wingfoil 0.2.2 → 0.3.0

package/dist/workflow/schema.js

@@ -1,30 +1,39 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.Workflow = exports.Phase = exports.WorkflowsYaml = void 0;
+exports.Workflow = exports.RESERVED_PHASE_NAMES = exports.WORKFLOW_NAME_RE = exports.Phase = exports.PATH_PATTERN_RE = exports.Produces = exports.Cadence = exports.CADENCE_SHAPE_MESSAGE = exports.CADENCE_EVENT_RE = exports.CRON_EXPRESSION_RE = exports.INDEPENDENT_ROLES = exports.PHASE_MODES = exports.WorkflowsYaml = void 0;
+exports.cadenceShapeMessage = cadenceShapeMessage;
+exports.producesPath = producesPath;
+exports.invalidKindMessage = invalidKindMessage;
+exports.workflowFacts = workflowFacts;
 /**
  * `workflows.yaml` manifest (Layer 1) + Workflow DSL (Layer 2) schemas
  * (spec-003-workflows-yaml-schema, P4.1). This is one of the three independent per-pillar schemas
  * task-004-decoupled-pillars keeps decoupled (REQ-SYS-02): neither layer depends on `memory.yaml`'s
- * or `dna.yaml`'s schema. Cross-file concerns spec-003 itself calls out — resolving each `include`
- * path against the filesystem, and requiring at least one loaded workflow to be `kind: main` — need
- * the caller to have actually loaded the referenced files, so per spec-009-validation-strategy §1
- * ("Cross-file ... these require the caller to have already loaded ... so they run as a list of
- * caller-supplied SemanticCheck functions") those two checks live in the loader
- * (`src/core/loaders.ts`), not in this schema module.
+ * or `dna.yaml`'s schema. This module holds the **structural** (Zod) shape only, plus the name class
+ * and the startable/includable reading the loader's checks share ({@link WORKFLOW_NAME_RE},
+ * {@link workflowFacts}). Every check spec-003 § "Diagnostics" runs *in the loader* — names, the
+ * startable/includable rules, phase `include` resolution, element compatibility, include cycles,
+ * `fallback.step` — needs the other loaded files or emits a named code, so per
+ * spec-009-validation-strategy §1 it lives in `src/core/loaders.ts`, not here. The one structural
+ * refusal with a named code is an unknown `kind` (`E_WORKFLOW_INVALID_KIND`, BDD P4.1 sc. 3), whose
+ * message this schema carries.
  *
- * Every object node is `.passthrough()` per spec-009 §2.
+ * Every object node is `.passthrough()` per spec-009 §2, except a phase `cadence`, a closed union whose
+ * objects are `.strict()` (spec-003 § "Recurring phases": exactly one trigger, no unknown key; task-185).
  */
 const zod_1 = require("zod");
+const format_1 = require("../validation/format");
 const id_1 = require("../validation/id");
 /**
  * Layer 1 — the main manifest (`.wingfoil/workflows.yaml`). `include` (singular) is the canonical
  * key per spec-003's required rename from the legacy plural `includes:`; a document that still uses
  * `includes:` fails Pass 1 here (missing required `include`) and `includes` itself is preserved only
- * as an unknown, passed-through key.
+ * as an unknown, passed-through key. `format` is the manifest's format (`dl-149`, task-251: absent = 1).
  */
 exports.WorkflowsYaml = zod_1.z
     .object({
     version: zod_1.z.number().positive().optional(),
+    format: (0, format_1.formatField)(format_1.WORKFLOWS_YAML_FORMAT),
     include: zod_1.z.array(zod_1.z.string()).min(1),
 })
     .passthrough();
@@ -61,10 +70,109 @@ const Actions = zod_1.z.array(zod_1.z.string()).superRefine((actions, ctx) => {
         }
     });
 });
+// ---- task-185: executor attributes (`mode`, `distinct_from`) and phase `cadence` -------------------
+// spec-003 § "Execution independence" (`dl-134` §4 (c), `dl-135` points 3–4) and § "Recurring phases"
+// (`dl-105` R1). The loader rules on the raw declaration (`E_PHASE_DISTINCT_FROM_UNKNOWN`,
+// `E_PHASE_DISTINCT_FROM_SELF`, `E_PHASE_MODE_NOT_INDEPENDENT`, `E_PHASE_EXECUTOR_WITHOUT_ROLE`) live in
+// `src/core/workflow-diagnostics.ts`; here is only the structural shape.
