@rsaglobaltech/specgate 0.8.1

package/dist/packages/core/src/domain/GherkinTags.js

@@ -0,0 +1,119 @@
+"use strict";
+/**
+ * Linking the matrix to the file, in the way Cucumber already understands (F4).
+ *
+ * ## The gap
+ *
+ * A matrix row says `SCN-001` and names a feature file, and **nothing checks
+ * that the scenario is in it**. Measured: rename the scenario and both
+ * `validate --strict-tdd` and `validate --strict-scenarios` still pass. The
+ * help text has been asking for a Scenario ID "that matches a scenario in its
+ * feature file" without ever comparing the two.
+ *
+ * Cucumber has an idiomatic way to express that link, and it is tags:
+ *
+ * ```gherkin
+ * @REQ-001 @SCN-001
+ * Scenario: Evaluation respects the rollout percentage
+ * ```
+ *
+ * A tag survives renaming the scenario, which is what makes the harness gate
+ * robust to the one thing an agent does that turns the gate green and empty
+ * (§2.2): filtering by `--tags "@REQ-001"` cannot be defeated by rewording a
+ * title.
+ *
+ * ## Idempotent on purpose
+ *
+ * `expand` runs more than once against the same project, and `change archive`
+ * rewrites features in place. Adding a tag has to be safe to repeat: a tag
+ * already present is left alone rather than duplicated, and existing tags a
+ * person wrote are preserved.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCsdaTag = isCsdaTag;
+exports.parseTagLine = parseTagLine;
+exports.tagScenario = tagScenario;
+exports.csdaTagsByScenario = csdaTagsByScenario;
+exports.csdaTagsIn = csdaTagsIn;
+/** `@REQ-001`, `@SCN-014a` — ours. Anything else on the line belongs to the project. */
+const CSDA_TAG = /^@(REQ|SCN)-[A-Za-z0-9.]+$/;
+/** A scenario heading in any dialect, captured with its indentation. */
+const SCENARIO_LINE = /^(\s*)([^\s:][^:]*):\s*(.*)$/;
+function isCsdaTag(tag) {
+    return CSDA_TAG.test(tag.trim());
+}
+/** The tags on a line, or `null` when the line is not a tag line. */
+function parseTagLine(line) {
+    const trimmed = line.trim();
+    if (!trimmed.startsWith("@"))
+        return null;
+    const tags = trimmed.split(/\s+/).filter(Boolean);
+    return tags.every((t) => t.startsWith("@")) ? tags : null;
+}
+/**
+ * Add `tags` above the scenario named `scenarioName`.
+ *
+ * Returns the source unchanged when the scenario is not there — a caller that
+ * wants that reported should compare, because silently doing nothing is how a
+ * tagging step becomes a no-op nobody notices.
+ */
+function tagScenario(source, scenarioName, tags) {
+    const wanted = tags.map((t) => t.trim()).filter(Boolean);
+    if (wanted.length === 0 || !scenarioName)
+        return source;
+    const lines = source.replace(/\r\n/g, "\n").split("\n");
+    const target = scenarioName.trim();
+    for (let i = 0; i < lines.length; i += 1) {
+        const match = SCENARIO_LINE.exec(lines[i]);
+        if (!match || match[3].trim() !== target)
+            continue;
+        // Only a heading that introduces a scenario; `Feature:` and `Background:`
+        // take tags in Gherkin too, but this is asked for one scenario by name.
+        if (!/^(Scenario|Scenario Outline|Example|Escenario|Esquema del escenario|Cenário|Esquema do Cenário)$/i.test(match[2].trim())) {
+            continue;
+        }
+        const indent = match[1];
+        const existing = i > 0 ? parseTagLine(lines[i - 1]) : null;
+        const already = new Set(existing || []);
+        const missing = wanted.filter((t) => !already.has(t));
+        if (missing.length === 0)
+            return lines.join("\n");
+        if (existing) {
+            lines[i - 1] = `${indent}${[...existing, ...missing].join(" ")}`;
+        }
+        else {
+            lines.splice(i, 0, `${indent}${missing.join(" ")}`);
+        }
+        return lines.join("\n");
+    }
+    return lines.join("\n");
+}
+/** The csda tags a scenario carries, by scenario name. */
+function csdaTagsByScenario(source) {
+    const lines = source.replace(/\r\n/g, "\n").split("\n");
+    const found = {};
+    for (let i = 0; i < lines.length; i += 1) {
+        const match = SCENARIO_LINE.exec(lines[i]);
+        if (!match)
+            continue;
+        const tags = i > 0 ? parseTagLine(lines[i - 1]) : null;
+        if (!tags)
+            continue;
+        const ours = tags.filter(isCsdaTag);
+        if (ours.length > 0)
+            found[match[3].trim()] = ours;
+    }
+    return found;
+}
+/** Every csda tag in a file, whatever it is attached to. */
+function csdaTagsIn(source) {
+    const found = new Set();
+    for (const line of source.replace(/\r\n/g, "\n").split("\n")) {
+        for (const tag of parseTagLine(line) || []) {
+            if (isCsdaTag(tag))
+                found.add(tag);
+        }
