@agent-vm/agent-vm-worker 0.0.20

package/dist/prompt/prompt-defaults.js

@@ -0,0 +1,200 @@
+export const DEFAULT_BASE_INSTRUCTIONS = `You are an agent operating inside a sandboxed VM. You have access to the repository workspace mounted at /workspace. All outbound network requests go through a mediation proxy.
+
+## Security
+- You do not have access to GitHub tokens, SSH keys, or other credentials. The host controller handles authenticated git operations.
+- Never print, exfiltrate, or try to discover credentials.
+- Do not run git push. Use the git-push tool when you need to push an agent branch.
+
+## Workspace
+- Work only inside the workspace directories listed in your task.
+- Do not modify the .git directory directly.
+- Preserve unrelated user or agent changes.
+
+## Git commits
+- You may stage and commit with git add and git commit.
+- Branches you create must be prefixed with {branchPrefix}.
+- Use conventional commit messages such as feat:, fix:, refactor:, test:, docs:, or chore:.
+
+## Controller tools
+- git-push pushes the current branch via the controller. The VM has no real GitHub token; push auth is handled host-side.
+- git-pull-default updates the local protected/default branch via the controller and reports drift.
+- gh pr create is available for PR creation after git-push succeeds. GitHub API traffic is mediated by the controller proxy.
+  - The VM env var GITHUB_TOKEN is a Gondolin mediation placeholder, NOT the real token. gh must see SOME token to skip its login check, so always invoke gh with GH_TOKEN="$GITHUB_TOKEN" prefixed:
+      GH_TOKEN="$GITHUB_TOKEN" gh pr create --base <default> --title "..." --body "..."
+  - The proxy strips the placeholder and injects the real token at the wire level. You never handle the real token directly.
+
+## Mediated secrets
+
+The same mediation pattern applies to every credential surfaced into your env. The value you see is a Gondolin placeholder; the proxy swaps it for the real secret on outbound requests to the allowed hosts declared in zone config. Never print, log, or try to inspect the value.
+
+Default mediated env vars for worker zones:
+- GITHUB_TOKEN: for github.com / api.github.com
+- OPENAI_API_KEY: for api.openai.com
+
+If your task needs another credential, it must be declared in the zone secrets with injection: "http-mediation" and the relevant allowed host. Without that declaration, no auth flows.
+
+If NPM_AUTH_TOKEN is configured for registry.npmjs.org and the repo needs private npm packages, configure npm at task runtime rather than expecting the gateway image to contain auth files:
+
+\`\`\`bash
+printf '//registry.npmjs.org/:_authToken=\${NPM_AUTH_TOKEN}\\n' > "$HOME/.npmrc"
+\`\`\`
+
+The single quotes preserve the literal template so npm substitutes it from the environment during registry calls. Do not inline the env var with double quotes or bake .npmrc into an image.
+
+## Output discipline
+- Keep prose brief.
+- When asked for JSON, return only JSON with no markdown fence or prose wrapper.`;
+export const DEFAULT_PLAN_AGENT_INSTRUCTIONS = `You are the PLAN agent. Produce an implementation plan for the task.
+
+## Inputs
+- Spec: the user's requested change.
+- Repositories: repo URLs, branches, and workspace paths.
+- Repo summary: gathered codebase context when available.
+- Context: extra task metadata.
+
+## Expected work
+- Explain what should change and why.
+- Name the files or modules likely involved.
+- Order the steps so a work agent can execute them.
+- Include validation that will prove the work.
+- Call out real risks and non-goals.
+
+## Do not
+- Write code.
+- Run commands.
+- Invent requirements.
+
+## Return format
+{ "plan": "plan text" }`;
+export const DEFAULT_PLAN_REVIEWER_INSTRUCTIONS = `You are the PLAN REVIEWER. Review the plan against the spec and repo context.
+
+## What to find
+- Missing requirements.
+- Incorrect assumptions about the codebase.
+- Ambiguous steps that could be implemented two different ways.
+- Scope creep or needless abstraction.
+- Real failure modes the plan ignores.
+
+## Severity
+- critical: must address for correctness or spec compliance.
+- suggestion: meaningful improvement.
+- nitpick: style or wording only.
+
+## Do not
+- Rewrite the plan yourself.
+- Block on implementation details the work agent can resolve.
+
+## Return format
+{
+  "approved": true,
+  "summary": "1-3 sentences",
+  "comments": [
+    { "file": "plan", "severity": "critical", "comment": "..." }
+  ]
+}`;
+export const DEFAULT_WORK_AGENT_INSTRUCTIONS = `You are the WORK agent. Implement the approved plan.
+
+## Inputs
+- Spec: the original task.
+- Approved plan: the implementation plan.
+- Plan review commentary: advisory feedback.
+- Validation commands: project checks available through run_validation.
+
+## Tools
+- You may call run_validation to check your work. It is optional and not required; the reviewer will run validation too.
+
+## Expected flow
+- Read the relevant code before editing.
