@planu/cli 0.96.4 → 0.97.0

package/dist/config/spec-templates/webhook-system/spec.md

@@ -0,0 +1,36 @@
+# Webhook System
+
+## Overview
+Webhook delivery system with event subscriptions, HMAC signature verification via `{{signature_header}}`, retry logic (max {{max_retries}} attempts), and {{timeout_seconds}}s per request timeout.
+
+## Acceptance Criteria
+
+### AC-1: Subscription Management
+- Allow consumers to register webhook endpoints with target URL and event types
+- Validate that the target URL is reachable via a test ping on registration
+- Store subscriptions with status (active, paused, failed)
+
+### AC-2: Event Delivery
+- Deliver event payloads via HTTP POST to registered endpoints
+- Include `{{signature_header}}` HMAC-SHA256 signature in each request
+- Set request timeout to {{timeout_seconds}} seconds per attempt
+
+### AC-3: Retry Logic
+- Retry failed deliveries up to {{max_retries}} times
+- Use exponential backoff: 1min, 5min, 30min between retries
+- Mark subscription as `failed` after exhausting all retries
+
+### AC-4: Signature Verification (Consumer Guide)
+- Compute HMAC-SHA256 of the raw request body using the shared secret
+- Compare computed signature with the value in `{{signature_header}}`
+- Reject requests with invalid or missing signatures
+
+### AC-5: Delivery Log
+- Store delivery attempts: endpoint, event type, response code, latency, attempt number
+- Expose delivery history per subscription via admin API
+- Purge logs older than 30 days automatically
+
+## Technical Notes
+- Use a unique shared secret per subscription — never reuse across consumers
+- Process delivery queue asynchronously to avoid blocking event producers
+- Validate registered URLs against an allowlist to prevent SSRF attacks

package/dist/config/spec-templates/webhook-system/template.json

@@ -0,0 +1,10 @@
+{
+  "name": "webhook-system",
+  "description": "Webhook system with event subscriptions, HMAC signature verification, and retry logic",
+  "variables": [
+    { "name": "max_retries", "description": "Maximum delivery retry attempts", "default": "3" },
+    { "name": "timeout_seconds", "description": "HTTP request timeout per delivery attempt", "default": "10" },
+    { "name": "signature_header", "description": "HTTP header name for HMAC signature", "default": "X-Webhook-Signature" }
+  ],
+  "tags": ["webhooks", "events", "backend", "integrations"]
+}

package/dist/engine/agent-ready-exporter/formatters/devin.d.ts

@@ -0,0 +1,7 @@
+import type { AgentReadySpec } from '../../../types/agent-ready.js';
+/**
+ * Augment an AgentReadySpec with Devin sandbox instructions.
+ * Devin requires explicit environment setup and command sequences.
+ */
+export declare function formatDevin(spec: AgentReadySpec): string;
+//# sourceMappingURL=devin.d.ts.map

package/dist/engine/agent-ready-exporter/formatters/devin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devin.d.ts","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/devin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAa,MAAM,+BAA+B,CAAC;AAE/E;;;GAGG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAgBxD"}

package/dist/engine/agent-ready-exporter/formatters/devin.js

@@ -0,0 +1,23 @@
+// engine/agent-ready-exporter/formatters/devin.ts — Devin sandbox formatter — SPEC-318
+/**
+ * Augment an AgentReadySpec with Devin sandbox instructions.
+ * Devin requires explicit environment setup and command sequences.
+ */
+export function formatDevin(spec) {
+    const devinSpec = {
+        ...spec,
+        _format: 'devin',
+        sandbox_instructions: {
+            setup: [
+                'Install project dependencies with the project package manager',
+                'Run typecheck to verify environment is clean before starting',
+                'Read existing tests to understand project conventions',
+            ],
+            run_tests: spec.agent_context.test_command,
+            validate: spec.agent_context.validation_command,
+            environment: 'Use the existing project environment — do not install new global tools',
+        },
+    };
+    return JSON.stringify(devinSpec, null, 2);
+}
+//# sourceMappingURL=devin.js.map

