@rsaglobaltech/specgate 0.26.0 → 0.27.1

package/dist/scripts/lib/sonar-local.js

@@ -0,0 +1,308 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SONAR_SARIF = exports.SONAR = void 0;
+exports.ensureServer = ensureServer;
+exports.analysisToken = analysisToken;
+exports.projectKey = projectKey;
+exports.scannerProperties = scannerProperties;
+exports.issuesToSarif = issuesToSarif;
+exports.runSonar = runSonar;
+const fs = __importStar(require("node:fs"));
+const path = __importStar(require("node:path"));
+const node_child_process_1 = require("node:child_process");
+/**
+ * SonarQube Community, run locally in Docker, as one more check (REQ-226):
+ * no account and no server to host. The first run starts the server in a
+ * named container on a private network, bound to 127.0.0.1 only; a token for
+ * analysis is created once with the server's own default login and kept in
+ * `.specgate/sonar.local`, git-ignored — the person's admin password is never
+ * changed or stored, so they log in with admin/admin and choose their own.
+ * Each run analyses the project with the scanner image and writes the open
+ * issues as SARIF, so the baseline judges them like any other check's.
+ */
+exports.SONAR = {
+    image: "sonarqube:25.9.0.112764-community",
+    scanner: "sonarsource/sonar-scanner-cli:11.4",
+    container: "specgate-sonarqube",
+    network: "specgate-sonar",
+    port: 9123,
+};
+const BASE = `http://127.0.0.1:${exports.SONAR.port}`;
+const LOCAL = path.join(".specgate", "sonar.local");
+exports.SONAR_SARIF = ".specgate/quality/sonar.sarif";
+const docker = (args, timeout = 120000) => (0, node_child_process_1.spawnSync)("docker", args, { encoding: "utf8", timeout });
+/**
+ * One HTTP call, synchronously: the checks run in spawnSync's world, so a
+ * short Node child does the fetch and prints the JSON.
+ */
+function http(method, url, auth, form) {
+    const script = [
+        "(async () => {",
+        "  try {",
+        "    const [method, url, auth, form] = JSON.parse(process.argv[1]);",
+        "    const r = await fetch(url, {",
+        "      method,",
+        "      headers: Object.assign(auth ? { Authorization: 'Basic ' + Buffer.from(auth).toString('base64') } : {},",
+        "        form ? { 'content-type': 'application/x-www-form-urlencoded' } : {}),",
+        "      body: form ? new URLSearchParams(form).toString() : undefined,",
+        "    });",
+        "    const text = await r.text();",
+        "    let body = null; try { body = JSON.parse(text); } catch { body = text; }",
+        "    process.stdout.write(JSON.stringify({ status: r.status, body }));",
+        "  } catch (e) { process.stdout.write(JSON.stringify({ status: 0, body: String(e) })); }",
+        "})();",
+    ].join("\n");
+    const r = (0, node_child_process_1.spawnSync)(process.execPath, ["-e", script, JSON.stringify([method, url, auth, form || null])], {
+        encoding: "utf8",
+        timeout: 60000,
+    });
+    try {
+        return JSON.parse(r.stdout || "");
+    }
+    catch {
+        return { status: 0, body: r.stderr || "" };
+    }
+}
+const sleep = (ms) => (0, node_child_process_1.spawnSync)(process.execPath, ["-e", `setTimeout(() => {}, ${ms})`]);
+/** The server, started if it is not, and answering UP. */
+function ensureServer(timeoutMs = 5 * 60 * 1000) {
+    docker(["network", "create", exports.SONAR.network]);
+    const state = (docker(["inspect", "-f", "{{.State.Running}}", exports.SONAR.container]).stdout || "").trim();
+    if (state === "false")
+        docker(["start", exports.SONAR.container]);
+    else if (state !== "true") {
+        const run = docker([
+            "run",
+            "-d",
+            "--name",
+            exports.SONAR.container,
+            "--network",
+            exports.SONAR.network,
+            "-p",
+            `127.0.0.1:${exports.SONAR.port}:9000`,
+            // Its Elasticsearch asks the host for vm.max_map_count; Docker Desktop
+            // does not let a container set it, and one local instance does not need it.
+            "-e",
+            "SONAR_ES_BOOTSTRAP_CHECKS_DISABLE=true",
+            "-v",
+            "specgate-sonar-data:/opt/sonarqube/data",
+            "-v",
+            "specgate-sonar-extensions:/opt/sonarqube/extensions",
+            exports.SONAR.image,
+        ], 15 * 60 * 1000);
+        if (run.status !== 0) {
+            return { ok: false, message: `could not start SonarQube: ${(run.stderr || "").trim()}` };
+        }
+    }
+    const until = Date.now() + timeoutMs;
+    while (Date.now() < until) {
+        const r = http("GET", `${BASE}/api/system/status`, "");
+        if (r.status === 200 && r.body.status === "UP")
+            return { ok: true };
+        sleep(3000);
+    }
+    return {
+        ok: false,
+        message: `SonarQube did not come up at ${BASE} within ${timeoutMs / 60000} min`,
+    };
+}
+/** The analysis token: SONAR_TOKEN, else the one kept, else one created with the default login. */
+function analysisToken(projectDir) {
+    if (process.env.SONAR_TOKEN)
+        return { ok: true, token: process.env.SONAR_TOKEN };
+    const file = path.join(projectDir, LOCAL);
+    try {
+        const kept = JSON.parse(fs.readFileSync(file, "utf8")).token;
