@avi770/testteam 3.0.0 → 3.2.0

package/dist/core/evidence.d.ts

@@ -1,4 +1,6 @@
-import type { AgentResult, Finding, Phase } from './types';
+import type { AgentResult, Finding, Phase } from './types.js';
+import type { CorrelationResult } from './finding-correlation.js';
+import type { SLAReport } from '../enterprise/sla.js';
 /**
  * Creates the canonical `.run/{runId}/` directory structure.
  * Safe to call multiple times — uses `{ recursive: true }`.
@@ -14,6 +16,26 @@ export declare function writeAgentResult(runDir: string, agentId: number, result
  * Returns `null` when the file does not exist.
  */
 export declare function readAgentResult(runDir: string, agentId: number): Promise<AgentResult | null>;
+/**
+ * Persists the phase's cross-agent finding correlation to `correlation.json`.
+ * Written once per phase run; on a multi-phase run the furthest phase's
+ * correlation is what the reader surfaces (consistent with how the summary
+ * picks the furthest phase). Best-effort — never throws into the run loop.
+ */
+export declare function writeCorrelation(runDir: string, correlation: CorrelationResult): Promise<void>;
+/** Reads the persisted correlation, or `null` when absent. */
+export declare function readCorrelation(runDir: string): Promise<CorrelationResult | null>;
+/**
+ * Persists the enterprise SLA report to `sla.json`. Only written when SLA
+ * thresholds are configured (opt-in), so its presence signals an enterprise run.
+ */
+export declare function writeSla(runDir: string, report: SLAReport): Promise<void>;
+/** Reads the persisted SLA report, or `null` when absent. */
+export declare function readSla(runDir: string): Promise<SLAReport | null>;
+/** Filesystem-safe `.json` filename for a finding id, capped to stay under the
+ *  255-byte filename limit (e.g. #87 cycle ids can list a whole import chain).
+ *  Over-long ids are truncated with a short hash appended for uniqueness. */
+export declare function findingFileName(id: string): string;
 /**
  * Writes a Finding as JSON to the appropriate subdirectory.
  * Creates the target directory lazily if it does not yet exist.
@@ -25,4 +47,13 @@ export declare function writeFinding(runDir: string, finding: Finding): Promise<
  * Is a no-op when `agent-results/` is empty or does not exist.
  */
 export declare function archivePhaseResults(runDir: string, phase: Phase, attempt: number): Promise<void>;
+/**
+ * Removes all but the newest `keep` `run-agent-{id}-{timestamp}` directories
+ * under `runsRoot` (G-1). POST /agents/:id/run creates one per request; a
+ * long-lived bridge server must prune them or disk usage grows unboundedly.
+ * Ordering uses the name-embedded timestamp (deterministic; no mtime races).
+ * Other entries (pipeline run dirs, files) are never touched. Best-effort:
+ * returns the number of directories removed, 0 when the root is missing.
+ */
+export declare function pruneAgentRunDirs(runsRoot: string, keep: number): Promise<number>;
 //# sourceMappingURL=evidence.d.ts.map

package/dist/core/evidence.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../core/evidence.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAe,KAAK,EAAE,MAAM,SAAS,CAAC;AAWxE;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIpE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAW7B;AAgBD;;;GAGG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAyBf"}
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../core/evidence.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAe,KAAK,EAAE,MAAM,SAAS,CAAC;AACxE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC/D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAgBnD;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAIpE;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,IAAI,CAAC,CAIf;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAW7B;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CACpC,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,IAAI,CAAC,CAOf;AAED,8DAA8D;AAC9D,wBAAsB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAQvF;AAED;;;GAGG;AACH,wBAAsB,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/E;AAED,6DAA6D;AAC7D,wBAAsB,OAAO,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,CAQvE;AAgBD;;6EAE6E;AAC7E,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlF;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,KAAK,EACZ,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAyBf;AAKD;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BvF"}

package/dist/core/evidence.js

@@ -1,5 +1,10 @@
 import * as fs from 'fs/promises';
 import * as path from 'path';
+import * as crypto from 'node:crypto';
+/** Canonical filename for the persisted cross-agent finding correlation. */
+const CORRELATION_FILE = 'correlation.json';
+/** Canonical filename for the persisted enterprise SLA report. */
+const SLA_FILE = 'sla.json';
 const SUBDIRS = [
     'agent-results',
     'findings/test-bugs',
@@ -43,6 +48,48 @@ export async function readAgentResult(runDir, agentId) {
         throw err;
     }
 }
+/**
+ * Persists the phase's cross-agent finding correlation to `correlation.json`.