+    }
+    return [...found].sort();
+}
+//# sourceMappingURL=GherkinTags.js.map

package/dist/packages/core/src/domain/GherkinTags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GherkinTags.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/GherkinTags.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;;AAQH,8BAEC;AAGD,oCAKC;AASD,kCAmCC;AAGD,gDAaC;AAGD,gCAQC;AAvFD,wFAAwF;AACxF,MAAM,QAAQ,GAAG,4BAA4B,CAAC;AAE9C,wEAAwE;AACxE,MAAM,aAAa,GAAG,8BAA8B,CAAC;AAErD,SAAgB,SAAS,CAAC,GAAW;IACnC,OAAO,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,qEAAqE;AACrE,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAClD,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,WAAW,CAAC,MAAc,EAAE,YAAoB,EAAE,IAAuB;IACvF,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACzD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,YAAY;QAAE,OAAO,MAAM,CAAC;IAExD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;IAEnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,MAAM;YAAE,SAAS;QACnD,0EAA0E;QAC1E,wEAAwE;QACxE,IACE,CAAC,mGAAmG,CAAC,IAAI,CACvG,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAChB,EACD,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACxB,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;QACxC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAElD,IAAI,QAAQ,EAAE,CAAC;YACb,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACnE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,0DAA0D;AAC1D,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxD,MAAM,KAAK,GAA6B,EAAE,CAAC;IAE3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACvD,IAAI,CAAC,IAAI;YAAE,SAAS;QACpB,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,IAAI,CAAC;IACrD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4DAA4D;AAC5D,SAAgB,UAAU,CAAC,MAAc;IACvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,KAAK,MAAM,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,SAAS,CAAC,GAAG,CAAC;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/dist/packages/core/src/domain/GitSafety.js

@@ -0,0 +1,77 @@
+"use strict";
+/**
+ * Values this tool hands to `git`, checked before they get there.
+ *
+ * ## Why this exists
+ *
+ * `specgate expand --pack-repo <url>` and `specgate specops contribute` pass a
+ * repository the caller named straight to `git clone`. Two things make that
+ * more than a style concern, and CodeQL flags both as
+ * `js/second-order-command-line-injection`:
+ *
+ * - **A value beginning with `-` is read as an option.** `--upload-pack=<cmd>`
+ *   makes git run `<cmd>` on what it thinks is the far end. Passing the value
+ *   as its own argv element does not help: git parses argv, not the shell.
+ * - **`ext::` is a git transport that executes a command by design.**
+ *   `ext::sh -c '…'` is not an exploit of git; it is git doing what it says.
+ *
+ * The defence is two-sided and both halves are needed. The `--` separator tells
+ * git where options stop, and that is what these functions expect their callers
+ * to add; this module refuses the values a separator cannot save — `ext::`
+ * still executes after a `--`, because by then it is a URL and the URL is the
+ * payload.
+ *
+ * ## What is deliberately still allowed
+ *
+ * Local paths, `file://`, `https://`, `ssh://`, `git://`, `git@host:path` and
+ * `.bundle` files. A pack repository is often a directory or a bundle carried
+ * into an air-gapped network, and refusing those would be refusing the feature.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnsafeGitValueError = void 0;
+exports.assertSafeGitRepo = assertSafeGitRepo;
+exports.assertSafeGitRef = assertSafeGitRef;
+/** Transports that run a command as their normal operation. */
+const EXECUTING_TRANSPORT = /^\s*ext::/i;
+class UnsafeGitValueError extends Error {
+}
+exports.UnsafeGitValueError = UnsafeGitValueError;
+/**
+ * A repository the caller named, checked before `git` sees it.
+ *
+ * Returns the value so it can be used inline. Throws `UnsafeGitValueError`,
+ * which callers turn into their own message.
+ */
+function assertSafeGitRepo(value, what = "repository") {
+    const repo = String(value ?? "").trim();
+    if (!repo) {
+        throw new UnsafeGitValueError(`No ${what} given.`);
+    }
+    if (repo.startsWith("-")) {
+        throw new UnsafeGitValueError(`The ${what} "${repo}" starts with "-", so git would read it as an option ` +
+            `rather than a location. Options like --upload-pack run a command.`);
+    }
+    if (EXECUTING_TRANSPORT.test(repo)) {
+        throw new UnsafeGitValueError(`The ${what} "${repo}" uses git's ext:: transport, which runs a command by ` +
+            `design. Use a path, a bundle, or an http(s)/ssh URL.`);
+    }
+    return repo;
+}
+/**
+ * A ref — branch, tag or commit — the caller named.
