popeye-cli 1.10.0 → 2.1.0

package/dist/pipeline/bridges/review-bridge.js

@@ -0,0 +1,266 @@
+/**
+ * Review Bridge — connects /review (rich audit-mode scanner) to the pipeline
+ * artifact + CR system when a project is pipeline-managed.
+ *
+ * When pipeline state exists, /review produces pipeline-native audit_report
+ * artifacts and Change Requests instead of injecting recovery milestones
+ * into state.json. This keeps the pipeline as the single source of truth.
+ */
+import { randomUUID } from 'node:crypto';
+import { createArtifactManager } from '../artifact-manager.js';
+import { buildChangeRequest, formatChangeRequest, routeChangeRequest } from '../change-request.js';
+import { generateRepoSnapshot, createSnapshotArtifact } from '../repo-snapshot.js';
+import { scanProject } from '../../workflow/audit-scanner.js';
+import { analyzeProject, calculateAuditScores } from '../../workflow/audit-analyzer.js';
+import { buildSummaryReport, buildAuditReport } from '../../workflow/audit-reporter.js';
+import { loadProject, updateState } from '../../state/index.js';
+// ─── Pipeline Detection ──────────────────────────────────
+/**
+ * Check if a project is pipeline-managed.
+ * A project is pipeline-managed if its state has a pipeline object
+ * with a pipelinePhase field.
+ *
+ * @param state - The project state to check
+ * @returns True if pipeline-managed
+ */
+export function isPipelineManaged(state) {
+    const pipeline = state.pipeline;
+    return !!pipeline?.pipelinePhase;
+}
+/**
+ * Extract pipeline state from project state.
+ *
+ * @param state - The project state
+ * @returns Pipeline state or undefined
+ */
+export function extractPipelineState(state) {
+    return state.pipeline;
+}
+// ─── Severity Mapping ────────────────────────────────────
+/** Map workflow audit severity to pipeline severity */
+const SEVERITY_MAP = {
+    critical: 'P0',
+    major: 'P1',
+    minor: 'P2',
+    info: 'P3',
+};
+export function mapSeverity(severity) {
+    return SEVERITY_MAP[severity];
+}
+const CATEGORY_MAP = {
+    'feature-completeness': 'integration',
+    'integration-wiring': 'integration',
+    'test-coverage': 'tests',
+    'config-deployment': 'config',
+    'dependency-sanity': 'deployment',
+    'consistency': 'schema',
+    'security': 'security',
+    'documentation': 'deployment',
+};
+export function mapCategory(category) {
+    return CATEGORY_MAP[category];
+}
+// ─── CR Routing ──────────────────────────────────────────
+/** Determine CR change_type from pipeline audit category */
+const CATEGORY_TO_CHANGE_TYPE = {
+    integration: 'architecture',
+    schema: 'architecture',
+    security: 'requirement',
+    tests: 'config',
+    config: 'config',
+    deployment: 'config',
+};
+export function categoryToChangeType(category) {
+    return CATEGORY_TO_CHANGE_TYPE[category];
+}
+// ─── Finding Conversion ──────────────────────────────────
+/**
+ * Convert a workflow AuditFinding to a pipeline AuditFinding.
+ *
+ * @param finding - Workflow finding
+ * @param snapshotRef - Pipeline artifact ref for the repo snapshot
+ * @returns Pipeline-native audit finding
+ */
+export function convertFinding(finding, snapshotRef) {
+    const severity = mapSeverity(finding.severity);
+    return {
+        id: finding.id,
+        severity,
+        category: mapCategory(finding.category),
+        description: `${finding.title}: ${finding.description}`,
+        evidence: [snapshotRef],
+        file_path: finding.evidence[0]?.file,
+        line_number: finding.evidence[0]?.line,
+        suggested_owner: 'AUDITOR',
+        blocking: severity === 'P0' || severity === 'P1',
+    };
+}
+// ─── Bridge Orchestrator ─────────────────────────────────
+/**
+ * Run /review through the pipeline bridge.
+ * Uses the rich audit-mode scanner but writes results as pipeline artifacts
+ * and creates Change Requests for blocking findings.
+ *
+ * Does NOT inject recovery milestones — the pipeline RECOVERY_LOOP handles fixes.