+ * Written once per phase run; on a multi-phase run the furthest phase's
+ * correlation is what the reader surfaces (consistent with how the summary
+ * picks the furthest phase). Best-effort — never throws into the run loop.
+ */
+export async function writeCorrelation(runDir, correlation) {
+    await fs.mkdir(runDir, { recursive: true });
+    await fs.writeFile(path.join(runDir, CORRELATION_FILE), JSON.stringify(correlation, null, 2), 'utf-8');
+}
+/** Reads the persisted correlation, or `null` when absent. */
+export async function readCorrelation(runDir) {
+    try {
+        const raw = await fs.readFile(path.join(runDir, CORRELATION_FILE), 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        if (isNodeError(err) && err.code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
+/**
+ * Persists the enterprise SLA report to `sla.json`. Only written when SLA
+ * thresholds are configured (opt-in), so its presence signals an enterprise run.
+ */
+export async function writeSla(runDir, report) {
+    await fs.mkdir(runDir, { recursive: true });
+    await fs.writeFile(path.join(runDir, SLA_FILE), JSON.stringify(report, null, 2), 'utf-8');
+}
+/** Reads the persisted SLA report, or `null` when absent. */
+export async function readSla(runDir) {
+    try {
+        const raw = await fs.readFile(path.join(runDir, SLA_FILE), 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        if (isNodeError(err) && err.code === 'ENOENT')
+            return null;
+        throw err;
+    }
+}
 /**
  * Determines the findings subdirectory for a given FindingType.
  *
@@ -56,6 +103,17 @@ function findingSubdir(type) {
     }
     return 'findings/code-bugs';
 }
+/** Filesystem-safe `.json` filename for a finding id, capped to stay under the
+ *  255-byte filename limit (e.g. #87 cycle ids can list a whole import chain).
+ *  Over-long ids are truncated with a short hash appended for uniqueness. */
+export function findingFileName(id) {
+    const safe = id.replace(/[/\\:*?"<>|]/g, '_');
+    const MAX_STEM = 200;
+    if (safe.length <= MAX_STEM)
+        return `${safe}.json`;
+    const hash = crypto.createHash('sha256').update(id).digest('hex').slice(0, 8);
+    return `${safe.slice(0, MAX_STEM)}-${hash}.json`;
+}
 /**
  * Writes a Finding as JSON to the appropriate subdirectory.
  * Creates the target directory lazily if it does not yet exist.
@@ -63,7 +121,7 @@ function findingSubdir(type) {
 export async function writeFinding(runDir, finding) {
     const dir = path.join(runDir, findingSubdir(finding.type));
     await fs.mkdir(dir, { recursive: true });
-    await fs.writeFile(path.join(dir, `${finding.id}.json`), JSON.stringify(finding, null, 2), 'utf-8');
+    await fs.writeFile(path.join(dir, findingFileName(finding.id)), JSON.stringify(finding, null, 2), 'utf-8');
 }
 /**
  * Moves all files currently in `agent-results/` to
@@ -89,6 +147,46 @@ export async function archivePhaseResults(runDir, phase, attempt) {
     await fs.mkdir(destDir, { recursive: true });
     await Promise.all(entries.map((entry) => fs.rename(path.join(sourceDir, entry), path.join(destDir, entry))));
 }
+/** Matches the per-request dirs the bridge's agent runner creates. */
+const AGENT_RUN_DIR_RE = /^run-agent-\d+-(\d+)$/;
+/**
+ * Removes all but the newest `keep` `run-agent-{id}-{timestamp}` directories
+ * under `runsRoot` (G-1). POST /agents/:id/run creates one per request; a
+ * long-lived bridge server must prune them or disk usage grows unboundedly.
