hardness 1.0.0

package/node_modules/@hardness/analyzers/dist/typescript-node.js

@@ -0,0 +1,110 @@
+import fs from 'fs';
+import path from 'path';
+/**
+ * Static analyzer for TypeScript and Node.js projects.
+ * Checks for undeclared dependencies in package.json and discourages console.log without a logger.
+ */
+export const TypeScriptNodeAnalyzer = {
+    name: 'typescript-node',
+    supportedProfiles: ['typescript-node'],
+    async analyze(projectRoot) {
+        const diagnostics = [];
+        // 1. Try to read and map dependencies from package.json
+        const pkgPath = path.join(projectRoot, 'package.json');
+        let declaredDeps = [];
+        let declaredDevDeps = [];
+        if (fs.existsSync(pkgPath)) {
+            try {
+                const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf-8'));
+                declaredDeps = Object.keys(pkg.dependencies || {});
+                declaredDevDeps = Object.keys(pkg.devDependencies || {});
+            }
+            catch {
+                // Ignore package.json parse errors
+            }
+        }
+        // Node.js built-in modules
+        const nodeBuiltins = [
+            'path', 'fs', 'os', 'child_process', 'crypto', 'url', 'readline',
+            'events', 'util', 'http', 'https', 'stream', 'zlib', 'assert'
+        ];
+        const allDeclared = [...declaredDeps, ...declaredDevDeps, ...nodeBuiltins];
+        // 2. Find files recursively
+        function findFiles(dir) {
+            let results = [];
+            const list = fs.readdirSync(dir);
+            for (const file of list) {
+                // Skip common build, dependency or temp folders
+                if (['node_modules', 'dist', '.git', '.hardness', 'temp-cli-test', 'temp-orchestrator-test', 'temp-preflight-test'].includes(file)) {
+                    continue;
+                }
+                const filePath = path.join(dir, file);
+                const stat = fs.statSync(filePath);
+                if (stat && stat.isDirectory()) {
+                    results = results.concat(findFiles(filePath));
+                }
+                else if (file.endsWith('.ts') || file.endsWith('.js') || file.endsWith('.tsx') || file.endsWith('.jsx')) {
+                    results.push(filePath);
+                }
+            }
+            return results;
+        }
+        let files = [];
+        try {
+            files = findFiles(projectRoot);
+        }
+        catch {
+            return [];
+        }
+        // 3. Scan files for inconsistencies
+        for (const file of files) {
+            const relativeFile = path.relative(projectRoot, file).split('\\').join('/');
+            const content = fs.readFileSync(file, 'utf-8');
+            const lines = content.split('\n');
+            for (let i = 0; i < lines.length; i++) {
+                const lineContent = lines[i];
+                const lineNum = i + 1;
+                // A. Detect console.log
+                if (lineContent.includes('console.log') && !lineContent.includes('//') && !lineContent.includes('/*')) {
+                    diagnostics.push({
+                        file: relativeFile,
+                        line: lineNum,
+                        ruleId: 'no-console-log',
+                        message: 'console.log call detected. Consider using a formal system logger instead.',
+                        severity: 'warning'
+                    });
+                }
+                // B. Detect imports of packages not declared in the manifest
+                const importMatch = lineContent.match(/(?:import\s+.*\s+from\s+|require\()['"]([^'"]+)['"]/);
+                if (importMatch) {
+                    const importPath = importMatch[1];
+                    // Skip relative imports
+                    if (!importPath.startsWith('.') && !importPath.startsWith('/') && !importPath.startsWith('file:')) {
+                        let pkgName = importPath;
+                        // Handle scoped packages (e.g. @hardness/core)
+                        if (importPath.startsWith('@')) {
+                            const parts = importPath.split('/');
+                            if (parts.length >= 2) {
+                                pkgName = `${parts[0]}/${parts[1]}`;
+                            }
+                        }
+                        else {
+                            pkgName = importPath.split('/')[0];
+                        }
+                        if (!allDeclared.includes(pkgName)) {
+                            diagnostics.push({
+                                file: relativeFile,
+                                line: lineNum,
+                                ruleId: 'undeclared-dependency',
+                                message: `Dependency "${pkgName}" imported in code but not declared in package.json.`,
+                                severity: 'error'
+                            });
+                        }
+                    }
+                }
+            }
+        }
+        return diagnostics;
+    }
+};
+//# sourceMappingURL=typescript-node.js.map