+ *
+ * @param options - Bridge options
+ * @returns Bridge result with counts and score
+ */
+export async function runReviewBridge(options) {
+    const { projectDir, onProgress } = options;
+    const depth = options.depth ?? 2;
+    const strict = options.strict ?? false;
+    try {
+        // 1. Load state and extract pipeline
+        const state = await loadProject(projectDir);
+        const pipeline = extractPipelineState(state);
+        if (!pipeline) {
+            return { success: false, findingsCount: 0, changeRequestCount: 0, overallScore: 0, recommendation: 'error', artifactsCreated: 0, error: 'No pipeline state found' };
+        }
+        const artifactManager = createArtifactManager(projectDir);
+        artifactManager.ensureDocsStructure();
+        const artifacts = [];
+        // 2. Generate fresh repo snapshot (pipeline anchor)
+        onProgress?.('bridge', 'Generating repo snapshot...');
+        const snapshot = await generateRepoSnapshot(projectDir);
+        const snapshotEntry = createSnapshotArtifact(snapshot, artifactManager, 'AUDIT');
+        artifacts.push(snapshotEntry);
+        pipeline.latestRepoSnapshot = artifactManager.toArtifactRef(snapshotEntry);
+        const snapshotRef = artifactManager.toArtifactRef(snapshotEntry);
+        // 3. Run rich audit-mode scanner (Stage 1: Scan)
+        onProgress?.('bridge', 'Running project scan...');
+        const scan = await scanProject(projectDir, state.language, (msg) => onProgress?.('bridge-scan', msg));
+        const summary = buildSummaryReport(scan, state);
+        onProgress?.('bridge', `Scan complete: ${scan.totalSourceFiles} source files, ${scan.totalLinesOfCode} LOC`);
+        // 4. Run AI analysis (Stage 2: Analyze)
+        onProgress?.('bridge', 'Running AI analysis...');
+        const { findings: workflowFindings, searchMetadata } = await analyzeProject(scan, state, {
+            depth,
+            strict,
+            projectDir,
+        });
+        const scores = calculateAuditScores(workflowFindings, scan);
+        const auditReport = buildAuditReport(summary, workflowFindings, scores, searchMetadata, { strict }, randomUUID());
+        onProgress?.('bridge', `Analysis complete: score ${scores.overallScore}%, ${workflowFindings.length} findings`);
+        // 5. Convert findings to pipeline format
+        const pipelineFindings = workflowFindings.map((f) => convertFinding(f, snapshotRef));
+        // 6. Build pipeline audit report and store as artifact
+        const pipelineAuditReport = {
+            audit_id: `audit-${randomUUID().split('-')[0]}`,
+            timestamp: new Date().toISOString(),
+            repo_snapshot: snapshotRef,
+            overall_status: (auditReport.recommendation === 'pass' ? 'PASS' : 'FAIL'),
+            findings: pipelineFindings,
+            system_risk_score: 100 - scores.overallScore,
+            recovery_required: auditReport.recommendation === 'major-rework',
+        };
+        const auditJsonEntry = artifactManager.createAndStoreJson('audit_report', pipelineAuditReport, 'AUDIT');
+        artifacts.push(auditJsonEntry);
+        // Store raw text report too
+        const textReport = formatAuditSummary(pipelineFindings, scores.overallScore, auditReport.recommendation);
+        const auditTextEntry = artifactManager.createAndStoreText('audit_report', textReport, 'AUDIT');
+        artifacts.push(auditTextEntry);
+        // 7. Create Change Requests for blocking findings
+        const changeRequests = [];
+        const blockingFindings = pipelineFindings.filter((f) => f.blocking);
+        if (blockingFindings.length > 0) {
+            // Group by category for targeted CRs
+            const byCategory = new Map();
+            for (const f of blockingFindings) {
+                const group = byCategory.get(f.category) ?? [];
+                group.push(f);
+                byCategory.set(f.category, group);
+            }
+            for (const [category, findings] of byCategory) {
