@agentproto/worktree 0.2.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Jeremy André and agentproto contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,45 @@
+# @agentproto/worktree
+
+AIP-14 TOOL contracts + a builtin AIP-30 PROVIDER for provisioning, gating,
+and cleaning up a git worktree — the primitive a `@agentproto/workflow-runtime`
+`AgentStep` binds its `cwd` to for a "launch an agent in a worktree" workflow.
+
+## Tools
+
+- **`worktree.provision`** — `git worktree add` a new worktree for `repoRoot`
+  at `<repoRoot>/../_worktrees/<slug>` on branch `wt/<slug>`, cut from `base`
+  (default `origin/main`). Optionally runs `depsCmd` inside it, and copies
+  `copyGlobs` (e.g. gitignored local secrets) from `repoRoot` into it at the
+  same relative path. Returns `{ cwd, branch }`.
+- **`worktree.run-gate`** — run a caller-provided command inside a directory
+  and report pass/fail from its exit code.
+- **`worktree.cleanup`** — `git worktree remove` (+ optional `git branch -D`).
+
+All three are agnostic: no hardcoded package manager, env layout, or gate
+command — everything is an input.
+
+## `worktreeAgentWorkflow`
+
+This package also exports the `RuntimeWorkflow` def that chains the three
+tools above around an `AgentStep`: provision → agent (`cwd` bound to the
+provisioned worktree) → gate → on pass, human approval → cleanup. On gate
+failure the worktree is left in place for inspection.
+
+## `worktree-agent` CLI
+
+A `bin` runs that workflow end-to-end against a real agentproto daemon (the
+coding agent is a real, supervisable `agent_start` session — not a bare
+subprocess):
+
+```
+worktree-agent run \
+  --repo <abs repo root> --slug <id> --task "<prompt>" --gate "<check cmd>" \
+  [--base origin/main] [--adapter claude-code] [--deps-cmd "pnpm install --prefer-offline"] \
+  [--copy-glob <glob>]... [--no-cleanup] [--yes]
+```
+
+It connects to the daemon's MCP endpoint (`http://127.0.0.1:18790/mcp`, or
+`AGENTPROTO_MCP_URL`) and fails loudly if it can't reach one. The approval
+step reads a y/n answer from `/dev/tty`; `--yes` auto-approves, and a
+non-interactive run (no TTY) defaults to NOT approving — the worktree is left
+in place rather than silently cleaned up.

package/dist/bin/worktree-agent.mjs

@@ -0,0 +1,198 @@
+#!/usr/bin/env node
+import { connectDaemonAgentSessionHost, worktreeAgentWorkflow } from '../chunk-P7FOHOQ3.mjs';
+import '../chunk-PSFICTF7.mjs';
+import '../chunk-BBAH3VLQ.mjs';
+import '../chunk-FRVPZTQN.mjs';
+import { runWorkflow } from '@agentproto/workflow-runtime';
+import { resolve } from 'path';
+import { openSync, closeSync, createReadStream, createWriteStream } from 'fs';
+import { createInterface } from 'readline';
+
+/**
+ * @agentproto/worktree v0.1.0
+ * git-worktree provision / gate / cleanup TOOL contracts + builtin PROVIDER.
+ */
+var USAGE = `usage: worktree-agent run --repo <abs repo root> --slug <id> --task "<prompt>" --gate "<check cmd>"
+  [--base <ref>] [--adapter <slug>] [--deps-cmd "<cmd>"] [--copy-glob <glob>]...
+  [--link <path>]... [--no-cleanup] [--yes]
+
+  --repo        Absolute (or cwd-relative) path to the git repository root.
+  --slug        Worktree/branch identifier, e.g. 'fix-flaky-test'.
+  --task        The prompt sent to the coding agent.
+  --gate        Command run inside the worktree to check the agent's work.
+  --base        Ref to cut the worktree branch from. Default 'origin/main'.
+  --adapter     Agent adapter slug. Default 'claude-code'.
+  --deps-cmd    Command to install deps inside the worktree.
+  --copy-glob   Gitignored glob to copy into the worktree (repeatable).
+  --link        Gitignored dir/file to symlink from the host repo into the worktree
+                before deps (node_modules, sibling workspace repos); repeatable.
+  --no-cleanup  Keep the worktree's branch after cleanup (still removes the worktree dir).
+  --yes         Auto-approve the cleanup step instead of prompting.
