@paths.design/caws-cli 10.0.1 → 10.2.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/README.md +13 -5
  2. package/dist/budget-derivation.js +221 -74
  3. package/dist/commands/agents.js +124 -0
  4. package/dist/commands/evaluate.js +26 -12
  5. package/dist/commands/gates.js +31 -4
  6. package/dist/commands/init.js +7 -4
  7. package/dist/commands/iterate.js +7 -3
  8. package/dist/commands/scope.js +264 -0
  9. package/dist/commands/sidecar.js +6 -3
  10. package/dist/commands/specs.js +359 -4
  11. package/dist/commands/status.js +29 -4
  12. package/dist/commands/templates.js +0 -8
  13. package/dist/commands/validate.js +34 -13
  14. package/dist/commands/verify-acs.js +25 -10
  15. package/dist/commands/waivers.js +147 -5
  16. package/dist/commands/worktree.js +200 -4
  17. package/dist/gates/budget-limit.js +6 -1
  18. package/dist/gates/scope-boundary.js +26 -7
  19. package/dist/gates/spec-completeness.js +8 -1
  20. package/dist/index.js +56 -0
  21. package/dist/policy/PolicyManager.js +14 -7
  22. package/dist/session/session-manager.js +34 -0
  23. package/dist/templates/.caws/schemas/policy.schema.json +101 -34
  24. package/dist/templates/.caws/schemas/scope.schema.json +3 -3
  25. package/dist/templates/.caws/schemas/waivers.schema.json +91 -21
  26. package/dist/templates/.caws/schemas/working-spec.schema.json +253 -89
  27. package/dist/templates/.caws/templates/working-spec.template.yml +3 -1
  28. package/dist/templates/.caws/tools/scope-guard.js +66 -15
  29. package/dist/templates/.claude/README.md +1 -1
  30. package/dist/templates/.claude/hooks/protected-paths.sh +39 -0
  31. package/dist/templates/.claude/hooks/scope-guard.sh +106 -27
  32. package/dist/templates/.claude/hooks/worktree-write-guard.sh +96 -3
  33. package/dist/templates/.claude/rules/worktree-isolation.md +21 -3
  34. package/dist/templates/.claude/settings.json +5 -0
  35. package/dist/templates/CLAUDE.md +56 -0
  36. package/dist/templates/agents.md +47 -0
  37. package/dist/utils/agent-display.js +210 -0
  38. package/dist/utils/agent-session.js +142 -0
  39. package/dist/utils/event-log.js +584 -0
  40. package/dist/utils/event-renderer.js +521 -0
  41. package/dist/utils/schema-validator.js +10 -2
  42. package/dist/utils/working-state.js +25 -0
  43. package/dist/validation/spec-validation.js +102 -9
  44. package/dist/waivers-manager.js +84 -0
  45. package/dist/worktree/worktree-manager.js +593 -26
  46. package/package.json +5 -4
  47. package/templates/.caws/schemas/policy.schema.json +101 -34
  48. package/templates/.caws/schemas/scope.schema.json +3 -3
  49. package/templates/.caws/schemas/waivers.schema.json +91 -21
  50. package/templates/.caws/schemas/working-spec.schema.json +253 -89
  51. package/templates/.caws/templates/working-spec.template.yml +3 -1
  52. package/templates/.caws/tools/scope-guard.js +66 -15
  53. package/templates/.claude/README.md +1 -1
  54. package/templates/.claude/hooks/protected-paths.sh +39 -0
  55. package/templates/.claude/hooks/scope-guard.sh +106 -27
  56. package/templates/.claude/hooks/worktree-write-guard.sh +96 -3
  57. package/templates/.claude/rules/worktree-isolation.md +21 -3
  58. package/templates/.claude/settings.json +5 -0
  59. package/templates/CLAUDE.md +56 -0
  60. package/templates/agents.md +47 -0
@@ -0,0 +1,521 @@
1
+ /**
2
+ * @fileoverview Event Renderer — pure fold over the event log
3
+ *
4
+ * Replays `.caws/events.jsonl` into the same view shape that
5
+ * `working-state.loadState(specId)` produces today. This module is
6
+ * a pure function: same events in → same view out, no filesystem
7
+ * side effects, no writes.
8
+ *
9
+ * The fold logic is a verbatim port of the three pure helpers in
10
+ * `working-state.js` (`computePhase`, `computeBlockers`,
11
+ * `computeNextActions`) — they already operated on a state object,
12
+ * so we simply apply them to the rolling fold result after each event.
