hardness 1.0.0

package/packages/core/dist/locks/sprint-lock.d.ts

@@ -0,0 +1,39 @@
+import { Sprint } from '../common/types.js';
+export interface LockData {
+    schemaVersion: number;
+    sprintFile: string;
+    hash: string;
+    immutableSnapshot: any;
+}
+/**
+ * Serializes a JSON object in a canonical, deterministic way (sorted keys).
+ */
+export declare function canonicalizeJson(obj: any): string;
+/**
+ * Strips mutable fields from the sprint to obtain an immutable contract copy.
+ */
+export declare function getImmutableSprintCopy(sprint: Sprint): any;
+/**
+ * Computes the SHA-256 hash of the sprint contract.
+ */
+export declare function computeSprintHash(sprint: Sprint): string;
+/**
+ * Compares two objects and returns the path of the first difference found.
+ */
+export declare function findFirstDiff(obj1: any, obj2: any, currentPath?: string): string | null;
+/**
+ * Resolves the path to the sprint lock file.
+ */
+export declare function getLockFilePath(sprintFilename: string, projectRoot?: string): string;
+/**
+ * Ensures the lock exists. If it doesn't, creates it. If it does, validates it.
+ */
+export declare function ensureLock(sprint: Sprint, sprintFilename: string, projectRoot?: string): void;
+/**
+ * Compares the current sprint against the existing lock. Throws on violation.
+ */
+export declare function verifyLock(sprint: Sprint, sprintFilename: string, projectRoot?: string): void;
+/**
+ * Resets or initializes the sprint contract lock.
+ */
+export declare function resetLock(sprint: Sprint, sprintFilename: string, projectRoot?: string): void;

