@agentproto/worktree 0.2.0 → 0.3.0

package/LICENSE

@@ -1,21 +1,202 @@
-MIT License
-
-Copyright (c) 2026 Jeremy André and agentproto contributors
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -10,13 +10,95 @@ and cleaning up a git worktree — the primitive a `@agentproto/workflow-runtime
   at `<repoRoot>/../_worktrees/<slug>` on branch `wt/<slug>`, cut from `base`
   (default `origin/main`). Optionally runs `depsCmd` inside it, and copies
   `copyGlobs` (e.g. gitignored local secrets) from `repoRoot` into it at the
-  same relative path. Returns `{ cwd, branch }`.
+  same relative path. Then runs the base tree's `agentproto.json` **setup**
+  hooks (unless `runSetup: false`). Returns `{ cwd, branch }`.
 - **`worktree.run-gate`** — run a caller-provided command inside a directory
   and report pass/fail from its exit code.
-- **`worktree.cleanup`** — `git worktree remove` (+ optional `git branch -D`).
+- **`worktree.cleanup`** — stop the worktree's supervised services, run the
+  base tree's **teardown** hooks (failures logged, never blocking), then
+  `git worktree remove` (+ optional `git branch -D`).
+- **`worktree.run-script`** — run a declared `scripts.<name>` command once
+  inside a worktree, with the `AGENTPROTO_*` env injected.
+- **`worktree.start-service` / `worktree.stop-service` / `worktree.list-services`**
+  — start/stop/list the declared `type: "service"` scripts as supervised
+  long-running children with allocated ports and a `*.localhost` proxy route.
 
-All three are agnostic: no hardcoded package manager, env layout, or gate
-command — everything is an input.
+The gate/provision/cleanup trio is agnostic: no hardcoded package manager, env
+layout, or gate command — everything is an input.
+
+## `agentproto.json` — per-repo worktree lifecycle
+
+Drop an `agentproto.json` at the repo root to declare how a fresh worktree is
+set up, torn down, and what dev services it runs:
+
+```json
+{
+  "worktree": {
+    "setup": ["pnpm install", "cp \"$AGENTPROTO_SOURCE_CHECKOUT_PATH/.env\" .env"],
+    "teardown": "rm -rf .cache"
+  },
+  "scripts": {
+    "test": { "command": "pnpm test" },
+    "web":  { "command": "pnpm dev --port $AGENTPROTO_PORT", "type": "service", "port": 3000 },
+    "api":  { "command": "pnpm api --port $AGENTPROTO_PORT", "type": "service" }
+  }
+}
+```
+
+- **`worktree.setup` / `worktree.teardown`** — a single (multiline) shell
+  string or an array of commands, run sequentially with the worktree as cwd.
+  A failing setup command **fails provisioning** with its captured output; a
+  failing teardown command is logged but never blocks cleanup.
+- **`scripts.<name>`** — `{ command, type?: "service", port? }`. Plain scripts
+  run once (`worktree.run-script`); `type: "service"` scripts are supervised
+  long-running processes (`worktree.start-service`).
+
+### Security: config is read from the committed base tree
+
+`agentproto.json` is **always** read via `git show <base>:agentproto.json` —
+the committed tree of the base ref (default `origin/main`), never a worktree's
+working tree. A feature branch or an agent editing files inside a worktree
+therefore **cannot inject** setup/teardown hooks or service commands that run
+on the host; only what a reviewer merged into the base branch executes.
+
+### Environment
+
+Every hook, script, and service receives:
+
+| Variable | Meaning |
+| --- | --- |
+| `AGENTPROTO_SOURCE_CHECKOUT_PATH` | Absolute path to the original repo checkout |
+| `AGENTPROTO_WORKTREE_PATH` | Absolute path to the worktree directory |
+| `AGENTPROTO_BRANCH_NAME` | The worktree's branch name |
+
+Each **service** additionally receives its own `AGENTPROTO_PORT` and
+`AGENTPROTO_URL` (its proxy URL), plus peer-discovery vars for every sibling
+service in the same worktree: `AGENTPROTO_SERVICE_<NAME>_PORT` and
+`AGENTPROTO_SERVICE_<NAME>_URL` (name upper-cased, non-alphanumerics → `_`).
+
+### Services, ports, and the reverse proxy
+
+- **Port allocation** — a service uses its declared `port` when free, else an
+  OS-assigned ephemeral port. Ports are reserved up front for every declared
+  service so peer discovery is complete.
+- **Reverse proxy** — `ProxyTable` + `createProxyServer`/`startProxy` route
+  `http://<script>--<branch-slug>--<repo-slug>.localhost:<proxy-port>` to a
+  service's local port, with WebSocket upgrade passthrough. On the repo's
+  default branch the branch label is dropped:
+  `http://<script>--<repo-slug>.localhost:<proxy-port>`. Slugging lowercases,
+  maps non-alphanumerics to `-`, collapses repeats, and trims. `*.localhost`
+  resolves to `127.0.0.1` on modern systems, so no DNS setup is needed.
+
+### `agentproto worktree` CLI
+
+```
+agentproto worktree ls      [--repo <dir>] [--json]
+agentproto worktree archive <path> [--base <ref>] [--keep-branch] [--json]
+```
+
+`ls` lists the repo's git worktrees; `archive` stops a worktree's services,
+runs its teardown hooks, and removes it (deleting the branch unless
+`--keep-branch`).
 
 ## `worktreeAgentWorkflow`
 

package/dist/bin/worktree-agent.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { connectDaemonAgentSessionHost, worktreeAgentWorkflow } from '../chunk-P7FOHOQ3.mjs';
-import '../chunk-PSFICTF7.mjs';
-import '../chunk-BBAH3VLQ.mjs';
-import '../chunk-FRVPZTQN.mjs';
+import { connectDaemonAgentSessionHost, worktreeAgentWorkflow } from '../chunk-CBEWP5OT.mjs';
+import '../chunk-E3EM24BS.mjs';
+import '../chunk-SEVCUXPY.mjs';
+import '../chunk-CM3XGWTY.mjs';
 import { runWorkflow } from '@agentproto/workflow-runtime';
 import { resolve } from 'path';
 import { openSync, closeSync, createReadStream, createWriteStream } from 'fs';

package/dist/{chunk-P7FOHOQ3.mjs → chunk-CBEWP5OT.mjs}

@@ -1,5 +1,5 @@
-import { worktreeProvider } from './chunk-BBAH3VLQ.mjs';
-import { provisionWorktreeTool, runGateTool, cleanupWorktreeTool } from './chunk-FRVPZTQN.mjs';
+import { worktreeProvider } from './chunk-SEVCUXPY.mjs';
+import { provisionWorktreeTool, runGateTool, cleanupWorktreeTool } from './chunk-CM3XGWTY.mjs';
 import { z } from 'zod';
 import { resolveMcpUrl, HarnessClient } from '@agentproto/harness';
 