+                const changeType = categoryToChangeType(category);
+                const cr = buildChangeRequest({
+                    originPhase: 'AUDIT',
+                    requestedBy: 'AUDITOR',
+                    changeType,
+                    description: `${findings.length} blocking ${category} finding(s): ${findings.map((f) => f.description.slice(0, 80)).join('; ')}`,
+                    justification: 'Blocking audit findings from /review require pipeline resolution',
+                    affectedArtifacts: [snapshotRef],
+                    affectedPhases: getAffectedPhases(category),
+                    riskLevel: findings.some((f) => f.severity === 'P0') ? 'high' : 'medium',
+                });
+                changeRequests.push(cr);
+                // Store CR as artifact
+                const crEntry = artifactManager.createAndStoreText('change_request', formatChangeRequest(cr), 'AUDIT');
+                artifacts.push(crEntry);
+                // Register in pipeline state for orchestrator routing
+                if (!pipeline.pendingChangeRequests) {
+                    pipeline.pendingChangeRequests = [];
+                }
+                pipeline.pendingChangeRequests.push({
+                    cr_id: cr.cr_id,
+                    change_type: cr.change_type,
+                    target_phase: routeChangeRequest(cr),
+                    status: 'proposed',
+                });
+            }
+        }
+        // 8. Persist pipeline state
+        pipeline.artifacts.push(...artifacts);
+        // Update INDEX.md
+        artifactManager.updateIndex(pipeline.artifacts);
+        // Save updated state (pipeline object is a reference on state)
+        await updateState(projectDir, {
+            auditReportPath: auditJsonEntry.path,
+            auditLastRunAt: new Date().toISOString(),
+            auditRunId: pipelineAuditReport.audit_id,
+        });
+        onProgress?.('bridge', `Bridge complete: ${artifacts.length} artifacts, ${changeRequests.length} CRs created`);
+        return {
+            success: true,
+            findingsCount: pipelineFindings.length,
+            changeRequestCount: changeRequests.length,
+            overallScore: scores.overallScore,
+            recommendation: auditReport.recommendation,
+            artifactsCreated: artifacts.length,
+        };
+    }
+    catch (err) {
+        const error = err instanceof Error ? err.message : 'Unknown error';
+        return { success: false, findingsCount: 0, changeRequestCount: 0, overallScore: 0, recommendation: 'error', artifactsCreated: 0, error };
+    }
+}
+// ─── Helpers ─────────────────────────────────────────────
+/** Get affected phases for a finding category */
+function getAffectedPhases(category) {
+    switch (category) {
+        case 'integration':
+        case 'schema':
+            return ['CONSENSUS_ARCHITECTURE', 'IMPLEMENTATION'];
+        case 'security':
+            return ['CONSENSUS_MASTER_PLAN', 'IMPLEMENTATION'];
+        case 'tests':
+            return ['QA_VALIDATION'];
+        case 'config':
+        case 'deployment':
+            return ['IMPLEMENTATION', 'PRODUCTION_GATE'];
+    }
+}
+/** Format a text summary of pipeline audit findings */
+function formatAuditSummary(findings, score, recommendation) {
+    const lines = [
+        '# Pipeline Audit Report (via /review bridge)',
+        '',
+        `**Score:** ${score}%`,
+        `**Recommendation:** ${recommendation}`,
+        `**Findings:** ${findings.length}`,
+        `**Blocking:** ${findings.filter((f) => f.blocking).length}`,
+        '',
+        '## Findings',
+        '',
+    ];
+    for (const f of findings) {
+        lines.push(`### [${f.severity}] ${f.description.slice(0, 120)}`);
+        lines.push(`- Category: ${f.category}`);
+        lines.push(`- Blocking: ${f.blocking ? 'Yes' : 'No'}`);
+        if (f.file_path)