+        const checked = kept ? http("GET", `${BASE}/api/authentication/validate`, `${kept}:`) : null;
+        if (checked && checked.status === 200 && checked.body.valid) {
+            return { ok: true, token: kept };
+        }
+    }
+    catch {
+        /* none kept yet */
+    }
+    const made = http("POST", `${BASE}/api/user_tokens/generate`, "admin:admin", {
+        name: `specgate-${path.basename(projectDir)}-${Date.now()}`,
+        type: "GLOBAL_ANALYSIS_TOKEN",
+    });
+    const token = made.body.token;
+    if (made.status !== 200 || !token) {
+        return {
+            ok: false,
+            message: "SonarQube's default login no longer works (its password was changed, as it should be). " +
+                `Create a token at ${BASE}/account/security and set it as SONAR_TOKEN in the environment.`,
+        };
+    }
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify({ token }, null, 2) + "\n", "utf8");
+    ensureIgnored(projectDir, ".specgate/sonar.local");
+    return { ok: true, token };
+}
+/** A line in the project's .gitignore, added once. */
+function ensureIgnored(projectDir, entry) {
+    const file = path.join(projectDir, ".gitignore");
+    const text = fs.existsSync(file) ? fs.readFileSync(file, "utf8") : "";
+    if (!text.split(/\r?\n/).includes(entry)) {
+        fs.writeFileSync(file, `${text.replace(/\n?$/, "\n")}${entry}\n`, "utf8");
+    }
+}
+/** The project key: the folder's name, as SonarQube accepts it. */
+function projectKey(projectDir) {
+    return (path
+        .basename(path.resolve(projectDir))
+        .replace(/[^A-Za-z0-9_.:-]+/g, "-")
+        .replace(/^-|-$/g, "") || "project");
+}
+/** The scanner's properties for this project: Java sources and classes when it has them. */
+function scannerProperties(projectDir, key) {
+    const has = (rel) => fs.existsSync(path.join(projectDir, rel));
+    const props = [
+        `-Dsonar.projectKey=${key}`,
+        "-Dsonar.scm.disabled=true",
+        "-Dsonar.working.directory=.specgate/quality/sonar",
+    ];
+    if (has("src/main/java")) {
+        props.push("-Dsonar.sources=src/main/java");
+        if (has("src/test/java"))
+            props.push("-Dsonar.tests=src/test/java");
+        props.push(`-Dsonar.java.binaries=${has("target/classes") ? "target/classes" : has("build/classes") ? "build/classes" : "."}`);
+    }
+    else {
+        props.push("-Dsonar.sources=.", "-Dsonar.exclusions=**/node_modules/**,**/dist/**,**/build/**,**/coverage/**,**/.specgate/**,**/.harness/**");
+    }
+    return props;
+}
+/** SonarQube's open issues as SARIF 2.1.0, its line hash as the fingerprint. */
+function issuesToSarif(issues, key) {
+    const level = (s) => s === "BLOCKER" || s === "CRITICAL" ? "error" : s === "MAJOR" ? "warning" : "note";
+    return JSON.stringify({
+        version: "2.1.0",
+        runs: [
+            {
+                tool: { driver: { name: "SonarQube Community" } },
+                results: issues.map((i) => ({
+                    ruleId: i.rule,
+                    level: level(i.severity),
+                    message: { text: i.message },
+                    locations: [
+                        {
+                            physicalLocation: {
+                                artifactLocation: { uri: i.component.replace(new RegExp(`^${key}:`), "") },
+                                region: { startLine: i.line || 1 },
+                            },
+                        },
+                    ],
+                    ...(i.hash ? { partialFingerprints: { sonarLineHash: i.hash } } : {}),
+                })),
+            },
+        ],
+    }, null, 2);
+}
+/** Analyse the project and write its open issues as SARIF; shaped like spawnSync's result. */
+function runSonar(projectDir, timeoutMs) {
+    const fail = (message) => ({ status: 1, stdout: "", stderr: message });
+    const up = ensureServer();
+    if (!up.ok)
+        return fail(up.message);
+    const tok = analysisToken(projectDir);
+    if (!tok.ok)
+        return fail(tok.message);
+    const key = projectKey(projectDir);
+    const posix = process.platform !== "win32" && typeof process.getuid === "function";
+    const scan = (0, node_child_process_1.spawnSync)("docker", [
+        "run",
+        "--rm",
+        "--network",
+        exports.SONAR.network,
+        "-v",
+        `${path.resolve(projectDir)}:/usr/src`,
+        "-w",
+        "/usr/src",
+        ...(posix ? ["--user", `${process.getuid()}:${process.getgid ? process.getgid() : 0}`] : []),
+        "-e",
+        "SONAR_TOKEN",
+        "-e",
+        `SONAR_HOST_URL=http://${exports.SONAR.container}:9000`,
+        "-e",
+        "SONAR_USER_HOME=/tmp/.sonar",
+        exports.SONAR.scanner,
+        ...scannerProperties(projectDir, key),
+    ], {
+        encoding: "utf8",
+        timeout: timeoutMs,
+        maxBuffer: 64 * 1024 * 1024,
+        env: { ...process.env, SONAR_TOKEN: tok.token },
+    });
+    if (scan.status !== 0) {
+        return {
+            status: scan.status,
+            stdout: scan.stdout || "",
+            stderr: scan.stderr || "",
+            error: scan.error,
+        };
+    }
+    // The analysis is processed on the server after the scanner ends.
