codeharness 0.22.1 → 0.23.0

package/dist/index.js

@@ -8,7 +8,6 @@ import {
   isCollectorRunning,
   isDockerAvailable,
   isSharedStackRunning,
-  isStackRunning,
   startCollectorOnly,
   startSharedStack,
   stopCollectorOnly,
@@ -1941,7 +1940,7 @@ async function scaffoldDocs(opts) {
 }
 
 // src/modules/infra/init-project.ts
-var HARNESS_VERSION = true ? "0.22.1" : "0.0.0-dev";
+var HARNESS_VERSION = true ? "0.23.0" : "0.0.0-dev";
 function failResult(opts, error) {
   return {
     status: "fail",
@@ -2347,45 +2346,6 @@ function updateSprintStatus(storyKey, newStatus, dir) {
 function escapeRegExp(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-function nextEpicNumber(statuses) {
-  let max = -1;
-  for (const key of Object.keys(statuses)) {
-    const match = key.match(/^epic-(\d+)$/);
-    if (match) {
-      const n = parseInt(match[1], 10);
-      if (n > max) max = n;
-    }
-  }
-  return max + 1;
-}
-function slugify(title) {
-  return title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 60);
-}
-function appendOnboardingEpicToSprint(stories, dir) {
-  const root = dir ?? process.cwd();
-  const filePath = join8(root, SPRINT_STATUS_PATH);
-  if (!existsSync10(filePath)) {
-    warn(`sprint-status.yaml not found at ${filePath}, cannot append onboarding epic`);
-    return { epicNumber: -1, storyKeys: [] };
-  }
-  const statuses = readSprintStatus(dir);
-  const epicNum = nextEpicNumber(statuses);
-  const storyKeys = [];
-  const lines = [""];
-  lines.push(`  epic-${epicNum}: backlog`);
-  for (let i = 0; i < stories.length; i++) {
-    const slug = slugify(stories[i].title);
-    const storyKey = `${epicNum}-${i + 1}-${slug}`;
-    storyKeys.push(storyKey);
-    lines.push(`  ${storyKey}: backlog`);
-  }
-  lines.push(`  epic-${epicNum}-retrospective: optional`);
-  lines.push("");
-  const content = readFileSync8(filePath, "utf-8");
-  const updated = content.trimEnd() + "\n" + lines.join("\n");
-  writeFileSync5(filePath, updated, "utf-8");
-  return { epicNumber: epicNum, storyKeys };
-}
 function storyKeyFromPath(filePath) {
   const base = filePath.split("/").pop() ?? filePath;
   return base.replace(/\.md$/, "");
@@ -2798,114 +2758,114 @@ function parseResultEvent(parsed) {
 import { render as inkRender } from "ink";
 
 // src/lib/ink-components.tsx
-import { Text, Box } from "ink";
+import { Text, Box, Static } from "ink";
 import { Spinner } from "@inkjs/ui";
 import { jsx, jsxs } from "react/jsx-runtime";
 function Header({ info: info2 }) {
   if (!info2) return null;
-  return /* @__PURE__ */ jsxs(Text, { children: [
-    "\u25C6 ",
-    info2.storyKey,
-    " \u2014 ",
-    info2.phase,
-    info2.elapsed ? ` | ${info2.elapsed}` : "",
-    " | Sprint: ",
-    info2.done,
-    "/",
-    info2.total
+  const pct = info2.total > 0 ? Math.round(info2.done / info2.total * 100) : 0;
+  return /* @__PURE__ */ jsxs(Box, { borderStyle: "round", borderColor: "cyan", paddingX: 1, children: [
+    /* @__PURE__ */ jsx(Text, { bold: true, color: "cyan", children: "\u25C6 " }),
+    /* @__PURE__ */ jsx(Text, { bold: true, children: info2.storyKey || "(waiting)" }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: " \u2014 " }),
+    /* @__PURE__ */ jsx(Text, { color: "yellow", children: info2.phase || "..." }),
+    info2.elapsed && /* @__PURE__ */ jsx(Text, { dimColor: true, children: ` \u2502 ${info2.elapsed}` }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: " \u2502 Sprint: " }),
+    /* @__PURE__ */ jsx(Text, { bold: true, color: "green", children: info2.done }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: "/" }),
+    /* @__PURE__ */ jsx(Text, { children: String(info2.total) }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: ` (${pct}%)` })
+  ] });
+}
+function shortKey(key) {
+  const m = key.match(/^(\d+-\d+)/);
+  return m ? m[1] : key;
+}
+function StoryBreakdown({ stories }) {
+  if (stories.length === 0) return null;
+  const groups = {};
+  for (const s of stories) {
+    if (!groups[s.status]) groups[s.status] = [];
+    groups[s.status].push(s.key);
+  }
+  return /* @__PURE__ */ jsxs(Box, { paddingX: 1, gap: 2, children: [
+    groups["done"]?.length && /* @__PURE__ */ jsxs(Text, { children: [
+      /* @__PURE__ */ jsxs(Text, { color: "green", children: [
+        groups["done"].length,
+        " \u2713"
+      ] }),
+      /* @__PURE__ */ jsx(Text, { dimColor: true, children: " done" })
+    ] }),
+    groups["in-progress"]?.map((k) => /* @__PURE__ */ jsxs(Text, { children: [
+      /* @__PURE__ */ jsx(Text, { color: "cyan", children: "\u25C6 " }),
+      /* @__PURE__ */ jsx(Text, { bold: true, children: k })
+    ] }, k)),
+    groups["pending"]?.length && /* @__PURE__ */ jsxs(Text, { children: [
+      /* @__PURE__ */ jsx(Text, { dimColor: true, children: "next: " }),
+      /* @__PURE__ */ jsx(Text, { children: groups["pending"].slice(0, 3).map((k) => shortKey(k)).join(" ") }),
+      groups["pending"].length > 3 && /* @__PURE__ */ jsx(Text, { dimColor: true, children: ` +${groups["pending"].length - 3}` })
+    ] }),
+    groups["failed"]?.map((k) => /* @__PURE__ */ jsx(Text, { children: /* @__PURE__ */ jsxs(Text, { color: "red", children: [
+      "\u2717 ",
+      shortKey(k)
+    ] }) }, k)),
+    groups["blocked"]?.map((k) => /* @__PURE__ */ jsx(Text, { children: /* @__PURE__ */ jsxs(Text, { color: "yellow", children: [
+      "\u2715 ",
+      shortKey(k)
+    ] }) }, k))
+  ] });
+}
+var MESSAGE_STYLE = {
+  ok: { prefix: "[OK]", color: "green" },
+  warn: { prefix: "[WARN]", color: "yellow" },
+  fail: { prefix: "[FAIL]", color: "red" }
+};
+function StoryMessageLine({ msg }) {
+  const style = MESSAGE_STYLE[msg.type];
+  return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsxs(Text, { children: [
+      /* @__PURE__ */ jsx(Text, { color: style.color, bold: true, children: style.prefix }),
+      /* @__PURE__ */ jsx(Text, { children: ` Story ${msg.key}: ${msg.message}` })
+    ] }),
+    msg.details?.map((d, j) => /* @__PURE__ */ jsx(Text, { dimColor: true, children: `  \u2514 ${d}` }, j))
   ] });
 }
 function CompletedTool({ entry }) {
-  const argsSummary = entry.args.length > 60 ? entry.args.slice(0, 60) + "..." : entry.args;
-  return /* @__PURE__ */ jsxs(Text, { children: [
-    "\u2713 [",
-    entry.name,
-    "] ",
-    argsSummary
+  const argsSummary = entry.args.length > 60 ? entry.args.slice(0, 60) + "\u2026" : entry.args;
+  return /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
+    /* @__PURE__ */ jsx(Text, { color: "green", children: "\u2713 " }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: "[" }),
+    /* @__PURE__ */ jsx(Text, { children: entry.name }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: "] " }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: argsSummary })
   ] });
 }
+var VISIBLE_COMPLETED_TOOLS = 5;
 function CompletedTools({ tools }) {
-  return /* @__PURE__ */ jsx(Box, { flexDirection: "column", children: tools.map((entry, i) => /* @__PURE__ */ jsx(CompletedTool, { entry }, i)) });
+  const visible = tools.slice(-VISIBLE_COMPLETED_TOOLS);
+  const hidden = tools.length - visible.length;
+  return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", children: [
+    hidden > 0 && /* @__PURE__ */ jsx(Text, { dimColor: true, children: `  \u2026 ${hidden} earlier tools` }),
+    visible.map((entry, i) => /* @__PURE__ */ jsx(CompletedTool, { entry }, i))
+  ] });
 }
 function ActiveTool({ name }) {
   return /* @__PURE__ */ jsxs(Box, { children: [
-    /* @__PURE__ */ jsxs(Text, { children: [
-      "\u26A1 [",
-      name,
-      "] "
-    ] }),
+    /* @__PURE__ */ jsx(Text, { color: "yellow", children: "\u26A1 " }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: "[" }),
+    /* @__PURE__ */ jsx(Text, { bold: true, children: name }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: "] " }),
     /* @__PURE__ */ jsx(Spinner, { label: "" })
   ] });
 }
 function LastThought({ text }) {
-  const maxWidth = (process.stdout.columns || 80) - 4;
-  const truncated = truncateToWidth(text, maxWidth);
-  return /* @__PURE__ */ jsxs(Text, { children: [
-    "\u{1F4AD} ",
-    truncated
+  return /* @__PURE__ */ jsxs(Text, { wrap: "truncate-end", children: [
+    /* @__PURE__ */ jsx(Text, { children: "\u{1F4AD} " }),
+    /* @__PURE__ */ jsx(Text, { dimColor: true, children: text })
   ] });
 }
-function truncateToWidth(text, maxWidth) {
-  let width = 0;
-  let result = "";
-  for (const char of text) {
-    const cp = char.codePointAt(0);
-    const charWidth = cp <= 126 ? 1 : 2;
-    if (width + charWidth > maxWidth) {
-      return result;
-    }
-    width += charWidth;
-    result += char;
-  }
-  return result;
-}
-var STATUS_SYMBOLS = {
-  "done": "\u2713",
-  "in-progress": "\u25C6",
-  "pending": "\u25CB",
-  "failed": "\u2717",
-  "blocked": "\u2715"
-};
-function StoryBreakdown({ stories }) {
-  if (stories.length === 0) return null;
-  const groups = {};
-  for (const s of stories) {
-    if (!groups[s.status]) groups[s.status] = [];
-    groups[s.status].push(s.key);
-  }
-  const fmt = (keys, status) => keys.map((k) => `${k} ${STATUS_SYMBOLS[status]}`).join("  ");
-  const parts = [];
-  if (groups["done"]?.length) {
-    parts.push(`Done: ${fmt(groups["done"], "done")}`);
-  }
-  if (groups["in-progress"]?.length) {
-    parts.push(`This: ${fmt(groups["in-progress"], "in-progress")}`);
-  }
-  if (groups["pending"]?.length) {
-    parts.push(`Next: ${fmt(groups["pending"], "pending")}`);
-  }
-  if (groups["failed"]?.length) {
-    parts.push(`Failed: ${fmt(groups["failed"], "failed")}`);
-  }
-  if (groups["blocked"]?.length) {
-    parts.push(`Blocked: ${fmt(groups["blocked"], "blocked")}`);
-  }
-  return /* @__PURE__ */ jsx(Text, { children: parts.join(" | ") });
-}
-var MESSAGE_PREFIX = {
-  ok: "[OK]",
-  warn: "[WARN]",
-  fail: "[FAIL]"
-};
-function StoryMessages({ messages }) {
-  if (messages.length === 0) return null;
-  return /* @__PURE__ */ jsx(Box, { flexDirection: "column", children: messages.map((msg, i) => /* @__PURE__ */ jsxs(Box, { flexDirection: "column", children: [
-    /* @__PURE__ */ jsx(Text, { children: `${MESSAGE_PREFIX[msg.type]} Story ${msg.key}: ${msg.message}` }),
-    msg.details?.map((d, j) => /* @__PURE__ */ jsx(Text, { children: `  \u2514 ${d}` }, j))
-  ] }, i)) });
-}
 function RetryNotice({ info: info2 }) {
-  return /* @__PURE__ */ jsxs(Text, { children: [
+  return /* @__PURE__ */ jsxs(Text, { color: "yellow", children: [
     "\u23F3 API retry ",
     info2.attempt,
     " (waiting ",
@@ -2917,13 +2877,15 @@ function App({
   state
 }) {
   return /* @__PURE__ */ jsxs(Box, { flexDirection: "column", children: [
+    /* @__PURE__ */ jsx(Static, { items: state.messages, children: (msg, i) => /* @__PURE__ */ jsx(StoryMessageLine, { msg }, i) }),
     /* @__PURE__ */ jsx(Header, { info: state.sprintInfo }),
     /* @__PURE__ */ jsx(StoryBreakdown, { stories: state.stories }),
-    /* @__PURE__ */ jsx(StoryMessages, { messages: state.messages }),
-    /* @__PURE__ */ jsx(CompletedTools, { tools: state.completedTools }),
-    state.activeTool && /* @__PURE__ */ jsx(ActiveTool, { name: state.activeTool.name }),
-    state.lastThought && /* @__PURE__ */ jsx(LastThought, { text: state.lastThought }),
-    state.retryInfo && /* @__PURE__ */ jsx(RetryNotice, { info: state.retryInfo })
+    /* @__PURE__ */ jsxs(Box, { flexDirection: "column", paddingLeft: 1, children: [
+      /* @__PURE__ */ jsx(CompletedTools, { tools: state.completedTools }),
+      state.activeTool && /* @__PURE__ */ jsx(ActiveTool, { name: state.activeTool.name }),
+      state.lastThought && /* @__PURE__ */ jsx(LastThought, { text: state.lastThought }),
+      state.retryInfo && /* @__PURE__ */ jsx(RetryNotice, { info: state.retryInfo })
+    ] })
   ] });
 }
 