package/node_modules/@hardness/analyzers/dist/typescript-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typescript-node.js","sourceRoot":"","sources":["../src/typescript-node.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAa;IAC9C,IAAI,EAAE,iBAAiB;IACvB,iBAAiB,EAAE,CAAC,iBAAiB,CAAC;IACtC,KAAK,CAAC,OAAO,CAAC,WAAmB;QAC/B,MAAM,WAAW,GAAiB,EAAE,CAAC;QAErC,wDAAwD;QACxD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,CAAC;QACvD,IAAI,YAAY,GAAa,EAAE,CAAC;QAChC,IAAI,eAAe,GAAa,EAAE,CAAC;QAEnC,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1D,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;gBACnD,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACP,mCAAmC;YACrC,CAAC;QACH,CAAC;QAED,2BAA2B;QAC3B,MAAM,YAAY,GAAG;YACnB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU;YAChE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;SAC9D,CAAC;QAEF,MAAM,WAAW,GAAG,CAAC,GAAG,YAAY,EAAE,GAAG,eAAe,EAAE,GAAG,YAAY,CAAC,CAAC;QAE3E,4BAA4B;QAC5B,SAAS,SAAS,CAAC,GAAW;YAC5B,IAAI,OAAO,GAAa,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;YACjC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;gBACxB,gDAAgD;gBAChD,IAAI,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE,wBAAwB,EAAE,qBAAqB,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACnI,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBACtC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBACnC,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/B,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAChD,CAAC;qBAAM,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC1G,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBACzB,CAAC;YACH,CAAC;YACD,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,IAAI,KAAK,GAAa,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,KAAK,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,oCAAoC;QACpC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC5E,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC/C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAElC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtC,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7B,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;gBAEtB,wBAAwB;gBACxB,IAAI,WAAW,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;oBACtG,WAAW,CAAC,IAAI,CAAC;wBACf,IAAI,EAAE,YAAY;wBAClB,IAAI,EAAE,OAAO;wBACb,MAAM,EAAE,gBAAgB;wBACxB,OAAO,EAAE,2EAA2E;wBACpF,QAAQ,EAAE,SAAS;qBACpB,CAAC,CAAC;gBACL,CAAC;gBAED,6DAA6D;gBAC7D,MAAM,WAAW,GAAG,WAAW,CAAC,KAAK,CAAC,qDAAqD,CAAC,CAAC;gBAC7F,IAAI,WAAW,EAAE,CAAC;oBAChB,MAAM,UAAU,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;oBAElC,wBAAwB;oBACxB,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;wBAClG,IAAI,OAAO,GAAG,UAAU,CAAC;wBAEzB,+CAA+C;wBAC/C,IAAI,UAAU,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;4BAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;4BACpC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gCACtB,OAAO,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;4BACtC,CAAC;wBACH,CAAC;6BAAM,CAAC;4BACN,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;wBACrC,CAAC;wBAED,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;4BACnC,WAAW,CAAC,IAAI,CAAC;gCACf,IAAI,EAAE,YAAY;gCAClB,IAAI,EAAE,OAAO;gCACb,MAAM,EAAE,uBAAuB;gCAC/B,OAAO,EAAE,eAAe,OAAO,sDAAsD;gCACrF,QAAQ,EAAE,OAAO;6BAClB,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;CACF,CAAC"}

package/node_modules/@hardness/analyzers/package.json

@@ -0,0 +1,47 @@
+{
+  "name": "@hardness/analyzers",
+  "version": "1.0.0",
+  "description": "Hardness Stack Analyzers — static analysis registry per stack profile",
+  "author": "cmt-t",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "scripts": {
+    "build": "tsc --build",
+    "clean": "tsc --build --clean"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "@types/node": "^20.12.7"
+  },
+  "engines": {
+    "node": ">=20.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/cmt-t/HardNess.git",
+    "directory": "packages/analyzers"
+  },
+  "bugs": {
+    "url": "https://github.com/cmt-t/HardNess/issues"
+  },
+  "homepage": "https://github.com/cmt-t/HardNess#readme",
+  "keywords": [
+    "static-analysis",
+    "analyzer",
+    "audit",
+    "typescript",
+    "lint"
+  ]
+}

