@rsaglobaltech/specgate 0.8.1

package/dist/scripts/alm/providers/azure.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.azureProvider = void 0;
+const http_client_1 = require("./http-client");
+/** States the shipped Azure templates use for a finished work item. */
+const DONE_STATES = ["Done", "Closed", "Completed", "Resolved"];
+const API_VERSION = "api-version=7.1";
+/**
+ * Azure Boards work items.
+ *
+ * The inverse of Jira: `System.State` is a plain field, so closing is a write
+ * rather than a transition search, and the target state is configurable —
+ * which is why this provider, and only this one, declares `done_state`.
+ */
+class AzureClient extends http_client_1.HttpAlmClient {
+    capabilities = {
+        create: true,
+        readStatus: true,
+        close: true,
+        // Azure searches with WIQL — a POST carrying a query language, then a
+        // second request to hydrate each id. That is a different shape from the
+        // other two, and declaring `false` degrades `alm pull` with a message
+        // rather than pretending and failing at the first request.
+        listIssues: false,
+    };
+    authorization;
+    projectKey;
+    issueType;
+    doneState;
+    constructor(cfg, fetchImpl) {
+        super(cfg, fetchImpl);
+        const token = http_client_1.HttpAlmClient.requireEnv(cfg.token_env);
+        this.authorization = `Basic ${Buffer.from(`:${token}`).toString("base64")}`;
+        this.projectKey = String(cfg.project_key ?? "");
+        this.issueType = cfg.issue_type ?? "Task";
+        this.doneState = cfg.done_state ?? "Done";
+    }
+    /** Work-item writes are JSON Patch; reads are not. */
+    patchHeaders() {
+        return { Authorization: this.authorization, "Content-Type": "application/json-patch+json" };
+    }
+    async createIssue(reqId, title) {
+        const path = `/${this.projectKey}/_apis/wit/workitems/` +
+            `$${encodeURIComponent(this.issueType)}?${API_VERSION}`;
+        const created = await this.requestJson(path, `Azure create work item for ${reqId}`, {
+            method: "POST",
+            headers: this.patchHeaders(),
+            body: JSON.stringify([
+                { op: "add", path: "/fields/System.Title", value: `${reqId} — ${title}` },
+                { op: "add", path: "/fields/System.Tags", value: `spec-driven; ${reqId}` },
+            ]),
+        });
+        return { key: String(created.id), url: created._links?.html?.href ?? null };
+    }
+    async getIssueStatus(issueKey) {
+        const item = await this.requestJson(`/_apis/wit/workitems/${issueKey}?fields=System.State&${API_VERSION}`, `Azure read work item ${issueKey}`, { headers: { Authorization: this.authorization } });
+        const state = item.fields?.["System.State"];
+        return state !== undefined && DONE_STATES.includes(state) ? "done" : "open";
+    }
+    async closeIssue(issueKey) {
+        await this.request(`/_apis/wit/workitems/${issueKey}?${API_VERSION}`, `Azure close work item ${issueKey}`, {
+            method: "PATCH",
+            headers: this.patchHeaders(),
+            body: JSON.stringify([{ op: "add", path: "/fields/System.State", value: this.doneState }]),
+        });
+    }
+}
+exports.azureProvider = {
+    id: "azure",
+    label: "Azure Boards",
+    config: {
+        required: ["base_url", "project_key", "token_env"],
+        optional: ["issue_type", "done_state"],
+    },
+    capabilities: { create: true, readStatus: true, close: true, listIssues: false },
+    create: (cfg, fetchImpl) => new AzureClient(cfg, fetchImpl),
+};
+exports.default = exports.azureProvider;
+//# sourceMappingURL=azure.js.map

