hammoc 1.5.0 → 1.6.0

package/packages/server/resources/manual/10-project-board.md

@@ -85,7 +85,7 @@ Draft → Approved → In Progress → Ready for Review → Done
 - **QA Waived** — Quality review waived/skipped
 - **QA Failed** — Quality review failed, fixes needed
 - **QA Concerns** — Quality review raised concerns
-- **QA Fixed** — Fixes applied, ready for re-review
+- **QA Fixed** — The developer has recorded a fix for the current gate; ready for re-review
 
 Not all statuses are required. Use the context menu to change status directly. **Promoted** indicates an issue that has been escalated to a story or epic.
 
@@ -134,9 +134,10 @@ Click the **⋮** button on any card to open the context menu. Actions vary by c
   - **Complete Story** — Mark as Done without committing
   - **Request QA Review** — Re-request quality review
 - **QA Failed / QA Concerns:**
-  - **Apply QA Fix** — Apply fixes for QA issues
+  - **Apply QA Fix** — Apply fixes for QA issues (always offered)
+  - **Review Story** — Re-request QA review; also offered unless Hammoc has confirmed fixes are still pending for the current gate (e.g., legacy stories or external BMad projects)
 - **QA Fixed:**
-  - **Review Story** — Request re-review after fixes
+  - **Apply QA Fix** / **Review Story** — Apply further fixes, or request re-review
 - **Ready for Review / Ready for Done (no QA gate):**
   - **Review Story** — Request quality review
 

package/packages/server/resources/manual/11-bmad-method-integration.md

@@ -108,14 +108,16 @@ The Next Step Recommender analyzes the project state and suggests actions based
 
 Recommendations follow reverse workflow order (finish what's closest to done first):
 
-- **Priority 1:** QA Passed/Waived stories → Commit and mark Done, or re-request QA review → Dev agent
-- **Priority 2:** QA Fixed stories → Re-review → QA agent
-- **Priority 3:** QA Failed/Concerns stories → Apply QA fixes → Dev agent
-- **Priority 4:** Ready for Review stories (no QA gate) → Request QA review → QA agent
-- **Priority 5:** In Progress stories → Continue development → Dev agent
-- **Priority 6:** Approved stories → Start development (Dev), or re-validate with Validate and Fix / Validate Only → PO agent
-- **Priority 7:** Draft stories → Validate and Fix / Validate Only → PO agent
-- **Priority 8:** Create next story → SM agent (when no actionable stories)
+- **Priority 1:** QA Passed/Waived stories → Commit and mark Done, mark Done without committing, or re-request QA review → Dev/QA agent
+- **Priority 2:** QA Failed/Concerns stories → the next step depends on whether the developer has already recorded a fix for the *current* gate:
+  - Fix already applied for this gate → Request QA re-review → QA agent
+  - Fix still needed → Apply QA fixes → Dev agent
+  - State unknown (a story from before this tracking existed, an external BMad project, or a manually-edited gate) → **both** "Apply QA fixes" and "Request QA review" are offered (apply-fixes leading) so you choose
+- **Priority 3:** Ready for Review stories (no QA gate) → Request QA review → QA agent
+- **Priority 4:** In Progress stories → Continue development → Dev agent
+- **Priority 5:** Approved stories → Start development (Dev), or re-validate with Validate and Fix / Validate Only → PO agent
+- **Priority 6:** Draft stories → Validate and Fix / Validate Only → PO agent
+- **Priority 7:** Create next story → SM agent (when no actionable stories)
 
 **Phase 4: Completed** (all planned stories are Done)
 - Brainstorm new features → Analyst agent

package/packages/server/resources/manual/12-harness-workbench.md

@@ -2,6 +2,8 @@
 
 The **Harness Workbench** is the unified surface for managing everything Claude Code reads from the `.claude/` configuration tree — plugins, skills, MCP servers, hooks, slash commands, sub-agents, `CLAUDE.md`, and Hammoc-native `%snippets`. It lives inside each project's **Settings** tab (see §5.3) under the "Harness Workbench" group, so the workbench is always scoped to the project you're working on but can also reach the global (`~/.claude/`) versions of each item.
 
+The same Settings tab also hosts four sibling harness-engineering panels next to the Workbench (each a top-level nav item, not one of the Workbench's own sections): **BMad Settings** (§12.16, BMad projects only), **Context Builder** (§12.17), **Observability** (§12.18), and **Plugin Marketplace** (§12.19).
+
 ### 12.1 Layout
 
 The workbench has two stacked headers above an eight-section navigator:
@@ -31,7 +33,7 @@ A workbench-wide banner just above the navigator tells you how the project share
 
 The banner is derived from the project root's `.gitignore`. Edit the rules and the banner updates the next time the workbench refreshes.
 
-> An **Export bundle** action is planned for the Private mode banner so you can ship the current harness state to a teammate as a single file. The button is intentionally hidden until the export/import flow is fully wired — until then, copy individual files by hand or via the workbench's Project ↔ Global copy actions.
+> The Private mode banner surfaces an **Export** action on its right edge (in addition to the workbench-wide Bundle menu) so you can ship the current harness state to a teammate as a single `.zip` bundle. See §12.15 for the full export/import flow.
 
 ### 12.3 Share Badges
 
@@ -173,3 +175,82 @@ The dialog lists exactly which values were flagged (line numbers for text files,
 
 Every Markdown body in the workbench — skill body and raw view, skill bundle files, command body and raw view, agent system prompt and raw view, `CLAUDE.md` (both columns), snippet body — shows a small **Expand** button (⤢ icon) above the editor area. Clicking it opens a fullscreen overlay with the same CodeMirror instance, line wrapping, and a Markdown edit / preview toggle, so you can write long content without scrolling inside a narrow modal. Edits in the overlay sync back to the host panel through the same 300 ms debounce auto-save — there is no separate save button. Close the overlay with **X** or `Escape`. Read-only buffers (a plugin-scope file, a bundled snippet) show a small "read-only" chip in the overlay header.
 