+    const report = path.join(projectDir, ".specgate", "quality", "sonar", "report-task.txt");
+    const task = (/ceTaskId=(\S+)/.exec(fs.existsSync(report) ? fs.readFileSync(report, "utf8") : "") || [])[1];
+    if (task) {
+        for (let i = 0; i < 120; i += 1) {
+            const t = http("GET", `${BASE}/api/ce/task?id=${task}`, `${tok.token}:`).body;
+            const status = t && t.task ? t.task.status : "";
+            if (status && status !== "PENDING" && status !== "IN_PROGRESS")
+                break;
+            sleep(2000);
+        }
+    }
+    const issues = [];
+    for (let page = 1; page <= 20; page += 1) {
+        const r = http("GET", `${BASE}/api/issues/search?componentKeys=${encodeURIComponent(key)}&resolved=false&ps=500&p=${page}`, `${tok.token}:`);
+        const body = r.body;
+        if (r.status !== 200 || !body.issues)
+            return fail(`could not read the issues: HTTP ${r.status}`);
+        issues.push(...body.issues);
+        if (issues.length >= (body.total || 0) || body.issues.length === 0)
+            break;
+    }
+    const out = path.join(projectDir, exports.SONAR_SARIF);
+    fs.mkdirSync(path.dirname(out), { recursive: true });
+    fs.writeFileSync(out, issuesToSarif(issues, key), "utf8");
+    return {
+        status: 0,
+        stdout: `SonarQube analysed ${key}: ${issues.length} open issue(s). ${BASE}/dashboard?id=${encodeURIComponent(key)}`,
+        stderr: "",
+    };
+}
+//# sourceMappingURL=sonar-local.js.map

package/dist/scripts/lib/sonar-local.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sonar-local.js","sourceRoot":"","sources":["../../../scripts/lib/sonar-local.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAyEA,oCA6CC;AAGD,sCA+BC;AAYD,gCAOC;AAGD,8CAoBC;AAYD,sCA6BC;AAGD,4BAmFC;AAjUD,4CAA8B;AAC9B,gDAAkC;AAClC,2DAA+C;AAE/C;;;;;;;;;GASG;AAEU,QAAA,KAAK,GAAG;IACnB,KAAK,EAAE,mCAAmC;IAC1C,OAAO,EAAE,oCAAoC;IAC7C,SAAS,EAAE,oBAAoB;IAC/B,OAAO,EAAE,gBAAgB;IACzB,IAAI,EAAE,IAAI;CACX,CAAC;AACF,MAAM,IAAI,GAAG,oBAAoB,aAAK,CAAC,IAAI,EAAE,CAAC;AAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;AACvC,QAAA,WAAW,GAAG,+BAA+B,CAAC;AAE3D,MAAM,MAAM,GAAG,CAAC,IAAc,EAAE,OAAO,GAAG,MAAM,EAAE,EAAE,CAClD,IAAA,8BAAS,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;AAE3D;;;GAGG;AACH,SAAS,IAAI,CACX,MAAc,EACd,GAAW,EACX,IAAY,EACZ,IAA6B;IAE7B,MAAM,MAAM,GAAG;QACb,gBAAgB;QAChB,SAAS;QACT,oEAAoE;QACpE,kCAAkC;QAClC,eAAe;QACf,8GAA8G;QAC9G,+EAA+E;QAC/E,sEAAsE;QACtE,SAAS;QACT,kCAAkC;QAClC,8EAA8E;QAC9E,uEAAuE;QACvE,yFAAyF;QACzF,OAAO;KACR,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACb,MAAM,CAAC,GAAG,IAAA,8BAAS,EACjB,OAAO,CAAC,QAAQ,EAChB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,EACjE;QACE,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,KAAK;KACf,CACF,CAAC;IACF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAED,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAA,8BAAS,EAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC,CAAC;AAEjG,0DAA0D;AAC1D,SAAgB,YAAY,CAC1B,SAAS,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI;IAEzB,MAAM,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,aAAK,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,CACZ,MAAM,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,oBAAoB,EAAE,aAAK,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAC9E,CAAC,IAAI,EAAE,CAAC;IACT,IAAI,KAAK,KAAK,OAAO;QAAE,MAAM,CAAC,CAAC,OAAO,EAAE,aAAK,CAAC,SAAS,CAAC,CAAC,CAAC;SACrD,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,MAAM,CAChB;YACE,KAAK;YACL,IAAI;YACJ,QAAQ;YACR,aAAK,CAAC,SAAS;YACf,WAAW;YACX,aAAK,CAAC,OAAO;YACb,IAAI;YACJ,aAAa,aAAK,CAAC,IAAI,OAAO;YAC9B,uEAAuE;YACvE,4EAA4E;YAC5E,IAAI;YACJ,wCAAwC;YACxC,IAAI;YACJ,yCAAyC;YACzC,IAAI;YACJ,qDAAqD;YACrD,aAAK,CAAC,KAAK;SACZ,EACD,EAAE,GAAG,EAAE,GAAG,IAAI,CACf,CAAC;QACF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,8BAA8B,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QAC3F,CAAC;IACH,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IACrC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,oBAAoB,EAAE,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAK,CAAC,CAAC,IAA4B,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAC7F,KAAK,CAAC,IAAI,CAAC,CAAC;IACd,CAAC;IACD,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,gCAAgC,IAAI,WAAW,SAAS,GAAG,KAAK,MAAM;KAChF,CAAC;AACJ,CAAC;AAED,mGAAmG;AACnG,SAAgB,aAAa,CAC3B,UAAkB;IAElB,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,8BAA8B,EAAE,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7F,IAAI,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,IAAK,OAAO,CAAC,IAA4B,CAAC,KAAK,EAAE,CAAC;YACrF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACnC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,mBAAmB;IACrB,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,GAAG,IAAI,2BAA2B,EAAE,aAAa,EAAE;QAC3E,IAAI,EAAE,YAAY,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;QAC3D,IAAI,EAAE,uBAAuB;KAC9B,CAAC,CAAC;IACH,MAAM,KAAK,GAAI,IAAI,CAAC,IAA2B,CAAC,KAAK,CAAC;IACtD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAClC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,OAAO,EACL,yFAAyF;gBACzF,qBAAqB,IAAI,iEAAiE;SAC7F,CAAC;IACJ,CAAC;IACD,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC,CAAC;IAC1E,aAAa,CAAC,UAAU,EAAE,uBAAuB,CAAC,CAAC;IACnD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,sDAAsD;AACtD,SAAS,aAAa,CAAC,UAAkB,EAAE,KAAa;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzC,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,KAAK,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED,mEAAmE;AACnE,SAAgB,UAAU,CAAC,UAAkB;IAC3C,OAAO,CACL,IAAI;SACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;SAClC,OAAO,CAAC,oBAAoB,EAAE,GAAG,CAAC;SAClC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,IAAI,SAAS,CACtC,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAgB,iBAAiB,CAAC,UAAkB,EAAE,GAAW;IAC/D,MAAM,GAAG,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG;QACZ,sBAAsB,GAAG,EAAE;QAC3B,2BAA2B;QAC3B,mDAAmD;KACpD,CAAC;IACF,IAAI,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,eAAe,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CACR,yBAAyB,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,CACnH,CAAC;IACJ,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CACR,mBAAmB,EACnB,4GAA4G,CAC7G,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAWD,gFAAgF;AAChF,SAAgB,aAAa,CAAC,MAAoB,EAAE,GAAW;IAC7D,MAAM,KAAK,GAAG,CAAC,CAAU,EAAE,EAAE,CAC3B,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IACrF,OAAO,IAAI,CAAC,SAAS,CACnB;QACE,OAAO,EAAE,OAAO;QAChB,IAAI,EAAE;YACJ;gBACE,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE,EAAE;gBACjD,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC1B,MAAM,EAAE,CAAC,CAAC,IAAI;oBACd,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;oBACxB,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;oBAC5B,SAAS,EAAE;wBACT;4BACE,gBAAgB,EAAE;gCAChB,gBAAgB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,EAAE;gCAC1E,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE;6BACnC;yBACF;qBACF;oBACD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,mBAAmB,EAAE,EAAE,aAAa,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtE,CAAC,CAAC;aACJ;SACF;KACF,EACD,IAAI,EACJ,CAAC,CACF,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,SAAgB,QAAQ,CACtB,UAAkB,EAClB,SAAiB;IAEjB,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/E,MAAM,EAAE,GAAG,YAAY,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC;IACnF,MAAM,IAAI,GAAG,IAAA,8BAAS,EACpB,QAAQ,EACR;QACE,KAAK;QACL,MAAM;QACN,WAAW;QACX,aAAK,CAAC,OAAO;QACb,IAAI;QACJ,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,WAAW;QACtC,IAAI;QACJ,UAAU;QACV,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,GAAG,OAAO,CAAC,MAAO,EAAE,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7F,IAAI;QACJ,aAAa;QACb,IAAI;QACJ,yBAAyB,aAAK,CAAC,SAAS,OAAO;QAC/C,IAAI;QACJ,6BAA6B;QAC7B,aAAK,CAAC,OAAO;QACb,GAAG,iBAAiB,CAAC,UAAU,EAAE,GAAG,CAAC;KACtC,EACD;QACE,QAAQ,EAAE,MAAM;QAChB,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;QAC3B,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,EAAE;KAChD,CACF,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;SAClB,CAAC;IACJ,CAAC;IACD,kEAAkE;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACzF,MAAM,IAAI,GAAG,CAAC,gBAAgB,CAAC,IAAI,CACjC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAC7D,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACZ,IAAI,IAAI,EAAE,CAAC;QACT,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,mBAAmB,IAAI,EAAE,EAAE,GAAG,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,IAExE,CAAC;YACF,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,IAAI,MAAM,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa;gBAAE,MAAM;YACtE,KAAK,CAAC,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,GAAG,IAAI,CACZ,KAAK,EACL,GAAG,IAAI,oCAAoC,kBAAkB,CAAC,GAAG,CAAC,4BAA4B,IAAI,EAAE,EACpG,GAAG,GAAG,CAAC,KAAK,GAAG,CAChB,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,CAAC,IAAiD,CAAC;QACjE,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM;YAClC,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7D,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;IAC5E,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,mBAAW,CAAC,CAAC;IAC/C,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;IAC1D,OAAO;QACL,MAAM,EAAE,CAAC;QACT,MAAM,EAAE,sBAAsB,GAAG,KAAK,MAAM,CAAC,MAAM,mBAAmB,IAAI,iBAAiB,kBAAkB,CAAC,GAAG,CAAC,EAAE;QACpH,MAAM,EAAE,EAAE;KACX,CAAC;AACJ,CAAC"}

package/dist/scripts/lib/studio-app-page.js

@@ -128,7 +128,7 @@ function studioAppPage(projectName, token = "") {
       home:"Inicio", questions:"Preguntas", review:"Revisión", build:"Construir", simple:"Simple", adv:"Avanzado",
       routeTitle:"Tu proyecto, paso a paso", routeIntro:"Del brief a la app construida y probada. Cada paso se abre cuando el anterior está listo; puedes volver a cualquiera.",
       next:"Lo siguiente", stepN:"paso", open:"Abrir", allDone:"Todo hecho", allDoneP:"Todo está construido y probado. Añade algo al brief cuando quieras crecer la app.",
-      nx_project:"Crea tu proyecto", nxp_project:"Cuatro preguntas y specgate prepara esta carpeta.", go_project:"Empezar",
+      nx_project:"Crea tu proyecto", nxp_project:"Cinco preguntas y specgate prepara esta carpeta.", go_project:"Empezar",
       nx_brief:"Escribe el brief", nxp_brief:"Qué tiene que hacer la app, con tus palabras. De aquí salen los requisitos.", go_brief:"Abrir el brief",
       nx_drafts:"Redacta los borradores", nxp_drafts:"El asistente convierte cada módulo del brief en requisitos con ejemplos.", go_drafts:"Redactar",
       nx_questions:"Responde las preguntas", nxp_questions:"El asistente o un borrador espera una decisión tuya.", go_questions:"Responder",
@@ -143,7 +143,7 @@ function studioAppPage(projectName, token = "") {
       s_report:"B de T construidos y probados", s_report_locked:"Aparece con el primer requisito construido", s_locked:"Se abre con el paso anterior",
       repeat:"Los pasos 3 a 6 se repiten por módulo: puedes construir uno mientras redactas otro.",
       loading:"Cargando…", mods:"módulos", sOf:"de", modules:"Módulos", ready:"listo", qWait:"pregunta", draft:"borrador por revisar", reqs:"requisitos",
-      newTitle:"Empecemos un proyecto", newIntro:"Esta carpeta está vacía. Cuatro preguntas y specgate la prepara: especificación, pruebas y el asistente que programa.",
+      newTitle:"Empecemos un proyecto", newIntro:"Esta carpeta está vacía. Cinco preguntas y specgate la prepara: especificación, pruebas y el asistente que programa.",
       q1:"1 · ¿Cómo se llama?", q2:"2 · ¿Qué vas a construir?", q3:"3 · ¿Con qué tecnología?", q4:"4 · ¿Qué asistente programa?",