package/dist/scripts/alm/providers/azure.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azure.js","sourceRoot":"","sources":["../../../../scripts/alm/providers/azure.ts"],"names":[],"mappings":";;;AAAA,+CAA8C;AAiB9C,uEAAuE;AACvE,MAAM,WAAW,GAAsB,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;AAEnF,MAAM,WAAW,GAAG,iBAAiB,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,WAAY,SAAQ,2BAAa;IAC5B,YAAY,GAAoB;QACvC,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,sEAAsE;QACtE,wEAAwE;QACxE,sEAAsE;QACtE,2DAA2D;QAC3D,UAAU,EAAE,KAAK;KAClB,CAAC;IAEe,aAAa,CAAS;IACtB,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,SAAS,CAAS;IAEnC,YAAY,GAAc,EAAE,SAAqB;QAC/C,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,2BAAa,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,aAAa,GAAG,SAAS,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5E,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;IAC5C,CAAC;IAED,sDAAsD;IAC9C,YAAY;QAClB,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,6BAA6B,EAAE,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAa;QAC5C,MAAM,IAAI,GACR,IAAI,IAAI,CAAC,UAAU,uBAAuB;YAC1C,IAAI,kBAAkB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,WAAW,EAAE,CAAC;QAE1D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CACpC,IAAI,EACJ,8BAA8B,KAAK,EAAE,EACrC;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE,EAAE;gBACzE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,qBAAqB,EAAE,KAAK,EAAE,gBAAgB,KAAK,EAAE,EAAE;aAC3E,CAAC;SACH,CACF,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CACjC,wBAAwB,QAAQ,wBAAwB,WAAW,EAAE,EACrE,wBAAwB,QAAQ,EAAE,EAClC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,EAAE,CACnD,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,cAAc,CAAC,CAAC;QAC5C,OAAO,KAAK,KAAK,SAAS,IAAI,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,IAAI,CAAC,OAAO,CAChB,wBAAwB,QAAQ,IAAI,WAAW,EAAE,EACjD,yBAAyB,QAAQ,EAAE,EACnC;YACE,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;YAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,sBAAsB,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;SAC3F,CACF,CAAC;IACJ,CAAC;CACF;AAEY,QAAA,aAAa,GAAgB;IACxC,EAAE,EAAE,OAAO;IACX,KAAK,EAAE,cAAc;IACrB,MAAM,EAAE;QACN,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAC;QAClD,QAAQ,EAAE,CAAC,YAAY,EAAE,YAAY,CAAC;KACvC;IACD,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE;IAChF,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,WAAW,CAAC,GAAG,EAAE,SAAS,CAAC;CAC5D,CAAC;AAEF,kBAAe,qBAAa,CAAC"}

package/dist/scripts/alm/providers/github.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.githubProvider = void 0;
+const http_client_1 = require("./http-client");
+/** github.com. A GitHub Enterprise Server install sets `base_url` instead. */
+const PUBLIC_API = "https://api.github.com";
+/** Pinned so a future default does not change what this connector sends. */
+const API_VERSION = "2022-11-28";
+/**
+ * GitHub Issues.
+ *
+ * The unit is a **repository**, not a project, which is why this provider
+ * declares `repo` rather than reusing `project_key`. Writing
+ * `project_key: acme/widgets` would read as a lie, and the config contract
+ * exists precisely so a provider can say what it actually needs.
+ *
+ * There is no `issue_type`: GitHub has labels, and the connector applies the
+ * same two every other provider does. There is no `done_state` either — an
+ * issue is open or closed — and declaring one would be read by nobody, which
+ * is the defect `done_state` on Jira already was.
+ *
+ * **Closed is not always done.** GitHub distinguishes closing an issue as
+ * `completed` from closing it as `not_planned`, and only the first means the
+ * work happened. Collapsing both to "done" would tell the traceability matrix
+ * a requirement was delivered when the team had in fact abandoned it — so
+ * `not_planned` reads as open, and the mismatch surfaces as drift for a human,
+ * which is what ADR-0021 asks for.
+ */
+class GitHubClient extends http_client_1.HttpAlmClient {
+    capabilities = {
+        create: true,
+        readStatus: true,
+        close: true,
+        listIssues: true,
+    };
+    headers;
+    repo;
+    constructor(cfg, fetchImpl) {
+        // github.com has one API host, so `base_url` is only for Enterprise Server.
+        // Defaulting here keeps it out of every config that does not need it.
+        super({ ...cfg, base_url: cfg.base_url ?? PUBLIC_API }, fetchImpl);
+        const token = http_client_1.HttpAlmClient.requireEnv(cfg.token_env);
+        this.headers = {
+            Authorization: `Bearer ${token}`,
+            Accept: "application/vnd.github+json",
+            "X-GitHub-Api-Version": API_VERSION,
+            "Content-Type": "application/json",
+        };
+        this.repo = GitHubClient.requireRepo(cfg.repo);
+    }
+    /**
+     * `owner/name`, checked here rather than discovered as a 404.
+     *
+     * A bare repository name builds `/repos/widgets/issues`, which GitHub answers
+     * with a 404 that says nothing about the real mistake.
+     */
+    static requireRepo(value) {
+        const repo = String(value ?? "").replace(/^\/+|\/+$/g, "");
+        if (!/^[^/\s]+\/[^/\s]+$/.test(repo)) {
+            throw new Error(`alm.config.yaml: repo '${String(value ?? "")}' is not in owner/name form.\n` +
+                "Fix: write it as `repo: acme/widgets`.");
+        }
+        return repo;
+    }
+    async createIssue(reqId, title) {
+        const created = await this.requestJson(`/repos/${this.repo}/issues`, `GitHub create issue for ${reqId}`, {
+            method: "POST",
+            headers: this.headers,
+            body: JSON.stringify({
+                title: `${reqId} — ${title}`,
+                labels: ["spec-driven", reqId],
+            }),
+        });
+        // The number is enough to address the issue because the repository comes
+        // from the config — the same shape Azure uses for its work-item ids.
+        return { key: String(created.number), url: created.html_url ?? null };
+    }
+    async getIssueStatus(issueKey) {
+        const issue = await this.requestJson(`/repos/${this.repo}/issues/${issueKey}`, `GitHub read issue ${issueKey}`, { headers: this.headers });
+        if (issue.state !== "closed")
+            return "open";
+        return issue.state_reason === "not_planned" ? "open" : "done";
+    }
+    /**
+     * Open issues carrying a label.
+     *
+     * `pulls` are filtered out: GitHub's issues endpoint returns pull requests
+     * too — every PR is an issue — and a pull request is not a requirement
+     * somebody proposed.
+     */
+    async listIssues(label) {
+        const issues = await this.requestJson(`/repos/${this.repo}/issues?state=open&labels=${encodeURIComponent(label)}&per_page=100`, `GitHub list issues labelled ${label}`, { headers: this.headers });
+        return (issues || [])
+            .filter((issue) => !issue.pull_request)
+            .map((issue) => ({
+            key: String(issue.number),
+            title: String(issue.title ?? ""),
+            body: String(issue.body ?? ""),
+            url: issue.html_url ?? null,
+        }));
+    }
+    async closeIssue(issueKey) {
+        await this.request(`/repos/${this.repo}/issues/${issueKey}`, `GitHub close issue ${issueKey}`, {
+            method: "PATCH",
+            headers: this.headers,
+            // `completed` rather than the default, so `getIssueStatus` reads back
+            // as done and the two halves of this connector agree.
+            body: JSON.stringify({ state: "closed", state_reason: "completed" }),
+        });
+    }
+}
+exports.githubProvider = {
+    id: "github",
+    label: "GitHub Issues",
+    config: {
+        required: ["repo", "token_env"],
+        // Only GitHub Enterprise Server needs a base URL; github.com is the default.
+        optional: ["base_url"],
+    },
+    capabilities: { create: true, readStatus: true, close: true, listIssues: true },
+    create: (cfg, fetchImpl) => new GitHubClient(cfg, fetchImpl),
+};
+exports.default = exports.githubProvider;
+//# sourceMappingURL=github.js.map