+### 12.15 Bundle Export / Import (Team Sharing)
+
+When your project's `.claude/` tree is **fully git-ignored** (Mode B — typical when you use Hammoc itself to develop on Hammoc, or when your team intentionally keeps the harness out of source control), you can still share the entire workbench configuration with a teammate by exporting it as a single `.zip` bundle and importing on the other side. The workbench shows a **Bundle** menu (top-right of the workbench header, also surfaced as an **Export** button on the Mode B banner), with two actions:
+
+- **Export bundle** — Opens a dialog summarizing what will be packed (the five domain cards + `CLAUDE.md` + snippets) and lets you choose how secrets are handled:
+  - **Exclude (default)** — Secrets detected by the heuristic are stripped before packing; the recipient sees a *"N secrets removed"* toast after import. Use this when you want your teammate to fill in their own credentials.
+  - **Include as `${ENV_REF}` placeholders** — Detected secrets are replaced with named environment-variable references and a hint table lists which keys the recipient needs to set. Good for sharing a config skeleton without leaking real values.
+  - **Include explicit (with secrets)** — Plain-text secrets are packed as-is. This is the *"send it over secure DM and delete after use"* mode: you must check a second confirmation box before the dialog enables the download button, the resulting filename contains a visible `WITH-SECRETS` token, and a 5-second warning toast appears after the download starts.
+- **Import bundle** — Drop a `.zip` (or browse for one). Before anything is applied, Hammoc shows a preview of every incoming item alongside what already exists, with three per-item actions (Overwrite / Skip / Add only if missing) and three bulk-action shortcuts. Bundles tagged *"with secrets"* require the recipient to acknowledge a separate *"this bundle contains plaintext secrets"* checkbox before the apply button activates, and bundles produced by a newer Hammoc version (`bundleVersion` greater than what the local server supports) are rejected outright with an upgrade hint.
+
+The export/import flow only touches the workbench items themselves — `package.json`, repository code, and tracked files outside `.claude/` are never bundled. Bundles produced and consumed by the same Hammoc version are round-trip identical: re-importing your own export into an empty project reproduces the workbench cards byte-for-byte (handy for backups or for setting up a new dev machine).
+
+### 12.16 BMad Settings (core-config Editor)
+
+> Shown only for BMad projects (those with a `.bmad-core/` folder). For non-BMad projects this nav item is hidden entirely — no empty placeholder.
+
+A form-based editor for BMad's `core-config.yaml`, so you can change BMad's paths and flags without opening a terminal or text editor. It is a top-level item in the project Settings left nav (a sibling of the Harness Workbench, not one of its sections).
+
+Keys are organized into collapsible groups — **General**, **QA**, **PRD**, **Architecture**, and **Brownfield Epic** — and each value uses a widget matched to its type:
+
+- **Toggle** for boolean flags (e.g., Markdown Exploder, PRD Sharded)
+- **Path picker** for file/folder paths — a **Browse** button opens a file-tree dialog; paths are relative to the project root (e.g., Dev Story Location, QA Location)
+- **Text** for plain strings (e.g., PRD Version, Slash Prefix)
+- **Glob** with a live match preview that counts the files matching the pattern (e.g., Epic File Pattern)
+- **Drag-sortable list** for path arrays (e.g., Dev Load Always Files, Custom Technical Documents)
+
+Other behaviors:
+
+- **Auto-save** — Text/path/glob edits debounce-save (~300 ms); toggles and list changes save immediately. Saves write `.bmad-core/core-config.yaml` while preserving comments and key order.
+- **Raw YAML toggle** — A **Form / Raw** switch in the top-right lets you edit the file as raw YAML; switching back to Form preserves comments and ordering. A parse error keeps you in Raw mode until it is fixed.
+- **Unknown Keys** — Keys the form doesn't recognize (for example, a newer BMad schema) are preserved and listed read-only in an "Unknown Keys" section at the bottom; edit them in Raw mode.
+- **External-change banner** — If the file changes outside Hammoc while the panel is open, a banner with a **Reload** button appears.
+
+After you change a path such as **Dev Story Location**, the BMad agents (e.g., `/dev`) pick up the new value on their next run.
+
+### 12.17 Context Builder
+
+The **Context Builder** automatically injects a block of context into every new chat session, so you don't have to re-explain "what was I working on" each time. It does this by generating a Claude Code **SessionStart hook** for you. Available on all projects.
+
+You declare three kinds of content in the panel:
+
+- **Reference files** — Project files that are read fresh and injected at each session start. Each file shows its byte size and an approximate token count. If the combined size nears the SessionStart output cap an amber warning appears; past the hard cap (red), the content spills to a file plus a preview instead of being injected inline, so trim the list when warned.
+- **Dynamic variables** — Built-in values recomputed every session, each with an on/off toggle:
+  - **Current branch** — the active git branch
+  - **Active BMad story** — title and status of the most recently modified story file
+  - **Recent commits** — the most recent commit subjects (count configurable)
+  - **Today** — today's date
+  - **Uncommitted files** — count of files with uncommitted changes
+- **Custom commands** (advanced) — Arbitrary shell commands whose output is appended. Because these run automatically at every session start, each requires you to tick a confirmation checkbox ("I understand this command runs automatically at every session start"). Hammoc also flags commands that look like they contain a secret.
+
+When you save, Hammoc generates a hook script under the project's `.hammoc/` folder and registers a SessionStart entry in `.claude/settings.json`. In the **Hooks** panel (§12.7) that entry is marked **"Hammoc Context Builder"**; editing it by hand there raises a sync-loss warning, since the Context Builder owns it — change it from this panel instead. The token-size hints reuse the same approximation as Observability (§12.18).
+
+### 12.18 Observability
+
+The **Observability** panel is the feedback loop for harness tuning: it shows which tools get called and how much of the context window each harness element consumes. Available on all projects.
+
+**MCP / tool calls:**
+
+- A **timeline** of recent tool calls (server, tool, response time, and success / failed / no-response status) and an **aggregate chart** of calls per server and per tool with average response time and error counts.
+- **Filters** by server, tool, and time window (default: last 30 days).
+- Only call **metadata** is recorded — server, tool, timestamp, argument and response **sizes**, and duration. Argument and response **bodies are never stored**, so file contents and secrets don't leak into the log.
+
+**Token attribution:**
+
+- A bar chart of how many tokens each harness element contributes — project and global `CLAUDE.md`, each skill's `SKILL.md`, and the Context Builder's injected block — with an overlay showing the total against the current model's context window.
+- Inline hints show an **approximate** token count prefixed with `~` (a fast byte-based estimate), expressed two ways at once: as a percentage of the context window and as a share of the total harness prompt.
+- An **Exact count** button calls Anthropic's official token-count API and caches the result by file content; if the call fails, the approximation is kept.
+
+### 12.19 Plugin Marketplace
+
+The **Marketplace** panel lets you discover Claude Code plugins from the marketplaces registered on your machine, complementing the install/toggle view in the Plugins panel (§12.4). Available on all projects.
+
+- **Catalog** — One card per plugin parsed from each registered marketplace, showing name, description, version, author, category, a type badge (**Plugin** or **External MCP**), bundled-component counts, and an **Installed** badge when applicable.
+- **Filter & search** — By name, category, type, and installed state.
+- **Install / Uninstall guide** — Because Claude Code's plugin commands are interactive slash commands (not shell subcommands), the **Install** and **Uninstall** buttons open a dialog containing the exact command — e.g. `/plugin install <name>@<marketplace>` — with a **Copy** button. Paste it into your Claude CLI session to run it; plugin commands can't be executed from the Hammoc chat.
+- **Add marketplace** — A form takes a marketplace URL and produces the matching `/plugin marketplace add <url>` command to copy.
+- **Auto-refresh** — After you install or remove a plugin in your CLI session, Hammoc detects the on-disk change and updates both this catalog's **Installed** badges and the Plugins panel cards automatically.
+- **Resilience** — If one marketplace's catalog file can't be read, only that marketplace shows an error badge and the rest still load. If the installed-plugins file is in an unrecognized format, a warning banner notes that installed state may be incomplete.
+