       kWeb:"Una web", kWebP:"Pantallas que se abren en el navegador", kApi:"Un servicio (API)", kApiP:"Datos y reglas para otras apps", kMob:"Una app móvil", kMobP:"Para el teléfono",
       stNode:"Node.js + React (recomendado para una web)", stJava:"Java + Spring Boot", stPy:"Python + FastAPI", stCustom:"Otra… (la escribes tú)",
@@ -180,17 +180,25 @@ function studioAppPage(projectName, token = "") {
       whoCodes:"¿Quién programa?", whoCodesP:"Los asistentes de este proyecto. Se recuerda tu elección.", noEstimate:"Sin estimación todavía", perRun:"por requisito",
       readyN:"Listos para construir", minutes:"min aprox.", perReq:"por requisito", buildN:"Construir los N", build1:"Construir este", noAgent:"Falta configurar el asistente (agent en harness.config.yaml).",
       running:"En marcha", stP:"Programa", stT:"Prueba", stQ:"Revisa la calidad", stS:"Guarda", watch:"Ver en directo", stop:"Detener después de este", stopAsked:"Se detendrá al terminar este.",
-      doneToday:"Terminados", nothingReady:"No hay nada listo para construir.", started:"En marcha: ", saved:"Guardado.", err:"No se pudo: ",
+      doneToday:"Terminados", nothingReady:"No hay nada listo para construir.", started:"En marcha: ", savedGit:"la especificación quedó guardada en git (N archivos)", saved:"Guardado.", err:"No se pudo: ",
       repTitle:"Lo que está hecho", repIntro:"Cada requisito se construyó y se probó con el ejemplo que lo describe. Este informe sale de la especificación y de las pruebas.",
       download:"Descargar informe", print:"Imprimir / PDF", rBuilt:"Construido", rExamples:"Ejemplos probados", rGate:"Calidad", rGateOk:"Pasa", rGateBad:"No pasa", rCost:"Coste del asistente",
       byModule:"Por módulo", colModule:"Módulo", colBuilt:"Hecho", colEx:"Ejemplos", colState:"Estado", complete:"Completo", waitingN:"N esperan una respuesta", notBuilt:"Sin construir",
       whatDoes:"Qué hace ya la app", provedBy:"Probado con: ", missing:"Lo que falta", missingNone:"Nada.", waitsFor:"espera la respuesta a: ", decisions:"Decisiones y supuestos",
-      decisionsP:"Q preguntas respondidas · A supuestos anotados.", nothingBuilt:"Todavía no hay nada construido."},
+      decisionsP:"Q preguntas respondidas · A supuestos anotados.", nothingBuilt:"Todavía no hay nada construido.",
+      qualTitle:"Calidad del código", qualIntro:"Comprobaciones que el asistente debe pasar en cada requisito, todas en Docker y sin cuentas.",
+      qualNone:"Sin comprobaciones de calidad todavía.", qualBasic:"Activar el nivel básico", qualStrict:"Activar el nivel estricto",
+      toBasic:"Cambiar a básico", toStrict:"Cambiar a estricto", gates:"bloquea", advises:"avisa", notRunnable:"no se puede ejecutar aquí",
+      dockerOn:"Docker responde", dockerOff:"Docker no responde: arranca Docker Desktop", thresholds:"Umbrales: cobertura de lo cambiado C % · mutación M %",
+      stAttempt:"en cada intento", stEnd:"al final", stCi:"en CI",
+      q5:"5 · ¿Qué nivel de calidad?", qlBasic:"Básico (recomendado)", qlBasicP:"Secretos, dependencias, tests que cubren lo cambiado y análisis estático. Todo en Docker.",
+      qlStrict:"Estricto", qlStrictP:"Además: tests de mutación, complejidad y SAST. Más lento, más exigente.", qlNone:"Ninguno por ahora", qlNoneP:"Se puede activar después en Proyecto.",
+      rQuality:"Calidad del código", rQualityP:"cobertura C % · mutación M %", covShort:"cobertura", mutShort:"mutación"},
     en: {route:"Route", project:"Project", brief:"Brief", drafts:"Drafts", report:"Report",
       home:"Home", questions:"Questions", review:"Review", build:"Build", simple:"Simple", adv:"Advanced",
       routeTitle:"Your project, step by step", routeIntro:"From the brief to the app built and proven. Each step opens once the one before is ready; you can go back to any.",
       next:"Next", stepN:"step", open:"Open", allDone:"All done", allDoneP:"Everything is built and proven. Add to the brief whenever you want the app to grow.",
-      nx_project:"Create your project", nxp_project:"Four questions and specgate prepares this folder.", go_project:"Start",
+      nx_project:"Create your project", nxp_project:"Five questions and specgate prepares this folder.", go_project:"Start",
       nx_brief:"Write the brief", nxp_brief:"What the app has to do, in your words. The requirements come from it.", go_brief:"Open the brief",
       nx_drafts:"Draft the modules", nxp_drafts:"The assistant turns each module of the brief into requirements with examples.", go_drafts:"Draft",
       nx_questions:"Answer the questions", nxp_questions:"The assistant or a draft is waiting for your decision.", go_questions:"Answer",
@@ -205,7 +213,7 @@ function studioAppPage(projectName, token = "") {
       s_report:"B of T built and proven", s_report_locked:"Appears with the first requirement built", s_locked:"Opens with the step before",
       repeat:"Steps 3 to 6 repeat per module: you can build one while another is drafted.",
       loading:"Loading…", mods:"modules", sOf:"of", modules:"Modules", ready:"done", qWait:"question", draft:"draft to review", reqs:"requirements",
-      newTitle:"Let's start a project", newIntro:"This folder is empty. Four questions and specgate prepares it: specification, tests and the assistant that codes.",
+      newTitle:"Let's start a project", newIntro:"This folder is empty. Five questions and specgate prepares it: specification, tests and the assistant that codes.",
       q1:"1 · What is it called?", q2:"2 · What are you building?", q3:"3 · With which technology?", q4:"4 · Which assistant codes?",
       kWeb:"A website", kWebP:"Screens opened in the browser", kApi:"A service (API)", kApiP:"Data and rules for other apps", kMob:"A mobile app", kMobP:"For the phone",
       stNode:"Node.js + React (recommended for a website)", stJava:"Java + Spring Boot", stPy:"Python + FastAPI", stCustom:"Other… (you write it)",