13
+ *
14
+ * Phase 1 reads the event log *in addition to* the state layer, not
15
+ * instead of it. The parity test in
16
+ * `tests/integration/event-log-parity.test.js` asserts the two paths
17
+ * produce equivalent views for the fields iterate/status/sidecar/gates
18
+ * actually consume.
19
+ *
20
+ * @author @darianrosebrook
21
+ */
22
+
23
+ const { readEvents } = require('./event-log');
24
+
25
+ // Must match working-state.js for parity.
26
+ const STATE_SCHEMA_VERSION = 'caws.state.v1';
27
+ const MAX_HISTORY = 20;
28
+
29
+ // ---------------------------------------------------------------------------
30
+ // Shape: empty state (mirrors working-state.initializeState)
31
+ // ---------------------------------------------------------------------------
32
+
33
+ /**
34
+ * Build an empty default view for a spec that has no events yet.
35
+ * @param {string} specId
36
+ * @returns {object}
37
+ */
38
+ function emptyView(specId) {
39
+ return {
40
+ schema: STATE_SCHEMA_VERSION,
41
+ spec_id: specId,
42
+ updated_at: null,
43
+ phase: 'not-started',
44
+ files_touched: [],
45
+ validation: null,
46
+ evaluation: null,
47
+ gates: null,
48
+ acceptance_criteria: null,
49
+ blockers: [],
50
+ next_actions: [],
51
+ history: [],
52
+ };
53
+ }
54
+
55
+ // ---------------------------------------------------------------------------
56
+ // Derived-field computation (verbatim port from working-state.js:334-474)
57
+ //
58
+ // These functions operate on the fold result, not on persisted state.
59
+ // They must stay byte-equivalent to the originals until Phase 3 removes
60
+ // the state layer entirely.
61
+ // ---------------------------------------------------------------------------
62
+
63
+ /**
64
+ * Derive the current workflow phase from the folded state.
65
+ * Identical semantics to `working-state.computePhase`.
66
+ * @param {object} state
67
+ * @returns {string}
68
+ */
69
+ function computePhase(state) {
70
+ const v = state.validation;
71
+ const e = state.evaluation;
72
+ const g = state.gates;
73
+ const ac = state.acceptance_criteria;
74
+
75
+ // Closed specs stay closed regardless of prior artifacts.
76
+ if (state.phase === 'closed') return 'closed';
77
+
78
+ // Nothing has run yet
79
+ if (!v && !e && !g && !ac) return 'not-started';
80
+
81
+ // Validation failed or evaluation below 70% → still authoring the spec
82
+ if (v && !v.passed) return 'spec-authoring';
83
+ if (e && e.percentage < 70) return 'spec-authoring';
84
+
85
+ // All ACs pass, all gates pass, evaluation >= 90% → complete
86
+ if (
87
+ ac && ac.total > 0 && ac.fail === 0 && ac.unchecked === 0 &&
88
+ g && g.passed &&
89
+ e && e.percentage >= 90
90
+ ) {
91
+ return 'complete';
92
+ }
93
+
94
+ // All ACs pass, gates have been run → verification phase
95
+ if (ac && ac.total > 0 && ac.fail === 0 && ac.unchecked === 0 && g) {
96
+ return 'verification';
97
+ }
98
+
99
+ // Otherwise: implementation
100
+ return 'implementation';
101
+ }
102
+
103
+ /**
104
+ * Extract active blockers from the folded state.
105
+ * Identical semantics to `working-state.computeBlockers`.
106
+ * @param {object} state
107
+ * @returns {object[]}
108
+ */
109
+ function computeBlockers(state) {
110
+ // Closed specs have no active blockers. This is a Phase 1 divergence
111
+ // from working-state.computeBlockers, which predates the spec_closed
112
+ // event. See EVLOG-001 acceptance criterion A5 and design doc §8.2:
113
+ // closed specs must render with phase=closed and no blockers, without
114
+ // touching the filesystem.
