@planu/cli 0.15.2

package/dist/tools/create-spec/platform-spec-adapter.js

@@ -0,0 +1,189 @@
+// tools/create-spec/platform-spec-adapter.ts
+// SPEC-015a: Adapts FICHA-TECNICA.md technical sheet to bot/smart-contract/ml/iot spec types
+// Criterion 18: create_spec adapts technical sheet to platform type
+// === Platform detection helpers ===
+function isSmartContractSpec(spec, knowledge) {
+    const category = knowledge?.projectCategory;
+    const framework = knowledge?.framework?.toLowerCase() ?? '';
+    const stack = (knowledge?.stack ?? []).map((s) => s.toLowerCase());
+    if (category === 'smart-contract') {
+        return true;
+    }
+    if (['hardhat', 'foundry', 'anchor', 'move'].includes(framework)) {
+        return true;
+    }
+    if (stack.some((s) => ['solidity', 'hardhat', 'foundry'].includes(s))) {
+        return true;
+    }
+    return spec.tags.some((t) => ['smart-contract', 'solidity', 'blockchain', 'defi', 'nft'].includes(t.toLowerCase()));
+}
+function isBotSpec(spec, knowledge) {
+    const category = knowledge?.projectCategory;
+    const stack = (knowledge?.stack ?? []).map((s) => s.toLowerCase());
+    if (category === 'bot') {
+        return true;
+    }
+    if (stack.some((s) => ['discord.js', 'telegraf', 'grammy', '@slack/bolt'].includes(s))) {
+        return true;
+    }
+    return spec.tags.some((t) => ['bot', 'discord', 'telegram', 'slack', 'whatsapp'].includes(t.toLowerCase()));
+}
+function isMLSpec(spec, knowledge) {
+    const category = knowledge?.projectCategory;
+    const stack = (knowledge?.stack ?? []).map((s) => s.toLowerCase());
+    if (category === 'ml') {
+        return true;
+    }
+    const mlIndicators = [
+        'pytorch',
+        'tensorflow',
+        'scikit-learn',
+        'sklearn',
+        'langchain',
+        'transformers',
+    ];
+    if (stack.some((s) => mlIndicators.some((ind) => s.includes(ind)))) {
+        return true;
+    }
+    return spec.tags.some((t) => ['ml', 'ai', 'machine-learning', 'llm', 'rag', 'neural-network'].includes(t.toLowerCase()));
+}
+function isIoTSpec(spec, knowledge) {
+    const category = knowledge?.projectCategory;
+    const stack = (knowledge?.stack ?? []).map((s) => s.toLowerCase());
+    if (category === 'iot') {
+        return true;
+    }
+    if (stack.some((s) => ['platformio', 'arduino', 'zephyr'].includes(s))) {
+        return true;
+    }
+    return spec.tags.some((t) => ['iot', 'embedded', 'arduino', 'esp32', 'raspberry-pi', 'firmware'].includes(t.toLowerCase()));
+}
+// === Section builders ===
+function buildSmartContractSection() {
+    return [
+        '## Smart Contract Architecture',
+        '',
+        '**Contract structure:**',
+        '- `contracts/` — Solidity source files',
+        '- `scripts/` — Deployment scripts',
+        '- `test/` — Contract tests (Hardhat/Foundry)',
+        '',
+        '**Key concerns:**',
+        '- Storage layout: minimize SSTORE calls (pack variables into slots)',
+        '- Access control: define roles upfront (ADMIN_ROLE, MINTER_ROLE, etc.)',
+        '- Upgrade strategy: UUPS / Transparent Proxy / Beacon (if upgradeable)',
+        '- Events: emit on every state change for off-chain indexing',
+        '',
+        '**Security requirements:**',
+        '- [ ] Reentrancy guard (`nonReentrant`) on all value-transferring functions',
+        '- [ ] Slither + Mythril scan must pass before mainnet deployment',
+        '- [ ] Gas optimization: no unbounded loops',
+        '- [ ] Audit scheduled before production launch',
+        '',
+    ];
+}
+function buildBotSection(framework) {
+    const fwLabel = framework || 'discord.js / Telegraf / Slack Bolt';
+    return [
+        '## Bot Architecture',
+        '',
+        `**Framework:** ${fwLabel}`,
+        '',
+        '**Command handler structure:**',
+        '- Command registration (slash commands / message commands)',
+        '- Middleware chain: auth → rate-limit → validate → handle',
+        '- Event listeners: message, interaction, reaction, member join/leave',
+        '',
+        '**Key concerns:**',
+        '- Rate limiting: respect platform API limits per route',
+        '- Cooldowns: per-user cooldown for expensive commands',
+        '- Error handling: graceful degradation, never crash the process',
+        '- State management: Redis or in-memory for ephemeral state',
+        '',
+        '**Bot deployment:**',
+        '- [ ] Bot token stored securely (env var, not code)',
+        '- [ ] Intents declared (only request what you need)',
+        '- [ ] Reconnect logic implemented (exponential backoff)',
+        '- [ ] Logging structured (pino/winston, level=info in production)',
+        '',
+    ];
+}
+function buildMLSection(stack) {
+    const isLangChain = stack.some((s) => s.includes('langchain'));
+    const lines = [
+        '## ML/AI Architecture',
+        '',
+        '**Project structure:**',
+        '- `data/` — Raw and processed datasets (DVC tracked)',
+        '- `models/` — Saved model artifacts',
+        '- `notebooks/` — Exploratory analysis (never used in production)',
+        '- `src/` — Production training and inference code',
+        '',
+        '**ML workflow:**',
+        '1. Data ingestion → validation (Great Expectations)',
+        '2. Feature engineering → preprocessing pipeline',
+        '3. Model training → experiment tracking (MLflow/W&B)',
+        '4. Evaluation → accuracy/F1/latency thresholds',
+        '5. Model registry → staging → production promotion',
+        '',
+    ];
+    if (isLangChain) {
+        lines.push('**LLM-specific concerns:**', '- Prompt versioning (store prompts in version control)', '- Token budget management (track cost per request)', '- Hallucination mitigation (retrieval grounding, self-critique)', '- Evaluation: Ragas / LangSmith for RAG quality metrics', '');
+    }
+    lines.push('**Quality gates:**', '- [ ] Dataset schema validated before training', '- [ ] Experiment tracked with hyperparameters and metrics', '- [ ] Model accuracy threshold met on test split', '- [ ] Drift detection configured for production', '');
+    return lines;
+}
+function buildIoTSection() {
+    return [
+        '## IoT/Embedded Architecture',
+        '',
+        '**Hardware targets:**',
+        '- (List target MCU/board: ESP32, Arduino Mega, STM32, Raspberry Pi, etc.)',
+        '',
+        '**Firmware structure:**',
+        '- `src/main.*` — Entry point and hardware init',
+        '- `src/sensors/` — Sensor drivers',
+        '- `src/comms/` — Network/protocol handlers (MQTT, CoAP, HTTP)',
+        '- `src/storage/` — Local data buffering',
+        '',
+        '**Communication:**',
+        '- Protocol: MQTT / CoAP / HTTP (specify)',
+        '- Broker: (Mosquitto / AWS IoT / Azure IoT Hub)',
+        '- QoS: define per message type (fire-and-forget vs guaranteed delivery)',
+        '',
+        '**Power management:**',
+        '- Sleep modes: deep sleep between readings',
+        '- Wake frequency: (define polling interval)',
+        '- Battery threshold alerts: warn at 20%, critical at 10%',
+        '',
+        '**OTA updates:**',
+        '- [ ] Dual partition OTA (A/B) configured',
+        '- [ ] Checksum validation before applying firmware',
+        '- [ ] Rollback on boot failure',
+        '- [ ] Minimum battery level required for OTA',
+        '',
+    ];
+}
+// === Public API ===
+/**
+ * Get platform-specific FICHA-TECNICA sections for the spec.
+ * Returns empty array if no specialty platform detected.
+ */
+export function getPlatformSpecSection(spec, knowledge) {
+    const stack = (knowledge?.stack ?? []).map((s) => s.toLowerCase());
+    const framework = knowledge?.framework ?? '';
+    if (isSmartContractSpec(spec, knowledge)) {
+        return buildSmartContractSection();
+    }
+    if (isBotSpec(spec, knowledge)) {
+        return buildBotSection(framework);
+    }
+    if (isMLSpec(spec, knowledge)) {
+        return buildMLSection(stack);
+    }
+    if (isIoTSpec(spec, knowledge)) {
+        return buildIoTSection();
+    }
+    return [];
+}
+//# sourceMappingURL=platform-spec-adapter.js.map