package/packages/server/resources/manual/13-settings.md

@@ -36,8 +36,8 @@ Choose the default Claude model:
 - **Haiku** — Latest Haiku
 
 **Claude 4.x:**
-- Opus 4.7 (most capable, 1M context), 4.6, 4.5, 4.1, 4
-- Sonnet 4.5, 4
+- Opus 4.8 (most capable, 1M context), 4.7, 4.6, 4.5, 4.1, 4
+- Sonnet 4.6 (1M context), 4.5, 4
 - Haiku 4.5
 
 **Claude 3.x:**
@@ -107,8 +107,8 @@ The timeout resets on every activity. If overridden by an environment variable,
 Set the default thinking effort for new sessions:
 
 - **SDK Default** / Low / Medium / High / XHigh / Max
-- Max is available on Opus 4.6, Sonnet 4.6, and Opus 4.7
-- XHigh is available only on Opus 4.7 (and is the SDK default for that model)
+- Max is available on Opus 4.6, Sonnet 4.6, Opus 4.7, and Opus 4.8
+- XHigh is available on Opus 4.7 and Opus 4.8 (and is the SDK default for those models)
 - If the active model does not support the configured level, it falls back to High automatically — the saved preference is kept, only the request to the SDK is clamped
 - The chosen level is preserved while the active model is still resolving (no flicker back to Default during project switches)
 

package/packages/shared/dist/index.d.ts

@@ -25,6 +25,10 @@ export * from './types/dashboard.js';
 export * from './types/board.js';
 export { LogLevel, parseLogLevel } from './types/logger.js';
 export * from './types/harness.js';
+export * from './types/observability.js';
 export { splitMarkdownByH2, appendMarkdownSections, MarkdownH2Section, } from './utils/markdownSections.js';
 export * from './types/harnessBundle.js';
+export * from './types/bmadCoreConfig.js';
+export * from './types/contextBuilder.js';
+export * from './types/marketplace.js';
 //# sourceMappingURL=index.d.ts.map

package/packages/shared/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,gBAAgB,CAAC;AAG/B,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AAIrC,cAAc,oBAAoB,CAAC;AAGnC,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EACL,UAAU,EACV,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,aAAa,EACb,sBAAsB,EACtB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtD,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAIrF,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,4BAA4B,EAC5B,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG9F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,EAC3B,6BAA6B,EAC7B,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,eAAe,EACf,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,cAAc,uBAAuB,CAAC;AAGtC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG/E,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAG/F,cAAc,gBAAgB,CAAC;AAG/B,cAAc,qBAAqB,CAAC;AAGpC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAG5D,cAAc,oBAAoB,CAAC;AAGnC,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AAGrC,cAAc,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,gBAAgB,CAAC;AAG/B,cAAc,sBAAsB,CAAC;AAGrC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AAIrC,cAAc,oBAAoB,CAAC;AAGnC,cAAc,gBAAgB,CAAC;AAG/B,OAAO,EACL,UAAU,EACV,wBAAwB,EACxB,mBAAmB,EACnB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,YAAY,EACZ,aAAa,EACb,aAAa,EACb,sBAAsB,EACtB,YAAY,GACb,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EACL,cAAc,EACd,UAAU,EACV,gBAAgB,EAChB,oBAAoB,EACpB,qBAAqB,GACtB,MAAM,iBAAiB,CAAC;AAGzB,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAGtD,YAAY,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAIrF,OAAO,EACL,WAAW,EACX,mBAAmB,EACnB,cAAc,EACd,oBAAoB,EACpB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACnB,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,4BAA4B,EAC5B,0BAA0B,EAC1B,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAI5B,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAG9F,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,iBAAiB,EACjB,mBAAmB,EACnB,sBAAsB,EACtB,gBAAgB,EAChB,2BAA2B,EAC3B,6BAA6B,EAC7B,eAAe,EACf,0BAA0B,EAC1B,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,EACL,eAAe,EACf,cAAc,EACd,cAAc,EACd,uBAAuB,EACvB,iBAAiB,EACjB,YAAY,EACZ,gBAAgB,EAChB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,oBAAoB,CAAC;AAG5B,cAAc,uBAAuB,CAAC;AAGtC,cAAc,uBAAuB,CAAC;AAGtC,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAG/E,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAG/F,cAAc,gBAAgB,CAAC;AAG/B,cAAc,qBAAqB,CAAC;AAGpC,cAAc,sBAAsB,CAAC;AAGrC,cAAc,kBAAkB,CAAC;AAGjC,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAG5D,cAAc,oBAAoB,CAAC;AAGnC,cAAc,0BAA0B,CAAC;AAGzC,OAAO,EACL,iBAAiB,EACjB,sBAAsB,EACtB,iBAAiB,GAClB,MAAM,6BAA6B,CAAC;AAGrC,cAAc,0BAA0B,CAAC;AAGzC,cAAc,2BAA2B,CAAC;AAG1C,cAAc,2BAA2B,CAAC;AAG1C,cAAc,wBAAwB,CAAC"}