+            lines.push(`- File: ${f.file_path}${f.line_number ? `:${f.line_number}` : ''}`);
+        lines.push('');
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=review-bridge.js.map

package/dist/pipeline/bridges/review-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-bridge.js","sourceRoot":"","sources":["../../../src/pipeline/bridges/review-bridge.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAWzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACnG,OAAO,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACxF,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAqBhE,4DAA4D;AAE5D;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAmB;IACnD,MAAM,QAAQ,GAAI,KAAiD,CAAC,QAAQ,CAAC;IAC7E,OAAO,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC;AACnC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAmB;IACtD,OAAQ,KAAiD,CAAC,QAAQ,CAAC;AACrE,CAAC;AAED,4DAA4D;AAE5D,uDAAuD;AACvD,MAAM,YAAY,GAA+C;IAC/D,QAAQ,EAAE,IAAI;IACd,KAAK,EAAE,IAAI;IACX,KAAK,EAAE,IAAI;IACX,IAAI,EAAE,IAAI;CACX,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,QAA0B;IACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAOD,MAAM,YAAY,GAA+C;IAC/D,sBAAsB,EAAE,aAAa;IACrC,oBAAoB,EAAE,aAAa;IACnC,eAAe,EAAE,OAAO;IACxB,mBAAmB,EAAE,QAAQ;IAC7B,mBAAmB,EAAE,YAAY;IACjC,aAAa,EAAE,QAAQ;IACvB,UAAU,EAAE,UAAU;IACtB,eAAe,EAAE,YAAY;CAC9B,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,QAA0B;IACpD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;AAChC,CAAC;AAED,4DAA4D;AAE5D,4DAA4D;AAC5D,MAAM,uBAAuB,GAA2D;IACtF,WAAW,EAAE,cAAc;IAC3B,MAAM,EAAE,cAAc;IACtB,QAAQ,EAAE,aAAa;IACvB,KAAK,EAAE,QAAQ;IACf,MAAM,EAAE,QAAQ;IAChB,UAAU,EAAE,QAAQ;CACrB,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,QAA0B;IAC7D,OAAO,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAC3C,CAAC;AAED,4DAA4D;AAE5D;;;;;;GAMG;AACH,MAAM,UAAU,cAAc,CAC5B,OAA6B,EAC7B,WAAwB;IAExB,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO;QACL,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,QAAQ;QACR,QAAQ,EAAE,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC;QACvC,WAAW,EAAE,GAAG,OAAO,CAAC,KAAK,KAAK,OAAO,CAAC,WAAW,EAAE;QACvD,QAAQ,EAAE,CAAC,WAAW,CAAC;QACvB,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI;QACpC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI;QACtC,eAAe,EAAE,SAAS;QAC1B,QAAQ,EAAE,QAAQ,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI;KACjD,CAAC;AACJ,CAAC;AAED,4DAA4D;AAE5D;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAA4B;IAChE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;IAEvC,IAAI,CAAC;QACH,qCAAqC;QACrC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC;QACtK,CAAC;QAED,MAAM,eAAe,GAAG,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAC1D,eAAe,CAAC,mBAAmB,EAAE,CAAC;QACtC,MAAM,SAAS,GAAoB,EAAE,CAAC;QAEtC,oDAAoD;QACpD,UAAU,EAAE,CAAC,QAAQ,EAAE,6BAA6B,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,UAAU,CAAC,CAAC;QACxD,MAAM,aAAa,GAAG,sBAAsB,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,CAAC;QACjF,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC9B,QAAQ,CAAC,kBAAkB,GAAG,eAAe,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,eAAe,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC;QAEjE,iDAAiD;QACjD,UAAU,EAAE,CAAC,QAAQ,EAAE,yBAAyB,CAAC,CAAC;QAClD,MAAM,IAAI,GAAG,MAAM,WAAW,CAC5B,UAAU,EACV,KAAK,CAAC,QAAQ,EACd,CAAC,GAAG,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE,GAAG,CAAC,CAC1C,CAAC;QACF,MAAM,OAAO,GAAG,kBAAkB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAEhD,UAAU,EAAE,CACV,QAAQ,EACR,kBAAkB,IAAI,CAAC,gBAAgB,kBAAkB,IAAI,CAAC,gBAAgB,MAAM,CACrF,CAAC;QAEF,wCAAwC;QACxC,UAAU,EAAE,CAAC,QAAQ,EAAE,wBAAwB,CAAC,CAAC;QACjD,MAAM,EAAE,QAAQ,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,KAAK,EAAE;YACvF,KAAK;YACL,MAAM;YACN,UAAU;SACX,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,oBAAoB,CAAC,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC5D,MAAM,WAAW,GAAG,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QAElH,UAAU,EAAE,CACV,QAAQ,EACR,4BAA4B,MAAM,CAAC,YAAY,MAAM,gBAAgB,CAAC,MAAM,WAAW,CACxF,CAAC;QAEF,yCAAyC;QACzC