115
+ if (state.phase === 'closed') return [];
116
+
117
+ const blockers = [];
118
+ const now = new Date().toISOString();
119
+
120
+ if (state.validation && !state.validation.passed) {
121
+ blockers.push({
122
+ type: 'validation_failure',
123
+ message: `Validation failed with ${state.validation.error_count} error(s)`,
124
+ since: state.validation.last_run || now,
125
+ });
126
+ }
127
+
128
+ if (state.gates && state.gates.results) {
129
+ for (const g of state.gates.results) {
130
+ if (g.status === 'fail' && g.mode === 'block') {
131
+ blockers.push({
132
+ type: 'gate_failure',
133
+ gate: g.name,
134
+ message: `Gate "${g.name}" is blocking`,
135
+ since: state.gates.last_run || now,
136
+ });
137
+ }
138
+ }
139
+ }
140
+
141
+ if (state.acceptance_criteria && state.acceptance_criteria.fail > 0) {
142
+ const failingIds = (state.acceptance_criteria.results || [])
143
+ .filter((r) => r.status === 'FAIL')
144
+ .map((r) => r.id);
145
+ blockers.push({
146
+ type: 'ac_failure',
147
+ message: `${state.acceptance_criteria.fail} acceptance criteria failing${failingIds.length ? ': ' + failingIds.join(', ') : ''}`,
148
+ since: state.acceptance_criteria.last_run || now,
149
+ });
150
+ }
151
+
152
+ return blockers;
153
+ }
154
+
155
+ /**
156
+ * Compute ordered next actions from the folded state.
157
+ * Identical semantics to `working-state.computeNextActions`.
158
+ * @param {object} state
159
+ * @returns {string[]}
160
+ */
161
+ function computeNextActions(state) {
162
+ const actions = [];
163
+
164
+ // Closed specs have no next actions.
165
+ if (state.phase === 'closed') return [];
166
+
167
+ if (state.validation && !state.validation.passed) {
168
+ actions.push('Fix validation errors, then run: caws validate');
169
+ }
170
+
171
+ if (state.gates && state.gates.results) {
172
+ for (const g of state.gates.results) {
173
+ if (g.status === 'fail' && g.mode === 'block') {
174
+ actions.push(`Fix gate violation: ${g.name}`);
175
+ }
176
+ }
177
+ }
178
+
179
+ if (state.acceptance_criteria) {
180
+ const failing = (state.acceptance_criteria.results || [])
181
+ .filter((r) => r.status === 'FAIL')
182
+ .map((r) => r.id);
183
+ if (failing.length > 0) {
184
+ actions.push(`Fix failing acceptance criteria: ${failing.join(', ')}`);
185
+ }
186
+
187
+ const unchecked = state.acceptance_criteria.unchecked || 0;
188
+ if (unchecked > 0) {
189
+ actions.push(`Add tests for ${unchecked} unchecked acceptance criteria`);
190
+ }
191
+ }
192
+
193
+ if (state.evaluation && state.evaluation.percentage < 80) {
194
+ actions.push(
195
+ `Improve spec quality (currently ${state.evaluation.percentage}%), run: caws evaluate`
196
+ );
197
+ }
198
+
199
+ if (!state.validation) {
200
+ actions.push('Run: caws validate');
201
+ }
202
+
203
+ if (!state.evaluation) {
204
+ actions.push('Run: caws evaluate');
205
+ }
206
+
207
+ if (!state.acceptance_criteria) {
208
+ actions.push('Run: caws verify-acs');
209
+ }
210
+
211
+ if (actions.length === 0) {
212
+ actions.push(
213
+ 'All checks passing. Ready for merge. Run: caws verify-acs --run for final verification.'
214
+ );
215
+ }
216
+
217
+ return actions;
218
+ }
219
+
220
+ // ---------------------------------------------------------------------------
221
+ // Fold: apply a single event to a per-spec view
222
+ // ---------------------------------------------------------------------------
223
+
224
+ /**
225
+ * Apply one event to the given per-spec view. Mutates and returns the view.
226
+ * This mirrors the merge semantics of `working-state.updateState`:
227
+ * - replace-merge for validation/evaluation/gates/acceptance_criteria
228
+ * - set-union merge for files_touched
229
+ * - append-then-cap history
230
+ *
231
+ * @param {object} view
232
+ * @param {object} event
233
+ * @returns {object} The mutated view (returned for chaining)
234
+ */
235
+ function applyEvent(view, event) {
236
+ const { event: type, data = {}, ts } = event;
237
+
238
+ switch (type) {
239
+ case 'spec_created': {
240
+ // No state fields to set here; the spec registry is the source of truth
241
+ // for type/title/risk_tier/mode. We record it in history so the renderer
242
+ // can distinguish "never touched" from "created but not yet worked".