@@ -2959,7 +2921,11 @@ function startRenderer(options) {
   let cleaned = false;
   const inkInstance = inkRender(/* @__PURE__ */ jsx2(App, { state }), {
     exitOnCtrlC: false,
-    patchConsole: false
+    patchConsole: false,
+    incrementalRendering: true,
+    // Only redraw changed lines (v6.5+)
+    maxFps: 15
+    // Dashboard doesn't need 30fps
   });
   function rerender() {
     if (!cleaned) {
@@ -3059,11 +3025,11 @@ var OLD_FILES = {
   sprintStatusYaml: "_bmad-output/implementation-artifacts/sprint-status.yaml",
   sessionIssues: "_bmad-output/implementation-artifacts/.session-issues.md"
 };
-function resolve(relative3) {
-  return join9(process.cwd(), relative3);
+function resolve(relative2) {
+  return join9(process.cwd(), relative2);
 }
-function readIfExists(relative3) {
-  const p = resolve(relative3);
+function readIfExists(relative2) {
+  const p = resolve(relative2);
   if (!existsSync11(p)) return null;
   try {
     return readFileSync9(p, "utf-8");
@@ -4601,14 +4567,6 @@ function getExtension(filename) {
 function isTestFile(filename) {
   return filename.includes(".test.") || filename.includes(".spec.") || filename.includes("__tests__") || filename.startsWith("test_");
 }
-function isDocStale(docPath, codeDir) {
-  if (!existsSync18(docPath)) return true;
-  if (!existsSync18(codeDir)) return false;
-  const docMtime = statSync(docPath).mtime;
-  const newestCode = getNewestSourceMtime(codeDir);
-  if (newestCode === null) return false;
-  return newestCode.getTime() > docMtime.getTime();
-}
 function getNewestSourceMtime(dir) {
   let newest = null;
   function walk(current) {
@@ -7712,9 +7670,9 @@ function checkPerFileCoverage(floor, dir) {
     const funcs = data.functions?.pct ?? 0;
     const lines = data.lines?.pct ?? 0;
     if (stmts < floor) {
-      const relative3 = key.startsWith(baseDir) ? key.slice(baseDir.length + 1) : key;
+      const relative2 = key.startsWith(baseDir) ? key.slice(baseDir.length + 1) : key;
       violations.push({
-        file: relative3,
+        file: relative2,
         statements: stmts,
         branches,
         functions: funcs,
@@ -7797,85 +7755,6 @@ function runPreconditions(dir) {
     hooks: hooksCheck.ok
   };
 }
-var STORY_KEY_PATTERN2 = /^\d+-\d+-/;
-function findVerificationGaps(dir) {
-  const statuses = readSprintStatus(dir);
-  const root = dir ?? process.cwd();
-  const unverified = [];
-  for (const [key, status] of Object.entries(statuses)) {
-    if (status !== "done") continue;
-    if (!STORY_KEY_PATTERN2.test(key)) continue;
-    const proofPath = join24(root, "verification", `${key}-proof.md`);
-    if (!existsSync27(proofPath)) {
-      unverified.push(key);
-    }
-  }
-  return [];
-}
-function findPerFileCoverageGaps(floor, dir) {
-  const result = checkPerFileCoverage(floor, dir);
-  const stories = [];
-  let counter = 1;
-  for (const violation of result.violations) {
-    stories.push({
-      key: `0.fc${counter}`,
-      title: `Add test coverage for ${violation.file}`,
-      type: "coverage",
-      module: violation.file,
-      acceptanceCriteria: [
-        `**Given** ${violation.file} has ${violation.statements}% statement coverage (below ${floor}% floor)
-**When** the agent writes tests
-**Then** ${violation.file} reaches at least ${floor}% statement coverage`
-      ]
-    });
-    counter++;
-  }
-  return stories;
-}
-function findObservabilityGaps(dir) {
-  let state;
-  try {
-    state = readState(dir);
-  } catch {
-    return [];
-  }
-  const stories = [];
-  if (!state.otlp?.enabled) {
-    stories.push({
-      key: "0.o1",
-      title: "Configure OTLP instrumentation",
-      type: "observability",
-      module: "otlp-config",
-      acceptanceCriteria: [
-        "**Given** observability is enabled but OTLP is not configured\n**When** onboard runs\n**Then** OTLP instrumentation must be configured with endpoint and service name"
-      ]
-    });
-  }
-  if (state.docker?.compose_file) {
-    if (!isStackRunning(state.docker.compose_file)) {
-      stories.push({
-        key: "0.o2",
-        title: "Start Docker observability stack",
-        type: "observability",
-        module: "docker-stack",
-        acceptanceCriteria: [
-          "**Given** observability is enabled but Docker stack is not running\n**When** onboard runs\n**Then** Docker observability stack must be started"
-        ]
-      });
-    }
-  } else {
-    stories.push({
-      key: "0.o2",
-      title: "Start Docker observability stack",
-      type: "observability",
-      module: "docker-stack",
-      acceptanceCriteria: [
-        "**Given** observability is enabled but Docker compose file is not configured\n**When** onboard runs\n**Then** Docker observability stack must be configured and started"
-      ]
-    });
-  }
-  return stories;
-}
 var GAP_ID_PATTERN = /\[gap:[a-z-]+:[^\]]+\]/;
 function getOnboardingProgress(beadsFns) {
   let issues;
@@ -7896,42 +7775,6 @@ function getOnboardingProgress(beadsFns) {
   ).length;
   return { total, resolved, remaining: total - resolved };
 }
-function storyToGapId(story) {
-  switch (story.type) {
-    case "coverage":
-      return buildGapId("coverage", story.module);
-    case "agents-md":
-      return buildGapId("docs", story.module + "/AGENTS.md");
-    case "architecture":
-      return buildGapId("docs", "ARCHITECTURE.md");
-    case "doc-freshness":
-      return buildGapId("docs", "stale-docs");
-    case "verification":
-      return buildGapId("verification", story.storyKey);
-    case "observability":
-      return buildGapId("observability", story.module);
-  }
-}
-function filterTrackedGaps(stories, beadsFns) {
-  let existingIssues;
-  try {
-    existingIssues = beadsFns.listIssues();
-  } catch {
-    return { untracked: [...stories], trackedCount: 0 };
-  }
-  const untracked = [];
-  let trackedCount = 0;
-  for (const story of stories) {
-    const gapId = storyToGapId(story);
-    const existing = findExistingByGapId(gapId, existingIssues);
-    if (existing) {
-      trackedCount++;
-    } else {
-      untracked.push(story);
-    }
-  }
-  return { untracked, trackedCount };
-}
 
 // src/commands/status.ts
 function buildScopedEndpoints(endpoints, serviceName) {
@@ -8517,881 +8360,448 @@ function getBeadsData() {
   }
 }
 