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;QAErF,uDAAuD;QACvD,MAAM,mBAAmB,GAAG;YAC1B,QAAQ,EAAE,SAAS,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;YAC/C,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,aAAa,EAAE,WAAW;YAC1B,cAAc,EAAE,CAAC,WAAW,CAAC,cAAc,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAoB;YAC5F,QAAQ,EAAE,gBAAgB;YAC1B,iBAAiB,EAAE,GAAG,GAAG,MAAM,CAAC,YAAY;YAC5C,iBAAiB,EAAE,WAAW,CAAC,cAAc,KAAK,cAAc;SACjE,CAAC;QAEF,MAAM,cAAc,GAAG,eAAe,CAAC,kBAAkB,CACvD,cAAc,EACd,mBAAmB,EACnB,OAAO,CACR,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE/B,4BAA4B;QAC5B,MAAM,UAAU,GAAG,kBAAkB,CAAC,gBAAgB,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,CAAC,cAAc,CAAC,CAAC;QACzG,MAAM,cAAc,GAAG,eAAe,CAAC,kBAAkB,CACvD,cAAc,EACd,UAAU,EACV,OAAO,CACR,CAAC;QACF,SAAS,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAE/B,kDAAkD;QAClD,MAAM,cAAc,GAAoB,EAAE,CAAC;QAC3C,MAAM,gBAAgB,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;QAEpE,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,qCAAqC;YACrC,MAAM,UAAU,GAAG,IAAI,GAAG,EAAmC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAC/C,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBACd,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAED,KAAK,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC9C,MAAM,UAAU,GAAG,oBAAoB,CAAC,QAA4B,CAAC,CAAC;gBACtE,MAAM,EAAE,GAAG,kBAAkB,CAAC;oBAC5B,WAAW,EAAE,OAAO;oBACpB,WAAW,EAAE,SAAS;oBACtB,UAAU;oBACV,WAAW,EAAE,GAAG,QAAQ,CAAC,MAAM,aAAa,QAAQ,gBAAgB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;oBAChI,aAAa,EAAE,kEAAkE;oBACjF,iBAAiB,EAAE,CAAC,WAAW,CAAC;oBAChC,cAAc,EAAE,iBAAiB,CAAC,QAA4B,CAAC;oBAC/D,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ;iBACzE,CAAC,CAAC;gBACH,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAExB,uBAAuB;gBACvB,MAAM,OAAO,GAAG,eAAe,CAAC,kBAAkB,CAChD,gBAAgB,EAChB,mBAAmB,CAAC,EAAE,CAAC,EACvB,OAAO,CACR,CAAC;gBACF,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAExB,sDAAsD;gBACtD,IAAI,CAAC,QAAQ,CAAC,qBAAqB,EAAE,CAAC;oBACpC,QAAQ,CAAC,qBAAqB,GAAG,EAAE,CAAC;gBACtC,CAAC;gBACD,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC;oBAClC,KAAK,EAAE,EAAE,CAAC,KAAK;oBACf,WAAW,EAAE,EAAE,CAAC,WAAW;oBAC3B,YAAY,EAAE,kBAAkB,CAAC,EAAE,CAAC;oBACpC,MAAM,EAAE,UAAU;iBACnB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,CAAC;QAEtC,kBAAkB;QAClB,eAAe,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEhD,+DAA+D;QAC/D,MAAM,WAAW,CAAC,UAAU,EAAE;YAC5B,eAAe,EAAE,cAAc,CAAC,IAAI;YACpC,cAAc,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACxC,UAAU,EAAE,mBAAmB,CAAC,QAAQ;SAChB,CAAC,CAAC;QAE5B,UAAU,EAAE,CACV,QAAQ,EACR,oBAAoB,SAAS,CAAC,MAAM,eAAe,cAAc,CAAC,MAAM,cAAc,CACvF,CAAC;QAEF,OAAO;YACL,OAAO,EAAE,IAAI;YACb,aAAa,EAAE,gBAAgB,CAAC,MAAM;YACtC,kBAAkB,EAAE,cAAc,CAAC,MAAM;YACzC,YAAY,EAAE,MAAM,CAAC,YAAY;YACjC,cAAc,EAAE,WAAW,CAAC,cAAc;YAC1C,gBAAgB,EAAE,SAAS,CAAC,MAAM;SACnC,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;QACnE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC,EAAE,YAAY,EAAE,CAAC,EAAE,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IAC3I,CAAC;AACH,CAAC;AAED,4DAA4D;AAE5D,iDAAiD;AACjD,SAAS,iBAAiB,CAAC,QAA0B;IACnD,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,aAAa,CAAC;QACnB,KAAK,QAAQ;YACX,OAAO,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,CAAC;QACtD,KAAK,UAAU;YACb,OAAO,CAAC,uBAAuB,EAAE,gBAAgB,CAAC,CAAC;QACrD,KAAK,OAAO;YACV,OAAO,CAAC,eAAe,CAAC,CAAC;QAC3B,KAAK,QAAQ,CAAC;QACd,KAAK,YAAY;YACf,OAAO,CAAC,gBAAgB,EAAE,iBAAiB,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,kBAAkB,CACzB,QAAgC,EAChC,KAAa,EACb,cAAsB;IAEtB,MAAM,KAAK,GAAG;QACZ,8CAA8C;QAC9C,EAAE;QACF,cAAc,KAAK,GAAG;QACtB,uBAAuB,cAAc,EAAE;QACvC,iBAAiB,QAAQ,CAAC,MAAM,EAAE;QAClC,iBAAiB,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE;QAC5D,EAAE;QACF,aAAa;QACb,EAAE;KACH,CAAC;IAEF,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/pipeline/change-request.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Change Request mechanism — structured change tracking for mid-pipeline modifications.