package/dist/tools/create-spec/platform-spec-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-spec-adapter.js","sourceRoot":"","sources":["../../../src/tools/create-spec/platform-spec-adapter.ts"],"names":[],"mappings":"AAAA,6CAA6C;AAC7C,6FAA6F;AAC7F,oEAAoE;AAIpE,qCAAqC;AAErC,SAAS,mBAAmB,CAAC,IAAU,EAAE,SAAkC;IACzE,MAAM,QAAQ,GAAG,SAAS,EAAE,eAAe,CAAC;IAC5C,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,gBAAgB,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACtE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CACtF,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAU,EAAE,SAAkC;IAC/D,MAAM,QAAQ,GAAG,SAAS,EAAE,eAAe,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC9E,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,IAAU,EAAE,SAAkC;IAC9D,MAAM,QAAQ,GAAG,SAAS,EAAE,eAAe,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,YAAY,GAAG;QACnB,SAAS;QACT,YAAY;QACZ,cAAc;QACd,SAAS;QACT,WAAW;QACX,cAAc;KACf,CAAC;IACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,IAAI,EAAE,IAAI,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,EAAE,gBAAgB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC3F,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,IAAU,EAAE,SAAkC;IAC/D,MAAM,QAAQ,GAAG,SAAS,EAAE,eAAe,CAAC;IAC5C,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAC1B,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC9F,CAAC;AACJ,CAAC;AAED,2BAA2B;AAE3B,SAAS,yBAAyB;IAChC,OAAO;QACL,gCAAgC;QAChC,EAAE;QACF,yBAAyB;QACzB,wCAAwC;QACxC,mCAAmC;QACnC,8CAA8C;QAC9C,EAAE;QACF,mBAAmB;QACnB,qEAAqE;QACrE,wEAAwE;QACxE,wEAAwE;QACxE,6DAA6D;QAC7D,EAAE;QACF,4BAA4B;QAC5B,6EAA6E;QAC7E,kEAAkE;QAClE,4CAA4C;QAC5C,gDAAgD;QAChD,EAAE;KACH,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,SAAiB;IACxC,MAAM,OAAO,GAAG,SAAS,IAAI,oCAAoC,CAAC;IAClE,OAAO;QACL,qBAAqB;QACrB,EAAE;QACF,kBAAkB,OAAO,EAAE;QAC3B,EAAE;QACF,gCAAgC;QAChC,4DAA4D;QAC5D,2DAA2D;QAC3D,sEAAsE;QACtE,EAAE;QACF,mBAAmB;QACnB,wDAAwD;QACxD,uDAAuD;QACvD,iEAAiE;QACjE,4DAA4D;QAC5D,EAAE;QACF,qBAAqB;QACrB,qDAAqD;QACrD,qDAAqD;QACrD,yDAAyD;QACzD,mEAAmE;QACnE,EAAE;KACH,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAe;IACrC,MAAM,WAAW,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAa;QACtB,uBAAuB;QACvB,EAAE;QACF,wBAAwB;QACxB,sDAAsD;QACtD,qCAAqC;QACrC,kEAAkE;QAClE,mDAAmD;QACnD,EAAE;QACF,kBAAkB;QAClB,qDAAqD;QACrD,iDAAiD;QACjD,sDAAsD;QACtD,gDAAgD;QAChD,oDAAoD;QACpD,EAAE;KACH,CAAC;IAEF,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,4BAA4B,EAC5B,wDAAwD,EACxD,oDAAoD,EACpD,iEAAiE,EACjE,yDAAyD,EACzD,EAAE,CACH,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,IAAI,CACR,oBAAoB,EACpB,gDAAgD,EAChD,2DAA2D,EAC3D,kDAAkD,EAClD,iDAAiD,EACjD,EAAE,CACH,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe;IACtB,OAAO;QACL,8BAA8B;QAC9B,EAAE;QACF,uBAAuB;QACvB,2EAA2E;QAC3E,EAAE;QACF,yBAAyB;QACzB,gDAAgD;QAChD,mCAAmC;QACnC,+DAA+D;QAC/D,yCAAyC;QACzC,EAAE;QACF,oBAAoB;QACpB,0CAA0C;QAC1C,iDAAiD;QACjD,yEAAyE;QACzE,EAAE;QACF,uBAAuB;QACvB,4CAA4C;QAC5C,6CAA6C;QAC7C,0DAA0D;QAC1D,EAAE;QACF,kBAAkB;QAClB,2CAA2C;QAC3C,oDAAoD;QACpD,gCAAgC;QAChC,8CAA8C;QAC9C,EAAE;KACH,CAAC;AACJ,CAAC;AAED,qBAAqB;AAErB;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAU,EAAE,SAAkC;IACnF,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC;IAE7C,IAAI,mBAAmB,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QACzC,OAAO,yBAAyB,EAAE,CAAC;IACrC,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC/B,OAAO,eAAe,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;IAED,IAAI,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC9B,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,IAAI,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAC/B,OAAO,eAAe,EAAE,CAAC;IAC3B,CAAC;IAED,OAAO,EAAE,CAAC;AACZ,CAAC"}