+/**
+ * The execution modes a phase may allow (spec-003 § "Execution independence"). One value per phase
+ * (spec-003 open question 5); an absent `mode` reads as `fresh` but stays absent in the parsed phase,
+ * so the loader's checks see the raw declaration (open question 4).
+ */
+exports.PHASE_MODES = ['fresh', 'resume', 'reference'];
+/** Roles whose phases judge independently, so `fresh` is mandatory there (`dl-135` point 3). */
+exports.INDEPENDENT_ROLES = ['reviewer', 'qa'];
+/**
+ * One five-field cron expression, the string a GitHub Actions `on: schedule` trigger takes
+ * (spec-003 § "Recurring phases"): five fields of digits, names, `*`, `,`, `-` and `/`, separated by
+ * spaces or tabs (a line break or other whitespace is refused: the expression is one line). The
+ * field values themselves are not range-checked.
+ */
+exports.CRON_EXPRESSION_RE = /^[0-9A-Za-z*,/-]+([ \t]+[0-9A-Za-z*,/-]+){4}$/;
+/**
+ * The shape of a cadence event, `<memory-type>-<state>` (spec-003 open question 3): lower-case
+ * segments joined by single hyphens, at least two of them. Both the type and the state may contain
+ * hyphens (`release-line-in-progress`), so where the type ends is decided against `memory.yaml` by
+ * the core check of task-194, not here.
+ */
+exports.CADENCE_EVENT_RE = /^[a-z][a-z0-9]*(-[a-z0-9]+)+$/;
+/** `{ recurring: { cron } | { on } }`: exactly one trigger, no other key at either level. */
+const RecurringCadence = zod_1.z
+    .object({
+    recurring: zod_1.z
+        .object({
+        cron: zod_1.z
+            .string()
+            .regex(exports.CRON_EXPRESSION_RE, { message: 'cron must be a five-field cron expression (e.g. "0 6 * * 1")' })
+            .optional(),
+        on: zod_1.z
+            .string()
+            .regex(exports.CADENCE_EVENT_RE, { message: 'on must be an event named <memory-type>-<state> (e.g. release-released)' })
+            .optional(),
+    })
+        .strict()
+        .superRefine((trigger, ctx) => {
+        if ((trigger.cron === undefined) === (trigger.on === undefined)) {
+            ctx.addIssue({ code: 'custom', message: 'recurring cadence takes exactly one trigger: cron or on' });
+        }
+    }),
+})
+    .strict();
+/** The refusal of a `cadence` that matches neither shape, as spec-003 § "Recurring phases" words it. */
+exports.CADENCE_SHAPE_MESSAGE = 'cadence must be once or { recurring: { cron } | { on } } with no other key';
+function isMap(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+/**
+ * The message of a `cadence` that matches neither shape: {@link CADENCE_SHAPE_MESSAGE}, naming the
+ * first unknown key in declared order — beside `recurring` first, then inside it — when there is one.
+ */
+function cadenceShapeMessage(input) {
+    if (!isMap(input))
+        return exports.CADENCE_SHAPE_MESSAGE;
+    const outer = Object.keys(input).find((key) => key !== 'recurring');
+    if (outer !== undefined)
+        return `${exports.CADENCE_SHAPE_MESSAGE} (unknown key '${outer}')`;
+    const recurring = input['recurring'];
+    const inner = isMap(recurring) ? Object.keys(recurring).find((key) => key !== 'cron' && key !== 'on') : undefined;
+    return inner === undefined ? exports.CADENCE_SHAPE_MESSAGE : `${exports.CADENCE_SHAPE_MESSAGE} (unknown key 'recurring.${inner}')`;
+}
+/**
+ * A phase's cadence (`dl-105` R1): `once` (the default) or recurring on one trigger. A value that
+ * matches neither branch is refused at the `cadence` path with {@link cadenceShapeMessage}; a bad
+ * `cron` / `on` value or a trigger count other than one keeps its own, deeper path and message.
+ */
+exports.Cadence = zod_1.z.union([zod_1.z.literal('once'), RecurringCadence], { error: (issue) => cadenceShapeMessage(issue.input) });
+// ---- end task-185 -----------------------------------------------------------------------------------
+// --- task-175: phase evidence (dl-104 D3, D4; spec-003 § "Evidence") ---
+/**
+ * One `produces` entry (`dl-104` D3): a path pattern owned by the workflow's `element` (a string), or
+ * `{ type: T, path }`, owned by the elements of type `T` the phase creates. Whether each path is a
+ * path pattern, and whether the phase creates `T`, are loader checks (`E_PHASE_PRODUCES_NOT_A_PATH`,
+ * `E_PHASE_PRODUCES_OWNER_NOT_CREATED`), so the rest of the file is still checked.
