hardness 1.0.0

package/node_modules/@hardness/core/dist/locks/harness-guard.js

@@ -0,0 +1,121 @@
+import crypto from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import { getProjectRoot } from '../common/paths.js';
+/**
+ * Recursively scans a directory to find all files.
+ */
+export function globFiles(dir) {
+    if (!fs.existsSync(dir))
+        return [];
+    const results = [];
+    const list = fs.readdirSync(dir);
+    for (const file of list) {
+        const filePath = path.join(dir, file);
+        const stat = fs.statSync(filePath);
+        if (stat && stat.isDirectory()) {
+            results.push(...globFiles(filePath));
+        }
+        else {
+            results.push(filePath);
+        }
+    }
+    return results;
+}
+/**
+ * Computes the SHA-256 hash of a file.
+ */
+export function computeFileHash(filePath) {
+    const content = fs.readFileSync(filePath);
+    return crypto.createHash('sha256').update(content).digest('hex');
+}
+/**
+ * Returns all protected Hardness files in the user's project.
+ */
+export function getProtectedFilesList(projectRoot) {
+    const list = [];
+    // Protect schema files
+    const schemaDir = path.join(projectRoot, '.hardness', 'schema');
+    if (fs.existsSync(schemaDir)) {
+        list.push(...globFiles(schemaDir));
+    }
+    // Protect prompts and rules
+    const promptsDir = path.join(projectRoot, '.hardness', 'prompts');
+    if (fs.existsSync(promptsDir)) {
+        list.push(...globFiles(promptsDir));
+    }
+    return list;
+}
+/**
+ * Returns the path to the harness integrity lock file.
+ */
+export function getGuardLockPath(projectRoot) {
+    return path.join(projectRoot, '.hardness', 'locks', 'harness.lock.json');
+}
+/**
+ * Verifies the integrity of protected files against the lock. Throws on violation.
+ */
+export function verifyGuard(projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    const lockPath = getGuardLockPath(root);
+    if (!fs.existsSync(lockPath)) {
+        throw new Error(`Harness integrity file not found: harness.lock.json`);
+    }
+    const raw = fs.readFileSync(lockPath, 'utf-8');
+    const lockData = JSON.parse(raw);
+    const protectedFiles = getProtectedFilesList(root);
+    // Validate modifications and unregistered additional files
+    for (const file of protectedFiles) {
+        const relPath = path.relative(root, file).split(path.sep).join('/');
+        const hash = computeFileHash(file);
+        const lockedHash = lockData.files[relPath];
+        if (!lockedHash) {
+            throw new Error(`Unauthorized file detected in the harness folder: ${relPath}`);
+        }
+        if (lockedHash !== hash) {
+            throw new Error(`Harness file illegally modified: ${relPath}`);
+        }
+    }
+    // Validate removed files
+    for (const relPath of Object.keys(lockData.files)) {
+        const absPath = path.join(root, relPath);
+        if (!fs.existsSync(absPath)) {
+            throw new Error(`Harness file illegally removed: ${relPath}`);
+        }
+    }
+}
+/**
+ * Resets or initializes the integrity signature of protected files.
+ */
+export function resetGuard(projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    const lockPath = getGuardLockPath(root);
+    const parentDir = path.dirname(lockPath);
+    if (!fs.existsSync(parentDir)) {
+        fs.mkdirSync(parentDir, { recursive: true });
+    }
+    const protectedFiles = getProtectedFilesList(root);
+    const files = {};
+    for (const file of protectedFiles) {
+        const relPath = path.relative(root, file).split(path.sep).join('/');
+        files[relPath] = computeFileHash(file);
+    }
+    const lockData = {
+        schemaVersion: 4,
+        files
+    };
+    fs.writeFileSync(lockPath, JSON.stringify(lockData, null, 2), 'utf-8');
+}
+/**
+ * Ensures the harness integrity is initialized or verified.
+ */
+export function ensureGuard(projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    const lockPath = getGuardLockPath(root);
+    if (!fs.existsSync(lockPath)) {
+        resetGuard(root);
+        return;
+    }
+    verifyGuard(root);
+}
+//# sourceMappingURL=harness-guard.js.map

