@khoavu882/doflow 2.0.0-beta.4 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (497) hide show
  1. package/README.md +12 -11
  2. package/bin/doflow.js +21 -11
  3. package/core/.antigravity-plugin/plugin.json +1 -3
  4. package/core/.claude-plugin/plugin.json +1 -1
  5. package/core/.codex-plugin/plugin.json +1 -1
  6. package/core/.plugin/plugin.json +1 -1
  7. package/core/harnesses/claude/hooks/lib.sh +43 -24
  8. package/core/harnesses/claude/hooks/mcp-tool-guard.sh +7 -17
  9. package/core/harnesses/claude/hooks/permission-audit.sh +3 -0
  10. package/core/harnesses/claude/hooks/post-compact.sh +35 -32
  11. package/core/harnesses/claude/hooks/post-edit-lint.sh +2 -0
  12. package/core/harnesses/claude/hooks/post-shell-observe.sh +48 -0
  13. package/core/harnesses/claude/hooks/post-tool-failure.sh +3 -0
  14. package/core/harnesses/claude/hooks/pre-bash-guard.sh +7 -17
  15. package/core/harnesses/claude/hooks/pre-compact.sh +23 -27
  16. package/core/harnesses/claude/hooks/pre-implement-gate.sh +7 -18
  17. package/core/harnesses/claude/hooks/session-end.sh +23 -10
  18. package/core/harnesses/claude/hooks/session-start.sh +5 -3
  19. package/core/harnesses/claude/hooks/skill-config-audit.sh +3 -0
  20. package/core/harnesses/claude/hooks/stop-check.sh +5 -3
  21. package/core/harnesses/claude/hooks/subagent-audit.sh +5 -5
  22. package/core/harnesses/claude/hooks/user-prompt-submit.sh +5 -3
  23. package/core/harnesses/claude/settings/settings.json +18 -0
  24. package/core/harnesses/claude/statusline/doflow-statusline.sh +1 -0
  25. package/core/harnesses/codex/agents/core-implementer.toml +1 -0
  26. package/core/harnesses/codex/agents/delivery-lead.toml +10 -0
  27. package/core/harnesses/codex/agents/quality-guardian.toml +1 -1
  28. package/core/harnesses/codex/agents/research-writer.toml +1 -1
  29. package/core/harnesses/codex/agents/reviewer.toml +10 -0
  30. package/core/harnesses/codex/agents/spec-analyst.toml +1 -1
  31. package/core/harnesses/codex/agents/system-architect.toml +1 -1
  32. package/core/harnesses/codex/hooks/lib.sh +44 -25
  33. package/core/harnesses/codex/hooks/mcp-tool-guard.sh +7 -15
  34. package/core/harnesses/codex/hooks/post-edit-lint.impl.sh +3 -1
  35. package/core/harnesses/codex/hooks/pre-bash-guard.sh +7 -15
  36. package/core/harnesses/codex/hooks/pre-compact.impl.sh +29 -26
  37. package/core/harnesses/codex/hooks/pre-implement-gate.sh +7 -16
  38. package/core/harnesses/codex/hooks/session-end.impl.sh +23 -10
  39. package/core/harnesses/codex/hooks/session-start.sh +5 -3
  40. package/core/harnesses/codex/hooks/stop-check.sh +6 -5
  41. package/core/harnesses/codex/hooks/subagent-audit.sh +18 -6
  42. package/core/harnesses/codex/hooks/user-prompt-submit.sh +5 -4
  43. package/core/harnesses/copilot/hooks/doflow-lib.sh +93 -0
  44. package/core/harnesses/copilot/hooks/doflow-mcp-tool-guard.sh +9 -0
  45. package/core/harnesses/copilot/hooks/doflow-pre-bash-guard.sh +9 -0
  46. package/core/harnesses/copilot/hooks/doflow-pre-implement-gate.sh +9 -0
  47. package/core/harnesses/copilot/hooks/doflow-session-start.sh +9 -0
  48. package/core/harnesses/copilot/hooks/doflow-stop-check.sh +9 -0
  49. package/core/harnesses/copilot/hooks/doflow-subagent-start.sh +9 -0
  50. package/core/harnesses/copilot/hooks/doflow-subagent-stop.sh +9 -0
  51. package/core/harnesses/copilot/hooks/doflow.json +57 -0
  52. package/core/harnesses/kiro/agents/doflow.json +1 -1
  53. package/core/harnesses/kiro/hooks/lib.sh +26 -6
  54. package/core/harnesses/kiro/hooks/mcp-tool-guard.sh +21 -5
  55. package/core/harnesses/kiro/hooks/pre-bash-guard.sh +21 -5
  56. package/core/harnesses/kiro/hooks/pre-implement-gate.sh +21 -5
  57. package/core/harnesses/kiro/hooks/session-start.sh +12 -5
  58. package/core/harnesses/kiro/hooks/stop-check.sh +22 -30
  59. package/core/harnesses/pi/extensions/doflow-guard.js +167 -0
  60. package/core/harnesses/shared/hooks/ENVELOPE_MIGRATION.md +27 -12
  61. package/core/harnesses/shared/hooks/adapters/antigravity.js +14 -57
  62. package/core/harnesses/shared/hooks/bridge/bridge.sh +277 -0
  63. package/core/harnesses/shared/hooks/bridge/envelope.jq +129 -0
  64. package/core/harnesses/shared/hooks/bridge/observe-model.sh +75 -0
  65. package/core/harnesses/shared/hooks/bridge/respond.sh +70 -0
  66. package/core/harnesses/shared/hooks/policies/blocked-patterns.conf +28 -14
  67. package/core/harnesses/shared/hooks/policies/capture-failure.sh +51 -16
  68. package/core/harnesses/shared/hooks/policies/compact-text.sh +46 -0
  69. package/core/harnesses/shared/hooks/policies/contract.sh +78 -0
  70. package/core/harnesses/shared/hooks/policies/deny-json.sh +35 -9
  71. package/core/harnesses/shared/hooks/policies/emission-rules.sh +37 -0
  72. package/core/harnesses/shared/hooks/policies/emission.jq +209 -0
  73. package/core/harnesses/shared/hooks/policies/emission.sh +383 -0
  74. package/core/harnesses/shared/hooks/policies/identity.sh +177 -0
  75. package/core/harnesses/shared/hooks/policies/lib.sh +65 -40
  76. package/core/harnesses/shared/hooks/policies/mcp-tool-guard.sh +48 -35
  77. package/core/harnesses/shared/hooks/policies/pre-bash-guard.sh +284 -33
  78. package/core/harnesses/shared/hooks/policies/pre-implementation-gate.sh +180 -110
  79. package/core/harnesses/shared/hooks/policies/session-context.sh +66 -7
  80. package/core/harnesses/shared/hooks/policies/stop-check.sh +61 -23
  81. package/core/harnesses/shared/hooks/policies/subagent-audit.sh +39 -6
  82. package/core/harnesses/shared/hooks/policies/summary-store.sh +347 -0
  83. package/core/harnesses/shared/hooks/policies/user-prompt-submit.sh +97 -159
  84. package/core/harnesses/shared/hooks/stream-hook-runner.js +114 -187
  85. package/core/harnesses/shared/locator/doflow-run +2 -3
  86. package/core/registry/advice.json +3 -3
  87. package/core/registry/assets.json +72 -80
  88. package/core/registry/capabilities.json +12 -0
  89. package/core/registry/contracts.json +60 -33
  90. package/core/registry/contribution-points.json +32 -0
