ralphctl 0.2.2 → 0.2.4

package/README.md

@@ -206,9 +206,9 @@ Run `ralphctl <command> --help` for details on any command.
 | [Contributing](./CONTRIBUTING.md)              | Dev setup, code style, PR process          |
 | [Changelog](./CHANGELOG.md)                    | Version history                            |
 
-**Blog posts:** [Building ralphctl](https://lukasgrigis.dev/blog/building-ralphctl) (
-backstory) | [From task CLI to agent harness](https://lukasgrigis.dev/blog/ralphctl-agent-harness/) (evaluator
-deep-dive)
+**Blog posts:** [Building ralphctl](https://lukasgrigis.dev/blog/building-ralphctl) (backstory) | [From task CLI to agent harness](https://lukasgrigis.dev/blog/ralphctl-agent-harness/) (evaluator deep-dive)
+
+**Further reading:** [Harness Engineering for Coding Agent Users](https://martinfowler.com/articles/harness-engineering.html) — Martin Fowler (April 2026) | [Harness Design for Long-Running Application Development](https://www.anthropic.com/engineering/harness-design-long-running-apps) — Anthropic Engineering
 
 ---
 

package/dist/{add-TGJTRHIF.mjs → add-3T225IX5.mjs}

@@ -2,12 +2,12 @@
 import {
   addCheckScriptToRepository,
   projectAddCommand
-} from "./chunk-Q3VWJARJ.mjs";
+} from "./chunk-UBPZHHCD.mjs";
 import "./chunk-7LZ6GOGN.mjs";
 import "./chunk-7TG3EAQ2.mjs";
-import "./chunk-LG6B7QVO.mjs";
+import "./chunk-EUNAUHC3.mjs";
 import "./chunk-OEUJDSHY.mjs";
-import "./chunk-ZDEVRTGY.mjs";
+import "./chunk-IB6OCKZW.mjs";
 import "./chunk-EDJX7TT6.mjs";
 import "./chunk-QBXHAXHI.mjs";
 export {

package/dist/{add-SEDQ3VK7.mjs → add-6A5432U2.mjs}

@@ -2,12 +2,12 @@
 import {
   addSingleTicketInteractive,
   ticketAddCommand
-} from "./chunk-XPDI4SYI.mjs";
+} from "./chunk-742XQ7FL.mjs";
 import "./chunk-7TG3EAQ2.mjs";
-import "./chunk-LG6B7QVO.mjs";
-import "./chunk-KPTPKLXY.mjs";
+import "./chunk-EUNAUHC3.mjs";
+import "./chunk-JRFOUFD3.mjs";
 import "./chunk-OEUJDSHY.mjs";
-import "./chunk-ZDEVRTGY.mjs";
+import "./chunk-IB6OCKZW.mjs";
 import "./chunk-EDJX7TT6.mjs";
 import "./chunk-QBXHAXHI.mjs";
 export {

package/dist/{chunk-XPDI4SYI.mjs → chunk-742XQ7FL.mjs}

@@ -6,14 +6,14 @@ import {
 import {
   listProjects,
   projectExists
-} from "./chunk-LG6B7QVO.mjs";
+} from "./chunk-EUNAUHC3.mjs";
 import {
   assertSprintStatus,
   generateUuid8,
   getEditor,
   resolveSprintId,
   setEditor
-} from "./chunk-KPTPKLXY.mjs";
+} from "./chunk-JRFOUFD3.mjs";
 import {
   ensureError,
   unwrapOrThrow,
@@ -24,7 +24,7 @@ import {
   getSprintFilePath,
   readValidatedJson,
   writeValidatedJson
-} from "./chunk-ZDEVRTGY.mjs";
+} from "./chunk-IB6OCKZW.mjs";
 import {
   IOError,
   IssueFetchError,

package/dist/{chunk-XQHEKKDN.mjs → chunk-DUU5346E.mjs}

@@ -2,7 +2,7 @@
 import {
   createSprint,
   setCurrentSprint
-} from "./chunk-KPTPKLXY.mjs";
+} from "./chunk-JRFOUFD3.mjs";
 import {
   emoji,
   field,