+`;
+var CliUsageError = class extends Error {
+};
+function parseArgs(argv) {
+  const [cmd, ...rest] = argv;
+  if (cmd !== "run") {
+    throw new CliUsageError(cmd ? `unknown command '${cmd}'
+
+${USAGE}` : USAGE);
+  }
+  let repoRoot;
+  let slug;
+  let task;
+  let gateCmd;
+  let base;
+  let adapter;
+  let depsCmd;
+  const copyGlobs = [];
+  const linkPaths = [];
+  let deleteBranch = true;
+  let yes = false;
+  function nextValue(flag, i) {
+    const value = rest[i];
+    if (value === void 0) throw new CliUsageError(`flag '${flag}' requires a value
+
+${USAGE}`);
+    return value;
+  }
+  for (let i = 0; i < rest.length; i++) {
+    const arg = rest[i];
+    switch (arg) {
+      case "--repo":
+        repoRoot = nextValue(arg, ++i);
+        break;
+      case "--slug":
+        slug = nextValue(arg, ++i);
+        break;
+      case "--task":
+        task = nextValue(arg, ++i);
+        break;
+      case "--gate":
+        gateCmd = nextValue(arg, ++i);
+        break;
+      case "--base":
+        base = nextValue(arg, ++i);
+        break;
+      case "--adapter":
+        adapter = nextValue(arg, ++i);
+        break;
+      case "--deps-cmd":
+        depsCmd = nextValue(arg, ++i);
+        break;
+      case "--copy-glob":
+        copyGlobs.push(nextValue(arg, ++i));
+        break;
+      case "--link":
+        linkPaths.push(nextValue(arg, ++i));
+        break;
+      case "--no-cleanup":
+        deleteBranch = false;
+        break;
+      case "--yes":
+        yes = true;
+        break;
+      default:
+        throw new CliUsageError(`unrecognized flag '${arg}'
+
+${USAGE}`);
+    }
+  }
+  const missing = [
+    !repoRoot && "--repo",
+    !slug && "--slug",
+    !task && "--task",
+    !gateCmd && "--gate"
+  ].filter((f) => typeof f === "string");
+  if (missing.length > 0) {
+    throw new CliUsageError(`missing required flag(s): ${missing.join(", ")}
+
+${USAGE}`);
+  }
+  const input = {
+    repoRoot: resolve(repoRoot),
+    slug,
+    task,
+    gateCmd,
+    deleteBranch,
+    ...base !== void 0 ? { base } : {},
+    ...adapter !== void 0 ? { adapter } : {},
+    ...depsCmd !== void 0 ? { depsCmd } : {},
+    ...copyGlobs.length > 0 ? { copyGlobs } : {},
+    ...linkPaths.length > 0 ? { linkPaths } : {}
+  };
+  return { input, yes };
+}
+function hasTty() {
+  try {
+    const fd = openSync("/dev/tty", "r+");
+    closeSync(fd);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function askTty(prompt) {
+  const input = createReadStream("/dev/tty");
+  const output = createWriteStream("/dev/tty");
+  const rl = createInterface({ input, output });
+  try {
+    return await new Promise((resolvePromise) => rl.question(prompt, resolvePromise));
+  } finally {
+    rl.close();
+    input.destroy();
+    output.destroy();
+  }
+}
+function makeApprove(opts, deps = {}) {
+  const hasTtyFn = deps.hasTty ?? hasTty;
+  const askFn = deps.ask ?? askTty;
+  return async (req) => {
+    if (opts.yes) {
+      process.stderr.write(`${req.prompt} \u2014 auto-approved (--yes)
+`);
+      return true;
+    }
+    if (!hasTtyFn()) {
+      process.stderr.write(`${req.prompt} \u2014 no TTY attached, not approving (worktree left in place)
+`);
+      return false;
+    }
+    const answer = await askFn(`${req.prompt} [y/N] `);
+    return /^y(es)?$/i.test(answer.trim());
+  };
+}
+
+// src/bin/worktree-agent.ts
+async function main() {
+  let parsed;
+  try {
+    parsed = parseArgs(process.argv.slice(2));
+  } catch (err) {
+    if (!(err instanceof CliUsageError)) throw err;
+    process.stderr.write(`${err.message}
+`);
+    process.exit(1);
+  }
+  const { input, yes } = parsed;
+  const host = await connectDaemonAgentSessionHost();
+  try {
+    const { output } = await runWorkflow({
+      workflow: worktreeAgentWorkflow,
+      input,
+      agents: host,
+      approve: makeApprove({ yes })
+    });
+    process.stdout.write(`${JSON.stringify(output, null, 2)}
+`);
+  } finally {
+    await host.close();
+  }
+}
+main().catch((err) => {
+  process.stderr.write(`${err instanceof Error ? err.stack ?? err.message : String(err)}
+`);
+  process.exit(1);
+});
+//# sourceMappingURL=worktree-agent.mjs.map
+//# sourceMappingURL=worktree-agent.mjs.map