+ *
+ * Narrower than a repository: a ref has no transport, so the only question is
+ * whether git would read it as an option.
+ */
+function assertSafeGitRef(value, what = "version") {
+    const ref = String(value ?? "").trim();
+    if (!ref) {
+        throw new UnsafeGitValueError(`No ${what} given.`);
+    }
+    if (ref.startsWith("-")) {
+        throw new UnsafeGitValueError(`The ${what} "${ref}" starts with "-", so git would read it as an option ` +
+            `rather than a ref.`);
+    }
+    return ref;
+}
+//# sourceMappingURL=GitSafety.js.map

package/dist/packages/core/src/domain/GitSafety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"GitSafety.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/GitSafety.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;;;AAaH,8CAkBC;AAQD,4CAYC;AAjDD,+DAA+D;AAC/D,MAAM,mBAAmB,GAAG,YAAY,CAAC;AAEzC,MAAa,mBAAoB,SAAQ,KAAK;CAAG;AAAjD,kDAAiD;AAEjD;;;;;GAKG;AACH,SAAgB,iBAAiB,CAAC,KAAc,EAAE,IAAI,GAAG,YAAY;IACnE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,IAAI,mBAAmB,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,mBAAmB,CAC3B,OAAO,IAAI,KAAK,IAAI,uDAAuD;YACzE,mEAAmE,CACtE,CAAC;IACJ,CAAC;IACD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,mBAAmB,CAC3B,OAAO,IAAI,KAAK,IAAI,wDAAwD;YAC1E,sDAAsD,CACzD,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAAC,KAAc,EAAE,IAAI,GAAG,SAAS;IAC/D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,mBAAmB,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,mBAAmB,CAC3B,OAAO,IAAI,KAAK,GAAG,uDAAuD;YACxE,oBAAoB,CACvB,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/packages/core/src/domain/HarnessConfig.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HarnessConfig = void 0;
+class HarnessConfig {
+    settings;
+    static FILENAME = "harness.config.yaml";
+    static DEFAULT_SETTINGS = {
+        agent: "",
+        testCmd: "",
+        maxAttempts: 3,
+        concurrency: 1,
+        promptPrefix: "",
+        push: false,
+        remote: "origin",
+        prCmd: "",
+        attemptProfiles: [],
+        reviewProfile: "",
+        profileAgents: {},
+        protectedPaths: [],
+        allowPaths: [],
+        messageReport: "",
+        costPerRunHint: {},
+        profileRules: [],
+    };
+    constructor(settings) {
+        this.settings = settings;
+    }
+    static merge(fileConfig, cliArgs) {
+        const file = fileConfig || {};
+        return new HarnessConfig({
+            agent: cliArgs.agent || file.agent || HarnessConfig.DEFAULT_SETTINGS.agent,
+            testCmd: cliArgs.testCmd || file.testCmd || HarnessConfig.DEFAULT_SETTINGS.testCmd,
+            maxAttempts: cliArgs.maxAttempts || file.maxAttempts || HarnessConfig.DEFAULT_SETTINGS.maxAttempts,
+            concurrency: cliArgs.concurrency || file.concurrency || HarnessConfig.DEFAULT_SETTINGS.concurrency,
+            promptPrefix: cliArgs.promptPrefix || file.promptPrefix || HarnessConfig.DEFAULT_SETTINGS.promptPrefix,
+            push: cliArgs.push !== undefined
+                ? cliArgs.push
+                : file.push !== undefined
+                    ? file.push
+                    : HarnessConfig.DEFAULT_SETTINGS.push,
+            remote: cliArgs.remote || file.remote || HarnessConfig.DEFAULT_SETTINGS.remote,
+            prCmd: cliArgs.prCmd || file.prCmd || HarnessConfig.DEFAULT_SETTINGS.prCmd,
+            attemptProfiles: file.attemptProfiles || HarnessConfig.DEFAULT_SETTINGS.attemptProfiles,
+            reviewProfile: file.reviewProfile || HarnessConfig.DEFAULT_SETTINGS.reviewProfile,
+            profileAgents: file.profileAgents || HarnessConfig.DEFAULT_SETTINGS.profileAgents,
+            // Write scope is a repository decision, like the role ladder: it comes
+            // from the file only. A flag that relaxes what the agent may edit is a
+            // flag somebody eventually types to make a red run go green.