-// src/commands/onboard.ts
-import { join as join28 } from "path";
-
-// src/lib/scanner.ts
-import {
-  existsSync as existsSync28,
-  readdirSync as readdirSync6,
-  readFileSync as readFileSync25,
-  statSync as statSync4
-} from "fs";
-import { join as join25, relative as relative2 } from "path";
-var SOURCE_EXTENSIONS2 = /* @__PURE__ */ new Set([".ts", ".js", ".py"]);
-var DEFAULT_MIN_MODULE_SIZE = 3;
-function getExtension2(filename) {
-  const dot = filename.lastIndexOf(".");
-  return dot >= 0 ? filename.slice(dot) : "";
+// src/modules/audit/dimensions.ts
+import { existsSync as existsSync28, readFileSync as readFileSync25, readdirSync as readdirSync6 } from "fs";
+import { join as join25 } from "path";
+function gap(dimension, description, suggestedFix) {
+  return { dimension, description, suggestedFix };
 }
-function isTestFile2(filename) {
-  return filename.includes(".test.") || filename.includes(".spec.") || filename.includes("__tests__") || filename.startsWith("test_");
+function dimOk(name, status, metric, gaps = []) {
+  return ok2({ name, status, metric, gaps });
 }
-function isSkippedDir(name) {
-  return name === "node_modules" || name === ".git" || name === "dist" || name === "coverage";
+function dimCatch(name, err) {
+  const msg = err instanceof Error ? err.message : String(err);
+  return dimOk(name, "warn", "error", [gap(name, `${name} check failed: ${msg}`, `Check ${name} configuration`)]);
 }
-function countSourceFiles(dir) {
-  let count = 0;
-  function walk(current) {
-    let entries;
-    try {
-      entries = readdirSync6(current);
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      if (isSkippedDir(entry)) continue;
-      if (entry.startsWith(".") && current !== dir) continue;
-      const fullPath = join25(current, entry);
-      let stat;
-      try {
-        stat = statSync4(fullPath);
-      } catch {
-        continue;
-      }
-      if (stat.isDirectory()) {
-        if (entry.startsWith(".")) continue;
-        if (entry === "__tests__") continue;
-        walk(fullPath);
-      } else if (stat.isFile()) {
-        const ext = getExtension2(entry);
-        if (SOURCE_EXTENSIONS2.has(ext) && !isTestFile2(entry)) {
-          count++;
+function worstStatus(...statuses) {
+  if (statuses.includes("fail")) return "fail";
+  if (statuses.includes("warn")) return "warn";
+  return "pass";
+}
+async function checkObservability(projectDir) {
+  try {
+    const gaps = [];
+    let sStatus = "pass", sMetric = "";
+    const sr = analyze(projectDir);
+    if (isOk(sr)) {
+      const d = sr.data;
+      if (d.skipped) {
+        sStatus = "warn";
+        sMetric = `static: skipped (${d.skipReason ?? "unknown"})`;
+        gaps.push(gap("observability", `Static analysis skipped: ${d.skipReason ?? "Semgrep not installed"}`, "Install Semgrep: pip install semgrep"));
+      } else {
+        const n = d.gaps.length;
+        sMetric = `static: ${n} gap${n !== 1 ? "s" : ""}`;
+        if (n > 0) {
+          sStatus = "warn";
+          for (const g of d.gaps) gaps.push(gap("observability", `${g.file}:${g.line} \u2014 ${g.message}`, g.fix ?? "Add observability instrumentation"));
         }
       }
+    } else {
+      sStatus = "warn";
+      sMetric = "static: skipped (analysis failed)";
+      gaps.push(gap("observability", `Static analysis failed: ${sr.error}`, "Check Semgrep installation and rules configuration"));
     }
-  }
-  walk(dir);
-  return count;
-}
-function countModuleFiles(modulePath, rootDir) {
-  const fullModulePath = join25(rootDir, modulePath);
-  let sourceFiles = 0;
-  let testFiles = 0;
-  function walk(current) {
-    let entries;
+    let rStatus = "pass", rMetric = "";
     try {
-      entries = readdirSync6(current);
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      if (isSkippedDir(entry)) continue;
-      const fullPath = join25(current, entry);
-      let stat;
-      try {
-        stat = statSync4(fullPath);
-      } catch {
-        continue;
-      }
-      if (stat.isDirectory()) {
-        walk(fullPath);
-      } else if (stat.isFile()) {
-        const ext = getExtension2(entry);
-        if (SOURCE_EXTENSIONS2.has(ext)) {
-          if (isTestFile2(entry) || current.includes("__tests__")) {
-            testFiles++;
-          } else {
-            sourceFiles++;
+      const rr = await validateRuntime(projectDir);
+      if (isOk(rr)) {
+        const d = rr.data;
+        if (d.skipped) {
+          rStatus = "warn";
+          rMetric = `runtime: skipped (${d.skipReason ?? "unknown"})`;
+          gaps.push(gap("observability", `Runtime validation skipped: ${d.skipReason ?? "backend unreachable"}`, "Start the observability stack: codeharness stack up"));
+        } else {
+          rMetric = `runtime: ${d.coveragePercent}%`;
+          if (d.coveragePercent < 50) {
+            rStatus = "warn";
+            gaps.push(gap("observability", `Runtime coverage low: ${d.coveragePercent}%`, "Add telemetry instrumentation to more modules"));
           }
         }
+      } else {
+        rStatus = "warn";
+        rMetric = "runtime: skipped (validation failed)";
+        gaps.push(gap("observability", `Runtime validation failed: ${rr.error}`, "Ensure observability backend is running"));
       }
+    } catch {
+      rStatus = "warn";
+      rMetric = "runtime: skipped (error)";
+      gaps.push(gap("observability", "Runtime validation threw an unexpected error", "Check observability stack health"));
     }
+    return dimOk("observability", worstStatus(sStatus, rStatus), `${sMetric}, ${rMetric}`, gaps);
+  } catch (err) {
+    return dimCatch("observability", err);
   }
-  walk(fullModulePath);
-  return { sourceFiles, testFiles };
-}
-function detectArtifacts(dir) {
-  const bmadPath = join25(dir, "_bmad");
-  const hasBmad = existsSync28(bmadPath);
-  return {
-    hasBmad,
-    bmadPath: hasBmad ? relative2(dir, bmadPath) || "_bmad" : null
-  };
-}
-function scanCodebase(dir, options) {
-  const threshold = options?.minModuleSize ?? DEFAULT_MIN_MODULE_SIZE;
-  const modulePaths = findModules(dir, threshold);
-  const modules = modulePaths.map((modPath) => {
-    const { sourceFiles, testFiles } = countModuleFiles(modPath, dir);
-    return { path: modPath, sourceFiles, testFiles };
-  });
-  const totalSourceFiles = countSourceFiles(dir);
-  const artifacts = detectArtifacts(dir);
-  return { modules, totalSourceFiles, artifacts };
 }
-function analyzeCoverageGaps(modules, dir) {
-  const baseDir = dir ?? process.cwd();
-  const toolInfo = detectCoverageTool(baseDir);
-  if (toolInfo.tool === "unknown") {
-    return {
-      overall: 0,
-      modules: modules.map((m) => ({
-        path: m.path,
-        coveragePercent: 0,
-        uncoveredFileCount: m.sourceFiles
-      })),
-      uncoveredFiles: modules.reduce((sum, m) => sum + m.sourceFiles, 0)
-    };
-  }
-  const overall = parseCoverageReport(baseDir, toolInfo.reportFormat);
-  const perFileCoverage = readPerFileCoverage(baseDir, toolInfo.reportFormat);
-  let totalUncovered = 0;
-  const moduleCoverage = modules.map((mod) => {
-    if (perFileCoverage === null) {
-      return {
-        path: mod.path,
-        coveragePercent: overall,
-        uncoveredFileCount: 0
-      };
-    }
-    let coveredSum = 0;
-    let fileCount = 0;
-    let uncoveredCount = 0;
-    for (const [filePath, pct] of perFileCoverage.entries()) {
-      const relPath = filePath.startsWith("/") ? relative2(baseDir, filePath) : filePath;
-      if (relPath.startsWith(mod.path + "/") || relPath === mod.path) {
-        fileCount++;
-        coveredSum += pct;
-        if (pct === 0) {
-          uncoveredCount++;
-        }
-      }
+function checkTesting(projectDir) {
+  try {
+    const r = checkOnlyCoverage(projectDir);
+    if (!r.success) return dimOk("testing", "warn", "no coverage data", [gap("testing", "No coverage tool detected or coverage data unavailable", "Run tests with coverage: npm run test:coverage")]);
+    const pct = r.coveragePercent;
+    const gaps = [];
+    let status = "pass";
+    if (pct < 50) {
+      status = "fail";
+      gaps.push(gap("testing", `Test coverage critically low: ${pct}%`, "Add unit tests to increase coverage above 50%"));
+    } else if (pct < 80) {
+      status = "warn";
+      gaps.push(gap("testing", `Test coverage below target: ${pct}%`, "Add tests to reach 80% coverage target"));
     }
-    totalUncovered += uncoveredCount;
-    const modulePercent = fileCount > 0 ? Math.round(coveredSum / fileCount * 100) / 100 : 0;
-    return {
-      path: mod.path,
-      coveragePercent: modulePercent,
-      uncoveredFileCount: uncoveredCount
-    };
-  });
-  if (perFileCoverage === null) {
-    totalUncovered = 0;
-  }
-  return {
-    overall,
-    modules: moduleCoverage,
-    uncoveredFiles: totalUncovered
-  };
-}
-function readPerFileCoverage(dir, format) {
-  if (format === "vitest-json" || format === "jest-json") {
-    return readVitestPerFileCoverage(dir);
-  }
-  if (format === "coverage-py-json") {
-    return readPythonPerFileCoverage(dir);
+    return dimOk("testing", status, `${pct}%`, gaps);
+  } catch (err) {
+    return dimCatch("testing", err);
   }
-  return null;
 }
-function readVitestPerFileCoverage(dir) {
-  const reportPath = join25(dir, "coverage", "coverage-summary.json");
-  if (!existsSync28(reportPath)) return null;
+function checkDocumentation(projectDir) {
   try {
-    const report = JSON.parse(readFileSync25(reportPath, "utf-8"));
-    const result = /* @__PURE__ */ new Map();
-    for (const [key, value] of Object.entries(report)) {
-      if (key === "total") continue;
-      result.set(key, value.statements?.pct ?? 0);
+    const report = scanDocHealth(projectDir);
+    const gaps = [];
+    const { fresh, stale, missing } = report.summary;
+    let status = "pass";
+    if (missing > 0) {
+      status = "fail";
+      for (const doc of report.documents) if (doc.grade === "missing") gaps.push(gap("documentation", `Missing: ${doc.path} \u2014 ${doc.reason}`, `Create ${doc.path}`));
     }
-    return result;
-  } catch {
-    return null;
+    if (stale > 0) {
+      if (status !== "fail") status = "warn";
+      for (const doc of report.documents) if (doc.grade === "stale") gaps.push(gap("documentation", `Stale: ${doc.path} \u2014 ${doc.reason}`, `Update ${doc.path} to reflect current code`));
+    }
+    return dimOk("documentation", status, `${fresh} fresh, ${stale} stale, ${missing} missing`, gaps);
+  } catch (err) {
+    return dimCatch("documentation", err);
   }
 }
-function readPythonPerFileCoverage(dir) {
-  const reportPath = join25(dir, "coverage.json");
-  if (!existsSync28(reportPath)) return null;
+function checkVerification(projectDir) {
   try {
-    const report = JSON.parse(readFileSync25(reportPath, "utf-8"));
-    if (!report.files) return null;
-    const result = /* @__PURE__ */ new Map();
-    for (const [key, value] of Object.entries(report.files)) {
-      result.set(key, value.summary?.percent_covered ?? 0);
+    const gaps = [];
+    const sprintPath = join25(projectDir, "_bmad-output", "implementation-artifacts", "sprint-status.yaml");
+    if (!existsSync28(sprintPath)) return dimOk("verification", "warn", "no sprint data", [gap("verification", "No sprint-status.yaml found", "Run sprint planning to create sprint status")]);
+    const vDir = join25(projectDir, "verification");
+    let proofCount = 0, totalChecked = 0;
+    if (existsSync28(vDir)) {
+      for (const file of readdirSafe(vDir)) {
+        if (!file.endsWith("-proof.md")) continue;
+        totalChecked++;
+        const r = parseProof(join25(vDir, file));
+        if (isOk(r) && r.data.passed) {
+          proofCount++;
+        } else {
+          gaps.push(gap("verification", `Story ${file.replace("-proof.md", "")} proof incomplete or failing`, `Run codeharness verify ${file.replace("-proof.md", "")}`));
+        }
+      }
     }
-    return result;
-  } catch {
-    return null;
-  }
-}
-var AUDIT_DOCUMENTS = ["README.md", "AGENTS.md", "ARCHITECTURE.md"];
-function auditDocumentation(dir) {
-  const root = dir ?? process.cwd();
-  const documents = [];
-  for (const docName of AUDIT_DOCUMENTS) {
-    const docPath = join25(root, docName);
-    if (!existsSync28(docPath)) {
-      documents.push({ name: docName, grade: "missing", path: null });
-      continue;
+    let status = "pass";
+    if (totalChecked === 0) {
+      status = "warn";
+      gaps.push(gap("verification", "No verification proofs found", "Run codeharness verify for completed stories"));
+    } else if (proofCount < totalChecked) {
+      status = "warn";
     }
-    const srcDir = join25(root, "src");
-    const codeDir = existsSync28(srcDir) ? srcDir : root;
-    const stale = isDocStale(docPath, codeDir);
-    documents.push({
-      name: docName,
-      grade: stale ? "stale" : "present",
-      path: docName
-    });
+    return dimOk("verification", status, totalChecked > 0 ? `${proofCount}/${totalChecked} verified` : "no proofs", gaps);
+  } catch (err) {
+    return dimCatch("verification", err);
   }
-  const docsDir = join25(root, "docs");
-  if (existsSync28(docsDir)) {
+}
+function checkInfrastructure(projectDir) {
+  try {
+    const dfPath = join25(projectDir, "Dockerfile");
+    if (!existsSync28(dfPath)) return dimOk("infrastructure", "fail", "no Dockerfile", [gap("infrastructure", "No Dockerfile found", "Create a Dockerfile for containerized deployment")]);
+    let content;
     try {
-      const stat = statSync4(docsDir);
-      if (stat.isDirectory()) {
-        documents.push({ name: "docs/", grade: "present", path: "docs/" });
-      }
+      content = readFileSync25(dfPath, "utf-8");
     } catch {
-      documents.push({ name: "docs/", grade: "missing", path: null });
-    }
-  } else {
-    documents.push({ name: "docs/", grade: "missing", path: null });
-  }
-  const indexPath = join25(root, "docs", "index.md");
-  if (existsSync28(indexPath)) {
-    const srcDir = join25(root, "src");
-    const indexCodeDir = existsSync28(srcDir) ? srcDir : root;
-    const indexStale = isDocStale(indexPath, indexCodeDir);
-    documents.push({
-      name: "docs/index.md",
-      grade: indexStale ? "stale" : "present",
-      path: "docs/index.md"
-    });
-  } else {
-    documents.push({ name: "docs/index.md", grade: "missing", path: null });
-  }
-  const summaryParts = documents.filter((d) => !d.name.startsWith("docs/")).map((d) => `${d.name}(${d.grade})`);
-  const summary = summaryParts.join(" ");
-  return { documents, summary };
-}
-
-// src/lib/epic-generator.ts
-import { createInterface } from "readline";
-import { existsSync as existsSync29, mkdirSync as mkdirSync9, writeFileSync as writeFileSync15 } from "fs";
-import { dirname as dirname7, join as join26 } from "path";
-var PRIORITY_BY_TYPE = {
-  observability: 1,
-  coverage: 2,
-  verification: 2,
-  "agents-md": 3,
-  architecture: 3,
-  "doc-freshness": 3
-};
-function generateOnboardingEpic(scan, coverage, audit, rootDir) {
-  const root = rootDir ?? process.cwd();
-  const stories = [];
-  let storyNum = 1;
-  const readmeDoc = audit.documents.find((d) => d.name === "README.md");
-  if (readmeDoc && readmeDoc.grade === "missing") {
-    stories.push({
-      key: `0.${storyNum}`,
-      title: "Create README.md",
-      type: "doc-freshness",
-      acceptanceCriteria: [
-        "**Given** no README.md exists\n**When** the agent runs `codeharness init`\n**Then** README.md is created with project name, installation command, Quick Start section, and CLI reference"
-      ]
-    });
-    storyNum++;
-  }
-  const archDoc = audit.documents.find((d) => d.name === "ARCHITECTURE.md");
-  if (archDoc && archDoc.grade === "missing") {
-    stories.push({
-      key: `0.${storyNum}`,
-      title: "Create ARCHITECTURE.md",
-      type: "architecture",
-      acceptanceCriteria: [
-        "**Given** no ARCHITECTURE.md exists\n**When** the agent analyzes the codebase\n**Then** ARCHITECTURE.md is created with module overview and dependencies"
-      ]
-    });
-    storyNum++;
-  }
-  for (const mod of scan.modules) {
-    const agentsPath = join26(root, mod.path, "AGENTS.md");
-    if (!existsSync29(agentsPath)) {
-      stories.push({
-        key: `0.${storyNum}`,
-        title: `Create ${mod.path}/AGENTS.md`,
-        type: "agents-md",
-        module: mod.path,
-        acceptanceCriteria: [
-          `**Given** ${mod.path} has ${mod.sourceFiles} source files and no AGENTS.md
-**When** the agent reads the module
-**Then** ${mod.path}/AGENTS.md is created with module purpose and key files`
-        ]
-      });
-      storyNum++;
-    }
-  }
-  for (const mod of coverage.modules) {
-    if (mod.coveragePercent < 100) {
-      stories.push({
-        key: `0.${storyNum}`,
-        title: `Add test coverage for ${mod.path}`,
-        type: "coverage",
-        module: mod.path,
-        acceptanceCriteria: [
-          `**Given** ${mod.path} has ${mod.uncoveredFileCount} uncovered files at ${mod.coveragePercent}% coverage
-**When** the agent writes tests
-**Then** ${mod.path} has 100% test coverage`
-        ]
-      });
-      storyNum++;
-    }
-  }
-  const staleDocs = audit.documents.filter((d) => d.grade === "stale");
-  if (staleDocs.length > 0) {
-    const staleNames = staleDocs.map((d) => d.name).join(", ");
-    stories.push({
-      key: `0.${storyNum}`,
-      title: "Update stale documentation",
-      type: "doc-freshness",
-      acceptanceCriteria: [
-        `**Given** the following documents are stale: ${staleNames}
-**When** the agent reviews them against current source
-**Then** all stale documents are updated to reflect the current codebase`
-      ]
-    });
-    storyNum++;
-  }
-  const coverageStories = stories.filter((s) => s.type === "coverage").length;
-  const docStories = stories.filter(
-    (s) => s.type === "agents-md" || s.type === "architecture" || s.type === "doc-freshness"
-  ).length;
-  const verificationStories = stories.filter((s) => s.type === "verification").length;
-  const observabilityStories = stories.filter((s) => s.type === "observability").length;
-  return {
-    title: "Onboarding Epic: Bring Project to Harness Compliance",
-    generatedAt: (/* @__PURE__ */ new Date()).toISOString().replace(/\.\d{3}Z$/, "Z"),
-    stories,
-    summary: {
-      totalStories: stories.length,
-      coverageStories,
-      docStories,
-      verificationStories,
-      observabilityStories
+      return dimOk("infrastructure", "warn", "Dockerfile unreadable", [gap("infrastructure", "Dockerfile exists but could not be read", "Check Dockerfile permissions")]);
     }
-  };
-}
-function writeOnboardingEpic(epic, outputPath) {
-  mkdirSync9(dirname7(outputPath), { recursive: true });
-  const lines = [];
-  lines.push(`# ${epic.title}`);
-  lines.push("");
-  lines.push(`Generated: ${epic.generatedAt}`);
-  lines.push("");
-  lines.push("## Epic 0: Onboarding");
-  lines.push("");
-  for (const story of epic.stories) {
-    lines.push(`### Story ${story.key}: ${story.title}`);
-    lines.push("");
-    if (story.type === "coverage") {
-      lines.push(`As a developer, I want tests for ${story.module} to ensure correctness.`);
-    } else if (story.type === "agents-md") {
-      lines.push(`As an agent, I want AGENTS.md for ${story.module} so I have local context.`);
-    } else if (story.type === "architecture") {
-      lines.push("As a developer, I want an ARCHITECTURE.md documenting the project's architecture.");
-    } else if (story.type === "doc-freshness") {
-      lines.push("As a developer, I want up-to-date documentation reflecting the current codebase.");
-    } else if (story.type === "verification") {
-      lines.push(`As a developer, I want verification proof for ${story.storyKey} to ensure it's properly documented.`);
-    } else if (story.type === "observability") {
-      lines.push("As a developer, I want observability infrastructure configured so the harness can monitor runtime behavior.");
-    }
-    lines.push("");
-    for (const ac of story.acceptanceCriteria) {
-      lines.push(ac);
-    }
-    lines.push("");
-  }
-  lines.push("---");
-  lines.push("");
-  lines.push(`**Total stories:** ${epic.stories.length}`);
-  lines.push("");
-  lines.push("Review and approve before execution.");
-  lines.push("");
-  writeFileSync15(outputPath, lines.join("\n"), "utf-8");
-}
-function formatEpicSummary(epic) {
-  const { totalStories, coverageStories, docStories, verificationStories, observabilityStories } = epic.summary;
-  return `Onboarding plan: ${totalStories} stories (${coverageStories} coverage, ${docStories} documentation, ${verificationStories} verification, ${observabilityStories} observability)`;
-}
-function promptApproval() {
-  return new Promise((resolve3) => {
-    let answered = false;
-    const rl = createInterface({
-      input: process.stdin,
-      output: process.stdout
-    });
-    rl.on("close", () => {
-      if (!answered) {
-        answered = true;
-        resolve3(false);
+    const fromLines = content.split("\n").filter((l) => /^\s*FROM\s+/i.test(l));
+    if (fromLines.length === 0) return dimOk("infrastructure", "fail", "invalid Dockerfile", [gap("infrastructure", "Dockerfile has no FROM instruction", "Add a FROM instruction with a pinned base image")]);
+    const gaps = [];
+    let hasUnpinned = false;
+    for (const line of fromLines) {
+      const ref = line.replace(/^\s*FROM\s+/i, "").split(/\s+/)[0];
+      if (ref.endsWith(":latest")) {
+        hasUnpinned = true;
+        gaps.push(gap("infrastructure", `Unpinned base image: ${ref}`, `Pin ${ref} to a specific version tag`));
+      } else if (!ref.includes(":") && !ref.includes("@")) {
+        hasUnpinned = true;
+        gaps.push(gap("infrastructure", `Unpinned base image (no tag): ${ref}`, `Pin ${ref} to a specific version tag (e.g., ${ref}:22-slim)`));
       }
-    });
-    rl.question("Review the onboarding plan. Approve? [Y/n] ", (answer) => {
-      answered = true;
-      rl.close();
-      const trimmed = answer.trim().toLowerCase();
-      resolve3(trimmed === "" || trimmed === "y");
-    });
-  });
-}
-function importOnboardingEpic(epicPath, beadsFns) {
-  const epics = parseEpicsFile(epicPath);
-  const allStories = [];
-  for (const epic of epics) {
-    for (const story of epic.stories) {
-      allStories.push(story);
     }
+    const status = hasUnpinned ? "warn" : "pass";
+    const metric = hasUnpinned ? `Dockerfile exists (${gaps.length} issue${gaps.length !== 1 ? "s" : ""})` : "Dockerfile valid";
+    return dimOk("infrastructure", status, metric, gaps);
+  } catch (err) {
+    return dimCatch("infrastructure", err);
   }
-  if (allStories.length === 0) {
+}
+function readdirSafe(dir) {
+  try {
+    return readdirSync6(dir);
+  } catch {
     return [];
   }
-  const wrappedBeadsFns = {
-    listIssues: beadsFns.listIssues,
-    createIssue: (title, opts) => {
-      const priority = getPriorityFromTitle(title);
-      const gapId = getGapIdFromTitle(title);
-      const description = gapId ? appendGapId(opts?.description, gapId) : opts?.description;
-      return beadsFns.createIssue(title, {
-        ...opts,
-        type: "task",
-        priority,
-        description
-      });
-    }
-  };
-  return importStoriesToBeads(allStories, {}, wrappedBeadsFns);
 }
-function getPriorityFromTitle(title) {
-  if (title.startsWith("Add test coverage for ")) return PRIORITY_BY_TYPE.coverage;
-  if (title.startsWith("Create ") && title.endsWith("AGENTS.md")) return PRIORITY_BY_TYPE["agents-md"];
-  if (title === "Create README.md") return PRIORITY_BY_TYPE["doc-freshness"];
-  if (title === "Create ARCHITECTURE.md") return PRIORITY_BY_TYPE.architecture;
-  if (title === "Update stale documentation") return PRIORITY_BY_TYPE["doc-freshness"];
-  if (title.startsWith("Create verification proof for ")) return PRIORITY_BY_TYPE.verification;
-  if (title === "Configure OTLP instrumentation" || title === "Start Docker observability stack") return PRIORITY_BY_TYPE.observability;
-  return 3;
-}
-function getGapIdFromTitle(title) {
-  if (title.startsWith("Add test coverage for ")) {
-    const mod = title.slice("Add test coverage for ".length);
-    return `[gap:coverage:${mod}]`;
-  }
-  if (title.startsWith("Create ") && title.endsWith("/AGENTS.md")) {
-    const mod = title.slice("Create ".length);
-    return `[gap:docs:${mod}]`;
-  }
-  if (title === "Create README.md") {
-    return "[gap:docs:README.md]";
-  }
-  if (title === "Create ARCHITECTURE.md") {
-    return "[gap:docs:ARCHITECTURE.md]";
-  }
-  if (title === "Update stale documentation") {
-    return "[gap:docs:stale-docs]";
-  }
-  if (title.startsWith("Create verification proof for ")) {
-    const key = title.slice("Create verification proof for ".length);
-    return `[gap:verification:${key}]`;
-  }
-  if (title === "Configure OTLP instrumentation") {
-    return "[gap:observability:otlp-config]";
-  }
-  if (title === "Start Docker observability stack") {
-    return "[gap:observability:docker-stack]";
+
+// src/modules/audit/report.ts
+var STATUS_PREFIX = {
+  pass: "[OK]",
+  fail: "[FAIL]",
+  warn: "[WARN]"
+};
+function formatAuditHuman(result) {
+  const lines = [];
+  for (const dimension of Object.values(result.dimensions)) {
+    const prefix = STATUS_PREFIX[dimension.status] ?? "[WARN]";
+    lines.push(`${prefix} ${dimension.name}: ${dimension.metric}`);
+    for (const gap2 of dimension.gaps) {
+      lines.push(`  [WARN] ${gap2.description} -- fix: ${gap2.suggestedFix}`);
+    }
   }
-  return null;
+  const overallPrefix = STATUS_PREFIX[result.overallStatus] ?? "[WARN]";
+  lines.push("");
+  lines.push(
+    `${overallPrefix} Audit complete: ${result.gapCount} gap${result.gapCount !== 1 ? "s" : ""} found (${result.durationMs}ms)`
+  );
+  return lines;
+}
+function formatAuditJson(result) {
+  return result;
 }
 