package/node_modules/@hardness/core/README.md

@@ -0,0 +1,20 @@
+# @hardness/core
+
+Core engine for [Hardness](https://github.com/cmt-t/HardNess) — orchestrator, gates, locks, config and security.
+
+## Contents
+
+- `orchestrator` — main loop: agent → gates → advance
+- `gates/` — typecheck, smoke, grep, anti-empty, unicode, paths, dependency, import-resolver, audit-gate
+- `locks/` — sprint-lock (immutable contract via SHA-256) + harness-guard (protects `.hardness/`)
+- `config/` — typed config via Zod schema + manager + presets
+- `sprint/` — validator, scorer, context generator, status manager
+- `security/` — command policy + log redactor
+- `common/` — cross-platform paths, subprocess, logger, types, preflight
+- `agent/` — context-gen + adapter
+
+See the [main repo](https://github.com/cmt-t/HardNess#readme) for full documentation.
+
+## License
+
+MIT © 2026 cmt-t

package/node_modules/@hardness/core/dist/agent/adapter.d.ts

@@ -0,0 +1,12 @@
+import { HardnessConfig } from '../config/schema.js';
+export interface AgentRunResult {
+    code: number | null;
+    durationMs: number;
+    stdout: string;
+    stderr: string;
+    error?: Error;
+}
+/**
+ * Invokes the external agent, substituting template variables and handling the shell process.
+ */
+export declare function runAgent(config: HardnessConfig, contextFilePath: string, projectRoot: string): Promise<AgentRunResult>;

package/node_modules/@hardness/core/dist/agent/adapter.js

@@ -0,0 +1,32 @@
+import { runChecked } from '../common/subprocess.js';
+import { logger } from '../common/logger.js';
+/**
+ * Invokes the external agent, substituting template variables and handling the shell process.
+ */
+export async function runAgent(config, contextFilePath, projectRoot) {
+    const startTime = Date.now();
+    const cmdTemplate = config.agent.agentCommand;
+    const timeoutMs = config.agent.timeout * 1000;
+    // Normalize paths to forward slashes for quote/escape compatibility in shell commands
+    const normalizedContextPath = contextFilePath.split('\\').join('/');
+    const normalizedCwd = projectRoot.split('\\').join('/');
+    const timeoutSecs = config.agent.timeout.toString();
+    const command = cmdTemplate
+        .split('{context_file}').join(normalizedContextPath)
+        .split('{cwd}').join(normalizedCwd)
+        .split('{timeout}').join(timeoutSecs);
+    logger.debug(`Invoking agent command: "${command}"`);
+    const subResult = await runChecked(command, {
+        cwd: projectRoot,
+        timeoutMs: timeoutMs
+    });
+    const durationMs = Date.now() - startTime;
+    return {
+        code: subResult.code,
+        durationMs,
+        stdout: subResult.stdout,
+        stderr: subResult.stderr,
+        error: subResult.error
+    };
+}
+//# sourceMappingURL=adapter.js.map

package/node_modules/@hardness/core/dist/agent/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/agent/adapter.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAU7C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,MAAsB,EACtB,eAAuB,EACvB,WAAmB;IAEnB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAE7B,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC;IAC9C,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAE9C,sFAAsF;IACtF,MAAM,qBAAqB,GAAG,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpE,MAAM,aAAa,GAAG,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;IAEpD,MAAM,OAAO,GAAG,WAAW;SACxB,KAAK,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC;SACnD,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC;SAClC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAExC,MAAM,CAAC,KAAK,CAAC,4BAA4B,OAAO,GAAG,CAAC,CAAC;IAErD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE;QAC1C,GAAG,EAAE,WAAW;QAChB,SAAS,EAAE,SAAS;KACrB,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAE1C,OAAO;QACL,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,UAAU;QACV,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,MAAM,EAAE,SAAS,CAAC,MAAM;QACxB,KAAK,EAAE,SAAS,CAAC,KAAK;KACvB,CAAC;AACJ,CAAC"}

