED", "error", "timeout", "connection refused", "asse
 max_lines = 80
 on_empty = "✅ All integration tests passed"
 
+# ── Ubiquitous Language Validator ────────────────────────────────────────────
+
+[filters.ubiquitous-language]
+command = "validate-ubiquitous-language"
+description = "Detect code drift from .pi/domain/ubiquitous-language.md glossary"
+# Run: bash .pi/scripts/validate-ubiquitous-language.sh [src_dir]
+strip_ansi = false
+keep_lines_matching = ["❌ FAIL", "⚠️  WARN", "Drift:", "alias", "canonical", "Variation"]
+max_lines = 80
+on_empty = "✅ No drift detected"
+
 # ── Git Status Validator ────────────────────────────────────────────────────
 
 [filters.git-status]
@@ -199,11 +210,3 @@ strip_ansi = true
 head_lines = 1
 truncate_lines_at = 120
 max_lines = 30
-
-# ── Ubiquitous Language Validator ────────────────────────────────────────────
-
-[filters.ubiquitous-language]
-command = "validate-ubiquitous-language"
-description = "Detect code drift from .pi/domain/ubiquitous-language.md glossary"
-strip_ansi = false
-keep_lines_matching = ["FAIL", "WARN", "Drift:", "alias", "canonical"]