package/dist/engine/agent-ready-exporter/formatters/devin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devin.js","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/devin.ts"],"names":[],"mappings":"AAAA,uFAAuF;AAIvF;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAoB;IAC9C,MAAM,SAAS,GAAc;QAC3B,GAAG,IAAI;QACP,OAAO,EAAE,OAAO;QAChB,oBAAoB,EAAE;YACpB,KAAK,EAAE;gBACL,+DAA+D;gBAC/D,8DAA8D;gBAC9D,uDAAuD;aACxD;YACD,SAAS,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY;YAC1C,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB;YAC/C,WAAW,EAAE,wEAAwE;SACtF;KACF,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/engine/agent-ready-exporter/formatters/generic.d.ts

@@ -0,0 +1,7 @@
+import type { AgentReadySpec } from '../../../types/agent-ready.js';
+/**
+ * Serialize an AgentReadySpec to a JSON-based YAML-like string.
+ * Uses JSON.stringify with indentation as a dependency-free serialization.
+ */
+export declare function formatGeneric(spec: AgentReadySpec): string;
+//# sourceMappingURL=generic.d.ts.map

package/dist/engine/agent-ready-exporter/formatters/generic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic.d.ts","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/generic.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAEpE;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAE1D"}

package/dist/engine/agent-ready-exporter/formatters/generic.js

@@ -0,0 +1,9 @@
+// engine/agent-ready-exporter/formatters/generic.ts — Generic YAML formatter — SPEC-318
+/**
+ * Serialize an AgentReadySpec to a JSON-based YAML-like string.
+ * Uses JSON.stringify with indentation as a dependency-free serialization.
+ */
+export function formatGeneric(spec) {
+    return JSON.stringify(spec, null, 2);
+}
+//# sourceMappingURL=generic.js.map

package/dist/engine/agent-ready-exporter/formatters/generic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic.js","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/generic.ts"],"names":[],"mappings":"AAAA,wFAAwF;AAIxF;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAoB;IAChD,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACvC,CAAC"}

package/dist/engine/agent-ready-exporter/formatters/kiro.d.ts

@@ -0,0 +1,6 @@
+import type { AgentReadySpec } from '../../../types/agent-ready.js';
+/**
+ * Augment an AgentReadySpec with Kiro-specific EARS requirements and steering context.
+ */
+export declare function formatKiro(spec: AgentReadySpec): string;
+//# sourceMappingURL=kiro.d.ts.map

package/dist/engine/agent-ready-exporter/formatters/kiro.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kiro.d.ts","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/kiro.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAA6B,MAAM,+BAA+B,CAAC;AAc/F;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAoBvD"}

package/dist/engine/agent-ready-exporter/formatters/kiro.js

@@ -0,0 +1,34 @@
+// engine/agent-ready-exporter/formatters/kiro.ts — Kiro EARS format — SPEC-318
+/**
+ * Convert a success criterion to EARS (Easy Approach to Requirements Syntax) format.
+ * Pattern: "WHEN <trigger> THE SYSTEM SHALL <response>"
+ */
+function toEarsFormat(criterion) {
+    const lower = criterion.toLowerCase();
+    if (lower.startsWith('when ') || lower.startsWith('the system')) {
+        return criterion;
+    }
+    return `THE SYSTEM SHALL ${criterion}`;
+}
+/**
+ * Augment an AgentReadySpec with Kiro-specific EARS requirements and steering context.
+ */
+export function formatKiro(spec) {
+    const requirements = spec.agent_context.success_criteria.map((criterion, idx) => ({
+        id: `REQ-${String(idx + 1).padStart(3, '0')}`,
+        ears_format: toEarsFormat(criterion),
+        original: criterion,
+    }));
+    const kiroSpec = {
+        ...spec,
+        _format: 'kiro',
+        kiro_requirements: requirements,
+        steering: {
+            product: `Implement ${spec.title} following the success criteria`,
+            tech: spec.agent_context.constraints.join('; ') || 'Follow existing project conventions',
+            structure: 'Respect the files_to_create and files_to_modify boundaries',
+        },
+    };
+    return JSON.stringify(kiroSpec, null, 2);
+}
+//# sourceMappingURL=kiro.js.map