package/node_modules/@hardness/core/dist/agent/context-gen.d.ts

@@ -0,0 +1,7 @@
+import { FeatureContextData } from '../sprint/context.js';
+import { Sprint } from '../common/types.js';
+/**
+ * Generates the context for a feature and writes it to disk as a JSON file,
+ * serving as the contract handed to the agent.
+ */
+export declare function writeContextFile(sprint: Sprint, featureId: string | null, outputPath: string, projectRoot?: string): FeatureContextData;

package/node_modules/@hardness/core/dist/agent/context-gen.js

@@ -0,0 +1,12 @@
+import fs from 'fs';
+import { generateFeatureContext } from '../sprint/context.js';
+/**
+ * Generates the context for a feature and writes it to disk as a JSON file,
+ * serving as the contract handed to the agent.
+ */
+export function writeContextFile(sprint, featureId, outputPath, projectRoot) {
+    const context = generateFeatureContext(sprint, featureId, projectRoot);
+    fs.writeFileSync(outputPath, JSON.stringify(context, null, 2), 'utf-8');
+    return context;
+}
+//# sourceMappingURL=context-gen.js.map

package/node_modules/@hardness/core/dist/agent/context-gen.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-gen.js","sourceRoot":"","sources":["../../src/agent/context-gen.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAsB,MAAM,sBAAsB,CAAC;AAGlF;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAAc,EACd,SAAwB,EACxB,UAAkB,EAClB,WAAoB;IAEpB,MAAM,OAAO,GAAG,sBAAsB,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC;IACvE,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/node_modules/@hardness/core/dist/common/logger.d.ts

@@ -0,0 +1,17 @@
+export declare enum LogLevel {
+    DEBUG = 0,
+    INFO = 1,
+    WARN = 2,
+    ERROR = 3,
+    FATAL = 4
+}
+export declare function setLogLevel(level: LogLevel): void;
+export declare function getLogLevel(): LogLevel;
+export declare const logger: {
+    debug(message: string, detail?: string): void;
+    info(message: string, detail?: string): void;
+    success(message: string, detail?: string): void;
+    warn(message: string, detail?: string): void;
+    error(message: string, nextStep?: string, detail?: string): void;
+    fatal(message: string, nextStep?: string, detail?: string): void;
+};

package/node_modules/@hardness/core/dist/common/logger.js

@@ -0,0 +1,59 @@
+import pc from 'picocolors';
+export var LogLevel;
+(function (LogLevel) {
+    LogLevel[LogLevel["DEBUG"] = 0] = "DEBUG";
+    LogLevel[LogLevel["INFO"] = 1] = "INFO";
+    LogLevel[LogLevel["WARN"] = 2] = "WARN";
+    LogLevel[LogLevel["ERROR"] = 3] = "ERROR";
+    LogLevel[LogLevel["FATAL"] = 4] = "FATAL";
+})(LogLevel || (LogLevel = {}));
+let currentLogLevel = LogLevel.INFO;
+export function setLogLevel(level) {
+    currentLogLevel = level;
+}
+export function getLogLevel() {
+    return currentLogLevel;
+}
+function log(level, prefix, message, detail) {
+    if (level < currentLogLevel)
+        return;
+    let formatted = `${prefix} ${message}`;
+    if (detail) {
+        formatted += `\n${pc.gray(detail)}`;
+    }
+    if (level >= LogLevel.ERROR) {
+        console.error(formatted);
+    }
+    else {
+        console.log(formatted);
+    }
+}
+export const logger = {
+    debug(message, detail) {
+        log(LogLevel.DEBUG, pc.gray('⚙ debug'), message, detail);
+    },
+    info(message, detail) {
+        log(LogLevel.INFO, pc.blue('ℹ info'), message, detail);
+    },
+    success(message, detail) {
+        log(LogLevel.INFO, pc.green('✓ success'), message, detail);
+    },
+    warn(message, detail) {
+        log(LogLevel.WARN, pc.yellow('⚠ warning'), message, detail);
+    },
+    error(message, nextStep, detail) {
+        let msg = pc.red(message);
+        if (nextStep) {
+            msg += `\n${pc.cyan('👉 Next step: ')}${nextStep}`;
+        }
+        log(LogLevel.ERROR, pc.red('✗ error'), msg, detail);
+    },
+    fatal(message, nextStep, detail) {
+        let msg = pc.bold(pc.red(message));
+        if (nextStep) {
+            msg += `\n${pc.cyan('👉 Next step: ')}${nextStep}`;
+        }
+        log(LogLevel.FATAL, pc.bold(pc.bgRed(pc.white(' FATAL '))), msg, detail);
+    },
+};
+//# sourceMappingURL=logger.js.map