package/node_modules/@hardness/core/dist/locks/harness-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness-guard.js","sourceRoot":"","sources":["../../src/locks/harness-guard.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAOpD;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACjC,KAAK,MAAM,IAAI,IAAI,IAAI,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,IAAI,IAAI,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YAC/B,OAAO,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QACvC,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,qBAAqB,CAAC,WAAmB;IACvD,MAAM,IAAI,GAAa,EAAE,CAAC;IAE1B,uBAAuB;IACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7B,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,4BAA4B;IAC5B,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAClE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;AAC3E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,WAAoB;IAC9C,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAExC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAEhD,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAEnD,2DAA2D;IAC3D,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;QAEnC,MAAM,UAAU,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,qDAAqD,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC;QACD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,oCAAoC,OAAO,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,yBAAyB;IACzB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,WAAoB;IAC7C,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,cAAc,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IACnD,MAAM,KAAK,GAA2B,EAAE,CAAC;IAEzC,KAAK,MAAM,IAAI,IAAI,cAAc,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACpE,KAAK,CAAC,OAAO,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAkB;QAC9B,aAAa,EAAE,CAAC;QAChB,KAAK;KACN,CAAC;IAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,WAAoB;IAC9C,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAExC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,UAAU,CAAC,IAAI,CAAC,CAAC;QACjB,OAAO;IACT,CAAC;IAED,WAAW,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC"}

package/node_modules/@hardness/core/dist/locks/sprint-lock.d.ts

@@ -0,0 +1,39 @@
+import { Sprint } from '../common/types.js';
+export interface LockData {
+    schemaVersion: number;
+    sprintFile: string;
+    hash: string;
+    immutableSnapshot: any;
+}
+/**
+ * Serializes a JSON object in a canonical, deterministic way (sorted keys).
+ */
+export declare function canonicalizeJson(obj: any): string;
+/**
+ * Strips mutable fields from the sprint to obtain an immutable contract copy.
+ */
+export declare function getImmutableSprintCopy(sprint: Sprint): any;
+/**
+ * Computes the SHA-256 hash of the sprint contract.
+ */
+export declare function computeSprintHash(sprint: Sprint): string;
+/**
+ * Compares two objects and returns the path of the first difference found.
+ */
+export declare function findFirstDiff(obj1: any, obj2: any, currentPath?: string): string | null;
+/**
+ * Resolves the path to the sprint lock file.
+ */
+export declare function getLockFilePath(sprintFilename: string, projectRoot?: string): string;
+/**
+ * Ensures the lock exists. If it doesn't, creates it. If it does, validates it.
+ */
+export declare function ensureLock(sprint: Sprint, sprintFilename: string, projectRoot?: string): void;
+/**
+ * Compares the current sprint against the existing lock. Throws on violation.
+ */
+export declare function verifyLock(sprint: Sprint, sprintFilename: string, projectRoot?: string): void;
+/**
+ * Resets or initializes the sprint contract lock.
+ */
+export declare function resetLock(sprint: Sprint, sprintFilename: string, projectRoot?: string): void;