package/packages/core/dist/locks/sprint-lock.js

@@ -0,0 +1,143 @@
+import crypto from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import { getProjectRoot } from '../common/paths.js';
+/**
+ * Serializes a JSON object in a canonical, deterministic way (sorted keys).
+ */
+export function canonicalizeJson(obj) {
+    if (obj === null)
+        return 'null';
+    if (Array.isArray(obj)) {
+        return '[' + obj.map(canonicalizeJson).join(',') + ']';
+    }
+    if (typeof obj === 'object') {
+        const keys = Object.keys(obj).sort();
+        const parts = keys.map(k => `"${k}":${canonicalizeJson(obj[k])}`);
+        return '{' + parts.join(',') + '}';
+    }
+    return JSON.stringify(obj);
+}
+/**
+ * Strips mutable fields from the sprint to obtain an immutable contract copy.
+ */
+export function getImmutableSprintCopy(sprint) {
+    const copy = JSON.parse(JSON.stringify(sprint));
+    delete copy.status; // sprint status changes
+    if (Array.isArray(copy.features)) {
+        for (const feat of copy.features) {
+            delete feat.status;
+            delete feat.startedAt;
+            delete feat.completedAt;
+        }
+    }
+    return copy;
+}
+/**
+ * Computes the SHA-256 hash of the sprint contract.
+ */
+export function computeSprintHash(sprint) {
+    const immutableCopy = getImmutableSprintCopy(sprint);
+    const canonicalStr = canonicalizeJson(immutableCopy);
+    return crypto.createHash('sha256').update(canonicalStr).digest('hex');
+}
+/**
+ * Compares two objects and returns the path of the first difference found.
+ */
+export function findFirstDiff(obj1, obj2, currentPath = '') {
+    if (typeof obj1 !== typeof obj2) {
+        return `${currentPath}: different types (${typeof obj1} vs ${typeof obj2})`;
+    }
+    if (obj1 === null || obj2 === null || typeof obj1 !== 'object') {
+        if (obj1 !== obj2) {
+            return `${currentPath}: different values ("${obj1}" vs "${obj2}")`;
+        }
+        return null;
+    }
+    if (Array.isArray(obj1)) {
+        if (!Array.isArray(obj2)) {
+            return `${currentPath}: one is array, the other is not`;
+        }
+        if (obj1.length !== obj2.length) {
+            return `${currentPath}: different array lengths (${obj1.length} vs ${obj2.length})`;
+        }
+        for (let i = 0; i < obj1.length; i++) {
+            const diff = findFirstDiff(obj1[i], obj2[i], `${currentPath}[${i}]`);
+            if (diff)
+                return diff;
+        }
+        return null;
+    }
+    const keys1 = Object.keys(obj1).sort();
+    const keys2 = Object.keys(obj2).sort();
+    for (const k of keys1) {
+        if (!keys2.includes(k)) {
+            return `${currentPath ? currentPath + '.' : ''}${k}: key removed`;
+        }
+        const diff = findFirstDiff(obj1[k], obj2[k], `${currentPath ? currentPath + '.' : ''}${k}`);
+        if (diff)
+            return diff;
+    }
+    for (const k of keys2) {
+        if (!keys1.includes(k)) {
+            return `${currentPath ? currentPath + '.' : ''}${k}: key added`;
+        }
+    }
+    return null;
+}
+/**
+ * Resolves the path to the sprint lock file.
+ */
+export function getLockFilePath(sprintFilename, projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    return path.join(root, '.hardness', 'locks', 'sprints', `${sprintFilename}.lock.json`);
+}
+/**
+ * Ensures the lock exists. If it doesn't, creates it. If it does, validates it.
+ */
+export function ensureLock(sprint, sprintFilename, projectRoot) {
+    const lockPath = getLockFilePath(sprintFilename, projectRoot);
+    if (!fs.existsSync(lockPath)) {
+        resetLock(sprint, sprintFilename, projectRoot);
+        return;
+    }
+    verifyLock(sprint, sprintFilename, projectRoot);
+}
+/**
+ * Compares the current sprint against the existing lock. Throws on violation.
+ */
+export function verifyLock(sprint, sprintFilename, projectRoot) {
+    const lockPath = getLockFilePath(sprintFilename, projectRoot);
+    if (!fs.existsSync(lockPath)) {
+        throw new Error(`Contract lock not found for sprint: ${sprintFilename}`);
+    }
+    const raw = fs.readFileSync(lockPath, 'utf-8');
+    const lockData = JSON.parse(raw);
+    const currentHash = computeSprintHash(sprint);
+    if (currentHash !== lockData.hash) {
+        const currentSnapshot = getImmutableSprintCopy(sprint);
+        const diff = findFirstDiff(lockData.immutableSnapshot, currentSnapshot);
+        throw new Error(`Contract violation detected in sprint "${sprintFilename}". The agent attempted to alter the established contract!\n` +
+            `Difference: ${diff || 'Hash changed with no identifiable structural difference'}`);
+    }
+}
+/**
+ * Resets or initializes the sprint contract lock.
+ */
+export function resetLock(sprint, sprintFilename, projectRoot) {
+    const lockPath = getLockFilePath(sprintFilename, projectRoot);
+    const parentDir = path.dirname(lockPath);
+    if (!fs.existsSync(parentDir)) {
+        fs.mkdirSync(parentDir, { recursive: true });
+    }
+    const hash = computeSprintHash(sprint);
+    const snapshot = getImmutableSprintCopy(sprint);
+    const lockData = {
+        schemaVersion: 4,
+        sprintFile: sprintFilename,
+        hash,
+        immutableSnapshot: snapshot
+    };
+    fs.writeFileSync(lockPath, JSON.stringify(lockData, null, 2), 'utf-8');
+}
+//# sourceMappingURL=sprint-lock.js.map

package/packages/core/dist/locks/sprint-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sprint-lock.js","sourceRoot":"","sources":["../../src/locks/sprint-lock.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAUpD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAQ;IACvC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,wBAAwB;IAE5C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,MAAM,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;YACtB,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAS,EAAE,IAAS,EAAE,WAAW,GAAG,EAAE;IAClE,IAAI,OAAO,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC;QAChC,OAAO,GAAG,WAAW,sBAAsB,OAAO,IAAI,OAAO,OAAO,IAAI,GAAG,CAAC;IAC9E,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,GAAG,WAAW,wBAAwB,IAAI,SAAS,IAAI,IAAI,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,WAAW,kCAAkC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,GAAG,WAAW,8BAA8B,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC;QACtF,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC;YACrE,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAoB;IAC1E,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,cAAc,YAAY,CAAC,CAAC;AACzF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,cAAsB,EAAE,WAAoB;IACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,cAAsB,EAAE,WAAoB;IACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,cAAc,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,WAAW,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,0CAA0C,cAAc,6DAA6D;YACrH,eAAe,IAAI,IAAI,yDAAyD,EAAE,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,cAAsB,EAAE,WAAoB;IACpF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAa;QACzB,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,cAAc;QAC1B,IAAI;QACJ,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC"}