  91. package/core/registry/gates.json +32 -0
  92. package/core/registry/guidance-caps.json +40 -0
  93. package/core/registry/harnesses.json +1542 -277
  94. package/core/registry/lifecycle.json +2837 -37
  95. package/core/registry/mcp.json +5 -1
  96. package/core/registry/models.json +7 -1
  97. package/core/registry/package-templates/README.md +19 -0
  98. package/core/registry/package-templates/agent/files/agent.md +9 -0
  99. package/core/registry/package-templates/agent/template.json +4 -0
  100. package/core/registry/package-templates/capability-provider/files/provider.json +9 -0
  101. package/core/registry/package-templates/capability-provider/template.json +11 -0
  102. package/core/registry/package-templates/debate-preset/files/preset.json +26 -0
  103. package/core/registry/package-templates/debate-preset/template.json +4 -0
  104. package/core/registry/package-templates/review-preset/files/preset.json +30 -0
  105. package/core/registry/package-templates/review-preset/template.json +4 -0
  106. package/core/registry/package-templates/skill/files/SKILL.md +8 -0
  107. package/core/registry/package-templates/skill/template.json +4 -0
  108. package/core/registry/package-templates/worker/files/worker.json +92 -0
  109. package/core/registry/package-templates/worker/template.json +11 -0
  110. package/core/registry/packages/doflow/doflow-package.json +15 -0
  111. package/core/registry/packages/doflow/presets/debate-3.json +26 -0
  112. package/core/registry/protocols.json +61 -0
  113. package/core/registry/routes.json +17 -0
  114. package/core/registry/rules.json +431 -0
  115. package/core/registry/settings.json +276 -0
  116. package/core/registry/storage.json +701 -30
  117. package/core/registry/telemetry.json +236 -0
  118. package/core/registry/transcripts.json +142 -0
  119. package/core/registry/verification.json +76 -1
  120. package/core/registry/workflows.json +55 -0
  121. package/core/shared/agent-specs/core-implementer.md +3 -0
  122. package/core/shared/agent-specs/delivery-lead.md +68 -0
  123. package/core/shared/agent-specs/quality-guardian.md +5 -1
  124. package/core/shared/agent-specs/research-writer.md +10 -3
  125. package/core/shared/agent-specs/reviewer.md +53 -0
  126. package/core/shared/agent-specs/spec-analyst.md +5 -6
  127. package/core/shared/agent-specs/system-architect.md +5 -1
  128. package/core/shared/guidance/DOFLOW_CORE.md +1 -5
  129. package/core/shared/guidance/modes/MODE_DeepResearch.md +1 -1
  130. package/core/shared/guidance/modes/MODE_Orchestration.md +4 -3
  131. package/core/shared/guidance/modes/MODE_Task_Management.md +14 -14
  132. package/core/shared/guidance/pointers/codex.md +1 -4
  133. package/core/shared/guidance/references/ARTIFACT_FORMAT.md +30 -16
  134. package/core/shared/guidance/references/ARTIFACT_VOICE.md +3 -2
  135. package/core/shared/guidance/references/CONSTITUTION_BASE.md +17 -15
  136. package/core/shared/guidance/references/DIAGRAM_GUIDE.md +1 -1
  137. package/core/shared/guidance/references/DOFLOW_CHAIN.md +17 -19
  138. package/core/shared/guidance/references/EVIDENCE_LEDGER.md +7 -8
  139. package/core/shared/guidance/references/MODEL_SELECTION.md +5 -3
  140. package/core/shared/guidance/references/ORCHESTRATION.md +1 -2
  141. package/core/shared/guidance/rules/RULES.md +45 -0
  142. package/core/shared/scripts/doflow/bash/do-args.sh +37 -0
  143. package/core/shared/scripts/doflow/bash/do-exec-paths.sh +4 -0
  144. package/core/shared/scripts/doflow/bash/do-git-state.sh +15 -4
  145. package/core/shared/scripts/doflow/bash/do-parallel-check.sh +4 -0
  146. package/core/shared/scripts/doflow/bash/do-paths.sh +40 -2
  147. package/core/shared/scripts/doflow/bash/do-prereqs.sh +2 -1
  148. package/core/shared/scripts/doflow/bash/do-review-package.sh +4 -0
  149. package/core/shared/scripts/doflow/bash/do-task-brief.sh +58 -16
  150. package/core/shared/scripts/doflow/bash/render-audit.sh +26 -2
  151. package/core/shared/scripts/doflow/bash/render-diagrams.sh +1 -0
  152. package/core/shared/scripts/doflow/bash/render-puml.sh +2 -1
  153. package/core/shared/scripts/doflow/bash/validate-artifacts.sh +48 -4
  154. package/core/shared/scripts/doflow/bin/doflow-run +154 -35
  155. package/core/shared/skills/do/SKILL.md +12 -10
  156. package/core/shared/skills/do/references/advice_calls.md +26 -0
  157. package/core/shared/skills/do/references/pm_routing.md +1 -2
  158. package/core/shared/skills/do/references/program_mode.md +31 -0
  159. package/core/shared/skills/do-brainstorm/SKILL.md +20 -74
  160. package/core/shared/skills/do-brainstorm/references/handoff_branches.md +35 -0
  161. package/core/shared/skills/do-brainstorm/references/intent_seed.md +21 -0
  162. package/core/shared/skills/do-brainstorm/references/round_log.md +17 -0
  163. package/core/shared/skills/do-code-review/SKILL.md +41 -144
  164. package/core/shared/skills/do-code-review/content-types/markdown.md +24 -2
  165. package/core/shared/skills/do-code-review/references/tools.md +90 -0
  166. package/core/shared/skills/do-code-review/scripts/doc_quality_checker.py +549 -7
  167. package/core/shared/skills/do-design/SKILL.md +24 -23
  168. package/core/shared/skills/do-diagnose/SKILL.md +14 -4
  169. package/core/shared/skills/do-document/SKILL.md +11 -1
  170. package/core/shared/skills/do-document/references/deep_research.md +1 -2
  171. package/core/shared/skills/do-document/references/embedded-research.md +18 -6
  172. package/core/shared/skills/do-document/references/implementation-flow.md +5 -6
  173. package/core/shared/skills/do-execute-plan/SKILL.md +17 -59
  174. package/core/shared/skills/do-execute-plan/references/handoff_record.md +7 -2
  175. package/core/shared/skills/do-execute-plan/references/parallel_dispatch.md +13 -0
  176. package/core/shared/skills/do-execute-plan/references/readiness_gate.md +28 -1
  177. package/core/shared/skills/do-execute-plan/references/run_position.md +13 -1
  178. package/core/shared/skills/do-execute-plan/references/scaffold.md +17 -9