package/node_modules/@hardness/core/dist/locks/sprint-lock.js

@@ -0,0 +1,143 @@
+import crypto from 'crypto';
+import fs from 'fs';
+import path from 'path';
+import { getProjectRoot } from '../common/paths.js';
+/**
+ * Serializes a JSON object in a canonical, deterministic way (sorted keys).
+ */
+export function canonicalizeJson(obj) {
+    if (obj === null)
+        return 'null';
+    if (Array.isArray(obj)) {
+        return '[' + obj.map(canonicalizeJson).join(',') + ']';
+    }
+    if (typeof obj === 'object') {
+        const keys = Object.keys(obj).sort();
+        const parts = keys.map(k => `"${k}":${canonicalizeJson(obj[k])}`);
+        return '{' + parts.join(',') + '}';
+    }
+    return JSON.stringify(obj);
+}
+/**
+ * Strips mutable fields from the sprint to obtain an immutable contract copy.
+ */
+export function getImmutableSprintCopy(sprint) {
+    const copy = JSON.parse(JSON.stringify(sprint));
+    delete copy.status; // sprint status changes
+    if (Array.isArray(copy.features)) {
+        for (const feat of copy.features) {
+            delete feat.status;
+            delete feat.startedAt;
+            delete feat.completedAt;
+        }
+    }
+    return copy;
+}
+/**
+ * Computes the SHA-256 hash of the sprint contract.
+ */
+export function computeSprintHash(sprint) {
+    const immutableCopy = getImmutableSprintCopy(sprint);
+    const canonicalStr = canonicalizeJson(immutableCopy);
+    return crypto.createHash('sha256').update(canonicalStr).digest('hex');
+}
+/**
+ * Compares two objects and returns the path of the first difference found.
+ */
+export function findFirstDiff(obj1, obj2, currentPath = '') {
+    if (typeof obj1 !== typeof obj2) {
+        return `${currentPath}: different types (${typeof obj1} vs ${typeof obj2})`;
+    }
+    if (obj1 === null || obj2 === null || typeof obj1 !== 'object') {
+        if (obj1 !== obj2) {
+            return `${currentPath}: different values ("${obj1}" vs "${obj2}")`;
+        }
+        return null;
+    }
+    if (Array.isArray(obj1)) {
+        if (!Array.isArray(obj2)) {
+            return `${currentPath}: one is array, the other is not`;
+        }
+        if (obj1.length !== obj2.length) {
+            return `${currentPath}: different array lengths (${obj1.length} vs ${obj2.length})`;
+        }
+        for (let i = 0; i < obj1.length; i++) {
+            const diff = findFirstDiff(obj1[i], obj2[i], `${currentPath}[${i}]`);
+            if (diff)
+                return diff;
+        }
+        return null;
+    }
+    const keys1 = Object.keys(obj1).sort();
+    const keys2 = Object.keys(obj2).sort();
+    for (const k of keys1) {
+        if (!keys2.includes(k)) {
+            return `${currentPath ? currentPath + '.' : ''}${k}: key removed`;
+        }
+        const diff = findFirstDiff(obj1[k], obj2[k], `${currentPath ? currentPath + '.' : ''}${k}`);
+        if (diff)
+            return diff;
+    }
+    for (const k of keys2) {
+        if (!keys1.includes(k)) {
+            return `${currentPath ? currentPath + '.' : ''}${k}: key added`;
+        }
+    }
+    return null;
+}
+/**
+ * Resolves the path to the sprint lock file.
+ */
+export function getLockFilePath(sprintFilename, projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    return path.join(root, '.hardness', 'locks', 'sprints', `${sprintFilename}.lock.json`);
+}
+/**
+ * Ensures the lock exists. If it doesn't, creates it. If it does, validates it.
+ */
+export function ensureLock(sprint, sprintFilename, projectRoot) {
+    const lockPath = getLockFilePath(sprintFilename, projectRoot);
+    if (!fs.existsSync(lockPath)) {
+        resetLock(sprint, sprintFilename, projectRoot);
+        return;
+    }
+    verifyLock(sprint, sprintFilename, projectRoot);
+}
+/**
+ * Compares the current sprint against the existing lock. Throws on violation.
+ */
+export function verifyLock(sprint, sprintFilename, projectRoot) {
+    const lockPath = getLockFilePath(sprintFilename, projectRoot);
+    if (!fs.existsSync(lockPath)) {
+        throw new Error(`Contract lock not found for sprint: ${sprintFilename}`);
+    }
+    const raw = fs.readFileSync(lockPath, 'utf-8');
+    const lockData = JSON.parse(raw);
+    const currentHash = computeSprintHash(sprint);
+    if (currentHash !== lockData.hash) {
+        const currentSnapshot = getImmutableSprintCopy(sprint);
+        const diff = findFirstDiff(lockData.immutableSnapshot, currentSnapshot);
+        throw new Error(`Contract violation detected in sprint "${sprintFilename}". The agent attempted to alter the established contract!\n` +
+            `Difference: ${diff || 'Hash changed with no identifiable structural difference'}`);
+    }
+}
+/**
+ * Resets or initializes the sprint contract lock.
+ */
+export function resetLock(sprint, sprintFilename, projectRoot) {
+    const lockPath = getLockFilePath(sprintFilename, projectRoot);
+    const parentDir = path.dirname(lockPath);
+    if (!fs.existsSync(parentDir)) {
+        fs.mkdirSync(parentDir, { recursive: true });
+    }
+    const hash = computeSprintHash(sprint);
+    const snapshot = getImmutableSprintCopy(sprint);
+    const lockData = {
+        schemaVersion: 4,
+        sprintFile: sprintFilename,
+        hash,
+        immutableSnapshot: snapshot
+    };
+    fs.writeFileSync(lockPath, JSON.stringify(lockData, null, 2), 'utf-8');
+}
+//# sourceMappingURL=sprint-lock.js.map