package/dist/engine/agent-ready-exporter/formatters/kiro.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kiro.js","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/kiro.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAI/E;;;GAGG;AACH,SAAS,YAAY,CAAC,SAAiB;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,oBAAoB,SAAS,EAAE,CAAC;AACzC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAoB;IAC7C,MAAM,YAAY,GAAsB,IAAI,CAAC,aAAa,CAAC,gBAAgB,CAAC,GAAG,CAC7E,CAAC,SAAS,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;QACnB,EAAE,EAAE,OAAO,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;QAC7C,WAAW,EAAE,YAAY,CAAC,SAAS,CAAC;QACpC,QAAQ,EAAE,SAAS;KACpB,CAAC,CACH,CAAC;IAEF,MAAM,QAAQ,GAAa;QACzB,GAAG,IAAI;QACP,OAAO,EAAE,MAAM;QACf,iBAAiB,EAAE,YAAY;QAC/B,QAAQ,EAAE;YACR,OAAO,EAAE,aAAa,IAAI,CAAC,KAAK,iCAAiC;YACjE,IAAI,EAAE,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qCAAqC;YACxF,SAAS,EAAE,4DAA4D;SACxE;KACF,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3C,CAAC"}

package/dist/engine/agent-ready-exporter/formatters/swe-agent.d.ts

@@ -0,0 +1,6 @@
+import type { AgentReadySpec } from '../../../types/agent-ready.js';
+/**
+ * Augment an AgentReadySpec with SWE-agent trajectory hints and instance metadata.
+ */
+export declare function formatSweAgent(spec: AgentReadySpec): string;
+//# sourceMappingURL=swe-agent.d.ts.map

package/dist/engine/agent-ready-exporter/formatters/swe-agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"swe-agent.d.ts","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/swe-agent.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,cAAc,EAGf,MAAM,+BAA+B,CAAC;AAmCvC;;GAEG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAQ3D"}

package/dist/engine/agent-ready-exporter/formatters/swe-agent.js

@@ -0,0 +1,40 @@
+// engine/agent-ready-exporter/formatters/swe-agent.ts — SWE-agent trajectory format — SPEC-318
+/**
+ * Build trajectory hints from spec context.
+ * SWE-agent benefits from structured thought/action pairs as navigation hints.
+ */
+function buildTrajectoryHints(spec) {
+    const steps = [
+        {
+            thought: `I need to implement: ${spec.agent_context.objective}`,
+            action: `Read existing files: ${spec.agent_context.files_to_modify.join(', ') || 'none to modify'}`,
+        },
+    ];
+    if (spec.agent_context.files_to_create.length > 0) {
+        steps.push({
+            thought: 'I need to create new files as specified',
+            action: `Create files: ${spec.agent_context.files_to_create.join(', ')}`,
+        });
+    }
+    steps.push({
+        thought: 'Run tests to verify the implementation',
+        action: spec.agent_context.test_command,
+    }, {
+        thought: 'Validate the full solution',
+        action: spec.agent_context.validation_command,
+    });
+    return steps;
+}
+/**
+ * Augment an AgentReadySpec with SWE-agent trajectory hints and instance metadata.
+ */
+export function formatSweAgent(spec) {
+    const sweSpec = {
+        ...spec,
+        _format: 'swe-agent',
+        instance_id: `${spec.spec_id.toLowerCase().replace(/[^a-z0-9]/g, '-')}-instance`,
+        trajectory_hints: buildTrajectoryHints(spec),
+    };
+    return JSON.stringify(sweSpec, null, 2);
+}
+//# sourceMappingURL=swe-agent.js.map