package/dist/scripts/alm/providers/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../../../scripts/alm/providers/github.ts"],"names":[],"mappings":";;;AAAA,+CAA8C;AAwB9C,8EAA8E;AAC9E,MAAM,UAAU,GAAG,wBAAwB,CAAC;AAE5C,4EAA4E;AAC5E,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,YAAa,SAAQ,2BAAa;IAC7B,YAAY,GAAoB;QACvC,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,IAAI;KACjB,CAAC;IAEe,OAAO,CAAmC;IAC1C,IAAI,CAAS;IAE9B,YAAY,GAAc,EAAE,SAAqB;QAC/C,4EAA4E;QAC5E,sEAAsE;QACtE,KAAK,CAAC,EAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,UAAU,EAAE,EAAE,SAAS,CAAC,CAAC;QAEnE,MAAM,KAAK,GAAG,2BAAa,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG;YACb,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,MAAM,EAAE,6BAA6B;YACrC,sBAAsB,EAAE,WAAW;YACnC,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACK,MAAM,CAAC,WAAW,CAAC,KAAc;QACvC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,KAAK,CACb,0BAA0B,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,gCAAgC;gBAC3E,wCAAwC,CAC3C,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAa;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CACpC,UAAU,IAAI,CAAC,IAAI,SAAS,EAC5B,2BAA2B,KAAK,EAAE,EAClC;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;gBAC5B,MAAM,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;aAC/B,CAAC;SACH,CACF,CAAC;QACF,yEAAyE;QACzE,qEAAqE;QACrE,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;IACxE,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAClC,UAAU,IAAI,CAAC,IAAI,WAAW,QAAQ,EAAE,EACxC,qBAAqB,QAAQ,EAAE,EAC/B,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC;QAC5C,OAAO,KAAK,CAAC,YAAY,KAAK,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChE,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CACnC,UAAU,IAAI,CAAC,IAAI,6BAA6B,kBAAkB,CAAC,KAAK,CAAC,eAAe,EACxF,+BAA+B,KAAK,EAAE,EACtC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;aAClB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC;aACtC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACf,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;YACzB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC;YAChC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;YAC9B,GAAG,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI;SAC5B,CAAC,CAAC,CAAC;IACR,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,IAAI,CAAC,IAAI,WAAW,QAAQ,EAAE,EAAE,sBAAsB,QAAQ,EAAE,EAAE;YAC7F,MAAM,EAAE,OAAO;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,sEAAsE;YACtE,sDAAsD;YACtD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,CAAC;SACrE,CAAC,CAAC;IACL,CAAC;CACF;AAEY,QAAA,cAAc,GAAgB;IACzC,EAAE,EAAE,QAAQ;IACZ,KAAK,EAAE,eAAe;IACtB,MAAM,EAAE;QACN,QAAQ,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;QAC/B,6EAA6E;QAC7E,QAAQ,EAAE,CAAC,UAAU,CAAC;KACvB;IACD,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/E,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,SAAS,CAAC;CAC7D,CAAC;AAEF,kBAAe,sBAAc,CAAC"}