package/node_modules/@hardness/core/dist/locks/sprint-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sprint-lock.js","sourceRoot":"","sources":["../../src/locks/sprint-lock.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAUpD;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAQ;IACvC,IAAI,GAAG,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACzD,CAAC;IACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClE,OAAO,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrC,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;AAC7B,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,wBAAwB;IAE5C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC,MAAM,CAAC;YACnB,OAAO,IAAI,CAAC,SAAS,CAAC;YACtB,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,MAAM,aAAa,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,YAAY,GAAG,gBAAgB,CAAC,aAAa,CAAC,CAAC;IACrD,OAAO,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,IAAS,EAAE,IAAS,EAAE,WAAW,GAAG,EAAE;IAClE,IAAI,OAAO,IAAI,KAAK,OAAO,IAAI,EAAE,CAAC;QAChC,OAAO,GAAG,WAAW,sBAAsB,OAAO,IAAI,OAAO,OAAO,IAAI,GAAG,CAAC;IAC9E,CAAC;IAED,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC/D,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,OAAO,GAAG,WAAW,wBAAwB,IAAI,SAAS,IAAI,IAAI,CAAC;QACrE,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,GAAG,WAAW,kCAAkC,CAAC;QAC1D,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,GAAG,WAAW,8BAA8B,IAAI,CAAC,MAAM,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC;QACtF,CAAC;QACD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACrC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,IAAI,CAAC,GAAG,CAAC,CAAC;YACrE,IAAI,IAAI;gBAAE,OAAO,IAAI,CAAC;QACxB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC;QACpE,CAAC;QACD,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,aAAa,CAAC;QAClE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAoB;IAC1E,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,cAAc,YAAY,CAAC,CAAC;AACzF,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,cAAsB,EAAE,WAAoB;IACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,SAAS,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QAC/C,OAAO;IACT,CAAC;IAED,UAAU,CAAC,MAAM,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;AAClD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,cAAsB,EAAE,WAAoB;IACrF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAE9D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,uCAAuC,cAAc,EAAE,CAAC,CAAC;IAC3E,CAAC;IAED,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,QAAQ,GAAa,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAE3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,WAAW,KAAK,QAAQ,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,eAAe,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;QACxE,MAAM,IAAI,KAAK,CACb,0CAA0C,cAAc,6DAA6D;YACrH,eAAe,IAAI,IAAI,yDAAyD,EAAE,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc,EAAE,cAAsB,EAAE,WAAoB;IACpF,MAAM,QAAQ,GAAG,eAAe,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC;IAC9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEzC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACvC,MAAM,QAAQ,GAAG,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAEhD,MAAM,QAAQ,GAAa;QACzB,aAAa,EAAE,CAAC;QAChB,UAAU,EAAE,cAAc;QAC1B,IAAI;QACJ,iBAAiB,EAAE,QAAQ;KAC5B,CAAC;IAEF,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACzE,CAAC"}

package/node_modules/@hardness/core/dist/orchestrator.d.ts

@@ -0,0 +1,8 @@
+export interface OrchestrateOptions {
+    dryRun?: boolean;
+    featureId?: string;
+}
+/**
+ * Main orchestrator loop: manages the feature lifecycle, locks, agent calls and gate validation.
+ */
+export declare function runOrchestrator(options?: OrchestrateOptions, projectRoot?: string): Promise<void>;

