specweave 1.0.464 → 1.0.466

package/dist/plugins/specweave/lib/vendor/utils/auth-helpers.d.ts

@@ -0,0 +1,151 @@
+/**
+ * Authentication Helpers for Issue Tracker Integration
+ *
+ * Provides unified authentication detection for GitHub, Azure DevOps, and Jira
+ * Works in both CLI (init flow) and test environments
+ *
+ * @module utils/auth-helpers
+ */
+/**
+ * Check if a GitHub token is an OAuth token (gho_ prefix)
+ *
+ * OAuth tokens from `gh auth` typically lack `repo` scope for private repositories.
+ * Only PATs (ghp_) or Fine-grained tokens (github_pat_) have explicit repo access.
+ *
+ * Token prefixes:
+ * - gho_ = OAuth App token (from gh auth) - may lack repo scope!
+ * - ghp_ = Classic Personal Access Token - has explicit scopes
+ * - ghs_ = GitHub App server-to-server token
+ * - ghu_ = GitHub App user-to-server token
+ * - github_pat_ = Fine-grained Personal Access Token
+ */
+export declare function isOAuthToken(token: string): boolean;
+/**
+ * Check if a GitHub token is a Personal Access Token (classic or fine-grained)
+ * These tokens have explicit repo scope and work with private repositories.
+ */
+export declare function isPersonalAccessToken(token: string): boolean;
+export interface GitHubAuth {
+    token: string;
+    source: 'GITHUB_TOKEN' | 'GH_TOKEN' | 'gh-cli' | 'none';
+    /**
+     * Whether this is an OAuth token (gho_ prefix) which may lack repo scope.
+     * OAuth tokens from `gh auth` typically cannot access private repos unless
+     * the user explicitly granted repo scope during authentication.
+     */
+    isOAuthToken?: boolean;
+}
+export interface AzureDevOpsAuth {
+    pat: string;
+    org: string;
+    project: string;
+}
+export interface JiraAuth {
+    token: string;
+    email: string;
+    domain: string;
+}
+/**
+ * Get GitHub authentication token from project .env file
+ * Priority: .env GITHUB_TOKEN > .env GH_TOKEN > process.env > gh CLI
+ *
+ * CRITICAL (2025-11-26): This function MUST be used when projectRoot is available
+ * to properly load tokens from .env file. The original getGitHubAuth() only
+ * reads process.env which is empty unless dotenv is explicitly loaded.
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns GitHub authentication with source information
+ */
+export declare function getGitHubAuthFromProject(projectRoot: string): GitHubAuth;
+/**
+ * Get GitHub authentication token
+ * Priority: GITHUB_TOKEN (CI) > GH_TOKEN (custom) > gh CLI config (local)
+ *
+ * WARNING: This function only reads from process.env, NOT from .env files!
+ * If you have access to projectRoot, use getGitHubAuthFromProject() instead.
+ */
+export declare function getGitHubAuth(): GitHubAuth;
+/**
+ * Get Azure DevOps authentication from project .env file
+ * Priority: .env file > process.env
+ *
+ * CRITICAL (2025-12-04): This function MUST be used when projectRoot is available
+ * to properly load tokens from .env file. The original getAzureDevOpsAuth() only
+ * reads process.env which is empty unless dotenv is explicitly loaded.
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns Azure DevOps authentication or null if not found
+ */
+export declare function getAzureDevOpsAuthFromProject(projectRoot: string): AzureDevOpsAuth | null;
+/**
+ * Get Azure DevOps authentication
+ * Requires: AZURE_DEVOPS_PAT, AZURE_DEVOPS_ORG, AZURE_DEVOPS_PROJECT
+ *
+ * WARNING: This function only reads from process.env, NOT from .env files!
+ * If you have access to projectRoot, use getAzureDevOpsAuthFromProject() instead.