-// src/lib/scan-cache.ts
-import { existsSync as existsSync30, mkdirSync as mkdirSync10, readFileSync as readFileSync26, writeFileSync as writeFileSync16 } from "fs";
-import { join as join27 } from "path";
-var CACHE_DIR = ".harness";
-var CACHE_FILE = "last-onboard-scan.json";
-var DEFAULT_MAX_AGE_MS = 864e5;
-function saveScanCache(entry, dir) {
-  try {
-    const root = dir ?? process.cwd();
-    const cacheDir = join27(root, CACHE_DIR);
-    mkdirSync10(cacheDir, { recursive: true });
-    const cachePath = join27(cacheDir, CACHE_FILE);
-    writeFileSync16(cachePath, JSON.stringify(entry, null, 2), "utf-8");
-  } catch {
-  }
+// src/modules/audit/fix-generator.ts
+import { existsSync as existsSync29, writeFileSync as writeFileSync15, mkdirSync as mkdirSync9 } from "fs";
+import { join as join26, dirname as dirname7 } from "path";
+function buildStoryKey(gap2, index) {
+  const safeDimension = gap2.dimension.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
+  return `audit-fix-${safeDimension}-${index}`;
 }
-function loadScanCache(dir) {
-  const root = dir ?? process.cwd();
-  const cachePath = join27(root, CACHE_DIR, CACHE_FILE);
-  if (!existsSync30(cachePath)) {
-    return null;
-  }
-  try {
-    const raw = readFileSync26(cachePath, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
+function buildStoryMarkdown(gap2, key) {
+  return [
+    `# Fix: ${gap2.dimension} \u2014 ${gap2.description}`,
+    "",
+    "Status: backlog",
+    "",
+    "## Story",
+    "",
+    `As an operator, I need ${gap2.description} fixed so that audit compliance improves.`,
+    "",
+    "## Acceptance Criteria",
+    "",
+    `1. **Given** ${gap2.description}, **When** the fix is applied, **Then** ${gap2.suggestedFix}.`,
+    "",
+    "## Dev Notes",
+    "",
+    "This is an auto-generated fix story created by `codeharness audit --fix`.",
+    `**Audit Gap:** ${gap2.dimension}: ${gap2.description}`,
+    `**Suggested Fix:** ${gap2.suggestedFix}`,
+    ""
+  ].join("\n");
 }
-function isCacheValid(entry, maxAgeMs) {
-  const max = maxAgeMs ?? DEFAULT_MAX_AGE_MS;
-  if (!entry.timestamp) {
-    return false;
-  }
-  const ts = new Date(entry.timestamp).getTime();
-  if (isNaN(ts)) {
-    return false;
+function generateFixStories(auditResult) {
+  try {
+    const stories = [];
+    let created = 0;
+    let skipped = 0;
+    const artifactsDir = join26(
+      process.cwd(),
+      "_bmad-output",
+      "implementation-artifacts"
+    );
+    for (const dimension of Object.values(auditResult.dimensions)) {
+      for (let i = 0; i < dimension.gaps.length; i++) {
+        const gap2 = dimension.gaps[i];
+        const key = buildStoryKey(gap2, i + 1);
+        const filePath = join26(artifactsDir, `${key}.md`);
+        if (existsSync29(filePath)) {
+          stories.push({
+            key,
+            filePath,
+            gap: gap2,
+            skipped: true,
+            skipReason: "Story file already exists"
+          });
+          skipped++;
+          continue;
+        }
+        const markdown = buildStoryMarkdown(gap2, key);
+        mkdirSync9(dirname7(filePath), { recursive: true });
+        writeFileSync15(filePath, markdown, "utf-8");
+        stories.push({ key, filePath, gap: gap2, skipped: false });
+        created++;
+      }
+    }
+    return ok2({ stories, created, skipped });
+  } catch (err) {
+    const msg = err instanceof Error ? err.message : String(err);
+    return fail2(`Failed to generate fix stories: ${msg}`);
   }
-  return Date.now() - ts < max;
 }
-function loadValidCache(dir, opts) {
-  if (opts?.forceScan) {
-    return null;
+function addFixStoriesToState(stories) {
+  const newStories = stories.filter((s) => !s.skipped);
+  if (newStories.length === 0) {
+    return ok2(void 0);
   }
-  const entry = loadScanCache(dir);
-  if (!entry) {
-    return null;
+  const stateResult = getSprintState2();
+  if (!stateResult.success) {
+    return fail2(stateResult.error);
   }
-  if (!isCacheValid(entry, opts?.maxAgeMs)) {
-    return null;
+  const current = stateResult.data;
+  const updatedStories = { ...current.stories };
+  for (const story of newStories) {
+    updatedStories[story.key] = {
+      status: "backlog",
+      attempts: 0,
+      lastAttempt: null,
+      lastError: null,
+      proofPath: null,
+      acResults: null
+    };
   }
-  return entry;
+  const updatedSprint = computeSprintCounts2(updatedStories);
+  return writeStateAtomic2({
+    ...current,
+    sprint: updatedSprint,
+    stories: updatedStories
+  });
 }
 