package/node_modules/@hardness/core/dist/orchestrator.js

@@ -0,0 +1,160 @@
+import fs from 'fs';
+import path from 'path';
+import { getProjectRoot } from './common/paths.js';
+import { loadConfig } from './config/manager.js';
+import { logger } from './common/logger.js';
+import { getNextFeature, updateFeatureStatus, closeSprint } from './sprint/status.js';
+import { writeContextFile } from './agent/context-gen.js';
+import { runAgent } from './agent/adapter.js';
+import { globalGateEngine } from './gates/engine.js';
+import { ensureLock, verifyLock, resetLock } from './locks/sprint-lock.js';
+import { ensureGuard } from './locks/harness-guard.js';
+/**
+ * Main orchestrator loop: manages the feature lifecycle, locks, agent calls and gate validation.
+ */
+export async function runOrchestrator(options = {}, projectRoot) {
+    const root = projectRoot || getProjectRoot();
+    const config = loadConfig(root);
+    logger.info('Starting the Hardness orchestrator...');
+    // 1. Verify harness integrity (harness-guard)
+    try {
+        ensureGuard(root);
+    }
+    catch (err) {
+        logger.fatal(`Harness guard integrity failure: ${err.message}`, 'Revert local changes in .hardness.');
+        process.exit(1);
+    }
+    // 2. Resolve the active sprint
+    const currentTxtPath = path.join(root, '.hardness', 'current.txt');
+    if (!fs.existsSync(currentTxtPath)) {
+        logger.fatal(`current.txt not found at: ${currentTxtPath}`, 'Set up the workspace.');
+        process.exit(1);
+    }
+    const activeSprintFile = fs.readFileSync(currentTxtPath, 'utf-8').trim();
+    if (activeSprintFile === 'DONE') {
+        logger.success('All sprints in the project are complete! Execution queue is empty.');
+        return;
+    }
+    const sprintsDir = path.join(root, '.hardness', 'sprints');
+    const sprintPath = path.join(sprintsDir, activeSprintFile);
+    if (!fs.existsSync(sprintPath)) {
+        logger.fatal(`Active sprint file not found: "${activeSprintFile}" in ${sprintsDir}`);
+        process.exit(1);
+    }
+    // Load and validate the sprint
+    let sprint;
+    try {
+        sprint = JSON.parse(fs.readFileSync(sprintPath, 'utf-8'));
+    }
+    catch (err) {
+        logger.fatal(`Error loading or parsing the active sprint JSON "${activeSprintFile}": ${err.message}`);
+        process.exit(1);
+    }
+    // Ensure sprint contract integrity (sprint-lock)
+    try {
+        ensureLock(sprint, activeSprintFile, root);
+    }
+    catch (err) {
+        logger.fatal(`Contract violation detected in the active sprint:\n${err.message}`, 'Restore the unauthorized changes in the sprint JSON.');
+        process.exit(1);
+    }
+    // 3. Resolve the next feature
+    const feature = getNextFeature(sprint);
+    if (!feature) {
+        logger.info(`All features complete. Closing sprint "${sprint.name}"...`);
+        if (options.dryRun) {
+            logger.success(`[DRY-RUN] Sprint "${sprint.name}" would be closed successfully.`);
+            return;
+        }
+        try {
+            closeSprint(sprint, sprintPath, config, root);
+            resetLock(sprint, activeSprintFile, root); // Update lock after closing the sprint
+            logger.success(`✓ Sprint "${sprint.name}" completed and closed successfully.`);
+            // Advance current.txt to the next sprint listed in the index
+            const indexPath = path.join(sprintsDir, '00-index.json');
+            if (fs.existsSync(indexPath)) {
+                const indexJson = JSON.parse(fs.readFileSync(indexPath, 'utf-8'));
+                const currentIndex = sprint.index;
+                const nextEntry = indexJson.sprints.find((s) => s.index === currentIndex + 1);
+                if (nextEntry) {
+                    fs.writeFileSync(currentTxtPath, `${nextEntry.file}\n`, 'utf-8');
+                    logger.info(`Queue advanced: next active sprint set to: ${nextEntry.file}`);
+                }
+                else {
+                    fs.writeFileSync(currentTxtPath, 'DONE\n', 'utf-8');
+                    logger.success('🎉 Congratulations! All planned sprints in the project are complete.');
+                }
+            }
+        }
+        catch (err) {
+            logger.error(`Error closing the sprint: ${err.message}`);
+            process.exit(1);
+        }
+        return;
+    }
+    logger.info(`Executing Feature: ${feature.id} - "${feature.title}"`);
+    if (options.dryRun) {
+        logger.success(`[DRY-RUN] Simulation completed for feature "${feature.id}".`);
+        return;
+    }
+    // Mark status in-progress and save the sprint
+    updateFeatureStatus(sprint, feature.id, 'in-progress');
+    fs.writeFileSync(sprintPath, JSON.stringify(sprint, null, 2), 'utf-8');
+    resetLock(sprint, activeSprintFile, root); // Update lock with the changed status
+    // Create logs directory and generate the run log filename
+    const logsDir = path.join(root, '.hardness', 'logs');
+    if (!fs.existsSync(logsDir)) {
+        fs.mkdirSync(logsDir, { recursive: true });
+    }
+    const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
+    const logFilename = `${timestamp}_sprint_${sprint.index}_feat_${feature.id}.log`;
+    const runLogPath = path.join(logsDir, logFilename);
+    // Generate the context.json file
+    const contextFilePath = path.join(root, '.hardness', 'context.json');
+    writeContextFile(sprint, feature.id, contextFilePath, root);
+    // Execute the configured agent
+    logger.info(`Starting the external agent execution...`);
+    const agentResult = await runAgent(config, contextFilePath, root);
+    // Save output to the run log
+    const logContent = `COMMAND: ${config.agent.agentCommand}\nEXIT CODE: ${agentResult.code}\nDURATION: ${agentResult.durationMs}ms\n\n=== STDOUT ===\n${agentResult.stdout}\n\n=== STDERR ===\n${agentResult.stderr}`;
+    fs.writeFileSync(runLogPath, logContent, 'utf-8');
+    // Reload the sprint to validate whether the agent violated the sprint contract
+    let sprintReloaded;
+    try {
+        sprintReloaded = JSON.parse(fs.readFileSync(sprintPath, 'utf-8'));
+        verifyLock(sprintReloaded, activeSprintFile, root);
+    }
+    catch (err) {
+        logger.error(`The agent violated the contract or corrupted the sprint file: ${err.message}`, 'Restore the sprint JSON changes.');
+        // Revert the feature status to pending
+        updateFeatureStatus(sprint, feature.id, 'pending');
+        fs.writeFileSync(sprintPath, JSON.stringify(sprint, null, 2), 'utf-8');
+        resetLock(sprint, activeSprintFile, root);
+        process.exit(1);
+    }
+    // Run the mechanical post-run validation gates
+    logger.info('Running mechanical post-execution validation gates...');
+    const gateResults = await globalGateEngine.runAll(feature, config, root, true);
+    let allPassed = true;
+    for (const res of gateResults) {
+        const symbol = res.passed ? '✓' : '✗';
+        const statusMsg = `${symbol} [Gate: ${res.gate}] ${res.message}`;
+        if (res.passed) {
+            logger.debug(statusMsg);
+        }
+        else {
+            allPassed = false;
+            logger.error(statusMsg, undefined, res.details);
+        }
+    }
+    if (allPassed) {
+        logger.success(`✓ Feature ${feature.id} passed all gates!`);
+        updateFeatureStatus(sprint, feature.id, 'done');
+        fs.writeFileSync(sprintPath, JSON.stringify(sprint, null, 2), 'utf-8');
+        resetLock(sprint, activeSprintFile, root);
+    }
+    else {
+        logger.error(`✗ Feature ${feature.id} failed validation gates. Kept as in-progress for correction.`);
+    }
+}
+//# sourceMappingURL=orchestrator.js.map