+ * CRs are created when drift is detected (REVIEW) or architectural issues found (AUDIT).
+ * Each CR routes to the appropriate consensus phase for approval.
+ */
+import type { PipelinePhase, PipelineRole, ArtifactRef, ChangeRequest } from './types.js';
+export interface BuildChangeRequestArgs {
+    originPhase: PipelinePhase;
+    requestedBy: PipelineRole;
+    changeType: ChangeRequest['change_type'];
+    description: string;
+    justification: string;
+    affectedArtifacts: ArtifactRef[];
+    affectedPhases: PipelinePhase[];
+    riskLevel: 'low' | 'medium' | 'high';
+}
+/**
+ * Build a change request with generated ID and timestamp.
+ *
+ * Args:
+ *   args: Change request parameters.
+ *
+ * Returns:
+ *   A fully formed ChangeRequest in 'proposed' status.
+ */
+export declare function buildChangeRequest(args: BuildChangeRequestArgs): ChangeRequest;
+/**
+ * Determine which consensus phase should review a change request.
+ *
+ * Args:
+ *   cr: The change request to route.
+ *
+ * Returns:
+ *   The pipeline phase that should handle the CR approval.
+ */
+export declare function routeChangeRequest(cr: ChangeRequest): PipelinePhase;
+/**
+ * Format a change request as markdown for inclusion in artifacts.
+ *
+ * Args:
+ *   cr: The change request to format.
+ *
+ * Returns:
+ *   Markdown-formatted string.
+ */
+export declare function formatChangeRequest(cr: ChangeRequest): string;
+//# sourceMappingURL=change-request.d.ts.map

package/dist/pipeline/change-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-request.d.ts","sourceRoot":"","sources":["../../src/pipeline/change-request.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EACV,aAAa,EACb,YAAY,EACZ,WAAW,EACX,aAAa,EACd,MAAM,YAAY,CAAC;AAIpB,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,aAAa,CAAC;IAC3B,WAAW,EAAE,YAAY,CAAC;IAC1B,UAAU,EAAE,aAAa,CAAC,aAAa,CAAC,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,WAAW,EAAE,CAAC;IACjC,cAAc,EAAE,aAAa,EAAE,CAAC;IAChC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACtC;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,aAAa,CAgB9E;AAaD;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,aAAa,GAAG,aAAa,CAEnE;AAID;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,aAAa,GAAG,MAAM,CA4B7D"}

package/dist/pipeline/change-request.js

@@ -0,0 +1,91 @@
+/**
+ * Change Request mechanism — structured change tracking for mid-pipeline modifications.
+ * CRs are created when drift is detected (REVIEW) or architectural issues found (AUDIT).
+ * Each CR routes to the appropriate consensus phase for approval.
+ */
+import { randomUUID } from 'node:crypto';
+/**
+ * Build a change request with generated ID and timestamp.
+ *
+ * Args:
+ *   args: Change request parameters.
+ *
+ * Returns:
+ *   A fully formed ChangeRequest in 'proposed' status.