package/packages/core/dist/orchestrator.d.ts

@@ -0,0 +1,8 @@
+export interface OrchestrateOptions {
+    dryRun?: boolean;
+    featureId?: string;
+}
+/**
+ * Main orchestrator loop: manages the feature lifecycle, locks, agent calls and gate validation.
+ */
+export declare function runOrchestrator(options?: OrchestrateOptions, projectRoot?: string): Promise<void>;

package/packages/core/dist/orchestrator.js

@@ -0,0 +1,160 @@
+import fs from 'fs';
+import path from 'path';
+import { getProjectRoot } from './common/paths.js';
+import { loadConfig } from './config/manager.js';
+import { logger } from './common/logger.js';
+import { getNextFeature, updateFeatureStatus, closeSprint } from './sprint/status.js';
+import { writeContextFile } from './agent/context-gen.js';
+import { runAgent } from './agent/adapter.js';
+import { globalGateEngine } from './gates/engine.js';
+import { ensureLock, verifyLock, resetLock } from './locks/sprint-lock.js';
+import { ensureGuard } from './locks/harness-guard.js';
+/**
+ * Main orchestrator loop: manages the feature lifecycle, locks, agent calls and gate validation.
+ */
+export async function runOrchestrator(options = {}, projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    const config = loadConfig(root);
+    logger.info('Starting the Hardness orchestrator...');
+    // 1. Verify harness integrity (harness-guard)
+    try {
+        ensureGuard(root);
+    }
+    catch (err) {
+        logger.fatal(`Harness guard integrity failure: ${err.message}`, 'Revert local changes in .hardness.');
+        process.exit(1);
+    }
+    // 2. Resolve the active sprint
+    const currentTxtPath = path.join(root, '.hardness', 'current.txt');
+    if (!fs.existsSync(currentTxtPath)) {
+        logger.fatal(`current.txt not found at: ${currentTxtPath}`, 'Set up the workspace.');
+        process.exit(1);
+    }
+    const activeSprintFile = fs.readFileSync(currentTxtPath, 'utf-8').trim();
+    if (activeSprintFile === 'DONE') {
+        logger.success('All sprints in the project are complete! Execution queue is empty.');
+        return;
+    }
+    const sprintsDir = path.join(root, '.hardness', 'sprints');
+    const sprintPath = path.join(sprintsDir, activeSprintFile);
+    if (!fs.existsSync(sprintPath)) {
+        logger.fatal(`Active sprint file not found: "${activeSprintFile}" in ${sprintsDir}`);
+        process.exit(1);
+    }
+    // Load and validate the sprint
+    let sprint;
+    try {
+        sprint = JSON.parse(fs.readFileSync(sprintPath, 'utf-8'));
+    }
+    catch (err) {
+        logger.fatal(`Error loading or parsing the active sprint JSON "${activeSprintFile}": ${err.message}`);
+        process.exit(1);
+    }
+    // Ensure sprint contract integrity (sprint-lock)
+    try {
+        ensureLock(sprint, activeSprintFile, root);
+    }
+    catch (err) {
+        logger.fatal(`Contract violation detected in the active sprint:\n${err.message}`, 'Restore the unauthorized changes in the sprint JSON.');
+        process.exit(1);
+    }
+    // 3. Resolve the next feature
+    const feature = getNextFeature(sprint);
+    if (!feature) {
+        logger.info(`All features complete. Closing sprint "${sprint.name}"...`);
+        if (options.dryRun) {
+            logger.success(`[DRY-RUN] Sprint "${sprint.name}" would be closed successfully.`);
+            return;
+        }
+        try {
+            closeSprint(sprint, sprintPath, config, root);
+            resetLock(sprint, activeSprintFile, root); // Update lock after closing the sprint
+            logger.success(`✓ Sprint "${sprint.name}" completed and closed successfully.`);
+            // Advance current.txt to the next sprint listed in the index
+            const indexPath = path.join(sprintsDir, '00-index.json');
+            if (fs.existsSync(indexPath)) {
+                const indexJson = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+                const currentIndex = sprint.index;
+                const nextEntry = indexJson.sprints.find((s) => s.index === currentIndex + 1);
+                if (nextEntry) {
+                    fs.writeFileSync(currentTxtPath, `${nextEntry.file}\n`, 'utf-8');
+                    logger.info(`Queue advanced: next active sprint set to: ${nextEntry.file}`);
+                }
+                else {
+                    fs.writeFileSync(currentTxtPath, 'DONE\n', 'utf-8');
+                    logger.success('🎉 Congratulations! All planned sprints in the project are complete.');
+                }
+            }
+        }
+        catch (err) {
+            logger.error(`Error closing the sprint: ${err.message}`);
+            process.exit(1);
+        }
+        return;
+    }
+    logger.info(`Executing Feature: ${feature.id} - "${feature.title}"`);
+    if (options.dryRun) {
+        logger.success(`[DRY-RUN] Simulation completed for feature "${feature.id}".`);
+        return;
+    }
+    // Mark status in-progress and save the sprint
+    updateFeatureStatus(sprint, feature.id, 'in-progress');
+    fs.writeFileSync(sprintPath, JSON.stringify(sprint, null, 2), 'utf-8');
+    resetLock(sprint, activeSprintFile, root); // Update lock with the changed status
+    // Create logs directory and generate the run log filename
+    const logsDir = path.join(root, '.hardness', 'logs');
+    if (!fs.existsSync(logsDir)) {
+        fs.mkdirSync(logsDir, { recursive: true });
+    }
+    const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+    const logFilename = `${timestamp}_sprint_${sprint.index}_feat_${feature.id}.log`;