package/node_modules/@hardness/core/dist/orchestrator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"orchestrator.js","sourceRoot":"","sources":["../src/orchestrator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtF,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAC3E,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAQvD;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,UAA8B,EAAE,EAAE,WAAoB;IAC1F,MAAM,IAAI,GAAG,WAAW,IAAI,cAAc,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAEhC,MAAM,CAAC,IAAI,CAAC,uCAAuC,CAAC,CAAC;IAErD,8CAA8C;IAC9C,IAAI,CAAC;QACH,WAAW,CAAC,IAAI,CAAC,CAAC;IACpB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,oCAAqC,GAAa,CAAC,OAAO,EAAE,EAAE,oCAAoC,CAAC,CAAC;QACjH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC;IACnE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,6BAA6B,cAAc,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,gBAAgB,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACzE,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;QAChC,MAAM,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC;QACrF,OAAO;IACT,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;IAE3D,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,MAAM,CAAC,KAAK,CAAC,kCAAkC,gBAAgB,QAAQ,UAAU,EAAE,CAAC,CAAC;QACrF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+BAA+B;IAC/B,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,oDAAoD,gBAAgB,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;QACjH,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,iDAAiD;IACjD,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,sDAAuD,GAAa,CAAC,OAAO,EAAE,EAAE,sDAAsD,CAAC,CAAC;QACrJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,8BAA8B;IAC9B,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;IAEvC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CAAC,0CAA0C,MAAM,CAAC,IAAI,MAAM,CAAC,CAAC;QAEzE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,CAAC,OAAO,CAAC,qBAAqB,MAAM,CAAC,IAAI,iCAAiC,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,WAAW,CAAC,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9C,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,uCAAuC;YAClF,MAAM,CAAC,OAAO,CAAC,aAAa,MAAM,CAAC,IAAI,sCAAsC,CAAC,CAAC;YAE/E,6DAA6D;YAC7D,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,eAAe,CAAC,CAAC;YACzD,IAAI,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC;gBAClE,MAAM,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC;gBAClC,MAAM,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,KAAK,YAAY,GAAG,CAAC,CAAC,CAAC;gBAEnF,IAAI,SAAS,EAAE,CAAC;oBACd,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,GAAG,SAAS,CAAC,IAAI,IAAI,EAAE,OAAO,CAAC,CAAC;oBACjE,MAAM,CAAC,IAAI,CAAC,8CAA8C,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;gBAC9E,CAAC;qBAAM,CAAC;oBACN,EAAE,CAAC,aAAa,CAAC,cAAc,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;oBACpD,MAAM,CAAC,OAAO,CAAC,sEAAsE,CAAC,CAAC;gBACzF,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,KAAK,CAAC,6BAA8B,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,OAAO;IACT,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,sBAAsB,OAAO,CAAC,EAAE,OAAO,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC;IAErE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,CAAC,OAAO,CAAC,+CAA+C,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,8CAA8C;IAC9C,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC;IACvD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC,CAAC,sCAAsC;IAEjF,0DAA0D;IAC1D,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IACrD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,GAAG,SAAS,WAAW,MAAM,CAAC,KAAK,SAAS,OAAO,CAAC,EAAE,MAAM,CAAC;IACjF,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEnD,iCAAiC;IACjC,MAAM,eAAe,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,CAAC;IACrE,gBAAgB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAE5D,+BAA+B;IAC/B,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC,CAAC;IAElE,6BAA6B;IAC7B,MAAM,UAAU,GAAG,YAAY,MAAM,CAAC,KAAK,CAAC,YAAY,gBAAgB,WAAW,CAAC,IAAI,eAAe,WAAW,CAAC,UAAU,yBAAyB,WAAW,CAAC,MAAM,uBAAuB,WAAW,CAAC,MAAM,EAAE,CAAC;IACpN,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAElD,+EAA+E;IAC/E,IAAI,cAAsB,CAAC;IAC3B,IAAI,CAAC;QACH,cAAc,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;QAClE,UAAU,CAAC,cAAc,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iEAAkE,GAAa,CAAC,OAAO,EAAE,EAAE,kCAAkC,CAAC,CAAC;QAE5I,uCAAuC;QACvC,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACnD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,+CAA+C;IAC/C,MAAM,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;IACrE,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAE/E,IAAI,SAAS,GAAG,IAAI,CAAC;IACrB,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QACtC,MAAM,SAAS,GAAG,GAAG,MAAM,WAAW,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC;QACjE,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,SAAS,GAAG,KAAK,CAAC;YAClB,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAED,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,CAAC,OAAO,CAAC,aAAa,OAAO,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAC5D,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAChD,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,KAAK,CAAC,aAAa,OAAO,CAAC,EAAE,+DAA+D,CAAC,CAAC;IACvG,CAAC;AACH,CAAC"}