+ * Ordering uses the name-embedded timestamp (deterministic; no mtime races).
+ * Other entries (pipeline run dirs, files) are never touched. Best-effort:
+ * returns the number of directories removed, 0 when the root is missing.
+ */
+export async function pruneAgentRunDirs(runsRoot, keep) {
+    let entries;
+    try {
+        entries = await fs.readdir(runsRoot);
+    }
+    catch (err) {
+        if (isNodeError(err) && err.code === 'ENOENT')
+            return 0;
+        throw err;
+    }
+    const agentRuns = entries
+        .map((name) => {
+        const match = AGENT_RUN_DIR_RE.exec(name);
+        return match ? { name, ts: Number(match[1]) } : null;
+    })
+        .filter((e) => e !== null)
+        .sort((a, b) => b.ts - a.ts); // newest first
+    const stale = agentRuns.slice(Math.max(0, keep));
+    let removed = 0;
+    for (const { name } of stale) {
+        try {
+            await fs.rm(path.join(runsRoot, name), { recursive: true, force: true });
+            removed++;
+        }
+        catch {
+            // Best-effort: a locked dir (open evidence file) is retried on the next prune.
+        }
+    }
+    return removed;
+}
 function isNodeError(err) {
     return err instanceof Error && 'code' in err;
 }

package/dist/core/evidence.js.map

@@ -1 +1 @@
-{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../core/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAG7B,MAAM,OAAO,GAAG;IACd,eAAe;IACf,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,kBAAkB;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,OAAe,EACf,MAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAAiB;IACtC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,OAAgB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,OAAO,CAAC,EACpC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAChC,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,KAAY,EACZ,OAAe;IAEf,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAErD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,YAAY,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACpB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAClE,CACF,CAAC;AACJ,CAAC;AAUD,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,CAAC;AAC/C,CAAC"}
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../core/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;AAKtC,4EAA4E;AAC5E,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAC5C,kEAAkE;AAClE,MAAM,QAAQ,GAAG,UAAU,CAAC;AAE5B,MAAM,OAAO,GAAG;IACd,eAAe;IACf,oBAAoB;IACpB,oBAAoB;IACpB,sBAAsB;IACtB,eAAe;IACf,kBAAkB;CACnB,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,MAAc;IACnD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,OAAe,EACf,MAAmB;IAEnB,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,OAAO,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,OAAe;IAEf,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,OAAO,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAgB,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,WAA8B;IAE9B,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EACnC,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,EACpC,OAAO,CACR,CAAC;AACJ,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,MAAc;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,EAAE,OAAO,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC;IAC9C,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,MAAc,EAAE,MAAiB;IAC9D,MAAM,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5C,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AAC5F,CAAC;AAED,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,MAAc;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;IACtC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,IAAiB;IACtC,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;QACxB,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,oBAAoB,CAAC;AAC9B,CAAC;AAED;;6EAE6E;AAC7E,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,GAAG,CAAC;IACrB,IAAI,IAAI,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO,GAAG,IAAI,OAAO,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9E,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,IAAI,IAAI,OAAO,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,MAAc,EAAE,OAAgB;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAC3C,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAChC,OAAO,CACR,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,KAAY,EACZ,OAAe;IAEf,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAErD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,OAAO;QACT,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,YAAY,OAAO,EAAE,CAAC,CAAC;IAC5E,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,MAAM,OAAO,CAAC,GAAG,CACf,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CACpB,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAClE,CACF,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AAEjD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,QAAgB,EAAE,IAAY;IACpE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC;QACxD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,OAAO;SACtB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACvD,CAAC,CAAC;SACD,MAAM,CAAC,CAAC,CAAC,EAAqC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SAC5D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe;IAE/C,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IACjD,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACzE,OAAO,EAAE,CAAC;QACZ,CAAC;QAAC,MAAM,CAAC;YACP,+EAA+E;QACjF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAUD,SAAS,WAAW,CAAC,GAAY;IAC/B,OAAO,GAAG,YAAY,KAAK,IAAI,MAAM,IAAI,GAAG,CAAC;AAC/C,CAAC"}

package/dist/core/feature-bdd/fix.d.ts

@@ -0,0 +1,84 @@
+/**
+ * Feature BDD loop — Phase 3: fix routing.