package/packages/shared/dist/index.js

@@ -47,8 +47,16 @@ export * from './types/board.js';
 export { LogLevel, parseLogLevel } from './types/logger.js';
 // Story 28.0.5: Harness workbench shared types (Epic 28 common infra)
 export * from './types/harness.js';
+// Story 31.3: Observability — MCP call log + token attribution (Epic 31)
+export * from './types/observability.js';
 // Story 29.1: Markdown H2 split/append helpers (shared by server & client)
 export { splitMarkdownByH2, appendMarkdownSections, } from './utils/markdownSections.js';
 // Story 30.3: Harness Export/Import bundle DTOs
 export * from './types/harnessBundle.js';
+// Story 31.1: BMad core-config.yaml editor DTOs (Epic 31)
+export * from './types/bmadCoreConfig.js';
+// Story 31.2: SessionStart context-builder DTOs (Epic 31)
+export * from './types/contextBuilder.js';
+// Story 31.4: Plugin marketplace catalog DTOs (Epic 31)
+export * from './types/marketplace.js';
 //# sourceMappingURL=index.js.map

package/packages/shared/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,cAAc,gBAAgB,CAAC;AAE/B,+CAA+C;AAC/C,cAAc,sBAAsB,CAAC;AAErC,2CAA2C;AAC3C,cAAc,sBAAsB,CAAC;AAErC,4DAA4D;AAC5D,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AAErC,kDAAkD;AAClD,2FAA2F;AAC3F,cAAc,oBAAoB,CAAC;AAEnC,iDAAiD;AACjD,cAAc,gBAAgB,CAAC;AAE/B,mDAAmD;AACnD,OAAO,EAGL,mBAAmB,EACnB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,yBAAyB;AACzB,OAAO,EAKL,YAAY,GACb,MAAM,iBAAiB,CAAC;AAEzB,0CAA0C;AAC1C,OAAO,EAGL,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC;AAEzB,iCAAiC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAKtD,gDAAgD;AAChD,kDAAkD;AAClD,OAAO,EAGL,cAAc,GAYf,MAAM,oBAAoB,CAAC;AAM5B,gDAAgD;AAChD,OAAO,EAIL,mBAAmB,EASnB,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAiBhC,qEAAqE;AACrE,cAAc,uBAAuB,CAAC;AAEtC,uDAAuD;AACvD,cAAc,uBAAuB,CAAC;AAEtC,iCAAiC;AACjC,cAAc,kBAAkB,CAAC;AAEjC,kCAAkC;AAClC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,uCAAuC;AACvC,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE/F,kCAAkC;AAClC,cAAc,gBAAgB,CAAC;AAE/B,2CAA2C;AAC3C,cAAc,qBAAqB,CAAC;AAEpC,8BAA8B;AAC9B,cAAc,sBAAsB,CAAC;AAErC,oCAAoC;AACpC,cAAc,kBAAkB,CAAC;AAEjC,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE5D,sEAAsE;AACtE,cAAc,oBAAoB,CAAC;AAEnC,2EAA2E;AAC3E,OAAO,EACL,iBAAiB,EACjB,sBAAsB,GAEvB,MAAM,6BAA6B,CAAC;AAErC,gDAAgD;AAChD,cAAc,0BAA0B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,uCAAuC;AACvC,cAAc,gBAAgB,CAAC;AAE/B,+CAA+C;AAC/C,cAAc,sBAAsB,CAAC;AAErC,2CAA2C;AAC3C,cAAc,sBAAsB,CAAC;AAErC,4DAA4D;AAC5D,cAAc,oBAAoB,CAAC;AACnC,cAAc,sBAAsB,CAAC;AAErC,kDAAkD;AAClD,2FAA2F;AAC3F,cAAc,oBAAoB,CAAC;AAEnC,iDAAiD;AACjD,cAAc,gBAAgB,CAAC;AAE/B,mDAAmD;AACnD,OAAO,EAGL,mBAAmB,EACnB,eAAe,GAChB,MAAM,iBAAiB,CAAC;AAEzB,yBAAyB;AACzB,OAAO,EAKL,YAAY,GACb,MAAM,iBAAiB,CAAC;AAEzB,0CAA0C;AAC1C,OAAO,EAGL,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC;AAEzB,iCAAiC;AACjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAKtD,gDAAgD;AAChD,kDAAkD;AAClD,OAAO,EAGL,cAAc,GAYf,MAAM,oBAAoB,CAAC;AAM5B,gDAAgD;AAChD,OAAO,EAIL,mBAAmB,EASnB,mBAAmB,GAEpB,MAAM,wBAAwB,CAAC;AAiBhC,qEAAqE;AACrE,cAAc,uBAAuB,CAAC;AAEtC,uDAAuD;AACvD,cAAc,uBAAuB,CAAC;AAEtC,iCAAiC;AACjC,cAAc,kBAAkB,CAAC;AAEjC,kCAAkC;AAClC,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE/E,uCAAuC;AACvC,OAAO,EAAE,mBAAmB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAE/F,kCAAkC;AAClC,cAAc,gBAAgB,CAAC;AAE/B,2CAA2C;AAC3C,cAAc,qBAAqB,CAAC;AAEpC,8BAA8B;AAC9B,cAAc,sBAAsB,CAAC;AAErC,oCAAoC;AACpC,cAAc,kBAAkB,CAAC;AAEjC,kDAAkD;AAClD,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE5D,sEAAsE;AACtE,cAAc,oBAAoB,CAAC;AAEnC,yEAAyE;AACzE,cAAc,0BAA0B,CAAC;AAEzC,2EAA2E;AAC3E,OAAO,EACL,iBAAiB,EACjB,sBAAsB,GAEvB,MAAM,6BAA6B,CAAC;AAErC,gDAAgD;AAChD,cAAc,0BAA0B,CAAC;AAEzC,0DAA0D;AAC1D,cAAc,2BAA2B,CAAC;AAE1C,0DAA0D;AAC1D,cAAc,2BAA2B,CAAC;AAE1C,wDAAwD;AACxD,cAAc,wBAAwB,CAAC"}