package/node_modules/@hardness/core/dist/common/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/common/logger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,YAAY,CAAC;AAE5B,MAAM,CAAN,IAAY,QAMX;AAND,WAAY,QAAQ;IAClB,yCAAS,CAAA;IACT,uCAAQ,CAAA;IACR,uCAAQ,CAAA;IACR,yCAAS,CAAA;IACT,yCAAS,CAAA;AACX,CAAC,EANW,QAAQ,KAAR,QAAQ,QAMnB;AAED,IAAI,eAAe,GAAG,QAAQ,CAAC,IAAI,CAAC;AAEpC,MAAM,UAAU,WAAW,CAAC,KAAe;IACzC,eAAe,GAAG,KAAK,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,OAAO,eAAe,CAAC;AACzB,CAAC;AAED,SAAS,GAAG,CAAC,KAAe,EAAE,MAAc,EAAE,OAAe,EAAE,MAAe;IAC5E,IAAI,KAAK,GAAG,eAAe;QAAE,OAAO;IAEpC,IAAI,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,EAAE,CAAC;IACvC,IAAI,MAAM,EAAE,CAAC;QACX,SAAS,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,KAAK,IAAI,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,KAAK,CAAC,OAAe,EAAE,MAAe;QACpC,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,MAAe;QACnC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IACzD,CAAC;IAED,OAAO,CAAC,OAAe,EAAE,MAAe;QACtC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,CAAC,OAAe,EAAE,MAAe;QACnC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,QAAiB,EAAE,MAAe;QACvD,IAAI,GAAG,GAAG,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1B,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrD,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IACtD,CAAC;IAED,KAAK,CAAC,OAAe,EAAE,QAAiB,EAAE,MAAe;QACvD,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QACnC,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,gBAAgB,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrD,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;IAC3E,CAAC;CACF,CAAC"}

package/node_modules/@hardness/core/dist/common/paths.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Returns the project root directory.
+ * Can be overridden via the HARDNESS_ROOT env var for testing convenience.
+ */
+export declare function getProjectRoot(): string;
+/**
+ * Resolves a path safely against directory traversal.
+ * Guarantees the final path is inside the project root.
+ */
+export declare function safeProjectPath(relativeOrAbsolutePath: string, customRoot?: string): string;
+/**
+ * Normalizes a path to be relative to the project root, using forward slashes.
+ */
+export declare function normalizeProjectRel(filePath: string, customRoot?: string): string;
+/**
+ * Returns the list of protected paths/directories that the agent cannot modify.
+ */
+export declare function getProtectedPrefixes(): string[];
+/**
+ * Checks whether a given path belongs to a protected area.
+ */
+export declare function isPathProtected(relativeOrAbsolutePath: string, customRoot?: string): boolean;