+ *
+ * fixFeature(featureKey, failures, deps) — maps each FeatureRunFailure to a
+ * Finding with trustClass:'untrusted', then routes through the REAL
+ * findingToContext + decideHealOrAsk + PauseGate exports (the same functions
+ * the Orchestrator's private runFixLoop calls internally).
+ *
+ * Because every Finding carries trustClass:'untrusted':
+ *   findingToContext → risky = true  (core/fix-loop.ts line 110)
+ *   decideHealOrAsk  → route = 'pause-and-ask'  (heal-or-ask.ts line 31)
+ * Auto-heal is structurally impossible for LLM-generated test findings.
+ * Human approval via gate.ask() is required for each finding before any fix.
+ *
+ * Reuse proof:
+ *   - findingToContext  imported from core/fix-loop.ts (real export)
+ *   - decideHealOrAsk   imported from core/escalation/heal-or-ask.ts (real export)
+ *   - PauseGate         imported from core/escalation/pause-gate.ts (real export)
+ *   - Finding, FindingType imported from core/types.ts (real types)
+ */
+import { findingToContext } from '../fix-loop.js';
+import { decideHealOrAsk } from '../escalation/heal-or-ask.js';
+import type { HealOrAskResult } from '../escalation/heal-or-ask.js';
+import type { PauseGate } from '../escalation/pause-gate.js';
+import type { HumanAnswer } from '../escalation/types.js';
+import type { FeatureRunFailure } from './run.js';
+/** Outcome for a single finding routed through the escalation gate. */
+export interface FeatureFixDecision {
+    readonly findingId: string;
+    readonly route: HealOrAskResult['route'];
+    readonly reason: string;
+    /** The human's answer — only present for 'pause-and-ask' route. */
+    readonly humanAnswer?: HumanAnswer;
+}
+export interface FeatureFixResult {
+    readonly featureKey: string;
+    /** True only when all findings were cleared (approved or auto-healed). */
+    readonly allCleared: boolean;
+    readonly decisions: readonly FeatureFixDecision[];
+}
+/**
+ * Minimal slice of the fix-loop seam injected for testability.
+ *
+ * In production: pass the real findingToContext + decideHealOrAsk + gate.
+ * In tests: pass stubs that assert the right inputs arrive.
+ *
+ * NOTE: `runFixLoop` is private on Orchestrator and cannot be called in
+ * isolation. fixFeature reuses the SAME exports that runFixLoop calls
+ * internally — findingToContext and decideHealOrAsk — to achieve identical
+ * routing behaviour without reimplementing logic.
+ */
+export interface FixFeatureDeps {
+    /**
+     * The PauseGate that suspends until a human answers.
+     * Wire the same PauseGate that the Orchestrator would use so answers propagate.
+     */
+    readonly gate: PauseGate;
+    /**
+     * Optional confidence bar override (default 0.8 inside decideHealOrAsk).
+     * Useful for tightening the bar in tests without changing the real gate.
+     */
+    readonly threshold?: number;
+    /**
+     * Seam for findingToContext — defaults to the REAL import.
+     * Tests may inject a spy to assert the correct FindingContext is built.
+     */
+    readonly findingToContextFn?: typeof findingToContext;
+    /**
+     * Seam for decideHealOrAsk — defaults to the REAL import.
+     * Tests may inject a spy to assert it was called with the right args.
+     */
+    readonly decideHealOrAskFn?: typeof decideHealOrAsk;
+}
+/**
+ * Route each BDD test failure through the real escalation gate.