package/dist/{chunk-LG6B7QVO.mjs → chunk-EUNAUHC3.mjs}

@@ -7,7 +7,7 @@ import {
   readValidatedJson,
   validateProjectPath,
   writeValidatedJson
-} from "./chunk-ZDEVRTGY.mjs";
+} from "./chunk-IB6OCKZW.mjs";
 import {
   ParseError,
   ProjectExistsError,

package/dist/{chunk-ZDEVRTGY.mjs → chunk-IB6OCKZW.mjs}

@@ -53,13 +53,27 @@ function getTasksFilePath(sprintId) {
 function getProgressFilePath(sprintId) {
   return join(getSprintDir(sprintId), "progress.md");
 }
+function getEvaluationsDir(sprintId) {
+  return join(getSprintDir(sprintId), "evaluations");
+}
+function getEvaluationFilePath(sprintId, taskId) {
+  assertSafeSegment(taskId, "task ID");
+  return join(getEvaluationsDir(sprintId), `${taskId}.md`);
+}
+function assertSafeSegment(segment, label) {
+  if (!segment || segment.includes("/") || segment.includes("\\") || segment.includes("..") || segment.includes("\0")) {
+    throw new Error(`Path traversal detected in ${label}: ${segment}`);
+  }
+}
 function getRefinementDir(sprintId, ticketId) {
+  assertSafeSegment(ticketId, "ticket ID");
   return join(getSprintDir(sprintId), "refinement", ticketId);
 }
 function getPlanningDir(sprintId) {
   return join(getSprintDir(sprintId), "planning");
 }
 function getIdeateDir(sprintId, ticketId) {
+  assertSafeSegment(ticketId, "ticket ID");
   return join(getSprintDir(sprintId), "ideation", ticketId);
 }
 function getSchemaPath(schemaName) {
@@ -196,6 +210,7 @@ import { z } from "zod";
 var SprintStatusSchema = z.enum(["draft", "active", "closed"]);
 var TaskStatusSchema = z.enum(["todo", "in_progress", "done"]);
 var RequirementStatusSchema = z.enum(["pending", "approved"]);
+var EvaluationStatusSchema = z.enum(["passed", "failed", "malformed"]);
 var RepositorySchema = z.object({
   name: z.string().min(1),
   // Auto-derived from basename(path)
@@ -233,6 +248,7 @@ var TaskSchema = z.object({
   name: z.string().min(1),
   description: z.string().optional(),
   steps: z.array(z.string()).default([]),
+  verificationCriteria: z.array(z.string()).default([]),
   status: TaskStatusSchema.default("todo"),
   order: z.number().int().positive(),
   ticketId: z.string().optional(),
@@ -246,8 +262,12 @@ var TaskSchema = z.object({
   // Output from verification run
   evaluated: z.boolean().default(false),
   // Whether evaluation passed
-  evaluationOutput: z.string().optional()
-  // Output from evaluation run
+  evaluationOutput: z.string().optional(),
+  // Truncated output from evaluation run (full critique lives in evaluationFile)
+  evaluationStatus: EvaluationStatusSchema.optional(),
+  // Discriminator: 'passed' | 'failed' | 'malformed'
+  evaluationFile: z.string().optional()
+  // Sidecar file path containing the full untruncated critique
 });
 var TasksSchema = z.array(TaskSchema);
 var ImportTaskSchema = z.object({
@@ -257,6 +277,7 @@ var ImportTaskSchema = z.object({
   // Required
   description: z.string().optional(),
   steps: z.array(z.string()).optional(),
+  verificationCriteria: z.array(z.string()).optional(),
   ticketId: z.string().optional(),
   blockedBy: z.array(z.string()).optional(),
   projectPath: z.string().min(1)
@@ -300,6 +321,7 @@ export {
   getSprintFilePath,
   getTasksFilePath,
   getProgressFilePath,
+  getEvaluationFilePath,
   getRefinementDir,
   getPlanningDir,
   getIdeateDir,

package/dist/{chunk-KPTPKLXY.mjs → chunk-JRFOUFD3.mjs}

@@ -21,7 +21,7 @@ import {
   readValidatedJson,
   removeDir,
   writeValidatedJson
-} from "./chunk-ZDEVRTGY.mjs";
+} from "./chunk-IB6OCKZW.mjs";
 import {
   LockError,
   NoCurrentSprintError,