+    const runLogPath = path.join(logsDir, logFilename);
+    // Generate the context.json file
+    const contextFilePath = path.join(root, '.hardness', 'context.json');
+    writeContextFile(sprint, feature.id, contextFilePath, root);
+    // Execute the configured agent
+    logger.info(`Starting the external agent execution...`);
+    const agentResult = await runAgent(config, contextFilePath, root);
+    // Save output to the run log
+    const logContent = `COMMAND: ${config.agent.agentCommand}\nEXIT CODE: ${agentResult.code}\nDURATION: ${agentResult.durationMs}ms\n\n=== STDOUT ===\n${agentResult.stdout}\n\n=== STDERR ===\n${agentResult.stderr}`;
+    fs.writeFileSync(runLogPath, logContent, 'utf-8');
+    // Reload the sprint to validate whether the agent violated the sprint contract
+    let sprintReloaded;
+    try {
+        sprintReloaded = JSON.parse(fs.readFileSync(sprintPath, 'utf-8'));
+        verifyLock(sprintReloaded, activeSprintFile, root);
+    }
+    catch (err) {
+        logger.error(`The agent violated the contract or corrupted the sprint file: ${err.message}`, 'Restore the sprint JSON changes.');
+        // Revert the feature status to pending
+        updateFeatureStatus(sprint, feature.id, 'pending');
+        fs.writeFileSync(sprintPath, JSON.stringify(sprint, null, 2), 'utf-8');
+        resetLock(sprint, activeSprintFile, root);
+        process.exit(1);
+    }
+    // Run the mechanical post-run validation gates
+    logger.info('Running mechanical post-execution validation gates...');
+    const gateResults = await globalGateEngine.runAll(feature, config, root, true);
+    let allPassed = true;
+    for (const res of gateResults) {
+        const symbol = res.passed ? '✓' : '✗';
+        const statusMsg = `${symbol} [Gate: ${res.gate}] ${res.message}`;
+        if (res.passed) {
+            logger.debug(statusMsg);
+        }
+        else {
+            allPassed = false;
+            logger.error(statusMsg, undefined, res.details);
+        }
+    }
+    if (allPassed) {
+        logger.success(`✓ Feature ${feature.id} passed all gates!`);
+        updateFeatureStatus(sprint, feature.id, 'done');
+        fs.writeFileSync(sprintPath, JSON.stringify(sprint, null, 2), 'utf-8');
+        resetLock(sprint, activeSprintFile, root);
+    }
+    else {
+        logger.error(`✗ Feature ${feature.id} failed validation gates. Kept as in-progress for correction.`);
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/packages/core/dist/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAA8B,EAAE,EAAE,WAAoB;IAC1F,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAEhC,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAErD,8CAA8C;IAC9C,IAAI,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACjH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,6BAA6B,cAAc,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAE3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,kCAAkC,gBAAgB,QAAQ,UAAU,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,oDAAoD,gBAAgB,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,sDAAuD,GAAa,CAAC,OAAO,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACrJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;QAEzE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,CAAC,qBAAqB,MAAM,CAAC,IAAI,iCAAiC,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9C,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,uCAAuC;YAClF,MAAM,CAAC,OAAO,CAAC,aAAa,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC;YAE/E,6DAA6D;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;gBAClC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC;gBAEnF,IAAI,SAAS,EAAE,CAAC;oBACd,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;oBACjE,MAAM,CAAC,IAAI,CAAC,8CAA8C,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9E,CAAC;qBAAM,CAAC;oBACN,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACpD,MAAM,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,EAAE,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAErE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,OAAO,CAAC,+CAA+C,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,sCAAsC;IAEjF,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,GAAG,SAAS,WAAW,MAAM,CAAC,KAAK,SAAS,OAAO,CAAC,EAAE,MAAM,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEnD,iCAAiC;IACjC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACrE,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAE5D,+BAA+B;IAC/B,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAElE,6BAA6B;IAC7B,MAAM,UAAU,GAAG,YAAY,MAAM,CAAC,KAAK,CAAC,YAAY,gBAAgB,WAAW,CAAC,IAAI,eAAe,WAAW,CAAC,UAAU,yBAAyB,WAAW,CAAC,MAAM,uBAAuB,WAAW,CAAC,MAAM,EAAE,CAAC;IACpN,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAElD,+EAA+E;IAC/E,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,UAAU,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iEAAkE,GAAa,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAE5I,uCAAuC;QACvC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACnD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+CAA+C;IAC/C,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE/E,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,MAAM,WAAW,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,OAAO,CAAC,aAAa,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC5D,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,EAAE,+DAA+D,CAAC,CAAC;IACvG,CAAC;AACH,CAAC"}