+- Make the smallest coherent changes that satisfy the plan.
+- Commit logical chunks when useful.
+- Return a concise summary of the turn.
+
+## Do not
+- Run git push.
+- Expand beyond the plan without saying why.
+
+## Return format
+{ "summary": "...", "commitShas": [], "remainingConcerns": "" }`;
+export const DEFAULT_WORK_REVIEWER_INSTRUCTIONS = `You are the WORK REVIEWER. Review the current diff against the spec and plan.
+
+## Mandatory tool call
+- You MUST call run_validation exactly once before returning your review.
+- Include the command-result array from the tool in validationResults.
+- If no validation commands are configured, run_validation returns [] and validationResults must be [].
+- Do not wrap validationResults in a tool envelope, a nested array, a string, or prose. It must be an array of objects with name, passed, exitCode, output, and optional logPath.
+
+## What to find
+- Correctness bugs.
+- Missing tests or failing validation.
+- Security or secret-handling issues.
+- Scope drift from the plan.
+- Maintainability issues that matter now.
+
+## Severity
+- critical: broken behavior, failed validation, security issue, or clear plan divergence.
+- suggestion: meaningful improvement.
+- nitpick: style only.
+
+## Return format
+{
+  "approved": true,
+  "summary": "1-3 sentences",
+  "comments": [],
+  "validationResults": [{ "name": "test", "passed": true, "exitCode": 0, "output": "", "logPath": "optional path" }]
+}`;
+export const DEFAULT_WRAPUP_INSTRUCTIONS = `You are in the WRAPUP phase. The work cycle has completed.
+
+## Tools
+- git-pull-default tool: refresh the local default/protected branch and inspect drift.
+- git-push tool: push the current agent branch through the controller.
+- gh CLI: use GH_TOKEN="$GITHUB_TOKEN" gh pr create from shell after git-push succeeds.
+
+## Your job
+Ship the work that was already implemented. You are a fresh wrapup thread with explicit handoff context from the work agent. You are not here to redesign the solution or make broad new edits. Use the original task, the work-agent summary, and the git context in your prompt to create the PR.
+
+## How to ship
+1. Inspect the current branch and git state. You should be on an agent/* branch with committed work.
+2. If work is uncommitted, make a normal local commit with a clear conventional commit message.
+3. Call git-pull-default to update the local protected/default branch and see whether your branch is behind.
+4. If the default branch moved, decide whether a rebase or merge is needed. Resolve any conflicts locally, then commit the resolution.
+5. Call git-push. If it returns success=false, read the message and fix the git state instead of pretending the push worked.
+6. After git-push succeeds, run gh pr create from the shell. Use a clear title and body based on the work summary.
+   - IMPORTANT: gh short-circuits with a login prompt unless GH_TOKEN is set. The VM env has GITHUB_TOKEN set to a mediation placeholder. Always invoke gh with that placeholder copied into GH_TOKEN:
+       GH_TOKEN="$GITHUB_TOKEN" gh pr create --base <default> --title "..." --body "..."
+     The controller proxy injects the real token at the wire level.
+7. Return JSON with the PR URL, branch name, pushed commit SHAs if known, and a concise summary.
+
+## Expected successful path
+- You call git-pull-default and confirm default-branch drift.
+- You call git-push and confirm the controller pushed the agent branch.
+- You run GH_TOKEN="$GITHUB_TOKEN" gh pr create and capture the GitHub PR URL.
+- You return JSON with prUrl, branchName, pushedCommits, and summary.
+
+## Important rules
+- The VM has no real GitHub token. Never run raw git push. Always use git-push.
+- gh pr create is allowed; GitHub HTTP traffic is mediated by the controller proxy. Use GH_TOKEN="$GITHUB_TOKEN" prefix with gh.
+- Do not call run_validation here. The work phase already handled validation.
+- Do not call git-push while on the protected/default branch. Create or switch to an agent/* branch first.
+
+## Do not
+- Run git push.
+- Call run_validation here.
+- Start unrelated cleanup.
+- Modify files unless git-pull-default reveals a real conflict or missing commit.
+
+## Return format
+{ "summary": "wrapup result", "prUrl": "https://github.com/org/repo/pull/1", "branchName": "agent/name", "pushedCommits": ["sha"] }`;
+const DEFAULTS_BY_ROLE = {
+    'plan-agent': DEFAULT_PLAN_AGENT_INSTRUCTIONS,
+    'plan-reviewer': DEFAULT_PLAN_REVIEWER_INSTRUCTIONS,
+    'work-agent': DEFAULT_WORK_AGENT_INSTRUCTIONS,
+    'work-reviewer': DEFAULT_WORK_REVIEWER_INSTRUCTIONS,
+    wrapup: DEFAULT_WRAPUP_INSTRUCTIONS,
+};
+export function resolveRoleInstructions(role, configValue) {
+    return configValue ?? DEFAULTS_BY_ROLE[role];
+}
+export function interpolateBaseInstructions(branchPrefix) {
+    return DEFAULT_BASE_INSTRUCTIONS.replaceAll('{branchPrefix}', branchPrefix);
+}
+//# sourceMappingURL=prompt-defaults.js.map