package/dist/tools/create-spec/privacy-spec-adapter.d.ts

@@ -0,0 +1,7 @@
+import type { Spec, ProjectKnowledge } from '../../types/index.js';
+/**
+ * Generates a privacy section for the HU.md if the spec involves PII.
+ * Returns empty array when no PII is detected.
+ */
+export declare function buildPrivacyHuSection(spec: Spec, description: string, knowledge?: ProjectKnowledge | null): string[];
+//# sourceMappingURL=privacy-spec-adapter.d.ts.map

package/dist/tools/create-spec/privacy-spec-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-spec-adapter.d.ts","sourceRoot":"","sources":["../../../src/tools/create-spec/privacy-spec-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAQnE;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAClC,MAAM,EAAE,CAiBV"}

package/dist/tools/create-spec/privacy-spec-adapter.js

@@ -0,0 +1,22 @@
+// tools/create-spec/privacy-spec-adapter.ts — Privacy section for create_spec (SPEC-030)
+// Detects PII in spec content and generates a "Privacidad y Datos" section.
+import { detectPIIInSpec, detectLegalFramework, generateRetentionPolicy, generatePrivacySection, } from '../../engine/pii-detector.js';
+/**
+ * Generates a privacy section for the HU.md if the spec involves PII.
+ * Returns empty array when no PII is detected.
+ */
+export function buildPrivacyHuSection(spec, description, knowledge) {
+    const criteria = `${spec.title} ${description}`;
+    const result = detectPIIInSpec(spec.title, description, criteria);
+    if (!result.hasPII) {
+        return [];
+    }
+    const framework = detectLegalFramework({
+        projectPath: knowledge?.projectPath ?? '',
+        language: knowledge?.language,
+        existingText: description,
+    });
+    const retentionPolicy = generateRetentionPolicy(result.fields, framework);
+    return generatePrivacySection(result, framework, retentionPolicy);
+}
+//# sourceMappingURL=privacy-spec-adapter.js.map

package/dist/tools/create-spec/privacy-spec-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy-spec-adapter.js","sourceRoot":"","sources":["../../../src/tools/create-spec/privacy-spec-adapter.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,4EAA4E;AAG5E,OAAO,EACL,eAAe,EACf,oBAAoB,EACpB,uBAAuB,EACvB,sBAAsB,GACvB,MAAM,8BAA8B,CAAC;AAEtC;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAU,EACV,WAAmB,EACnB,SAAmC;IAEnC,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC;IAChD,MAAM,MAAM,GAAG,eAAe,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAElE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,oBAAoB,CAAC;QACrC,WAAW,EAAE,SAAS,EAAE,WAAW,IAAI,EAAE;QACzC,QAAQ,EAAE,SAAS,EAAE,QAAQ;QAC7B,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,uBAAuB,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAE1E,OAAO,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;AACpE,CAAC"}

package/dist/tools/create-spec/security-spec-adapter.d.ts

@@ -0,0 +1,7 @@
+import type { Spec, ProjectKnowledge } from '../../types/index.js';
+/**
+ * Generates a "## Seguridad" markdown section with OWASP-mapped criteria
+ * specific to the feature's security profile. Called by generateHUContent.
+ */
+export declare function addSecuritySection(spec: Spec, description: string, knowledge?: ProjectKnowledge | null): string[];
+//# sourceMappingURL=security-spec-adapter.d.ts.map

package/dist/tools/create-spec/security-spec-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-spec-adapter.d.ts","sourceRoot":"","sources":["../../../src/tools/create-spec/security-spec-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EACV,IAAI,EACJ,gBAAgB,EAGjB,MAAM,sBAAsB,CAAC;AAS9B;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,IAAI,EACV,WAAW,EAAE,MAAM,EACnB,SAAS,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAClC,MAAM,EAAE,CAoEV"}