  179. package/core/shared/skills/do-execute-plan/references/state_checkpoint.md +11 -0
  180. package/core/shared/skills/do-execute-plan/references/task_attempts.md +78 -24
  181. package/core/shared/skills/do-flow/SKILL.md +8 -9
  182. package/core/shared/skills/do-flow/references/task_classes.md +2 -2
  183. package/core/shared/skills/do-git/SKILL.md +4 -0
  184. package/core/shared/skills/do-implement/SKILL.md +7 -9
  185. package/core/shared/skills/do-plan/SKILL.md +29 -19
  186. package/core/shared/skills/do-test/SKILL.md +7 -4
  187. package/core/shared/templates/doflow/constitution-template.md +9 -3
  188. package/core/shared/templates/doflow/data-model-template.md +1 -1
  189. package/core/shared/templates/doflow/design-template.md +113 -16
  190. package/core/shared/templates/doflow/plan-template.md +11 -10
  191. package/core/shared/templates/doflow/question-log-template.md +14 -2
  192. package/core/shared/templates/doflow/requirement-template.md +1 -1
  193. package/core/worker-evidence/antigravity/checks.json +14 -0
  194. package/core/worker-evidence/codex/2026-10-18-cli-check.json +107 -0
  195. package/core/worker-evidence/codex/2026-10-18-live-run-edit.json +73 -0
  196. package/core/worker-evidence/codex/2026-10-18-live-run-read-only.json +62 -0
  197. package/core/worker-evidence/codex/2026-10-24-cli-check.json +126 -0
  198. package/core/worker-evidence/codex/checks.json +38 -0
  199. package/package.json +10 -6
  200. package/src/adapters/antigravity/index.js +226 -113
  201. package/src/adapters/claude/index.js +39 -5
  202. package/src/adapters/codex/agents.js +25 -15
  203. package/src/adapters/codex/hooks.js +40 -5
  204. package/src/adapters/codex/index.js +100 -22
  205. package/src/adapters/codex/native-projection.js +6 -2
  206. package/src/adapters/copilot/index.js +58 -23
  207. package/src/adapters/copy-tree.js +294 -48
  208. package/src/adapters/guidance-manifest.js +71 -0
  209. package/src/adapters/guidance-pointer.js +19 -0
  210. package/src/adapters/hook-commands.js +6 -10
  211. package/src/adapters/index.js +1 -0
  212. package/src/adapters/kiro/index.js +38 -13
  213. package/src/adapters/opencode/index.js +8 -8
  214. package/src/adapters/pi/hooks.js +120 -0
  215. package/src/adapters/pi/index.js +48 -16
  216. package/src/adapters/resolve-source.js +26 -2
  217. package/src/cli/commands/install.js +3 -2
  218. package/src/cli/commands/reconcile.js +53 -9
  219. package/src/cli/commands/remove.js +2 -2
  220. package/src/cli/commands/rollback.js +6 -3
  221. package/src/cli/commands/self-update.js +18 -9
  222. package/src/cli/commands/status.js +21 -2
  223. package/src/cli/commands/ui.js +99 -0
  224. package/src/cli/commands/update.js +3 -2
  225. package/src/cli/index.js +338 -33
  226. package/src/cli/runtime-commands.js +243 -52
  227. package/src/cli/shared.js +0 -2
  228. package/src/helper/git.js +1 -1
  229. package/src/helper/guardrails.js +1 -1
  230. package/src/helper/marker-merge.js +31 -13
  231. package/src/helper/package-ids.js +37 -0
  232. package/src/helper/semver.js +94 -0
  233. package/src/install/backup.js +105 -15
  234. package/src/install/context.js +1 -1
  235. package/src/install/targets.js +31 -16
  236. package/src/lifecycle/coverage.js +74 -0
  237. package/src/lifecycle/hook-step.js +61 -0
  238. package/src/lifecycle/hook-tier.js +160 -0
  239. package/src/lifecycle/index.js +434 -86
  240. package/src/lifecycle/retired-harnesses.js +318 -0
  241. package/src/lifecycle/view.js +35 -15
  242. package/src/registry/index.js +686 -32
  243. package/src/registry/worker-ids.js +45 -0
  244. package/src/release/build-package.js +0 -3
  245. package/src/release/docs-blocks.js +492 -0
  246. package/src/release/preflight.js +425 -0
  247. package/src/release/rehearse.js +401 -0
  248. package/src/release/release-workflow.js +733 -0
  249. package/src/release/sync-plugin-versions.js +43 -7
  250. package/src/runtime/advice/bench-gate.js +25 -0
  251. package/src/runtime/advice/cli.js +59 -16
  252. package/src/runtime/advice/client.js +32 -9
  253. package/src/runtime/advice/config.js +98 -133
  254. package/src/runtime/advice/doctor.js +1 -1
  255. package/src/runtime/advice/elevation.js +97 -0
  256. package/src/runtime/advice/endpoint-guard.js +9 -3
  257. package/src/runtime/advice/mode.js +37 -0
  258. package/src/runtime/advice/record.js +18 -5
  259. package/src/runtime/advice/registry.js +4 -1
  260. package/src/runtime/advice/shadow-config.js +229 -0
  261. package/src/runtime/advice/shadow-dispatcher.js +276 -0
  262. package/src/runtime/brief-rules.js +81 -0
  263. package/src/runtime/brief-tools.js +111 -34
  264. package/src/runtime/candidate.js +514 -0
  265. package/src/runtime/capabilities/executor.js +450 -0
  266. package/src/runtime/capabilities/loopback.js +41 -0
  267. package/src/runtime/capabilities/sanitizer.js +88 -0
  268. package/src/runtime/capability-router.js +135 -3
  269. package/src/runtime/checkouts.js +73 -11
  270. package/src/runtime/claims.js +27 -12
  271. package/src/runtime/cli-result.js +11 -4
  272. package/src/runtime/cli.js +221 -277
  273. package/src/runtime/config-home.js +42 -0
  274. package/src/runtime/context/arbitrate.js +767 -0
  275. package/src/runtime/context/budget.js +203 -0
  276. package/src/runtime/context/compose.js +1367 -0
  277. package/src/runtime/context/delivery-store.js +100 -0
  278. package/src/runtime/context/emission-rules.js +118 -0
  279. package/src/runtime/context/identity.js +227 -0
  280. package/src/runtime/context/mandatory.js +594 -0
  281. package/src/runtime/context/pointer.js +142 -0
  282. package/src/runtime/context/primary-command.js +117 -0
  283. package/src/runtime/context/primary.js +344 -0
  284. package/src/runtime/context/summary-store.js +655 -0
  285. package/src/runtime/context-pack.js +1106 -245
  286. package/src/runtime/decision-register.js +13 -4
  287. package/src/runtime/dispatch/admission.js +392 -0
  288. package/src/runtime/dispatch/attempt-end.js +274 -0
  289. package/src/runtime/dispatch/command.js +628 -0
  290. package/src/runtime/dispatch/controls.js +904 -0