package/dist/bin/worktree-agent.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/bin/args.ts","../../src/bin/approve.ts","../../src/bin/worktree-agent.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AAGO,IAAM,KAAA,GAAQ,CAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAkBd,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAC,CAAA;AAQnC,SAAS,UAAU,IAAA,EAAoC;AAC5D,EAAA,MAAM,CAAC,GAAA,EAAK,GAAG,IAAI,CAAA,GAAI,IAAA;AACvB,EAAA,IAAI,QAAQ,KAAA,EAAO;AACjB,IAAA,MAAM,IAAI,aAAA,CAAc,GAAA,GAAM,CAAA,iBAAA,EAAoB,GAAG,CAAA;;AAAA,EAAQ,KAAK,KAAK,KAAK,CAAA;AAAA,EAC9E;AAEA,EAAA,IAAI,QAAA;AACJ,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI,OAAA;AACJ,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,MAAM,YAAsB,EAAC;AAC7B,EAAA,IAAI,YAAA,GAAe,IAAA;AACnB,EAAA,IAAI,GAAA,GAAM,KAAA;AAEV,EAAA,SAAS,SAAA,CAAU,MAAc,CAAA,EAAmB;AAClD,IAAA,MAAM,KAAA,GAAQ,KAAK,CAAC,CAAA;AACpB,IAAA,IAAI,UAAU,MAAA,EAAW,MAAM,IAAI,aAAA,CAAc,SAAS,IAAI,CAAA;;AAAA,EAAyB,KAAK,CAAA,CAAE,CAAA;AAC9F,IAAA,OAAO,KAAA;AAAA,EACT;AAEA,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,GAAA,GAAM,KAAK,CAAC,CAAA;AAClB,IAAA,QAAQ,GAAA;AAAK,MACX,KAAK,QAAA;AACH,QAAA,QAAA,GAAW,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAA;AAC7B,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,GAAO,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAA;AACzB,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,GAAO,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAA;AACzB,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,OAAA,GAAU,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAA;AAC5B,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,IAAA,GAAO,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAA;AACzB,QAAA;AAAA,MACF,KAAK,WAAA;AACH,QAAA,OAAA,GAAU,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAA;AAC5B,QAAA;AAAA,MACF,KAAK,YAAA;AACH,QAAA,OAAA,GAAU,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAA;AAC5B,QAAA;AAAA,MACF,KAAK,aAAA;AACH,QAAA,SAAA,CAAU,IAAA,CAAK,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAC,CAAA;AAClC,QAAA;AAAA,MACF,KAAK,QAAA;AACH,QAAA,SAAA,CAAU,IAAA,CAAK,SAAA,CAAU,GAAA,EAAK,EAAE,CAAC,CAAC,CAAA;AAClC,QAAA;AAAA,MACF,KAAK,cAAA;AACH,QAAA,YAAA,GAAe,KAAA;AACf,QAAA;AAAA,MACF,KAAK,OAAA;AACH,QAAA,GAAA,GAAM,IAAA;AACN,QAAA;AAAA,MACF;AACE,QAAA,MAAM,IAAI,aAAA,CAAc,CAAA,mBAAA,EAAsB,GAAG,CAAA;;AAAA,EAAQ,KAAK,CAAA,CAAE,CAAA;AAAA;AACpE,EACF;AAEA,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,CAAC,QAAA,IAAY,QAAA;AAAA,IACb,CAAC,IAAA,IAAQ,QAAA;AAAA,IACT,CAAC,IAAA,IAAQ,QAAA;AAAA,IACT,CAAC,OAAA,IAAW;AAAA,IACZ,MAAA,CAAO,CAAC,CAAA,KAAmB,OAAO,MAAM,QAAQ,CAAA;AAClD,EAAA,IAAI,OAAA,CAAQ,SAAS,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,aAAA,CAAc,CAAA,0BAAA,EAA6B,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC;;AAAA,EAAO,KAAK,CAAA,CAAE,CAAA;AAAA,EACvF;AAEA,EAAA,MAAM,KAAA,GAA4B;AAAA,IAChC,QAAA,EAAU,QAAQ,QAAS,CAAA;AAAA,IAC3B,IAAA;AAAA,IACA,IAAA;AAAA,IACA,OAAA;AAAA,IACA,YAAA;AAAA,IACA,GAAI,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,KAAS,EAAC;AAAA,IACrC,GAAI,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,KAAY,EAAC;AAAA,IAC3C,GAAI,OAAA,KAAY,MAAA,GAAY,EAAE,OAAA,KAAY,EAAC;AAAA,IAC3C,GAAI,SAAA,CAAU,MAAA,GAAS,IAAI,EAAE,SAAA,KAAc,EAAC;AAAA,IAC5C,GAAI,SAAA,CAAU,MAAA,GAAS,IAAI,EAAE,SAAA,KAAc;AAAC,GAC9C;AACA,EAAA,OAAO,EAAE,OAAO,GAAA,EAAI;AACtB;AChHO,SAAS,MAAA,GAAkB;AAChC,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAK,QAAA,CAAS,UAAA,EAAY,IAAI,CAAA;AACpC,IAAA,SAAA,CAAU,EAAE,CAAA;AACZ,IAAA,OAAO,IAAA;AAAA,EACT,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT;AACF;AAGA,eAAsB,OAAO,MAAA,EAAiC;AAC5D,EAAA,MAAM,KAAA,GAAQ,iBAAiB,UAAU,CAAA;AACzC,EAAA,MAAM,MAAA,GAAS,kBAAkB,UAAU,CAAA;AAC3C,EAAA,MAAM,EAAA,GAAK,eAAA,CAAgB,EAAE,KAAA,EAAO,QAAQ,CAAA;AAC5C,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,IAAI,OAAA,CAAgB,CAAC,mBAAmB,EAAA,CAAG,QAAA,CAAS,MAAA,EAAQ,cAAc,CAAC,CAAA;AAAA,EAC1F,CAAA,SAAE;AACA,IAAA,EAAA,CAAG,KAAA,EAAM;AACT,IAAA,KAAA,CAAM,OAAA,EAAQ;AACd,IAAA,MAAA,CAAO,OAAA,EAAQ;AAAA,EACjB;AACF;AAYO,SAAS,WAAA,CACd,IAAA,EACA,IAAA,GAAoB,EAAC,EACuB;AAC5C,EAAA,MAAM,QAAA,GAAW,KAAK,MAAA,IAAU,MAAA;AAChC,EAAA,MAAM,KAAA,GAAQ,KAAK,GAAA,IAAO,MAAA;AAC1B,EAAA,OAAO,OAAO,GAAA,KAA2C;AACvD,IAAA,IAAI,KAAK,GAAA,EAAK;AACZ,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA;AAAA,CAA4B,CAAA;AAC9D,MAAA,OAAO,IAAA;AAAA,IACT;AACA,IAAA,IAAI,CAAC,UAAS,EAAG;AACf,MAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA;AAAA,CAA8D,CAAA;AAChG,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,SAAS,MAAM,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,MAAM,CAAA,OAAA,CAAS,CAAA;AACjD,IAAA,OAAO,WAAA,CAAY,IAAA,CAAK,MAAA,CAAO,IAAA,EAAM,CAAA;AAAA,EACvC,CAAA;AACF;;;AC3CA,eAAe,IAAA,GAAsB;AACnC,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,SAAA,CAAU,OAAA,CAAQ,IAAA,CAAK,KAAA,CAAM,CAAC,CAAC,CAAA;AAAA