package/packages/core/dist/security/policy.d.ts

@@ -0,0 +1,10 @@
+import { HardnessConfig } from '../config/schema.js';
+export interface SecurityCheckResult {
+    allowed: boolean;
+    reason?: string;
+}
+/**
+ * Validates the security of a shell command against the whitelist and blocklist
+ * configured in the security policy.
+ */
+export declare function validateCommandSecurity(command: string, config: HardnessConfig): SecurityCheckResult;

package/packages/core/dist/security/policy.js

@@ -0,0 +1,32 @@
+/**
+ * Validates the security of a shell command against the whitelist and blocklist
+ * configured in the security policy.
+ */
+export function validateCommandSecurity(command, config) {
+    const { allowedCommandPrefixes, blockedPatterns } = config.security;
+    // 1. Check explicitly forbidden patterns (blocklist)
+    for (const pattern of blockedPatterns) {
+        try {
+            const regex = new RegExp(pattern);
+            if (regex.test(command)) {
+                return { allowed: false, reason: `Command contains forbidden pattern: "${pattern}"` };
+            }
+        }
+        catch {
+            // If the regex string is invalid, do a direct substring match
+            if (command.includes(pattern)) {
+                return { allowed: false, reason: `Command contains forbidden pattern (textual match): "${pattern}"` };
+            }
+        }
+    }
+    // 2. Check the first word against the allowed command-prefix whitelist
+    const firstWord = command.trim().split(/\s+/)[0];
+    if (!allowedCommandPrefixes.includes(firstWord)) {
+        return {
+            allowed: false,
+            reason: `Command "${firstWord}" is not in the allowed whitelist: [${allowedCommandPrefixes.join(', ')}]`
+        };
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=policy.js.map