  291. package/src/runtime/dispatch/envelope.js +276 -0
  292. package/src/runtime/dispatch/grants.js +310 -0
  293. package/src/runtime/dispatch/integrate.js +617 -0
  294. package/src/runtime/dispatch/loop.js +1835 -0
  295. package/src/runtime/dispatch/store.js +352 -0
  296. package/src/runtime/dispatch/verify-run.js +201 -0
  297. package/src/runtime/evidence-fields.js +39 -0
  298. package/src/runtime/evidence-ledger.js +41 -7
  299. package/src/runtime/failure/capture.js +3 -1
  300. package/src/runtime/failure/cli.js +25 -9
  301. package/src/runtime/failure/home.js +57 -30
  302. package/src/runtime/failure/store.js +7 -2
  303. package/src/runtime/feature-pointer.js +174 -0
  304. package/src/runtime/feature-resolve.js +13 -2
  305. package/src/runtime/fleet/command.js +77 -0
  306. package/src/runtime/fleet/projects.js +178 -0
  307. package/src/runtime/fleet/tree.js +383 -0
  308. package/src/runtime/freshness.js +77 -10
  309. package/src/runtime/git-memo.js +46 -0
  310. package/src/runtime/guidance/ablation.js +427 -0
  311. package/src/runtime/health.js +565 -17
  312. package/src/runtime/history-compactor.js +13 -3
  313. package/src/runtime/implementation-gate.js +277 -22
  314. package/src/runtime/inventory/coverage.js +1 -1
  315. package/src/runtime/inventory/index.js +1 -1
  316. package/src/runtime/inventory/precedence.js +2 -2
  317. package/src/runtime/inventory/siblings.js +6 -4
  318. package/src/runtime/knowledge/code-corpus.js +277 -0
  319. package/src/runtime/knowledge/code-lexical.js +130 -0
  320. package/src/runtime/knowledge/code-retrieval.js +307 -0
  321. package/src/runtime/knowledge/code-validation.js +106 -0
  322. package/src/runtime/knowledge/gp3-gate.js +74 -0
  323. package/src/runtime/knowledge/graph-adapter.js +288 -0
  324. package/src/runtime/knowledge/graph-fallback.js +394 -0
  325. package/src/runtime/knowledge/hybrid.js +136 -8
  326. package/src/runtime/knowledge/retrieval.js +34 -1
  327. package/src/runtime/knowledge/rtk-compress.js +77 -0
  328. package/src/runtime/knowledge/semble-bridge.py +106 -0
  329. package/src/runtime/knowledge/semble-lifecycle.js +114 -0
  330. package/src/runtime/knowledge/semble-provider.js +365 -0
  331. package/src/runtime/lifecycle/cli.js +16 -6
  332. package/src/runtime/lifecycle/event-store.js +8 -6
  333. package/src/runtime/lifecycle/followup.js +6 -1
  334. package/src/runtime/lifecycle/overview.js +24 -1
  335. package/src/runtime/lifecycle/report-store.js +8 -10
  336. package/src/runtime/lifecycle/retention.js +95 -31
  337. package/src/runtime/lifecycle/root.js +9 -1
  338. package/src/runtime/lifecycle/status.js +34 -17
  339. package/src/runtime/lifecycle/store-upkeep.js +56 -7
  340. package/src/runtime/mask.js +134 -7
  341. package/src/runtime/mcp-consultations.js +40 -6
  342. package/src/runtime/model-router.js +79 -7
  343. package/src/runtime/models/catalogue.js +191 -0
  344. package/src/runtime/models/command.js +153 -0
  345. package/src/runtime/off-words.js +12 -0
  346. package/src/runtime/outcome.js +3 -3
  347. package/src/runtime/packages/command.js +1009 -0
  348. package/src/runtime/packages/contributions.js +116 -0
  349. package/src/runtime/packages/digest.js +132 -0
  350. package/src/runtime/packages/fetch.js +182 -0
  351. package/src/runtime/packages/grants.js +192 -0
  352. package/src/runtime/packages/index-file.js +134 -0
  353. package/src/runtime/packages/instruction.js +90 -0
  354. package/src/runtime/packages/manifest.js +331 -0
  355. package/src/runtime/packages/points.js +477 -0
  356. package/src/runtime/packages/programs.js +216 -0
  357. package/src/runtime/packages/scaffold.js +277 -0
  358. package/src/runtime/packages/source.js +90 -0
  359. package/src/runtime/packages/state.js +164 -0
  360. package/src/runtime/packages/store.js +449 -0
  361. package/src/runtime/packages/tar.js +106 -0
  362. package/src/runtime/packages/view.js +406 -0
  363. package/src/runtime/plan-check.js +59 -0
  364. package/src/runtime/plan-content.js +324 -0
  365. package/src/runtime/policy-init.js +118 -0
  366. package/src/runtime/profiles/doctor.js +96 -0
  367. package/src/runtime/profiles/resolve.js +244 -0
  368. package/src/runtime/profiles/rollback.js +254 -0
  369. package/src/runtime/profiles/sampler.js +41 -0
  370. package/src/runtime/readiness-record.js +16 -11
  371. package/src/runtime/readiness.js +127 -16
  372. package/src/runtime/research-request.js +50 -25
  373. package/src/runtime/retrieval-plan.js +402 -73
  374. package/src/runtime/retrieval-record.js +293 -0
  375. package/src/runtime/review/command.js +246 -0
  376. package/src/runtime/review/dominance.js +68 -0
  377. package/src/runtime/review/findings.js +434 -0
  378. package/src/runtime/review/identity.js +255 -0
  379. package/src/runtime/review/protocol-command.js +109 -0
  380. package/src/runtime/review/protocols.js +405 -0
  381. package/src/runtime/review/resolve-protocol.js +302 -0
  382. package/src/runtime/review/start.js +530 -0
  383. package/src/runtime/roadmap/facts.js +479 -0
  384. package/src/runtime/roadmap/gates.js +270 -0
  385. package/src/runtime/roadmap/loop.js +1636 -0
  386. package/src/runtime/roadmap/merge.js +381 -0
  387. package/src/runtime/roadmap/rows.js +1113 -0
  388. package/src/runtime/roadmap/seed.js +951 -0
  389. package/src/runtime/rules-report.js +336 -0
  390. package/src/runtime/scaffold/artifacts.js +63 -9
  391. package/src/runtime/scaffold/generate.js +21 -9
  392. package/src/runtime/settings/autopilot.js +106 -0
  393. package/src/runtime/settings/cli.js +280 -0
  394. package/src/runtime/settings/config-write.js +314 -0
  395. package/src/runtime/settings/files.js +271 -0
  396. package/src/runtime/settings/legacy.js +154 -0
  397. package/src/runtime/settings/lexical.js +56 -0
  398. package/src/runtime/settings/prepared-run.js +269 -0
  399. package/src/runtime/settings/project-layers.js +118 -0
  400. package/src/runtime/settings/refs.js +288 -0
  401. package/src/runtime/settings/registry.js +553 -0