package/dist/scripts/alm/providers/http-client.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpAlmClient = void 0;
+/**
+ * What every HTTP-backed ALM connector shares: a credential read from the
+ * environment, a base URL that does not grow a doubled slash, and a refusal to
+ * carry on past a failed response.
+ *
+ * Credentials come from environment variables named in `alm.config.yaml` —
+ * never from the file itself, which is committed.
+ */
+class HttpAlmClient {
+    baseUrl;
+    fetchImpl;
+    constructor(cfg, fetchImpl) {
+        // A trailing slash in the config is invisible until it produces
+        // `https://host//rest/api` against a real server, so it is stripped once,
+        // here, rather than in each provider's URL building.
+        this.baseUrl = String(cfg.base_url ?? "").replace(/\/$/, "");
+        this.fetchImpl = fetchImpl ?? globalThis.fetch;
+    }
+    /** Read a credential, naming the variable and how to set it when it is absent. */
+    static requireEnv(name) {
+        const value = name ? process.env[name] : undefined;
+        if (!value) {
+            throw new Error(`Environment variable ${name ?? "(unnamed)"} is not set.\n` +
+                "Fix: export the ALM API token in that variable (CI: a masked secret).");
+        }
+        return value;
+    }
+    /** Perform a request and fail loudly, with the server's own words, when it is refused. */
+    async request(path, what, init) {
+        const res = await this.fetchImpl(`${this.baseUrl}${path}`, init);
+        if (!res.ok) {
+            const body = await res.text().catch(() => "");
+            throw new Error(`${what} failed: HTTP ${res.status} ${body.slice(0, 300)}`);
+        }
+        return res;
+    }
+    /** The same, returning the parsed body, which is what every caller wants. */
+    async requestJson(path, what, init) {
+        const res = await this.request(path, what, init);
+        return (await res.json());
+    }
+}
+exports.HttpAlmClient = HttpAlmClient;
+//# sourceMappingURL=http-client.js.map

package/dist/scripts/alm/providers/http-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-client.js","sourceRoot":"","sources":["../../../../scripts/alm/providers/http-client.ts"],"names":[],"mappings":";;;AAUA;;;;;;;GAOG;AACH,MAAsB,aAAa;IAGd,OAAO,CAAS;IAClB,SAAS,CAAY;IAEtC,YAAsB,GAAc,EAAE,SAAqB;QACzD,gEAAgE;QAChE,0EAA0E;QAC1E,qDAAqD;QACrD,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,GAAG,SAAS,IAAM,UAAmC,CAAC,KAAmB,CAAC;IAC1F,CAAC;IAMD,kFAAkF;IACxE,MAAM,CAAC,UAAU,CAAC,IAAwB;QAClD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnD,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,wBAAwB,IAAI,IAAI,WAAW,gBAAgB;gBACzD,uEAAuE,CAC1E,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,0FAA0F;IAChF,KAAK,CAAC,OAAO,CACrB,IAAY,EACZ,IAAY,EACZ,IAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,iBAAiB,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,6EAA6E;IACnE,KAAK,CAAC,WAAW,CACzB,IAAY,EACZ,IAAY,EACZ,IAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACjD,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IACjC,CAAC;CACF;AArDD,sCAqDC"}