package/node_modules/@hardness/core/dist/common/paths.js

@@ -0,0 +1,72 @@
+import path from 'path';
+/**
+ * Returns the project root directory.
+ * Can be overridden via the HARDNESS_ROOT env var for testing convenience.
+ */
+export function getProjectRoot() {
+    if (process.env.HARDNESS_ROOT) {
+        return path.resolve(process.env.HARDNESS_ROOT);
+    }
+    return path.resolve(process.cwd());
+}
+/**
+ * Resolves a path safely against directory traversal.
+ * Guarantees the final path is inside the project root.
+ */
+export function safeProjectPath(relativeOrAbsolutePath, customRoot) {
+    const root = customRoot ? path.resolve(customRoot) : getProjectRoot();
+    const absolutePath = path.resolve(root, relativeOrAbsolutePath);
+    const relative = path.relative(root, absolutePath);
+    // If it starts with .. or is absolute (outside root), traversal occurred
+    if (relative.startsWith('..') || path.isAbsolute(relative)) {
+        throw new Error(`Path traversal detected: "${relativeOrAbsolutePath}" is outside the root "${root}"`);
+    }
+    return absolutePath;
+}
+/**
+ * Normalizes a path to be relative to the project root, using forward slashes.
+ */
+export function normalizeProjectRel(filePath, customRoot) {
+    const root = customRoot ? path.resolve(customRoot) : getProjectRoot();
+    const absolutePath = path.resolve(root, filePath);
+    const relative = path.relative(root, absolutePath);
+    if (relative.startsWith('..') || path.isAbsolute(relative)) {
+        throw new Error(`Path "${filePath}" is outside the project root "${root}"`);
+    }
+    // Normalize path separators to '/'
+    return relative.split(path.sep).join('/');
+}
+/**
+ * Returns the list of protected paths/directories that the agent cannot modify.
+ */
+export function getProtectedPrefixes() {
+    return [
+        '.hardness/scripts/',
+        '.hardness/schema/',
+        '.hardness/locks/',
+        'templates/',
+    ];
+}
+/**
+ * Checks whether a given path belongs to a protected area.
+ */
+export function isPathProtected(relativeOrAbsolutePath, customRoot) {
+    let relativePath;
+    try {
+        relativePath = normalizeProjectRel(relativeOrAbsolutePath, customRoot);
+    }
+    catch (err) {
+        // Outside the project is considered protected/invalid
+        return true;
+    }
+    const protectedPrefixes = getProtectedPrefixes();
+    // Individual protected files at the .hardness root
+    if (relativePath === '.hardness' ||
+        relativePath === '.hardness/config.json' ||
+        relativePath === '.hardness/current.txt') {
+        return true;
+    }
+    return protectedPrefixes.some(prefix => relativePath.startsWith(prefix) ||
+        (relativePath + '/').startsWith(prefix));
+}
+//# sourceMappingURL=paths.js.map

package/node_modules/@hardness/core/dist/common/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/common/paths.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB;;;GAGG;AACH,MAAM,UAAU,cAAc;IAC5B,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,sBAA8B,EAAE,UAAmB;IACjF,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACtE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,sBAAsB,CAAC,CAAC;IAEhE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAEnD,yEAAyE;IACzE,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,6BAA6B,sBAAsB,0BAA0B,IAAI,GAAG,CAAC,CAAC;IACxG,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,UAAmB;IACvE,MAAM,IAAI,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,EAAE,CAAC;IACtE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAEnD,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,KAAK,CAAC,SAAS,QAAQ,kCAAkC,IAAI,GAAG,CAAC,CAAC;IAC9E,CAAC;IAED,mCAAmC;IACnC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,OAAO;QACL,oBAAoB;QACpB,mBAAmB;QACnB,kBAAkB;QAClB,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,sBAA8B,EAAE,UAAmB;IACjF,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACH,YAAY,GAAG,mBAAmB,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;IACzE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sDAAsD;QACtD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,iBAAiB,GAAG,oBAAoB,EAAE,CAAC;IAEjD,mDAAmD;IACnD,IACE,YAAY,KAAK,WAAW;QAC5B,YAAY,KAAK,uBAAuB;QACxC,YAAY,KAAK,uBAAuB,EACxC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CACrC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC;QAC/B,CAAC,YAAY,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CACxC,CAAC;AACJ,CAAC"}

package/node_modules/@hardness/core/dist/common/preflight.d.ts

@@ -0,0 +1,9 @@
+export interface PreflightResult {
+    passed: boolean;
+    errors: string[];
+    warnings: string[];
+}
+/**
+ * Runs static and environment checks before a run to ensure the project is ready for the agent.
+ */
+export declare function runPreflight(projectRoot?: string): Promise<PreflightResult>;