  402. package/src/runtime/settings/resolve.js +713 -0
  403. package/src/runtime/settings/shared.js +37 -0
  404. package/src/runtime/settings/worker-billing.js +107 -0
  405. package/src/runtime/settings/write.js +269 -0
  406. package/src/runtime/slot-command.js +78 -0
  407. package/src/runtime/slots.js +671 -0
  408. package/src/runtime/source-version.js +290 -0
  409. package/src/runtime/state-root.js +217 -0
  410. package/src/runtime/storage/cli.js +12 -5
  411. package/src/runtime/storage/engine.js +9 -2
  412. package/src/runtime/storage/registry.js +14 -1
  413. package/src/runtime/storage/roots.js +66 -16
  414. package/src/runtime/storage/rules.js +82 -10
  415. package/src/runtime/storage/upkeep.js +10 -2
  416. package/src/runtime/storage/work-status.js +245 -26
  417. package/src/runtime/task-attempts.js +589 -69
  418. package/src/runtime/task-classifier.js +47 -11
  419. package/src/runtime/task-graph.js +373 -0
  420. package/src/runtime/task-run.js +778 -0
  421. package/src/runtime/task-scope.js +202 -56
  422. package/src/runtime/task-sources.js +147 -0
  423. package/src/runtime/task-state.js +440 -65
  424. package/src/runtime/team/admission.js +301 -0
  425. package/src/runtime/team/envelope.js +324 -0
  426. package/src/runtime/team/review-guard.js +156 -0
  427. package/src/runtime/trace/analyze.js +427 -0
  428. package/src/runtime/trace/baseline.js +770 -0
  429. package/src/runtime/trace/ledger.js +63 -140
  430. package/src/runtime/trace/otlp-export.js +568 -0
  431. package/src/runtime/trace/otlp-map.js +481 -0
  432. package/src/runtime/trace/spans.js +745 -0
  433. package/src/runtime/trace/telemetry.js +225 -0
  434. package/src/runtime/trace/views.js +1 -0
  435. package/src/runtime/transcripts/command.js +98 -0
  436. package/src/runtime/transcripts/cursor.js +326 -0
  437. package/src/runtime/transcripts/read.js +126 -0
  438. package/src/runtime/transcripts/readers/claude-jsonl.js +74 -0
  439. package/src/runtime/transcripts/readers/codex-rollout.js +70 -0
  440. package/src/runtime/transcripts/readers/copilot-events.js +90 -0
  441. package/src/runtime/transcripts/readers/kiro-jsonl.js +77 -0
  442. package/src/runtime/transcripts/readers/pi-jsonl.js +59 -0
  443. package/src/runtime/transcripts/registry.js +161 -0
  444. package/src/runtime/transcripts/stats.js +161 -0
  445. package/src/runtime/verification/check-key.js +628 -0
  446. package/src/runtime/verification/contract-runner.js +546 -11
  447. package/src/runtime/verification/engine.js +499 -9
  448. package/src/runtime/verification/impact.js +617 -0
  449. package/src/runtime/verification/inflight.js +205 -0
  450. package/src/runtime/verification/registry.js +176 -0
  451. package/src/runtime/verification/reuse.js +184 -0
  452. package/src/runtime/verification/telemetry-emit.js +254 -0
  453. package/src/runtime/verification/test-selection.js +67 -7
  454. package/src/runtime/worker/active.js +90 -0
  455. package/src/runtime/worker/cancel.js +222 -0
  456. package/src/runtime/worker/catalogue.js +122 -0
  457. package/src/runtime/worker/command.js +677 -0
  458. package/src/runtime/worker/evidence.js +288 -0
  459. package/src/runtime/worker/launch.js +288 -0
  460. package/src/runtime/worker/models.js +137 -0
  461. package/src/runtime/worker/parsers.js +218 -0
  462. package/src/runtime/worker/probes/index.js +706 -0
  463. package/src/runtime/worker/process-tree.js +415 -0
  464. package/src/runtime/worker/quota.js +43 -0
  465. package/src/runtime/worker/readiness.js +713 -0
  466. package/src/runtime/worker/run-store.js +166 -0
  467. package/src/runtime/worker/supervisor.js +541 -0
  468. package/src/runtime/worker/worktree-check.js +252 -0
  469. package/src/runtime/workflow-engine.js +5 -1
  470. package/src/runtime/workflow-orchestrator.js +578 -63
  471. package/src/runtime/worktree.js +149 -22
  472. package/src/state/index.js +1 -1
  473. package/src/state/lockfile.js +64 -10
  474. package/src/state/run-lock.js +1 -1
  475. package/types/node-commonjs.d.ts +106 -7
  476. package/core/.antigravity-plugin/hooks.json +0 -39
  477. package/core/harnesses/gemini/hooks/hooks.json +0 -77
  478. package/core/harnesses/gemini/hooks/lib.sh +0 -302
  479. package/core/harnesses/gemini/hooks/mcp-tool-guard.sh +0 -21
  480. package/core/harnesses/gemini/hooks/post-edit-lint.sh +0 -39
  481. package/core/harnesses/gemini/hooks/pre-bash-guard.sh +0 -21
  482. package/core/harnesses/gemini/hooks/pre-compact.sh +0 -38
  483. package/core/harnesses/gemini/hooks/pre-implement-gate.sh +0 -22
  484. package/core/harnesses/gemini/hooks/session-end.impl.sh +0 -89
  485. package/core/harnesses/gemini/hooks/session-end.sh +0 -5
  486. package/core/harnesses/gemini/hooks/session-start.sh +0 -5
  487. package/core/harnesses/gemini/settings/adapter-defaults.json +0 -4
  488. package/core/harnesses/shared/hooks/adapters/arg-fields.js +0 -19
  489. package/core/harnesses/shared/hooks/adapters/gemini.js +0 -114
  490. package/core/harnesses/shared/hooks/hooks.json +0 -47
  491. package/core/shared/guidance/FLAGS.md +0 -25
  492. package/core/shared/guidance/rules/RULE_01_SAFETY.md +0 -25
  493. package/core/shared/guidance/rules/RULE_02_WORKFLOW.md +0 -23
  494. package/core/shared/guidance/rules/RULE_03_QUALITY.md +0 -14
  495. package/core/shared/guidance/rules/RULE_04_QUESTIONS.md +0 -46
  496. package/src/adapters/gemini/hooks.js +0 -210
  497. package/src/adapters/gemini/index.js +0 -390
@@ -0,0 +1,594 @@
1
+ 'use strict';
2
+
3
+ // TypeScript migration (agent-docs/BRIEF_GOAL_DOFLOW.md): run directly by Node native type-stripping.
4
+
5
+ const crypto = require('node:crypto');
6
+ const {
7
+ section,
8
+ row,
9
+ joinWrapped,
10
+ parseRequirement,
11
+ } = require('../scaffold/artifacts.js');
12
+
13
+ const VALID_MANDATORY_KEYS = new Set([
14
+ 'objective',
15
+ 'acceptanceCriteria',
16
+ 'constraints',
17
+ 'verificationRequirements',
18
+ 'scopeExcluded',
19
+ 'blockingGaps',
20
+ ]);
21
+
22
+ /**
23
+ * Extracts mandatory fields and provenance from requirement.md text per IC-010.