package/dist/engine/agent-ready-exporter/formatters/swe-agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"swe-agent.js","sourceRoot":"","sources":["../../../../src/engine/agent-ready-exporter/formatters/swe-agent.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAQ/F;;;GAGG;AACH,SAAS,oBAAoB,CAAC,IAAoB;IAChD,MAAM,KAAK,GAA6B;QACtC;YACE,OAAO,EAAE,wBAAwB,IAAI,CAAC,aAAa,CAAC,SAAS,EAAE;YAC/D,MAAM,EAAE,wBAAwB,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,EAAE;SACpG;KACF,CAAC;IAEF,IAAI,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC;YACT,OAAO,EAAE,yCAAyC;YAClD,MAAM,EAAE,iBAAiB,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;SACzE,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,IAAI,CACR;QACE,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,YAAY;KACxC,EACD;QACE,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,IAAI,CAAC,aAAa,CAAC,kBAAkB;KAC9C,CACF,CAAC;IAEF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,IAAoB;IACjD,MAAM,OAAO,GAAiB;QAC5B,GAAG,IAAI;QACP,OAAO,EAAE,WAAW;QACpB,WAAW,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,WAAW;QAChF,gBAAgB,EAAE,oBAAoB,CAAC,IAAI,CAAC;KAC7C,CAAC;IACF,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC1C,CAAC"}

package/dist/engine/agent-ready-exporter.d.ts

@@ -0,0 +1,11 @@
+import type { Spec } from '../types/index.js';
+import type { AgentTarget, AgentReadySpec } from '../types/agent-ready.js';
+/**
+ * Convert a Spec into an AgentReadySpec structure optimized for autonomous coding agents.
+ */
+export declare function specToAgentReady(spec: Spec, agentTarget: AgentTarget): AgentReadySpec;
+/**
+ * Serialize an AgentReadySpec to a string using the appropriate formatter.
+ */
+export declare function serializeAgentReady(agentSpec: AgentReadySpec, target: AgentTarget): string;
+//# sourceMappingURL=agent-ready-exporter.d.ts.map

package/dist/engine/agent-ready-exporter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-ready-exporter.d.ts","sourceRoot":"","sources":["../../src/engine/agent-ready-exporter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAC9C,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAgB,MAAM,yBAAyB,CAAC;AAuEzF;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,GAAG,cAAc,CAOrF;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,cAAc,EAAE,MAAM,EAAE,WAAW,GAAG,MAAM,CAW1F"}