+ *
+ * Each Finding carries trustClass:'untrusted' and confidence:0, which causes:
+ *   findingToContext  → risky = true  (core/fix-loop.ts line 110)
+ *   decideHealOrAsk   → route = 'pause-and-ask'  (heal-or-ask.ts line 31)
+ * The gate.ask() suspends until a human approves or rejects.
+ * A single 'reject' leaves allCleared = false (first-do-no-harm).
+ */
+export declare function fixFeature(featureKey: string, failures: readonly FeatureRunFailure[], deps: FixFeatureDeps): Promise<FeatureFixResult>;
+//# sourceMappingURL=fix.d.ts.map

package/dist/core/feature-bdd/fix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.d.ts","sourceRoot":"","sources":["../../../core/feature-bdd/fix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAGH,OAAO,EAAE,gBAAgB,EAAmB,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,KAAK,EAAoB,eAAe,EAAE,MAAM,2BAA2B,CAAC;AACnF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAQ/C,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,mEAAmE;IACnE,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;CACpC;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACnD;AAMD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,OAAO,gBAAgB,CAAC;IACtD;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,eAAe,CAAC;CACrD;AAwCD;;;;;;;;GAQG;AACH,wBAAsB,UAAU,CAC9B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,iBAAiB,EAAE,EACtC,IAAI,EAAE,cAAc,GACnB,OAAO,CAAC,gBAAgB,CAAC,CA8D3B"}

package/dist/core/feature-bdd/fix.js

@@ -0,0 +1,121 @@
+/**
+ * Feature BDD loop — Phase 3: fix routing.
+ *
+ * fixFeature(featureKey, failures, deps) — maps each FeatureRunFailure to a
+ * Finding with trustClass:'untrusted', then routes through the REAL
+ * findingToContext + decideHealOrAsk + PauseGate exports (the same functions
+ * the Orchestrator's private runFixLoop calls internally).
+ *
+ * Because every Finding carries trustClass:'untrusted':
+ *   findingToContext → risky = true  (core/fix-loop.ts line 110)
+ *   decideHealOrAsk  → route = 'pause-and-ask'  (heal-or-ask.ts line 31)
+ * Auto-heal is structurally impossible for LLM-generated test findings.
+ * Human approval via gate.ask() is required for each finding before any fix.
+ *
+ * Reuse proof:
+ *   - findingToContext  imported from core/fix-loop.ts (real export)
+ *   - decideHealOrAsk   imported from core/escalation/heal-or-ask.ts (real export)
+ *   - PauseGate         imported from core/escalation/pause-gate.ts (real export)
+ *   - Finding, FindingType imported from core/types.ts (real types)
+ */
+import * as path from 'node:path';
+import { findingToContext, classifyFinding } from '../fix-loop.js';
+import { decideHealOrAsk } from '../escalation/heal-or-ask.js';
+import { FEATURE_BDD_AGENT_ID } from './run.js';
+import { FeatureArtifactStore } from './store.js';
+// ---------------------------------------------------------------------------
+// Internal helpers
+// ---------------------------------------------------------------------------
+/**
+ * Map a FeatureRunFailure to a Finding with trustClass:'untrusted'.
+ *
+ * trustClass:'untrusted' is NOT optional here — without it:
+ *   findingToContext risky = false (if severity is not critical/high)
+ *   decideHealOrAsk could auto-heal if confidence >= bar
+ * That would execute LLM-generated code without human approval.
+ */
+function failureToFinding(failure, safeKey, index) {
+    // Produce a stable, readable ID from the test file's basename (drops the dir
+    // path so the slug stays debuggable), then sanitise + cap length.