24
+ * Pure function: text in, structure out. Never throws.
25
+ */
26
+ function extractMandatory({
27
+ text = null,
28
+ path: filePath = 'requirement.md',
29
+ maturity = null,
30
+ featureError = null,
31
+ taskStories = [],
32
+ } = {}) {
33
+ const fields = {
34
+ objective: null,
35
+ acceptanceCriteria: [],
36
+ constraints: [],
37
+ verificationRequirements: [],
38
+ scopeExcluded: [],
39
+ blockingGaps: [],
40
+ };
41
+
42
+ const provenance = {};
43
+
44
+ const fieldKeys = Object.keys(fields);
45
+
46
+ // Failure cases: feature error or artifact absent
47
+ if (featureError) {
48
+ const errorMsg = typeof featureError === 'object' && featureError !== null
49
+ ? (featureError.message || featureError.error)
50
+ : String(featureError);
51
+ for (const k of fieldKeys) {
52
+ provenance[k] = {
53
+ supplied: false,
54
+ source: 'none',
55
+ locator: null,
56
+ digest: null,
57
+ maturity: null,
58
+ reason: `no-active-feature: ${errorMsg}`,
59
+ gaps: [],
60
+ };
61
+ }
62
+ return { fields, provenance };
63
+ }
64
+
65
+ if (text === null || text === undefined) {
66
+ for (const k of fieldKeys) {
67
+ provenance[k] = {
68
+ supplied: false,
69
+ source: 'none',
70
+ locator: null,
71
+ digest: null,
72
+ maturity: null,
73
+ reason: 'artifact-absent',
74
+ gaps: [],
75
+ };
76
+ }
77
+ return { fields, provenance };
78
+ }
79
+
80
+ const rawDigest = crypto.createHash('sha256').update(Buffer.from(text, 'utf8')).digest('hex');
81
+ const digest = `sha256:${rawDigest}`;
82
+
83
+ const parsedReq = parseRequirement(text);
84
+
85
+ let resolvedMaturity = maturity ?? null;
86
+ if (resolvedMaturity === null) {
87
+ const maturityMatch = text.match(/\*\*Maturity:\*\*\s*([^·\r\n]+)/i);
88
+ resolvedMaturity = maturityMatch ? maturityMatch[1].trim() : null;
89
+ }
90
+
91
+ // 1. Objective: ## 1. Summary
92
+ const summaryBody = section(text, /Summary/i);
93
+ if (summaryBody === null) {
94
+ provenance.objective = {
95
+ supplied: false,
96
+ source: 'none',
97
+ locator: null,
98
+ digest,
99
+ maturity: resolvedMaturity,
100
+ reason: 'artifact-malformed: Summary missing',
101
+ gaps: [],
102
+ };
103
+ } else {
104
+ const trimmed = summaryBody.trim();
105
+ if (trimmed === '') {
106
+ provenance.objective = {
107
+ supplied: false,
108
+ source: 'none',
109
+ locator: null,
110
+ digest,
111
+ maturity: resolvedMaturity,
112
+ reason: 'artifact-malformed: Summary holds no items',
113
+ gaps: [],
114
+ };
115
+ } else if (/^none\b/i.test(trimmed)) {
116
+ fields.objective = null;
117
+ provenance.objective = {
118
+ supplied: true,
119
+ source: 'requirement',
120
+ locator: `${filePath}#1-summary`,
121
+ digest,
122
+ maturity: resolvedMaturity,
123
+ reason: 'none-in-artifact',
124
+ gaps: [],
125
+ };
126
+ } else {
127
+ // First paragraph, joined to one line
128
+ const firstPara = trimmed.split(/\n\s*\n/)[0].replace(/\n+/g, ' ').trim();
129
+ fields.objective = firstPara;
130
+ provenance.objective = {
131
+ supplied: true,
132
+ source: 'requirement',
133
+ locator: `${filePath}#1-summary`,
134
+ digest,
135
+ maturity: resolvedMaturity,
136
+ reason: null,
137
+ gaps: [],
138
+ };
139
+ }
140
+ }
141
+
142
+ // 2. Acceptance Criteria & Verification Requirements: ## 6. Acceptance Criteria
143
+ const acceptanceBody = section(text, /Acceptance Criteria/i);
144
+ if (acceptanceBody === null) {
145
+ const acGaps = (parsedReq?.gaps || []).filter((g ) => g.what === 'acceptance criteria');
146
+ provenance.acceptanceCriteria = {
147
+ supplied: false,
148
+ source: 'none',
149
+ locator: null,
150
+ digest,
151
+ maturity: resolvedMaturity,
152
+ reason: 'artifact-malformed: Acceptance Criteria missing',
153
+ gaps: acGaps,
154
+ };
155
+ provenance.verificationRequirements = {
156
+ supplied: false,
157
+ source: 'none',
158
+ locator: null,
159
+ digest,
160
+ maturity: resolvedMaturity,
161
+ reason: 'artifact-malformed: Acceptance Criteria missing',
162
+ gaps: acGaps,
163
+ };
164
+ } else {
165
+ const lines = joinWrapped(acceptanceBody);
166
+ const allCriteriaLines = [];
167
+ for (const l of lines) {
168
+ const match = l.match(/^-\s*\[[ xX]\]\s*(.+?)\s*$/);
169
+ if (match) allCriteriaLines.push(match[1]);
170
+ }
171
+
172
+ if (allCriteriaLines.length === 0) {
173
+ const acGaps = (parsedReq?.gaps || []).filter((g ) => g.what === 'acceptance criteria');
174
+ provenance.acceptanceCriteria = {
175
+ supplied: false,
176
+ source: 'none',
177
+ locator: null,
178
+ digest,
179
+ maturity: resolvedMaturity,
180
+ reason: 'artifact-malformed: Acceptance Criteria holds no items',
181
+ gaps: acGaps,
182
+ };
183
+ provenance.verificationRequirements = {
184
+ supplied: false,
185
+ source: 'none',
186
+ locator: null,
187
+ digest,
188
+ maturity: resolvedMaturity,
189
+ reason: 'artifact-malformed: Acceptance Criteria holds no items',
190
+ gaps: acGaps,
191
+ };
192
+ } else {
193
+ const scenarioLines = allCriteriaLines.filter((l) => /^\*\*Scenario:/i.test(l));
194
+ const nonScenarioLines = allCriteriaLines.filter((l) => !/^\*\*Scenario:/i.test(l));
195
+
196
+ let acSourceLines ;
197
+ let vrSourceLines ;
198
+
199
+ if (scenarioLines.length > 0) {
200
+ acSourceLines = scenarioLines;
201
+ vrSourceLines = nonScenarioLines;
202
+ } else {
203
+ acSourceLines = allCriteriaLines;
204
+ vrSourceLines = allCriteriaLines;
205
+ }
206
+
207
+ // Assign ids in document order, then order items for the task's stories.