,EAC1C,SAAS,GAAA,EAAK;AACZ,IAAA,IAAI,EAAE,GAAA,YAAe,aAAA,CAAA,EAAgB,MAAM,GAAA;AAC3C,IAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAA,CAAI,OAAO;AAAA,CAAI,CAAA;AACvC,IAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAAA,EAChB;AACA,EAAA,MAAM,EAAE,KAAA,EAAO,GAAA,EAAI,GAAI,MAAA;AAEvB,EAAA,MAAM,IAAA,GAAO,MAAM,6BAAA,EAA8B;AACjD,EAAA,IAAI;AACF,IAAA,MAAM,EAAE,MAAA,EAAO,GAAI,MAAM,WAAA,CAAY;AAAA,MACnC,QAAA,EAAU,qBAAA;AAAA,MACV,KAAA;AAAA,MACA,MAAA,EAAQ,IAAA;AAAA,MACR,OAAA,EAAS,WAAA,CAAY,EAAE,GAAA,EAAK;AAAA,KAC7B,CAAA;AACD,IAAA,OAAA,CAAQ,MAAA,CAAO,MAAM,CAAA,EAAG,IAAA,CAAK,UAAU,MAAA,EAAQ,IAAA,EAAM,CAAC,CAAC;AAAA,CAAI,CAAA;AAAA,EAC7D,CAAA,SAAE;AACA,IAAA,MAAM,KAAK,KAAA,EAAM;AAAA,EACnB;AACF;AAEA,IAAA,EAAK,CAAE,KAAA,CAAM,CAAC,GAAA,KAAiB;AAC7B,EAAA,OAAA,CAAQ,MAAA,CAAO,KAAA,CAAM,CAAA,EAAG,GAAA,YAAe,KAAA,GAAS,GAAA,CAAI,KAAA,IAAS,GAAA,CAAI,OAAA,GAAW,MAAA,CAAO,GAAG,CAAC;AAAA,CAAI,CAAA;AAC3F,EAAA,OAAA,CAAQ,KAAK,CAAC,CAAA;AAChB,CAAC,CAAA","file":"worktree-agent.mjs","sourcesContent":["import { resolve } from \"node:path\"\nimport type { WorktreeAgentInput } from \"../workflow.js\"\n\nexport const USAGE = `usage: worktree-agent run --repo <abs repo root> --slug <id> --task \"<prompt>\" --gate \"<check cmd>\"\n  [--base <ref>] [--adapter <slug>] [--deps-cmd \"<cmd>\"] [--copy-glob <glob>]...\n  [--link <path>]... [--no-cleanup] [--yes]\n\n  --repo        Absolute (or cwd-relative) path to the git repository root.\n  --slug        Worktree/branch identifier, e.g. 'fix-flaky-test'.\n  --task        The prompt sent to the coding agent.\n  --gate        Command run inside the worktree to check the agent's work.\n  --base        Ref to cut the worktree branch from. Default 'origin/main'.\n  --adapter     Agent adapter slug. Default 'claude-code'.\n  --deps-cmd    Command to install deps inside the worktree.\n  --copy-glob   Gitignored glob to copy into the worktree (repeatable).\n  --link        Gitignored dir/file to symlink from the host repo into the worktree\n                before deps (node_modules, sibling workspace repos); repeatable.\n  --no-cleanup  Keep the worktree's branch after cleanup (still removes the worktree dir).\n  --yes         Auto-approve the cleanup step instead of prompting.\n`\n\nexport class CliUsageError extends Error {}\n\nexport interface ParsedCli {\n  input: WorktreeAgentInput\n  yes: boolean\n}\n\n/** Parse `worktree-agent run <flags>` into a `WorktreeAgentInput` + CLI-only options. */\nexport function parseArgs(argv: readonly string[]): ParsedCli {\n  const [cmd, ...rest] = argv\n  if (cmd !== \"run\") {\n    throw new CliUsageError(cmd ? `unknown command '${cmd}'\\n\\n${USAGE}` : USAGE)\n  }\n\n  let repoRoot: string | undefined\n  let slug: string | undefined\n  let task: string | undefined\n  let gateCmd: string | undefined\n  let base: string | undefined\n  let adapter: string | undefined\n  let depsCmd: string | undefined\n  const copyGlobs: string[] = []\n  const linkPaths: string[] = []\n  let deleteBranch = true\n  let yes = false\n\n  function nextValue(flag: string, i: number): string {\n    const value = rest[i]\n    if (value === undefined) throw new CliUsageError(`flag '${flag}' requires a value\\n\\n${USAGE}`)\n    return value\n  }\n\n  for (let i = 0; i < rest.length; i++) {\n    const arg = rest[i]\n    switch (arg) {\n      case \"--repo\":\n        repoRoot = nextValue(arg, ++i)\n        break\n      case \"--slug\":\n        slug = nextValue(arg, ++i)\n        break\n      case \"--task\":\n        task = nextValue(arg, ++i)\n        break\n      case \"--gate\":\n        gateCmd = nextValue(arg, ++i)\n        break\n      case \"--base\":\n        base = nextValue(arg, ++i)\n        break\n      case \"--adapter\":\n        adapter = nextValue(arg, ++i)\n        break\n      case \"--deps-cmd\":\n        depsCmd = nextValue(arg, ++i)\n        break\n      case \"--copy-glob\":\n        copyGlobs.push(nextValue(arg, ++i))\n        break\n      case \"--link\":\n        linkPaths.push(nextValue(arg, ++i))\n        break\n      case \"--no-cleanup\":\n        deleteBranch = false\n        break\n      case \"--yes\":\n        yes = true\n        break\n      default:\n        throw new CliUsageError(`unrecognized flag '${arg}'\\n\\n${USAGE}`)\n    }\n  }\n\n  const missing = [\n    !repoRoot && \"--repo\",\n    !slug && \"--slug\",\n    !task && \"--task\",\n    !gateCmd && \"--gate\",\n  ].filter((f): f is string => typeof f === \"string\")\n  if (missing.length > 0) {\n    throw new CliUsageError(`missing required flag(s): ${missing.join(\", \")}\\n\\n${USAGE}`)\n  }\n\n  const input: WorktreeAgentInput = {\n    repoRoot: resolve(repoRoot!),\n    slug: slug!,\n    task: task!,\n    gateCmd: gateCmd!,\n    deleteBranch,\n    ...