package/packages/shared/dist/types/bmadCoreConfig.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Typed shape of the 18 known keys of `.bmad-core/core-config.yaml`.
+ *
+ * Every key is optional: a config that omits a key is valid, and the form
+ * renders an empty widget for it. The nested groups (`qa`, `prd`,
+ * `architecture`, `brownfieldEpic`) mirror the on-disk YAML nesting so the
+ * value of a leaf such as `prd.epicFilePattern` is reachable at the same path
+ * the AST patch op uses (`['prd', 'epicFilePattern']`).
+ *
+ * `customTechnicalDocuments` is `string[] | null` because the canonical
+ * default on disk is the literal `null` (an explicit "no extra docs" marker)
+ * that the form promotes to an array on first item add.
+ */
+export interface BmadCoreConfigKnownKeys {
+    markdownExploder?: boolean;
+    qa?: {
+        qaLocation?: string;
+    };
+    prd?: {
+        prdFile?: string;
+        prdVersion?: string;
+        prdSharded?: boolean;
+        prdShardedLocation?: string;
+        epicFilePattern?: string;
+    };
+    architecture?: {
+        architectureFile?: string;
+        architectureVersion?: string;
+        architectureSharded?: boolean;
+        architectureShardedLocation?: string;
+    };
+    customTechnicalDocuments?: string[] | null;
+    devLoadAlwaysFiles?: string[];
+    brownfieldEpic?: {
+        updateOnCreate?: string[];
+        doNotUpdate?: string[];
+    };
+    devDebugLog?: string;
+    devStoryLocation?: string;
+    slashPrefix?: string;
+}
+/**
+ * The 10 known TOP-LEVEL keys of `.bmad-core/core-config.yaml`. Any other
+ * top-level key in the parsed YAML is treated as "unknown" and round-trips
+ * untouched (AC4). Nested groups (`qa`/`prd`/`architecture`/`brownfieldEpic`)
+ * count as one top-level key each; their leaves are the 18-key matrix.
+ *
+ * Single source of truth shared by the server partition logic and any client
+ * consumer that needs to reason about top-level membership.
+ */
+export declare const BMAD_CORE_CONFIG_KNOWN_TOP_LEVEL_KEYS: readonly ["markdownExploder", "qa", "prd", "architecture", "customTechnicalDocuments", "devLoadAlwaysFiles", "brownfieldEpic", "devDebugLog", "devStoryLocation", "slashPrefix"];
+/** GET /api/harness/bmad-config/:projectSlug response. */
+export interface BmadCoreConfigReadResponse {
+    /** Full raw text of `.bmad-core/core-config.yaml` — feeds the Raw editor toggle. */
+    content: string;
+    /** ISO 8601 mtime — STALE_WRITE ETag echoed back on the next patch/raw write. */
+    mtime: string;
+    /** Known top-level keys, typed. Drives the 18-key form widgets. */
+    knownKeys: BmadCoreConfigKnownKeys;
+    /**
+     * Unknown top-level keys (BMad schema extensions or user-defined keys) shown
+     * read-only in the "unknown keys" section with a JS-type hint each (AC4.a).
+     */
+    unknownKeys: Record<string, unknown>;
+}
+/** PATCH / PUT(raw) write response. */
+export interface BmadCoreConfigWriteResponse {
+    /** ISO 8601 mtime after the write — the client persists this as the next ETag. */
+    mtime: string;
+}
+//# sourceMappingURL=bmadCoreConfig.d.ts.map

package/packages/shared/dist/types/bmadCoreConfig.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bmadCoreConfig.d.ts","sourceRoot":"","sources":["../../src/types/bmadCoreConfig.ts"],"names":[],"mappings":"AASA;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,uBAAuB;IACtC,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,EAAE,CAAC,EAAE;QACH,UAAU,CAAC,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,GAAG,CAAC,EAAE;QACJ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,YAAY,CAAC,EAAE;QACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,mBAAmB,CAAC,EAAE,OAAO,CAAC;QAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAC;KACtC,CAAC;IACF,wBAAwB,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC3C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,cAAc,CAAC,EAAE;QACf,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,qCAAqC,kLAWxC,CAAC;AAEX,0DAA0D;AAC1D,MAAM,WAAW,0BAA0B;IACzC,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;IAChB,iFAAiF;IACjF,KAAK,EAAE,MAAM,CAAC;IACd,mEAAmE;IACnE,SAAS,EAAE,uBAAuB,CAAC;IACnC;;;OAGG;IACH,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACtC;AAED,uCAAuC;AACvC,MAAM,WAAW,2BAA2B;IAC1C,kFAAkF;IAClF,KAAK,EAAE,MAAM,CAAC;CACf"}