-// src/commands/onboard.ts
-var lastScanResult = null;
-var lastCoverageResult = null;
-var lastAuditResult = null;
-function registerOnboardCommand(program) {
-  const onboard = program.command("onboard").description("Onboard an existing codebase into the harness").option("--min-module-size <n>", "Minimum files to count as a module", "3").option("--full", "Show all gaps regardless of existing beads issues").option("--force-scan", "Ignore cached scan and perform a fresh scan");
-  onboard.command("scan").description("Scan codebase for modules and artifacts").action((_, cmd) => {
-    const opts = cmd.optsWithGlobals();
-    const isJson = opts.json === true;
-    const minModuleSize = parseInt(opts.minModuleSize ?? "3", 10);
-    const preconditions = runPreconditions();
-    if (!preconditions.canProceed) {
-      if (isJson) {
-        jsonOutput({ status: "fail", message: "Harness not initialized \u2014 run codeharness init first" });
-      } else {
-        fail("Harness not initialized \u2014 run codeharness init first");
-      }
-      process.exitCode = 1;
-      return;
-    }
-    if (!isJson) {
-      for (const w of preconditions.warnings) {
-        warn(w);
-      }
-    }
-    const result = runScan(minModuleSize);
-    saveScanCache({
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      scan: result,
-      coverage: null,
-      audit: null
-    });
-    if (isJson) {
-      jsonOutput({ preconditions: { initialized: preconditions.initialized, bmad: preconditions.bmad, hooks: preconditions.hooks }, scan: result });
-    } else {
-      printScanOutput(result);
-    }
-  });
-  onboard.command("coverage").description("Analyze per-module coverage gaps").action((_, cmd) => {
-    const opts = cmd.optsWithGlobals();
-    const isJson = opts.json === true;
-    const forceScan = opts.forceScan === true;
-    const minModuleSize = parseInt(opts.minModuleSize ?? "3", 10);
-    const preconditions = runPreconditions();
-    if (!preconditions.canProceed) {
-      if (isJson) {
-        jsonOutput({ status: "fail", message: "Harness not initialized \u2014 run codeharness init first" });
-      } else {
-        fail("Harness not initialized \u2014 run codeharness init first");
-      }
-      process.exitCode = 1;
-      return;
+// src/modules/audit/index.ts
+async function runAudit(projectDir) {
+  const start = performance.now();
+  const [
+    obsResult,
+    testResult,
+    docResult,
+    verifyResult,
+    infraResult
+  ] = await Promise.all([
+    checkObservability(projectDir),
+    Promise.resolve(checkTesting(projectDir)),
+    Promise.resolve(checkDocumentation(projectDir)),
+    Promise.resolve(checkVerification(projectDir)),
+    Promise.resolve(checkInfrastructure(projectDir))
+  ]);
+  const dimensions = {};
+  const allResults = [obsResult, testResult, docResult, verifyResult, infraResult];
+  for (const result of allResults) {
+    if (result.success) {
+      dimensions[result.data.name] = result.data;
     }
-    for (const w of preconditions.warnings) {
-      warn(w);
-    }
-    let scan;
-    if (lastScanResult) {
-      scan = lastScanResult;
-    } else {
-      const cache = loadValidCache(process.cwd(), { forceScan });
-      if (cache) {
-        info(`Using cached scan from ${new Date(cache.timestamp).toLocaleString()}`);
-        scan = cache.scan;
-        lastScanResult = scan;
-      } else {
-        scan = runScan(minModuleSize);
-      }
-    }
-    const result = runCoverageAnalysis(scan);
+  }
+  const statuses = Object.values(dimensions).map((d) => d.status);
+  const overallStatus = computeOverallStatus(statuses);
+  const gapCount = Object.values(dimensions).reduce((sum, d) => sum + d.gaps.length, 0);
+  const durationMs = Math.round(performance.now() - start);
+  return ok2({ dimensions, overallStatus, gapCount, durationMs });
+}
+function computeOverallStatus(statuses) {
+  if (statuses.includes("fail")) return "fail";
+  if (statuses.includes("warn")) return "warn";
+  return "pass";
+}
+
+// src/commands/audit-action.ts
+async function executeAudit(opts) {
+  const { isJson, isFix } = opts;
+  const preconditions = runPreconditions();
+  if (!preconditions.canProceed) {
     if (isJson) {
-      jsonOutput({ preconditions: { initialized: preconditions.initialized, bmad: preconditions.bmad, hooks: preconditions.hooks }, coverage: result });
+      jsonOutput({
+        status: "fail",
+        message: "Harness not initialized -- run codeharness init first"
+      });
     } else {
-      printCoverageOutput2(result);
-    }
-  });
-  onboard.command("audit").description("Audit project documentation").action((_, cmd) => {
-    const opts = cmd.optsWithGlobals();
-    const isJson = opts.json === true;
-    const preconditions = runPreconditions();
-    if (!preconditions.canProceed) {
-      if (isJson) {
-        jsonOutput({ status: "fail", message: "Harness not initialized \u2014 run codeharness init first" });
-      } else {
-        fail("Harness not initialized \u2014 run codeharness init first");
-      }
-      process.exitCode = 1;
-      return;
+      fail("Harness not initialized -- run codeharness init first");
     }
-    for (const w of preconditions.warnings) {
-      warn(w);
-    }
-    const result = runAudit();
+    process.exitCode = 1;
+    return;
+  }
+  const result = await runAudit(process.cwd());
+  if (!result.success) {
     if (isJson) {
-      jsonOutput({ preconditions: { initialized: preconditions.initialized, bmad: preconditions.bmad, hooks: preconditions.hooks }, audit: result });
+      jsonOutput({ status: "fail", message: result.error });
     } else {
-      printAuditOutput(result);
+      fail(result.error);
     }
-  });
-  onboard.command("epic").description("Generate onboarding epic from scan findings").option("--auto-approve", "Skip interactive prompt and import directly").action(async (epicOpts, cmd) => {
-    const opts = cmd.optsWithGlobals();
-    const isJson = opts.json === true;
-    const autoApprove = epicOpts.autoApprove === true;
-    const isFull = opts.full === true;
-    const forceScan = opts.forceScan === true;
-    const minModuleSize = parseInt(opts.minModuleSize ?? "3", 10);
-    const preconditions = runPreconditions();
-    if (!preconditions.canProceed) {
-      if (isJson) {
-        jsonOutput({ status: "fail", message: "Harness not initialized \u2014 run codeharness init first" });
-      } else {
-        fail("Harness not initialized \u2014 run codeharness init first");
+    process.exitCode = 1;
+    return;
+  }
+  let fixStories;
+  let fixStateError;
+  if (isFix) {
+    if (result.data.gapCount === 0) {
+      if (!isJson) {
+        ok("No gaps found -- nothing to fix");
       }
-      process.exitCode = 1;
-      return;
-    }
-    for (const w of preconditions.warnings) {
-      warn(w);
-    }
-    let scan;
-    let coverage;
-    let audit;
-    if (lastScanResult) {
-      scan = lastScanResult;
     } else {
-      const cache = loadValidCache(process.cwd(), { forceScan });
-      if (cache) {
-        info(`Using cached scan from ${new Date(cache.timestamp).toLocaleString()}`);
-        scan = cache.scan;
-        lastScanResult = scan;
-        if (cache.coverage) {
-          lastCoverageResult = cache.coverage;
+      const fixResult = generateFixStories(result.data);
+      fixStories = fixResult;
+      if (fixResult.success) {
+        const stateResult = addFixStoriesToState(fixResult.data.stories);
+        if (!stateResult.success) {
+          fixStateError = stateResult.error;
+          if (!isJson) {
+            fail(`Failed to update sprint state: ${stateResult.error}`);
+          }
         }
-        if (cache.audit) {
-          lastAuditResult = cache.audit;
+        if (!isJson) {
+          info(`Generated ${fixResult.data.created} fix stories (${fixResult.data.skipped} skipped)`);
         }
-      } else {
-        scan = runScan(minModuleSize);
-      }
-    }
-    coverage = lastCoverageResult ?? runCoverageAnalysis(scan);
-    audit = lastAuditResult ?? runAudit();
-    const epicPath = join28(process.cwd(), "ralph", "onboarding-epic.md");
-    const epic = generateOnboardingEpic(scan, coverage, audit);
-    mergeExtendedGaps(epic);
-    if (!isFull) {
-      applyGapFiltering(epic);
-    }
-    writeOnboardingEpic(epic, epicPath);
-    if (isJson) {
-      jsonOutput({
-        preconditions: { initialized: preconditions.initialized, bmad: preconditions.bmad, hooks: preconditions.hooks },
-        epic,
-        import_status: { stories_created: 0, stories_existing: 0 }
-      });
-      return;
-    }
-    printEpicOutput(epic);
-    let approved;
-    if (autoApprove) {
-      approved = true;
-    } else {
-      approved = await promptApproval();
-    }
-    if (approved) {
-      const results = importOnboardingEpic(epicPath, { listIssues, createIssue });
-      const created = results.filter((r) => r.status === "created").length;
-      ok(`Onboarding: ${created} stories imported into beads`);
-      const sprintResult = appendOnboardingEpicToSprint(
-        epic.stories.map((s) => ({ title: s.title }))
-      );
-      if (sprintResult.epicNumber >= 0) {
-        ok(`Onboarding epic ${sprintResult.epicNumber} added to sprint-status.yaml (${sprintResult.storyKeys.length} stories)`);
+      } else if (!isJson) {
+        fail(fixResult.error);
       }
-      info("Ready to run: codeharness run");
-    } else {
-      info("Plan saved to ralph/onboarding-epic.md \u2014 edit and re-run when ready");
-    }
-  });
-  onboard.action(async (opts, cmd) => {
-    const globalOpts = cmd.optsWithGlobals();
-    const isJson = opts.json === true || globalOpts.json === true;
-    const isFull = opts.full === true || globalOpts.full === true;
-    const forceScan = opts.forceScan === true || globalOpts.forceScan === true;
-    const minModuleSize = parseInt(opts.minModuleSize ?? "3", 10);
-    const preconditions = runPreconditions();
-    if (!preconditions.canProceed) {
-      if (isJson) {
-        jsonOutput({ status: "fail", message: "Harness not initialized \u2014 run codeharness init first" });
-      } else {
-        fail("Harness not initialized \u2014 run codeharness init first");
-      }
-      process.exitCode = 1;
-      return;
-    }
-    for (const w of preconditions.warnings) {
-      warn(w);
-    }
-    const progress = getOnboardingProgress({ listIssues });
-    if (progress) {
-      if (progress.remaining === 0 && !isFull && !forceScan) {
-        ok("Onboarding complete \u2014 all gaps resolved");
-        return;
-      }
-      info(`Onboarding progress: ${progress.resolved}/${progress.total} gaps resolved (${progress.remaining} remaining)`);
-    }
-    const scan = runScan(minModuleSize);
-    const coverage = runCoverageAnalysis(scan);
-    const audit = runAudit();
-    saveScanCache({
-      timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-      scan,
-      coverage,
-      audit
-    });
-    const epicPath = join28(process.cwd(), "ralph", "onboarding-epic.md");
-    const epic = generateOnboardingEpic(scan, coverage, audit);
-    mergeExtendedGaps(epic);
-    if (!isFull) {
-      applyGapFiltering(epic);
     }
-    writeOnboardingEpic(epic, epicPath);
-    if (isJson) {
-      jsonOutput({
-        preconditions: { initialized: preconditions.initialized, bmad: preconditions.bmad, hooks: preconditions.hooks },
-        scan,
-        coverage,
-        audit,
-        epic
-      });
-    } else {
-      printScanOutput(scan);
-      printCoverageOutput2(coverage);
-      printAuditOutput(audit);
-      printEpicOutput(epic);
-      const approved = await promptApproval();
-      if (approved) {
-        const results = importOnboardingEpic(epicPath, { listIssues, createIssue });
-        const created = results.filter((r) => r.status === "created").length;
-        ok(`Onboarding: ${created} stories imported into beads`);
-        const sprintResult = appendOnboardingEpicToSprint(
-          epic.stories.map((s) => ({ title: s.title }))
-        );
-        if (sprintResult.epicNumber >= 0) {
-          ok(`Onboarding epic ${sprintResult.epicNumber} added to sprint-status.yaml (${sprintResult.storyKeys.length} stories)`);
+  }
+  if (isJson) {
+    const jsonData = { ...formatAuditJson(result.data) };
+    if (isFix) {
+      if (result.data.gapCount === 0) {
+        jsonData.fixStories = [];
+      } else if (fixStories.success) {
+        jsonData.fixStories = fixStories.data.stories.map((s) => ({
+          key: s.key,
+          filePath: s.filePath,
+          gap: s.gap,
+          ...s.skipped ? { skipped: true } : {}
+        }));
+        if (fixStateError) {
+          jsonData.fixStateError = fixStateError;
         }
-        info("Ready to run: codeharness run");
       } else {
-        info("Plan saved to ralph/onboarding-epic.md \u2014 edit and re-run when ready");
+        jsonData.fixStories = [];
+        jsonData.fixError = fixStories.error;
       }
     }
-  });
-}
-function applyGapFiltering(epic) {
-  const { untracked, trackedCount } = filterTrackedGaps(epic.stories, { listIssues });
-  if (trackedCount > 0) {
-    info(`${trackedCount} previously tracked gaps already in beads`);
-  }
-  epic.stories = untracked;
-  rebuildEpicSummary(epic);
-}
-function mergeExtendedGaps(epic) {
-  const verificationGaps = findVerificationGaps();
-  const perFileCoverageGaps = findPerFileCoverageGaps(80);
-  const observabilityGaps = findObservabilityGaps();
-  epic.stories.push(...verificationGaps, ...perFileCoverageGaps, ...observabilityGaps);
-  rebuildEpicSummary(epic);
-}
-function rebuildEpicSummary(epic) {
-  const coverageStories = epic.stories.filter((s) => s.type === "coverage").length;
-  const docStories = epic.stories.filter(
-    (s) => s.type === "agents-md" || s.type === "architecture" || s.type === "doc-freshness"
-  ).length;
-  const verificationStories = epic.stories.filter((s) => s.type === "verification").length;
-  const observabilityStories = epic.stories.filter((s) => s.type === "observability").length;
-  epic.summary = {
-    totalStories: epic.stories.length,
-    coverageStories,
-    docStories,
-    verificationStories,
-    observabilityStories
-  };
-}
-function runScan(minModuleSize) {
-  const result = scanCodebase(process.cwd(), { minModuleSize });
-  lastScanResult = result;
-  return result;
-}
-function runCoverageAnalysis(scan) {
-  const result = analyzeCoverageGaps(scan.modules);
-  lastCoverageResult = result;
-  return result;
-}
-function runAudit() {
-  const result = auditDocumentation();
-  lastAuditResult = result;
-  return result;
-}
-function printScanOutput(result) {
-  info(`Scan: ${result.totalSourceFiles} source files across ${result.modules.length} modules`);
-  for (const mod of result.modules) {
-    info(`  ${mod.path}: ${mod.sourceFiles} source, ${mod.testFiles} test`);
-  }
-}
-function printCoverageOutput2(result) {
-  info(`Coverage: ${result.overall}% overall (${result.uncoveredFiles} files uncovered)`);
-  for (const mod of result.modules) {
-    if (mod.uncoveredFileCount > 0) {
-      info(`  ${mod.path}: ${mod.coveragePercent}% (${mod.uncoveredFileCount} uncovered)`);
+    jsonOutput(jsonData);
+  } else if (!isFix || result.data.gapCount > 0) {
+    const lines = formatAuditHuman(result.data);
+    for (const line of lines) {
+      console.log(line);
     }
   }
-}
-function printAuditOutput(result) {
-  info(`Docs: ${result.summary}`);
-}
-function printEpicOutput(epic) {
-  info(formatEpicSummary(epic));
-  for (const story of epic.stories) {
-    info(`  ${story.key}: ${story.title}`);
+  if (result.data.overallStatus === "fail") {
+    process.exitCode = 1;
   }
 }
 