package/dist/engine/agent-ready-exporter.js

@@ -0,0 +1,86 @@
+// engine/agent-ready-exporter.ts — Agent-Ready spec export central module — SPEC-318
+import { formatGeneric } from './agent-ready-exporter/formatters/generic.js';
+import { formatDevin } from './agent-ready-exporter/formatters/devin.js';
+import { formatKiro } from './agent-ready-exporter/formatters/kiro.js';
+import { formatSweAgent } from './agent-ready-exporter/formatters/swe-agent.js';
+// ---------------------------------------------------------------------------
+// Context extraction helpers
+// ---------------------------------------------------------------------------
+function extractObjective(spec) {
+    return `Implement "${spec.title}" (${spec.id}) — a ${spec.type} spec with ${spec.scope} scope.`;
+}
+function extractSuccessCriteria(spec) {
+    // Build criteria from spec metadata — technical path is the source of truth at runtime,
+    // but at export time we derive criteria from available structured fields.
+    const criteria = [
+        `Spec ${spec.id} passes validation (pnpm validate or equivalent)`,
+        `All tests pass for modified/created files`,
+        `TypeScript strict mode: zero type errors`,
+        `ESLint: zero warnings or errors`,
+    ];
+    if (spec.estimation.devHours > 0) {
+        criteria.push(`Implementation completed within estimated ${String(spec.estimation.devHours)}h`);
+    }
+    return criteria;
+}
+function extractConstraints(spec) {
+    const constraints = [
+        'TypeScript strict mode enforced — no any types',
+        'ES modules with .js extensions on all imports',
+        `Risk level is ${spec.risk} — review carefully before merging`,
+    ];
+    if (spec.tags.length > 0) {
+        constraints.push(`Tagged: ${spec.tags.join(', ')} — respect domain conventions`);
+    }
+    return constraints;
+}
+function extractDependencies(spec) {
+    return spec.dependencies.length > 0
+        ? spec.dependencies
+        : ['No blocking dependencies — can start immediately'];
+}
+function buildAgentContext(spec) {
+    return {
+        objective: extractObjective(spec),
+        success_criteria: extractSuccessCriteria(spec),
+        constraints: extractConstraints(spec),
+        files_to_create: [],
+        files_to_modify: [spec.specPath, spec.technicalPath].filter(Boolean),
+        forbidden_files: ['src/index.ts', 'src/types/index.ts'],
+        test_command: 'pnpm test',
+        validation_command: 'pnpm typecheck && pnpm lint',
+        effort_estimate: `${String(spec.estimation.devHours)}h (${spec.difficulty} difficulty)`,
+        dependencies: extractDependencies(spec),
+        rollback: `git revert HEAD or delete branch feat/${spec.id.toLowerCase()}-*`,
+    };
+}
+// ---------------------------------------------------------------------------
+// Public API
+// ---------------------------------------------------------------------------
+/**
+ * Convert a Spec into an AgentReadySpec structure optimized for autonomous coding agents.
+ */
+export function specToAgentReady(spec, agentTarget) {
+    return {
+        spec_id: spec.id,
+        title: spec.title,
+        agent_context: buildAgentContext(spec),
+        _format: agentTarget,
+    };
+}
+/**
+ * Serialize an AgentReadySpec to a string using the appropriate formatter.
+ */
+export function serializeAgentReady(agentSpec, target) {
+    switch (target) {
+        case 'devin':
+            return formatDevin(agentSpec);
+        case 'kiro':
+            return formatKiro(agentSpec);
+        case 'swe-agent':
+            return formatSweAgent(agentSpec);
+        case 'generic':
+            return formatGeneric(agentSpec);
+    }
+}
+//# sourceMappingURL=agent-ready-exporter.js.map

package/dist/engine/agent-ready-exporter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-ready-exporter.js","sourceRoot":"","sources":["../../src/engine/agent-ready-exporter.ts"],"names":[],"mappings":"AAAA,qFAAqF;AAIrF,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,OAAO,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,2CAA2C,CAAC;AACvE,OAAO,EAAE,cAAc,EAAE,MAAM,gDAAgD,CAAC;AAEhF,8EAA8E;AAC9E,6BAA6B;AAC7B,8EAA8E;AAE9E,SAAS,gBAAgB,CAAC,IAAU;IAClC,OAAO,cAAc,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,EAAE,SAAS,IAAI,CAAC,IAAI,cAAc,IAAI,CAAC,KAAK,SAAS,CAAC;AAClG,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAU;IACxC,wFAAwF;IACxF,0EAA0E;IAC1E,MAAM,QAAQ,GAAa;QACzB,QAAQ,IAAI,CAAC,EAAE,kDAAkD;QACjE,2CAA2C;QAC3C,0CAA0C;QAC1C,iCAAiC;KAClC,CAAC;IAEF,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,IAAI,CAAC,6CAA6C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAU;IACpC,MAAM,WAAW,GAAa;QAC5B,gDAAgD;QAChD,+CAA+C;QAC/C,iBAAiB,IAAI,CAAC,IAAI,oCAAoC;KAC/D,CAAC;IAEF,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,WAAW,CAAC,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IACnF,CAAC;IAED,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAU;IACrC,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QACjC,CAAC,CAAC,IAAI,CAAC,YAAY;QACnB,CAAC,CAAC,CAAC,kDAAkD,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAU;IACnC,OAAO;QACL,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC;QACjC,gBAAgB,EAAE,sBAAsB,CAAC,IAAI,CAAC;QAC9C,WAAW,EAAE,kBAAkB,CAAC,IAAI,CAAC;QACrC,eAAe,EAAE,EAAE;QACnB,eAAe,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACpE,eAAe,EAAE,CAAC,cAAc,EAAE,oBAAoB,CAAC;QACvD,YAAY,EAAE,WAAW;QACzB,kBAAkB,EAAE,6BAA6B;QACjD,eAAe,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,IAAI,CAAC,UAAU,cAAc;QACvF,YAAY,EAAE,mBAAmB,CAAC,IAAI,CAAC;QACvC,QAAQ,EAAE,yCAAyC,IAAI,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI;KAC7E,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,aAAa;AACb,8EAA8E;AAE9E;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAU,EAAE,WAAwB;IACnE,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,EAAE;QAChB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,aAAa,EAAE,iBAAiB,CAAC,IAAI,CAAC;QACtC,OAAO,EAAE,WAAW;KACrB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAyB,EAAE,MAAmB;IAChF,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,SAAS,CAAC,CAAC;QAChC,KAAK,MAAM;YACT,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC;QAC/B,KAAK,WAAW;YACd,OAAO,cAAc,CAAC,SAAS,CAAC,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC,SAAS,CAAC,CAAC;IACpC,CAAC;AACH,CAAC"}