package/packages/shared/dist/types/bmadCoreConfig.js

@@ -0,0 +1,30 @@
+// Story 31.1: BMad core-config.yaml editor shared types (Epic 31)
+//
+// Single source of truth for the typed shape of the 18 known keys plus the
+// read-response envelope used by the BMad config form editor. The 18-key
+// widget matrix itself lives client-side (BMAD_KNOWN_KEYS_MATRIX in
+// bmadCoreConfigStore.ts); these types describe the *values* that travel over
+// the wire after the server partitions a parsed config into known vs unknown
+// top-level keys (see bmadCoreConfigService.parseUnknownKeys).
+/**
+ * The 10 known TOP-LEVEL keys of `.bmad-core/core-config.yaml`. Any other
+ * top-level key in the parsed YAML is treated as "unknown" and round-trips
+ * untouched (AC4). Nested groups (`qa`/`prd`/`architecture`/`brownfieldEpic`)
+ * count as one top-level key each; their leaves are the 18-key matrix.
+ *
+ * Single source of truth shared by the server partition logic and any client
+ * consumer that needs to reason about top-level membership.
+ */
+export const BMAD_CORE_CONFIG_KNOWN_TOP_LEVEL_KEYS = [
+    'markdownExploder',
+    'qa',
+    'prd',
+    'architecture',
+    'customTechnicalDocuments',
+    'devLoadAlwaysFiles',
+    'brownfieldEpic',
+    'devDebugLog',
+    'devStoryLocation',
+    'slashPrefix',
+];
+//# sourceMappingURL=bmadCoreConfig.js.map

package/packages/shared/dist/types/bmadCoreConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bmadCoreConfig.js","sourceRoot":"","sources":["../../src/types/bmadCoreConfig.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,2EAA2E;AAC3E,yEAAyE;AACzE,oEAAoE;AACpE,8EAA8E;AAC9E,6EAA6E;AAC7E,+DAA+D;AA4C/D;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG;IACnD,kBAAkB;IAClB,IAAI;IACJ,KAAK;IACL,cAAc;IACd,0BAA0B;IAC1B,oBAAoB;IACpB,gBAAgB;IAChB,aAAa;IACb,kBAAkB;IAClB,aAAa;CACL,CAAC"}

package/packages/shared/dist/types/bmadStatus.d.ts

@@ -52,6 +52,16 @@ export interface BmadStoryStatus {
     title?: string;
     /** Latest QA gate decision: 'PASS' | 'CONCERNS' | 'FAIL' | 'WAIVED' */
     gateResult?: string;
+    /**
+     * The story's qa-fix marker state relative to the CURRENT gate:
+     *  - 'applied': Dev ran apply-qa-fixes against this gate → QA re-review is next
+     *  - 'needed':  QA flagged this gate (CONCERNS/FAIL) and it is not yet
+     *               addressed → apply-qa-fixes is next
+     *  - undefined: no marker matches the current gate (legacy story or external
+     *               BMad project) → the UI shows BOTH actions and lets the user pick
+     * Derived from explicit marker comments in the story, never from file mtime.
+     */
+    gateFixState?: 'needed' | 'applied';
 }
 /** Epic with its stories */
 export interface BmadEpicStatus {

package/packages/shared/dist/types/bmadStatus.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bmadStatus.d.ts","sourceRoot":"","sources":["../../src/types/bmadStatus.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,gCAAgC;AAChC,UAAU,kBAAkB;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC3B;AAED,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,kBAAkB,CAAC;IACxB,YAAY,EAAE,kBAAkB,CAAC;IACjC,6DAA6D;IAC7D,aAAa,EAAE,oBAAoB,EAAE,CAAC;CACvC;AAED,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4BAA4B;AAC5B,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;CACpB;AAED,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,aAAa,CAAC;IACzB,kBAAkB,EAAE,eAAe,EAAE,CAAC;IACtC,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;CAgBrB,CAAC"}
+{"version":3,"file":"bmadStatus.d.ts","sourceRoot":"","sources":["../../src/types/bmadStatus.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,MAAM,WAAW,UAAU;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,2BAA2B,CAAC,EAAE,MAAM,CAAC;IACrC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,4FAA4F;AAC5F,MAAM,WAAW,QAAQ;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,QAAQ,EAAE,CAAC;CACvB;AAED,gCAAgC;AAChC,UAAU,kBAAkB;IAC1B,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,YAAY,CAAC,EAAE,QAAQ,EAAE,CAAC;CAC3B;AAED,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;IACZ,iDAAiD;IACjD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wCAAwC;AACxC,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,kBAAkB,CAAC;IACxB,YAAY,EAAE,kBAAkB,CAAC;IACjC,6DAA6D;IAC7D,aAAa,EAAE,oBAAoB,EAAE,CAAC;CACvC;AAED,6CAA6C;AAC7C,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;CACrC;AAED,4BAA4B;AAC5B,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,8BAA8B;AAC9B,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,QAAQ,EAAE,CAAC;CACpB;AAED,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,UAAU,CAAC;IACnB,SAAS,EAAE,aAAa,CAAC;IACzB,kBAAkB,EAAE,eAAe,EAAE,CAAC;IACtC,KAAK,EAAE,cAAc,EAAE,CAAC;CACzB;AAED,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;CAgBrB,CAAC"}

package/packages/shared/dist/types/bmadStatus.js.map

@@ -1 +1 @@
-{"version":3,"file":"bmadStatus.js","sourceRoot":"","sources":["../../src/types/bmadStatus.ts"],"names":[],"mappings":"AA8FA,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB,EAAE;QAChB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,mDAAmD;QAC5D,UAAU,EAAE,GAAG;KAChB;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,mCAAmC;QAC5C,UAAU,EAAE,GAAG;KAChB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,uBAAuB;QAChC,UAAU,EAAE,GAAG;KAChB;CACO,CAAC"}
+{"version":3,"file":"bmadStatus.js","sourceRoot":"","sources":["../../src/types/bmadStatus.ts"],"names":[],"mappings":"AAwGA,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,gBAAgB,EAAE;QAChB,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,mDAAmD;QAC5D,UAAU,EAAE,GAAG;KAChB;IACD,kBAAkB,EAAE;QAClB,IAAI,EAAE,oBAAoB;QAC1B,OAAO,EAAE,mCAAmC;QAC5C,UAAU,EAAE,GAAG;KAChB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,OAAO,EAAE,uBAAuB;QAChC,UAAU,EAAE,GAAG;KAChB;CACO,CAAC"}