243
+ view.history.push({
244
+ timestamp: ts,
245
+ command: 'specs.create',
246
+ summary: `Created ${data.type || 'spec'}: ${data.title || data.id || view.spec_id}`,
247
+ });
248
+ break;
249
+ }
250
+
251
+ case 'spec_closed': {
252
+ view.phase = 'closed';
253
+ view.blockers = [];
254
+ view.next_actions = [];
255
+ view.history.push({
256
+ timestamp: ts,
257
+ command: 'specs.close',
258
+ summary: `Closed (prior status: ${data.prior_status || 'unknown'})`,
259
+ });
260
+ break;
261
+ }
262
+
263
+ case 'spec_deleted': {
264
+ // A deleted spec shouldn't typically be rendered; if we do see it,
265
+ // mark the view as terminal but leave a trace in history.
266
+ view.phase = 'closed';
267
+ view.history.push({
268
+ timestamp: ts,
269
+ command: 'specs.delete',
270
+ summary: 'Deleted',
271
+ });
272
+ break;
273
+ }
274
+
275
+ case 'validation_completed': {
276
+ view.validation = {
277
+ last_run: ts,
278
+ passed: !!data.passed,
279
+ compliance_score: data.compliance_score ?? null,
280
+ grade: data.grade ?? null,
281
+ error_count: data.error_count ?? 0,
282
+ warning_count: data.warning_count ?? 0,
283
+ };
284
+ const summaryText = data.passed
285
+ ? `Passed (Grade ${view.validation.grade || '?'})`
286
+ : `Failed — ${view.validation.error_count} error(s)`;
287
+ view.history.push({
288
+ timestamp: ts,
289
+ command: 'validate',
290
+ summary: summaryText,
291
+ });
292
+ break;
293
+ }
294
+
295
+ case 'evaluation_completed': {
296
+ view.evaluation = {
297
+ last_run: ts,
298
+ score: data.score,
299
+ max_score: data.max_score,
300
+ percentage: data.percentage,
301
+ grade: data.grade,
302
+ checks_passed: data.checks_passed,
303
+ checks_total: data.checks_total,
304
+ };
305
+ view.history.push({
306
+ timestamp: ts,
307
+ command: 'evaluate',
308
+ summary: `${data.score}/${data.max_score} (${data.percentage}%) Grade ${data.grade}`,
309
+ });
310
+ break;
311
+ }
312
+
313
+ case 'gates_evaluated': {
314
+ view.gates = {
315
+ last_run: ts,
316
+ context: data.context || 'cli',
317
+ passed: !!data.passed,
318
+ summary: data.summary || {},
319
+ results: (data.gates || []).map((g) => ({
320
+ name: g.name,
321
+ status: g.status,
322
+ mode: g.mode,
323
+ })),
324
+ };
325
+ const { blocked = 0, warned = 0, passed = 0 } = data.summary || {};
326
+ view.history.push({
327
+ timestamp: ts,
328
+ command: 'gates',
329
+ summary: `${passed} passed, ${blocked} blocked, ${warned} warned`,
330
+ });
331
+ break;
332
+ }
333
+
334
+ case 'verify_acs_completed': {
335
+ view.acceptance_criteria = {
336
+ last_run: ts,
337
+ total: data.total,
338
+ pass: data.pass,
339
+ fail: data.fail,
340
+ unchecked: data.unchecked,
341
+ results: (data.results || []).map((r) => ({
342
+ id: r.id,
343
+ status: r.status,
344
+ })),
345
+ };
346
+ view.history.push({
347
+ timestamp: ts,
348
+ command: 'verify-acs',
349
+ summary: `${data.pass}/${data.total} pass, ${data.fail} fail, ${data.unchecked} unchecked`,
350
+ });
351
+ break;
352
+ }
353
+
354
+ case 'session_ended': {
355
+ // A session can touch files without calling any spec-scoped command.
356
+ // When the session ends, merge its file list into this spec's view.
357
+ // Only applies if the event carries our spec_id (the caller filters).
358
+ if (Array.isArray(data.files_touched) && data.files_touched.length > 0) {
359
+ const merged = new Set([...view.files_touched, ...data.files_touched]);
360
+ view.files_touched = [...merged];
361
+ view.history.push({
362
+ timestamp: ts,
363
+ command: 'session',
364
+ summary: `+${data.files_touched.length} file(s) touched`,
365
+ });
366
+ }
367
+ break;
368
+ }
369
+
370
+ default:
371
+ // Unknown or non-spec-scoped event type — ignore for this fold.
