@comity-dev/validate

Purpose

Thin orchestrator over Comity shared validation tooling. Discovers a repository, invokes the specialized engines (schema, dependency-cruiser, ESLint, Semgrep, adapter-peers), and returns a normalized result.

This package is intentionally small. It does not implement any rule. Its only responsibilities are:

1. Discover repository configuration (comity.config.json).
2. Discover packages.
3. Invoke specialized engines.
4. Collect and normalize results.
5. Present a unified summary.

Scope

The engines wrap shared Development-owned tooling:

| Engine | Tool | Concern | | --------------- | --------------------------------------- | ---------------------------------------------------------- | | schema | @comity-dev/schemas (Ajv) | JSON Schema for package metadata and comity.config.json. | | depcruise | dependency-cruiser | Dependency graph layering. | | eslint | ESLint + @comity-dev/eslint-plugin | Source-code lint policy. | | semgrep | semgrep + @comity-dev/semgrep-rules | Structural source patterns. | | adapter-peers | in-process | Adapter peer-dependency contract. |

Engines report one of PASS / FAIL / NOT-RUN / TOOL-UNAVAILABLE / CONFIGURATION-ERROR / EXECUTION-ERROR / NOT-APPLICABLE. PASS is only reported when the engine actually executed.

Ownership

Owned by comity-development. Consumed by Comity repositories via the comity-validate CLI.

Public API

import {
  runValidation,
  discoverRepository,
  formatSummary,
  formatViolations,
  ExitCode,
} from "@comity-dev/validate";

CLI

comity-validate --repo /path/to/repo
comity-validate --only=schema        # one engine only
comity-validate --only=eslint --verbose

Exit codes:

• 0 — validation passed
• 1 — validation failed (violations found)
• 2 — configuration / discovery error
• 3 — required tool not installed

Negative fixtures

The src/__fixtures__/third-repo/ directory contains a deliberately invalid repository used by the package's own integration tests. It is not scanned by the canonical validate run (the engine excludes __fixtures__/**); it is asserted against failure by src/__tests__/integration.test.ts.

Development

pnpm build
pnpm test

Relationship to Comity Standards

• layering-policy.md
• architecture-validation.md
• ADR-008, ADR-026
• adapters.md §13 (adapter-peer engine)