package/dist/engine/compliance-checker.d.ts

@@ -0,0 +1,19 @@
+import type { ComplianceSpecFramework, ComplianceGapReport } from '../types/compliance.js';
+import type { Spec } from '../types/index.js';
+/**
+ * Detect which compliance frameworks apply based on keyword matching
+ * in the spec title and description text.
+ */
+export declare function detectComplianceContext(title: string, description: string): ComplianceSpecFramework[];
+/**
+ * Evaluate a spec's acceptance criteria against required compliance criteria.
+ * Reads the spec markdown file to extract AC content.
+ * Returns a full gap report including missing criteria and coverage percentage.
+ */
+export declare function checkCompliance(spec: Spec, frameworks: ComplianceSpecFramework[]): Promise<ComplianceGapReport>;
+/**
+ * Return the full list of compliance criteria for the specified frameworks.
+ * Used when injecting missing criteria into a spec.
+ */
+export declare function getComplianceCriteria(frameworks: ComplianceSpecFramework[]): string[];
+//# sourceMappingURL=compliance-checker.d.ts.map

package/dist/engine/compliance-checker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-checker.d.ts","sourceRoot":"","sources":["../../src/engine/compliance-checker.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EACV,uBAAuB,EAEvB,mBAAmB,EAEpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAwB9C;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,GAClB,uBAAuB,EAAE,CAiB3B;AAMD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,IAAI,EACV,UAAU,EAAE,uBAAuB,EAAE,GACpC,OAAO,CAAC,mBAAmB,CAAC,CAiC9B;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,uBAAuB,EAAE,GAAG,MAAM,EAAE,CAarF"}