package/packages/shared/dist/types/board.d.ts

@@ -40,6 +40,12 @@ export interface BoardItem {
     externalRef?: string;
     /** Latest QA gate decision: 'PASS' | 'CONCERNS' | 'FAIL' | 'WAIVED' */
     gateResult?: string;
+    /**
+     * qa-fix marker state vs the CURRENT gate: 'applied' (Dev addressed this gate
+     * → re-review), 'needed' (QA flagged it, not yet addressed → apply fixes), or
+     * undefined (no matching marker → show both actions). Marker-based, not mtime.
+     */
+    gateFixState?: 'needed' | 'applied';
     /** Project-relative path to the source file (story/epic markdown) */
     filePath?: string;
     attachments?: IssueAttachment[];

package/packages/shared/dist/types/board.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../../src/types/board.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AAGvD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAGD,eAAO,MAAM,oBAAoB,uOAWvB,CAAC;AA8BX,eAAO,MAAM,oBAAoB,EAAE,WAGlC,CAAC;AAGF,eAAO,MAAM,mBAAmB,4BAA6B,CAAC;AAE9D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAkD7D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}
+{"version":3,"file":"board.d.ts","sourceRoot":"","sources":["../../src/types/board.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,aAAa,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,CAAC;AAGvD,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,MAAM,WAAW,WAAW;IAC1B,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAGD,eAAO,MAAM,oBAAoB,uOAWvB,CAAC;AA8BX,eAAO,MAAM,oBAAoB,EAAE,WAGlC,CAAC;AAGF,eAAO,MAAM,mBAAmB,4BAA6B,CAAC;AAE9D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,EAAE,CAkD7D;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,eAAe,CAAC;CAC7B;AAED,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAClC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,aAAa,CAAC,EAAE;QACd,KAAK,EAAE,MAAM,CAAC;QACd,IAAI,EAAE,MAAM,CAAC;KACd,CAAC;IACF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,eAAe,EAAE,CAAC;IAChC,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,SAAS,EAAE,CAAC;IACnB,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,SAAS,CAAC,EAAE,KAAK,GAAG,aAAa,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB"}

package/packages/shared/dist/types/contextBuilder.d.ts

@@ -0,0 +1,102 @@
+/**
+ * The 5 built-in dynamic variable identifiers, mirroring Epic 31 § Story 31.2
+ * Scope examples (*"현재 브랜치 / 활성 BMad 스토리 / 최근 커밋 N개 / 오늘 날짜 /
+ * 미커밋 파일 개수"*). Each is recomputed at script runtime on every session
+ * start (AC2.b) — never snapshotted at generation time.
+ */
+export type ContextBuilderVariableId = 'gitBranch' | 'activeBmadStory' | 'recentCommits' | 'today' | 'uncommittedCount';
+/**
+ * Ordered list of the built-in variable IDs — single source of truth shared by
+ * the server (zod validation + script generation) and the client
+ * (`CONTEXT_BUILDER_VARIABLES` widget definitions). Order is the canonical
+ * display order in the toggle list.
+ */
+export declare const CONTEXT_BUILDER_VARIABLE_IDS: readonly ContextBuilderVariableId[];
+/** One user-defined shell command block (AC5). */
+export interface ContextBuilderCustomCommand {
+    /** The shell command whose stdout is appended as a context block. */
+    command: string;
+    /**
+     * AC5.b — only `acknowledged: true` commands are written into the generated
+     * script. The acknowledgement is the explicit "I understand this runs every
+     * session" confirmation captured by the security checkbox.
+     */
+    acknowledged: boolean;
+}
+/**
+ * The declarative manifest — single source of truth for one project's context
+ * builder. Persisted at `<projectRoot>/.hammoc/context-builder.json`.
+ */
+export interface ContextBuilderManifest {
+    /** Schema version — bump only on a breaking shape change. */
+    version: 1;
+    /**
+     * AC1.f — when false the generated script + settings entry are removed and
+     * NOT regenerated (the declaration is retained so re-enabling restores it).
+     */
+    enabled: boolean;
+    /** Reference files, as project-root-relative POSIX paths (e.g. `docs/architecture.md`). */
+    files: string[];
+    /** Built-in dynamic variables, on/off. A full record of all 5 IDs. */
+    variables: Record<ContextBuilderVariableId, boolean>;
+    /** N for the `recentCommits` variable (default 5). Ignored when that variable is off. */
+    recentCommitsCount?: number;
+    /** User-defined shell command blocks (AC5). */
+    customCommands: ContextBuilderCustomCommand[];
+}
+/**
+ * GET /api/harness/context-builder/:projectSlug response.
+ *
+ * When the manifest file does not yet exist the server returns a default
+ * (disabled, empty) manifest with `mtime: ''` so the panel opens in an
+ * empty-state instead of erroring (API table — *"매니페스트 없음 → 빈 기본
+ * 매니페스트 반환도 허용"*).
+ */
+export interface ContextBuilderReadResponse {
+    manifest: ContextBuilderManifest;
+    /** ISO 8601 mtime of the manifest — STALE_WRITE ETag. Empty string when the file is absent. */
+    mtime: string;
+    /** True when the generated `.hammoc/hooks/context-builder.mjs` exists on disk. */
+    scriptExists: boolean;
+    /** True when a Hammoc-managed `hooks.SessionStart` entry currently points at the script. */
+    entryRegistered: boolean;
+}
+/**
+ * PUT /api/harness/context-builder/:projectSlug response (save + generate).
+ * Extends the write ETag with the generated artifact locations.
+ */
+export interface ContextBuilderGenerateResponse {
+    /** ISO 8601 mtime of the manifest after the write — next STALE_WRITE ETag. */
+    mtime: string;
+    /** Absolute path of the generated script (empty string when manifest.enabled === false). */
+    scriptPath: string;
+    /** ISO 8601 mtime of `.claude/settings.json` after the entry registration. */
+    settingsMtime: string;
+    /**
+     * AC5.c — indices (into `manifest.customCommands`) whose command string the
+     * secret heuristic flagged. NON-BLOCKING: the save still succeeds; the client
+     * surfaces these as a notice ("고지"), never a hard block. Empty/omitted when
+     * nothing matched.
+     */
+    secretWarningCommandIndices?: number[];
+}
+/** POST /api/harness/context-builder/:projectSlug/disable response. */
+export interface ContextBuilderDisableResponse {
+    success: true;
+}
+/**
+ * Canonical command-path marker that identifies a Hammoc-managed SessionStart
+ * entry. AC1.e / AC3.a identify ownership purely by the command string
+ * containing this fragment — no extra metadata key is written into
+ * settings.json (the path IS the ownership identifier). The generated entry's
+ * command is `node "<abs>/.hammoc/hooks/context-builder.mjs"`, so a substring
+ * match on this marker is the ownership test on both server and client.
+ */
+export declare const CONTEXT_BUILDER_SCRIPT_MARKER = ".hammoc/hooks/context-builder.";
+/**
+ * Build the default empty manifest (disabled, no files, all variables off, no
+ * custom commands). Shared by the server empty-state GET and the client store's
+ * initial state so the two never drift.
+ */
+export declare function createDefaultContextBuilderManifest(): ContextBuilderManifest;
+//# sourceMappingURL=contextBuilder.d.ts.map