+ */
+export declare function getAzureDevOpsAuth(): AzureDevOpsAuth | null;
+/**
+ * Get Jira authentication
+ * Requires: JIRA_API_TOKEN, JIRA_EMAIL, JIRA_DOMAIN
+ */
+export declare function getJiraAuth(): JiraAuth | null;
+/**
+ * Check if integration tests should run
+ * Returns true if RUN_INTEGRATION_TESTS=true or if in CI environment
+ */
+export declare function shouldRunIntegrationTests(): boolean;
+/**
+ * Check if credentials are available for a service
+ */
+export declare function hasGitHubCredentials(): boolean;
+/**
+ * Check if GitHub credentials are available (project-aware)
+ * Uses getGitHubAuthFromProject() to also check .env file
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns True if credentials are available
+ */
+export declare function hasGitHubCredentialsFromProject(projectRoot: string): boolean;
+export declare function hasAzureDevOpsCredentials(): boolean;
+/**
+ * Check if Azure DevOps credentials are available (project-aware)
+ * Uses getAzureDevOpsAuthFromProject() to also check .env file
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns True if credentials are available
+ */
+export declare function hasAzureDevOpsCredentialsFromProject(projectRoot: string): boolean;
+export declare function hasJiraCredentials(): boolean;
+/**
+ * Get Jira authentication from project files
+ *
+ * CRITICAL (2025-12-12): This function MUST be used when projectRoot is available.
+ *
+ * Configuration sources (ADR-0194 compliant):
+ * - Domain: config.json → issueTracker.domain (CONFIGURATION, committed)
+ * - Token: .env → JIRA_API_TOKEN (SECRET, gitignored)
+ * - Email: .env → JIRA_EMAIL (SECRET, gitignored)
+ *
+ * @param projectRoot - Path to project root containing .env and .specweave/config.json
+ * @returns Jira authentication or null if not found
+ */
+export declare function getJiraAuthFromProject(projectRoot: string): JiraAuth | null;
+/**
+ * Check if Jira credentials are available (project-aware)
+ * Uses getJiraAuthFromProject() to also check .env file
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns True if credentials are available
+ */
+export declare function hasJiraCredentialsFromProject(projectRoot: string): boolean;
+/**
+ * Get credential status summary (for debugging)
+ */
+export declare function getCredentialStatus(): {
+    github: string;
+    ado: boolean;
+    jira: boolean;
+    integrationTestsEnabled: boolean;
+};
+//# sourceMappingURL=auth-helpers.d.ts.map

package/dist/plugins/specweave/lib/vendor/utils/auth-helpers.js

@@ -0,0 +1,359 @@
+/**
+ * Authentication Helpers for Issue Tracker Integration
+ *
+ * Provides unified authentication detection for GitHub, Azure DevOps, and Jira
+ * Works in both CLI (init flow) and test environments
+ *
+ * @module utils/auth-helpers
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import * as yaml from 'js-yaml';
+import { execSync } from 'child_process';
+/**
+ * Check if a GitHub token is an OAuth token (gho_ prefix)
+ *
+ * OAuth tokens from `gh auth` typically lack `repo` scope for private repositories.
+ * Only PATs (ghp_) or Fine-grained tokens (github_pat_) have explicit repo access.
+ *
+ * Token prefixes:
+ * - gho_ = OAuth App token (from gh auth) - may lack repo scope!
+ * - ghp_ = Classic Personal Access Token - has explicit scopes
+ * - ghs_ = GitHub App server-to-server token
+ * - ghu_ = GitHub App user-to-server token
+ * - github_pat_ = Fine-grained Personal Access Token
+ */
+export function isOAuthToken(token) {
+    return token.startsWith('gho_');
+}
+/**
+ * Check if a GitHub token is a Personal Access Token (classic or fine-grained)
+ * These tokens have explicit repo scope and work with private repositories.