208
+ const identifiedAcLines = acSourceLines.map((stmt, idx) => ({
209
+ stmt,
210
+ id: `ac:${idx + 1}`,
211
+ }));
212
+ let sortedAcLines = [...identifiedAcLines];
213
+ if (Array.isArray(taskStories) && taskStories.length > 0) {
214
+ sortedAcLines.sort((a, b) => {
215
+ const aMatch = taskStories.some((s) => a.stmt.includes(s));
216
+ const bMatch = taskStories.some((s) => b.stmt.includes(s));
217
+ return Number(bMatch) - Number(aMatch);
218
+ });
219
+ }
220
+
221
+ fields.acceptanceCriteria = sortedAcLines.map(({ stmt, id }) => {
222
+ const ids = [...new Set(stmt.match(/N?FR-\d+/g) || [])].sort();
223
+ const stories = stmt.match(/US\d+/g) || [];
224
+ return {
225
+ id,
226
+ text: stmt,
227
+ requirements: ids,
228
+ stories,
229
+ };
230
+ });
231
+
232
+ provenance.acceptanceCriteria = {
233
+ supplied: true,
234
+ source: 'requirement',
235
+ locator: `${filePath}#6-acceptance-criteria`,
236
+ digest,
237
+ maturity: resolvedMaturity,
238
+ reason: null,
239
+ gaps: [],
240
+ };
241
+
242
+ fields.verificationRequirements = vrSourceLines.map((stmt, idx) => ({
243
+ id: `vr:${idx + 1}`,
244
+ text: stmt,
245
+ }));
246
+
247
+ provenance.verificationRequirements = {
248
+ supplied: true,
249
+ source: 'requirement',
250
+ locator: `${filePath}#6-acceptance-criteria`,
251
+ digest,
252
+ maturity: resolvedMaturity,
253
+ reason: vrSourceLines.length === 0 ? 'none-in-artifact' : null,
254
+ gaps: [],
255
+ };
256
+ }
257
+ }
258
+
259
+ // 3. Constraints: ## 4. Non-Functional Requirements index
260
+ const nfrBody = section(text, /Non-Functional Requirements/i);
261
+ if (nfrBody === null) {
262
+ provenance.constraints = {
263
+ supplied: false,
264
+ source: 'none',
265
+ locator: null,
266
+ digest,
267
+ maturity: resolvedMaturity,
268
+ reason: 'artifact-malformed: Non-Functional Requirements missing',
269
+ gaps: [],
270
+ };
271
+ } else {
272
+ const trimmedNfr = nfrBody.trim();
273
+ const rows = [];
274
+ for (const l of trimmedNfr.split('\n')) {
275
+ const cells = row(l);
276
+ if (cells && cells.length >= 2) rows.push(cells);
277
+ }
278
+
279
+ const nfrRows = rows.filter((cells) => /^NFR-\d+$/i.test(cells[0].replace(/`/g, '').trim()));
280
+
281
+ if (nfrRows.length === 0) {
282
+ if (/^none\b/i.test(trimmedNfr)) {
283
+ provenance.constraints = {
284
+ supplied: true,
285
+ source: 'requirement',
286
+ locator: `${filePath}#4-non-functional-requirements`,
287
+ digest,
288
+ maturity: resolvedMaturity,
289
+ reason: 'none-in-artifact',
290
+ gaps: [],
291
+ };
292
+ } else {
293
+ provenance.constraints = {
294
+ supplied: false,
295
+ source: 'none',
296
+ locator: null,
297
+ digest,
298
+ maturity: resolvedMaturity,
299
+ reason: 'artifact-malformed: Non-Functional Requirements holds no items',
300
+ gaps: [],
301
+ };
302
+ }
303
+ } else {
304
+ // Exclude Superseded rows
305
+ const activeRows = nfrRows.filter((cells) => !cells.some((c) => /superseded/i.test(c)));
306
+ fields.constraints = activeRows.map((cells) => {
307
+ const id = cells[0].replace(/`/g, '').trim();
308
+ const constraintText = cells[1];
309
+ const kind = cells[2] || 'constraint';
310
+ return {
311
+ id,
312
+ text: constraintText,
313
+ kind,
314
+ };
315
+ });
316
+
317
+ provenance.constraints = {
318
+ supplied: true,
319
+ source: 'requirement',
320
+ locator: `${filePath}#4-non-functional-requirements`,
321
+ digest,
322
+ maturity: resolvedMaturity,
323
+ reason: null,
324
+ gaps: [],
325
+ };
326
+ }
327
+ }
328
+
329
+ // 4. Out of Scope: ## 5. Out of Scope
330
+ const scopeBody = section(text, /Out of Scope/i);
331
+ if (scopeBody === null) {
332
+ provenance.scopeExcluded = {
333
+ supplied: false,
334
+ source: 'none',
335
+ locator: null,
336
+ digest,
337
+ maturity: resolvedMaturity,
338
+ reason: 'artifact-malformed: Out of Scope missing',
339
+ gaps: [],
340
+ };
341
+ } else {
342
+ const trimmedScope = scopeBody.trim();
343
+ if (/^none\b/i.test(trimmedScope)) {
344
+ fields.scopeExcluded = [];
345
+ provenance.scopeExcluded = {
346
+ supplied: true,
347
+ source: 'requirement',
348
+ locator: `${filePath}#5-out-of-scope`,
349
+ digest,
350
+ maturity: resolvedMaturity,
351
+ reason: 'none-in-artifact',
352
+ gaps: [],
353
+ };
354
+ } else {
355
+ const bullets = trimmedScope
356
+ .split('\n')
357
+ .filter((l ) => /^[-*]\s+/.test(l.trim()))
358
+ .map((l ) => l.trim().replace(/^[-*]\s+/, ''));
359
+
360
+ if (bullets.length === 0) {
361
+ provenance.scopeExcluded = {
362
+ supplied: false,
363
+ source: 'none',
364
+ locator: null,
365
+ digest,
366
+ maturity: resolvedMaturity,
367
+ reason: 'artifact-malformed: Out of Scope holds no items',
368
+ gaps: [],
369
+ };
370
+ } else {
371
+ fields.scopeExcluded = bullets.map((b , idx ) => {
372
+ // The bold lead of each bullet, plus its owner clause when present
373
+ const leadMatch = b.match(/\*\*(.+?)\*\*/);
374
+ const ownerMatch = b.match(/\(owner:\s*([^)]+)\)|—\s*owner\s+([^\s(;]+)(?:\s*\([^)]*\))?/i);
375
+ let lead = leadMatch ? leadMatch[1] : b;
376
+ if (ownerMatch) lead += ` (owner: ${(ownerMatch[1] || ownerMatch[2]).trim()})`;
377
+ return {
378
+ id: `scope:${idx + 1}`,
379
+ text: lead,
380
+ };
381
+ });
382
+
383
+ provenance.scopeExcluded = {
384
+ supplied: true,
385
+ source: 'requirement',
386
+ locator: `${filePath}#5-out-of-scope`,
387
+ digest,
388
+ maturity: resolvedMaturity,
389
+ reason: null,
390
+ gaps: [],
391
+ };
392
+ }
393
+ }
394
+ }
395
+
396
+ // 5. Blocking Gaps: ## 7. Open Questions
397