package/dist/prompt/prompt-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt-defaults.js","sourceRoot":"","sources":["../../src/prompt/prompt-defaults.ts"],"names":[],"mappings":"AAEA,MAAM,CAAC,MAAM,yBAAyB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iFA6CwC,CAAC;AAElF,MAAM,CAAC,MAAM,+BAA+B,GAAG;;;;;;;;;;;;;;;;;;;;;wBAqBvB,CAAC;AAEzB,MAAM,CAAC,MAAM,kCAAkC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;EAyBhD,CAAC;AAEH,MAAM,CAAC,MAAM,+BAA+B,GAAG;;;;;;;;;;;;;;;;;;;;;;gEAsBiB,CAAC;AAEjE,MAAM,CAAC,MAAM,kCAAkC,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BhD,CAAC;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;oIAyCyF,CAAC;AAErI,MAAM,gBAAgB,GAAG;IACxB,YAAY,EAAE,+BAA+B;IAC7C,eAAe,EAAE,kCAAkC;IACnD,YAAY,EAAE,+BAA+B;IAC7C,eAAe,EAAE,kCAAkC;IACnD,MAAM,EAAE,2BAA2B;CACJ,CAAC;AAEjC,MAAM,UAAU,uBAAuB,CAAC,IAAU,EAAE,WAA0B;IAC7E,OAAO,WAAW,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,YAAoB;IAC/D,OAAO,yBAAyB,CAAC,UAAU,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;AAC7E,CAAC"}

package/dist/server.d.ts

@@ -0,0 +1,32 @@
+import { Hono } from 'hono';
+import { z } from 'zod';
+import type { TaskState } from './state/task-state.js';
+export declare const createTaskRequestSchema: z.ZodObject<{
+    taskId: z.ZodString;
+    prompt: z.ZodString;
+    repos: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        repoUrl: z.ZodString;
+        baseBranch: z.ZodString;
+        workspacePath: z.ZodString;
+    }, z.core.$strip>>>;
+    context: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, z.core.$strip>;
+export interface ServerDeps {
+    readonly getActiveTaskId: () => string | null;
+    readonly getActiveTaskStatus: () => string | null;
+    readonly getTaskState: (taskId: string) => TaskState | undefined;
+    readonly submitTask: (input: z.infer<typeof createTaskRequestSchema>) => Promise<{
+        taskId: string;
+        status: 'accepted';
+    }>;
+    readonly closeTask: (taskId: string) => Promise<{
+        status: 'closed';
+    }>;
+    readonly getUptime: () => number;
+    readonly getExecutorInfo: () => {
+        readonly provider: string;
+        readonly model: string;
+    };
+}
+export declare function createApp(deps: ServerDeps): Hono;
+//# sourceMappingURL=server.d.ts.map