@@ -242,12 +250,20 @@ function studioAppPage(projectName, token = "") {
       whoCodes:"Who codes?", whoCodesP:"The assistants of this project. Your choice is remembered.", noEstimate:"No estimate yet", perRun:"per requirement",
       readyN:"Ready to build", minutes:"min approx.", perReq:"per requirement", buildN:"Build the N", build1:"Build this one", noAgent:"The assistant is not configured yet (agent in harness.config.yaml).",
       running:"Running", stP:"Codes", stT:"Tests", stQ:"Checks quality", stS:"Saves", watch:"Watch live", stop:"Stop after this one", stopAsked:"It will stop once this one ends.",
-      doneToday:"Finished", nothingReady:"Nothing is ready to build.", started:"Started: ", saved:"Saved.", err:"Could not: ",
+      doneToday:"Finished", nothingReady:"Nothing is ready to build.", started:"Started: ", savedGit:"the specification was committed to git (N files)", saved:"Saved.", err:"Could not: ",
       repTitle:"What is done", repIntro:"Each requirement was built and proven with the example that describes it. This report comes from the specification and the tests.",
       download:"Download the report", print:"Print / PDF", rBuilt:"Built", rExamples:"Examples proven", rGate:"Quality", rGateOk:"Passes", rGateBad:"Fails", rCost:"Assistant cost",
       byModule:"By module", colModule:"Module", colBuilt:"Built", colEx:"Examples", colState:"State", complete:"Complete", waitingN:"N wait for an answer", notBuilt:"Not built",
       whatDoes:"What the app does", provedBy:"Proven with: ", missing:"What is missing", missingNone:"Nothing.", waitsFor:"waits for the answer to: ", decisions:"Decisions and assumptions",
-      decisionsP:"Q questions answered · A assumptions recorded.", nothingBuilt:"Nothing is built yet."}
+      decisionsP:"Q questions answered · A assumptions recorded.", nothingBuilt:"Nothing is built yet.",
+      qualTitle:"Code quality", qualIntro:"Checks the assistant must pass on every requirement, all in Docker, no account needed.",
+      qualNone:"No quality checks yet.", qualBasic:"Turn on the basic level", qualStrict:"Turn on the strict level",
+      toBasic:"Switch to basic", toStrict:"Switch to strict", gates:"gates", advises:"advises", notRunnable:"cannot run here",
+      dockerOn:"Docker answers", dockerOff:"Docker does not answer: start Docker Desktop", thresholds:"Thresholds: diff coverage C % · mutation M %",
+      stAttempt:"every attempt", stEnd:"at the end", stCi:"in CI",
+      q5:"5 · Which quality level?", qlBasic:"Basic (recommended)", qlBasicP:"Secrets, dependencies, tests that cover the change and static analysis. All in Docker.",
+      qlStrict:"Strict", qlStrictP:"Also: mutation tests, complexity and SAST. Slower, stricter.", qlNone:"None for now", qlNoneP:"It can be turned on later in Project.",
+      rQuality:"Code quality", rQualityP:"coverage C % · mutation M %", covShort:"coverage", mutShort:"mutation"}
   };
   function load(k, d){ try { return localStorage.getItem(k) || d; } catch (e) { return d; } }
   function save(k, v){ try { localStorage.setItem(k, v); } catch (e) {} }
@@ -366,7 +382,7 @@ function studioAppPage(projectName, token = "") {
   }
 
   // ── Project (REQ-213) ───────────────────────────────────────────────────
-  var np = {name:"", kind:"web", stack:"node-react", customStack:"", customTesting:"", agent:""};
+  var np = {name:"", kind:"web", stack:"node-react", customStack:"", customTesting:"", agent:"", quality:"basic"};
   function viewProject(r, pr){
     var m = $("view"); m.replaceChildren(); m.className = "narrow";
     if (r.isProject) {
@@ -384,6 +400,7 @@ function studioAppPage(projectName, token = "") {
       m.appendChild(c);
       var hint = el("div", "card"); hint.append(el("span", "small muted", t("profilesHint")), el("code", "cmd", ["profiles_version: 1", "profiles:", "  my-agent:", "    agent: " + String.fromCharCode(34) + "my-agent < {prompt_file}" + String.fromCharCode(34)].join(String.fromCharCode(10))));
       m.appendChild(hint);
+      if (cache.quality) m.appendChild(qualityCard(cache.quality));
       return;
     }
     if (!r.empty) {
@@ -427,6 +444,14 @@ function studioAppPage(projectName, token = "") {
       f4.appendChild(l);
     });
     f.appendChild(f4);
+    var fq = el("div", "field"); fq.appendChild(el("span", "lab", t("q5")));
+    var qch = el("div", "choices");
+    [["basic", "qlBasic", "qlBasicP"], ["strict", "qlStrict", "qlStrictP"], ["none", "qlNone", "qlNoneP"]].forEach(function(k){
+      var l = el("label", "choice" + (np.quality === k[0] ? " on" : "")), rr = el("input"); rr.type = "radio"; rr.name = "np-quality"; rr.checked = np.quality === k[0];
+      rr.addEventListener("change", function(){ np.quality = k[0]; render(); });
+      var h = el("span", "h"); h.append(rr, document.createTextNode(t(k[1]))); l.append(h, el("span", "small muted", t(k[2]))); qch.appendChild(l);
+    });
+    fq.appendChild(qch); f.appendChild(fq);
     var f5 = el("div", "field"); flex(f5); f5.style.justifyContent = "space-between";
     var m0 = msgEl();
     var b = button("go", t("create"), function(){
@@ -441,6 +466,37 @@ function studioAppPage(projectName, token = "") {
     m.append(f, m0, cmd("specgate init --new · specgate harness init · specgate propose --from-brief --new-brief"));
   }
 
+  // ── Quality: the checks configured, how each runs here (REQ-229) ──────────
+  function qualityCard(q){
+    var c = el("section", "card");
+    c.append(el("h2", "", t("qualTitle")), el("span", "small muted", t("qualIntro")));
+    var dk = el("span", "small"); dk.textContent = q.docker ? t("dockerOn") : t("dockerOff"); dk.style.color = q.docker ? "var(--pass)" : "var(--fail)";
+    c.appendChild(dk);