(base !== undefined ? { base } : {}),\n    ...(adapter !== undefined ? { adapter } : {}),\n    ...(depsCmd !== undefined ? { depsCmd } : {}),\n    ...(copyGlobs.length > 0 ? { copyGlobs } : {}),\n    ...(linkPaths.length > 0 ? { linkPaths } : {}),\n  }\n  return { input, yes }\n}\n","import { closeSync, createReadStream, createWriteStream, openSync } from \"node:fs\"\nimport { createInterface } from \"node:readline\"\nimport type { ApprovalRequest } from \"@agentproto/workflow-runtime\"\n\n/** True when `/dev/tty` can be opened — i.e. a real terminal is attached. */\nexport function hasTty(): boolean {\n  try {\n    const fd = openSync(\"/dev/tty\", \"r+\")\n    closeSync(fd)\n    return true\n  } catch {\n    return false\n  }\n}\n\n/** Prompt on `/dev/tty` (not stdin/stdout, which may be piping the workflow's own IO). */\nexport async function askTty(prompt: string): Promise<string> {\n  const input = createReadStream(\"/dev/tty\")\n  const output = createWriteStream(\"/dev/tty\")\n  const rl = createInterface({ input, output })\n  try {\n    return await new Promise<string>((resolvePromise) => rl.question(prompt, resolvePromise))\n  } finally {\n    rl.close()\n    input.destroy()\n    output.destroy()\n  }\n}\n\nexport interface ApproveDeps {\n  hasTty?: () => boolean\n  ask?: (prompt: string) => Promise<string>\n}\n\n/**\n * Build the workflow's `approve` callback: `--yes` auto-approves; otherwise a\n * y/n prompt on `/dev/tty`; with no TTY attached (non-interactive), don't\n * approve — the worktree is left in place rather than silently cleaned up.\n */\nexport function makeApprove(\n  opts: { yes: boolean },\n  deps: ApproveDeps = {},\n): (req: ApprovalRequest) => Promise<boolean> {\n  const hasTtyFn = deps.hasTty ?? hasTty\n  const askFn = deps.ask ?? askTty\n  return async (req: ApprovalRequest): Promise<boolean> => {\n    if (opts.yes) {\n      process.stderr.write(`${req.prompt} — auto-approved (--yes)\\n`)\n      return true\n    }\n    if (!hasTtyFn()) {\n      process.stderr.write(`${req.prompt} — no TTY attached, not approving (worktree left in place)\\n`)\n      return false\n    }\n    const answer = await askFn(`${req.prompt} [y/N] `)\n    return /^y(es)?$/i.test(answer.trim())\n  }\n}\n","#!/usr/bin/env node\n/**\n * `worktree-agent run` — runs `worktreeAgentWorkflow` end-to-end: provision a\n * git worktree, run a coding agent in it as a real daemon session (`agent_start`\n * against the agentproto daemon's MCP endpoint), gate the result, ask a human\n * to approve cleanup, then clean up (or leave it in place on gate failure /\n * rejection).\n */\nimport { runWorkflow } from \"@agentproto/workflow-runtime\"\nimport { worktreeAgentWorkflow } from \"../workflow.js\"\nimport { connectDaemonAgentSessionHost } from \"../agent-session-host.js\"\nimport { parseArgs, CliUsageError } from \"./args.js\"\nimport { makeApprove } from \"./approve.js\"\n\nasync function main(): Promise<void> {\n  let parsed: ReturnType<typeof parseArgs>\n  try {\n    parsed = parseArgs(process.argv.slice(2))\n  } catch (err) {\n    if (!(err instanceof CliUsageError)) throw err\n    process.stderr.write(`${err.message}\\n`)\n    process.exit(1)\n  }\n  const { input, yes } = parsed\n\n  const host = await connectDaemonAgentSessionHost()\n  try {\n    const { output } = await runWorkflow({\n      workflow: worktreeAgentWorkflow,\n      input,\n      agents: host,\n      approve: makeApprove({ yes }),\n    })\n    process.stdout.write(`${JSON.stringify(output, null, 2)}\\n`)\n  } finally {\n    await host.close()\n  }\n}\n\nmain().catch((err: unknown) => {\n  process.stderr.write(`${err instanceof Error ? (err.stack ?? err.message) : String(err)}\\n`)\n  process.exit(1)\n})\n"]}

package/dist/chunk-BBAH3VLQ.mjs

@@ -0,0 +1,170 @@
+import { provisionWorktreeTool, cleanupWorktreeTool, runGateTool } from './chunk-FRVPZTQN.mjs';
+import { implementTool, defineDriver } from '@agentproto/driver';
+import { lstat, mkdir, symlink, copyFile, readdir } from 'fs/promises';
+import { resolve, join, dirname, posix } from 'path';
+import { ToolError } from '@agentproto/tool';
+import { spawn } from 'child_process';
+
+/**
+ * @agentproto/worktree v0.1.0
+ * git-worktree provision / gate / cleanup TOOL contracts + builtin PROVIDER.