@@ -76,11 +76,19 @@ var worktreeAgentWorkflow = {
               id: "cleanup",
               tool: cleanupWorktreeTool,
               candidates,
+              // discardUntracked/discardModified: worktree.cleanup refuses a
+              // dirty tree by default (PLAN.md §5.2 layer 3). This workflow's
+              // own approval step, just above, is that guard already —  a
+              // human explicitly approved tearing this worktree down, so
+              // both flags are granted here rather than surfacing a second,
+              // redundant refusal.
               input: (b) => ({
                 repoRoot: input(b).repoRoot,
                 cwd: b.steps.provision.cwd,
                 branch: b.steps.provision.branch,
-                deleteBranch: input(b).deleteBranch ?? true
+                deleteBranch: input(b).deleteBranch ?? true,
+                discardUntracked: true,
+                discardModified: true
               })
             }
           ],
@@ -172,5 +180,5 @@ async function waitForSettled(client, sessionId) {
 }
 
 export { connectDaemonAgentSessionHost, makeDaemonAgentSessionHost, worktreeAgentInputSchema, worktreeAgentWorkflow };
-//# sourceMappingURL=chunk-P7FOHOQ3.mjs.map
-//# sourceMappingURL=chunk-P7FOHOQ3.mjs.map
+//# sourceMappingURL=chunk-CBEWP5OT.mjs.map
+//# sourceMappingURL=chunk-CBEWP5OT.mjs.map