package/packages/shared/dist/types/contextBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextBuilder.d.ts","sourceRoot":"","sources":["../../src/types/contextBuilder.ts"],"names":[],"mappings":"AAYA;;;;;GAKG;AACH,MAAM,MAAM,wBAAwB,GAChC,WAAW,GACX,iBAAiB,GACjB,eAAe,GACf,OAAO,GACP,kBAAkB,CAAC;AAEvB;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,EAAE,SAAS,wBAAwB,EAMlE,CAAC;AAEX,kDAAkD;AAClD,MAAM,WAAW,2BAA2B;IAC1C,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,6DAA6D;IAC7D,OAAO,EAAE,CAAC,CAAC;IACX;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;IACjB,2FAA2F;IAC3F,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;IACrD,yFAAyF;IACzF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,+CAA+C;IAC/C,cAAc,EAAE,2BAA2B,EAAE,CAAC;CAC/C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,sBAAsB,CAAC;IACjC,+FAA+F;IAC/F,KAAK,EAAE,MAAM,CAAC;IACd,kFAAkF;IAClF,YAAY,EAAE,OAAO,CAAC;IACtB,4FAA4F;IAC5F,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,8BAA8B;IAC7C,8EAA8E;IAC9E,KAAK,EAAE,MAAM,CAAC;IACd,4FAA4F;IAC5F,UAAU,EAAE,MAAM,CAAC;IACnB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,2BAA2B,CAAC,EAAE,MAAM,EAAE,CAAC;CACxC;AAED,uEAAuE;AACvE,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,IAAI,CAAC;CACf;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,6BAA6B,mCAAmC,CAAC;AAE9E;;;;GAIG;AACH,wBAAgB,mCAAmC,IAAI,sBAAsB,CAe5E"}

package/packages/shared/dist/types/contextBuilder.js

@@ -0,0 +1,55 @@
+// Story 31.2: SessionStart context-builder shared types (Epic 31)
+//
+// Single source of truth for the declarative "context builder" manifest that
+// drives the generated `.hammoc/hooks/context-builder.mjs` SessionStart hook
+// script and the `.claude/settings.json` `hooks.SessionStart` entry.
+//
+// The manifest at `<projectRoot>/.hammoc/context-builder.json` is the SSoT;
+// the script + settings entry are GENERATED artifacts derived from it. Server
+// (`contextBuilderService`) and client (`contextBuilderStore`) both import
+// these types, so they live in `packages/shared` (one-way dependency
+// `shared → server/client`).
+/**
+ * Ordered list of the built-in variable IDs — single source of truth shared by
+ * the server (zod validation + script generation) and the client
+ * (`CONTEXT_BUILDER_VARIABLES` widget definitions). Order is the canonical
+ * display order in the toggle list.
+ */
+export const CONTEXT_BUILDER_VARIABLE_IDS = [
+    'gitBranch',
+    'activeBmadStory',
+    'recentCommits',
+    'today',
+    'uncommittedCount',
+];
+/**
+ * Canonical command-path marker that identifies a Hammoc-managed SessionStart
+ * entry. AC1.e / AC3.a identify ownership purely by the command string
+ * containing this fragment — no extra metadata key is written into
+ * settings.json (the path IS the ownership identifier). The generated entry's
+ * command is `node "<abs>/.hammoc/hooks/context-builder.mjs"`, so a substring
+ * match on this marker is the ownership test on both server and client.
+ */
+export const CONTEXT_BUILDER_SCRIPT_MARKER = '.hammoc/hooks/context-builder.';
+/**
+ * Build the default empty manifest (disabled, no files, all variables off, no
+ * custom commands). Shared by the server empty-state GET and the client store's
+ * initial state so the two never drift.
+ */
+export function createDefaultContextBuilderManifest() {
+    return {
+        version: 1,
+        enabled: false,
+        files: [],
+        variables: {
+            gitBranch: false,
+            activeBmadStory: false,
+            recentCommits: false,
+            today: false,
+            uncommittedCount: false,
+        },
+        recentCommitsCount: 5,
+        customCommands: [],
+    };
+}
+//# sourceMappingURL=contextBuilder.js.map

package/packages/shared/dist/types/contextBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contextBuilder.js","sourceRoot":"","sources":["../../src/types/contextBuilder.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,6EAA6E;AAC7E,6EAA6E;AAC7E,qEAAqE;AACrE,EAAE;AACF,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,qEAAqE;AACrE,6BAA6B;AAe7B;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAwC;IAC/E,WAAW;IACX,iBAAiB;IACjB,eAAe;IACf,OAAO;IACP,kBAAkB;CACV,CAAC;AA+EX;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,gCAAgC,CAAC;AAE9E;;;;GAIG;AACH,MAAM,UAAU,mCAAmC;IACjD,OAAO;QACL,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,KAAK;QACd,KAAK,EAAE,EAAE;QACT,SAAS,EAAE;YACT,SAAS,EAAE,KAAK;YAChB,eAAe,EAAE,KAAK;YACtB,aAAa,EAAE,KAAK;YACpB,KAAK,EAAE,KAAK;YACZ,gBAAgB,EAAE,KAAK;SACxB;QACD,kBAAkB,EAAE,CAAC;QACrB,cAAc,EAAE,EAAE;KACnB,CAAC;AACJ,CAAC"}