+// src/commands/onboard.ts
+function registerOnboardCommand(program) {
+  const onboard = program.command("onboard").description("Alias for audit \u2014 check all compliance dimensions").option("--json", "Output in machine-readable JSON format").option("--fix", "Generate fix stories for every gap found").action(async (opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    const isJson = opts.json === true || globalOpts.json === true;
+    const isFix = opts.fix === true;
+    await executeAudit({ isJson, isFix });
+  });
+  onboard.command("scan").description('(deprecated) Use "codeharness audit" instead').action(async (_, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    const isJson = globalOpts.json === true;
+    warn("'onboard scan' is deprecated \u2014 use 'codeharness audit' instead");
+    await executeAudit({ isJson, isFix: false });
+  });
+}
+
 // src/commands/teardown.ts
-import { existsSync as existsSync31, unlinkSync as unlinkSync2, readFileSync as readFileSync27, writeFileSync as writeFileSync17, rmSync as rmSync2 } from "fs";
-import { join as join29 } from "path";
+import { existsSync as existsSync30, unlinkSync as unlinkSync2, readFileSync as readFileSync26, writeFileSync as writeFileSync16, rmSync as rmSync2 } from "fs";
+import { join as join27 } from "path";
 function buildDefaultResult() {
   return {
     status: "ok",
@@ -9494,16 +8904,16 @@ function registerTeardownCommand(program) {
           info("Docker stack: not running, skipping");
         }
       }
-      const composeFilePath = join29(projectDir, composeFile);
-      if (existsSync31(composeFilePath)) {
+      const composeFilePath = join27(projectDir, composeFile);
+      if (existsSync30(composeFilePath)) {
         unlinkSync2(composeFilePath);
         result.removed.push(composeFile);
         if (!isJson) {
           ok(`Removed: ${composeFile}`);
         }
       }
-      const otelConfigPath = join29(projectDir, "otel-collector-config.yaml");
-      if (existsSync31(otelConfigPath)) {
+      const otelConfigPath = join27(projectDir, "otel-collector-config.yaml");
+      if (existsSync30(otelConfigPath)) {
         unlinkSync2(otelConfigPath);
         result.removed.push("otel-collector-config.yaml");
         if (!isJson) {
@@ -9513,8 +8923,8 @@ function registerTeardownCommand(program) {
     }
     let patchesRemoved = 0;
     for (const [patchName, relativePath] of Object.entries(PATCH_TARGETS)) {
-      const filePath = join29(projectDir, "_bmad", relativePath);
-      if (!existsSync31(filePath)) {
+      const filePath = join27(projectDir, "_bmad", relativePath);
+      if (!existsSync30(filePath)) {
         continue;
       }
       try {
@@ -9534,10 +8944,10 @@ function registerTeardownCommand(program) {
       }
     }
     if (state.otlp?.enabled && state.stack === "nodejs") {
-      const pkgPath = join29(projectDir, "package.json");
-      if (existsSync31(pkgPath)) {
+      const pkgPath = join27(projectDir, "package.json");
+      if (existsSync30(pkgPath)) {
         try {
-          const raw = readFileSync27(pkgPath, "utf-8");
+          const raw = readFileSync26(pkgPath, "utf-8");
           const pkg = JSON.parse(raw);
           const scripts = pkg["scripts"];
           if (scripts) {
@@ -9551,7 +8961,7 @@ function registerTeardownCommand(program) {
               for (const key of keysToRemove) {
                 delete scripts[key];
               }
-              writeFileSync17(pkgPath, JSON.stringify(pkg, null, 2) + "\n", "utf-8");
+              writeFileSync16(pkgPath, JSON.stringify(pkg, null, 2) + "\n", "utf-8");
               result.otlp_cleaned = true;
               if (!isJson) {
                 ok("OTLP: removed instrumented scripts from package.json");
@@ -9577,8 +8987,8 @@ function registerTeardownCommand(program) {
         }
       }
     }
-    const harnessDir = join29(projectDir, ".harness");
-    if (existsSync31(harnessDir)) {
+    const harnessDir = join27(projectDir, ".harness");
+    if (existsSync30(harnessDir)) {
       rmSync2(harnessDir, { recursive: true, force: true });
       result.removed.push(".harness/");
       if (!isJson) {
@@ -9586,7 +8996,7 @@ function registerTeardownCommand(program) {
       }
     }
     const statePath2 = getStatePath(projectDir);
-    if (existsSync31(statePath2)) {
+    if (existsSync30(statePath2)) {
       unlinkSync2(statePath2);
       result.removed.push(".claude/codeharness.local.md");
       if (!isJson) {
@@ -10330,8 +9740,8 @@ function registerQueryCommand(program) {
 }
 
 // src/commands/retro-import.ts
-import { existsSync as existsSync32, readFileSync as readFileSync28 } from "fs";
-import { join as join30 } from "path";
+import { existsSync as existsSync31, readFileSync as readFileSync27 } from "fs";
+import { join as join28 } from "path";
 
 // src/lib/retro-parser.ts
 var KNOWN_TOOLS = ["showboat", "ralph", "beads", "bmad"];
@@ -10500,15 +9910,15 @@ function registerRetroImportCommand(program) {
       return;
     }
     const retroFile = `epic-${epicNum}-retrospective.md`;
-    const retroPath = join30(root, STORY_DIR3, retroFile);
-    if (!existsSync32(retroPath)) {
+    const retroPath = join28(root, STORY_DIR3, retroFile);
+    if (!existsSync31(retroPath)) {
       fail(`Retro file not found: ${retroFile}`, { json: isJson });
       process.exitCode = 1;
       return;
     }
     let content;
     try {
-      content = readFileSync28(retroPath, "utf-8");
+      content = readFileSync27(retroPath, "utf-8");
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       fail(`Failed to read retro file: ${message}`, { json: isJson });
@@ -10889,26 +10299,26 @@ function registerVerifyEnvCommand(program) {
 }
 
 // src/commands/retry.ts
-import { join as join32 } from "path";
+import { join as join30 } from "path";
 