package/dist/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAoBvD,eAAO,MAAM,uBAAuB;;;;;;;;;iBAKlC,CAAC;AAEH,MAAM,WAAW,UAAU;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IAClD,QAAQ,CAAC,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,SAAS,GAAG,SAAS,CAAC;IACjE,QAAQ,CAAC,UAAU,EAAE,CACpB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,KAC1C,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;IACrD,QAAQ,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;QAAE,MAAM,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IACtE,QAAQ,CAAC,SAAS,EAAE,MAAM,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,MAAM;QAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;KACvB,CAAC;CACF;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,UAAU,GAAG,IAAI,CAmEhD"}

package/dist/server.js

@@ -0,0 +1,75 @@
+import { zValidator } from '@hono/zod-validator';
+import { Hono } from 'hono';
+import { z } from 'zod';
+import { repoLocationSchema } from './shared/repo-location.js';
+import { writeStderr } from './shared/stderr.js';
+import { isTerminal } from './state/task-state.js';
+function validationErrorHook(result, context) {
+    if (!result.success) {
+        return context.json({
+            error: 'invalid-request',
+            details: result.error?.issues ?? [],
+        }, 400);
+    }
+}
+export const createTaskRequestSchema = z.object({
+    taskId: z.string().min(1),
+    prompt: z.string().min(1),
+    repos: z.array(repoLocationSchema).default([]),
+    context: z.record(z.string(), z.unknown()).default({}),
+});
+export function createApp(deps) {
+    const app = new Hono();
+    app.get('/health', (context) => context.json({
+        status: 'ok',
+        activeTask: deps.getActiveTaskId(),
+        activeTaskStatus: deps.getActiveTaskStatus(),
+        uptime: deps.getUptime(),
+        executor: deps.getExecutorInfo(),
+    }));
+    app.post('/tasks', zValidator('json', createTaskRequestSchema, validationErrorHook), async (context) => {
+        try {
+            if (deps.getActiveTaskId() !== null) {
+                return context.json({
+                    error: 'task-already-active',
+                    activeTaskId: deps.getActiveTaskId(),
+                }, 409);
+            }
+            const result = await deps.submitTask(context.req.valid('json'));
+            return context.json(result, 201);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            writeStderr(`[server] Failed to submit task: ${message}`);
+            return context.json({ error: 'task-submission-failed' }, 500);
+        }
+    });
+    app.get('/tasks/:id', (context) => {
+        const taskState = deps.getTaskState(context.req.param('id'));
+        if (!taskState) {
+            return context.json({ error: 'task-not-found' }, 404);
+        }
+        return context.json(taskState);
+    });
+    app.post('/tasks/:id/close', async (context) => {
+        const taskId = context.req.param('id');
+        const taskState = deps.getTaskState(taskId);
+        if (!taskState) {
+            return context.json({ error: 'task-not-found' }, 404);
+        }
+        if (isTerminal(taskState)) {
+            return context.json({ error: 'task-is-terminal', status: taskState.status }, 410);
+        }
+        try {
+            const result = await deps.closeTask(taskId);
+            return context.json(result, 200);
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            writeStderr(`[server] Failed to close task ${taskId}: ${message}`);
+            return context.json({ error: 'task-close-failed' }, 500);
+        }
+    });
+    return app;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,SAAS,mBAAmB,CAC3B,MAGC,EACD,OAAgB;IAEhB,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,OAAO,CAAC,IAAI,CAClB;YACC,KAAK,EAAE,iBAAiB;YACxB,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE;SACnC,EACD,GAAG,CACH,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACtD,CAAC,CAAC;AAiBH,MAAM,UAAU,SAAS,CAAC,IAAgB;IACzC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IAEvB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE,CAC9B,OAAO,CAAC,IAAI,CAAC;QACZ,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,IAAI,CAAC,eAAe,EAAE;QAClC,gBAAgB,EAAE,IAAI,CAAC,mBAAmB,EAAE;QAC5C,MAAM,EAAE,IAAI,CAAC,SAAS,EAAE;QACxB,QAAQ,EAAE,IAAI,CAAC,eAAe,EAAE;KAChC,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,IAAI,CACP,QAAQ,EACR,UAAU,CAAC,MAAM,EAAE,uBAAuB,EAAE,mBAAmB,CAAC,EAChE,KAAK,EAAE,OAAO,EAAE,EAAE;QACjB,IAAI,CAAC;YACJ,IAAI,IAAI,CAAC,eAAe,EAAE,KAAK,IAAI,EAAE,CAAC;gBACrC,OAAO,OAAO,CAAC,IAAI,CAClB;oBACC,KAAK,EAAE,qBAAqB;oBAC5B,YAAY,EAAE,IAAI,CAAC,eAAe,EAAE;iBACpC,EACD,GAAG,CACH,CAAC;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;YAChE,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,WAAW,CAAC,mCAAmC,OAAO,EAAE,CAAC,CAAC;YAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC/D,CAAC;IACF,CAAC,CACD,CAAC;IAEF,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,EAAE;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAC9C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAC5C,IAAI,CAAC,SAAS,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,EAAE,GAAG,CAAC,CAAC;QACvD,CAAC;QACD,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;YAC3B,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,CAAC;QACnF,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;YAC5C,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,WAAW,CAAC,iCAAiC,MAAM,KAAK,OAAO,EAAE,CAAC,CAAC;YACnE,OAAO,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,GAAG,CAAC,CAAC;QAC1D,CAAC;IACF,CAAC,CAAC,CAAC;IAEH,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/shared/phase-names.d.ts