+ */
+export function buildChangeRequest(args) {
+    return {
+        cr_id: `CR-${randomUUID().split('-')[0].toUpperCase()}`,
+        timestamp: new Date().toISOString(),
+        origin_phase: args.originPhase,
+        requested_by: args.requestedBy,
+        change_type: args.changeType,
+        description: args.description,
+        justification: args.justification,
+        impact_analysis: {
+            affected_artifacts: args.affectedArtifacts,
+            affected_phases: args.affectedPhases,
+            risk_level: args.riskLevel,
+        },
+        status: 'proposed',
+    };
+}
+// ─── CR Routing ──────────────────────────────────────────
+/** Maps change types to the consensus phase that must approve them */
+const CHANGE_TYPE_ROUTING = {
+    scope: 'CONSENSUS_MASTER_PLAN',
+    architecture: 'CONSENSUS_ARCHITECTURE',
+    dependency: 'CONSENSUS_ROLE_PLANS',
+    config: 'QA_VALIDATION',
+    requirement: 'CONSENSUS_MASTER_PLAN',
+};
+/**
+ * Determine which consensus phase should review a change request.
+ *
+ * Args:
+ *   cr: The change request to route.
+ *
+ * Returns:
+ *   The pipeline phase that should handle the CR approval.
+ */
+export function routeChangeRequest(cr) {
+    return CHANGE_TYPE_ROUTING[cr.change_type];
+}
+// ─── CR Formatting ───────────────────────────────────────
+/**
+ * Format a change request as markdown for inclusion in artifacts.
+ *
+ * Args:
+ *   cr: The change request to format.
+ *
+ * Returns:
+ *   Markdown-formatted string.
+ */
+export function formatChangeRequest(cr) {
+    const lines = [
+        `# Change Request ${cr.cr_id}`,
+        '',
+        `**Status:** ${cr.status}`,
+        `**Type:** ${cr.change_type}`,
+        `**Origin Phase:** ${cr.origin_phase}`,
+        `**Requested By:** ${cr.requested_by}`,
+        `**Risk Level:** ${cr.impact_analysis.risk_level}`,
+        `**Timestamp:** ${cr.timestamp}`,
+        '',
+        '## Description',
+        cr.description,
+        '',
+        '## Justification',
+        cr.justification,
+        '',
+        '## Impact Analysis',
+        `- Affected phases: ${cr.impact_analysis.affected_phases.join(', ')}`,
+        `- Affected artifacts: ${cr.impact_analysis.affected_artifacts.length}`,
+        `- Risk level: ${cr.impact_analysis.risk_level}`,
+    ];
+    if (cr.approval_artifact) {
+        lines.push('', `## Approval: ${cr.approval_artifact.artifact_id}`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=change-request.js.map

package/dist/pipeline/change-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"change-request.js","sourceRoot":"","sources":["../../src/pipeline/change-request.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAsBzC;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,OAAO;QACL,KAAK,EAAE,MAAM,UAAU,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE;QACvD,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,YAAY,EAAE,IAAI,CAAC,WAAW;QAC9B,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,eAAe,EAAE;YACf,kBAAkB,EAAE,IAAI,CAAC,iBAAiB;YAC1C,eAAe,EAAE,IAAI,CAAC,cAAc;YACpC,UAAU,EAAE,IAAI,CAAC,SAAS;SAC3B;QACD,MAAM,EAAE,UAAU;KACnB,CAAC;AACJ,CAAC;AAED,4DAA4D;AAE5D,sEAAsE;AACtE,MAAM,mBAAmB,GAAwD;IAC/E,KAAK,EAAE,uBAAuB;IAC9B,YAAY,EAAE,wBAAwB;IACtC,UAAU,EAAE,sBAAsB;IAClC,MAAM,EAAE,eAAe;IACvB,WAAW,EAAE,uBAAuB;CACrC,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,EAAiB;IAClD,OAAO,mBAAmB,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC;AAC7C,CAAC;AAED,4DAA4D;AAE5D;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,EAAiB;IACnD,MAAM,KAAK,GAAG;QACZ,oBAAoB,EAAE,CAAC,KAAK,EAAE;QAC9B,EAAE;QACF,eAAe,EAAE,CAAC,MAAM,EAAE;QAC1B,aAAa,EAAE,CAAC,WAAW,EAAE;QAC7B,qBAAqB,EAAE,CAAC,YAAY,EAAE;QACtC,qBAAqB,EAAE,CAAC,YAAY,EAAE;QACtC,mBAAmB,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE;QAClD,kBAAkB,EAAE,CAAC,SAAS,EAAE;QAChC,EAAE;QACF,gBAAgB;QAChB,EAAE,CAAC,WAAW;QACd,EAAE;QACF,kBAAkB;QAClB,EAAE,CAAC,aAAa;QAChB,EAAE;QACF,oBAAoB;QACpB,sBAAsB,EAAE,CAAC,eAAe,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACrE,yBAAyB,EAAE,CAAC,eAAe,CAAC,kBAAkB,CAAC,MAAM,EAAE;QACvE,iBAAiB,EAAE,CAAC,eAAe,CAAC,UAAU,EAAE;KACjD,CAAC;IAEF,IAAI,EAAE,CAAC,iBAAiB,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,gBAAgB,EAAE,CAAC,iBAAiB,CAAC,WAAW,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/pipeline/check-runner.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Check Runner — executes build/test/lint/typecheck commands
+ * and produces GateCheckResult artifacts.