package/dist/chunk-CBEWP5OT.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workflow.ts","../src/agent-session-host.ts"],"names":[],"mappings":";;;;;;;;;AASO,IAAM,wBAAA,GAA2B,EAAE,MAAA,CAAO;AAAA,EAC/C,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2CAA2C,CAAA;AAAA,EACzE,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,oDAAoD,CAAA;AAAA,EAC9E,MAAM,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,6DAA6D,CAAA;AAAA,EAClG,SAAS,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oFAAoF,CAAA;AAAA,EAC5H,SAAA,EAAW,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,2DAA2D,CAAA;AAAA,EAC9G,SAAA,EAAW,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,6KAA6K,CAAA;AAAA,EAChO,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,sCAAsC,CAAA;AAAA,EAChE,SAAS,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,4CAA4C,CAAA;AAAA,EACpF,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,8EAA8E,CAAA;AAAA,EAC3G,cAAc,CAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,wDAAwD;AACxG,CAAC;AAID,IAAM,UAAA,GAAa,CAAC,gBAAgB,CAAA;AAEpC,SAAS,MAAM,CAAA,EAA2C;AACxD,EAAA,OAAO,CAAA,CAAE,KAAA;AACX;AAOO,IAAM,qBAAA,GAAyC;AAAA,EACpD,EAAA,EAAI,gBAAA;AAAA,EACJ,WAAA,EACE,kNAAA;AAAA,EAGF,KAAA,EAAO;AAAA,IACL;AAAA,MACE,IAAA,EAAM,MAAA;AAAA,MACN,EAAA,EAAI,WAAA;AAAA,MACJ,IAAA,EAAM,qBAAA;AAAA,MACN,UAAA;AAAA,MACA,KAAA,EAAO,CAAC,CAAA,KAAgB;AACtB,QAAA,MAAM,CAAA,GAAI,MAAM,CAAC,CAAA;AACjB,QAAA,OAAO;AAAA,UACL,UAAU,CAAA,CAAE,QAAA;AAAA,UACZ,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,SAAS,CAAA,CAAE,OAAA;AAAA,UACX,WAAW,CAAA,CAAE,SAAA;AAAA,UACb,WAAW,CAAA,CAAE;AAAA,SACf;AAAA,MACF;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,OAAA;AAAA,MACN,EAAA,EAAI,MAAA;AAAA,MACJ,SAAS,CAAC,CAAA,KAAgB,KAAA,CAAM,CAAC,EAAE,OAAA,IAAW,aAAA;AAAA,MAC9C,GAAA,EAAK,CAAC,CAAA,KAAiB,CAAA,CAAE,MAAM,SAAA,CAA8B,GAAA;AAAA,MAC7D,MAAA,EAAQ,CAAC,CAAA,KAAgB,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,KACpC;AAAA,IACA;AAAA,MACE,IAAA,EAAM,MAAA;AAAA,MACN,EAAA,EAAI,MAAA;AAAA,MACJ,IAAA,EAAM,WAAA;AAAA,MACN,UAAA;AAAA,MACA,KAAA,EAAO,CAAC,CAAA,MAAiB;AAAA,QACvB,GAAA,EAAM,CAAA,CAAE,KAAA,CAAM,SAAA,CAA8B,GAAA;AAAA,QAC5C,GAAA,EAAK,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,OAChB;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,QAAA;AAAA,MACN,EAAA,EAAI,OAAA;AAAA,MACJ,IAAA,EAAM,CAAC,CAAA,KAAiB,CAAA,CAAE,MAAM,IAAA,CAA6B,MAAA;AAAA,MAC7D,IAAA,EAAM;AAAA,QACJ;AAAA,UACE,IAAA,EAAM,UAAA;AAAA,UACN,EAAA,EAAI,UAAA;AAAA,UACJ,QAAQ,MAAM,wCAAA;AAAA,UACd,SAAA,EAAW;AAAA,YACT;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,EAAA,EAAI,SAAA;AAAA,cACJ,IAAA,EAAM,mBAAA;AAAA,cACN,UAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,cAOA,KAAA,EAAO,CAAC,CAAA,MAAiB;AAAA,gBACvB,QAAA,EAAU,KAAA,CAAM,CAAC,CAAA,CAAE,QAAA;AAAA,gBACnB,GAAA,EAAM,CAAA,CAAE,KAAA,CAAM,SAAA,CAA8B,GAAA;AAAA,gBAC5C,MAAA,EAAS,CAAA,CAAE,KAAA,CAAM,SAAA,CAAiC,MAAA;AAAA,gBAClD,YAAA,EAAc,KAAA,CAAM,CAAC,CAAA,CAAE,YAAA,IAAgB,IAAA;AAAA,gBACvC,gBAAA,EAAkB,IAAA;AAAA,gBAClB,eAAA,EAAiB;AAAA,eACnB;AAAA;AACF,WACF;AAAA,UACA,QAAA,EAAU;AAAA,YACR;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,EAAA,EAAI,MAAA;AAAA,cACJ,SAAS,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,kBAAA,EAA4B;AAAA;AACxE;AACF;AACF,OACF;AAAA,MACA,SAAA,EAAW;AAAA,QACT;AAAA,UACE,IAAA,EAAM,WAAA;AAAA,UACN,EAAA,EAAI,aAAA;AAAA,UACJ,SAAS,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,aAAA,EAAuB;AAAA;AACnE;AACF;AACF,GACF;AAAA,EACA,MAAA,EAAQ,CAAC,CAAA,MAAiB;AAAA,IACxB,GAAA,EAAM,CAAA,CAAE,KAAA,CAAM,SAAA,CAA8B,GAAA;AAAA,IAC5C,MAAA,EAAS,CAAA,CAAE,KAAA,CAAM,SAAA,CAAiC,MAAA;AAAA,IAClD,IAAA,EAAM,EAAE,KAAA,CAAM,IAAA;AAAA,IACd,OAAA,EAAS,EAAE,KAAA,CAAM,OAAA,IAAW,EAAE,KAAA,CAAM,IAAA,IAAQ,CAAA,CAAE,KAAA,CAAM,aAAa;AAAA,GACnE;AACF;ACvHA,IAAM,WAAA,GAAc,IAAA;AAoCpB,eAAsB,8BACpB,IAAA,EACiC;AACjC,EAAA,MAAM,GAAA,GAAM,cAAc,IAAI,CAAA;AAC9B,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,MAAM,aAAA,CAAc,OAAA,CAAQ,EAAE,KAAK,CAAA;AAAA,EAC9C,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,2EAA2E,GAAG,CAAA;AAAA,CAAA,EAGxE,eAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,KACxD;AAAA,EACF;AACA,EAAA,OAAO,2BAA2B,MAAM,CAAA;AAC1C;AAGO,SAAS,2BAA2B,MAAA,EAA8C;AACvF,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAAoB;AAEhD,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,OAAA,EAAS,IAAA,EAAuB;AAC1C,MAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,KAAA,CAAM;AAAA,QAC9B,OAAA;AAAA,QACA,GAAI,KAAK,GAAA,KAAQ,MAAA,GAAY,EAAE,GAAA,EAAK,IAAA,CAAK,GAAA,EAAI,GAAI,EAAC;AAAA,QAClD,GAAI,KAAK,aAAA,KAAkB,MAAA,GAAY,EAAE,aAAA,EAAe,IAAA,CAAK,aAAA,EAAc,GAAI,EAAC;AAAA,QAChF,GAAI,KAAK,MAAA,KAAW,MAAA,GAAY,EAAE,KAAA,EAAO,IAAA,CAAK,MAAA,EAAO,GAAI;AAAC,OAC3D,CAAA;AACD,MAAA,IAAI,KAAK,MAAA,EAAQ,eAAA,CAAgB,IAAI,IAAA,CAAK,MAAA,EAAQ,KAAK,EAAE,CAAA;AACzD,MAAA,OAAO,IAAA,CAAK,EAAA;AAAA,IACd,CAAA;AAAA,IAEA,MAAM,iBAAA,CAAkB,SAAA,EAAW,MAAA,EAAuB;AAGxD,MAAA,MAAM,WAAA,GAAc,cAAA,CAAe,MAAA,EAAQ,SAAS,CAAA;AACpD,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAM,CAAA;AACrC,MAAA,MAAM,WAAA;AAAA,IACR,CAAA;AAAA,IAEA,eAAe,MAAA,EAA4B;AACzC,MAAA,OAAO,eAAA,CAAgB,IAAI,MAAM,CAAA;AAAA,IACnC,CAAA;AAAA,IAEA,MAAM,MAAM,IAAA,EAAkC;AAC5C,MAAA,OAAO,MAAA,CAAO,MAAM,IAAI,CAAA;AAAA,IAC1B,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,SAAA,EAAW,MAAA,EAAQ,IAAA,EAAqB;AACnD,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC7C,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,SAAA,EAAW,KAAA,EAAwB;AAC9C,MAAA,OAAO,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,KAAK,CAAA;AAAA,IACvC,CAAA;AAAA,IAEA,MAAM,KAAK,SAAA,EAA0B;AACnC,MAAA,MAAM,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,IAC7B,CAAA;AAAA,IAEA,MAAM,UAAA,CAAW,UAAA,EAAY,IAAA,EAA2B;AACtD,MAAA,OAAO,MAAA,CAAO,UAAA,CAAW,UAAA,EAAY,IAAI,CAAA;AAAA,IAC3C,CAAA;AAAA,IAEA,MAAM,KAAA,GAAuB;AAC3B,MAAA,MAAM,OAAO,KAAA,EAAM;AAAA,IACrB;AAAA,GACF;AACF;AASA,eAAe,cAAA,CAAe,QAAsB,SAAA,EAAkC;AACpF,EAAA,WAAS;AACP,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,CAAW,CAAC,SAAS,CAAA,EAAG,EAAE,KAAA,EAAO,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,CAAA;AAC5F,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AAAA,EACxB;AACF","file":"chunk-CBEWP5OT.mjs","sourcesContent":["import { z } from \"zod\"\nimport type { Bindings, RuntimeWorkflow } from \"@agentproto/workflow-runtime\"\nimport { provisionWorktreeTool, cleanupWorktreeTool, runGateTool } from \"./tools/index.js\"\nimport { worktreeProvider } from \"./provider/index.js\"\n\n/**\n * Input to the worktree-agent workflow: launch a coding agent inside a\n * fresh git worktree, gate its work, and — on approval — clean up.\n */\nexport const worktreeAgentInputSchema = z.object({\n  repoRoot: z.string().describe(\"Absolute path to the git repository root.\"),\n  slug: z.string().describe(\"Worktree/branch identifier, e.g. 'fix-flaky-test'.\"),\n  base: z.string().optional().describe(\"Ref to cut the worktree branch from. Default 'origin/main'.\"),\n  depsCmd: z.string().optional().describe(\"Command to install deps inside the worktree, e.g. 'pnpm install --prefer-offline'.\"),\n  copyGlobs: z.array(z.string()).optional().describe(\"Gitignored files to copy into the worktree, e.g. secrets.\"),\n  linkPaths: z.array(z.string()).optional().describe(\"Gitignored dirs/files symlinked from the host repo into the worktree before depsCmd (node_modules, sibling workspace repos) so the graph resolves without a full reinstall.\"),\n  task: z.string().describe(\"The prompt sent to the coding agent.\"),\n  adapter: z.string().optional().describe(\"Agent adapter slug. Default 'claude-code'.\"),\n  gateCmd: z.string().describe(\"Command run inside the worktree to check the agent's work, e.g. 'pnpm test'.\"),\n  deleteBranch: z.boolean().optional().describe(\"Delete the worktree's branch on cleanup. Default true.\"),\n})\n\nexport type WorktreeAgentInput = z.infer<typeof worktreeAgentInputSchema>\n\nconst candidates = [worktreeProvider]\n\nfunction input(b: { input: unknown }): WorktreeAgentInput {\n  return b.input as WorktreeAgentInput\n}\n\n/**\n * provision (tool) → code (AgentStep, cwd bound to provision's output) →\n * gate (tool) → on pass: approval → cleanup (tool); on fail: leave the\n * worktree in place for inspection.\n */\nexport const worktreeAgentWorkflow: RuntimeWorkflow = {\n  id: \"worktree-agent\",\n  description:\n    \"Launch a coding agent inside a fresh git worktree, gate its work with a \" +\n    \"check command, get a human ack, then clean up. On gate failure the \" +\n    \"worktree is left in place for inspection instead of being cleaned up.