+ */
+exports.Produces = zod_1.z.union([zod_1.z.string(), zod_1.z.object({ type: zod_1.z.string(), path: zod_1.z.string() }).strict()]);
+/**
+ * `awaits` (`dl-104` D4): the phase waits on an actor outside the project — `party` names it,
+ * `evidence` is a check token (Layer 3) that observes the outcome. Evaluated from v1.0 (P4.12).
+ */
+const Awaits = zod_1.z.object({ party: zod_1.z.string().min(1), evidence: Check }).strict();
+/**
+ * A path pattern (spec-003 § "Evidence"): the characters `[A-Za-z0-9._/{}-]`, no whitespace — a
+ * repository-relative file or directory path, either with `{…}` tokens. Anything else is prose.
+ */
+exports.PATH_PATTERN_RE = /^[A-Za-z0-9._/{}-]+$/;
+/** The path of one `produces` entry, whichever form it takes. */
+function producesPath(entry) {
+    return typeof entry === 'string' ? entry : entry.path;
+}
+// --- end task-175 ---
 /**
  * One `phases[]` entry of a Layer-2 workflow definition (spec-003) — a named step with its optional
- * `role`, `actions`, `include`, `iterate_over`/`where`, `produces`, `checks`, `approval`, and
- * `fallback`. `.passthrough()` per spec-009 §2.
+ * `role`, `actions`, `include`, `iterate_over`/`where`, `produces`, `awaits` (task-175), `checks`,
+ * `approval`, `fallback`, the executor attributes `mode` / `distinct_from` and the `cadence`
+ * (task-185). `.passthrough()` per spec-009 §2, except the closed `cadence` union.
  */
 exports.Phase = zod_1.z
     .object({
@@ -76,24 +184,64 @@ exports.Phase = zod_1.z
     include: zod_1.z.string().optional(),
     iterate_over: zod_1.z.string().optional(),
     where: zod_1.z.record(zod_1.z.string(), WhereValue).optional(),
-    produces: zod_1.z.array(zod_1.z.string()).optional(),
+    produces: zod_1.z.array(exports.Produces).optional(), // task-175: string | { type, path } (dl-104 D3)
+    awaits: Awaits.optional(), // task-175: dl-104 D4
     checks: zod_1.z
         .object({ pre: zod_1.z.array(Check).optional(), post: zod_1.z.array(Check).optional() })
         .passthrough()
         .optional(),
-    approval: zod_1.z.object({ by_role: zod_1.z.string() }).passthrough().optional(),
+    // task-194: exactly one of `by_role` / `by_person` (spec-003 Layer 2 `approval`, BDD P4.14 sc. 2); the
+    // core checks resolve each against `dna.yaml` (E_PHASE_ROLE_UNKNOWN, E_PHASE_APPROVER_UNKNOWN).
+    approval: zod_1.z.union([zod_1.z.object({ by_role: zod_1.z.string() }).strict(), zod_1.z.object({ by_person: zod_1.z.string() }).strict()]).optional(),
     fallback: zod_1.z.object({ step: zod_1.z.string(), set_state: zod_1.z.string().optional() }).passthrough().optional(),
+    // task-185 (spec-003 § "Execution independence", § "Recurring phases"):
+    mode: zod_1.z.enum(exports.PHASE_MODES).optional(),
+    distinct_from: zod_1.z.array(zod_1.z.string()).optional(),
+    cadence: exports.Cadence.default('once'),
 })
     .passthrough();
-/** Layer 2 — one workflow-definition file (`.wingfoil/workflows/**\/*.yaml`). */
+/**
+ * The name class of workflows and phases (spec-003 § "Names"): `[a-z][a-z0-9-]*`, so
+ * `<workflow>.<phase>` splits at its first `.` and a phase name is a legal run-id segment
+ * (`spec-016`). Checked by the loader (`E_WORKFLOW_NAME_INVALID`, `E_PHASE_NAME_INVALID`), not by
+ * Zod, so a bad name gets its own code and the rest of the file is still checked.