+    const idSlug = path
+        .basename(failure.file, path.extname(failure.file))
+        .replace(/[^A-Za-z0-9]/g, '-')
+        .replace(/-+/g, '-')
+        .slice(-40);
+    return {
+        id: `bdd-${safeKey}-${index}-${idSlug}`,
+        type: 'test-bug',
+        severity: 'high',
+        agentId: FEATURE_BDD_AGENT_ID,
+        module: `feature-bdd-${safeKey}`,
+        description: failure.errorText.slice(0, 500),
+        stackTrace: failure.errorText,
+        trustClass: 'untrusted', // LLM-generated test code — forces pause-and-ask unconditionally
+        confidence: 0, // explicit 0 also forces pause-and-ask via the confidence check
+        ...(failure.file ? { file: failure.file } : {}),
+    };
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Route each BDD test failure through the real escalation gate.
+ *
+ * Each Finding carries trustClass:'untrusted' and confidence:0, which causes:
+ *   findingToContext  → risky = true  (core/fix-loop.ts line 110)
+ *   decideHealOrAsk   → route = 'pause-and-ask'  (heal-or-ask.ts line 31)
+ * The gate.ask() suspends until a human approves or rejects.
+ * A single 'reject' leaves allCleared = false (first-do-no-harm).
+ */
+export async function fixFeature(featureKey, failures, deps) {
+    const { gate, threshold } = deps;
+    // Use real functions unless a test seam is injected
+    const ftc = deps.findingToContextFn ?? findingToContext;
+    const dha = deps.decideHealOrAskFn ?? decideHealOrAsk;
+    const options = threshold !== undefined ? { threshold } : {};
+    // Build findings — each one has trustClass:'untrusted'
+    // classifyFinding is used internally but because we set type:'test-bug' and
+    // the file path may not match /tests/, we need to ensure risky=true always.
+    // The trustClass:'untrusted' guarantees this regardless of classification path.
+    // Sanitise the key to the canonical safe slug BEFORE building Findings, so
+    // Finding id/module fields never embed unsanitised input (also validates the key).
+    const safeKey = FeatureArtifactStore.safeKey(featureKey);
+    const findings = failures.map((f, i) => failureToFinding(f, safeKey, i));
+    const decisions = [];
+    let allCleared = true;
+    for (const finding of findings) {
+        // findingToContext maps the Finding to the FindingContext that decideHealOrAsk consumes.
+        // With trustClass:'untrusted', risky=true → complexity is irrelevant → always pause-and-ask.
+        const ctx = ftc(finding, classifyFinding(finding, []));
+        const decision = dha(ctx, options);
+        if (decision.route === 'auto-heal') {
+            // INVARIANT: untrusted findings (trustClass:'untrusted' + confidence:0) must
+            // ALWAYS route to pause-and-ask. Reaching 'auto-heal' here means a regression
+            // that would apply LLM-generated code WITHOUT human approval — fail loudly
+            // rather than silently bypass the gate (the whole point of this feature).
+            throw new Error(`feature-bdd fix: invariant violation — auto-heal returned for untrusted finding ${finding.id}`);
+        }
+        // pause-and-ask: suspend until the human answers
+        const answer = await gate.ask({
+            agentId: finding.agentId,
+            title: ctx.title,
+            detail: finding.description,
+            ...(finding.suggestedFix !== undefined ? { proposedAction: finding.suggestedFix } : {}),
+        });
+        const cleared = answer.decision !== 'reject';
+        if (!cleared)
+            allCleared = false;
+        decisions.push({
+            findingId: finding.id,
+            route: decision.route,
+            reason: decision.reason,
+            humanAnswer: answer,
+        });
+    }
+    return {
+        featureKey,
+        allCleared,
+        decisions,
+    };
+}
+//# sourceMappingURL=fix.js.map