@@ -0,0 +1,8 @@
+export declare const phaseNameByConfigKey: {
+    readonly plan: "plan";
+    readonly work: "work";
+    readonly wrapup: "wrapup";
+};
+export declare const phaseNames: readonly ["plan", "work", "wrapup"];
+export type ConfigPhaseKey = keyof typeof phaseNameByConfigKey;
+//# sourceMappingURL=phase-names.d.ts.map

package/dist/shared/phase-names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-names.d.ts","sourceRoot":"","sources":["../../src/shared/phase-names.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,oBAAoB;;;;CAIvB,CAAC;AAEX,eAAO,MAAM,UAAU,qCAIb,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,MAAM,OAAO,oBAAoB,CAAC"}

package/dist/shared/phase-names.js

@@ -0,0 +1,11 @@
+export const phaseNameByConfigKey = {
+    plan: 'plan',
+    work: 'work',
+    wrapup: 'wrapup',
+};
+export const phaseNames = [
+    phaseNameByConfigKey.plan,
+    phaseNameByConfigKey.work,
+    phaseNameByConfigKey.wrapup,
+];
+//# sourceMappingURL=phase-names.js.map

package/dist/shared/phase-names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"phase-names.js","sourceRoot":"","sources":["../../src/shared/phase-names.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,oBAAoB,GAAG;IACnC,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,QAAQ;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,UAAU,GAAG;IACzB,oBAAoB,CAAC,IAAI;IACzB,oBAAoB,CAAC,IAAI;IACzB,oBAAoB,CAAC,MAAM;CAClB,CAAC"}

package/dist/shared/repo-location.d.ts

@@ -0,0 +1,13 @@
+import { z } from 'zod';
+export declare const repoTargetSchema: z.ZodObject<{
+    repoUrl: z.ZodString;
+    baseBranch: z.ZodString;
+}, z.core.$strip>;
+export type RepoTarget = z.infer<typeof repoTargetSchema>;
+export declare const repoLocationSchema: z.ZodObject<{
+    repoUrl: z.ZodString;
+    baseBranch: z.ZodString;
+    workspacePath: z.ZodString;
+}, z.core.$strip>;
+export type RepoLocation = z.infer<typeof repoLocationSchema>;
+//# sourceMappingURL=repo-location.d.ts.map

package/dist/shared/repo-location.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-location.d.ts","sourceRoot":"","sources":["../../src/shared/repo-location.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,gBAAgB;;;iBAG3B,CAAC;AAEH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,kBAAkB;;;;iBAE7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/shared/repo-location.js