package/node_modules/@hardness/core/dist/common/preflight.js

@@ -0,0 +1,69 @@
+import fs from 'fs';
+import path from 'path';
+import { getProjectRoot } from './paths.js';
+import { runChecked } from './subprocess.js';
+import { loadConfig } from '../config/manager.js';
+/**
+ * Runs static and environment checks before a run to ensure the project is ready for the agent.
+ */
+export async function runPreflight(projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    const errors = [];
+    const warnings = [];
+    // 1. Verify the harness folder
+    const hardnessDir = path.join(root, '.hardness');
+    if (!fs.existsSync(hardnessDir)) {
+        errors.push('.hardness directory not found.');
+        return { passed: false, errors, warnings };
+    }
+    // 2. Try to load the config
+    let config;
+    try {
+        config = loadConfig(root);
+    }
+    catch (err) {
+        errors.push(`Invalid configuration in config.json: ${err.message}`);
+        return { passed: false, errors, warnings };
+    }
+    // 3. Validate the active sprint
+    const currentPath = path.join(hardnessDir, 'current.txt');
+    if (!fs.existsSync(currentPath)) {
+        errors.push('.hardness/current.txt not found.');
+    }
+    else {
+        const currentSprintFile = fs.readFileSync(currentPath, 'utf-8').trim();
+        if (currentSprintFile !== 'DONE') {
+            const sprintPath = path.join(hardnessDir, 'sprints', currentSprintFile);
+            if (!fs.existsSync(sprintPath)) {
+                errors.push(`Active sprint file referenced in current.txt does not exist: "${currentSprintFile}"`);
+            }
+        }
+    }
+    // 4. Check stack dependencies
+    if (config.stack.stackProfile === 'typescript-node') {
+        const pkgPath = path.join(root, 'package.json');
+        if (!fs.existsSync(pkgPath)) {
+            errors.push('Stack profile is "typescript-node" but package.json was not found at the project root.');
+        }
+        const nodeCheck = await runChecked('node --version');
+        if (nodeCheck.code !== 0) {
+            errors.push('Node.js is not available on PATH for the "typescript-node" stack.');
+        }
+    }
+    // 5. Check git state
+    try {
+        const gitCheck = await runChecked('git status --porcelain');
+        if (gitCheck.code === 0 && gitCheck.stdout.trim().length > 0) {
+            warnings.push('The Git repository has uncommitted local file changes.');
+        }
+    }
+    catch {
+        // If git is not installed, ignore (not a critical error)
+    }
+    return {
+        passed: errors.length === 0,
+        errors,
+        warnings
+    };
+}
+//# sourceMappingURL=preflight.js.map

package/node_modules/@hardness/core/dist/common/preflight.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preflight.js","sourceRoot":"","sources":["../../src/common/preflight.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAQlD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,WAAoB;IACrD,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,+BAA+B;IAC/B,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACjD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC9C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,4BAA4B;IAC5B,IAAI,MAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,yCAA0C,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IAC7C,CAAC;IAED,gCAAgC;IAChC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC1D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAChC,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,MAAM,iBAAiB,GAAG,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QACvE,IAAI,iBAAiB,KAAK,MAAM,EAAE,CAAC;YACjC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,iBAAiB,CAAC,CAAC;YACxE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,iEAAiE,iBAAiB,GAAG,CAAC,CAAC;YACrG,CAAC;QACH,CAAC;IACH,CAAC;IAED,8BAA8B;IAC9B,IAAI,MAAM,CAAC,KAAK,CAAC,YAAY,KAAK,iBAAiB,EAAE,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;QAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,wFAAwF,CAAC,CAAC;QACxG,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,gBAAgB,CAAC,CAAC;QACrD,IAAI,SAAS,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QACnF,CAAC;IACH,CAAC;IAED,qBAAqB;IACrB,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,wBAAwB,CAAC,CAAC;QAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7D,QAAQ,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yDAAyD;IAC3D,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC3B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC"}

package/node_modules/@hardness/core/dist/common/subprocess.d.ts

@@ -0,0 +1,18 @@
+export interface RunResult {
+    code: number | null;
+    signal: string | null;
+    stdout: string;
+    stderr: string;
+    error?: Error;
+}
+export interface RunOptions {
+    cwd?: string;
+    timeoutMs?: number;
+    env?: NodeJS.ProcessEnv;
+    shell?: boolean | string;
+}
+/**
+ * Runs a system command asynchronously, wrapped in a Promise.
+ * Picks the correct shell depending on the OS (cmd.exe on Windows, /bin/sh on Unix).
+ */
+export declare function runChecked(command: string, options?: RunOptions): Promise<RunResult>;