package/packages/core/dist/security/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/security/policy.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,MAAsB;IAC7E,MAAM,EAAE,sBAAsB,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAEpE,qDAAqD;IACrD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,OAAO,GAAG,EAAE,CAAC;YACxF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,OAAO,GAAG,EAAE,CAAC;YACxG,CAAC;QACH,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY,SAAS,uCAAuC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACzG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/packages/core/dist/security/redactor.d.ts

@@ -0,0 +1,5 @@
+import { HardnessConfig } from '../config/schema.js';
+/**
+ * Removes API keys, tokens and passwords from log strings based on the security rules.
+ */
+export declare function redactSecrets(content: string, config: HardnessConfig): string;

package/packages/core/dist/security/redactor.js

@@ -0,0 +1,40 @@
+const DEFAULT_REDACT_PATTERNS = [
+    /api[-_]?key\s*[:=]\s*['"`]?[a-zA-Z0-9-_]{16,}['"`]?/gi,
+    /bearer\s+[a-zA-Z0-9-_=.]{16,}/gi,
+    /password\s*[:=]\s*['"`]?[a-zA-Z0-9-_$#@!%^&*()]{6,}['"`]?/gi,
+    /sec[-_]?key\s*[:=]\s*['"`]?[a-zA-Z0-9-_]{16,}['"`]?/gi,
+    /secret\s*[:=]\s*['"`]?[a-zA-Z0-9-_]{16,}['"`]?/gi
+];
+/**
+ * Removes API keys, tokens and passwords from log strings based on the security rules.
+ */
+export function redactSecrets(content, config) {
+    if (!config.logs.redactSecrets) {
+        return content;
+    }
+    let redacted = content;
+    // 1. Apply built-in common secrets
+    for (const regex of DEFAULT_REDACT_PATTERNS) {
+        redacted = redacted.replace(regex, (match) => {
+            const parts = match.split(/([:=]\s*)/);
+            if (parts.length >= 3) {
+                // Preserve the key prefix (e.g. "apiKey: ") and redact only the value
+                return `${parts[0]}${parts[1]}[REDACTED]`;
+            }
+            return '[REDACTED]';
+        });
+    }
+    // 2. Apply user-configured custom regex patterns
+    const customPatterns = config.logs.redactPatterns || [];
+    for (const patternStr of customPatterns) {
+        try {
+            const regex = new RegExp(patternStr, 'gi');
+            redacted = redacted.replace(regex, '[REDACTED]');
+        }
+        catch {
+            // Ignore invalid custom regex
+        }
+    }
+    return redacted;
+}
+//# sourceMappingURL=redactor.js.map

package/packages/core/dist/security/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../src/security/redactor.ts"],"names":[],"mappings":"AAEA,MAAM,uBAAuB,GAAG;IAC9B,uDAAuD;IACvD,iCAAiC;IACjC,6DAA6D;IAC7D,uDAAuD;IACvD,kDAAkD;CACnD,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAsB;IACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,GAAG,OAAO,CAAC;IAEvB,mCAAmC;IACnC,KAAK,MAAM,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC5C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,sEAAsE;gBACtE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;YAC5C,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iDAAiD;IACjD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACxD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC3C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/packages/core/dist/sprint/context.d.ts