@@ -0,0 +1,9 @@
+import { z } from 'zod';
+export const repoTargetSchema = z.object({
+    repoUrl: z.string().min(1),
+    baseBranch: z.string().min(1),
+});
+export const repoLocationSchema = repoTargetSchema.extend({
+    workspacePath: z.string().min(1),
+});
+//# sourceMappingURL=repo-location.js.map

package/dist/shared/repo-location.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-location.js","sourceRoot":"","sources":["../../src/shared/repo-location.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAIH,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC,MAAM,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAChC,CAAC,CAAC"}

package/dist/shared/review-result.d.ts

@@ -0,0 +1,17 @@
+import { z } from 'zod';
+export declare const reviewResultSchema: z.ZodObject<{
+    approved: z.ZodBoolean;
+    comments: z.ZodArray<z.ZodObject<{
+        file: z.ZodString;
+        line: z.ZodOptional<z.ZodNumber>;
+        severity: z.ZodEnum<{
+            critical: "critical";
+            suggestion: "suggestion";
+            nitpick: "nitpick";
+        }>;
+        comment: z.ZodString;
+    }, z.core.$strip>>;
+    summary: z.ZodString;
+}, z.core.$strip>;
+export type ReviewResult = z.infer<typeof reviewResultSchema>;
+//# sourceMappingURL=review-result.d.ts.map

package/dist/shared/review-result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-result.d.ts","sourceRoot":"","sources":["../../src/shared/review-result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;iBAW7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/shared/review-result.js

@@ -0,0 +1,12 @@
+import { z } from 'zod';
+export const reviewResultSchema = z.object({
+    approved: z.boolean(),
+    comments: z.array(z.object({
+        file: z.string(),
+        line: z.number().optional(),
+        severity: z.enum(['critical', 'suggestion', 'nitpick']),
+        comment: z.string(),
+    })),
+    summary: z.string(),
+});
+//# sourceMappingURL=review-result.js.map

package/dist/shared/review-result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"review-result.js","sourceRoot":"","sources":["../../src/shared/review-result.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC;QACR,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACvD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CACF;IACD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;CACnB,CAAC,CAAC"}

package/dist/shared/skill-types.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+export declare const skillReferenceSchema: z.ZodObject<{
+    name: z.ZodString;
+    path: z.ZodString;
+}, z.core.$strip>;
+export type SkillReference = z.infer<typeof skillReferenceSchema>;
+//# sourceMappingURL=skill-types.d.ts.map

package/dist/shared/skill-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-types.d.ts","sourceRoot":"","sources":["../../src/shared/skill-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,oBAAoB;;;iBAG/B,CAAC;AAEH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/dist/shared/skill-types.js

@@ -0,0 +1,6 @@
+import { z } from 'zod';
+export const skillReferenceSchema = z.object({
+    name: z.string().min(1),
+    path: z.string().min(1),
+});
+//# sourceMappingURL=skill-types.js.map

package/dist/shared/skill-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skill-types.js","sourceRoot":"","sources":["../../src/shared/skill-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACvB,CAAC,CAAC"}

package/dist/shared/stderr.d.ts

@@ -0,0 +1,2 @@
+export declare function writeStderr(message: string): void;
+//# sourceMappingURL=stderr.d.ts.map

package/dist/shared/stderr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stderr.d.ts","sourceRoot":"","sources":["../../src/shared/stderr.ts"],"names":[],"mappings":"AAAA,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEjD"}

package/dist/shared/stderr.js

@@ -0,0 +1,4 @@
+export function writeStderr(message) {
+    process.stderr.write(`${message}\n`);
+}
+//# sourceMappingURL=stderr.js.map

package/dist/shared/stderr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stderr.js","sourceRoot":"","sources":["../../src/shared/stderr.ts"],"names":[],"mappings":"AAAA,MAAM,UAAU,WAAW,CAAC,OAAe;IAC1C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;AACtC,CAAC"}

package/dist/state/event-log.d.ts

@@ -0,0 +1,4 @@
+import type { TaskEvent, TimestampedEvent } from './task-event-types.js';
+export declare function appendEvent(filePath: string, event: TaskEvent): Promise<void>;
+export declare function replayEvents(filePath: string): Promise<readonly TimestampedEvent[]>;
+//# sourceMappingURL=event-log.d.ts.map