package/dist/engine/compliance-checker.js

@@ -0,0 +1,145 @@
+// engine/compliance-checker.ts — Compliance-as-Specs logic (SPEC-319)
+import { readFileSync, existsSync } from 'node:fs';
+import { readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// ---------------------------------------------------------------------------
+// Profile loading
+// ---------------------------------------------------------------------------
+let _profiles = null;
+function loadProfiles() {
+    if (_profiles !== null) {
+        return _profiles;
+    }
+    const dir = fileURLToPath(new URL('../config', import.meta.url));
+    const raw = readFileSync(join(dir, 'compliance-profiles.json'), 'utf-8');
+    _profiles = JSON.parse(raw);
+    return _profiles;
+}
+const ALL_FRAMEWORKS = ['gdpr', 'hipaa', 'pci-dss', 'soc2', 'ccpa'];
+// ---------------------------------------------------------------------------
+// Context detection
+// ---------------------------------------------------------------------------
+/**
+ * Detect which compliance frameworks apply based on keyword matching
+ * in the spec title and description text.
+ */
+export function detectComplianceContext(title, description) {
+    const profiles = loadProfiles();
+    const text = `${title} ${description}`.toLowerCase();
+    const detected = [];
+    for (const framework of ALL_FRAMEWORKS) {
+        const profile = profiles[framework];
+        if (profile === undefined) {
+            continue;
+        }
+        const matches = profile.keywords.some((kw) => text.includes(kw.toLowerCase()));
+        if (matches) {
+            detected.push(framework);
+        }
+    }
+    return detected;
+}
+// ---------------------------------------------------------------------------
+// Gap analysis
+// ---------------------------------------------------------------------------
+/**
+ * Evaluate a spec's acceptance criteria against required compliance criteria.
+ * Reads the spec markdown file to extract AC content.
+ * Returns a full gap report including missing criteria and coverage percentage.
+ */
+export async function checkCompliance(spec, frameworks) {
+    const profiles = loadProfiles();
+    const specContent = await readSpecContent(spec);
+    const acText = `${spec.title} ${specContent}`.toLowerCase();
+    const gaps = [];
+    for (const framework of frameworks) {
+        const profile = profiles[framework];
+        if (profile === undefined) {
+            continue;
+        }
+        for (const criterion of profile.criteria) {
+            const status = matchCriterion(criterion, acText);
+            if (status !== 'present') {
+                gaps.push({ framework, criterion, status });
+            }
+        }
+    }
+    const totalCriteria = countTotalCriteria(frameworks, profiles);
+    const missingCriteria = gaps.filter((g) => g.status === 'missing').map((g) => g.criterion);
+    const presentCount = totalCriteria - gaps.length;
+    const coveragePercent = totalCriteria === 0 ? 100 : Math.round((presentCount / totalCriteria) * 100);
+    return {
+        specId: spec.id,
+        frameworks,
+        gaps,
+        missingCriteria,
+        coveragePercent,
+    };
+}
+/**
+ * Return the full list of compliance criteria for the specified frameworks.
+ * Used when injecting missing criteria into a spec.
+ */
+export function getComplianceCriteria(frameworks) {
+    const profiles = loadProfiles();
+    const criteria = [];
+    for (const framework of frameworks) {
+        const profile = profiles[framework];
+        if (profile === undefined) {
+            continue;
+        }
+        criteria.push(...profile.criteria);
+    }
+    return criteria;
+}
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+async function readSpecContent(spec) {
+    /* v8 ignore start */
+    if (existsSync(spec.specPath)) {
+        return readFile(spec.specPath, 'utf-8');
+    }
+    /* v8 ignore stop */
+    return '';
+}
+/**
+ * Check how well a compliance criterion is represented in the spec content text.
+ * Uses keyword extraction to match against the full spec markdown.
+ */
+function matchCriterion(criterion, acText) {
+    const keywords = extractKeywords(criterion);
+    if (keywords.length === 0) {
+        return 'missing';
+    }
+    const matched = keywords.filter((kw) => acText.includes(kw));
+    const ratio = matched.length / keywords.length;
+    if (ratio >= 0.7) {
+        return 'present';
+    }
+    if (ratio >= 0.3) {
+        return 'partial';
+    }
+    return 'missing';
+}
+const STOPWORDS = new Set([
+    'a', 'an', 'the', 'is', 'are', 'in', 'of', 'for', 'and', 'or',
+    'to', 'with', 'all', 'at', 'be', 'by', 'on', 'that', 'this',
+    'it', 'its', 'not', 'as', 'from', 'before', 'after',
+]);
+function extractKeywords(text) {
+    return text
+        .toLowerCase()
+        .replace(/[()[\]{}.,;:!?'"]/g, ' ')
+        .split(/\s+/)
+        .filter((w) => w.length > 2 && !STOPWORDS.has(w));
+}
+function countTotalCriteria(frameworks, profiles) {
+    let total = 0;
+    for (const fw of frameworks) {
+        total += profiles[fw]?.criteria.length ?? 0;
+    }
+    return total;
+}
+//# sourceMappingURL=compliance-checker.js.map