@@ -0,0 +1,27 @@
+import { Sprint, Feature } from '../common/types.js';
+/**
+ * Represents line ranges to read from a file.
+ */
+export declare function parseLineRanges(rangesStr: string): [number, number][];
+/**
+ * Reads specific line ranges from a textual content, prefixing with line numbers (1-indexed).
+ */
+export declare function readLineRanges(fileContent: string, ranges: [number, number][]): string;
+/**
+ * Reads the full file and adds line numbers.
+ */
+export declare function readFullFileWithLineNumbers(fileContent: string): string;
+export interface FeatureContextData {
+    sprint: {
+        index: number;
+        name: string;
+    };
+    feature: Feature;
+    specExcerpt: string;
+    rulesExcerpt: string;
+    existingFiles: Record<string, string>;
+}
+/**
+ * Generates the complete context for a specific feature or the first pending/in-progress one.
+ */
+export declare function generateFeatureContext(sprint: Sprint, featureId: string | null, projectRoot?: string): FeatureContextData;

package/packages/core/dist/sprint/context.js

@@ -0,0 +1,119 @@
+import fs from 'fs';
+import path from 'path';
+import { getProjectRoot, safeProjectPath, normalizeProjectRel } from '../common/paths.js';
+/**
+ * Represents line ranges to read from a file.
+ */
+export function parseLineRanges(rangesStr) {
+    const ranges = [];
+    const parts = rangesStr.split(',');
+    for (const part of parts) {
+        const clean = part.trim();
+        if (!clean)
+            continue;
+        const match = clean.match(/^(\d+)-(\d+)$/);
+        if (match) {
+            ranges.push([parseInt(match[1]), parseInt(match[2])]);
+        }
+        else {
+            const single = parseInt(clean);
+            if (!isNaN(single)) {
+                ranges.push([single, single]);
+            }
+        }
+    }
+    return ranges;
+}
+/**
+ * Reads specific line ranges from a textual content, prefixing with line numbers (1-indexed).
+ */
+export function readLineRanges(fileContent, ranges) {
+    const lines = fileContent.split(/\r?\n/);
+    const result = [];
+    for (const [start, end] of ranges) {
+        const startIdx = Math.max(0, start - 1);
+        const endIdx = Math.min(lines.length, end);
+        for (let i = startIdx; i < endIdx; i++) {
+            result.push(`${i + 1}: ${lines[i]}`);
+        }
+    }
+    return result.join('\n');
+}
+/**
+ * Reads the full file and adds line numbers.
+ */
+export function readFullFileWithLineNumbers(fileContent) {
+    return fileContent
+        .split(/\r?\n/)
+        .map((line, idx) => `${idx + 1}: ${line}`)
+        .join('\n');
+}
+/**
+ * Generates the complete context for a specific feature or the first pending/in-progress one.
+ */
+export function generateFeatureContext(sprint, featureId, projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    // Find the target feature
+    let targetFeature;
+    if (featureId) {
+        targetFeature = sprint.features.find(f => f.id === featureId);
+    }
+    else {
+        // Prioritize in-progress, otherwise take the first pending
+        targetFeature = sprint.features.find(f => f.status === 'in-progress') ||
+            sprint.features.find(f => f.status === 'pending');
+    }
+    if (!targetFeature) {
+        throw new Error(`No active/pending feature found in sprint index ${sprint.index}`);
+    }
+    // 1. Read SPEC.md
+    let specExcerpt = '';
+    const specPath = path.join(root, 'SPEC.md');
+    if (fs.existsSync(specPath)) {
+        const specContent = fs.readFileSync(specPath, 'utf-8');
+        const specRanges = parseLineRanges(targetFeature.specLines);
+        specExcerpt = readLineRanges(specContent, specRanges);
+    }
+    else {
+        specExcerpt = `[Error: SPEC.md not found at "${specPath}"]`;
+    }
+    // 2. Read the project prompt rules (.hardness/prompts/rules.md)
+    let rulesExcerpt = '';
+    const rulesPath = path.join(root, '.hardness', 'prompts', 'rules.md');
+    if (fs.existsSync(rulesPath)) {
+        rulesExcerpt = fs.readFileSync(rulesPath, 'utf-8');
+    }
+    // 3. Read existing files declared in files[]
+    const existingFiles = {};
+    for (const fileEntry of targetFeature.files) {
+        const isObj = typeof fileEntry === 'object';
+        const filePathRel = isObj ? fileEntry.file : fileEntry;
+        const linesRange = isObj ? fileEntry.lines : null;
+        const absPath = safeProjectPath(filePathRel, root);
+        const displayPath = normalizeProjectRel(absPath, root);
+        if (!fs.existsSync(absPath) || linesRange === 'new') {
+            existingFiles[displayPath] = '[NEW FILE]';
+        }
+        else {
+            const content = fs.readFileSync(absPath, 'utf-8');
+            if (linesRange) {
+                const ranges = parseLineRanges(linesRange);
+                existingFiles[displayPath] = readLineRanges(content, ranges);
+            }
+            else {
+                existingFiles[displayPath] = readFullFileWithLineNumbers(content);
+            }
+        }
+    }
+    return {
+        sprint: {
+            index: sprint.index,
+            name: sprint.name,
+        },
+        feature: targetFeature,
+        specExcerpt,
+        rulesExcerpt,
+        existingFiles,
+    };
+}
+//# sourceMappingURL=context.js.map