+ */
+export function isPersonalAccessToken(token) {
+    return token.startsWith('ghp_') || token.startsWith('github_pat_');
+}
+/**
+ * Parse a simple .env file and return key-value pairs
+ * (Inline implementation to avoid circular dependencies)
+ */
+function parseEnvFileSimple(content) {
+    const result = {};
+    const lines = content.split('\n');
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed || trimmed.startsWith('#'))
+            continue;
+        const eqIndex = trimmed.indexOf('=');
+        if (eqIndex === -1)
+            continue;
+        const key = trimmed.slice(0, eqIndex).trim();
+        let value = trimmed.slice(eqIndex + 1).trim();
+        // Remove surrounding quotes if present
+        if ((value.startsWith('"') && value.endsWith('"')) ||
+            (value.startsWith("'") && value.endsWith("'"))) {
+            value = value.slice(1, -1);
+        }
+        result[key] = value;
+    }
+    return result;
+}
+/**
+ * Get GitHub authentication token from project .env file
+ * Priority: .env GITHUB_TOKEN > .env GH_TOKEN > process.env > gh CLI
+ *
+ * CRITICAL (2025-11-26): This function MUST be used when projectRoot is available
+ * to properly load tokens from .env file. The original getGitHubAuth() only
+ * reads process.env which is empty unless dotenv is explicitly loaded.
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns GitHub authentication with source information
+ */
+export function getGitHubAuthFromProject(projectRoot) {
+    // 1. First, try to read from project .env file
+    try {
+        const envPath = path.join(projectRoot, '.env');
+        if (fs.existsSync(envPath)) {
+            const content = fs.readFileSync(envPath, 'utf-8');
+            const envVars = parseEnvFileSimple(content);
+            // Check GITHUB_TOKEN first (standard)
+            if (envVars.GITHUB_TOKEN) {
+                return {
+                    token: envVars.GITHUB_TOKEN,
+                    source: 'GITHUB_TOKEN',
+                    isOAuthToken: isOAuthToken(envVars.GITHUB_TOKEN)
+                };
+            }
+            // Check GH_TOKEN (alternative)
+            if (envVars.GH_TOKEN) {
+                return {
+                    token: envVars.GH_TOKEN,
+                    source: 'GH_TOKEN',
+                    isOAuthToken: isOAuthToken(envVars.GH_TOKEN)
+                };
+            }
+        }
+    }
+    catch {
+        // Silently fail - .env file is optional
+    }
+    // 2. Fall back to existing getGitHubAuth() for process.env and gh CLI
+    return getGitHubAuth();
+}
+/**
+ * Get GitHub authentication token
+ * Priority: GITHUB_TOKEN (CI) > GH_TOKEN (custom) > gh CLI config (local)
+ *
+ * WARNING: This function only reads from process.env, NOT from .env files!
+ * If you have access to projectRoot, use getGitHubAuthFromProject() instead.
+ */
+export function getGitHubAuth() {
+    // 1. Check GITHUB_TOKEN (auto-provided in GitHub Actions)
+    if (process.env.GITHUB_TOKEN) {
+        return {
+            token: process.env.GITHUB_TOKEN,
+            source: 'GITHUB_TOKEN',
+            isOAuthToken: isOAuthToken(process.env.GITHUB_TOKEN)
+        };
+    }
+    // 2. Check GH_TOKEN (custom PAT from .env)
+    if (process.env.GH_TOKEN) {
+        return {
+            token: process.env.GH_TOKEN,
+            source: 'GH_TOKEN',
+            isOAuthToken: isOAuthToken(process.env.GH_TOKEN)
+        };
+    }
+    // 3. Try to get token via gh CLI command (works with Keychain, plain-text, etc.)