package/node_modules/@hardness/core/dist/security/policy.d.ts

@@ -0,0 +1,10 @@
+import { HardnessConfig } from '../config/schema.js';
+export interface SecurityCheckResult {
+    allowed: boolean;
+    reason?: string;
+}
+/**
+ * Validates the security of a shell command against the whitelist and blocklist
+ * configured in the security policy.
+ */
+export declare function validateCommandSecurity(command: string, config: HardnessConfig): SecurityCheckResult;

package/node_modules/@hardness/core/dist/security/policy.js

@@ -0,0 +1,32 @@
+/**
+ * Validates the security of a shell command against the whitelist and blocklist
+ * configured in the security policy.
+ */
+export function validateCommandSecurity(command, config) {
+    const { allowedCommandPrefixes, blockedPatterns } = config.security;
+    // 1. Check explicitly forbidden patterns (blocklist)
+    for (const pattern of blockedPatterns) {
+        try {
+            const regex = new RegExp(pattern);
+            if (regex.test(command)) {
+                return { allowed: false, reason: `Command contains forbidden pattern: "${pattern}"` };
+            }
+        }
+        catch {
+            // If the regex string is invalid, do a direct substring match
+            if (command.includes(pattern)) {
+                return { allowed: false, reason: `Command contains forbidden pattern (textual match): "${pattern}"` };
+            }
+        }
+    }
+    // 2. Check the first word against the allowed command-prefix whitelist
+    const firstWord = command.trim().split(/\s+/)[0];
+    if (!allowedCommandPrefixes.includes(firstWord)) {
+        return {
+            allowed: false,
+            reason: `Command "${firstWord}" is not in the allowed whitelist: [${allowedCommandPrefixes.join(', ')}]`
+        };
+    }
+    return { allowed: true };
+}
+//# sourceMappingURL=policy.js.map

package/node_modules/@hardness/core/dist/security/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../src/security/policy.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,MAAsB;IAC7E,MAAM,EAAE,sBAAsB,EAAE,eAAe,EAAE,GAAG,MAAM,CAAC,QAAQ,CAAC;IAEpE,qDAAqD;IACrD,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;gBACxB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,OAAO,GAAG,EAAE,CAAC;YACxF,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,8DAA8D;YAC9D,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,wDAAwD,OAAO,GAAG,EAAE,CAAC;YACxG,CAAC;QACH,CAAC;IACH,CAAC;IAED,uEAAuE;IACvE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACjD,IAAI,CAAC,sBAAsB,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,OAAO;YACL,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,YAAY,SAAS,uCAAuC,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SACzG,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC"}