\",\n  steps: [\n    {\n      kind: \"tool\",\n      id: \"provision\",\n      tool: provisionWorktreeTool,\n      candidates,\n      input: (b: Bindings) => {\n        const i = input(b)\n        return {\n          repoRoot: i.repoRoot,\n          slug: i.slug,\n          base: i.base,\n          depsCmd: i.depsCmd,\n          copyGlobs: i.copyGlobs,\n          linkPaths: i.linkPaths,\n        }\n      },\n    },\n    {\n      kind: \"agent\",\n      id: \"code\",\n      adapter: (b: Bindings) => input(b).adapter ?? \"claude-code\",\n      cwd: (b: Bindings) => (b.steps.provision as { cwd: string }).cwd,\n      prompt: (b: Bindings) => input(b).task,\n    },\n    {\n      kind: \"tool\",\n      id: \"gate\",\n      tool: runGateTool,\n      candidates,\n      input: (b: Bindings) => ({\n        cwd: (b.steps.provision as { cwd: string }).cwd,\n        cmd: input(b).gateCmd,\n      }),\n    },\n    {\n      kind: \"branch\",\n      id: \"route\",\n      cond: (b: Bindings) => (b.steps.gate as { passed: boolean }).passed,\n      then: [\n        {\n          kind: \"approval\",\n          id: \"approval\",\n          prompt: () => \"Gate passed. Approve worktree cleanup?\",\n          onApprove: [\n            {\n              kind: \"tool\",\n              id: \"cleanup\",\n              tool: cleanupWorktreeTool,\n              candidates,\n              // discardUntracked/discardModified: worktree.cleanup refuses a\n              // dirty tree by default (PLAN.md §5.2 layer 3). This workflow's\n              // own approval step, just above, is that guard already —  a\n              // human explicitly approved tearing this worktree down, so\n              // both flags are granted here rather than surfacing a second,\n              // redundant refusal.\n              input: (b: Bindings) => ({\n                repoRoot: input(b).repoRoot,\n                cwd: (b.steps.provision as { cwd: string }).cwd,\n                branch: (b.steps.provision as { branch: string }).branch,\n                deleteBranch: input(b).deleteBranch ?? true,\n                discardUntracked: true,\n                discardModified: true,\n              }),\n            },\n          ],\n          onReject: [\n            {\n              kind: \"transform\",\n              id: \"held\",\n              compute: () => ({ removed: false, reason: \"cleanup_rejected\" as const }),\n            },\n          ],\n        },\n      ],\n      otherwise: [\n        {\n          kind: \"transform\",\n          id: \"gate-failed\",\n          compute: () => ({ removed: false, reason: \"gate_failed\" as const }),\n        },\n      ],\n    },\n  ],\n  output: (b: Bindings) => ({\n    cwd: (b.steps.provision as { cwd: string }).cwd,\n    branch: (b.steps.provision as { branch: string }).branch,\n    gate: b.steps.gate,\n    cleanup: b.steps.cleanup ?? b.steps.held ?? b.steps[\"gate-failed\"],\n  }),\n}\n","import {\n  HarnessClient,\n  resolveMcpUrl,\n  type ConnectHarnessOptions,\n  type SessionDescriptor,\n  type StartAgentArgs,\n  type TurnEvent,\n  type TurnResult,\n} from \"@agentproto/harness\"\nimport type { AgentSessionHost } from \"@agentproto/workflow-runtime\"\n\n/** `session_monitor`'s max accepted long-poll window (`orchestration-tools.ts`). */\nconst MAX_POLL_MS = 49_000\n\n/** The subset of `HarnessClient` the host drives — narrowed for fake-client tests. */\nexport type DaemonClient = Pick<\n  HarnessClient,\n  \"start\" | \"prompt\" | \"output\" | \"kill\" | \"waitForAny\" | \"close\"\n>\n\nexport interface DaemonAgentSessionHost extends AgentSessionHost {\n  close(): Promise<void>\n  /** Full `agent_start`, returning the raw descriptor and forwarding every\n   *  `StartAgentArgs` field (`mcpServers`, `model`, `effort`, `label`, …) —\n   *  unlike `spawn()` above (the narrow AgentStep-shaped convenience\n   *  wrapper), which only takes `cwd`/`workspaceSlug`/`stepId`. Consumers\n   *  that need finer per-turn control than the AgentStep contract provides\n   *  (e.g. `@agentproto/sandbox`'s sandbox agent-session proxy) use this\n   *  plus `prompt`/`output`/`kill`/`waitForAny` directly instead of\n   *  `spawn`/`sendPromptAndWait`. */\n  start(args: StartAgentArgs): Promise<SessionDescriptor>\n  /** Send a follow-up turn — `opts.interrupt` cancels an in-flight turn and\n   *  redirects the session onto this prompt (mirrors `agent_prompt`). */\n  prompt(sessionId: string, prompt: string, opts?: { interrupt?: boolean }): Promise<void>\n  /** Tail the ring buffer (`agent_output`). */\n  output(sessionId: string, lastN?: number): Promise<string>\n  /** SIGTERM the session (`agent_kill`). */\n  kill(sessionId: string): Promise<void>\n  /** Multiplexed long-poll (`session_monitor`) — see `HarnessClient.waitForAny`. */\n  waitForAny(sessionIds: string[], opts?: { timeoutMs?: number; event?: TurnEvent }): Promise<TurnResult>\n}\n\n/**\n * Connect to the agentproto daemon's MCP endpoint and return a real,\n * supervisable `AgentSessionHost` — every `AgentStep` becomes an `agent_start`\n * daemon session rather than a bare subprocess. Fails loudly (no silent\n * fallback) if the daemon isn't reachable.\n */\nexport async function connectDaemonAgentSessionHost(\n  opts?: ConnectHarnessOptions,\n): Promise<DaemonAgentSessionHost> {\n  const url = resolveMcpUrl(opts)\n  let client: HarnessClient\n  try {\n    client = await HarnessClient.connect({ url })\n  } catch (err) {\n    throw new Error(\n      `worktree-agent: could not reach the agentproto daemon's MCP endpoint at ${url}. ` +\n        \"Start the daemon (`agentproto daemon start`), or point at a running one via \" +\n        `AGENTPROTO_MCP_URL, before running this command.\\n` +\n        `(${err instanceof Error ? err.message : String(err)})`,\n    )\n  }\n  return makeDaemonAgentSessionHost(client)\n}\n\n/** Build the host over an already-connected client (exported for tests with a fake client). */\nexport function makeDaemonAgentSessionHost(client: DaemonClient): DaemonAgentSessionHost {\n  const sessionByStepId = new Map<string, string>()\n\n  return {\n    async spawn(adapter, opts): Promise<string> {\n      const desc = await client.start({\n        adapter,\n        ...(opts.cwd !== undefined ? { cwd: opts.cwd } : {}),\n        ...(opts.workspaceSlug !== undefined ? { workspaceSlug: opts.workspaceSlug } : {}),\n        ...(opts.stepId !== undefined ? { label: opts.stepId } : {}),\n      })\n      if (opts.stepId) sessionByStepId.set(opts.stepId, desc.id)\n      return desc.id\n    },\n\n    async sendPromptAndWait(sessionId, prompt): Promise<void> {\n      // Subscribe before sending: an extremely fast turn could otherwise settle\n      // before the wait call subscribes (same race `harness`'s `ask()` avoids).\n      const waitPromise = waitForSettled(client, sessionId)\n      await client.prompt(sessionId, prompt)\n      await waitPromise\n    },\n\n    resolveByLabel(stepId): string | undefined {\n      return sessionByStepId.get(stepId)\n    },\n\n    async start(args): Promise<SessionDescriptor> {\n      return client.start(args)\n    },\n\n    async prompt(sessionId, prompt, opts): Promise<void> {\n      await client.prompt(sessionId, prompt, opts)\n    },\n\n    async output(sessionId, lastN): Promise<string> {\n      return client.output(sessionId, lastN)\n    },\n\n    async kill(sessionId): Promise<void> {\n      await client.kill(sessionId)\n    },\n\n    async waitForAny(sessionIds, opts): Promise<TurnResult> {\n      return client.waitForAny(sessionIds, opts)\n    },\n\n    async close(): Promise<void> {\n      await client.close()\n    },\n  }\n}\n\n/**\n * `session_monitor` long-polls cap at 49s; loop past timeouts for longer\n * turns. A clean timeout comes back as `{ timedOut: true, sessionIds }` —\n * there is no `event: \"timeout\"` on the wire, `event` is only ever set on a\n * real match. Keep polling while `timedOut` is true; stop once it's\n * falsy/absent (a real turn-end/awaiting-input/exited match).\n */\nasync function waitForSettled(client: DaemonClient, sessionId: string): Promise<void> {\n  for (;;) {\n    const result = await client.waitForAny([sessionId], { event: \"any\", timeoutMs: MAX_POLL_MS })\n    if (!result.timedOut) return\n  }\n}\n"]}

