Builder & Validator Sandbox

user request
  → orchestrator clarifies and plans
  → profile selects enabled domains and plugins
  → task packet is created
  → builder works with write-capable tools
  → validator reviews with read-only tools
  → contracts and evidence land in .rstack/runs/<run-id>/tasks/<task-id>/

npm install rstack-agents
npx rstack-agents init --profile lean-mvp          # small team
npx rstack-agents init --profile business-flex    # balanced business team
npx rstack-agents init --profile enterprise-webapp # broad enterprise team

{
  "profile": "business-flex",
  "enabled_domains": ["product", "backend", "qa", "security", "docs"],
  "enabled_plugins": [
    "business-analytics",
    "backend-development",
    "unit-testing",
    "security-scanning",
    "documentation-generation"
  ],
  "dashboard_pages": ["command", "business-flex", "workflow", "agent-work", "live-feed", "approvals"]
}

sdlc_start(goal="Upgrade this Node API, add missing tests, document setup, and perform a security review")
sdlc_clarify()
sdlc_plan()

read, bash, edit, write, grep, find, ls

.rstack/runs/<run-id>/tasks/<task-id>/builder.json

{
  "task_id": "003-architecture",
  "agent": "builder",
  "status": "PASS|FAIL|BLOCKED|DONE_WITH_CONCERNS",
  "summary": "What changed and why",
  "files_modified": [],
  "tests_run": [],
  "risks": [],
  "next_steps": []
}

{
  "execution": {
    "delegation_id": "worker-123",
    "tools_used": ["read", "edit", "bash"],
    "events": [{ "type": "tool_call", "tool": "bash" }],
    "artifacts_written": ["src/api.js", "tests/api.test.js"]
  },
  "cost": {
    "currency": "USD",
    "estimated_usd": 1.5,
    "actual_usd": 1.2
  },
  "context": {
    "profile": "business-flex",
    "workflow": "production-business-sdlc",
    "injected_sources": ["requirements", "architecture", "backend-development"]
  },
  "routing": {
    "selected_by": "profile-domain-stage-affinity",
    "explanation": ["profile:business-flex", "stage-domains:backend,qa"]
  }
}

read, grep, find, ls

.rstack/runs/<run-id>/tasks/<task-id>/validation.json

{
  "task_id": "003-architecture",
  "validator": "rstack-validator",
  "status": "PASS|FAIL",
  "checks": [],
  "issues": [],
  "retry_recommendation": "none|retry_builder|ask_user|block"
}

# List available packs
npx rstack-agents list plugins
npx rstack-agents list agents

# Copy only relevant domain packs into this project
npx rstack-agents add plugin backend-development
npx rstack-agents add plugin unit-testing
npx rstack-agents add plugin security-scanning

# Validate before running
npx rstack-agents validate

Use RStack business-flex profile.
Goal: upgrade this application safely.
First inspect package files, test setup, framework, CI, security posture, and docs.
Plan only the minimum required builder/validator teams.
Prefer existing project conventions.
Create budget envelope and routing explanation before build.
Builder must run relevant tests and write builder.json.
Validator must be read-only and write validation.json.
Do not claim DONE without command evidence.