package/node_modules/@hardness/core/dist/common/subprocess.js

@@ -0,0 +1,79 @@
+import { spawn } from 'child_process';
+import os from 'os';
+/**
+ * Runs a system command asynchronously, wrapped in a Promise.
+ * Picks the correct shell depending on the OS (cmd.exe on Windows, /bin/sh on Unix).
+ */
+export function runChecked(command, options = {}) {
+    return new Promise((resolve) => {
+        const isWin = os.platform() === 'win32';
+        // Determine the default shell if not specified
+        let shell = true;
+        if (options.shell !== undefined) {
+            shell = options.shell;
+        }
+        else {
+            shell = isWin ? 'cmd.exe' : '/bin/sh';
+        }
+        const spawnOptions = {
+            cwd: options.cwd,
+            env: options.env || process.env,
+            shell: shell,
+        };
+        let child;
+        // With shell: true (default), we pass the full command string
+        if (spawnOptions.shell) {
+            child = spawn(command, [], spawnOptions);
+        }
+        else {
+            const parts = command.split(/\s+/);
+            const cmd = parts[0];
+            const args = parts.slice(1);
+            child = spawn(cmd, args, spawnOptions);
+        }
+        let stdout = '';
+        let stderr = '';
+        let isTimeout = false;
+        // Timeout handling
+        let timeoutTimer = null;
+        if (options.timeoutMs) {
+            timeoutTimer = setTimeout(() => {
+                isTimeout = true;
+                child.kill('SIGKILL');
+            }, options.timeoutMs);
+        }
+        if (child.stdout) {
+            child.stdout.on('data', (data) => {
+                stdout += data.toString();
+            });
+        }
+        if (child.stderr) {
+            child.stderr.on('data', (data) => {
+                stderr += data.toString();
+            });
+        }
+        child.on('error', (error) => {
+            if (timeoutTimer)
+                clearTimeout(timeoutTimer);
+            resolve({
+                code: null,
+                signal: null,
+                stdout,
+                stderr,
+                error: isTimeout ? new Error(`Execution timed out after ${options.timeoutMs}ms`) : error,
+            });
+        });
+        child.on('close', (code, signal) => {
+            if (timeoutTimer)
+                clearTimeout(timeoutTimer);
+            resolve({
+                code: isTimeout ? null : code,
+                signal: isTimeout ? 'SIGKILL' : signal,
+                stdout,
+                stderr,
+                error: isTimeout ? new Error(`Execution timed out after ${options.timeoutMs}ms`) : undefined,
+            });
+        });
+    });
+}
+//# sourceMappingURL=subprocess.js.map

package/node_modules/@hardness/core/dist/common/subprocess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subprocess.js","sourceRoot":"","sources":["../../src/common/subprocess.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAgB,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,MAAM,IAAI,CAAC;AAiBpB;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,UAAsB,EAAE;IAClE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,EAAE,KAAK,OAAO,CAAC;QAExC,+CAA+C;QAC/C,IAAI,KAAK,GAAqB,IAAI,CAAC;QACnC,IAAI,OAAO,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAChC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QACxB,CAAC;aAAM,CAAC;YACN,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACxC,CAAC;QAED,MAAM,YAAY,GAAiB;YACjC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;YAC/B,KAAK,EAAE,KAAK;SACb,CAAC;QAEF,IAAI,KAA+B,CAAC;QAEpC,8DAA8D;QAC9D,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,EAAE,EAAE,YAAY,CAAC,CAAC;QAC3C,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC5B,KAAK,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QACzC,CAAC;QAED,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,IAAI,SAAS,GAAG,KAAK,CAAC;QAEtB,mBAAmB;QACnB,IAAI,YAAY,GAA0B,IAAI,CAAC;QAC/C,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACtB,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC7B,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC/B,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAC5B,CAAC,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC1B,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,OAAO,CAAC;gBACN,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,IAAI;gBACZ,MAAM;gBACN,MAAM;gBACN,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK;aACzF,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YACjC,IAAI,YAAY;gBAAE,YAAY,CAAC,YAAY,CAAC,CAAC;YAC7C,OAAO,CAAC;gBACN,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;gBAC7B,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;gBACtC,MAAM;gBACN,MAAM;gBACN,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,6BAA6B,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;aAC7F,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}