+ */
+exports.WORKFLOW_NAME_RE = /^[a-z][a-z0-9-]*$/;
+/** Phase names no workflow may declare: `adhoc` names a run without a step (`spec-016`). */
+exports.RESERVED_PHASE_NAMES = ['adhoc'];
+/** The message of BDD `P4.1-workflow-config.feature` sc. 3, verbatim (`E_WORKFLOW_INVALID_KIND`). */
+function invalidKindMessage(kind) {
+    return `invalid workflow kind '${String(kind)}' (allowed: main, sub)`;
+}
+/**
+ * Layer 2 — one workflow-definition file (`.wingfoil/workflows/**\/*.yaml`). `version` is the file's
+ * content revision; `format` its format (`dl-149`, task-251: absent = 1).
+ */
 exports.Workflow = zod_1.z
     .object({
     name: zod_1.z.string(),
-    kind: zod_1.z.enum(['main', 'sub']),
+    /** Alias kept readable during v0.3 (`dl-109` K1 (a)): see {@link workflowFacts}. */
+    kind: zod_1.z.enum(['main', 'sub'], { error: (issue) => invalidKindMessage(issue.input) }).optional(),
+    startable: zod_1.z.boolean().optional(),
+    includable: zod_1.z.boolean().optional(),
     description: zod_1.z.string().optional(),
     version: zod_1.z.number().positive().optional(),
+    format: (0, format_1.formatField)(format_1.WORKFLOW_FORMAT),
     element: zod_1.z.string().optional(),
     phases: zod_1.z.array(exports.Phase).min(1),
 })
     .passthrough();
+/**
+ * Read a workflow's two facts (spec-003 Layer 2, `dl-109` K1 (a)): `kind: main` is startable only,
+ * `kind: sub` includable only; otherwise each boolean as declared, an absent one reading `false`.
+ * A workflow that declares `kind` together with a boolean is refused by the loader
+ * (`E_WORKFLOW_KIND_CONFLICT`); here `kind` wins, so the reading stays total.
+ */
+function workflowFacts(workflow) {
+    if (workflow.kind === 'main')
+        return { startable: true, includable: false };
+    if (workflow.kind === 'sub')
+        return { startable: false, includable: true };
+    return { startable: workflow.startable === true, includable: workflow.includable === true };
+}
 //# sourceMappingURL=schema.js.map

package/dist/workflow/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/workflow/schema.ts"],"names":[],"mappings":";;;AAAA;;;;;;;;;;;;GAYG;AACH,6BAAwB;AAExB,yCAAmD;AAEnD;;;;;GAKG;AACU,QAAA,aAAa,GAAG,OAAC;KAC3B,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,WAAW,EAAE,CAAC;AAGjB,mGAAmG;AACnG,MAAM,KAAK,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC;AAEzB,MAAM,UAAU,GAAG,OAAC,CAAC,KAAK,CAAC;IACzB,OAAC,CAAC,MAAM,EAAE;IACV,OAAC,CAAC,MAAM,EAAE;IACV,OAAC,CAAC,OAAO,EAAE;IACX,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;CACxD,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAEpD,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC/D,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO;QAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,IAAA,oBAAe,EAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;;GAIG;AACU,QAAA,KAAK,GAAG,OAAC;KACnB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,MAAM,EAAE,OAAC;SACN,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC3E,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpE,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACpG,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB,iFAAiF;AACpE,QAAA,QAAQ,GAAG,OAAC;KACtB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC7B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,aAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,WAAW,EAAE,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/workflow/schema.ts"],"names":[],"mappings":";;;AA4IA,kDAOC;AAqCD,oCAEC;AAmDD,gDAEC;AAkCD,sCAIC;AArRD;;;;;;;;;;;;;;;GAeG;AACH,6BAAwB;AAExB,iDAA2F;AAC3F,yCAAmD;AAEnD;;;;;GAKG;AACU,QAAA,aAAa,GAAG,OAAC;KAC3B,MAAM,CAAC;IACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,MAAM,EAAE,IAAA,oBAAW,EAAC,8BAAqB,CAAC;IAC1C,OAAO,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,WAAW,EAAE,CAAC;AAGjB,mGAAmG;AACnG,MAAM,KAAK,GAAG,OAAC,CAAC,MAAM,EAAE,CAAC;AAEzB,MAAM,UAAU,GAAG,OAAC,CAAC,KAAK,CAAC;IACzB,OAAC,CAAC,MAAM,EAAE;IACV,OAAC,CAAC,MAAM,EAAE;IACV,OAAC,CAAC,OAAO,EAAE;IACX,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