package/dist/tools/create-spec/security-spec-adapter.js

@@ -0,0 +1,226 @@
+// tools/create-spec/security-spec-adapter.ts — Security section generator for create_spec
+// SPEC-029: adds Seguridad section with OWASP-mapped acceptance criteria
+import { detectSecurityProfiles, detectAuthMechanism, detectComplianceFrameworks, } from '../../engine/security-analyzer.js';
+// === Security section content generator ===
+/**
+ * Generates a "## Seguridad" markdown section with OWASP-mapped criteria
+ * specific to the feature's security profile. Called by generateHUContent.
+ */
+export function addSecuritySection(spec, description, knowledge) {
+    const profiles = detectSecurityProfiles(spec.title, description, spec.tags);
+    const authMechanism = detectAuthMechanism(description, spec.tags);
+    const complianceFrameworks = detectComplianceFrameworks(description, knowledge?.projectPath ?? '');
+    const lines = ['', '## Seguridad', ''];
+    // OWASP profile-based criteria
+    const criteria = buildSecurityCriteria(profiles, authMechanism);
+    if (criteria.length > 0) {
+        lines.push('### Criterios OWASP');
+        lines.push('');
+        for (const c of criteria) {
+            lines.push(`- [ ] ${c}`);
+        }
+        lines.push('');
+    }
+    // Auth-specific criteria
+    if (authMechanism !== 'none') {
+        const authCriteria = buildAuthCriteria(authMechanism);
+        if (authCriteria.length > 0) {
+            lines.push(`### Mecanismo de autenticación: ${authMechanism.toUpperCase()}`);
+            lines.push('');
+            for (const c of authCriteria) {
+                lines.push(`- [ ] ${c}`);
+            }
+            lines.push('');
+        }
+    }
+    // STRIDE for sensitive features
+    const isHighRisk = profiles.includes('auth') || profiles.includes('pii-data');
+    const featureType = detectStrideFeatureType(spec.title, description);
+    if (isHighRisk || featureType !== 'generic') {
+        lines.push(...buildStrideSection(featureType));
+    }
+    // Compliance criteria
+    if (complianceFrameworks.length > 0) {
+        lines.push(...buildComplianceSection(complianceFrameworks));
+    }
+    // Security headers criterion for public API features
+    if (profiles.includes('public-api')) {
+        lines.push('### Headers de seguridad');
+        lines.push('');
+        lines.push('- [ ] Verificar que todos los security headers estén presentes en el nuevo endpoint: ' +
+            'Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security');
+        lines.push('');
+    }
+    // Supply chain criterion for release/infra specs
+    if (spec.type === 'infra' || spec.tags.includes('release') || spec.tags.includes('deploy')) {
+        lines.push('### Supply Chain Security');
+        lines.push('');
+        lines.push('- [ ] SBOM (Software Bill of Materials) generado para esta release');
+        lines.push('- [ ] Dependencias ancladas a hashes específicos en lockfile');
+        lines.push('- [ ] Pipeline de CI verifica la firma de artefactos antes del despliegue');
+        lines.push('');
+    }
+    return lines;
+}
+// === Internal helpers ===
+function buildSecurityCriteria(profiles, authMechanism) {
+    const criteria = [];
+    const seen = new Set();
+    /* v8 ignore start */
+    const add = (c) => {
+        if (!seen.has(c)) {
+            seen.add(c);
+            criteria.push(c);
+        }
+    };
+    /* v8 ignore stop */
+    if (profiles.includes('public-api')) {
+        add('Autenticación requerida en todos los endpoints no públicos [A01-broken-access-control]');
+        add('Autorización verificada por rol — usuario solo accede a sus propios recursos [A01]');
+        add('Rate limiting aplicado con límites definidos (ej. 100 req/min por IP) [A05]');
+        add('Respuestas de error no exponen stack traces ni detalles internos del sistema [A04]');
+    }
+    if (profiles.includes('db-access')) {
+        add('Todas las consultas usan sentencias parametrizadas o queries preparadas [A03-injection]');
+        add('Input de usuario validado y sanitizado antes de almacenar en BD [A03]');
+        add('Conexión BD usa permisos mínimos necesarios (least privilege) [A01]');
+        add('Datos sensibles (PII, contraseñas) encriptados en reposo [A02-cryptographic-failures]');
+    }
+    if (profiles.includes('file-upload')) {
+        add('Archivos subidos validados por tipo, tamaño y contenido (no solo extensión) [A04]');
+        add('Archivos almacenados fuera del web root sin permisos de ejecución [A05]');
+        add('Nombres de archivo sanitizados — caracteres de path traversal eliminados [A03]');
+    }
+    if (profiles.includes('html-render')) {
+        add('Todo contenido de usuario escapado antes de renderizar en HTML [A03]');
+        add('Content-Security-Policy restringe fuentes de scripts permitidas [A05]');
+    }
+    if (profiles.includes('pii-data')) {
+        add('Campos PII (email, teléfono, SSN) encriptados en reposo [A02]');
+        add('Datos PII redactados en logs — no aparecen emails completos ni datos sensibles [A09]');
+        add('Acceso a PII requiere autorización explícita — no accesible por defecto [A01]');
+    }
+    if (authMechanism !== 'none' && profiles.includes('auth')) {
+        add('Implementar bloqueo de cuenta o delay progresivo tras N intentos fallidos [A07]');
+    }
+    return criteria;
+}