package/dist/chunk-CM3XGWTY.mjs

@@ -0,0 +1,155 @@
+import { z } from 'zod';
+import { defineTool } from '@agentproto/tool';
+
+/**
+ * @agentproto/worktree v0.1.0
+ * git-worktree provision / gate / cleanup TOOL contracts + builtin PROVIDER.
+ */
+
+var provisionWorktreeTool = defineTool({
+  id: "worktree.provision",
+  description: "Create a git worktree for `repoRoot` at a sibling '_worktrees/<slug>' directory (or `dir`, when given), on a new branch 'wt/<slug>' (or `branch`, when given) cut from `base`. If `depsCmd` is given, it runs inside the new worktree afterwards (e.g. install deps). If `copyGlobs` is given, matching files under `repoRoot` (including gitignored ones, e.g. local secrets) are copied into the worktree at the same relative path. If `linkPaths` is given, each is symlinked from `repoRoot` into the worktree before `depsCmd` runs \u2014 for gitignored, expensive-to-recreate trees a fresh worktree lacks (node_modules, sibling workspace repos) so the workspace graph resolves without a full reinstall. Also writes a creation-provenance marker into the worktree's private gitdir.",
+  version: "0.2.0",
+  inputSchema: z.object({
+    repoRoot: z.string().describe("Absolute path to the git repository root."),
+    base: z.string().optional().describe("Ref the new branch is cut from. Default 'origin/main'."),
+    slug: z.string().regex(/^[a-z0-9][a-z0-9-]*$/, "slug must be lowercase kebab-case").describe("Short identifier \u2014 names both the worktree directory and its branch."),
+    branch: z.string().optional().describe("Branch name for the new worktree. Default 'wt/<slug>'."),
+    dir: z.string().optional().describe("Absolute path for the new worktree. Default '<repoRoot>/../_worktrees/<slug>'."),
+    depsCmd: z.string().optional().describe("Shell command run inside the worktree after creation, e.g. 'pnpm install --prefer-offline'."),
+    copyGlobs: z.array(z.string()).optional().describe("Glob patterns (relative to repoRoot) of gitignored files to copy into the worktree, e.g. 'envs/**/.env.local'."),
+    linkPaths: z.array(z.string()).optional().describe("Relative paths (dirs or files) symlinked from repoRoot into the worktree before depsCmd, e.g. 'node_modules' or a gitignored sibling workspace repo. Lets the workspace graph resolve without a full reinstall."),
+    runSetup: z.boolean().optional().describe("Run the `worktree.setup` hooks from the base tree's agentproto.json after creation. Default true; a failing setup hook fails provisioning.")
+  }),
+  outputSchema: z.object({
+    cwd: z.string().describe("Absolute path to the created worktree."),
+    branch: z.string().describe("The branch the worktree was created on.")
+  }),
+  mutates: ["fs:write"],
+  approval: "auto",
+  riskLevel: 1
+});
+var cleanupWorktreeTool = defineTool({
+  id: "worktree.cleanup",
+  description: "Remove a git worktree created by 'worktree.provision'. Refuses if the worktree has modified tracked files or unignored untracked files, unless the matching `discardModified` / `discardUntracked` flag is set \u2014 a clean or gitignore-only tree (e.g. installed deps) always removes with no flags. If `deleteBranch` is true and `branch` is given, also force-delete that branch (only ever called for merged branches by this package's own callers).",
+  version: "0.2.0",
+  inputSchema: z.object({
+    repoRoot: z.string().describe("Absolute path to the git repository root."),
+    cwd: z.string().describe("Absolute path to the worktree to remove."),
+    branch: z.string().optional().describe("The worktree's branch, for deleteBranch."),
+    deleteBranch: z.boolean().optional().describe("Also force-delete `branch` after removing the worktree."),
+    base: z.string().optional().describe("Ref whose committed agentproto.json supplies teardown hooks. Default 'origin/main'."),
+    runTeardown: z.boolean().optional().describe("Run the `worktree.teardown` hooks before removal. Default true; teardown failures are logged, never blocking."),
+    discardUntracked: z.boolean().optional().describe("Authorize discarding unignored untracked files. Default false: refuse if any are present."),
+    discardModified: z.boolean().optional().describe("Authorize discarding modified tracked files (staged or unstaged). Default false: refuse if any are present.")
+  }),
+  outputSchema: z.object({
+    removed: z.literal(true)
+  }),
+  mutates: ["fs:write"],
+  approval: "auto",
+  riskLevel: 2
+});
+var runGateTool = defineTool({
+  id: "worktree.run-gate",
+  description: "Run a gate command (e.g. 'pnpm test') inside `cwd` and report pass/fail from its exit code, along with captured stdout/stderr.",
+  version: "0.1.0",
+  inputSchema: z.object({
+    cwd: z.string().describe("Directory to run the command in."),
+    cmd: z.string().describe("Shell command to run, e.g. 'pnpm test'.")
+  }),
+  outputSchema: z.object({
+    passed: z.boolean(),
+    exitCode: z.number().int(),
+    stdout: z.string(),
+    stderr: z.string()
+  }),
+  mutates: [],
+  approval: "auto",
+  riskLevel: 1
+});
+var runScriptTool = defineTool({
+  id: "worktree.run-script",
+  description: 'Run a declared `scripts.<name>` command (from the base tree\'s agentproto.json) inside `worktreePath`, injecting AGENTPROTO_* env, and report pass/fail with captured stdout/stderr. For a `type: "service"` script prefer `worktree.start-service`.',
+  version: "0.1.0",
+  inputSchema: z.object({
+    repoRoot: z.string().describe("Absolute path to the source git repository root."),
+    worktreePath: z.string().describe("Absolute path to the worktree to run in."),
+    branch: z.string().describe("The worktree's branch name (for AGENTPROTO_BRANCH_NAME)."),
+    script: z.string().describe("Name of the script under `scripts` to run."),
+    base: z.string().optional().describe("Ref whose committed agentproto.json is read. Default 'origin/main'.")
+  }),
+  outputSchema: z.object({
+    passed: z.boolean(),
+    exitCode: z.number().int(),
+    stdout: z.string(),
+    stderr: z.string()
+  }),
+  mutates: ["fs:write"],
+  approval: "auto",
+  riskLevel: 1
+});
+var serviceStatusSchema = z.object({
+  name: z.string().describe("The declared script name."),
+  hostname: z.string().describe("The *.localhost host the reverse proxy routes to this service."),
+  port: z.number().int().describe("The port the service listens on."),
+  url: z.string().describe("The service's reverse-proxy URL."),
+  pid: z.number().int().nullable().describe("Child process id while running, else null."),
+  status: z.enum(["running", "exited"]).describe("Whether the service process is up."),
+  exitCode: z.number().int().nullable().describe("Exit code once it has exited, else null."),
+  startedAt: z.string().nullable().describe("ISO timestamp of the last start, else null.")
+});
+var startServiceTool = defineTool({
+  id: "worktree.start-service",
+  description: "Start a declared `scripts.<name>` service for a worktree as a supervised long-running child process. Allocates a port, injects AGENTPROTO_PORT / AGENTPROTO_URL and AGENTPROTO_SERVICE_<PEER>_PORT|URL for siblings, and registers a `<script>--<branch>--<repo>.localhost` proxy route.",
+  version: "0.1.0",
+  inputSchema: z.object({
+    repoRoot: z.string().describe("Absolute path to the source git repository root."),
+    worktreePath: z.string().describe("Absolute path to the worktree."),
+    branch: z.string().describe("The worktree's branch name."),
+    script: z.string().describe('Name of the `type: "service"` script to start.'),
+    base: z.string().optional().describe("Ref whose committed agentproto.json is read. Default 'origin/main'."),
+    proxyPort: z.number().int().min(1).max(65535).optional().describe("Reverse-proxy port used to build the service URL.")
+  }),
+  outputSchema: serviceStatusSchema,
+  mutates: ["process:spawn"],
+  approval: "auto",
+  riskLevel: 1
+});
+var stopServiceTool = defineTool({
+  id: "worktree.stop-service",
+  description: "Stop a supervised service (SIGTERM) for a worktree and drop its reverse-proxy route. A no-op (stopped: false) if the service isn't running.",
+  version: "0.1.0",
+  inputSchema: z.object({
+    worktreePath: z.string().describe("Absolute path to the worktree."),
+    script: z.string().describe("Name of the service to stop.")
+  }),
+  outputSchema: z.object({
+    stopped: z.boolean().describe("Whether a running service was actually stopped.")
+  }),
+  mutates: ["process:spawn"],
+  approval: "auto",
+  riskLevel: 1
+});
+var listServicesTool = defineTool({
+  id: "worktree.list-services",
+  description: "List the declared services for a worktree \u2014 each with its allocated port, `*.localhost` proxy URL, and running/exited status.",
+  version: "0.1.0",
+  inputSchema: z.object({
+    repoRoot: z.string().describe("Absolute path to the source git repository root."),
+    worktreePath: z.string().describe("Absolute path to the worktree."),
+    branch: z.string().describe("The worktree's branch name."),
+    base: z.string().optional().describe("Ref whose committed agentproto.json is read. Default 'origin/main'."),
+    proxyPort: z.number().int().min(1).max(65535).optional().describe("Reverse-proxy port used to build service URLs.")
+  }),
+  outputSchema: z.object({
+    services: z.array(serviceStatusSchema)
+  }),
+  mutates: [],
+  approval: "auto",
+  riskLevel: 0
+});
+
+export { cleanupWorktreeTool, listServicesTool, provisionWorktreeTool, runGateTool, runScriptTool, serviceStatusSchema, startServiceTool, stopServiceTool };
+//# sourceMappingURL=chunk-CM3XGWTY.mjs.map
+//# sourceMappingURL=chunk-CM3XGWTY.mjs.map