+    try {
+        const token = execSync('gh auth token', { encoding: 'utf-8', stdio: ['pipe', 'pipe', 'pipe'] }).trim();
+        if (token && token.length > 0) {
+            return { token, source: 'gh-cli', isOAuthToken: isOAuthToken(token) };
+        }
+    }
+    catch (error) {
+        // gh CLI not installed or not authenticated - silently fail
+    }
+    // 4. Fallback: Try to parse gh CLI config directly (~/.config/gh/hosts.yml)
+    // This covers edge cases where gh CLI isn't available but config file exists
+    try {
+        const ghConfigPath = path.join(os.homedir(), '.config', 'gh', 'hosts.yml');
+        if (fs.existsSync(ghConfigPath)) {
+            // Security: Use JSON_SCHEMA to prevent arbitrary code execution via YAML
+            // This only allows JSON-safe types (strings, numbers, booleans, arrays, objects)
+            const config = yaml.load(fs.readFileSync(ghConfigPath, 'utf8'), {
+                schema: yaml.JSON_SCHEMA
+            });
+            const token = config?.['github.com']?.oauth_token;
+            if (token) {
+                return { token, source: 'gh-cli', isOAuthToken: isOAuthToken(token) };
+            }
+        }
+    }
+    catch (error) {
+        // Silently fail - gh CLI config is optional
+    }
+    return { token: '', source: 'none', isOAuthToken: false };
+}
+/**
+ * Get Azure DevOps authentication from project .env file
+ * Priority: .env file > process.env
+ *
+ * CRITICAL (2025-12-04): This function MUST be used when projectRoot is available
+ * to properly load tokens from .env file. The original getAzureDevOpsAuth() only
+ * reads process.env which is empty unless dotenv is explicitly loaded.
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns Azure DevOps authentication or null if not found
+ */
+export function getAzureDevOpsAuthFromProject(projectRoot) {
+    // 1. First, try to read from project .env file
+    try {
+        const envPath = path.join(projectRoot, '.env');
+        if (fs.existsSync(envPath)) {
+            const content = fs.readFileSync(envPath, 'utf-8');
+            const envVars = parseEnvFileSimple(content);
+            const pat = envVars.AZURE_DEVOPS_PAT;
+            const org = envVars.AZURE_DEVOPS_ORG;
+            const project = envVars.AZURE_DEVOPS_PROJECT;
+            if (pat) {
+                // PAT found in .env - return it (org/project might come from config.json)
+                return {
+                    pat,
+                    org: org || process.env.AZURE_DEVOPS_ORG || '',
+                    project: project || process.env.AZURE_DEVOPS_PROJECT || ''
+                };
+            }
+        }
+    }
+    catch {
+        // Silently fail - .env file is optional
+    }
+    // 2. Fall back to process.env
+    return getAzureDevOpsAuth();
+}
+/**
+ * Get Azure DevOps authentication
+ * Requires: AZURE_DEVOPS_PAT, AZURE_DEVOPS_ORG, AZURE_DEVOPS_PROJECT
+ *
+ * WARNING: This function only reads from process.env, NOT from .env files!
+ * If you have access to projectRoot, use getAzureDevOpsAuthFromProject() instead.