+    if (!q.checks.length) c.appendChild(el("span", "muted", t("qualNone")));
+    else {
+      var level = el("div"); flex(level, 8);
+      if (q.level) level.appendChild(el("span", "pill b-info", q.level));
+      level.appendChild(el("span", "small muted", fill("thresholds", {C: q.diffCoverage === null ? "—" : q.diffCoverage, M: q.mutationScore === null ? "—" : q.mutationScore})));
+      c.appendChild(level);
+      var rows = el("div", "rows");
+      q.checks.forEach(function(k){
+        var l = el("div", "line"), g = el("div", "grow");
+        g.append(el("strong", "", k.name), el("span", "small muted", ({attempt:t("stAttempt"), end:t("stEnd"), ci:t("stCi")})[k.when] + " · " + (k.gate ? t("gates") : t("advises"))));
+        l.appendChild(g);
+        if (k.unavailable) { var u = el("span", "small", t("notRunnable")); u.style.color = "var(--fail)"; u.title = k.unavailable; l.appendChild(u); }
+        else l.appendChild(el("span", "pill b-soft", k.runner));
+        rows.appendChild(l);
+      });
+      c.appendChild(rows);
+    }
+    var acts = el("div"); flex(acts); var m0 = msgEl();
+    var level0 = q.checks.length ? q.level : "";
+    if (level0 !== "basic") acts.appendChild(button(level0 ? "ghost" : "go", level0 ? t("toBasic") : t("qualBasic"), function(){ post("api/quality/init", {level:"basic"}).then(function(r){ say(m0, r); if (r.ok) { cache.quality = r.view; render(); } }); }));
+    if (level0 !== "strict") acts.appendChild(button("ghost", level0 ? t("toStrict") : t("qualStrict"), function(){ post("api/quality/init", {level:"strict"}).then(function(r){ say(m0, r); if (r.ok) { cache.quality = r.view; render(); } }); }));
+    acts.appendChild(m0); c.append(acts, cmd("specgate quality init --level basic|strict · specgate quality doctor --pull · specgate quality baseline"));
+    return c;
+  }
+
   // ── Profiles: who works, picked once for Brief, Drafts and Build (REQ-211) ──
   function profileSelect(pr){
     var wrap = el("label", "small muted"); flex(wrap, 6); wrap.appendChild(document.createTextNode(t("assistant")));
@@ -829,7 +885,7 @@ function studioAppPage(projectName, token = "") {
     var label = function(){ var n = chosen().length; return n === 1 ? t("build1") : t("buildN").split("N").join(String(n)); };
     var hasAgent = b.agent || !!who;
     var go0 = button("go", label(), function(){
-      post("api/build", {reqs:chosen(), profile:who}).then(function(res){ m5.className = "msg " + (res.ok ? "ok" : "err"); m5.textContent = res.ok ? t("started") + res.started.join(", ") : t("err") + res.message; setTimeout(refresh, 1500); });
+      post("api/build", {reqs:chosen(), profile:who}).then(function(res){ m5.className = "msg " + (res.ok ? "ok" : "err"); m5.textContent = res.ok ? t("started") + res.started.join(", ") + (res.saved && res.saved.length ? " · " + fill("savedGit", {N:res.saved.length}) : "") : t("err") + res.message; setTimeout(refresh, 1500); });
     });
     go0.disabled = !b.ready.length || !hasAgent || !!b.running;
     hd.append(info, go0); sec.appendChild(hd);
@@ -865,7 +921,7 @@ function studioAppPage(projectName, token = "") {
     var dl = el("a", "go", t("download")); dl.href = "report.html"; dl.style.display = "inline-flex"; dl.style.alignItems = "center"; dl.style.color = "#fff";
     acts.append(pdf, dl); top.append(g, acts); m.appendChild(top);
     var s = el("section", "stats");
-    [[t("rBuilt"), r.built + " " + t("sOf") + " " + r.total, t("reqs"), ""], [t("rExamples"), String(r.scenarios), "", "var(--pass)"], [t("rGate"), r.gate.ok ? t("rGateOk") : t("rGateBad"), r.gate.findings[0] || "", r.gate.ok ? "var(--pass)" : "var(--fail)"], [t("rCost"), r.cost === null ? "—" : "$" + r.cost.toFixed(2), r.minutes + " min", ""]].forEach(function(x){
+    [[t("rBuilt"), r.built + " " + t("sOf") + " " + r.total, t("reqs"), ""], [t("rExamples"), String(r.scenarios), "", "var(--pass)"], [t("rGate"), r.gate.ok ? t("rGateOk") : t("rGateBad"), r.gate.findings[0] || "", r.gate.ok ? "var(--pass)" : "var(--fail)"], [t("rCost"), r.cost === null ? "—" : "$" + r.cost.toFixed(2), r.minutes + " min", ""]].concat(r.quality && r.quality.measured ? [[t("rQuality"), (r.quality.coverage === null ? "—" : r.quality.coverage + "%"), fill("rQualityP", {C: r.quality.coverage === null ? "—" : r.quality.coverage, M: r.quality.mutation === null ? "—" : r.quality.mutation}), "var(--pass)"]] : []).forEach(function(x){
       var d = el("div", "stat"), b = el("b", "", x[1]); if (x[3]) b.style.color = x[3]; d.append(el("span", "muted small", x[0]), b); if (x[2]) d.appendChild(el("span", "small muted", x[2])); s.appendChild(d);
     });
     m.appendChild(s);
@@ -892,6 +948,12 @@ function studioAppPage(projectName, token = "") {
       var line = el("div", "line"), gg = el("div", "grow");
       gg.appendChild(el("strong", "", d.title));
       d.scenarios.forEach(function(sc){ var sp = el("span", "small muted", t("provedBy") + (sc.title || sc.id)); sp.appendChild(el("span", "", " · ✓")); sp.lastChild.style.color = "var(--pass)"; gg.appendChild(sp); });
+      if (d.quality && (d.quality.coverage !== null || d.quality.mutation !== null)) {
+        var qs = [];
+        if (d.quality.coverage !== null) qs.push(t("covShort") + " " + d.quality.coverage + "%");
+        if (d.quality.mutation !== null) qs.push(t("mutShort") + " " + d.quality.mutation + "%");
+        gg.appendChild(el("span", "small", qs.join(" · ")));
+      }
       line.append(gg, el("span", "small muted", adv() ? d.id : "")); wd.appendChild(line);
     });
     m.appendChild(wd);
@@ -928,6 +990,7 @@ function studioAppPage(projectName, token = "") {
     var reads = [get("api/route").then(function(x){ cache.route = x; })];
     var isProject = !cache.route || cache.route.isProject;
     if (!cache.profiles || view === "project") reads.push(get("api/profiles").then(function(x){ cache.profiles = x; }));