+function buildAuthCriteria(mechanism) {
+    const map = {
+        jwt: [
+            'Tokens JWT tienen expiración definida (claim exp) — máximo 1 hora para access tokens',
+            'Refresh token rotation implementada — refrescar un token invalida el refresh token anterior',
+            'Token blacklisting disponible para revocación inmediata (logout, cambio de contraseña)',
+            "Algoritmo explícitamente configurado a RS256 o HS256 — algoritmo 'none' rechazado",
+        ],
+        oauth2: [
+            'Parámetro state validado para prevenir CSRF en flujo authorization code de OAuth2',
+            'PKCE implementado para clientes públicos (apps móviles, SPAs)',
+            'Access tokens NO almacenados en localStorage — usar sessionStorage o cookies HttpOnly',
+            'Redirect URIs en whitelist — sin vulnerabilidad de open redirect',
+        ],
+        'api-key': [
+            'API keys almacenadas como valores hasheados en BD (bcrypt o SHA-256)',
+            'Política de rotación de API keys definida — se pueden rotar sin downtime',
+            'API keys transmitidas por headers, no por query parameters de URL',
+            'API keys comprometidas pueden revocarse inmediatamente',
+        ],
+        session: [
+            'Cookies de sesión tienen flag HttpOnly configurado para prevenir acceso JavaScript',
+            'Cookies de sesión tienen flag Secure — solo transmitidas por HTTPS',
+            'Cookies de sesión tienen SameSite=Strict o Lax para prevenir CSRF',
+            'Session ID regenerado en login para prevenir session fixation',
+        ],
+    };
+    return map[mechanism] ?? [];
+}
+function detectStrideFeatureType(title, description) {
+    const lower = `${title} ${description}`.toLowerCase();
+    if (lower.includes('payment') || lower.includes('billing') || lower.includes('checkout')) {
+        return 'payment';
+    }
+    if (lower.includes('admin') || lower.includes('dashboard') || lower.includes('management')) {
+        return 'admin';
+    }
+    if (lower.includes('auth') || lower.includes('login') || lower.includes('register')) {
+        return 'auth';
+    }
+    return 'generic';
+}
+function buildStrideSection(featureType) {
+    const lines = ['### Análisis STRIDE', ''];
+    const strideItems = [
+        {
+            id: 'Spoofing',
+            question: featureType === 'auth'
+                ? '¿Cómo se verifica que la identidad presentada es legítima y no suplantada?'
+                : '¿Cómo se verifica la identidad de quien realiza la operación?',
+        },
+        {
+            id: 'Tampering',
+            question: featureType === 'payment'
+                ? '¿Cómo se protege la integridad del monto del pago entre cliente y servidor?'
+                : '¿Cómo se protege la integridad de los datos en esta operación?',
+        },
+        {
+            id: 'Repudiation',
+            question: '¿Qué audit trail existe para esta operación? (usuario, acción, timestamp, recurso)',
+        },
+        {
+            id: 'Information Disclosure',
+            question: '¿Qué datos sensibles podrían filtrarse en logs, errores o respuestas de API?',
+        },
+        {
+            id: 'Denial of Service',
+            question: '¿Cuáles son los rate limits? ¿Qué previene el abuso de esta operación?',
+        },
+        {
+            id: 'Elevation of Privilege',
+            question: featureType === 'admin'
+                ? '¿Qué previene que un usuario sin permisos acceda a funcionalidades de admin?'
+                : '¿Qué previene la escalada de privilegios en esta funcionalidad?',
+        },
+    ];
+    for (const item of strideItems) {
+        lines.push(`**${item.id}**: ${item.question}`);
+        lines.push('');
+    }
+    return lines;
+}
+function buildComplianceSection(frameworks) {
+    const lines = ['### Cumplimiento normativo', ''];
+    const criteriaMap = {
+        hipaa: [
+            'Audit log contiene: ID de usuario, acción, timestamp y recurso afectado para todo acceso a PHI',
+            'PHI (Protected Health Information) encriptado en reposo con AES-256',
+            'PHI transmitido solo por TLS 1.2+ — TLS 1.0/1.1 deshabilitados',
+            'Timeout de sesión automático a los 15-30 minutos de inactividad',
+        ],
+        'pci-dss': [
+            'Número de tarjeta completo (PAN) nunca almacenado tras autorización — solo últimos 4 dígitos',
+            'TLS 1.2+ requerido para toda transmisión de datos de tarjeta',
+            'Política de rotación de claves criptográficas definida y documentada',
+        ],
+        fedramp: [
+            'Sistema usa módulos criptográficos con validación FIPS 140-2',
+            'Datos almacenados solo en regiones cloud autorizadas por FedRAMP',
+        ],
+        soc2: [
+            'Revisiones de acceso realizadas trimestralmente',
+            'Eventos de seguridad registrados y retenidos mínimo 12 meses',
+        ],
+    };
+    for (const framework of frameworks) {
+        const fCriteria = criteriaMap[framework] ?? [];
+        if (fCriteria.length > 0) {
+            lines.push(`**${framework.toUpperCase()}**:`);
+            lines.push('');
+            for (const c of fCriteria) {
+                lines.push(`- [ ] ${c}`);
+            }
+            lines.push('');
+        }
+    }
+    return lines;
+}
+//# sourceMappingURL=security-spec-adapter.js.map