 // src/lib/retry-state.ts
-import { existsSync as existsSync33, readFileSync as readFileSync29, writeFileSync as writeFileSync18 } from "fs";
-import { join as join31 } from "path";
+import { existsSync as existsSync32, readFileSync as readFileSync28, writeFileSync as writeFileSync17 } from "fs";
+import { join as join29 } from "path";
 var RETRIES_FILE = ".story_retries";
 var FLAGGED_FILE = ".flagged_stories";
 var LINE_PATTERN = /^([^=]+)=(\d+)$/;
 function retriesPath(dir) {
-  return join31(dir, RETRIES_FILE);
+  return join29(dir, RETRIES_FILE);
 }
 function flaggedPath(dir) {
-  return join31(dir, FLAGGED_FILE);
+  return join29(dir, FLAGGED_FILE);
 }
 function readRetries(dir) {
   const filePath = retriesPath(dir);
-  if (!existsSync33(filePath)) {
+  if (!existsSync32(filePath)) {
     return /* @__PURE__ */ new Map();
   }
-  const raw = readFileSync29(filePath, "utf-8");
+  const raw = readFileSync28(filePath, "utf-8");
   const result = /* @__PURE__ */ new Map();
   for (const line of raw.split("\n")) {
     const trimmed = line.trim();
@@ -10930,7 +10340,7 @@ function writeRetries(dir, retries) {
   for (const [key, count] of retries) {
     lines.push(`${key}=${count}`);
   }
-  writeFileSync18(filePath, lines.length > 0 ? lines.join("\n") + "\n" : "", "utf-8");
+  writeFileSync17(filePath, lines.length > 0 ? lines.join("\n") + "\n" : "", "utf-8");
 }
 function resetRetry(dir, storyKey) {
   if (storyKey) {
@@ -10945,15 +10355,15 @@ function resetRetry(dir, storyKey) {
 }
 function readFlaggedStories(dir) {
   const filePath = flaggedPath(dir);
-  if (!existsSync33(filePath)) {
+  if (!existsSync32(filePath)) {
     return [];
   }
-  const raw = readFileSync29(filePath, "utf-8");
+  const raw = readFileSync28(filePath, "utf-8");
   return raw.split("\n").map((l) => l.trim()).filter((l) => l !== "");
 }
 function writeFlaggedStories(dir, stories) {
   const filePath = flaggedPath(dir);
-  writeFileSync18(filePath, stories.length > 0 ? stories.join("\n") + "\n" : "", "utf-8");
+  writeFileSync17(filePath, stories.length > 0 ? stories.join("\n") + "\n" : "", "utf-8");
 }
 function removeFlaggedStory(dir, key) {
   const stories = readFlaggedStories(dir);
@@ -10973,7 +10383,7 @@ function registerRetryCommand(program) {
   program.command("retry").description("Manage retry state for stories").option("--reset", "Clear retry counters and flagged stories").option("--story <key>", "Target a specific story key (used with --reset or --status)").option("--status", "Show retry status for all stories").action((_options, cmd) => {
     const opts = cmd.optsWithGlobals();
     const isJson = opts.json === true;
-    const dir = join32(process.cwd(), RALPH_SUBDIR);
+    const dir = join30(process.cwd(), RALPH_SUBDIR);
     if (opts.story && !isValidStoryKey3(opts.story)) {
       if (isJson) {
         jsonOutput({ status: "fail", message: `Invalid story key: ${opts.story}` });
@@ -11172,634 +10582,217 @@ function registerValidateCommand(program) {
     process.exitCode = allPassed ? 0 : 1;
   });
 }
-function reportError(msg, isJson) {
-  if (isJson) jsonOutput({ status: "fail", message: msg });
-  else fail(msg);
-  process.exitCode = 1;
-}
-function getFailures(p) {
-  return p.perAC.filter((a) => a.status === "failed" || a.status === "blocked").map((a) => {
-    const ac = getACById(a.acId);
-    return {
-      acId: a.acId,
-      description: ac?.description ?? "unknown",
-      command: ac?.command,
-      output: a.lastError ?? "",
-      attempts: a.attempts,
-      blocker: a.status === "blocked" ? "blocked" : "failed"
-    };
-  });
-}
-function outputJson(p, cycles, allPassed) {
-  jsonOutput({
-    status: allPassed ? "pass" : "fail",
-    total: p.total,
-    passed: p.passed,
-    failed: p.failed,
-    blocked: p.blocked,
-    remaining: p.remaining,
-    cycles,
-    gate: allPassed ? "RELEASE GATE: PASS -- v1.0 ready" : "RELEASE GATE: FAIL",
-    failures: getFailures(p)
-  });
-}
-function outputCi(p, allPassed) {
-  if (allPassed) console.log("RELEASE GATE: PASS -- v1.0 ready");
-  else console.log(`RELEASE GATE: FAIL (${p.passed}/${p.total} passed, ${p.failed} failed, ${p.blocked} blocked)`);
-}
-function outputHuman(p, cycles, allPassed) {
-  console.log(`Total: ${p.total} | Passed: ${p.passed} | Failed: ${p.failed} | Blocked: ${p.blocked} | Cycles: ${cycles}`);
-  if (allPassed) {
-    ok("RELEASE GATE: PASS -- v1.0 ready");
-    return;
-  }
-  for (const f of getFailures(p)) {
-    console.log(`  AC ${f.acId}: ${f.description}`);
-    if (f.command) console.log(`    Command: ${f.command}`);
-    if (f.output) console.log(`    Output: ${f.output}`);
-    console.log(`    Attempts: ${f.attempts}`);
-    console.log(`    Blocker: ${f.blocker}`);
-  }
-  fail("RELEASE GATE: FAIL");
-}
-
-// src/commands/progress.ts
-function registerProgressCommand(program) {
-  program.command("progress").description("Update live run progress in sprint-state.json").option("--story <key>", "Set run.currentStory").option("--phase <phase>", "Set run.currentPhase (create|dev|review|verify)").option("--action <text>", "Set run.lastAction").option("--ac-progress <progress>", 'Set run.acProgress (e.g., "4/12")').option("--clear", "Clear all run progress fields to null").action((opts, cmd) => {
-    const globalOpts = cmd.optsWithGlobals();
-    const isJson = globalOpts.json;
-    const validPhases = ["create", "dev", "review", "verify"];
-    if (opts.phase !== void 0 && !validPhases.includes(opts.phase)) {
-      fail(`Invalid phase "${opts.phase}". Must be one of: ${validPhases.join(", ")}`, { json: isJson });
-      process.exitCode = 1;
-      return;
-    }
-    if (opts.clear) {
-      const result2 = clearRunProgress2();
-      if (result2.success) {
-        if (isJson) {
-          jsonOutput({ status: "ok", cleared: true });
-        } else {
-          ok("Run progress cleared");
-        }
-      } else {
-        fail(result2.error, { json: isJson });
-        process.exitCode = 1;
-      }
-      return;
-    }
-    const update = {
-      ...opts.story !== void 0 && { currentStory: opts.story },
-      ...opts.phase !== void 0 && { currentPhase: opts.phase },
-      ...opts.action !== void 0 && { lastAction: opts.action },
-      ...opts.acProgress !== void 0 && { acProgress: opts.acProgress }
-    };
-    if (Object.keys(update).length === 0) {
-      fail("No progress fields specified. Use --story, --phase, --action, --ac-progress, or --clear.", { json: isJson });
-      process.exitCode = 1;
-      return;
-    }
-    const result = updateRunProgress2(update);
-    if (result.success) {
-      if (isJson) {
-        jsonOutput({ status: "ok", updated: update });
-      } else {
-        ok("Run progress updated");
-      }
-    } else {
-      fail(result.error, { json: isJson });
-      process.exitCode = 1;
-    }
-  });
-}
-
-// src/commands/observability-gate.ts
-function registerObservabilityGateCommand(program) {
-  program.command("observability-gate").description("Check observability coverage against targets (commit gate)").option("--json", "Machine-readable JSON output").option("--min-static <percent>", "Override static coverage target").option("--min-runtime <percent>", "Override runtime coverage target").action((opts, cmd) => {
-    const globalOpts = cmd.optsWithGlobals();
-    const isJson = opts.json === true || globalOpts.json === true;
-    const root = process.cwd();
-    const overrides = {};
-    if (opts.minStatic !== void 0) {
-      const parsed = parseInt(opts.minStatic, 10);
-      if (isNaN(parsed) || parsed < 0 || parsed > 100) {
-        if (isJson) {
-          jsonOutput({ status: "error", message: "--min-static must be a number between 0 and 100" });
-        } else {
-          fail("--min-static must be a number between 0 and 100");
-        }
-        process.exitCode = 1;
-        return;
-      }
-      overrides.staticTarget = parsed;
-    }
-    if (opts.minRuntime !== void 0) {
-      const parsed = parseInt(opts.minRuntime, 10);
-      if (isNaN(parsed) || parsed < 0 || parsed > 100) {
-        if (isJson) {
-          jsonOutput({ status: "error", message: "--min-runtime must be a number between 0 and 100" });
-        } else {
-          fail("--min-runtime must be a number between 0 and 100");
-        }
-        process.exitCode = 1;
-        return;
-      }
-      overrides.runtimeTarget = parsed;
-    }
-    const result = checkObservabilityCoverageGate(root, overrides);
-    if (!result.success) {
-      if (isJson) {
-        jsonOutput({ status: "error", message: result.error });
-      } else {
-        fail(`Observability gate error: ${result.error}`);
-      }
-      process.exitCode = 1;
-      return;
-    }
-    const gate = result.data;
-    if (isJson) {
-      jsonOutput({
-        status: gate.passed ? "pass" : "fail",
-        passed: gate.passed,
-        static: {
-          current: gate.staticResult.current,
-          target: gate.staticResult.target,
-          met: gate.staticResult.met,
-          gap: gate.staticResult.gap
-        },
-        runtime: gate.runtimeResult ? {
-          current: gate.runtimeResult.current,
-          target: gate.runtimeResult.target,
-          met: gate.runtimeResult.met,
-          gap: gate.runtimeResult.gap
-        } : null,
-        gaps: gate.gapSummary.map((g) => ({
-          file: g.file,
-          line: g.line,
-          type: g.type,
-          description: g.description
-        }))
-      });
-    } else {
-      const staticLine = `Static: ${gate.staticResult.current}% / ${gate.staticResult.target}% target`;
-      if (gate.passed) {
-        ok(`Observability gate passed. ${staticLine}`);
-        if (gate.runtimeResult) {
-          ok(`Runtime: ${gate.runtimeResult.current}% / ${gate.runtimeResult.target}% target`);
-        }
-      } else {
-        fail(`Observability gate failed. ${staticLine}`);
-        if (gate.runtimeResult && !gate.runtimeResult.met) {
-          fail(`Runtime: ${gate.runtimeResult.current}% / ${gate.runtimeResult.target}% target`);
-        }
-        if (gate.gapSummary.length > 0) {
-          fail("Gaps:");
-          const shown = gate.gapSummary.slice(0, 5);
-          for (const g of shown) {
-            fail(`  ${g.file}:${g.line} \u2014 ${g.description}`);
-          }
-          if (gate.gapSummary.length > 5) {
-            fail(`  ... and ${gate.gapSummary.length - 5} more.`);
-          }
-        }
-        fail("Add logging to flagged functions. Run: codeharness observability-gate for details.");
-      }
-    }
-    if (!gate.passed) {
-      process.exitCode = 1;
-    }
-  });
-}
-
-// src/modules/audit/dimensions.ts
-import { existsSync as existsSync34, readFileSync as readFileSync30, readdirSync as readdirSync7 } from "fs";
-import { join as join33 } from "path";
-function gap(dimension, description, suggestedFix) {
-  return { dimension, description, suggestedFix };
-}
-function dimOk(name, status, metric, gaps = []) {
-  return ok2({ name, status, metric, gaps });
-}
-function dimCatch(name, err) {
-  const msg = err instanceof Error ? err.message : String(err);
-  return dimOk(name, "warn", "error", [gap(name, `${name} check failed: ${msg}`, `Check ${name} configuration`)]);
-}
-function worstStatus(...statuses) {
-  if (statuses.includes("fail")) return "fail";
-  if (statuses.includes("warn")) return "warn";
-  return "pass";
-}
-async function checkObservability(projectDir) {
-  try {
-    const gaps = [];
-    let sStatus = "pass", sMetric = "";
-    const sr = analyze(projectDir);
-    if (isOk(sr)) {
-      const d = sr.data;
-      if (d.skipped) {
-        sStatus = "warn";
-        sMetric = `static: skipped (${d.skipReason ?? "unknown"})`;
-        gaps.push(gap("observability", `Static analysis skipped: ${d.skipReason ?? "Semgrep not installed"}`, "Install Semgrep: pip install semgrep"));
-      } else {
-        const n = d.gaps.length;
-        sMetric = `static: ${n} gap${n !== 1 ? "s" : ""}`;
-        if (n > 0) {
-          sStatus = "warn";
-          for (const g of d.gaps) gaps.push(gap("observability", `${g.file}:${g.line} \u2014 ${g.message}`, g.fix ?? "Add observability instrumentation"));
-        }
-      }
-    } else {
-      sStatus = "warn";
-      sMetric = "static: skipped (analysis failed)";
-      gaps.push(gap("observability", `Static analysis failed: ${sr.error}`, "Check Semgrep installation and rules configuration"));
-    }
-    let rStatus = "pass", rMetric = "";
-    try {
-      const rr = await validateRuntime(projectDir);
-      if (isOk(rr)) {
-        const d = rr.data;
-        if (d.skipped) {
-          rStatus = "warn";
-          rMetric = `runtime: skipped (${d.skipReason ?? "unknown"})`;
-          gaps.push(gap("observability", `Runtime validation skipped: ${d.skipReason ?? "backend unreachable"}`, "Start the observability stack: codeharness stack up"));
-        } else {
-          rMetric = `runtime: ${d.coveragePercent}%`;
-          if (d.coveragePercent < 50) {
-            rStatus = "warn";
-            gaps.push(gap("observability", `Runtime coverage low: ${d.coveragePercent}%`, "Add telemetry instrumentation to more modules"));
-          }
-        }
-      } else {
-        rStatus = "warn";
-        rMetric = "runtime: skipped (validation failed)";
-        gaps.push(gap("observability", `Runtime validation failed: ${rr.error}`, "Ensure observability backend is running"));
-      }
-    } catch {
-      rStatus = "warn";
-      rMetric = "runtime: skipped (error)";
-      gaps.push(gap("observability", "Runtime validation threw an unexpected error", "Check observability stack health"));
-    }
-    return dimOk("observability", worstStatus(sStatus, rStatus), `${sMetric}, ${rMetric}`, gaps);
-  } catch (err) {
-    return dimCatch("observability", err);
-  }
-}
-function checkTesting(projectDir) {
-  try {
-    const r = checkOnlyCoverage(projectDir);
-    if (!r.success) return dimOk("testing", "warn", "no coverage data", [gap("testing", "No coverage tool detected or coverage data unavailable", "Run tests with coverage: npm run test:coverage")]);
-    const pct = r.coveragePercent;
-    const gaps = [];
-    let status = "pass";
-    if (pct < 50) {
-      status = "fail";
-      gaps.push(gap("testing", `Test coverage critically low: ${pct}%`, "Add unit tests to increase coverage above 50%"));
-    } else if (pct < 80) {
-      status = "warn";
-      gaps.push(gap("testing", `Test coverage below target: ${pct}%`, "Add tests to reach 80% coverage target"));
-    }
-    return dimOk("testing", status, `${pct}%`, gaps);
-  } catch (err) {
-    return dimCatch("testing", err);
-  }
-}
-function checkDocumentation(projectDir) {
-  try {
-    const report = scanDocHealth(projectDir);
-    const gaps = [];
-    const { fresh, stale, missing } = report.summary;
-    let status = "pass";
-    if (missing > 0) {
-      status = "fail";
-      for (const doc of report.documents) if (doc.grade === "missing") gaps.push(gap("documentation", `Missing: ${doc.path} \u2014 ${doc.reason}`, `Create ${doc.path}`));
-    }
-    if (stale > 0) {
-      if (status !== "fail") status = "warn";
-      for (const doc of report.documents) if (doc.grade === "stale") gaps.push(gap("documentation", `Stale: ${doc.path} \u2014 ${doc.reason}`, `Update ${doc.path} to reflect current code`));
-    }
-    return dimOk("documentation", status, `${fresh} fresh, ${stale} stale, ${missing} missing`, gaps);
-  } catch (err) {
-    return dimCatch("documentation", err);
-  }
-}
-function checkVerification(projectDir) {
-  try {
-    const gaps = [];
-    const sprintPath = join33(projectDir, "_bmad-output", "implementation-artifacts", "sprint-status.yaml");
-    if (!existsSync34(sprintPath)) return dimOk("verification", "warn", "no sprint data", [gap("verification", "No sprint-status.yaml found", "Run sprint planning to create sprint status")]);
-    const vDir = join33(projectDir, "verification");
-    let proofCount = 0, totalChecked = 0;
-    if (existsSync34(vDir)) {
-      for (const file of readdirSafe(vDir)) {
-        if (!file.endsWith("-proof.md")) continue;
-        totalChecked++;
-        const r = parseProof(join33(vDir, file));
-        if (isOk(r) && r.data.passed) {
-          proofCount++;
-        } else {
-          gaps.push(gap("verification", `Story ${file.replace("-proof.md", "")} proof incomplete or failing`, `Run codeharness verify ${file.replace("-proof.md", "")}`));
-        }
-      }
-    }
-    let status = "pass";
-    if (totalChecked === 0) {
-      status = "warn";
-      gaps.push(gap("verification", "No verification proofs found", "Run codeharness verify for completed stories"));
-    } else if (proofCount < totalChecked) {
-      status = "warn";
-    }
-    return dimOk("verification", status, totalChecked > 0 ? `${proofCount}/${totalChecked} verified` : "no proofs", gaps);
-  } catch (err) {
-    return dimCatch("verification", err);
-  }
-}
-function checkInfrastructure(projectDir) {
-  try {
-    const dfPath = join33(projectDir, "Dockerfile");
-    if (!existsSync34(dfPath)) return dimOk("infrastructure", "fail", "no Dockerfile", [gap("infrastructure", "No Dockerfile found", "Create a Dockerfile for containerized deployment")]);
-    let content;
-    try {
-      content = readFileSync30(dfPath, "utf-8");
-    } catch {
-      return dimOk("infrastructure", "warn", "Dockerfile unreadable", [gap("infrastructure", "Dockerfile exists but could not be read", "Check Dockerfile permissions")]);
-    }
-    const fromLines = content.split("\n").filter((l) => /^\s*FROM\s+/i.test(l));
-    if (fromLines.length === 0) return dimOk("infrastructure", "fail", "invalid Dockerfile", [gap("infrastructure", "Dockerfile has no FROM instruction", "Add a FROM instruction with a pinned base image")]);
-    const gaps = [];
-    let hasUnpinned = false;
-    for (const line of fromLines) {
-      const ref = line.replace(/^\s*FROM\s+/i, "").split(/\s+/)[0];
-      if (ref.endsWith(":latest")) {
-        hasUnpinned = true;
-        gaps.push(gap("infrastructure", `Unpinned base image: ${ref}`, `Pin ${ref} to a specific version tag`));
-      } else if (!ref.includes(":") && !ref.includes("@")) {
-        hasUnpinned = true;
-        gaps.push(gap("infrastructure", `Unpinned base image (no tag): ${ref}`, `Pin ${ref} to a specific version tag (e.g., ${ref}:22-slim)`));
-      }
-    }
-    const status = hasUnpinned ? "warn" : "pass";
-    const metric = hasUnpinned ? `Dockerfile exists (${gaps.length} issue${gaps.length !== 1 ? "s" : ""})` : "Dockerfile valid";
-    return dimOk("infrastructure", status, metric, gaps);
-  } catch (err) {
-    return dimCatch("infrastructure", err);
-  }
-}
-function readdirSafe(dir) {
-  try {
-    return readdirSync7(dir);
-  } catch {
-    return [];
-  }
-}
-
-// src/modules/audit/report.ts
-var STATUS_PREFIX = {
-  pass: "[OK]",
-  fail: "[FAIL]",
-  warn: "[WARN]"
-};
-function formatAuditHuman(result) {
-  const lines = [];
-  for (const dimension of Object.values(result.dimensions)) {
-    const prefix = STATUS_PREFIX[dimension.status] ?? "[WARN]";
-    lines.push(`${prefix} ${dimension.name}: ${dimension.metric}`);
-    for (const gap2 of dimension.gaps) {
-      lines.push(`  [WARN] ${gap2.description} -- fix: ${gap2.suggestedFix}`);
-    }
-  }
-  const overallPrefix = STATUS_PREFIX[result.overallStatus] ?? "[WARN]";
-  lines.push("");
-  lines.push(
-    `${overallPrefix} Audit complete: ${result.gapCount} gap${result.gapCount !== 1 ? "s" : ""} found (${result.durationMs}ms)`
-  );
-  return lines;
-}
-function formatAuditJson(result) {
-  return result;
-}
-
-// src/modules/audit/fix-generator.ts
-import { existsSync as existsSync35, writeFileSync as writeFileSync19, mkdirSync as mkdirSync11 } from "fs";
-import { join as join34, dirname as dirname8 } from "path";
-function buildStoryKey(gap2, index) {
-  const safeDimension = gap2.dimension.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
-  return `audit-fix-${safeDimension}-${index}`;
-}
-function buildStoryMarkdown(gap2, key) {
-  return [
-    `# Fix: ${gap2.dimension} \u2014 ${gap2.description}`,
-    "",
-    "Status: backlog",
-    "",
-    "## Story",
-    "",
-    `As an operator, I need ${gap2.description} fixed so that audit compliance improves.`,
-    "",
-    "## Acceptance Criteria",
-    "",
-    `1. **Given** ${gap2.description}, **When** the fix is applied, **Then** ${gap2.suggestedFix}.`,
-    "",
-    "## Dev Notes",
-    "",
-    "This is an auto-generated fix story created by `codeharness audit --fix`.",
-    `**Audit Gap:** ${gap2.dimension}: ${gap2.description}`,
-    `**Suggested Fix:** ${gap2.suggestedFix}`,
-    ""
-  ].join("\n");
-}
-function generateFixStories(auditResult) {
-  try {
-    const stories = [];
-    let created = 0;
-    let skipped = 0;
-    const artifactsDir = join34(
-      process.cwd(),
-      "_bmad-output",
-      "implementation-artifacts"
-    );
-    for (const dimension of Object.values(auditResult.dimensions)) {
-      for (let i = 0; i < dimension.gaps.length; i++) {
-        const gap2 = dimension.gaps[i];
-        const key = buildStoryKey(gap2, i + 1);
-        const filePath = join34(artifactsDir, `${key}.md`);
-        if (existsSync35(filePath)) {
-          stories.push({
-            key,
-            filePath,
-            gap: gap2,
-            skipped: true,
-            skipReason: "Story file already exists"
-          });
-          skipped++;
-          continue;
-        }
-        const markdown = buildStoryMarkdown(gap2, key);
-        mkdirSync11(dirname8(filePath), { recursive: true });
-        writeFileSync19(filePath, markdown, "utf-8");
-        stories.push({ key, filePath, gap: gap2, skipped: false });
-        created++;
-      }
-    }
-    return ok2({ stories, created, skipped });
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    return fail2(`Failed to generate fix stories: ${msg}`);
-  }
+function reportError(msg, isJson) {
+  if (isJson) jsonOutput({ status: "fail", message: msg });
+  else fail(msg);
+  process.exitCode = 1;
 }
-function addFixStoriesToState(stories) {
-  const newStories = stories.filter((s) => !s.skipped);
-  if (newStories.length === 0) {
-    return ok2(void 0);
-  }
-  const stateResult = getSprintState2();
-  if (!stateResult.success) {
-    return fail2(stateResult.error);
-  }
-  const current = stateResult.data;
-  const updatedStories = { ...current.stories };
-  for (const story of newStories) {
-    updatedStories[story.key] = {
-      status: "backlog",
-      attempts: 0,
-      lastAttempt: null,
-      lastError: null,
-      proofPath: null,
-      acResults: null
+function getFailures(p) {
+  return p.perAC.filter((a) => a.status === "failed" || a.status === "blocked").map((a) => {
+    const ac = getACById(a.acId);
+    return {
+      acId: a.acId,
+      description: ac?.description ?? "unknown",
+      command: ac?.command,
+      output: a.lastError ?? "",
+      attempts: a.attempts,
+      blocker: a.status === "blocked" ? "blocked" : "failed"
     };
-  }
-  const updatedSprint = computeSprintCounts2(updatedStories);
-  return writeStateAtomic2({
-    ...current,
-    sprint: updatedSprint,
-    stories: updatedStories
   });
 }
-
-// src/modules/audit/index.ts
-async function runAudit2(projectDir) {
-  const start = performance.now();
-  const [
-    obsResult,
-    testResult,
-    docResult,
-    verifyResult,
-    infraResult
-  ] = await Promise.all([
-    checkObservability(projectDir),
-    Promise.resolve(checkTesting(projectDir)),
-    Promise.resolve(checkDocumentation(projectDir)),
-    Promise.resolve(checkVerification(projectDir)),
-    Promise.resolve(checkInfrastructure(projectDir))
-  ]);
-  const dimensions = {};
-  const allResults = [obsResult, testResult, docResult, verifyResult, infraResult];
-  for (const result of allResults) {
-    if (result.success) {
-      dimensions[result.data.name] = result.data;
-    }
-  }
-  const statuses = Object.values(dimensions).map((d) => d.status);
-  const overallStatus = computeOverallStatus(statuses);
-  const gapCount = Object.values(dimensions).reduce((sum, d) => sum + d.gaps.length, 0);
-  const durationMs = Math.round(performance.now() - start);
-  return ok2({ dimensions, overallStatus, gapCount, durationMs });
+function outputJson(p, cycles, allPassed) {
+  jsonOutput({
+    status: allPassed ? "pass" : "fail",
+    total: p.total,
+    passed: p.passed,
+    failed: p.failed,
+    blocked: p.blocked,
+    remaining: p.remaining,
+    cycles,
+    gate: allPassed ? "RELEASE GATE: PASS -- v1.0 ready" : "RELEASE GATE: FAIL",
+    failures: getFailures(p)
+  });
 }
-function computeOverallStatus(statuses) {
-  if (statuses.includes("fail")) return "fail";
-  if (statuses.includes("warn")) return "warn";
-  return "pass";
+function outputCi(p, allPassed) {
+  if (allPassed) console.log("RELEASE GATE: PASS -- v1.0 ready");
+  else console.log(`RELEASE GATE: FAIL (${p.passed}/${p.total} passed, ${p.failed} failed, ${p.blocked} blocked)`);
+}
+function outputHuman(p, cycles, allPassed) {
+  console.log(`Total: ${p.total} | Passed: ${p.passed} | Failed: ${p.failed} | Blocked: ${p.blocked} | Cycles: ${cycles}`);
+  if (allPassed) {
+    ok("RELEASE GATE: PASS -- v1.0 ready");
+    return;
+  }
+  for (const f of getFailures(p)) {
+    console.log(`  AC ${f.acId}: ${f.description}`);
+    if (f.command) console.log(`    Command: ${f.command}`);
+    if (f.output) console.log(`    Output: ${f.output}`);
+    console.log(`    Attempts: ${f.attempts}`);
+    console.log(`    Blocker: ${f.blocker}`);
+  }
+  fail("RELEASE GATE: FAIL");
 }
 