+ */
+function execArgv(command, args, cwd) {
+  return new Promise((resolvePromise, reject) => {
+    const child = spawn(command, args, { cwd, shell: false, env: process.env });
+    let stdout = "";
+    let stderr = "";
+    child.stdout?.on("data", (d) => stdout += d.toString("utf8"));
+    child.stderr?.on("data", (d) => stderr += d.toString("utf8"));
+    child.on("error", reject);
+    child.on("close", (code) => resolvePromise({ exitCode: code ?? -1, stdout, stderr }));
+  });
+}
+function execShell(cmd, cwd) {
+  return new Promise((resolvePromise, reject) => {
+    const child = spawn(cmd, { cwd, shell: true, env: process.env });
+    let stdout = "";
+    let stderr = "";
+    child.stdout?.on("data", (d) => stdout += d.toString("utf8"));
+    child.stderr?.on("data", (d) => stderr += d.toString("utf8"));
+    child.on("error", reject);
+    child.on("close", (code) => resolvePromise({ exitCode: code ?? -1, stdout, stderr }));
+  });
+}
+async function execGit(repoRoot, args) {
+  const result = await execArgv("git", ["-C", repoRoot, ...args], repoRoot);
+  if (result.exitCode !== 0) {
+    throw new Error(`git ${args.join(" ")} failed (exit ${result.exitCode}): ${result.stderr || result.stdout}`);
+  }
+  return result;
+}
+function escapeSegment(seg) {
+  let out = "";
+  for (const ch of seg) {
+    if (ch === "*") out += "[^/]*";
+    else if (ch === "?") out += "[^/]";
+    else out += ch.replace(/[.+^${}()|[\]\\]/g, "\\$&");
+  }
+  return out;
+}
+function globToRegExp(pattern) {
+  const segments = pattern.split("/");
+  let out = "^";
+  segments.forEach((seg, i) => {
+    const isLast = i === segments.length - 1;
+    if (seg === "**") {
+      out += isLast ? ".*" : "(?:[^/]+/)*";
+      return;
+    }
+    out += escapeSegment(seg);
+    if (!isLast) out += "/";
+  });
+  return new RegExp(out + "$");
+}
+function globBaseDir(pattern) {
+  const segments = pattern.split("/");
+  const literal = [];
+  for (const seg of segments) {
+    if (seg.includes("*") || seg.includes("?")) break;
+    literal.push(seg);
+  }
+  if (literal.length === segments.length) literal.pop();
+  return literal.join("/");
+}
+async function walk(root, dirRel) {
+  const abs = dirRel ? join(root, dirRel) : root;
+  let entries;
+  try {
+    entries = await readdir(abs, { withFileTypes: true });
+  } catch {
+    return [];
+  }
+  const out = [];
+  for (const entry of entries) {
+    if (entry.name === ".git" || entry.name === "node_modules") continue;
+    const rel = dirRel ? posix.join(dirRel, entry.name) : entry.name;
+    if (entry.isDirectory()) {
+      const children = await walk(root, rel);
+      for (const child of children) out.push(child);
+    } else if (entry.isFile()) {
+      out.push(rel);
+    }
+  }
+  return out;
+}
+async function expandGlob(root, pattern) {
+  const regex = globToRegExp(pattern);
+  const base = globBaseDir(pattern);
+  const candidates = await walk(root, base);
+  return candidates.filter((rel) => regex.test(rel));
+}
+
+// src/provider/bodies/provision-worktree.body.ts
+var provisionWorktreeBuiltin = implementTool(
+  provisionWorktreeTool,
+  async ({ input }) => {
+    const base = input.base ?? "origin/main";
+    const branch = `wt/${input.slug}`;
+    const cwd = resolve(input.repoRoot, "..", "_worktrees", input.slug);
+    await execGit(input.repoRoot, ["worktree", "add", "-b", branch, cwd, base]);
+    for (const rel of input.linkPaths ?? []) {