372
+ break;
373
+ }
374
+
375
+ // Derived fields recomputed on every applicable event.
376
+ view.blockers = computeBlockers(view);
377
+ view.next_actions = computeNextActions(view);
378
+ view.phase = computePhase(view);
379
+ view.updated_at = ts;
380
+
381
+ // Cap history at MAX_HISTORY (matches working-state.updateState).
382
+ if (view.history.length > MAX_HISTORY) {
383
+ view.history = view.history.slice(-MAX_HISTORY);
384
+ }
385
+
386
+ return view;
387
+ }
388
+
389
+ // ---------------------------------------------------------------------------
390
+ // Public API
391
+ // ---------------------------------------------------------------------------
392
+
393
+ /**
394
+ * Fold an event stream into the view for a single spec.
395
+ *
396
+ * Pure function: the same events + specId always produce the same view.
397
+ * No filesystem access. No writes.
398
+ *
399
+ * Events are filtered to those that are either scoped to this spec via
400
+ * `spec_id`, or session-level events whose `data.spec_id` matches.
401
+ *
402
+ * @param {object[]} events — the full event stream (from readEvents)
403
+ * @param {string} specId
404
+ * @returns {object} view matching the shape of working-state.loadState
405
+ */
406
+ function renderSpecState(events, specId) {
407
+ if (!specId || typeof specId !== 'string') {
408
+ throw new Error('event-renderer.renderSpecState: specId is required');
409
+ }
410
+ const view = emptyView(specId);
411
+ for (const event of events) {
412
+ if (!isEventForSpec(event, specId)) continue;
413
+ applyEvent(view, event);
414
+ }
415
+ return view;
416
+ }
417
+
418
+ /**
419
+ * Fold an event stream into a Map of specId → view for every spec that
420
+ * has at least one event in the stream.
421
+ *
422
+ * @param {object[]} events
423
+ * @returns {Map<string, object>}
424
+ */
425
+ function renderAllSpecStates(events) {
426
+ const views = new Map();
427
+ for (const event of events) {
428
+ const specId = getEventSpecId(event);
429
+ if (!specId) continue;
430
+ if (!views.has(specId)) {
431
+ views.set(specId, emptyView(specId));
432
+ }
433
+ applyEvent(views.get(specId), event);
434
+ }
435
+ return views;
436
+ }
437
+
438
+ /**
439
+ * Convenience: read the event log and render a single spec's view.
440
+ * Equivalent to calling `loadState(specId)` but backed by the event log.
441
+ *
442
+ * **Contract parity with `working-state.loadState`**: returns `null` when
443
+ * there are zero events for this spec, matching `loadState`'s behavior of
444
+ * returning `null` when the state file does not exist. This is load-bearing
445
+ * for Phase 2 read flips — call sites like `status.js`'s
446
+ * `loadState(id) || null` coalesce depend on it, and `iterate.js`'s
447
+ * `if (workingState) { ... }` guard would otherwise always be truthy under
448
+ * the event-log path even for untouched specs.
449
+ *
450
+ * `renderSpecState` itself stays pure and always returns a view object
451
+ * (possibly empty). The null translation only happens here, at the
452
+ * `loadState`-compatible boundary.
453
+ *
454
+ * @param {string} specId
455
+ * @param {object} [options]
456
+ * @param {string} [options.projectRoot]
457
+ * @returns {object|null}
458
+ */
459
+ function loadStateFromEvents(specId, options = {}) {
460
+ const events = readEvents(options);
461
+ // If no events match this spec, return null to match loadState's contract.
462
+ let hasMatch = false;
463
+ for (const event of events) {
464
+ if (isEventForSpec(event, specId)) {
465
+ hasMatch = true;
466
+ break;
467
+ }
468
+ }
469
+ if (!hasMatch) return null;
470
+ return renderSpecState(events, specId);
471
+ }
472
+
473
+ /**
474
+ * Determine whether an event is scoped to a given spec.
475
+ * @param {object} event
476
+ * @param {string} specId
477
+ * @returns {boolean}
478
+ */
479
+ function isEventForSpec(event, specId) {
480
+ if (event.spec_id === specId) return true;
481
+ // Session events may carry their own spec_id inside data.