+            protectedPaths: file.protectedPaths || HarnessConfig.DEFAULT_SETTINGS.protectedPaths,
+            allowPaths: file.allowPaths || HarnessConfig.DEFAULT_SETTINGS.allowPaths,
+            messageReport: file.messageReport || HarnessConfig.DEFAULT_SETTINGS.messageReport,
+            costPerRunHint: file.costPerRunHint || HarnessConfig.DEFAULT_SETTINGS.costPerRunHint,
+            profileRules: file.profileRules || HarnessConfig.DEFAULT_SETTINGS.profileRules,
+        });
+    }
+}
+exports.HarnessConfig = HarnessConfig;
+//# sourceMappingURL=HarnessConfig.js.map

package/dist/packages/core/src/domain/HarnessConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HarnessConfig.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/HarnessConfig.ts"],"names":[],"mappings":";;;AA2CA,MAAa,aAAa;IAqBW;IApB5B,MAAM,CAAU,QAAQ,GAAG,qBAAqB,CAAC;IACjD,MAAM,CAAU,gBAAgB,GAAoB;QACzD,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,CAAC;QACd,WAAW,EAAE,CAAC;QACd,YAAY,EAAE,EAAE;QAChB,IAAI,EAAE,KAAK;QACX,MAAM,EAAE,QAAQ;QAChB,KAAK,EAAE,EAAE;QACT,eAAe,EAAE,EAAE;QACnB,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,EAAE;QAClB,UAAU,EAAE,EAAE;QACd,aAAa,EAAE,EAAE;QACjB,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE,EAAE;KACjB,CAAC;IAEF,YAAmC,QAAyB;QAAzB,aAAQ,GAAR,QAAQ,CAAiB;IAAG,CAAC;IAEzD,MAAM,CAAC,KAAK,CACjB,UAA2C,EAC3C,OAAiC;QAEjC,MAAM,IAAI,GAAG,UAAU,IAAI,EAAE,CAAC;QAC9B,OAAO,IAAI,aAAa,CAAC;YACvB,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,gBAAgB,CAAC,KAAK;YAC1E,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,IAAI,aAAa,CAAC,gBAAgB,CAAC,OAAO;YAClF,WAAW,EACT,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,aAAa,CAAC,gBAAgB,CAAC,WAAW;YACvF,WAAW,EACT,OAAO,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,IAAI,aAAa,CAAC,gBAAgB,CAAC,WAAW;YACvF,YAAY,EACV,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,IAAI,aAAa,CAAC,gBAAgB,CAAC,YAAY;YAC1F,IAAI,EACF,OAAO,CAAC,IAAI,KAAK,SAAS;gBACxB,CAAC,CAAC,OAAO,CAAC,IAAI;gBACd,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;oBACvB,CAAC,CAAC,IAAI,CAAC,IAAI;oBACX,CAAC,CAAC,aAAa,CAAC,gBAAgB,CAAC,IAAI;YAC3C,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,gBAAgB,CAAC,MAAM;YAC9E,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,IAAI,aAAa,CAAC,gBAAgB,CAAC,KAAK;YAC1E,eAAe,EAAE,IAAI,CAAC,eAAe,IAAI,aAAa,CAAC,gBAAgB,CAAC,eAAe;YACvF,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,gBAAgB,CAAC,aAAa;YACjF,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,gBAAgB,CAAC,aAAa;YACjF,uEAAuE;YACvE,uEAAuE;YACvE,6DAA6D;YAC7D,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,aAAa,CAAC,gBAAgB,CAAC,cAAc;YACpF,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,aAAa,CAAC,gBAAgB,CAAC,UAAU;YACxE,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,gBAAgB,CAAC,aAAa;YACjF,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,aAAa,CAAC,gBAAgB,CAAC,cAAc;YACpF,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,aAAa,CAAC,gBAAgB,CAAC,YAAY;SAC/E,CAAC,CAAC;IACL,CAAC;;AAzDH,sCA0DC"}

package/dist/packages/core/src/domain/HarnessReport.js

@@ -0,0 +1,162 @@
+"use strict";
+/**
+ * What the harness has actually done, aggregated (C2).
+ *
+ * ## What was already there, and what C2 adds
+ *
+ * The proposal opens with "every `harness run` forgets itself". That stopped
+ * being true when `E1-04` added the run ledger and the two cost numbers. What
+ * was still missing is the part the InfoQ analysis calls *our* metric — the
+ * effectiveness of the validation mechanism:
+ *
+ * - **where the gate rejects.** The ledger records the stage each attempt ended
+ *   at; nothing added them up. It matters more now than when C2 was written,
+ *   because `A1` and `A2` introduced two new stages — an attempt rejected for
+ *   editing the spec is a different problem from one that failed its tests.
+ * - **which requirements burn every attempt.** Those are the ones costing
+ *   `max_attempts` × the timeout and delivering nothing.
+ * - **a series over time**, so a rate can be seen moving rather than guessed at.
+ * - **real failures versus false ones.** A gate that rejects good work is a
+ *   different failure from a gate catching a genuine defect, and no amount of
+ *   recorded data distinguishes them: only a person can say which a given
+ *   rejection was. Hence the mark, and hence the ratio being *un*computable
+ *   until someone makes one.