;CACxD,CAAC,CAAC;AAEH,2DAA2D;AAC3D,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAEpD,yEAAyE;AACzE,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAEvE;;;;;;;GAOG;AACH,MAAM,OAAO,GAAG,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;IAC/D,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;QAChC,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO;QAC/C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO;QAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,IAAA,oBAAe,EAAC,OAAO,CAAC,EAAE,CAAC;YAC7C,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,0BAA0B,OAAO,MAAM,KAAK,EAAE,EAAE,CAAC,CAAC;QAC3G,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,uGAAuG;AACvG,sGAAsG;AACtG,2FAA2F;AAC3F,yGAAyG;AACzG,yEAAyE;AAEzE;;;;GAIG;AACU,QAAA,WAAW,GAAG,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAU,CAAC;AAIrE,gGAAgG;AACnF,QAAA,iBAAiB,GAAsB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;AAEvE;;;;;GAKG;AACU,QAAA,kBAAkB,GAAG,+CAA+C,CAAC;AAElF;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,+BAA+B,CAAC;AAEhE,6FAA6F;AAC7F,MAAM,gBAAgB,GAAG,OAAC;KACvB,MAAM,CAAC;IACN,SAAS,EAAE,OAAC;SACT,MAAM,CAAC;QACN,IAAI,EAAE,OAAC;aACJ,MAAM,EAAE;aACR,KAAK,CAAC,0BAAkB,EAAE,EAAE,OAAO,EAAE,8DAA8D,EAAE,CAAC;aACtG,QAAQ,EAAE;QACb,EAAE,EAAE,OAAC;aACF,MAAM,EAAE;aACR,KAAK,CAAC,wBAAgB,EAAE,EAAE,OAAO,EAAE,yEAAyE,EAAE,CAAC;aAC/G,QAAQ,EAAE;KACd,CAAC;SACD,MAAM,EAAE;SACR,WAAW,CAAC,CAAC,OAAO,EAAE,GAAG,EAAE,EAAE;QAC5B,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC,CAAC;CACL,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,wGAAwG;AAC3F,QAAA,qBAAqB,GAAG,4EAA4E,CAAC;AAElH,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,OAAO,6BAAqB,CAAC;IAChD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC;IACpE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,GAAG,6BAAqB,kBAAkB,KAAK,IAAI,CAAC;IACpF,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClH,OAAO,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,6BAAqB,CAAC,CAAC,CAAC,GAAG,6BAAqB,4BAA4B,KAAK,IAAI,CAAC;AACrH,CAAC;AAED;;;;GAIG;AACU,QAAA,OAAO,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,gBAAgB,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAG9H,wGAAwG;AAExG,0EAA0E;AAE1E;;;;;GAKG;AACU,QAAA,QAAQ,GAAG,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AAIzG;;;GAGG;AACH,MAAM,MAAM,GAAG,OAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;AAEhF;;;GAGG;AACU,QAAA,eAAe,GAAG,sBAAsB,CAAC;AAEtD,iEAAiE;AACjE,SAAgB,YAAY,CAAC,KAAe;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,uBAAuB;AAEvB;;;;;GAKG;AACU,QAAA,KAAK,GAAG,OAAC;KACnB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC3B,QAAQ,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;IAC3B,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE;IAClD,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,gBAAQ,CAAC,CAAC,QAAQ,EAAE,EAAE,gDAAgD;IACxF,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,sBAAsB;IACjD,MAAM,EAAE,OAAC;SACN,MAAM,CAAC,EAAE,GAAG,EAAE,OAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;SAC3E,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,uGAAuG;IACvG,gGAAgG;IAChG,QAAQ,EAAE,OAAC,CAAC,KAAK,CAAC,CAAC,OAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxH,QAAQ,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACnG,wEAAwE;IACxE,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC,QAAQ,EAAE;IACpC,aAAa,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC7C,OAAO,EAAE,eAAO,CAAC,OAAO,CAAC,MAAM,CAAC;CACjC,CAAC;KACD,WAAW,EAAE,CAAC;AAIjB;;;;;GAKG;AACU,QAAA,gBAAgB,GAAG,mBAAmB,CAAC;AAEpD,4FAA4F;AAC/E,QAAA,oBAAoB,GAAsB,CAAC,OAAO,CAAC,CAAC;AAEjE,qGAAqG;AACrG,SAAgB,kBAAkB,CAAC,IAAa;IAC9C,OAAO,0BAA0B,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC;AACxE,CAAC;AAED;;;GAGG;AACU,QAAA,QAAQ,GAAG,OAAC;KACtB,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE;IAChB,oFAAoF;IACpF,IAAI,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/F,SAAS,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAClC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACzC,MAAM,EAAE,IAAA,oBAAW,EAAC,wBAAe,CAAC;IACpC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,MAAM,EAAE,OAAC,CAAC,KAAK,CAAC,aAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;CAC9B,CAAC;KACD,WAAW,EAAE,CAAC;AASjB;;;;;GAKG;AACH,SAAgB,aAAa,CAAC,QAA6D;IACzF,IAAI,QAAQ,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC5E,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC3E,OAAO,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,KAAK,IAAI,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;AAC9F,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wingfoil",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "WingFoil — the repo-native intent layer for AI-native software engineering",
   "license": "MIT",
   "author": "Roberto Pompermaier <robypomper@gmail.com>",
@@ -8,7 +8,7 @@
     "type": "git",
     "url": "git+https://github.com/wingfoil/wingfoil.git"
   },
-  "homepage": "https://github.com/wingfoil/wingfoil#readme",
+  "homepage": "https://wingfoil.github.io/wingfoil/",
   "bugs": {
     "url": "https://github.com/wingfoil/wingfoil/issues"
   },
@@ -30,17 +30,26 @@
     "provenance": true
   },
   "scripts": {
-    "build": "tsc -p tsconfig.build.json",
+    "build": "tsc -p tsconfig.build.json && node scripts/write-build-info.cjs",
     "prepack": "npm run build",
     "prepublishOnly": "npm run build && npm test && npm run lint",
     "publish:staging": "node scripts/publish-staging.cjs",
     "check:lockfile": "node scripts/check-lockfile-pins.cjs",
+    "check:audit": "npm audit --omit=dev --audit-level=high",
+    "check:audit:all": "npm audit --audit-level=high",
     "lint": "eslint .",
+    "typecheck": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.build.json",
     "docs:api": "typedoc --options typedoc.json",
-    "test": "jest",
+    "test": "node scripts/run-tests.cjs",
     "test:coverage": "jest --coverage",
+    "test:report": "jest --coverage --json --outputFile=coverage/jest-results.json",
+    "test:latency": "jest -c jest.latency.config.js",
+    "test:no-identity": "node scripts/test-no-identity.cjs",
     "wingfoil": "node node_modules/wingfoil-released/dist/cli.js",
-    "check:mcp": "node scripts/check-mcp-registration.cjs"
+    "check:mcp": "node scripts/check-mcp-registration.cjs",
+    "check:governance": "node scripts/check-governance.cjs",
+    "check:role-directives": "node scripts/check-role-directives.cjs",
+    "lint:claims": "node scripts/lint-claims.cjs"
   },
   "keywords": [
     "wingfoil",
@@ -68,18 +77,19 @@
     "@types/jest": "^30.0.0",
     "@types/js-yaml": "^4.0.9",
     "@types/node": "^22.20.4",
+    "ajv": "^8.20.0",
     "eslint": "^10.6.0",
     "jest": "^30.4.2",
     "ts-jest": "^29.4.11",
     "typedoc": "^0.28.20",
     "typescript": "^6.0.3",
     "typescript-eslint": "^8.62.1",
-    "wingfoil-released": "npm:wingfoil@0.2.1"
+    "wingfoil-released": "npm:wingfoil@0.2.2"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^1.29.0",
+    "@modelcontextprotocol/sdk": "^1.32.0",
     "commander": "^15.0.0",
-    "js-yaml": "^4.3.0",
+    "js-yaml": "^4.3.2",
     "zod": "^4.4.3"
   },
   "//overrides": "task-080 / bug-056 / dl-069 option (b). @napi-rs/wasm-runtime (dev, optional, reached through eslint -> @unrs/resolver) declares @emnapi/core and @emnapi/runtime as REQUIRED peers, and npm recorded no hoisted entry for either - so npm resolved them from the registry on every install and `npm ci` then rejected the lock for missing what it had just resolved. That is invisible under npm 11.x and fatal under the npm 10.9.0 that the pipeline's pinned Node 22.12.0 bundles, which is why it surfaced only in the release gate. These exact pins make both peers resolve from package-lock.json instead of the registry. Scoped to @napi-rs/wasm-runtime on purpose: the nested @emnapi/core@1.10.0 under @unrs/resolver-binding-wasm32-wasi is a different edge and stays where it is. Revisit on any eslint / @unrs/resolver bump; test/cli/lockfile-peer-overrides.test.ts fails if the lock stops carrying these. task-104 amends this: the overrides block alone did NOT keep the entries in the lock - see the //devDependencies:@emnapi note above.",