+ */
+export function getAzureDevOpsAuth() {
+    const pat = process.env.AZURE_DEVOPS_PAT;
+    const org = process.env.AZURE_DEVOPS_ORG;
+    const project = process.env.AZURE_DEVOPS_PROJECT;
+    if (!pat || !org || !project) {
+        return null;
+    }
+    return { pat, org, project };
+}
+/**
+ * Get Jira authentication
+ * Requires: JIRA_API_TOKEN, JIRA_EMAIL, JIRA_DOMAIN
+ */
+export function getJiraAuth() {
+    const token = process.env.JIRA_API_TOKEN;
+    const email = process.env.JIRA_EMAIL;
+    const domain = process.env.JIRA_DOMAIN;
+    if (!token || !email || !domain) {
+        return null;
+    }
+    return { token, email, domain };
+}
+/**
+ * Check if integration tests should run
+ * Returns true if RUN_INTEGRATION_TESTS=true or if in CI environment
+ */
+export function shouldRunIntegrationTests() {
+    // Explicitly enabled
+    if (process.env.RUN_INTEGRATION_TESTS === 'true') {
+        return true;
+    }
+    // In CI environment (GitHub Actions)
+    if (process.env.CI === 'true') {
+        return true;
+    }
+    return false;
+}
+/**
+ * Check if credentials are available for a service
+ */
+export function hasGitHubCredentials() {
+    const auth = getGitHubAuth();
+    return auth.source !== 'none';
+}
+/**
+ * Check if GitHub credentials are available (project-aware)
+ * Uses getGitHubAuthFromProject() to also check .env file
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns True if credentials are available
+ */
+export function hasGitHubCredentialsFromProject(projectRoot) {
+    const auth = getGitHubAuthFromProject(projectRoot);
+    return auth.source !== 'none';
+}
+export function hasAzureDevOpsCredentials() {
+    return getAzureDevOpsAuth() !== null;
+}
+/**
+ * Check if Azure DevOps credentials are available (project-aware)
+ * Uses getAzureDevOpsAuthFromProject() to also check .env file
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns True if credentials are available
+ */
+export function hasAzureDevOpsCredentialsFromProject(projectRoot) {
+    const auth = getAzureDevOpsAuthFromProject(projectRoot);
+    return auth !== null && !!auth.pat;
+}
+export function hasJiraCredentials() {
+    return getJiraAuth() !== null;
+}
+/**
+ * Get Jira authentication from project files
+ *
+ * CRITICAL (2025-12-12): This function MUST be used when projectRoot is available.
+ *
+ * Configuration sources (ADR-0194 compliant):
+ * - Domain: config.json → issueTracker.domain (CONFIGURATION, committed)
+ * - Token: .env → JIRA_API_TOKEN (SECRET, gitignored)
+ * - Email: .env → JIRA_EMAIL (SECRET, gitignored)
+ *
+ * @param projectRoot - Path to project root containing .env and .specweave/config.json
+ * @returns Jira authentication or null if not found
+ */
+export function getJiraAuthFromProject(projectRoot) {
+    let domain = '';
+    let token = '';
+    let email = '';
+    // 1. Read DOMAIN from config.json (configuration, not secret)
+    try {
+        const configPath = path.join(projectRoot, '.specweave', 'config.json');
+        if (fs.existsSync(configPath)) {
+            const configContent = fs.readFileSync(configPath, 'utf-8');
+            const config = JSON.parse(configContent);
+            domain = config.issueTracker?.domain || '';
+        }
+    }
+    catch {
+        // Silently fail - config.json is optional
+    }
+    // 2. Read SECRETS from .env file (token and email)
+    try {
+        const envPath = path.join(projectRoot, '.env');
+        if (fs.existsSync(envPath)) {
+            const content = fs.readFileSync(envPath, 'utf-8');
+            const envVars = parseEnvFileSimple(content);
+            token = envVars.JIRA_API_TOKEN || '';
+            email = envVars.JIRA_EMAIL || '';
+            // DEPRECATED: Support JIRA_DOMAIN in .env for backwards compatibility
+            // New projects should use config.json → issueTracker.domain
+            if (!domain && (envVars.JIRA_HOST || envVars.JIRA_DOMAIN)) {
+                domain = envVars.JIRA_HOST || envVars.JIRA_DOMAIN || '';
+            }
+        }
+    }
+    catch {
+        // Silently fail - .env file is optional
+    }
+    // 3. Fall back to process.env for secrets (if not found in .env)
+    if (!token)
+        token = process.env.JIRA_API_TOKEN || '';
+    if (!email)