+ *
+ * ## Why the aggregation lives in the domain
+ *
+ * It is arithmetic over records — no files, no terminal, no colours. Keeping it
+ * here is what lets every case below be tested without writing a ledger to
+ * disk, and it is the rule `tests/unit/architecture.test.ts` enforces.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.STAGE_LABELS = void 0;
+exports.summariseRuns = summariseRuns;
+exports.parseFalseFailures = parseFalseFailures;
+exports.sparkline = sparkline;
+const RunBudget_1 = require("./RunBudget");
+/** How an attempt ending is worth describing to a person. */
+exports.STAGE_LABELS = Object.freeze({
+    pass: "passed",
+    "agent-timeout": "agent timed out",
+    "agent-error": "agent exited non-zero",
+    "write-scope": "agent edited protected files",
+    gate: "gate rejected the work",
+    artifacts: "diff missed the declared artifacts",
+    done: "`specgate done` failed",
+    commit: "commit failed",
+});
+function summariseRuns(runs, falseFailures = [], costPerRunHint = {}) {
+    const rows = runs.flatMap((r) => r.results ?? []);
+    const passed = rows.filter((r) => r.result === "pass");
+    const failed = rows.filter((r) => r.result === "fail");
+    const totalMs = rows.reduce((n, r) => n + (r.durationMs ?? 0), 0);
+    const firstAttemptPasses = passed.filter((r) => r.attempts === 1).length;
+    const worst = [...rows]
+        .filter((r) => (r.durationMs ?? 0) > 0)
+        .sort((a, b) => (b.durationMs ?? 0) - (a.durationMs ?? 0))
+        .slice(0, 5)
+        .map((r) => ({
+        requirement: r.requirement,
+        durationMs: r.durationMs ?? 0,
+        attempts: r.attempts,
+        result: r.result,
+    }));
+    // Where attempts ended. Read from attemptLog rather than the row's result,
+    // because a requirement that passed on attempt 3 still failed twice, and
+    // those two failures are the interesting ones.
+    const stageCounts = new Map();
+    for (const row of rows) {
+        for (const attempt of row.attemptLog ?? []) {
+            if (!attempt || !attempt.endedAt)
+                continue;
+            stageCounts.set(attempt.endedAt, (stageCounts.get(attempt.endedAt) ?? 0) + 1);
+        }
+    }
+    const stages = [...stageCounts.entries()]
+        .map(([stage, count]) => ({ stage, count }))
+        .sort((a, b) => b.count - a.count || a.stage.localeCompare(b.stage));
+    // Requirements that spent every attempt the run allowed and delivered
+    // nothing. `maxAttempts` is per run, so it is read from the run it belongs to.
+    const exhausted = [];
+    for (const run of runs) {
+        const ceiling = run.maxAttempts ?? 0;
+        for (const row of run.results ?? []) {
+            if (row.result === "fail" && ceiling > 0 && row.attempts >= ceiling) {
+                exhausted.push({
+                    requirement: row.requirement,
+                    attempts: row.attempts,
+                    durationMs: row.durationMs ?? 0,
+                });
+            }
+        }
+    }
+    const attemptProfiles = rows.flatMap((row) => (row.attemptLog ?? []).map((a) => a?.profiles ?? []));
+    const timeline = [...runs]
+        .sort((a, b) => String(a.startedAt).localeCompare(String(b.startedAt)))
+        .map((run) => ({
+        startedAt: run.startedAt,
+        passed: (run.results ?? []).filter((r) => r.result === "pass").length,
+        failed: (run.results ?? []).filter((r) => r.result === "fail").length,
+    }));
+    // Only marks naming a requirement that actually failed count. A mark for
+    // something that passed is a typo, and letting it improve the number would
+    // make the metric worse than not having it.
+    const failedIds = new Set(failed.map((r) => r.requirement));
+    const marked = new Set(falseFailures.filter((m) => failedIds.has(m.requirement)).map((m) => m.requirement));
+    const falseCount = failed.filter((r) => marked.has(r.requirement)).length;
+    return {
+        runs: runs.length,
+        requirementsAttempted: rows.length,
+        passed: passed.length,
+        failed: failed.length,
+        blocked: rows.filter((r) => r.result === "blocked").length,
+        firstAttemptPasses,
+        firstAttemptRate: passed.length > 0 ? firstAttemptPasses / passed.length : null,
+        totalMs,
+        msPerDelivered: passed.length > 0 ? Math.round(totalMs / passed.length) : null,
+        worst,
+        stages,
+        exhausted,
+        timeline,
+        estimatedCost: (0, RunBudget_1.estimateRunCost)(attemptProfiles, costPerRunHint),
+        falseFailures: falseCount,
+        realFailureRate: failed.length > 0 && marked.size > 0 ? (failed.length - falseCount) / failed.length : null,
+    };
+}
+/** The ledger of human marks, one JSON object per line. */
+function parseFalseFailures(jsonl) {
+    const marks = [];
+    for (const line of (jsonl || "").split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            const parsed = JSON.parse(line);
+            if (parsed && typeof parsed.requirement === "string") {
+                marks.push({
+                    requirement: parsed.requirement,
+                    reason: String(parsed.reason ?? ""),
+                    markedAt: String(parsed.markedAt ?? ""),
+                });
+            }
+        }
+        catch {
+            // One malformed line must not hide the rest — the file is append-only and
+            // a half-written line is exactly what a killed process leaves.