package/dist/core/feature-bdd/fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../../core/feature-bdd/fix.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAM5D,OAAO,EAAE,oBAAoB,EAAE,MAAM,OAAO,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,SAAS,CAAC;AA4D/C,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E;;;;;;;GAOG;AACH,SAAS,gBAAgB,CAAC,OAA0B,EAAE,OAAe,EAAE,KAAa;IAClF,6EAA6E;IAC7E,kEAAkE;IAClE,MAAM,MAAM,GAAG,IAAI;SAChB,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SAClD,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC;SAC7B,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IACd,OAAO;QACL,EAAE,EAAE,OAAO,OAAO,IAAI,KAAK,IAAI,MAAM,EAAE;QACvC,IAAI,EAAE,UAAyB;QAC/B,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,oBAAoB;QAC7B,MAAM,EAAE,eAAe,OAAO,EAAE;QAChC,WAAW,EAAE,OAAO,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QAC5C,UAAU,EAAE,OAAO,CAAC,SAAS;QAC7B,UAAU,EAAE,WAAW,EAAG,iEAAiE;QAC3F,UAAU,EAAE,CAAC,EAAc,gEAAgE;QAC3F,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,UAAkB,EAClB,QAAsC,EACtC,IAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IACjC,oDAAoD;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,kBAAkB,IAAI,gBAAgB,CAAC;IACxD,MAAM,GAAG,GAAG,IAAI,CAAC,iBAAiB,IAAI,eAAe,CAAC;IAEtD,MAAM,OAAO,GAAqB,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE/E,uDAAuD;IACvD,4EAA4E;IAC5E,4EAA4E;IAC5E,gFAAgF;IAChF,2EAA2E;IAC3E,mFAAmF;IACnF,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAc,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAChD,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAChC,CAAC;IAEF,MAAM,SAAS,GAAyB,EAAE,CAAC;IAC3C,IAAI,UAAU,GAAG,IAAI,CAAC;IAEtB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,yFAAyF;QACzF,6FAA6F;QAC7F,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;QACvD,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAEnC,IAAI,QAAQ,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YACnC,6EAA6E;YAC7E,8EAA8E;YAC9E,2EAA2E;YAC3E,0EAA0E;YAC1E,MAAM,IAAI,KAAK,CACb,mFAAmF,OAAO,CAAC,EAAE,EAAE,CAChG,CAAC;QACJ,CAAC;QAED,iDAAiD;QACjD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC;YAC5B,OAAO,EAAE,OAAO,CAAC,OAAO;YACxB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,MAAM,EAAE,OAAO,CAAC,WAAW;YAC3B,GAAG,CAAC,OAAO,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxF,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,QAAQ,CAAC;QAC7C,IAAI,CAAC,OAAO;YAAE,UAAU,GAAG,KAAK,CAAC;QAEjC,SAAS,CAAC,IAAI,CAAC;YACb,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,KAAK,EAAE,QAAQ,CAAC,KAAK;YACrB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,UAAU;QACV,UAAU;QACV,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/core/feature-bdd/generate.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Feature BDD loop — LLM-driven BDD + test generation.
+ *
+ * Two public async functions:
+ *  - generateBdd:   feature description → BddSpec (validated JSON from LLM)
+ *  - generateTests: BddSpec → GeneratedTests (validated JSON from LLM)
+ *
+ * Both apply:
+ *  1. Prompt redaction — only featureKey, description, and optional caller-supplied
+ *     context string are embedded in prompts. Source files are NEVER read or embedded.
+ *  2. Trust-boundary validation — LLM output is parsed through parseBddSpec /
+ *     parseGeneratedTests before being returned. A malformed response triggers one
+ *     retry; if that also fails, throws LLMProviderError('bad-response').
+ *  3. Content-hash caching — sha256(inputs) key, injectable GenerationCache interface,
+ *     InMemoryGenerationCache provided for easy testing and local dev.
+ *
+ * No new npm dependencies: hashing uses node:crypto (createHash), which ships with
+ * every Node ≥ 20 and is already present in this project's engine requirement.
+ */
+import { type BddSpec, type GeneratedTests } from './schema.js';
+import { type LLMProvider } from './llm-provider.js';
+export interface GenerationCache {
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+}
+export declare class InMemoryGenerationCache implements GenerationCache {
+    private readonly _store;
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    /** Expose for test assertions. */
+    get size(): number;
+    /** Clear all entries. */
+    clear(): void;
+}
+export interface PromptPair {
+    readonly system: string;
+    readonly prompt: string;
+}
+/**
+ * Build the system + user prompt pair for BDD spec generation.