package/dist/scripts/alm/providers/index.js

@@ -0,0 +1,107 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCommunityProvider = exports.providerIds = exports.PROVIDERS = void 0;
+exports.getProvider = getProvider;
+const jira_1 = require("./jira");
+const azure_1 = require("./azure");
+const github_1 = require("./github");
+const port_1 = require("../port");
+/**
+ * The provider registry. Adding an ALM is a row here plus a module beside it;
+ * nothing else in the CLI learns its name.
+ *
+ * The conformance kit iterates this list, so a provider that is registered is
+ * a provider that is tested — there is no way to add one quietly.
+ */
+exports.PROVIDERS = [jira_1.jiraProvider, azure_1.azureProvider, github_1.githubProvider];
+const BY_ID = new Map(exports.PROVIDERS.map((p) => [p.id, p]));
+/** Every registered provider id, in registration order. */
+const providerIds = () => exports.PROVIDERS.map((p) => p.id);
+exports.providerIds = providerIds;
+// ── community providers ──────────────────────────────────────────────────────
+//
+// Two tiers, because the alternative is worse in both directions. Every
+// connector is somebody else's API, changing on their schedule; carrying six of
+// them here would make this repository's release cadence hostage to six
+// vendors. Refusing them all would make the tool useless to a team on YouTrack.
+//
+// So: `jira`, `azure` and `github` are core — maintained here, exercised by the
+// conformance kit in CI. Anything else is resolved by package name:
+//
+//     provider: npm:csda-alm-youtrack
+//
+// **This runs third-party code, and that code is handed your ALM credential**,
+// because a connector cannot talk to a board without one. The trust model is
+// therefore exactly that of a devDependency, and the guards below are the ones
+// that make it no worse than that:
+//
+//   - nothing is ever installed automatically. The package must already be in
+//     the project's `node_modules`, which means somebody added it deliberately
+//     and it went through whatever review dependencies get;
+//   - the name must be a package name — no paths, no URLs, no `..`. A config
+//     file cannot be made to load an arbitrary file off the disk;
+//   - the module is checked against the port before a single method is called,
+//     so a package that is not a provider fails with a diagnostic rather than a
+//     stack trace from inside `sync`.
+const PACKAGE_PREFIX = "npm:";
+/** npm's own naming rules, minus the length limit: scoped or bare, lowercase. */
+const PACKAGE_NAME = /^(?:@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/;
+const isCommunityProvider = (id) => String(id).startsWith(PACKAGE_PREFIX);
+exports.isCommunityProvider = isCommunityProvider;
+/** Cache by resolved path: a provider is a module, and re-requiring it is pointless. */
+const communityCache = new Map();
+function loadCommunityProvider(id, projectDir) {
+    const packageName = id.slice(PACKAGE_PREFIX.length);
+    if (!PACKAGE_NAME.test(packageName)) {
+        throw new Error(`Invalid community provider '${id}'.\n` +
+            "Fix: `provider: npm:<package-name>` — a package name, not a path or a URL. " +
+            "Loading a provider from a path would let a config file run any file on the disk.");
+    }
+    let entry;
+    try {
+        entry = require.resolve(packageName, { paths: [projectDir] });
+    }
+    catch {
+        throw new Error(`ALM provider package '${packageName}' is not installed in this project.\n` +
+            `Fix: install it first — npm install --save-dev ${packageName}\n` +
+            "It is never installed automatically: a provider runs in your process and " +
+            "is given your ALM token, so adding one is a dependency decision, not a " +
+            "configuration one.");
+    }
+    const cached = communityCache.get(entry);
+    if (cached)
+        return cached;
+    const loaded = require(entry);
+    const provider = (loaded && loaded.default ? loaded.default : loaded);
+    const problems = (0, port_1.checkProviderDeclaration)(provider);
+    if (problems.length > 0) {
+        throw new Error(`'${packageName}' does not implement the ALM provider contract:\n` +
+            problems.map((p) => `  - ${p}`).join("\n") +
+            "\nFix: report it to the package author. The contract is documented in docs/alm.md.");
+    }
+    communityCache.set(entry, provider);
+    return provider;
+}
+/**
+ * Look one up, or explain which ones exist.
+ *
+ * @param projectDir where a community package is resolved from. Required for
+ *                   `npm:` ids; core providers never need it.
+ */
+function getProvider(id, projectDir) {
+    if ((0, exports.isCommunityProvider)(id)) {
+        if (!projectDir) {
+            throw new Error(`Community provider '${id}' needs a project directory to resolve from.\n` +
+                "Fix: this is a bug in the caller — report it.");
+        }
+        return loadCommunityProvider(id, projectDir);
+    }
+    const provider = BY_ID.get(id);
+    if (!provider) {
+        throw new Error(`Unknown ALM provider '${id}'. Available: ${(0, exports.providerIds)().join(", ")}.\n` +
+            "Fix: set `provider:` in alm.config.yaml to one of those, or to " +
+            "`npm:<package>` for a community connector you have installed.");
+    }
+    return provider;
+}
+//# sourceMappingURL=index.js.map