package/dist/tools/create-spec/security-spec-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-spec-adapter.js","sourceRoot":"","sources":["../../../src/tools/create-spec/security-spec-adapter.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,yEAAyE;AAQzE,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,0BAA0B,GAC3B,MAAM,mCAAmC,CAAC;AAE3C,6CAA6C;AAE7C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,IAAU,EACV,WAAmB,EACnB,SAAmC;IAEnC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5E,MAAM,aAAa,GAAG,mBAAmB,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,oBAAoB,GAAG,0BAA0B,CACrD,WAAW,EACX,SAAS,EAAE,WAAW,IAAI,EAAE,CAC7B,CAAC;IAEF,MAAM,KAAK,GAAa,CAAC,EAAE,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC;IAEjD,+BAA+B;IAC/B,MAAM,QAAQ,GAAG,qBAAqB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,yBAAyB;IACzB,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,YAAY,GAAG,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACtD,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC5B,KAAK,CAAC,IAAI,CAAC,mCAAmC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;gBAC7B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,gCAAgC;IAChC,MAAM,UAAU,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC9E,MAAM,WAAW,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;IACrE,IAAI,UAAU,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,CAAC;IACjD,CAAC;IAED,sBAAsB;IACtB,IAAI,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,oBAAoB,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,qDAAqD;IACrD,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CACR,uFAAuF;YACrF,6FAA6F,CAChG,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,iDAAiD;IACjD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACxC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;QACjF,KAAK,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,2EAA2E,CAAC,CAAC;QACxF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,2BAA2B;AAE3B,SAAS,qBAAqB,CAC5B,QAAkC,EAClC,aAA4B;IAE5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,qBAAqB;IACrB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAQ,EAAE;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,oBAAoB;IAEpB,IAAI,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,GAAG,CAAC,wFAAwF,CAAC,CAAC;QAC9F,GAAG,CAAC,oFAAoF,CAAC,CAAC;QAC1F,GAAG,CAAC,6EAA6E,CAAC,CAAC;QACnF,GAAG,CAAC,oFAAoF,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnC,GAAG,CAAC,yFAAyF,CAAC,CAAC;QAC/F,GAAG,CAAC,uEAAuE,CAAC,CAAC;QAC7E,GAAG,CAAC,qEAAqE,CAAC,CAAC;QAC3E,GAAG,CAAC,uFAAuF,CAAC,CAAC;IAC/F,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,mFAAmF,CAAC,CAAC;QACzF,GAAG,CAAC,yEAAyE,CAAC,CAAC;QAC/E,GAAG,CAAC,gFAAgF,CAAC,CAAC;IACxF,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,sEAAsE,CAAC,CAAC;QAC5E,GAAG,CAAC,uEAAuE,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,GAAG,CAAC,+DAA+D,CAAC,CAAC;QACrE,GAAG,CAAC,sFAAsF,CAAC,CAAC;QAC5F,GAAG,CAAC,+EAA+E,CAAC,CAAC;IACvF,CAAC;IAED,IAAI,aAAa,KAAK,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,iFAAiF,CAAC,CAAC;IACzF,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,SAAwB;IACjD,MAAM,GAAG,GAA6B;QACpC,GAAG,EAAE;YACH,sFAAsF;YACtF,6FAA6F;YAC7F,wFAAwF;YACxF,mFAAmF;SACpF;QACD,MAAM,EAAE;YACN,mFAAmF;YACnF,+DAA+D;YAC/D,uFAAuF;YACvF,kEAAkE;SACnE;QACD,SAAS,EAAE;YACT,sEAAsE;YACtE,0EAA0E;YAC1E,mEAAmE;YACnE,wDAAwD;SACzD;QACD,OAAO,EAAE;YACP,oFAAoF;YACpF,oEAAoE;YACpE,mEAAmE;YACnE,+DAA+D;SAChE;KACF,CAAC;IAEF,OAAO,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;AAC9B,CAAC;AAED,SAAS,uBAAuB,CAC9B,KAAa,EACb,WAAmB;IAEnB,MAAM,KAAK,GAAG,GAAG,KAAK,IAAI,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IACtD,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC3F,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACpF,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAqD;IAC/E,MAAM,KAAK,GAAa,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;IAEpD,MAAM,WAAW,GAAuC;QACtD;YACE,EAAE,EAAE,UAAU;YACd,QAAQ,EACN,WAAW,KAAK,MAAM;gBACpB,CAAC,CAAC,4EAA4E;gBAC9E,CAAC,CAAC,+DAA+D;SACtE;QACD;YACE,EAAE,EAAE,WAAW;YACf,QAAQ,EACN,WAAW,KAAK,SAAS;gBACvB,CAAC,CAAC,6EAA6E;gBAC/E,CAAC,CAAC,gEAAgE;SACvE;QACD;YACE,EAAE,EAAE,aAAa;YACjB,QAAQ,EACN,oFAAoF;SACvF;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,QAAQ,EAAE,8EAA8E;SACzF;QACD;YACE,EAAE,EAAE,mBAAmB;YACvB,QAAQ,EAAE,wEAAwE;SACnF;QACD;YACE,EAAE,EAAE,wBAAwB;YAC5B,QAAQ,EACN,WAAW,KAAK,OAAO;gBACrB,CAAC,CAAC,8EAA8E;gBAChF,CAAC,CAAC,iEAAiE;SACxE;KACF,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC/C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,sBAAsB,CAAC,UAAoB;IAClD,MAAM,KAAK,GAAa,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAE3D,MAAM,WAAW,GAA6B;QAC5C,KAAK,EAAE;YACL,gGAAgG;YAChG,qEAAqE;YACrE,gEAAgE;YAChE,iEAAiE;SAClE;QACD,SAAS,EAAE;YACT,8FAA8F;YAC9F,8DAA8D;YAC9D,sEAAsE;SACvE;QACD,OAAO,EAAE;YACP,8DAA8D;YAC9D,kEAAkE;SACnE;QACD,IAAI,EAAE;YACJ,iDAAiD;YACjD,8DAA8D;SAC/D;KACF,CAAC;IAEF,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,SAAS,GAAG,WAAW,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC9C,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tools/create-spec-hu/advanced-testing-hu-adapter.d.ts