+        email = process.env.JIRA_EMAIL || '';
+    // DEPRECATED: process.env fallback for domain
+    if (!domain)
+        domain = process.env.JIRA_DOMAIN || process.env.JIRA_HOST || '';
+    // All three required
+    if (token && email && domain) {
+        return { token, email, domain };
+    }
+    return null;
+}
+/**
+ * Check if Jira credentials are available (project-aware)
+ * Uses getJiraAuthFromProject() to also check .env file
+ *
+ * @param projectRoot - Path to project root containing .env file
+ * @returns True if credentials are available
+ */
+export function hasJiraCredentialsFromProject(projectRoot) {
+    const auth = getJiraAuthFromProject(projectRoot);
+    return auth !== null;
+}
+/**
+ * Get credential status summary (for debugging)
+ */
+export function getCredentialStatus() {
+    const github = getGitHubAuth();
+    return {
+        github: github.source,
+        ado: hasAzureDevOpsCredentials(),
+        jira: hasJiraCredentials(),
+        integrationTestsEnabled: shouldRunIntegrationTests()
+    };
+}
+//# sourceMappingURL=auth-helpers.js.map

package/dist/plugins/specweave/lib/vendor/utils/auth-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helpers.js","sourceRoot":"","sources":["../../../src/utils/auth-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAC7B,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,SAAS,CAAC;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AAEzC;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAa;IACjD,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC;AACrE,CAAC;AAyBD;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAElD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,OAAO,KAAK,CAAC,CAAC;YAAE,SAAS;QAE7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAE9C,uCAAuC;QACvC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACnD,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QAED,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,+CAA+C;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAE5C,sCAAsC;YACtC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzB,OAAO;oBACL,KAAK,EAAE,OAAO,CAAC,YAAY;oBAC3B,MAAM,EAAE,cAAc;oBACtB,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC;iBACjD,CAAC;YACJ,CAAC;YAED,+BAA+B;YAC/B,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;gBACrB,OAAO;oBACL,KAAK,EAAE,OAAO,CAAC,QAAQ;oBACvB,MAAM,EAAE,UAAU;oBAClB,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC;iBAC7C,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,sEAAsE;IACtE,OAAO,aAAa,EAAE,CAAC;AACzB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa;IAC3B,0DAA0D;IAC1D,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC;QAC7B,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY;YAC/B,MAAM,EAAE,cAAc;YACtB,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;SACrD,CAAC;IACJ,CAAC;IAED,2CAA2C;IAC3C,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;QACzB,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,QAAQ;YAC3B,MAAM,EAAE,UAAU;YAClB,YAAY,EAAE,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC;SACjD,CAAC;IACJ,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,QAAQ,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACvG,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4DAA4D;IAC9D,CAAC;IAED,4EAA4E;IAC5E,6EAA6E;IAC7E,IAAI,CAAC;QACH,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;QAC3E,IAAI,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;YAChC,yEAAyE;YACzE,iFAAiF;YACjF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,EAAE;gBAC9D,MAAM,EAAE,IAAI,CAAC,WAAW;aACzB,CAAoD,CAAC;YACtD,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC;YAClD,IAAI,KAAK,EAAE,CAAC;gBACV,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,4CAA4C;IAC9C,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;AAC5D,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,+CAA+C;IAC/C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAE5C,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACrC,MAAM,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;YACrC,MAAM,OAAO,GAAG,OAAO,CAAC,oBAAoB,CAAC;YAE7C,IAAI,GAAG,EAAE,CAAC;gBACR,0EAA0E;gBAC1E,OAAO;oBACL,GAAG;oBACH,GAAG,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE;oBAC9C,OAAO,EAAE,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,IAAI,EAAE;iBAC3D,