package/dist/scripts/alm/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../scripts/alm/providers/index.ts"],"names":[],"mappings":";;;AAyGA,kCAoBC;AA7HD,iCAAsC;AACtC,mCAAwC;AACxC,qCAA0C;AAC1C,kCAAmD;AAGnD;;;;;;GAMG;AACU,QAAA,SAAS,GAA2B,CAAC,mBAAY,EAAE,qBAAa,EAAE,uBAAc,CAAC,CAAC;AAE/F,MAAM,KAAK,GAAqC,IAAI,GAAG,CAAC,iBAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAEzF,2DAA2D;AACpD,MAAM,WAAW,GAAG,GAAa,EAAE,CAAC,iBAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAAzD,QAAA,WAAW,eAA8C;AAEtE,gFAAgF;AAChF,EAAE;AACF,wEAAwE;AACxE,gFAAgF;AAChF,wEAAwE;AACxE,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,oEAAoE;AACpE,EAAE;AACF,sCAAsC;AACtC,EAAE;AACF,+EAA+E;AAC/E,6EAA6E;AAC7E,+EAA+E;AAC/E,mCAAmC;AACnC,EAAE;AACF,8EAA8E;AAC9E,+EAA+E;AAC/E,4DAA4D;AAC5D,6EAA6E;AAC7E,kEAAkE;AAClE,+EAA+E;AAC/E,gFAAgF;AAChF,sCAAsC;AAEtC,MAAM,cAAc,GAAG,MAAM,CAAC;AAE9B,iFAAiF;AACjF,MAAM,YAAY,GAAG,0DAA0D,CAAC;AAEzE,MAAM,mBAAmB,GAAG,CAAC,EAAU,EAAW,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AAArF,QAAA,mBAAmB,uBAAkE;AAElG,wFAAwF;AACxF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAuB,CAAC;AAEtD,SAAS,qBAAqB,CAAC,EAAU,EAAE,UAAkB;IAC3D,MAAM,WAAW,GAAG,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IAEpD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,+BAA+B,EAAE,MAAM;YACrC,6EAA6E;YAC7E,kFAAkF,CACrF,CAAC;IACJ,CAAC;IAED,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yBAAyB,WAAW,uCAAuC;YACzE,kDAAkD,WAAW,IAAI;YACjE,2EAA2E;YAC3E,yEAAyE;YACzE,oBAAoB,CACvB,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,QAAQ,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAgB,CAAC;IAErF,MAAM,QAAQ,GAAG,IAAA,+BAAwB,EAAC,QAAQ,CAAC,CAAC;IACpD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,IAAI,WAAW,mDAAmD;YAChE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAC1C,oFAAoF,CACvF,CAAC;IACJ,CAAC;IAED,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,WAAW,CAAC,EAAU,EAAE,UAAmB;IACzD,IAAI,IAAA,2BAAmB,EAAC,EAAE,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CACb,uBAAuB,EAAE,gDAAgD;gBACvE,+CAA+C,CAClD,CAAC;QACJ,CAAC;QACD,OAAO,qBAAqB,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,yBAAyB,EAAE,iBAAiB,IAAA,mBAAW,GAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;YACvE,iEAAiE;YACjE,+DAA+D,CAClE,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/scripts/alm/providers/jira.js

@@ -0,0 +1,129 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.jiraProvider = void 0;
+const http_client_1 = require("./http-client");
+/**
+ * Jira Cloud.
+ *
+ * "Done" is not a state here, it is a *category*: Jira's workflows are
+ * per-project, so the only portable question is whether the current status
+ * belongs to the `done` category, and the only portable way to close is to
+ * find a transition that leads to one. That is why this provider declares no
+ * `done_state` — configuring one would be read by nobody.
+ */
+class JiraClient extends http_client_1.HttpAlmClient {
+    capabilities = {
+        create: true,
+        readStatus: true,
+        close: true,
+        listIssues: true,
+    };
+    headers;
+    projectKey;
+    issueType;
+    constructor(cfg, fetchImpl) {
+        super(cfg, fetchImpl);
+        const token = http_client_1.HttpAlmClient.requireEnv(cfg.token_env);
+        // Jira Cloud's Basic auth pairs the token with an account email, and
+        // $JIRA_USER is the conventional home for it.
+        const user = http_client_1.HttpAlmClient.requireEnv(cfg.user_env ?? "JIRA_USER");
+        this.headers = {
+            Authorization: `Basic ${Buffer.from(`${user}:${token}`).toString("base64")}`,
+            "Content-Type": "application/json",
+        };
+        this.projectKey = String(cfg.project_key ?? "");
+        this.issueType = cfg.issue_type ?? "Task";
+    }
+    async createIssue(reqId, title) {
+        const created = await this.requestJson("/rest/api/3/issue", `Jira create issue for ${reqId}`, {
+            method: "POST",
+            headers: this.headers,
+            body: JSON.stringify({
+                fields: {
+                    project: { key: this.projectKey },
+                    issuetype: { name: this.issueType },
+                    summary: `${reqId} — ${title}`,
+                    labels: ["spec-driven", reqId],
+                },
+            }),
+        });
+        return { key: created.key, url: `${this.baseUrl}/browse/${created.key}` };
+    }
+    async getIssueStatus(issueKey) {
+        const issue = await this.requestJson(`/rest/api/3/issue/${issueKey}?fields=status`, `Jira read ${issueKey}`, { headers: this.headers });
+        return issue.fields?.status?.statusCategory?.key === "done" ? "done" : "open";
+    }
+    /**
+     * Open issues carrying a label, via JQL.
+     *
+     * The project is pinned as well as the label: a label is global in Jira, so
+     * searching on it alone reaches across every project the credential can see.
+     *
+     * Jira Cloud returns `description` as Atlassian Document Format — a document
+     * tree, not a string — so the text is flattened out of it. A body that does
+     * not flatten comes back empty rather than as `[object Object]`.
+     */
+    async listIssues(label) {
+        const jql = `project = "${this.projectKey}" AND labels = "${label}" AND statusCategory != Done`;
+        const result = await this.requestJson(`/rest/api/3/search?jql=${encodeURIComponent(jql)}&fields=summary,description&maxResults=100`, `Jira search for issues labelled ${label}`, { headers: this.headers });
+        return (result.issues ?? []).map((issue) => ({
+            key: issue.key,
+            title: String(issue.fields?.summary ?? ""),
+            body: flattenAdf(issue.fields?.description),
+            url: `${this.baseUrl}/browse/${issue.key}`,
+        }));
+    }
+    async closeIssue(issueKey) {
+        const transition = await this.findDoneTransition(issueKey);
+        await this.request(`/rest/api/3/issue/${issueKey}/transitions`, `Jira transition ${issueKey}`, {
+            method: "POST",
+            headers: this.headers,
+            body: JSON.stringify({ transition: { id: transition.id } }),
+        });
+    }
+    /** The workflow decides which transition means done; there may be none. */
+    async findDoneTransition(issueKey) {
+        const { transitions } = await this.requestJson(`/rest/api/3/issue/${issueKey}/transitions`, `Jira list transitions for ${issueKey}`, { headers: this.headers });
+        const done = (transitions ?? []).find((t) => t.to?.statusCategory?.key === "done");
+        if (!done) {
+            throw new Error(`Jira: no transition to a done state available for ${issueKey}.`);
+        }
+        return done;
+    }
+}
+/**
+ * The plain text inside an Atlassian Document Format value.
+ *
+ * ADF nests content nodes arbitrarily; only the `text` leaves matter here, and
+ * a shape this does not recognise yields "" rather than a stringified object.
+ */
+function flattenAdf(value) {
+    if (typeof value === "string")
+        return value;
+    if (!value || typeof value !== "object")
+        return "";
+    const node = value;
+    if (typeof node.text === "string")
+        return node.text;
+    if (!Array.isArray(node.content))
+        return "";
+    return node.content
+        .map((child) => flattenAdf(child))
+        .filter(Boolean)
+        .join("\n")
+        .trim();
+}
+exports.jiraProvider = {
+    id: "jira",
+    label: "Jira Cloud",
+    config: {
+        required: ["base_url", "project_key", "token_env"],
+        // Optional because $JIRA_USER is the conventional default. Naming the
+        // variable in the config is better, not compulsory.
+        optional: ["user_env", "issue_type"],
+    },
+    capabilities: { create: true, readStatus: true, close: true, listIssues: true },
+    create: (cfg, fetchImpl) => new JiraClient(cfg, fetchImpl),
+};
+exports.default = exports.jiraProvider;
+//# sourceMappingURL=jira.js.map