+ const gapsBody = section(text, /Open Questions/i);
398
+ if (gapsBody === null) {
399
+ provenance.blockingGaps = {
400
+ supplied: false,
401
+ source: 'none',
402
+ locator: null,
403
+ digest,
404
+ maturity: resolvedMaturity,
405
+ reason: 'artifact-malformed: Open Questions missing',
406
+ gaps: [],
407
+ };
408
+ } else {
409
+ const trimmedGaps = gapsBody.trim();
410
+ if (/^none\b/i.test(trimmedGaps)) {
411
+ fields.blockingGaps = [];
412
+ provenance.blockingGaps = {
413
+ supplied: true,
414
+ source: 'requirement',
415
+ locator: `${filePath}#7-open-questions`,
416
+ digest,
417
+ maturity: resolvedMaturity,
418
+ reason: 'none-in-artifact',
419
+ gaps: [],
420
+ };
421
+ } else {
422
+ const bullets = trimmedGaps
423
+ .split('\n')
424
+ .filter((l ) => /^[-*]\s+/.test(l.trim()))
425
+ .map((l ) => l.trim().replace(/^[-*]\s+/, ''));
426
+
427
+ if (bullets.length === 0) {
428
+ provenance.blockingGaps = {
429
+ supplied: false,
430
+ source: 'none',
431
+ locator: null,
432
+ digest,
433
+ maturity: resolvedMaturity,
434
+ reason: 'artifact-malformed: Open Questions holds no items',
435
+ gaps: [],
436
+ };
437
+ } else {
438
+ fields.blockingGaps = bullets.map((textLine , idx ) => ({
439
+ id: `gap:${idx + 1}`,
440
+ text: textLine,
441
+ source: 'requirement',
442
+ }));
443
+
444
+ provenance.blockingGaps = {
445
+ supplied: true,
446
+ source: 'requirement',
447
+ locator: `${filePath}#7-open-questions`,
448
+ digest,
449
+ maturity: resolvedMaturity,
450
+ reason: null,
451
+ gaps: [],
452
+ };
453
+ }
454
+ }
455
+ }
456
+
457
+ return { fields, provenance };
458
+ }
459
+
460
+ /**
461
+ * Parses caller-supplied --mandatory-file JSON per IC-011.
462
+ * Validates keys, types, and produces caller items with c<n> ids.
463
+ */
464
+ function parseMandatoryFile(inputContent , inputPath = 'stdin') {
465
+ let parsed ;
466
+ try {
467
+ parsed = JSON.parse(inputContent);
468
+ } catch (err ) {
469
+ const error = new Error(`--mandatory-file is not valid JSON: ${err.message}`);
470
+ error.code = 'USAGE_ERROR';
471
+ throw error;
472
+ }
473
+
474
+ if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
475
+ const error = new Error('--mandatory-file must be a JSON object');
476
+ error.code = 'USAGE_ERROR';
477
+ throw error;
478
+ }
479
+
480
+ for (const key of Object.keys(parsed)) {
481
+ if (!VALID_MANDATORY_KEYS.has(key)) {
482
+ const error = new Error(`--mandatory-file contains unknown key '${key}'. Valid keys: ${[...VALID_MANDATORY_KEYS].join(', ')}`);
483
+ error.code = 'USAGE_ERROR';
484
+ throw error;
485
+ }
486
+ }
487
+
488
+ const digest = `sha256:${crypto.createHash('sha256').update(Buffer.from(inputContent, 'utf8')).digest('hex')}`;
489
+ const locator = inputPath === '-' ? 'stdin' : inputPath;
490
+
491
+ const fields = {};
492
+ const provenance = {};
493
+
494
+ if ('objective' in parsed) {
495
+ if (typeof parsed.objective !== 'string') {
496
+ const error = new Error('--mandatory-file: objective must be a string');
497
+ error.code = 'USAGE_ERROR';
498
+ throw error;
499
+ }
500
+ fields.objective = parsed.objective;
501
+ provenance.objective = {
502
+ supplied: true,
503
+ source: 'caller',
504
+ locator,
505
+ digest,
506
+ maturity: null,
507
+ reason: null,
508
+ gaps: [],
509
+ };
510
+ }
511
+
512
+ const listConfigs = {
513
+ acceptanceCriteria: {
514
+ prefix: 'ac',
515
+ buildItem: (text, id) => ({ id, text, requirements: [], stories: [] }),
516
+ },
517
+ constraints: {
518
+ prefix: 'nfr',
519
+ buildItem: (text, id) => ({ id, text, kind: 'constraint' }),
520
+ },
521
+ verificationRequirements: {
522
+ prefix: 'vr',
523
+ buildItem: (text, id) => ({ id, text }),
524
+ },
525
+ scopeExcluded: {
526
+ prefix: 'scope',
527
+ buildItem: (text, id) => ({ id, text }),
528
+ },
529
+ blockingGaps: {
530
+ prefix: 'gap',
531
+ buildItem: (text, id) => ({ id, text, source: 'caller' }),
532
+ },
533
+ };
534
+
535
+ for (const [key, config] of Object.entries(listConfigs)) {
536
+ if (key in parsed) {
537
+ const val = parsed[key];
538
+ if (!Array.isArray(val) || val.some((item) => typeof item !== 'string')) {
539
+ const error = new Error(`--mandatory-file: ${key} must be an array of strings`);
540
+ error.code = 'USAGE_ERROR';
541
+ throw error;
542
+ }
543
+ if (val.length === 0) {
544
+ fields[key] = [];
545
+ provenance[key] = {
546
+ supplied: true,
547
+ source: 'caller',
548
+ locator,
549
+ digest,
550
+ maturity: null,
551
+ reason: 'caller-supplied-empty',
552
+ gaps: [],
553
+ };
554
+ } else {
555
+ fields[key] = val.map((text, idx) => config.buildItem(text, `${config.prefix}:c${idx + 1}`));
556
+ provenance[key] = {
557
+ supplied: true,
558
+ source: 'caller',
559
+ locator,
560
+ digest,
561
+ maturity: null,
562
+ reason: null,
563
+ gaps: [],
564
+ };
565
+ }
566
+ }
567
+ }
568
+
569
+ return { fields, provenance };
570
+ }
571
+
572
+ /**
573
+ * Replaces derived fields whole with caller overrides (IC-011).
574
+ * Never merges lists.
575
+ */
576
+ function applyMandatoryOverride(derived , override ) {
577
+ if (!override) return derived;
578
+ const fields = { ...derived.fields };
579
+ const provenance = { ...derived.provenance };
580
+
581
+ for (const [key, val] of Object.entries(override.fields)) {
582
+ fields[key] = val;
583
+ provenance[key] = override.provenance[key];
584
+ }
585
+
586
+ return { fields, provenance };
587
+ }
588
+
589
+ module.exports = {
590
+ VALID_MANDATORY_KEYS,
591
+ extractMandatory,
592
+ parseMandatoryFile,
593
+ applyMandatoryOverride,
594
+ };