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,8BAA8B;IAC9B,OAAO,kBAAkB,EAAE,CAAC;AAC9B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;IAEjD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IACzC,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAEvC,IAAI,CAAC,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB;IACvC,qBAAqB;IACrB,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,KAAK,MAAM,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,qCAAqC;IACrC,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,KAAK,MAAM,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,oBAAoB;IAClC,MAAM,IAAI,GAAG,aAAa,EAAE,CAAC;IAC7B,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;AAChC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,+BAA+B,CAAC,WAAmB;IACjE,MAAM,IAAI,GAAG,wBAAwB,CAAC,WAAW,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,yBAAyB;IACvC,OAAO,kBAAkB,EAAE,KAAK,IAAI,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,oCAAoC,CAAC,WAAmB;IACtE,MAAM,IAAI,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,IAAI,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;AACrC,CAAC;AAED,MAAM,UAAU,kBAAkB;IAChC,OAAO,WAAW,EAAE,KAAK,IAAI,CAAC;AAChC,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,WAAmB;IACxD,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,KAAK,GAAG,EAAE,CAAC;IAEf,8DAA8D;IAC9D,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,YAAY,EAAE,aAAa,CAAC,CAAC;QACvE,IAAI,EAAE,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9B,MAAM,aAAa,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACzC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,CAAC;QAC7C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IAED,mDAAmD;IACnD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;YAE5C,KAAK,GAAG,OAAO,CAAC,cAAc,IAAI,EAAE,CAAC;YACrC,KAAK,GAAG,OAAO,CAAC,UAAU,IAAI,EAAE,CAAC;YAEjC,sEAAsE;YACtE,4DAA4D;YAC5D,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC1D,MAAM,GAAG,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;YAC1D,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,wCAAwC;IAC1C,CAAC;IAED,iEAAiE;IACjE,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;IACjD,8CAA8C;IAC9C,IAAI,CAAC,MAAM;QAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC;IAE7E,qBAAqB;IACrB,IAAI,KAAK,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QAC7B,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,WAAmB;IAC/D,MAAM,IAAI,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACjD,OAAO,IAAI,KAAK,IAAI,CAAC;AACvB,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,mBAAmB;IAMjC,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,yBAAyB,EAAE;QAChC,IAAI,EAAE,kBAAkB,EAAE;QAC1B,uBAAuB,EAAE,yBAAyB,EAAE;KACrD,CAAC;AACJ,CAAC"}

package/dist/plugins/specweave/lib/vendor/utils/chalk-fallback.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Chalk Fallback Utility
+ *
+ * Provides chalk-like API for colored console output with graceful fallback
+ * to plain text when chalk is not available (e.g., in marketplace plugins).
+ *
+ * This enables AC test validator to work in both:
+ * 1. Full npm-installed environments (uses real chalk)
+ * 2. Marketplace plugin environments (uses ANSI codes or plain text)
+ */
+type ChalkInput = string | number;
+interface ChalkFn {
+    (text: ChalkInput): string;
+    bold: ChalkFn;
+}
+interface ChalkInstance {
+    red: ChalkFn;
+    green: ChalkFn;
+    yellow: ChalkFn;
+    blue: ChalkFn;
+    gray: ChalkFn;
+    bold: ChalkFn & {
+        (text: string): string;
+    };
+}
+/**
+ * Chalk-compatible API using ANSI codes
+ * Falls back to plain text if terminal doesn't support colors
+ */
+export declare const chalkFallback: ChalkInstance;
+export declare function getChalk(): Promise<ChalkInstance>;
+/**
+ * Synchronous chalk getter - uses fallback if chalk wasn't pre-loaded
+ * Call getChalk() at module init to try loading real chalk first
+ */
+export declare function getChalkSync(): ChalkInstance;
+export default chalkFallback;
+//# sourceMappingURL=chalk-fallback.d.ts.map

package/dist/plugins/specweave/lib/vendor/utils/chalk-fallback.js

@@ -0,0 +1,118 @@
+/**
+ * Chalk Fallback Utility
+ *
+ * Provides chalk-like API for colored console output with graceful fallback
+ * to plain text when chalk is not available (e.g., in marketplace plugins).