+        }
+    }
+    return marks;
+}
+/** A run-by-run bar, oldest on the left. Empty when there is nothing to show. */
+function sparkline(points) {
+    if (points.length === 0)
+        return "";
+    const blocks = "▁▂▃▄▅▆▇█";
+    const totals = points.map((p) => p.passed + p.failed);
+    const max = Math.max(...totals, 1);
+    return totals
+        .map((n) => n === 0
+        ? blocks[0]
+        : blocks[Math.min(blocks.length - 1, Math.ceil((n / max) * (blocks.length - 1)))])
+        .join("");
+}
+//# sourceMappingURL=HarnessReport.js.map

package/dist/packages/core/src/domain/HarnessReport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HarnessReport.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/HarnessReport.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;AAkGH,sCA4FC;AAGD,gDAmBC;AAGD,8BAYC;AAjOD,2CAA8C;AAoF9C,6DAA6D;AAChD,QAAA,YAAY,GAAqC,MAAM,CAAC,MAAM,CAAC;IAC1E,IAAI,EAAE,QAAQ;IACd,eAAe,EAAE,iBAAiB;IAClC,aAAa,EAAE,uBAAuB;IACtC,aAAa,EAAE,8BAA8B;IAC7C,IAAI,EAAE,wBAAwB;IAC9B,SAAS,EAAE,oCAAoC;IAC/C,IAAI,EAAE,wBAAwB;IAC9B,MAAM,EAAE,eAAe;CACxB,CAAC,CAAC;AAEH,SAAgB,aAAa,CAC3B,IAAwB,EACxB,gBAA6C,EAAE,EAC/C,iBAAmD,EAAE;IAErD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;SACtC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC;SACzD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,WAAW,EAAE,CAAC,CAAC,WAAW;QAC1B,UAAU,EAAE,CAAC,CAAC,UAAU,IAAI,CAAC;QAC7B,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,MAAM,EAAE,CAAC,CAAC,MAAM;KACjB,CAAC,CAAC,CAAC;IAEN,2EAA2E;IAC3E,yEAAyE;IACzE,+CAA+C;IAC/C,MAAM,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO;gBAAE,SAAS;YAC3C,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SAC3C,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAEvE,sEAAsE;IACtE,+EAA+E;IAC/E,MAAM,SAAS,GAAsC,EAAE,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;QACrC,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;YACpC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,GAAG,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC;gBACpE,SAAS,CAAC,IAAI,CAAC;oBACb,WAAW,EAAE,GAAG,CAAC,WAAW;oBAC5B,QAAQ,EAAE,GAAG,CAAC,QAAQ;oBACtB,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,CAAC;iBAChC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3C,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,IAAI,EAAE,CAAC,CACrD,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC;SACvB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;SACtE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACb,SAAS,EAAE,GAAG,CAAC,SAAS;QACxB,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;QACrE,MAAM,EAAE,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,MAAM;KACtE,CAAC,CAAC,CAAC;IAEN,yEAAyE;IACzE,2EAA2E;IAC3E,4CAA4C;IAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,IAAI,GAAG,CACpB,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CACpF,CAAC;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;IAE1E,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM;QACjB,qBAAqB,EAAE,IAAI,CAAC,MAAM;QAClC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,MAAM;QAC1D,kBAAkB;QAClB,gBAAgB,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;QAC/E,OAAO;QACP,cAAc,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI;QAC9E,KAAK;QACL,MAAM;QACN,SAAS;QACT,QAAQ;QACR,aAAa,EAAE,IAAA,2BAAe,EAAC,eAAe,EAAE,cAAc,CAAC;QAC/D,aAAa,EAAE,UAAU;QACzB,eAAe,EACb,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;KAC7F,CAAC;AACJ,CAAC;AAED,2DAA2D;AAC3D,SAAgB,kBAAkB,CAAC,KAAa;IAC9C,MAAM,KAAK,GAAuB,EAAE,CAAC;IACrC,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAChC,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACrD,KAAK,CAAC,IAAI,CAAC;oBACT,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC;oBACnC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,0EAA0E;YAC1E,+DAA+D;QACjE,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iFAAiF;AACjF,SAAgB,SAAS,CAAC,MAAgC;IACxD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,UAAU,CAAC;IAC1B,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,OAAO,MAAM;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACT,CAAC,KAAK,CAAC;QACL,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QACX,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CACpF;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/packages/core/src/domain/HarnessRun.js

@@ -0,0 +1,154 @@
+"use strict";
+/**
+ * The decisions `specgate harness run` makes before it spawns anything.