482
+ if (event.event === 'session_ended' && event.data && event.data.spec_id === specId) {
483
+ return true;
484
+ }
485
+ return false;
486
+ }
487
+
488
+ /**
489
+ * Extract the spec_id an event refers to, if any. Used by
490
+ * renderAllSpecStates to group events by spec.
491
+ * @param {object} event
492
+ * @returns {string|null}
493
+ */
494
+ function getEventSpecId(event) {
495
+ if (event.spec_id) return event.spec_id;
496
+ if (event.data && event.data.spec_id) return event.data.spec_id;
497
+ return null;
498
+ }
499
+
500
+ // ---------------------------------------------------------------------------
501
+ // Exports
502
+ // ---------------------------------------------------------------------------
503
+
504
+ module.exports = {
505
+ renderSpecState,
506
+ renderAllSpecStates,
507
+ loadStateFromEvents,
508
+ emptyView,
509
+
510
+ // Exposed for tests only.
511
+ _internal: {
512
+ applyEvent,
513
+ computePhase,
514
+ computeBlockers,
515
+ computeNextActions,
516
+ isEventForSpec,
517
+ getEventSpecId,
518
+ STATE_SCHEMA_VERSION,
519
+ MAX_HISTORY,
520
+ },
521
+ };
@@ -34,8 +34,16 @@ function createValidator(schemaPath) {
34
34
  }
35
35
 
36
36
  function getSchemaPath(schemaName, projectRoot) {
37
- const projectPath = path.join(projectRoot, '.caws', 'schemas', schemaName);
38
- if (fs.existsSync(projectPath)) return projectPath;
37
+ // Order: flat repo layout (`.caws/<name>.schema.json`) wins so
38
+ // repos that tightened a schema in-place (e.g. CAWSFIX-03) are
39
+ // the authoritative source. Nested `.caws/schemas/<name>.schema.json`
40
+ // is the legacy layout kept for back-compat. Bundled template is
41
+ // the last-resort fallback used by globally-installed CLIs and
42
+ // projects without a local copy.
43
+ const flatPath = path.join(projectRoot, '.caws', schemaName);
44
+ if (fs.existsSync(flatPath)) return flatPath;
45
+ const nestedPath = path.join(projectRoot, '.caws', 'schemas', schemaName);
46
+ if (fs.existsSync(nestedPath)) return nestedPath;
39
47
  return path.join(__dirname, '../../templates/.caws/schemas', schemaName);
40
48
  }
41
49
 
@@ -40,11 +40,36 @@ function findRoot(startDir) {
40
40
 
41
41
  /**
42
42
  * Resolve the absolute path for a spec's state file.
43
+ *
44
+ * **Fail-loud contract (CAWSFIX-02)**: throws if `specId` is undefined,
45
+ * null, empty, non-string, or whitespace-only. This fence prevents the
46
+ * `.caws/state/undefined.json` bug class — a historical source of
47
+ * silent data corruption where legacy callers passed `spec.id` without
48
+ * checking whether `spec` was a valid resolved spec.
49
+ *
50
+ * Symmetric with the `REQUIRES_SPEC_ID` fence in `event-log.js` from
51
+ * EVLOG-001: both state-layer and event-log writes now refuse to
52
+ * proceed with an undefined spec id. Callers that legitimately lack a
53
+ * spec id (e.g. legacy working-specs, failed resolveSpec) must guard
54
+ * their calls with `if (spec && spec.id)` — the pattern `gates.js`
55
+ * already uses and which `validate.js`/`evaluate.js`/`verify-acs.js`
56
+ * are updated to use in the same tranche.
57
+ *
43
58
  * @param {string} specId
44
59
  * @param {string} [projectRoot]
45
60
  * @returns {string}
61
+ * @throws {Error} if specId is not a non-empty string
46
62
  */
47
63
  function getStatePath(specId, projectRoot) {
64
+ if (!specId || typeof specId !== 'string' || specId.trim() === '') {
65
+ throw new Error(
66
+ `working-state.getStatePath: specId must be a non-empty string ` +
67
+ `(got ${JSON.stringify(specId)}). This is the fence that prevents ` +
68
+ `the .caws/state/undefined.json bug class — callers without a ` +
69
+ `resolved spec id must guard with \`if (spec && spec.id)\` before ` +
70
+ `invoking saveState/updateState/recordValidation/etc.`
71
+ );
72
+ }
48
73
  const root = projectRoot || findRoot();
49
74
  return path.join(root, STATE_DIR, `${specId}.json`);
50
75
  }