+ *
+ * This enables AC test validator to work in both:
+ * 1. Full npm-installed environments (uses real chalk)
+ * 2. Marketplace plugin environments (uses ANSI codes or plain text)
+ */
+// Simple ANSI color codes for terminal output
+const ANSI = {
+    reset: '\x1b[0m',
+    bold: '\x1b[1m',
+    red: '\x1b[31m',
+    green: '\x1b[32m',
+    yellow: '\x1b[33m',
+    blue: '\x1b[34m',
+    gray: '\x1b[90m',
+};
+// Check if we're in a TTY that supports colors
+const supportsColor = process.stdout?.isTTY ?? false;
+/**
+ * Creates a chalk-like color function
+ */
+function createColorFn(colorCode) {
+    const fn = ((text) => {
+        const str = String(text);
+        if (!supportsColor)
+            return str;
+        return `${colorCode}${str}${ANSI.reset}`;
+    });
+    // Add chainable modifiers
+    fn.bold = ((text) => {
+        const str = String(text);
+        if (!supportsColor)
+            return str;
+        return `${ANSI.bold}${colorCode}${str}${ANSI.reset}`;
+    });
+    return fn;
+}
+/**
+ * Creates a bold color function
+ */
+function createBoldColorFn(colorCode) {
+    const fn = ((text) => {
+        const str = String(text);
+        if (!supportsColor)
+            return str;
+        return `${ANSI.bold}${colorCode}${str}${ANSI.reset}`;
+    });
+    fn.bold = fn;
+    return fn;
+}
+/**
+ * Chalk-compatible API using ANSI codes
+ * Falls back to plain text if terminal doesn't support colors
+ */
+export const chalkFallback = {
+    red: createColorFn(ANSI.red),
+    green: createColorFn(ANSI.green),
+    yellow: createColorFn(ANSI.yellow),
+    blue: createColorFn(ANSI.blue),
+    gray: createColorFn(ANSI.gray),
+    bold: Object.assign(((text) => {
+        const str = String(text);
+        if (!supportsColor)
+            return str;
+        return `${ANSI.bold}${str}${ANSI.reset}`;
+    }), {
+        bold: ((text) => {
+            const str = String(text);
+            if (!supportsColor)
+                return str;
+            return `${ANSI.bold}${str}${ANSI.reset}`;
+        }),
+    }),
+};
+// Add nested color methods to bold
+chalkFallback.bold.red = createBoldColorFn(ANSI.red);
+chalkFallback.bold.green = createBoldColorFn(ANSI.green);
+chalkFallback.bold.yellow = createBoldColorFn(ANSI.yellow);
+chalkFallback.bold.blue = createBoldColorFn(ANSI.blue);
+chalkFallback.bold.gray = createBoldColorFn(ANSI.gray);
+// Add bold method to color functions for chaining like chalk.green.bold()
+chalkFallback.red.bold = createBoldColorFn(ANSI.red);
+chalkFallback.green.bold = createBoldColorFn(ANSI.green);
+chalkFallback.yellow.bold = createBoldColorFn(ANSI.yellow);
+chalkFallback.blue.bold = createBoldColorFn(ANSI.blue);
+chalkFallback.gray.bold = createBoldColorFn(ANSI.gray);
+/**
+ * Try to import chalk, fall back to ANSI implementation
+ */
+let resolvedChalk = null;
+export async function getChalk() {
+    if (resolvedChalk)
+        return resolvedChalk;
+    try {
+        // Try to dynamically import chalk
+        const chalkModule = await import('chalk');
+        resolvedChalk = chalkModule.default;
+        return resolvedChalk;
+    }
+    catch {
+        // Chalk not available, use fallback
+        resolvedChalk = chalkFallback;
+        return resolvedChalk;
+    }
+}
+/**
+ * Synchronous chalk getter - uses fallback if chalk wasn't pre-loaded
+ * Call getChalk() at module init to try loading real chalk first
+ */
+export function getChalkSync() {
+    return resolvedChalk ?? chalkFallback;
+}
+export default chalkFallback;
+//# sourceMappingURL=chalk-fallback.js.map