+    if (view === "project" && isProject) reads.push(get("api/quality").then(function(x){ cache.quality = x; }));
     if (view === "route" && isProject) reads.push(get("api/home").then(function(x){ cache.home = x; }).catch(function(){}));
     if (view === "brief") { reads.push(get("api/modules").then(function(x){ cache.modules = x; })); if (!cache.brief || (cache.modules && cache.modules.job)) reads.push(get("api/brief").then(function(x){ cache.brief = x; })); }
     if (view === "drafts") reads.push(get("api/modules").then(function(x){ cache.modules = x; }));

package/dist/scripts/lib/studio-app-page.js.map

@@ -1 +1 @@
-{"version":3,"file":"studio-app-page.js","sourceRoot":"","sources":["../../../scripts/lib/studio-app-page.ts"],"names":[],"mappings":";;AAUA,sCAi7BC;AA37BD;;;;;;;;;GASG;AACH,SAAgB,aAAa,CAAC,WAAmB,EAAE,KAAK,GAAG,EAAE;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO;;;uCAG8B,GAAG;2BACf,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iRA+FiP,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA00BvQ,CAAC;AAChB,CAAC"}
+{"version":3,"file":"studio-app-page.js","sourceRoot":"","sources":["../../../scripts/lib/studio-app-page.ts"],"names":[],"mappings":";;AAUA,sCAg/BC;AA1/BD;;;;;;;;;GASG;AACH,SAAgB,aAAa,CAAC,WAAmB,EAAE,KAAK,GAAG,EAAE;IAC3D,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IACpD,OAAO;;;uCAG8B,GAAG;2BACf,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iRA+FiP,KAAK;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eAy4BvQ,CAAC;AAChB,CAAC"}

package/dist/scripts/lib/studio-app.js

@@ -37,6 +37,7 @@ exports.drafts = drafts;
 exports.questionsView = questionsView;
 exports.buildView = buildView;
 exports.startBuild = startBuild;
+exports.saveSpecification = saveSpecification;
 exports.stopBuild = stopBuild;
 exports.home = home;
 exports.gate = gate;
@@ -268,6 +269,9 @@ function startBuild(projectDir, reqs, profile = "") {
             message: "None of those requirements is ready to build.",
         };
     }
+    const saved = saveSpecification(projectDir);
+    if (!saved.ok)
+        return saved;
     const log = path.join(projectDir, ".harness", "events", "studio-run.log");
     fs.mkdirSync(path.dirname(log), { recursive: true });
     const out = fs.openSync(log, "a");
@@ -290,10 +294,86 @@ function startBuild(projectDir, reqs, profile = "") {
     return {
         ok: true,
         started: chosen,
+        saved: saved.committed,
         log: path.relative(projectDir, log).split(path.sep).join("/"),
         pid: child.pid || 0,
     };
 }
+/** What the studio and the drafting write: the specification, never code. */
+const SPECIFICATION = [
+    /^docs\/brief\.md$/,
+    /^spec\.md$/,
+    /^docs\/specs\//,
+    /^features\//,
+    /^harness\.config\.yaml$/,
+    /^\.harness\/(?:profiles\.yaml|prompt-prefix\.md)$/,
+];
+/** Uncommitted paths, from `git status --porcelain -z`: renames give their new path. */
+function uncommitted(projectDir) {
+    const r = (0, node_child_process_1.spawnSync)("git", ["-C", projectDir, "status", "--porcelain", "-z", "-uall"], {
+        encoding: "utf8",
+    });
+    if (r.status !== 0)
+        return null;
+    const parts = r.stdout.split("\0").filter(Boolean);
+    const out = [];
+    for (let i = 0; i < parts.length; i += 1) {
+        const status = parts[i].slice(0, 2);
+        out.push(parts[i].slice(3));
+        if (/[RC]/.test(status))
+            i += 1; // the old path of a rename follows
+    }
+    return out;
+}
+/**
+ * Commit the specification the studio wrote, so the harness finds the clean
+ * tree it needs (REQ-233). Anything else uncommitted is the person's work in
+ * progress: the build is refused and the files are named, never committed.
+ */
+function saveSpecification(projectDir) {
+    const dirty = uncommitted(projectDir);
+    if (dirty === null) {
+        return { ok: false, code: "build_no_git", message: "This folder is not a git repository." };
+    }
+    if (dirty.length === 0)
+        return { ok: true, committed: [] };
+    const other = dirty.filter((f) => !SPECIFICATION.some((re) => re.test(f)));
+    if (other.length) {
+        return {
+            ok: false,
+            code: "build_uncommitted",
+            message: `Uncommitted files that are not the specification: ${other.slice(0, 8).join(", ")}` +
+                `${other.length > 8 ? ` and ${other.length - 8} more` : ""}. Commit or stash them first.`,
+        };
+    }
+    const email = (0, node_child_process_1.spawnSync)("git", ["-C", projectDir, "config", "user.email"], { encoding: "utf8" });
+    if (!String(email.stdout || "").trim()) {
+        return {
+            ok: false,
+            code: "build_no_identity",
+            message: 'Git does not know who you are. Run git config --global user.name "Your Name" and git config --global user.email you@example.com.',
+        };
+    }
+    const add = (0, node_child_process_1.spawnSync)("git", ["-C", projectDir, "add", "--", ...dirty], { encoding: "utf8" });
+    const commit = add.status === 0
+        ? (0, node_child_process_1.spawnSync)("git", [
+            "-C",
+            projectDir,
+            "commit",
+            "-q",
+            "-m",
+            "chore(spec): save the specification from the studio",
+        ], { encoding: "utf8" })
+        : add;
+    if (commit.status !== 0) {
+        return {
+            ok: false,
+            code: "build_commit_failed",
+            message: `git could not commit the specification: ${(commit.stderr || commit.stdout || "").trim()}`,
+        };
+    }
+    return { ok: true, committed: dirty };
+}
 /** Ask the run in progress to stop after its current requirement (REQ-209). */
 function stopBuild(projectDir) {
     if (!(0, harness_guard_1.runLockHolder)(projectDir))