package/dist/engine/compliance-checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-checker.js","sourceRoot":"","sources":["../../src/engine/compliance-checker.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AASzC,8EAA8E;AAC9E,kBAAkB;AAClB,8EAA8E;AAE9E,IAAI,SAAS,GAAgC,IAAI,CAAC;AAElD,SAAS,YAAY;IACnB,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAAE,OAAO,CAAC,CAAC;IACzE,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;IACpD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,cAAc,GAA8B,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAE/F,8EAA8E;AAC9E,oBAAoB;AACpB,8EAA8E;AAE9E;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,KAAa,EACb,WAAmB;IAEnB,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,GAAG,KAAK,IAAI,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,QAAQ,GAA8B,EAAE,CAAC;IAE/C,KAAK,MAAM,SAAS,IAAI,cAAc,EAAE,CAAC;QACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,OAAO,EAAE,CAAC;YACZ,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,IAAU,EACV,UAAqC;IAErC,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,WAAW,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAC;IAChD,MAAM,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,IAAI,WAAW,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5D,MAAM,IAAI,GAAoB,EAAE,CAAC;IAEjC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QAED,KAAK,MAAM,SAAS,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACjD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,IAAI,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;YAC9C,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,kBAAkB,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,eAAe,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,aAAa,GAAG,IAAI,CAAC,MAAM,CAAC;IACjD,MAAM,eAAe,GACnB,aAAa,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,YAAY,GAAG,aAAa,CAAC,GAAG,GAAG,CAAC,CAAC;IAE/E,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,EAAE;QACf,UAAU;QACV,IAAI;QACJ,eAAe;QACf,eAAe;KAChB,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAqC;IACzE,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,KAAK,UAAU,eAAe,CAAC,IAAU;IACvC,qBAAqB;IACrB,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC1C,CAAC;IACD,oBAAoB;IACpB,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,SAAiB,EAAE,MAAc;IACvD,MAAM,QAAQ,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAE/C,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,KAAK,IAAI,GAAG,EAAE,CAAC;QACjB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI;IAC7D,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM;IAC3D,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO;CACpD,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,IAAY;IACnC,OAAO,IAAI;SACR,WAAW,EAAE;SACb,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC;SAClC,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAqC,EAAE,QAA8B;IAC/F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,KAAK,IAAI,QAAQ,CAAC,EAAE,CAAC,EAAE,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/engine/generate-tests/generators/property-based-generator.d.ts

@@ -0,0 +1,12 @@
+import type { Spec, ProjectKnowledge } from '../../../types/index.js';
+/**
+ * Generate a complete property-based test file as a string.
+ * Adapts output to fast-check (JS/TS), hypothesis (Python), jqwik (Java/Kotlin),
+ * or pseudo-code generic format based on detected framework.
+ *
+ * @param spec - The spec metadata (title, id used for file naming/headers).
+ * @param context - Project knowledge (language, stack) for framework detection.
+ * @param criteria - Acceptance criteria strings extracted from spec.md by the caller.
+ */
+export declare function generatePropertyBasedTests(spec: Spec, context: ProjectKnowledge, criteria?: string[]): string;
+//# sourceMappingURL=property-based-generator.d.ts.map

package/dist/engine/generate-tests/generators/property-based-generator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"property-based-generator.d.ts","sourceRoot":"","sources":["../../../../src/engine/generate-tests/generators/property-based-generator.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAgItE;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,gBAAgB,EACzB,QAAQ,GAAE,MAAM,EAAO,GACtB,MAAM,CA0CR"}