package/packages/core/dist/sprint/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/sprint/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAG1F;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAAiB;IAC/C,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC,KAAK;YAAE,SAAS;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACxD,CAAC;aAAM,CAAC;YACN,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;YAC/B,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACnB,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAAC,WAAmB,EAAE,MAA0B;IAC5E,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzC,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,QAAQ,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,WAAmB;IAC7D,OAAO,WAAW;SACf,KAAK,CAAC,OAAO,CAAC;SACd,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC;SACzC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAaD;;GAEG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAc,EACd,SAAwB,EACxB,WAAoB;IAEpB,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAE7C,0BAA0B;IAC1B,IAAI,aAAkC,CAAC;IACvC,IAAI,SAAS,EAAE,CAAC;QACd,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC;IAChE,CAAC;SAAM,CAAC;QACN,2DAA2D;QAC3D,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,aAAa,CAAC;YACrD,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACpE,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mDAAmD,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC;IAED,kBAAkB;IAClB,IAAI,WAAW,GAAG,EAAE,CAAC;IACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,WAAW,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACvD,MAAM,UAAU,GAAG,eAAe,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC5D,WAAW,GAAG,cAAc,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IACxD,CAAC;SAAM,CAAC;QACN,WAAW,GAAG,iCAAiC,QAAQ,IAAI,CAAC;IAC9D,CAAC;IAED,gEAAgE;IAChE,IAAI,YAAY,GAAG,EAAE,CAAC;IACtB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;IACtE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,YAAY,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAED,6CAA6C;IAC7C,MAAM,aAAa,GAA2B,EAAE,CAAC;IACjD,KAAK,MAAM,SAAS,IAAI,aAAa,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC;QAC5C,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACvD,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAElD,MAAM,OAAO,GAAG,eAAe,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAEvD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;YACpD,aAAa,CAAC,WAAW,CAAC,GAAG,YAAY,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;gBAC3C,aAAa,CAAC,WAAW,CAAC,GAAG,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YAC/D,CAAC;iBAAM,CAAC;gBACN,aAAa,CAAC,WAAW,CAAC,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAC;YACpE,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO;QACL,MAAM,EAAE;YACN,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB;QACD,OAAO,EAAE,aAAa;QACtB,WAAW;QACX,YAAY;QACZ,aAAa;KACd,CAAC;AACJ,CAAC"}

package/packages/core/dist/sprint/scorer.d.ts

@@ -0,0 +1,20 @@
+import { Sprint } from '../common/types.js';
+export interface ScoreBreakdown {
+    score: number;
+    maxScore: number;
+    description: string;
+}
+export interface SprintScore {
+    totalScore: number;
+    breakdown: {
+        granularity: ScoreBreakdown;
+        grepGates: ScoreBreakdown;
+        smokeTests: ScoreBreakdown;
+        criteriaAndHints: ScoreBreakdown;
+        titleClarity: ScoreBreakdown;
+    };
+}
+/**
+ * Computes the quality score (0-10) of a Sprint.
+ */
+export declare function scoreSprint(sprint: Sprint): SprintScore;