+ *
+ * Substituting a command template, reading a hint out of a gate's output, and
+ * working out which requirements can run at the same time are all judgements
+ * over data. Spawning the agent, running the gate, cutting branches and
+ * writing the ledger are not, and stay in the command.
+ *
+ * Keeping them apart is what makes the scheduler testable: a dependency cycle
+ * or a mis-substituted `{feature_file}` is a bug you want to find without a
+ * git repository and an agent.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.substituteAgentCommand = substituteAgentCommand;
+exports.featureFilePath = featureFilePath;
+exports.substituteGateCommand = substituteGateCommand;
+exports.filterHint = filterHint;
+exports.scheduleLevels = scheduleLevels;
+exports.planAttempt = planAttempt;
+const RequirementGraph_1 = require("./RequirementGraph");
+/**
+ * Substitute the {prompt_file} placeholder in an agent command template.
+ * Throws when the template is missing the placeholder — without it the agent
+ * would never receive the prompt.
+ */
+function substituteAgentCommand(template, promptFile) {
+    if (!template.includes("{prompt_file}")) {
+        throw new Error("The agent command must contain the {prompt_file} placeholder, e.g. " +
+            '--agent "claude -p < {prompt_file}"');
+    }
+    return template.split("{prompt_file}").join(promptFile);
+}
+/** Run the gate (validate --strict-tdd, then the optional test command). */
+/**
+ * Fill the placeholders a gate command may use.
+ *
+ * Without this, `test_cmd` was a fixed string, so a project could not run the
+ * scenario belonging to the requirement under test — and the gate runs *before*
+ * `done`, so the requirement is still Draft and `validate --strict-tdd` does not
+ * demand its test either. The loop could therefore mark a requirement
+ * Implemented without ever executing its scenario, which is the one thing this
+ * whole tool exists to prevent.
+ *
+ * `{feature_file}` is the useful one in practice: most runners accept a path and
+ * will run exactly that feature's scenarios.
+ */
+/**
+ * The feature file a requirement points at, as a plain relative path.
+ *
+ * The matrix stores it as markdown, so `plan --format json` hands it over
+ * still wearing its back-ticks — `` `features/core/health.feature` `` — and it
+ * may carry a `#SCN-001` fragment. Three callers needed the bare path and two
+ * of them had grown their own copy of this normalisation; a third would have
+ * been the H14 shape again, several readers disagreeing about the same text.
+ * Worse, the failure is silent: an un-stripped path simply does not exist, so a
+ * check that reads it finds nothing wrong and says so.
+ *
+ * Returns `""` when the requirement declares no feature.
+ */
+function featureFilePath(req) {
+    return String(req.featureFile || req.feature_file || "")
+        .replace(/^`|`$/g, "")
+        .split("#")[0]
+        .trim();
+}
+function substituteGateCommand(template, req) {
+    const featureFile = featureFilePath(req);
+    return template
+        .split("{req}")
+        .join(req.requirement || "")
+        .split("{scenario}")
+        .join(req.scenarioId || req.scenario_id || "")
+        .split("{feature_file}")
+        .join(featureFile);
+}
+/**
+ * Warn when a gate that asked to be filtered plainly was not.
+ *
+ * REQ-002 cost two agent runs to explain: the requirement's scenario passed, the
+ * gate ran the whole suite anyway — a `paths` key in the base branch's cucumber
+ * config silently overrode the CLI argument — and the failure was
+ * indistinguishable from the agent having written broken code.
+ *
+ * The harness cannot know how many tests *should* run. What it can notice is a
+ * command that substituted one feature file against output that talks about
+ * many, which is the shape of that mistake. A hint, not a verdict: a legitimate
+ * failure must not be second-guessed into passing.
+ */
+function filterHint(template, req, output) {
+    if (!String(template).includes("{feature_file}"))
+        return "";
+    const featureFile = substituteGateCommand("{feature_file}", req);
+    if (!featureFile)
+        return "";
+    // "16 scenarios", "42 tests", "7 examples" — the common shapes.
+    // `\b` before the digits: without it the engine restarts inside a long run of
+    // them, which is the polynomial case CodeQL reports. One separator, because
+    // `[ \t]+` before a word is another way to say the same scan twice.
+    const counted = /\b(\d+)[ \t](scenarios|tests|examples|specs)\b/i.exec(output);
+    if (!counted || Number(counted[1]) <= 1)
+        return "";
+    return (`The gate asked for one feature (${featureFile}) and the run reported ` +
+        `${counted[1]} ${counted[2].toLowerCase()}. The filter may not be applying — ` +
+        "a runner config that pins its own paths can override the argument. Check " +
+        "that config on the base branch, not only on main.");
+}
+/**
+ * Split the pending queue into levels, and say what each requirement waits for.