package/dist/chunk-CM3XGWTY.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tools/provision-worktree.tool.ts","../src/tools/cleanup-worktree.tool.ts","../src/tools/run-gate.tool.ts","../src/tools/run-script.tool.ts","../src/tools/service.schema.ts","../src/tools/start-service.tool.ts","../src/tools/stop-service.tool.ts","../src/tools/list-services.tool.ts"],"names":["defineTool","z"],"mappings":";;;;;;;;AAQO,IAAM,wBAAwB,UAAA,CAAW;AAAA,EAC9C,EAAA,EAAI,oBAAA;AAAA,EACJ,WAAA,EACE,owBAAA;AAAA,EAWF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,EAAE,MAAA,CAAO;AAAA,IACpB,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2CAA2C,CAAA;AAAA,IACzE,MAAM,CAAA,CACH,MAAA,GACA,QAAA,EAAS,CACT,SAAS,wDAAwD,CAAA;AAAA,IACpE,IAAA,EAAM,EACH,MAAA,EAAO,CACP,MAAM,sBAAA,EAAwB,mCAAmC,CAAA,CACjE,QAAA,CAAS,2EAAsE,CAAA;AAAA,IAClF,QAAQ,CAAA,CACL,MAAA,GACA,QAAA,EAAS,CACT,SAAS,wDAAwD,CAAA;AAAA,IACpE,KAAK,CAAA,CACF,MAAA,GACA,QAAA,EAAS,CACT,SAAS,gFAAgF,CAAA;AAAA,IAC5F,SAAS,CAAA,CACN,MAAA,GACA,QAAA,EAAS,CACT,SAAS,6FAA6F,CAAA;AAAA,IACzG,SAAA,EAAW,CAAA,CACR,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAChB,QAAA,EAAS,CACT,QAAA,CAAS,gHAAgH,CAAA;AAAA,IAC5H,SAAA,EAAW,CAAA,CACR,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAChB,QAAA,EAAS,CACT,QAAA,CAAS,iNAAiN,CAAA;AAAA,IAC7N,UAAU,CAAA,CACP,OAAA,GACA,QAAA,EAAS,CACT,SAAS,4IAA4I;AAAA,GACzJ,CAAA;AAAA,EACD,YAAA,EAAc,EAAE,MAAA,CAAO;AAAA,IACrB,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,wCAAwC,CAAA;AAAA,IACjE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,yCAAyC;AAAA,GACtE,CAAA;AAAA,EACD,OAAA,EAAS,CAAC,UAAU,CAAA;AAAA,EACpB,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;ACjDM,IAAM,sBAAsBA,UAAAA,CAAW;AAAA,EAC5C,EAAA,EAAI,kBAAA;AAAA,EACJ,WAAA,EACE,+bAAA;AAAA,EAOF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2CAA2C,CAAA;AAAA,IACzE,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,0CAA0C,CAAA;AAAA,IACnE,QAAQA,CAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,0CAA0C,CAAA;AAAA,IACjF,cAAcA,CAAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,yDAAyD,CAAA;AAAA,IACvG,MAAMA,CAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qFAAqF,CAAA;AAAA,IAC1H,aAAaA,CAAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,+GAA+G,CAAA;AAAA,IAC5J,kBAAkBA,CAAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,2FAA2F,CAAA;AAAA,IAC7I,iBAAiBA,CAAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,6GAA6G;AAAA,GAC/J,CAAA;AAAA,EACD,YAAA,EAAcA,EAAE,MAAA,CAAO;AAAA,IACrB,OAAA,EAASA,CAAAA,CAAE,OAAA,CAAQ,IAAI;AAAA,GACxB,CAAA;AAAA,EACD,OAAA,EAAS,CAAC,UAAU,CAAA;AAAA,EACpB,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;AClCM,IAAM,cAAcD,UAAAA,CAAW;AAAA,EACpC,EAAA,EAAI,mBAAA;AAAA,EACJ,WAAA,EACE,gIAAA;AAAA,EAEF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kCAAkC,CAAA;AAAA,IAC3D,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,yCAAyC;AAAA,GACnE,CAAA;AAAA,EACD,YAAA,EAAcA,EAAE,MAAA,CAAO;AAAA,IACrB,MAAA,EAAQA,EAAE,OAAA,EAAQ;AAAA,IAClB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,IACzB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,MAAA,EAAQA,EAAE,MAAA;AAAO,GAClB,CAAA;AAAA,EACD,SAAS,EAAC;AAAA,EACV,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;ACnBM,IAAM,gBAAgBD,UAAAA,CAAW;AAAA,EACtC,EAAA,EAAI,qBAAA;AAAA,EACJ,WAAA,EACE,sPAAA;AAAA,EAIF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kDAAkD,CAAA;AAAA,IAChF,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,0CAA0C,CAAA;AAAA,IAC5E,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,0DAA0D,CAAA;AAAA,IACtF,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,4CAA4C,CAAA;AAAA,IACxE,MAAMA,CAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qEAAqE;AAAA,GAC3G,CAAA;AAAA,EACD,YAAA,EAAcA,EAAE,MAAA,CAAO;AAAA,IACrB,MAAA,EAAQA,EAAE,OAAA,EAAQ;AAAA,IAClB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,IACzB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,MAAA,EAAQA,EAAE,MAAA;AAAO,GAClB,CAAA;AAAA,EACD,OAAA,EAAS,CAAC,UAAU,CAAA;AAAA,EACpB,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;AC9BM,IAAM,mBAAA,GAAsBA,EAAE,MAAA,CAAO;AAAA,EAC1C,IAAA,EAAMA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2BAA2B,CAAA;AAAA,EACrD,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,gEAAgE,CAAA;AAAA,EAC9F,MAAMA,CAAAA,CAAE,MAAA,GAAS,GAAA,EAAI,CAAE,SAAS,kCAAkC,CAAA;AAAA,EAClE,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kCAAkC,CAAA;AAAA,EAC3D,GAAA,EAAKA,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,4CAA4C,CAAA;AAAA,EACtF,MAAA,EAAQA,EAAE,IAAA,CAAK,CAAC,WAAW,QAAQ,CAAC,CAAA,CAAE,QAAA,CAAS,oCAAoC,CAAA;AAAA,EACnF,QAAA,EAAUA,EAAE,MAAA,EAAO,CAAE,KAAI,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,0CAA0C,CAAA;AAAA,EACzF,WAAWA,CAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,6CAA6C;AACzF,CAAC;ACFM,IAAM,mBAAmBD,UAAAA,CAAW;AAAA,EACzC,EAAA,EAAI,wBAAA;AAAA,EACJ,WAAA,EACE,0RAAA;AAAA,EAIF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kDAAkD,CAAA;AAAA,IAChF,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,gCAAgC,CAAA;AAAA,IAClE,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,6BAA6B,CAAA;AAAA,IACzD,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,gDAAkD,CAAA;AAAA,IAC9E,MAAMA,CAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qEAAqE,CAAA;AAAA,IAC1G,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,KAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI,KAAK,CAAA,CAAE,QAAA,EAAS,CAAE,SAAS,mDAAmD;AAAA,GACtH,CAAA;AAAA,EACD,YAAA,EAAc,mBAAA;AAAA,EACd,OAAA,EAAS,CAAC,eAAe,CAAA;AAAA,EACzB,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;AC1BM,IAAM,kBAAkBD,UAAAA,CAAW;AAAA,EACxC,EAAA,EAAI,uBAAA;AAAA,EACJ,WAAA,EACE,6IAAA;AAAA,EAEF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,gCAAgC,CAAA;AAAA,IAClE,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,8BAA8B;AAAA,GAC3D,CAAA;AAAA,EACD,YAAA,EAAcA,EAAE,MAAA,CAAO;AAAA,IACrB,OAAA,EAASA,CAAAA,CAAE,OAAA,EAAQ,CAAE,SAAS,iDAAiD;AAAA,GAChF,CAAA;AAAA,EACD,OAAA,EAAS,CAAC,eAAe,CAAA;AAAA,EACzB,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;ACVM,IAAM,mBAAmBD,UAAAA,CAAW;AAAA,EACzC,EAAA,EAAI,wBAAA;AAAA,EACJ,WAAA,EACE,oIAAA;AAAA,EAEF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kDAAkD,CAAA;AAAA,IAChF,YAAA,EAAcA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,gCAAgC,CAAA;AAAA,IAClE,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,6BAA6B,CAAA;AAAA,IACzD,MAAMA,CAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,qEAAqE,CAAA;AAAA,IAC1G,SAAA,EAAWA,CAAAA,CAAE,MAAA,EAAO,CAAE,KAAI,CAAE,GAAA,CAAI,CAAC,CAAA,CAAE,IAAI,KAAK,CAAA,CAAE,QAAA,EAAS,CAAE,SAAS,gDAAgD;AAAA,GACnH,CAAA;AAAA,EACD,YAAA,EAAcA,EAAE,MAAA,CAAO;AAAA,IACrB,QAAA,EAAUA,CAAAA,CAAE,KAAA,CAAM,mBAAmB;AAAA,GACtC,CAAA;AAAA,EACD,SAAS,EAAC;AAAA,EACV,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC","file":"chunk-CM3XGWTY.mjs","sourcesContent":["import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/**\n * AIP-14 contract: create a git worktree off a base ref, on its own branch,\n * optionally installing deps and copying gitignored files (secrets) into it.