package/dist/scripts/alm/providers/jira.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jira.js","sourceRoot":"","sources":["../../../../scripts/alm/providers/jira.ts"],"names":[],"mappings":";;;AAAA,+CAA8C;AAgC9C;;;;;;;;GAQG;AACH,MAAM,UAAW,SAAQ,2BAAa;IAC3B,YAAY,GAAoB;QACvC,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI;QAChB,KAAK,EAAE,IAAI;QACX,UAAU,EAAE,IAAI;KACjB,CAAC;IAEe,OAAO,CAAmC;IAC1C,UAAU,CAAS;IACnB,SAAS,CAAS;IAEnC,YAAY,GAAc,EAAE,SAAqB;QAC/C,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,2BAAa,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,IAAI,GAAG,2BAAa,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,IAAI,WAAW,CAAC,CAAC;QACnE,IAAI,CAAC,OAAO,GAAG;YACb,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;YAC5E,cAAc,EAAE,kBAAkB;SACnC,CAAC;QACF,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,GAAG,CAAC,UAAU,IAAI,MAAM,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,KAAa,EAAE,KAAa;QAC5C,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CACpC,mBAAmB,EACnB,yBAAyB,KAAK,EAAE,EAChC;YACE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,MAAM,EAAE;oBACN,OAAO,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,EAAE;oBACjC,SAAS,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE;oBACnC,OAAO,EAAE,GAAG,KAAK,MAAM,KAAK,EAAE;oBAC9B,MAAM,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;iBAC/B;aACF,CAAC;SACH,CACF,CAAC;QACF,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,WAAW,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;IAC5E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,QAAgB;QACnC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAClC,qBAAqB,QAAQ,gBAAgB,EAC7C,aAAa,QAAQ,EAAE,EACvB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,OAAO,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;IAChF,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,GAAG,GAAG,cAAc,IAAI,CAAC,UAAU,mBAAmB,KAAK,8BAA8B,CAAC;QAChG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,CACnC,0BAA0B,kBAAkB,CAAC,GAAG,CAAC,4CAA4C,EAC7F,mCAAmC,KAAK,EAAE,EAC1C,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,OAAO,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3C,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAC;YAC1C,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,MAAM,EAAE,WAAW,CAAC;YAC3C,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,WAAW,KAAK,CAAC,GAAG,EAAE;SAC3C,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,QAAgB;QAC/B,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC3D,MAAM,IAAI,CAAC,OAAO,CAAC,qBAAqB,QAAQ,cAAc,EAAE,mBAAmB,QAAQ,EAAE,EAAE;YAC7F,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,2EAA2E;IACnE,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QAC/C,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAC5C,qBAAqB,QAAQ,cAAc,EAC3C,6BAA6B,QAAQ,EAAE,EACvC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAC1B,CAAC;QACF,MAAM,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,GAAG,KAAK,MAAM,CAAC,CAAC;QACnF,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CAAC,qDAAqD,QAAQ,GAAG,CAAC,CAAC;QACpF,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,IAAI,GAAG,KAA8C,CAAC;IAC5D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5C,OAAO,IAAI,CAAC,OAAO;SAChB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;SACjC,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;AACZ,CAAC;AAEY,QAAA,YAAY,GAAgB;IACvC,EAAE,EAAE,MAAM;IACV,KAAK,EAAE,YAAY;IACnB,MAAM,EAAE;QACN,QAAQ,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,CAAC;QAClD,sEAAsE;QACtE,oDAAoD;QACpD,QAAQ,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;KACrC;IACD,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE;IAC/E,MAAM,EAAE,CAAC,GAAG,EAAE,SAAS,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC;CAC3D,CAAC;AAEF,kBAAe,oBAAY,CAAC"}