+ *
+ * `plan` already ordered the queue and told us what every requirement builds
+ * on (E1-01). What the harness needs on top of that is the *grouping*: a level
+ * is a set of requirements that do not depend on one another, so they are the
+ * ones that could run at the same time.
+ *
+ * Dependencies on requirements that are already DONE do not appear here —
+ * `plan` reports them under `dependsOn` but not `blockedBy`, because a
+ * finished dependency constrains nothing.
+ */
+function scheduleLevels(pending) {
+    const pendingIds = pending.map((r) => r.requirement);
+    const inQueue = new Set(pendingIds);
+    const dependsOn = {};
+    for (const req of pending) {
+        // Only dependencies that are themselves in this run constrain the order.
+        // A dependency outside the queue is either done or was filtered out by
+        // `--req`, and in both cases waiting for it here would deadlock the level.
+        dependsOn[req.requirement] = (req.dependsOn || req.depends_on || []).filter((d) => inQueue.has(d));
+    }
+    const graph = RequirementGraph_1.RequirementGraph.fromDependencies(pendingIds, dependsOn);
+    return { levels: graph.levels, cycles: graph.cycles, dependsOn, graph };
+}
+/**
+ * Which agents run, in order, for a given attempt.
+ *
+ * Attempt 1 is always a single implementing step: there is nothing to review
+ * yet. From attempt 2 the review profile, when configured, runs first and its
+ * findings feed the step that follows.
+ *
+ * With no configuration this returns exactly one non-advisory step with no
+ * profile for every attempt — today's behaviour, so an existing project sees
+ * no change until it asks for one.
+ */
+function planAttempt(attempt, opts = {}) {
+    const ladder = opts.attemptProfiles ?? [];
+    const profile = ladder.length > 0 ? ladder[Math.min(attempt, ladder.length) - 1] : null;
+    const steps = [];
+    if (attempt > 1 && opts.reviewProfile) {
+        steps.push({ profile: opts.reviewProfile, advisory: true });
+    }
+    steps.push({ profile: profile ?? null, advisory: false });
+    return steps;
+}
+//# sourceMappingURL=HarnessRun.js.map

package/dist/packages/core/src/domain/HarnessRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HarnessRun.js","sourceRoot":"","sources":["../../../../../packages/core/src/domain/HarnessRun.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;AASH,wDAQC;AA6BD,0CAKC;AAED,sDASC;AAsDD,gCAkBC;AAcD,wCAgBC;AA4CD,kCAUC;AAxND,yDAAsD;AAEtD;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,QAAQ,EAAE,UAAU;IACzD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,qEAAqE;YACnE,qCAAqC,CACxC,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAC1D,CAAC;AAED,4EAA4E;AAC5E;;;;;;;;;;;;GAYG;AACH;;;;;;;;;;;;GAYG;AACH,SAAgB,eAAe,CAAC,GAAG;IACjC,OAAO,MAAM,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC;SACrD,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACb,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAgB,qBAAqB,CAAC,QAAQ,EAAE,GAAG;IACjD,MAAM,WAAW,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACzC,OAAO,QAAQ;SACZ,KAAK,CAAC,OAAO,CAAC;SACd,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;SAC3B,KAAK,CAAC,YAAY,CAAC;SACnB,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC;SAC7C,KAAK,CAAC,gBAAgB,CAAC;SACvB,IAAI,CAAC,WAAW,CAAC,CAAC;AACvB,CAAC;AAyCD;;;;;;;;;;;;GAYG;AACH,SAAgB,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM;IAC9C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,CAAC,gBAAgB,CAAC;QAAE,OAAO,EAAE,CAAC;IAC5D,MAAM,WAAW,GAAG,qBAAqB,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;IACjE,IAAI,CAAC,WAAW;QAAE,OAAO,EAAE,CAAC;IAE5B,gEAAgE;IAChE,8EAA8E;IAC9E,4EAA4E;IAC5E,oEAAoE;IACpE,MAAM,OAAO,GAAG,iDAAiD,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC/E,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IAEnD,OAAO,CACL,mCAAmC,WAAW,yBAAyB;QACvE,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,qCAAqC;QAC9E,2EAA2E;QAC3E,mDAAmD,CACpD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,SAAgB,cAAc,CAAC,OAAO;IACpC,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IAEpC,MAAM,SAAS,GAAG,EAAE,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,yEAAyE;QACzE,uEAAuE;QACvE,2EAA2E;QAC3E,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAChF,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CACf,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,mCAAgB,CAAC,gBAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACvE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AAC1E,CAAC;AAiCD;;;;;;;;;;GAUG;AACH,SAAgB,WAAW,CAAC,OAAe,EAAE,OAA2B,EAAE;IACxE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,IAAI,EAAE,CAAC;IAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAExF,MAAM,KAAK,GAAkB,EAAE,CAAC;IAChC,IAAI,OAAO,GAAG,CAAC,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC"}