\n * Agnostic — no hardcoded package manager or env layout; both are inputs.\n */\nexport const provisionWorktreeTool = defineTool({\n  id: \"worktree.provision\",\n  description:\n    \"Create a git worktree for `repoRoot` at a sibling '_worktrees/<slug>' \" +\n    \"directory (or `dir`, when given), on a new branch 'wt/<slug>' (or \" +\n    \"`branch`, when given) cut from `base`. If `depsCmd` is given, it runs \" +\n    \"inside the new worktree afterwards (e.g. install deps). If `copyGlobs` \" +\n    \"is given, matching files under `repoRoot` (including gitignored ones, \" +\n    \"e.g. local secrets) are copied into the worktree at the same relative \" +\n    \"path. If `linkPaths` is given, each is symlinked from `repoRoot` into \" +\n    \"the worktree before `depsCmd` runs — for gitignored, expensive-to-\" +\n    \"recreate trees a fresh worktree lacks (node_modules, sibling workspace \" +\n    \"repos) so the workspace graph resolves without a full reinstall. Also \" +\n    \"writes a creation-provenance marker into the worktree's private gitdir.\",\n  version: \"0.2.0\",\n  inputSchema: z.object({\n    repoRoot: z.string().describe(\"Absolute path to the git repository root.\"),\n    base: z\n      .string()\n      .optional()\n      .describe(\"Ref the new branch is cut from. Default 'origin/main'.\"),\n    slug: z\n      .string()\n      .regex(/^[a-z0-9][a-z0-9-]*$/, \"slug must be lowercase kebab-case\")\n      .describe(\"Short identifier — names both the worktree directory and its branch.\"),\n    branch: z\n      .string()\n      .optional()\n      .describe(\"Branch name for the new worktree. Default 'wt/<slug>'.\"),\n    dir: z\n      .string()\n      .optional()\n      .describe(\"Absolute path for the new worktree. Default '<repoRoot>/../_worktrees/<slug>'.\"),\n    depsCmd: z\n      .string()\n      .optional()\n      .describe(\"Shell command run inside the worktree after creation, e.g. 'pnpm install --prefer-offline'.\"),\n    copyGlobs: z\n      .array(z.string())\n      .optional()\n      .describe(\"Glob patterns (relative to repoRoot) of gitignored files to copy into the worktree, e.g. 'envs/**/.env.local'.\"),\n    linkPaths: z\n      .array(z.string())\n      .optional()\n      .describe(\"Relative paths (dirs or files) symlinked from repoRoot into the worktree before depsCmd, e.g. 'node_modules' or a gitignored sibling workspace repo. Lets the workspace graph resolve without a full reinstall.\"),\n    runSetup: z\n      .boolean()\n      .optional()\n      .describe(\"Run the `worktree.setup` hooks from the base tree's agentproto.json after creation. Default true; a failing setup hook fails provisioning.\"),\n  }),\n  outputSchema: z.object({\n    cwd: z.string().describe(\"Absolute path to the created worktree.\"),\n    branch: z.string().describe(\"The branch the worktree was created on.\"),\n  }),\n  mutates: [\"fs:write\"],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/**\n * AIP-14 contract: remove a git worktree, optionally deleting its branch.\n *\n * Guarded by default (PLAN.md §5.2 layer 3): with neither discard flag set,\n * this runs a plain `git worktree remove` — git itself is the final arbiter\n * and refuses on modified or unignored-untracked files, tolerating gitignored\n * trees like `node_modules/`. `discardUntracked` / `discardModified` each\n * authorize exactly one class of destruction git otherwise refuses; only\n * when the flags cover everything actually dirty does `--force` get passed\n * through. This replaces an unconditional `--force` that used to destroy\n * real edits indiscriminately (the incident this contract change exists to\n * prevent) — hence `riskLevel: 2`, up from the old unconditional-force `1`.\n */\nexport const cleanupWorktreeTool = defineTool({\n  id: \"worktree.cleanup\",\n  description:\n    \"Remove a git worktree created by 'worktree.provision'. Refuses if the \" +\n    \"worktree has modified tracked files or unignored untracked files, \" +\n    \"unless the matching `discardModified` / `discardUntracked` flag is \" +\n    \"set — a clean or gitignore-only tree (e.g. installed deps) always \" +\n    \"removes with no flags. If `deleteBranch` is true and `branch` is \" +\n    \"given, also force-delete that branch (only ever called for merged \" +\n    \"branches by this package's own callers).\",\n  version: \"0.2.0\",\n  inputSchema: z.object({\n    repoRoot: z.string().describe(\"Absolute path to the git repository root.\"),\n    cwd: z.string().describe(\"Absolute path to the worktree to remove.\"),\n    branch: z.string().optional().describe(\"The worktree's branch, for deleteBranch.\"),\n    deleteBranch: z.boolean().optional().describe(\"Also force-delete `branch` after removing the worktree.\"),\n    base: z.string().optional().describe(\"Ref whose committed agentproto.json supplies teardown hooks. Default 'origin/main'.\"),\n    runTeardown: z.boolean().optional().describe(\"Run the `worktree.teardown` hooks before removal. Default true; teardown failures are logged, never blocking.\"),\n    discardUntracked: z.boolean().optional().describe(\"Authorize discarding unignored untracked files. Default false: refuse if any are present.\"),\n    discardModified: z.boolean().optional().describe(\"Authorize discarding modified tracked files (staged or unstaged). Default false: refuse if any are present.\"),\n  }),\n  outputSchema: z.object({\n    removed: z.literal(true),\n  }),\n  mutates: [\"fs:write\"],\n  approval: \"auto\",\n  riskLevel: 2,\n})\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/**\n * AIP-14 contract: run a caller-provided gate/check command inside a\n * directory (typically a provisioned worktree) and report pass/fail.\n * `cmd` is a trusted, developer-authored config value (same trust model as\n * a CI job's `script:` line), run through a shell so it may include flags.\n */\nexport const runGateTool = defineTool({\n  id: \"worktree.run-gate\",\n  description:\n    \"Run a gate command (e.g. 'pnpm test') inside `cwd` and report pass/fail \" +\n    \"from its exit code, along with captured stdout/stderr.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    cwd: z.string().describe(\"Directory to run the command in.