+ *
+ * Safety: command sanitization, cwd enforcement, stream caps,
+ * configurable timeouts (P2-G).
+ */
+import type { GateCheckResult, GateCheckType, ResolvedCommands, RepoSnapshot, ArtifactEntry, PipelinePhase } from './types.js';
+import { ArtifactManager } from './artifact-manager.js';
+/** Execute a single check command */
+export declare function runCheck(checkType: GateCheckType, command: string, projectDir: string, timeoutOverride?: number): Promise<GateCheckResult>;
+/** Run all applicable checks based on resolved commands */
+export declare function runAllChecks(resolvedCommands: ResolvedCommands, projectDir: string): Promise<GateCheckResult[]>;
+/** Store check results as artifacts */
+export declare function storeCheckResults(results: GateCheckResult[], artifactManager: ArtifactManager, phase: PipelinePhase): ArtifactEntry[];
+/** Scan project for placeholder/TODO/mock content */
+export declare function runPlaceholderScan(projectDir: string, allowlistPath?: string): GateCheckResult;
+/**
+ * Attempt to start the application and verify it does not crash immediately.
+ * Optionally checks a health endpoint if a port is detected.
+ *
+ * Args:
+ *   startCommand: The command to start the app (e.g., "npm run start").
+ *   projectDir: Project root directory.
+ *   options: Optional port, health path, and timeout.
+ *
+ * Returns:
+ *   GateCheckResult with pass/fail status.
+ */
+export declare function runStartCheck(startCommand: string, projectDir: string, options?: {
+    port?: number;
+    healthPath?: string;
+    timeoutMs?: number;
+}): Promise<GateCheckResult>;
+/**
+ * Validate that required environment variables exist.
+ * Reads .env.example for required var names and checks .env has them set.
+ *
+ * Args:
+ *   projectDir: Project root directory.
+ *   _snapshot: Repo snapshot (for future use).
+ *
+ * Returns:
+ *   GateCheckResult with pass/fail status.
+ */
+export declare function runEnvCheck(projectDir: string, _snapshot?: RepoSnapshot): GateCheckResult;
+//# sourceMappingURL=check-runner.d.ts.map

package/dist/pipeline/check-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"check-runner.d.ts","sourceRoot":"","sources":["../../src/pipeline/check-runner.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,YAAY,EACZ,aAAa,EACb,aAAa,EACd,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAuDxD,qCAAqC;AACrC,wBAAsB,QAAQ,CAC5B,SAAS,EAAE,aAAa,EACxB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC,eAAe,CAAC,CAuD1B;AAED,2DAA2D;AAC3D,wBAAsB,YAAY,CAChC,gBAAgB,EAAE,gBAAgB,EAClC,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,eAAe,EAAE,CAAC,CA4B5B;AAED,uCAAuC;AACvC,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,eAAe,EAAE,EAC1B,eAAe,EAAE,eAAe,EAChC,KAAK,EAAE,aAAa,GACnB,aAAa,EAAE,CAmBjB;AAiBD,qDAAqD;AACrD,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,aAAa,CAAC,EAAE,MAAM,GACrB,eAAe,CA+BjB;AA2DD;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CACjC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GACnE,OAAO,CAAC,eAAe,CAAC,CAoE1B;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,YAAY,GACvB,eAAe,CAqEjB"}