package/node_modules/@hardness/core/dist/security/redactor.d.ts

@@ -0,0 +1,5 @@
+import { HardnessConfig } from '../config/schema.js';
+/**
+ * Removes API keys, tokens and passwords from log strings based on the security rules.
+ */
+export declare function redactSecrets(content: string, config: HardnessConfig): string;

package/node_modules/@hardness/core/dist/security/redactor.js

@@ -0,0 +1,40 @@
+const DEFAULT_REDACT_PATTERNS = [
+    /api[-_]?key\s*[:=]\s*['"`]?[a-zA-Z0-9-_]{16,}['"`]?/gi,
+    /bearer\s+[a-zA-Z0-9-_=.]{16,}/gi,
+    /password\s*[:=]\s*['"`]?[a-zA-Z0-9-_$#@!%^&*()]{6,}['"`]?/gi,
+    /sec[-_]?key\s*[:=]\s*['"`]?[a-zA-Z0-9-_]{16,}['"`]?/gi,
+    /secret\s*[:=]\s*['"`]?[a-zA-Z0-9-_]{16,}['"`]?/gi
+];
+/**
+ * Removes API keys, tokens and passwords from log strings based on the security rules.
+ */
+export function redactSecrets(content, config) {
+    if (!config.logs.redactSecrets) {
+        return content;
+    }
+    let redacted = content;
+    // 1. Apply built-in common secrets
+    for (const regex of DEFAULT_REDACT_PATTERNS) {
+        redacted = redacted.replace(regex, (match) => {
+            const parts = match.split(/([:=]\s*)/);
+            if (parts.length >= 3) {
+                // Preserve the key prefix (e.g. "apiKey: ") and redact only the value
+                return `${parts[0]}${parts[1]}[REDACTED]`;
+            }
+            return '[REDACTED]';
+        });
+    }
+    // 2. Apply user-configured custom regex patterns
+    const customPatterns = config.logs.redactPatterns || [];
+    for (const patternStr of customPatterns) {
+        try {
+            const regex = new RegExp(patternStr, 'gi');
+            redacted = redacted.replace(regex, '[REDACTED]');
+        }
+        catch {
+            // Ignore invalid custom regex
+        }
+    }
+    return redacted;
+}
+//# sourceMappingURL=redactor.js.map

package/node_modules/@hardness/core/dist/security/redactor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redactor.js","sourceRoot":"","sources":["../../src/security/redactor.ts"],"names":[],"mappings":"AAEA,MAAM,uBAAuB,GAAG;IAC9B,uDAAuD;IACvD,iCAAiC;IACjC,6DAA6D;IAC7D,uDAAuD;IACvD,kDAAkD;CACnD,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,MAAsB;IACnE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,IAAI,QAAQ,GAAG,OAAO,CAAC;IAEvB,mCAAmC;IACnC,KAAK,MAAM,KAAK,IAAI,uBAAuB,EAAE,CAAC;QAC5C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBACtB,sEAAsE;gBACtE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC;YAC5C,CAAC;YACD,OAAO,YAAY,CAAC;QACtB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,iDAAiD;IACjD,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC;IACxD,KAAK,MAAM,UAAU,IAAI,cAAc,EAAE,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAC3C,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACP,8BAA8B;QAChC,CAAC;IACH,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/node_modules/@hardness/core/dist/sprint/context.d.ts

@@ -0,0 +1,27 @@
+import { Sprint, Feature } from '../common/types.js';
+/**
+ * Represents line ranges to read from a file.
+ */
+export declare function parseLineRanges(rangesStr: string): [number, number][];
+/**
+ * Reads specific line ranges from a textual content, prefixing with line numbers (1-indexed).
+ */
+export declare function readLineRanges(fileContent: string, ranges: [number, number][]): string;
+/**
+ * Reads the full file and adds line numbers.
+ */
+export declare function readFullFileWithLineNumbers(fileContent: string): string;
+export interface FeatureContextData {
+    sprint: {
+        index: number;
+        name: string;
+    };
+    feature: Feature;
+    specExcerpt: string;
+    rulesExcerpt: string;
+    existingFiles: Record<string, string>;
+}
+/**
+ * Generates the complete context for a specific feature or the first pending/in-progress one.
+ */
+export declare function generateFeatureContext(sprint: Sprint, featureId: string | null, projectRoot?: string): FeatureContextData;