\"),\n    cmd: z.string().describe(\"Shell command to run, e.g. 'pnpm test'.\"),\n  }),\n  outputSchema: z.object({\n    passed: z.boolean(),\n    exitCode: z.number().int(),\n    stdout: z.string(),\n    stderr: z.string(),\n  }),\n  mutates: [],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/**\n * AIP-14 contract: run a one-shot named `scripts.<name>` command from the\n * repo's committed `agentproto.json` inside a worktree, with the\n * `AGENTPROTO_*` context env injected. For long-running services use\n * `worktree.start-service` instead.\n */\nexport const runScriptTool = defineTool({\n  id: \"worktree.run-script\",\n  description:\n    \"Run a declared `scripts.<name>` command (from the base tree's \" +\n    \"agentproto.json) inside `worktreePath`, injecting AGENTPROTO_* env, and \" +\n    \"report pass/fail with captured stdout/stderr. For a `type: \\\"service\\\"` \" +\n    \"script prefer `worktree.start-service`.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    repoRoot: z.string().describe(\"Absolute path to the source git repository root.\"),\n    worktreePath: z.string().describe(\"Absolute path to the worktree to run in.\"),\n    branch: z.string().describe(\"The worktree's branch name (for AGENTPROTO_BRANCH_NAME).\"),\n    script: z.string().describe(\"Name of the script under `scripts` to run.\"),\n    base: z.string().optional().describe(\"Ref whose committed agentproto.json is read. Default 'origin/main'.\"),\n  }),\n  outputSchema: z.object({\n    passed: z.boolean(),\n    exitCode: z.number().int(),\n    stdout: z.string(),\n    stderr: z.string(),\n  }),\n  mutates: [\"fs:write\"],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n","import { z } from \"zod\"\n\n/** Shared shape of a supervised service's status across the service tools. */\nexport const serviceStatusSchema = z.object({\n  name: z.string().describe(\"The declared script name.\"),\n  hostname: z.string().describe(\"The *.localhost host the reverse proxy routes to this service.\"),\n  port: z.number().int().describe(\"The port the service listens on.\"),\n  url: z.string().describe(\"The service's reverse-proxy URL.\"),\n  pid: z.number().int().nullable().describe(\"Child process id while running, else null.\"),\n  status: z.enum([\"running\", \"exited\"]).describe(\"Whether the service process is up.\"),\n  exitCode: z.number().int().nullable().describe(\"Exit code once it has exited, else null.\"),\n  startedAt: z.string().nullable().describe(\"ISO timestamp of the last start, else null.\"),\n})\n\nexport type ServiceStatusOutput = z.infer<typeof serviceStatusSchema>\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\nimport { serviceStatusSchema } from \"./service.schema.js\"\n\n/**\n * AIP-14 contract: start a declared `type: \"service\"` script for a worktree.\n * Allocates the service's port (declared port if free, else ephemeral),\n * injects AGENTPROTO_PORT/URL + peer env, and registers its hostname with the\n * reverse proxy. Idempotent per worktree+name.\n */\nexport const startServiceTool = defineTool({\n  id: \"worktree.start-service\",\n  description:\n    \"Start a declared `scripts.<name>` service for a worktree as a supervised \" +\n    \"long-running child process. Allocates a port, injects AGENTPROTO_PORT / \" +\n    \"AGENTPROTO_URL and AGENTPROTO_SERVICE_<PEER>_PORT|URL for siblings, and \" +\n    \"registers a `<script>--<branch>--<repo>.localhost` proxy route.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    repoRoot: z.string().describe(\"Absolute path to the source git repository root.\"),\n    worktreePath: z.string().describe(\"Absolute path to the worktree.\"),\n    branch: z.string().describe(\"The worktree's branch name.\"),\n    script: z.string().describe(\"Name of the `type: \\\"service\\\"` script to start.\"),\n    base: z.string().optional().describe(\"Ref whose committed agentproto.json is read. Default 'origin/main'.\"),\n    proxyPort: z.number().int().min(1).max(65535).optional().describe(\"Reverse-proxy port used to build the service URL.\"),\n  }),\n  outputSchema: serviceStatusSchema,\n  mutates: [\"process:spawn\"],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/** AIP-14 contract: stop a running supervised service for a worktree. */\nexport const stopServiceTool = defineTool({\n  id: \"worktree.stop-service\",\n  description:\n    \"Stop a supervised service (SIGTERM) for a worktree and drop its reverse-\" +\n    \"proxy route. A no-op (stopped: false) if the service isn't running.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    worktreePath: z.string().describe(\"Absolute path to the worktree.\"),\n    script: z.string().describe(\"Name of the service to stop.\"),\n  }),\n  outputSchema: z.object({\n    stopped: z.boolean().describe(\"Whether a running service was actually stopped.\"),\n  }),\n  mutates: [\"process:spawn\"],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\nimport { serviceStatusSchema } from \"./service.schema.js\"\n\n/**\n * AIP-14 contract: list every declared service for a worktree with its\n * resolved port / proxy URL and current run status. Resolves (allocating\n * ports for) the worktree's services on first call so declared-but-unstarted\n * services still appear.\n */\nexport const listServicesTool = defineTool({\n  id: \"worktree.list-services\",\n  description:\n    \"List the declared services for a worktree — each with its allocated \" +\n    \"port, `*.localhost` proxy URL, and running/exited status.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    repoRoot: z.string().describe(\"Absolute path to the source git repository root.\"),\n    worktreePath: z.string().describe(\"Absolute path to the worktree.\"),\n    branch: z.string().describe(\"The worktree's branch name.\"),\n    base: z.string().optional().describe(\"Ref whose committed agentproto.json is read. Default 'origin/main'.\"),\n    proxyPort: z.number().int().min(1).max(65535).optional().describe(\"Reverse-proxy port used to build service URLs.\"),\n  }),\n  outputSchema: z.object({\n    services: z.array(serviceStatusSchema),\n  }),\n  mutates: [],\n  approval: \"auto\",\n  riskLevel: 0,\n})\n"]}

package/dist/chunk-E3EM24BS.mjs

@@ -0,0 +1,3 @@
+
+//# sourceMappingURL=chunk-E3EM24BS.mjs.map
+//# sourceMappingURL=chunk-E3EM24BS.mjs.map

package/dist/{chunk-PSFICTF7.mjs.map → chunk-E3EM24BS.mjs.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-PSFICTF7.mjs"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-E3EM24BS.mjs"}