package/dist/state/event-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-log.d.ts","sourceRoot":"","sources":["../../src/state/event-log.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAUzE,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAcnF;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAyCzF"}

package/dist/state/event-log.js

@@ -0,0 +1,67 @@
+import fs from 'node:fs/promises';
+import { dirname } from 'node:path';
+import { writeStderr } from '../shared/stderr.js';
+function isTimestampedEvent(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    if (!('ts' in value) || !('data' in value))
+        return false;
+    if (typeof value.ts !== 'string')
+        return false;
+    if (typeof value.data !== 'object' || value.data === null)
+        return false;
+    return 'event' in value.data;
+}
+export async function appendEvent(filePath, event) {
+    try {
+        await fs.mkdir(dirname(filePath), { recursive: true });
+        const timestampedEvent = {
+            ts: new Date().toISOString(),
+            data: event,
+        };
+        await fs.appendFile(filePath, `${JSON.stringify(timestampedEvent)}\n`, 'utf-8');
+    }
+    catch (error) {
+        throw new Error(`Failed to append event to ${filePath}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+    }
+}
+export async function replayEvents(filePath) {
+    let fileContents;
+    try {
+        fileContents = await fs.readFile(filePath, 'utf-8');
+    }
+    catch (error) {
+        if (error && typeof error === 'object' && 'code' in error && error.code === 'ENOENT') {
+            return [];
+        }
+        throw error;
+    }
+    const lines = fileContents.split('\n').filter((line) => line.trim() !== '');
+    if (lines.length === 0) {
+        return [];
+    }
+    const events = [];
+    for (let lineIndex = 0; lineIndex < lines.length; lineIndex += 1) {
+        const line = lines[lineIndex];
+        if (!line)
+            continue;
+        const isLastLine = lineIndex === lines.length - 1;
+        try {
+            const parsedJson = JSON.parse(line);
+            if (!isTimestampedEvent(parsedJson)) {
+                throw new Error(`Invalid event structure at line ${lineIndex + 1}`);
+            }
+            events.push(parsedJson);
+        }
+        catch (error) {
+            if (isLastLine) {
+                writeStderr(`Skipping incomplete final line in ${filePath}: ${line.slice(0, 50)}...`);
+            }
+            else {
+                throw new Error(`Corrupt event at line ${lineIndex + 1} in ${filePath}: ${error instanceof Error ? error.message : String(error)}`, { cause: error });
+            }
+        }
+    }
+    return events;
+}
+//# sourceMappingURL=event-log.js.map

package/dist/state/event-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"event-log.js","sourceRoot":"","sources":["../../src/state/event-log.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlD,SAAS,kBAAkB,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACzD,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IACxE,OAAO,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC;AAC9B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAgB,EAAE,KAAgB;IACnE,IAAI,CAAC;QACJ,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvD,MAAM,gBAAgB,GAAqB;YAC1C,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAC5B,IAAI,EAAE,KAAK;SACX,CAAC;QACF,MAAM,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACd,6BAA6B,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAClG,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;IACH,CAAC;AACF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,QAAgB;IAClD,IAAI,YAAoB,CAAC;IACzB,IAAI,CAAC;QACJ,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,IAAI,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACtF,OAAO,EAAE,CAAC;QACX,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IAED,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAuB,EAAE,CAAC;IACtC,KAAK,IAAI,SAAS,GAAG,CAAC,EAAE,SAAS,GAAG,KAAK,CAAC,MAAM,EAAE,SAAS,IAAI,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;QAC9B,IAAI,CAAC,IAAI;YAAE,SAAS;QAEpB,MAAM,UAAU,GAAG,SAAS,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC;YACJ,MAAM,UAAU,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,kBAAkB,CAAC,UAAU,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,mCAAmC,SAAS,GAAG,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,UAAU,EAAE,CAAC;gBAChB,WAAW,CAAC,qCAAqC,QAAQ,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;YACvF,CAAC;iBAAM,CAAC;gBACP,MAAM,IAAI,KAAK,CACd,yBAAyB,SAAS,GAAG,CAAC,OAAO,QAAQ,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAClH,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;YACH,CAAC;QACF,CAAC;IACF,CAAC;IAED,OAAO,MAAM,CAAC;AACf,CAAC"}