@@ -0,0 +1,8 @@
+import type { ProjectKnowledge } from '../../types/index.js';
+/**
+ * Build the advanced testing criteria section for HU.md.
+ * Emits property-based, mutation, accessibility, and test data criteria
+ * based on target and detected project knowledge.
+ */
+export declare function buildAdvancedTestingHuSection(target: string, knowledge: ProjectKnowledge | null | undefined): string[];
+//# sourceMappingURL=advanced-testing-hu-adapter.d.ts.map

package/dist/tools/create-spec-hu/advanced-testing-hu-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced-testing-hu-adapter.d.ts","sourceRoot":"","sources":["../../../src/tools/create-spec-hu/advanced-testing-hu-adapter.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAU7D;;;;GAIG;AACH,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,GAC7C,MAAM,EAAE,CA+CV"}

package/dist/tools/create-spec-hu/advanced-testing-hu-adapter.js

@@ -0,0 +1,46 @@
+// tools/create-spec-hu/advanced-testing-hu-adapter.ts — SPEC-049
+// Adds advanced testing criteria to HU.md based on target and project knowledge.
+import { isWebProject, buildA11yCriteria, } from '../../engine/advanced-testing/accessibility-checker.js';
+import { buildTestDataCriteria } from '../../engine/advanced-testing/test-data-advisor.js';
+/** Targets where advanced testing patterns are relevant. */
+const ADVANCED_TESTING_TARGETS = new Set(['backend', 'frontend', 'fullstack', 'shared']);
+/**
+ * Build the advanced testing criteria section for HU.md.
+ * Emits property-based, mutation, accessibility, and test data criteria
+ * based on target and detected project knowledge.
+ */
+export function buildAdvancedTestingHuSection(target, knowledge) {
+    if (!ADVANCED_TESTING_TARGETS.has(target)) {
+        return [];
+    }
+    const lines = ['', '## Advanced Testing Patterns', ''];
+    const stack = knowledge?.stack ?? [];
+    // S1 — Property-based testing invariant criteria (always relevant for domain modules)
+    lines.push('### Property-Based Testing', '');
+    lines.push('- [ ] Para cualquier combinación válida de inputs, la función retorna un resultado dentro del rango esperado (verificado con property-based testing)');
+    lines.push('- [ ] La operación es idempotente: aplicarla N veces produce el mismo resultado que aplicarla 1 vez');
+    lines.push('- [ ] La operación es commutativa cuando aplica: el orden de los operandos no afecta el resultado');
+    lines.push('');
+    // S2 — Mutation testing criteria for critical modules
+    lines.push('### Mutation Testing', '');
+    lines.push('- [ ] Los módulos críticos (payment, auth, data integrity) tienen mutation score ≥ 80% — los tests detectan al menos 80% de mutaciones simples (operadores lógicos, comparaciones, valores de retorno)');
+    lines.push('');
+    // S4 — Accessibility criteria (web projects only)
+    if (isWebProject(stack) || target === 'frontend' || target === 'fullstack') {
+        lines.push('### Accessibility (WCAG 2.1 Level AA)', '');
+        const a11yCriteria = buildA11yCriteria();
+        for (const criterion of a11yCriteria) {
+            lines.push(criterion);
+        }
+        lines.push('');
+    }
+    // S5 — Test data criteria
+    lines.push('### Test Data Management', '');
+    const testDataCriteria = buildTestDataCriteria();
+    for (const criterion of testDataCriteria) {
+        lines.push(criterion);
+    }
+    lines.push('');
+    return lines;
+}
+//# sourceMappingURL=advanced-testing-hu-adapter.js.map

package/dist/tools/create-spec-hu/advanced-testing-hu-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"advanced-testing-hu-adapter.js","sourceRoot":"","sources":["../../../src/tools/create-spec-hu/advanced-testing-hu-adapter.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,iFAAiF;AAGjF,OAAO,EACL,YAAY,EACZ,iBAAiB,GAClB,MAAM,wDAAwD,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,MAAM,oDAAoD,CAAC;AAE3F,4DAA4D;AAC5D,MAAM,wBAAwB,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEzF;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAC3C,MAAc,EACd,SAA8C;IAE9C,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1C,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,EAAE,EAAE,8BAA8B,EAAE,EAAE,CAAC,CAAC;IACjE,MAAM,KAAK,GAAG,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC;IAErC,sFAAsF;IACtF,KAAK,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,CAAC,CAAC;IAC7C,KAAK,CAAC,IAAI,CACR,sJAAsJ,CACvJ,CAAC;IACF,KAAK,CAAC,IAAI,CACR,qGAAqG,CACtG,CAAC;IACF,KAAK,CAAC,IAAI,CACR,mGAAmG,CACpG,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,sDAAsD;IACtD,KAAK,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;IACvC,KAAK,CAAC,IAAI,CACR,wMAAwM,CACzM,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,kDAAkD;IAClD,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3E,KAAK,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;QACxD,MAAM,YAAY,GAAG,iBAAiB,EAAE,CAAC;QACzC,KAAK,MAAM,SAAS,IAAI,YAAY,EAAE,CAAC;YACrC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IAED,0BAA0B;IAC1B,KAAK,CAAC,IAAI,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GAAG,qBAAqB,EAAE,CAAC;IACjD,KAAK,MAAM,SAAS,IAAI,gBAAgB,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEf,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tools/create-spec-hu/ai-native-hu-adapter.d.ts

@@ -0,0 +1,9 @@
+import type { ProjectKnowledge } from '../../types/index.js';
+/**
+ * Build AI-native architecture section for HU.md.
+ * Emits criteria for latency, fallback, prompt versioning, observability
+ * and cost governance when the project is AI-native.
+ * Returns empty array for AI-bolted-on or non-AI projects.
+ */
+export declare function buildAiNativeHuSection(knowledge?: ProjectKnowledge | null): string[];
+//# sourceMappingURL=ai-native-hu-adapter.d.ts.map

package/dist/tools/create-spec-hu/ai-native-hu-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-native-hu-adapter.d.ts","sourceRoot":"","sources":["../../../src/tools/create-spec-hu/ai-native-hu-adapter.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,SAAS,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,MAAM,EAAE,CA+FpF"}