+ *
+ * REDACTION contract:
+ *  - Only `featureKey`, `description`, and the optional caller-supplied `context`
+ *    string are embedded.
+ *  - No source file paths, file contents, or environment details are included.
+ */
+export declare function buildBddPrompt(featureKey: string, description: string, context?: string): PromptPair;
+/**
+ * Build the system + user prompt pair for test file generation from a BddSpec.
+ *
+ * REDACTION contract:
+ *  - Only the BddSpec JSON (which was itself produced from a sanitised prompt)
+ *    is embedded. No file paths, project structure, or environment details.
+ */
+export declare function buildTestsPrompt(bddSpec: BddSpec, framework?: string): PromptPair;
+/** Options for generateBdd. */
+export interface GenerateBddOptions {
+    /** Caller-supplied context string included verbatim in the prompt. */
+    readonly context?: string;
+    /** Injectable cache. If provided, hits skip the LLM call. */
+    readonly cache?: GenerationCache;
+    /** Override the model for this call. */
+    readonly model?: string;
+    /** Override max_tokens for this call. */
+    readonly maxTokens?: number;
+}
+/**
+ * Generate a BddSpec from a feature description using an LLMProvider.
+ *
+ * - LLM is called with temperature 0.
+ * - Output goes through parseBddSpec (validates the untrusted LLM JSON).
+ * - On parse/validation failure: retries ONCE, then throws LLMProviderError('bad-response').
+ * - Cache key: sha256(featureKey + '\0' + description + '\0' + context + model).
+ */
+export declare function generateBdd(provider: LLMProvider, featureKey: string, description: string, opts?: GenerateBddOptions): Promise<BddSpec>;
+/** Options for generateTests. */
+export interface GenerateTestsOptions {
+    /** Override the model for this call. */
+    readonly model?: string;
+    /** Override max_tokens for this call. */
+    readonly maxTokens?: number;
+    /** Injectable cache. */
+    readonly cache?: GenerationCache;
+    /** Test framework (default: 'vitest'). */
+    readonly framework?: string;
+}
+/**
+ * Generate test files from a validated BddSpec using an LLMProvider.
+ *
+ * - LLM is called with temperature 0.
+ * - Output goes through parseGeneratedTests.
+ * - On failure: retries ONCE, then throws LLMProviderError('bad-response').
+ * - Cache key: sha256(JSON.stringify(bddSpec) + model).
+ */
+export declare function generateTests(provider: LLMProvider, bddSpec: BddSpec, opts?: GenerateTestsOptions): Promise<GeneratedTests>;
+//# sourceMappingURL=generate.d.ts.map

package/dist/core/feature-bdd/generate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.d.ts","sourceRoot":"","sources":["../../../core/feature-bdd/generate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAIL,KAAK,OAAO,EACZ,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAoB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAapE,MAAM,WAAW,eAAe;IAC9B,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACzC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,qBAAa,uBAAwB,YAAW,eAAe;IAC7D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA6B;IAE9C,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAIxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIpD,kCAAkC;IAClC,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,yBAAyB;IACzB,KAAK,IAAI,IAAI;CAGd;AA2BD,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,MAAM,GACf,UAAU,CAiCZ;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,OAAO,EAChB,SAAS,GAAE,MAAiB,GAC3B,UAAU,CAmCZ;AAMD,+BAA+B;AAC/B,MAAM,WAAW,kBAAkB;IACjC,sEAAsE;IACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAC/B,QAAQ,EAAE,WAAW,EACrB,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,IAAI,GAAE,kBAAuB,GAC5B,OAAO,CAAC,OAAO,CAAC,CAsBlB;AAgCD,iCAAiC;AACjC,MAAM,WAAW,oBAAoB;IACnC,wCAAwC;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,wBAAwB;IACxB,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;IACjC,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAKD;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,QAAQ,EAAE,WAAW,EACrB,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE,oBAAyB,GAC9B,OAAO,CAAC,cAAc,CAAC,CAmBzB"}