-// src/commands/audit.ts
-function registerAuditCommand(program) {
-  program.command("audit").description("Check all compliance dimensions and report project health").option("--json", "Output in machine-readable JSON format").option("--fix", "Generate fix stories for every gap found").action(async (opts, cmd) => {
+// src/commands/progress.ts
+function registerProgressCommand(program) {
+  program.command("progress").description("Update live run progress in sprint-state.json").option("--story <key>", "Set run.currentStory").option("--phase <phase>", "Set run.currentPhase (create|dev|review|verify)").option("--action <text>", "Set run.lastAction").option("--ac-progress <progress>", 'Set run.acProgress (e.g., "4/12")').option("--clear", "Clear all run progress fields to null").action((opts, cmd) => {
     const globalOpts = cmd.optsWithGlobals();
-    const isJson = opts.json === true || globalOpts.json === true;
-    const isFix = opts.fix === true;
-    const preconditions = runPreconditions();
-    if (!preconditions.canProceed) {
-      if (isJson) {
-        jsonOutput({
-          status: "fail",
-          message: "Harness not initialized -- run codeharness init first"
-        });
+    const isJson = globalOpts.json;
+    const validPhases = ["create", "dev", "review", "verify"];
+    if (opts.phase !== void 0 && !validPhases.includes(opts.phase)) {
+      fail(`Invalid phase "${opts.phase}". Must be one of: ${validPhases.join(", ")}`, { json: isJson });
+      process.exitCode = 1;
+      return;
+    }
+    if (opts.clear) {
+      const result2 = clearRunProgress2();
+      if (result2.success) {
+        if (isJson) {
+          jsonOutput({ status: "ok", cleared: true });
+        } else {
+          ok("Run progress cleared");
+        }
       } else {
-        fail("Harness not initialized -- run codeharness init first");
+        fail(result2.error, { json: isJson });
+        process.exitCode = 1;
       }
+      return;
+    }
+    const update = {
+      ...opts.story !== void 0 && { currentStory: opts.story },
+      ...opts.phase !== void 0 && { currentPhase: opts.phase },
+      ...opts.action !== void 0 && { lastAction: opts.action },
+      ...opts.acProgress !== void 0 && { acProgress: opts.acProgress }
+    };
+    if (Object.keys(update).length === 0) {
+      fail("No progress fields specified. Use --story, --phase, --action, --ac-progress, or --clear.", { json: isJson });
       process.exitCode = 1;
       return;
     }
-    const result = await runAudit2(process.cwd());
-    if (!result.success) {
+    const result = updateRunProgress2(update);
+    if (result.success) {
       if (isJson) {
-        jsonOutput({ status: "fail", message: result.error });
+        jsonOutput({ status: "ok", updated: update });
       } else {
-        fail(result.error);
+        ok("Run progress updated");
       }
+    } else {
+      fail(result.error, { json: isJson });
       process.exitCode = 1;
-      return;
     }
-    let fixStories;
-    let fixStateError;
-    if (isFix) {
-      if (result.data.gapCount === 0) {
-        if (!isJson) {
-          ok("No gaps found -- nothing to fix");
+  });
+}
+
+// src/commands/observability-gate.ts
+function registerObservabilityGateCommand(program) {
+  program.command("observability-gate").description("Check observability coverage against targets (commit gate)").option("--json", "Machine-readable JSON output").option("--min-static <percent>", "Override static coverage target").option("--min-runtime <percent>", "Override runtime coverage target").action((opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    const isJson = opts.json === true || globalOpts.json === true;
+    const root = process.cwd();
+    const overrides = {};
+    if (opts.minStatic !== void 0) {
+      const parsed = parseInt(opts.minStatic, 10);
+      if (isNaN(parsed) || parsed < 0 || parsed > 100) {
+        if (isJson) {
+          jsonOutput({ status: "error", message: "--min-static must be a number between 0 and 100" });
+        } else {
+          fail("--min-static must be a number between 0 and 100");
         }
-      } else {
-        const fixResult = generateFixStories(result.data);
-        fixStories = fixResult;
-        if (fixResult.success) {
-          const stateResult = addFixStoriesToState(fixResult.data.stories);
-          if (!stateResult.success) {
-            fixStateError = stateResult.error;
-            if (!isJson) {
-              fail(`Failed to update sprint state: ${stateResult.error}`);
-            }
-          }
-          if (!isJson) {
-            info(`Generated ${fixResult.data.created} fix stories (${fixResult.data.skipped} skipped)`);
-          }
-        } else if (!isJson) {
-          fail(fixResult.error);
+        process.exitCode = 1;
+        return;
+      }
+      overrides.staticTarget = parsed;
+    }
+    if (opts.minRuntime !== void 0) {
+      const parsed = parseInt(opts.minRuntime, 10);
+      if (isNaN(parsed) || parsed < 0 || parsed > 100) {
+        if (isJson) {
+          jsonOutput({ status: "error", message: "--min-runtime must be a number between 0 and 100" });
+        } else {
+          fail("--min-runtime must be a number between 0 and 100");
         }
+        process.exitCode = 1;
+        return;
+      }
+      overrides.runtimeTarget = parsed;
+    }
+    const result = checkObservabilityCoverageGate(root, overrides);
+    if (!result.success) {
+      if (isJson) {
+        jsonOutput({ status: "error", message: result.error });
+      } else {
+        fail(`Observability gate error: ${result.error}`);
       }
+      process.exitCode = 1;
+      return;
     }
+    const gate = result.data;
     if (isJson) {
-      const jsonData = formatAuditJson(result.data);
-      if (isFix) {
-        if (result.data.gapCount === 0) {
-          jsonData.fixStories = [];
-        } else if (fixStories && fixStories.success) {
-          jsonData.fixStories = fixStories.data.stories.map((s) => ({
-            key: s.key,
-            filePath: s.filePath,
-            gap: s.gap,
-            ...s.skipped ? { skipped: true } : {}
-          }));
-          if (fixStateError) {
-            jsonData.fixStateError = fixStateError;
+      jsonOutput({
+        status: gate.passed ? "pass" : "fail",
+        passed: gate.passed,
+        static: {
+          current: gate.staticResult.current,
+          target: gate.staticResult.target,
+          met: gate.staticResult.met,
+          gap: gate.staticResult.gap
+        },
+        runtime: gate.runtimeResult ? {
+          current: gate.runtimeResult.current,
+          target: gate.runtimeResult.target,
+          met: gate.runtimeResult.met,
+          gap: gate.runtimeResult.gap
+        } : null,
+        gaps: gate.gapSummary.map((g) => ({
+          file: g.file,
+          line: g.line,
+          type: g.type,
+          description: g.description
+        }))
+      });
+    } else {
+      const staticLine = `Static: ${gate.staticResult.current}% / ${gate.staticResult.target}% target`;
+      if (gate.passed) {
+        ok(`Observability gate passed. ${staticLine}`);
+        if (gate.runtimeResult) {
+          ok(`Runtime: ${gate.runtimeResult.current}% / ${gate.runtimeResult.target}% target`);
+        }
+      } else {
+        fail(`Observability gate failed. ${staticLine}`);
+        if (gate.runtimeResult && !gate.runtimeResult.met) {
+          fail(`Runtime: ${gate.runtimeResult.current}% / ${gate.runtimeResult.target}% target`);
+        }
+        if (gate.gapSummary.length > 0) {
+          fail("Gaps:");
+          const shown = gate.gapSummary.slice(0, 5);
+          for (const g of shown) {
+            fail(`  ${g.file}:${g.line} \u2014 ${g.description}`);
+          }
+          if (gate.gapSummary.length > 5) {
+            fail(`  ... and ${gate.gapSummary.length - 5} more.`);
           }
-        } else if (fixStories && !fixStories.success) {
-          jsonData.fixStories = [];
-          jsonData.fixError = fixStories.error;
         }
-      }
-      jsonOutput(jsonData);
-    } else if (!isFix || result.data.gapCount > 0) {
-      const lines = formatAuditHuman(result.data);
-      for (const line of lines) {
-        console.log(line);
+        fail("Add logging to flagged functions. Run: codeharness observability-gate for details.");
       }
     }
-    if (result.data.overallStatus === "fail") {
+    if (!gate.passed) {
       process.exitCode = 1;
     }
   });
 }
 
+// src/commands/audit.ts
+function registerAuditCommand(program) {
+  program.command("audit").description("Check all compliance dimensions and report project health").option("--json", "Output in machine-readable JSON format").option("--fix", "Generate fix stories for every gap found").action(async (opts, cmd) => {
+    const globalOpts = cmd.optsWithGlobals();
+    const isJson = opts.json === true || globalOpts.json === true;
+    const isFix = opts.fix === true;
+    await executeAudit({ isJson, isFix });
+  });
+}
+
 // src/index.ts
-var VERSION = true ? "0.22.1" : "0.0.0-dev";
+var VERSION = true ? "0.23.0" : "0.0.0-dev";
 function createProgram() {
   const program = new Command();
   program.name("codeharness").description("Makes autonomous coding agents produce software that actually works").version(VERSION).option("--json", "Output in machine-readable JSON format");