package/dist/scripts/bundle_pack.js

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BundlePackCommand = void 0;
+const BundlePackCommand_1 = require("./cli/commands/pack/BundlePackCommand");
+Object.defineProperty(exports, "BundlePackCommand", { enumerable: true, get: function () { return BundlePackCommand_1.BundlePackCommand; } });
+if (require.main === module) {
+    new BundlePackCommand_1.BundlePackCommand(process.argv.slice(2)).execute();
+}
+//# sourceMappingURL=bundle_pack.js.map

package/dist/scripts/bundle_pack.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundle_pack.js","sourceRoot":"","sources":["../../scripts/bundle_pack.ts"],"names":[],"mappings":";;;;AACA,6EAA0E;AAEjE,kGAFA,qCAAiB,OAEA;AAE1B,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,qCAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;AACzD,CAAC"}

package/dist/scripts/change/archive.js

@@ -0,0 +1,68 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.planArchive = planArchive;
+exports.executeArchive = executeArchive;
+exports.syncTraceability = syncTraceability;
+exports.traceRow = traceRow;
+const path = __importStar(require("node:path"));
+const DiskProjectRepository_1 = require("../../packages/core/src/infrastructure/DiskProjectRepository");
+const ArchiveChangeUseCase_1 = require("../../packages/core/src/application/ArchiveChangeUseCase");
+const TraceabilityMatrix_1 = require("../../packages/core/src/domain/TraceabilityMatrix");
+function planArchive(projectDir, changeId, opts) {
+    const repo = new DiskProjectRepository_1.DiskProjectRepository(projectDir);
+    const useCase = new ArchiveChangeUseCase_1.ArchiveChangeUseCase(repo);
+    const plan = useCase.execute(changeId, opts);
+    plan.projectDir = projectDir;
+    return plan;
+}
+function executeArchive(plan) {
+    const repo = new DiskProjectRepository_1.DiskProjectRepository(plan.projectDir || ".");
+    repo.executePlan(plan);
+    const archivedAs = plan.move ? path.basename(plan.move.to) : undefined;
+    return {
+        archivedAs,
+        specsUpdated: plan.totals.specsWritten > 0 || plan.totals.specsRetired > 0,
+        totals: plan.totals,
+        warnings: plan.warnings,
+    };
+}
+function syncTraceability(existing, applied) {
+    return TraceabilityMatrix_1.TraceabilityMatrix.syncTraceability(existing, applied);
+}
+function traceRow(req) {
+    return TraceabilityMatrix_1.TraceabilityMatrix.traceRow(req);
+}
+//# sourceMappingURL=archive.js.map

package/dist/scripts/change/archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive.js","sourceRoot":"","sources":["../../../scripts/change/archive.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA,kCAMC;AAED,wCAUC;AAED,4CAKC;AAED,4BAEC;AAlCD,gDAAkC;AAClC,wGAAqG;AACrG,mGAAgG;AAChG,0FAAuF;AAEvF,SAAgB,WAAW,CAAC,UAAkB,EAAE,QAAgB,EAAE,IAAU;IAC1E,MAAM,IAAI,GAAG,IAAI,6CAAqB,CAAC,UAAU,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,IAAI,2CAAoB,CAAC,IAAI,CAAC,CAAC;IAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC7B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,cAAc,CAAC,IAAS;IACtC,MAAM,IAAI,GAAG,IAAI,6CAAqB,CAAC,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IACvB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,OAAO;QACL,UAAU;QACV,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,GAAG,CAAC;QAC1E,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAC9B,QAAuB,EACvB,OAA+C;IAE/C,OAAO,uCAAkB,CAAC,gBAAgB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAChE,CAAC;AAED,SAAgB,QAAQ,CAAC,GAAQ;IAC/B,OAAO,uCAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC1C,CAAC"}