javi-forge 1.15.1 → 1.16.0

package/dist/cli/dispatch/ci.js

@@ -50,7 +50,8 @@ export async function handleCi(cli, ctx) {
                 if (gates.length > 0) {
                     console.log(`  ${gates.length} gate(s):`);
                     for (const gate of gates) {
-                        console.log(`    - ${gate.id} (${gate.mode}, scope: ${gate.scope})`);
+                        const image = gate.image !== undefined ? `, image: ${gate.image}` : "";
+                        console.log(`    - ${gate.id} (${gate.mode}, scope: ${gate.scope}${image})`);
                     }
                 }
             }

package/dist/commands/ci-validate.d.ts

@@ -17,6 +17,8 @@ export interface CIValidateGateSummary {
     id: string;
     mode: string;
     scope: string;
+    /** Container image ref, present ONLY when the gate declares one. */
+    image?: string;
 }
 export interface CIValidateOk {
     ok: true;

package/dist/commands/ci-validate.js

@@ -59,6 +59,9 @@ export async function validateCIConfig(projectDir, config) {
                 id: g.id,
                 mode: g.mode,
                 scope: g.scope,
+                // Surface `image` ONLY when declared, so an image-less gate summary
+                // stays byte-identical to today (no `image` key).
+                ...(g.image !== undefined ? { image: g.image } : {}),
             })),
         };
     }

package/dist/lib/ci-config.d.ts

@@ -60,6 +60,13 @@ export interface CIGateConfig {
     baseline?: string;
     /** Optional env injected via the child-process env map (slice 4). */
     env?: Record<string, string>;
+    /**
+     * Optional container image ref (containerized-gates). A plain,
+     * digest-pinnable image ref; when present the gate runs inside this image
+     * instead of host-native. Omitted → host-native (unchanged). Execution
+     * routing lands in a later slice; this slice validates the schema only.
+     */
+    image?: string;
     /**
      * Optional per-command wall-clock timeout in seconds (GATE-2). When set, a
      * command exceeding it is killed and the gate FAILS (non-zero). Omitted →

package/dist/lib/ci-config.js

@@ -221,6 +221,7 @@ const GATE_FIELDS = new Set([
     "scope",
     "baseline",
     "env",
+    "image",
     "timeout",
 ]);
 function validateGate(raw, index, errors) {
@@ -318,6 +319,28 @@ function validateGate(raw, index, errors) {
             env = raw.env;
         }
     }
+    let image;
+    if (raw.image !== undefined) {
+        if (typeof raw.image !== "string" || !raw.image.trim()) {
+            errors.push({
+                path: `${base}.image`,
+                message: "image must be a non-empty string",
+            });
+        }
+        else if (raw.image.trim().startsWith("-")) {
+            // Harden against docker-flag injection: an image ref like "--privileged"
+            // or "-v /:/host" would be parsed by `docker run` as a FLAG, not an
+            // image argument, if it reached argv. Reject leading-dash refs at
+            // validation with a named error (JDB-004).
+            errors.push({
+                path: `${base}.image`,
+                message: "image must not start with '-' (would be parsed as a docker flag)",
+            });
+        }
+        else {
+            image = raw.image;
+        }
+    }
     let timeout;
     if (raw.timeout !== undefined) {
         if (typeof raw.timeout !== "number" ||
@@ -339,6 +362,7 @@ function validateGate(raw, index, errors) {
         scope,
         baseline,
         env,
+        image,
         timeout,
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "javi-forge",
-	"version": "1.15.1",
+	"version": "1.16.0",
 	"description": "Project scaffolding and AI-ready CI bootstrap",
 	"type": "module",
 	"bin": {