package/dist/tools/create-spec-hu/ai-native-hu-adapter.js

@@ -0,0 +1,43 @@
+// tools/create-spec-hu/ai-native-hu-adapter.ts — SPEC-056
+// Builds AI-Native Architecture criteria for HU.md:
+// latency budget, fallback chain, prompt versioning, observability, cost governance.
+/**
+ * Build AI-native architecture section for HU.md.
+ * Emits criteria for latency, fallback, prompt versioning, observability
+ * and cost governance when the project is AI-native.
+ * Returns empty array for AI-bolted-on or non-AI projects.
+ */
+export function buildAiNativeHuSection(knowledge) {
+    if (!knowledge) {
+        return [];
+    }
+    const detection = knowledge.aiNativeDetection;
+    if (!detection?.isAiNative) {
+        return [];
+    }
+    const lines = ['', '## AI-Native Architecture Requirements', ''];
+    // S5: Latency budget
+    lines.push('### Latency Budget', '', '- [ ] P99 < 2s para llamadas LLM en flujo sincrono, P99 < 30s para flujos async con streaming habilitado', '- [ ] El sistema mide y reporta latencia por modelo y por endpoint en dashboard de observabilidad', '');
+    // S6: Fallback chain
+    lines.push('### Fallback Chain', '', '- [ ] Si LLM primario falla o excede timeout -> fallback a modelo secundario -> fallback a respuesta cached/rule-based', '- [ ] Cada nivel de fallback tiene metricas independientes (count, latency, success rate)', '- [ ] El fallback chain es configurable sin re-deploy (feature flags o config file)', '');
+    // S7: Prompt versioning
+    lines.push('### Prompt Versioning', '', '- [ ] Prompts almacenados con version semantica (major.minor.patch)', '- [ ] Cambios en prompts deprecan versiones anteriores con migration path documentado', '- [ ] Historial de versiones de prompts accesible para rollback en produccion', '');
+    // S8: Observability
+    lines.push('### Inference Observability', '', '- [ ] Cada request LLM registra: token count (input/output), latency P50/P99, cost estimado, model version, prompt version', '- [ ] Dashboard de metricas de inferencia disponible para el equipo de desarrollo', '');
+    // S15: Cost governance
+    lines.push('### Cost Governance', '', '- [ ] LLM spend tiene limite mensual configurado + alertas al 80% del presupuesto', '- [ ] Cost per request se registra en metricas y es consultable por endpoint/feature', '- [ ] Alertas de anomalia cuando el costo por request supera 2x el promedio historico', '');
+    // Agentic patterns criteria (S14)
+    if (detection.agenticPatterns.length > 0) {
+        lines.push('### Agentic Patterns', '', `- Patrones detectados: ${detection.agenticPatterns.join(', ')}`, '- [ ] Cada agente tiene un scope de permisos maximo documentado', '- [ ] Los loops de agentes tienen un max-iterations configurable para prevenir runaway execution', '');
+    }
+    // Memory patterns criteria (S13)
+    if (detection.memoryPatterns.length > 0) {
+        lines.push('### Memory Management', '', `- Patrones detectados: ${detection.memoryPatterns.join(', ')}`, '- [ ] La politica de retencion de memoria esta documentada (TTL, max entries, eviction strategy)', '');
+    }
+    // Multi-modal criteria (S16)
+    if (detection.isMultiModal) {
+        lines.push('### Multi-Modal Input Handling', '', '- [ ] Cada tipo de input (vision, audio, documents) tiene validacion de formato y tamano maximo', '- [ ] Los pipelines multi-modal tienen timeout independiente por modalidad', '');
+    }
+    return lines;
+}
+//# sourceMappingURL=ai-native-hu-adapter.js.map

package/dist/tools/create-spec-hu/ai-native-hu-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ai-native-hu-adapter.js","sourceRoot":"","sources":["../../../src/tools/create-spec-hu/ai-native-hu-adapter.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,oDAAoD;AACpD,qFAAqF;AAIrF;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAmC;IACxE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,SAAS,GAAG,SAAS,CAAC,iBAAiB,CAAC;IAC9C,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC;QAC3B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,KAAK,GAAa,CAAC,EAAE,EAAE,wCAAwC,EAAE,EAAE,CAAC,CAAC;IAE3E,qBAAqB;IACrB,KAAK,CAAC,IAAI,CACR,oBAAoB,EACpB,EAAE,EACF,0GAA0G,EAC1G,mGAAmG,EACnG,EAAE,CACH,CAAC;IAEF,qBAAqB;IACrB,KAAK,CAAC,IAAI,CACR,oBAAoB,EACpB,EAAE,EACF,wHAAwH,EACxH,2FAA2F,EAC3F,qFAAqF,EACrF,EAAE,CACH,CAAC;IAEF,wBAAwB;IACxB,KAAK,CAAC,IAAI,CACR,uBAAuB,EACvB,EAAE,EACF,qEAAqE,EACrE,uFAAuF,EACvF,+EAA+E,EAC/E,EAAE,CACH,CAAC;IAEF,oBAAoB;IACpB,KAAK,CAAC,IAAI,CACR,6BAA6B,EAC7B,EAAE,EACF,4HAA4H,EAC5H,mFAAmF,EACnF,EAAE,CACH,CAAC;IAEF,uBAAuB;IACvB,KAAK,CAAC,IAAI,CACR,qBAAqB,EACrB,EAAE,EACF,mFAAmF,EACnF,sFAAsF,EACtF,uFAAuF,EACvF,EAAE,CACH,CAAC;IAEF,kCAAkC;IAClC,IAAI,SAAS,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CACR,sBAAsB,EACtB,EAAE,EACF,0BAA0B,SAAS,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAChE,iEAAiE,EACjE,kGAAkG,EAClG,EAAE,CACH,CAAC;IACJ,CAAC;IAED,iCAAiC;IACjC,IAAI,SAAS,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,uBAAuB,EACvB,EAAE,EACF,0BAA0B,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAC/D,kGAAkG,EAClG,EAAE,CACH,CAAC;IACJ,CAAC;IAED,6BAA6B;IAC7B,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CACR,gCAAgC,EAChC,EAAE,EACF,iGAAiG,EACjG,4EAA4E,EAC5E,EAAE,CACH,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/tools/create-spec-hu/ai-testing-governance-adapter.d.ts

@@ -0,0 +1,8 @@
+import type { ProjectKnowledge } from '../../types/index.js';
+/**
+ * Build the AI testing governance section for HU.md.
+ * Emits an AI test lifecycle ownership criterion when CI is established
+ * or when AI testing tools (Keploy, Qodo, Diffblue) are detected in the stack.
+ */
+export declare function buildAiTestingGovernanceSection(knowledge?: ProjectKnowledge | null): string[];
+//# sourceMappingURL=ai-testing-governance-adapter.d.ts.map