+      const target = resolve(input.repoRoot, rel);
+      const dest = join(cwd, rel);
+      const existing = await lstat(dest).catch(() => null);
+      if (existing) continue;
+      await mkdir(dirname(dest), { recursive: true });
+      await symlink(target, dest, "dir");
+    }
+    if (input.depsCmd) {
+      const result = await execShell(input.depsCmd, cwd);
+      if (result.exitCode !== 0) {
+        throw new ToolError({
+          code: "execution_failed",
+          message: `depsCmd '${input.depsCmd}' failed (exit ${result.exitCode}): ${result.stderr || result.stdout}`
+        });
+      }
+    }
+    for (const pattern of input.copyGlobs ?? []) {
+      const matches = await expandGlob(input.repoRoot, pattern);
+      for (const rel of matches) {
+        const dest = join(cwd, rel);
+        await mkdir(dirname(dest), { recursive: true });
+        await copyFile(join(input.repoRoot, rel), dest);
+      }
+    }
+    return { cwd, branch };
+  }
+);
+var cleanupWorktreeBuiltin = implementTool(
+  cleanupWorktreeTool,
+  async ({ input }) => {
+    await execGit(input.repoRoot, ["worktree", "remove", "--force", input.cwd]);
+    if (input.deleteBranch && input.branch) {
+      await execGit(input.repoRoot, ["branch", "-D", input.branch]);
+    }
+    return { removed: true };
+  }
+);
+var runGateBuiltin = implementTool(runGateTool, async ({ input }) => {
+  const result = await execShell(input.cmd, input.cwd);
+  return { passed: result.exitCode === 0, ...result };
+});
+
+// src/provider/worktree-provider.ts
+var worktreeProvider = defineDriver({
+  id: "worktree-builtin",
+  name: "Git Worktree (built-in)",
+  description: "In-process provision / gate / cleanup of git worktrees via direct git and shell invocations. No sandboxing \u2014 the host owns the filesystem and process boundary.",
+  version: "0.1.0",
+  kind: "builtin",
+  implements: [
+    { tool: "worktree.provision", version: "0.1.0" },
+    { tool: "worktree.cleanup", version: "0.1.0" },
+    { tool: "worktree.run-gate", version: "0.1.0" }
+  ],
+  implementations: [provisionWorktreeBuiltin, cleanupWorktreeBuiltin, runGateBuiltin]
+});
+
+export { execArgv, execGit, execShell, expandGlob, globToRegExp, worktreeProvider };
+//# sourceMappingURL=chunk-BBAH3VLQ.mjs.map
+//# sourceMappingURL=chunk-BBAH3VLQ.mjs.map

package/dist/chunk-BBAH3VLQ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/exec.ts","../src/glob.ts","../src/provider/bodies/provision-worktree.body.ts","../src/provider/bodies/cleanup-worktree.body.ts","../src/provider/bodies/run-gate.body.ts","../src/provider/worktree-provider.ts"],"names":["join","implementTool"],"mappings":";;;;;;;;;;;AASO,SAAS,QAAA,CACd,OAAA,EACA,IAAA,EACA,GAAA,EACqB;AACrB,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,cAAA,EAAgB,MAAA,KAAW;AAC7C,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,OAAA,EAAS,IAAA,EAAM,EAAE,GAAA,EAAK,KAAA,EAAO,KAAA,EAAO,GAAA,EAAK,OAAA,CAAQ,GAAA,EAAK,CAAA;AAC1E,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,KAAA,CAAM,MAAA,EAAQ,GAAG,MAAA,EAAQ,CAAC,MAAO,MAAA,IAAU,CAAA,CAAE,QAAA,CAAS,MAAM,CAAE,CAAA;AAC9D,IAAA,KAAA,CAAM,MAAA,EAAQ,GAAG,MAAA,EAAQ,CAAC,MAAO,MAAA,IAAU,CAAA,CAAE,QAAA,CAAS,MAAM,CAAE,CAAA;AAC9D,IAAA,KAAA,CAAM,EAAA,CAAG,SAAS,MAAM,CAAA;AACxB,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS,cAAA,CAAe,EAAE,QAAA,EAAU,IAAA,IAAQ,EAAA,EAAI,MAAA,EAAQ,MAAA,EAAQ,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA;AACH;AAOO,SAAS,SAAA,CAAU,KAAa,GAAA,EAAkC;AACvE,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,cAAA,EAAgB,MAAA,KAAW;AAC7C,IAAA,MAAM,KAAA,GAAQ,KAAA,CAAM,GAAA,EAAK,EAAE,GAAA,EAAK,OAAO,IAAA,EAAM,GAAA,EAAK,OAAA,CAAQ,GAAA,EAAK,CAAA;AAC/D,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,IAAI,MAAA,GAAS,EAAA;AACb,IAAA,KAAA,CAAM,MAAA,EAAQ,GAAG,MAAA,EAAQ,CAAC,MAAO,MAAA,IAAU,CAAA,CAAE,QAAA,CAAS,MAAM,CAAE,CAAA;AAC9D,IAAA,KAAA,CAAM,MAAA,EAAQ,GAAG,MAAA,EAAQ,CAAC,MAAO,MAAA,IAAU,CAAA,CAAE,QAAA,CAAS,MAAM,CAAE,CAAA;AAC9D,IAAA,KAAA,CAAM,EAAA,CAAG,SAAS,MAAM,CAAA;AACxB,IAAA,KAAA,CAAM,EAAA,CAAG,OAAA,EAAS,CAAC,IAAA,KAAS,cAAA,CAAe,EAAE,QAAA,EAAU,IAAA,IAAQ,EAAA,EAAI,MAAA,EAAQ,MAAA,EAAQ,CAAC,CAAA;AAAA,EACtF,CAAC,CAAA;AACH;AAEA,eAAsB,OAAA,CAAQ,UAAkB,IAAA,EAA8C;AAC5F,EAAA,MAAM,MAAA,GAAS,MAAM,QAAA,CAAS,KAAA,EAAO,CAAC,MAAM,QAAA,EAAU,GAAG,IAAI,CAAA,EAAG,QAAQ,CAAA;AACxE,EAAA,IAAI,MAAA,CAAO,aAAa,CAAA,EAAG;AACzB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,IAAA,EAAO,IAAA,CAAK,KAAK,GAAG,CAAC,CAAA,cAAA,EAAiB,MAAA,CAAO,QAAQ,CAAA,GAAA,EAAM,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAM,CAAA,CAAE,CAAA;AAAA,EAC7G;AACA,EAAA,OAAO,MAAA;AACT;AC7CA,SAAS,cAAc,GAAA,EAAqB;AAC1C,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,MAAM,GAAA,EAAK;AACpB,IAAA,IAAI,EAAA,KAAO,KAAK,GAAA,IAAO,OAAA;AAAA,SAAA,IACd,EAAA,KAAO,KAAK,GAAA,IAAO,MAAA;AAAA,SACvB,GAAA,IAAO,EAAA,CAAG,OAAA,CAAQ,mBAAA,EAAqB,MAAM,CAAA;AAAA,EACpD;AACA,EAAA,OAAO,GAAA;AACT;AAGO,SAAS,aAAa,OAAA,EAAyB;AACpD,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAClC,EAAA,IAAI,GAAA,GAAM,GAAA;AACV,EAAA,QAAA,CAAS,OAAA,CAAQ,CAAC,GAAA,EAAK,CAAA,KAAM;AAC3B,IAAA,MAAM,MAAA,GAAS,CAAA,KAAM,QAAA,CAAS,MAAA,GAAS,CAAA;AACvC,IAAA,IAAI,QAAQ,IAAA,EAAM;AAChB,MAAA,GAAA,IAAO,SAAS,IAAA,GAAO,aAAA;AACvB,MAAA;AAAA,IACF;AACA,IAAA,GAAA,IAAO,cAAc,GAAG,CAAA;AACxB,IAAA,IAAI,CAAC,QAAQ,GAAA,IAAO,GAAA;AAAA,EACtB,CAAC,CAAA;AACD,EAAA,OAAO,IAAI,MAAA,CAAO,GAAA,GAAM,GAAG,CAAA;AAC7B;AAGA,SAAS,YAAY,OAAA,EAAyB;AAC5C,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,KAAA,CAAM,GAAG,CAAA;AAClC,EAAA,MAAM,UAAoB,EAAC;AAC3B,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,IAAI,QAAA,CAAS,GAAG,KAAK,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAG;AAC5C,IAAA,OAAA,CAAQ,KAAK,GAAG,CAAA;AAAA,EAClB;AAGA,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,QAAA,CAAS,MAAA,UAAgB,GAAA,EAAI;AACpD,EAAA,OAAO,OAAA,CAAQ,KAAK,GAAG,CAAA;AACzB;AAEA,eAAe,IAAA,CAAK,MAAc,MAAA,EAAmC;AACnE,EAAA,MAAM,GAAA,GAAM,MAAA,GAAS,IAAA,CAAK,IAAA,EAAM,MAAM,CAAA,GAAI,IAAA;AAC1C,EAAA,IAAI,OAAA;AACJ,EAAA,IAAI;AACF,IAAA,OAAA,GAAU,MAAM,OAAA,CAAQ,GAAA,EAAK,EAAE,aAAA,EAAe,MAAM,CAAA;AAAA,EACtD,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAC;AAAA,EACV;AACA,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,KAAA,MAAW,SAAS,OAAA,EAAS;AAC3B,IAAA,IAAI,KAAA,CAAM,IAAA,KAAS,MAAA,IAAU,KAAA,CAAM,SAAS,cAAA,EAAgB;AAC5D,IAAA,MAAM,GAAA,GAAM,SAAS,KAAA,CAAM,IAAA,CAAK,QAAQ,KAAA,CAAM,IAAI,IAAI,KAAA,CAAM,IAAA;AAG5D,IAAA,IAAI,KAAA,CAAM,aAAY,EAAG;AACvB,MAAA,MAAM,QAAA,GAAW,MAAM,IAAA,CAAK,IAAA,EAAM,GAAG,CAAA;AACrC,MAAA,KAAA,MAAW,KAAA,IAAS,QAAA,EAAU,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AAAA,IAC9C,CAAA,MAAA,IAAW,KAAA,CAAM,MAAA,EAAO,EAAG;AACzB,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAGA,eAAsB,UAAA,CAAW,MAAc,OAAA,EAAoC;AACjF,EAAA,MAAM,KAAA,GAAQ,aAAa,OAAO,CAAA;AAClC,EAAA,MAAM,IAAA,GAAO,YAAY,OAAO,CAAA;AAChC,EAAA,MAAM,UAAA,GAAa,MAAM,IAAA,CAAK,IAAA,EAAM,IAAI,CAAA;AACxC,EAAA,OAAO,WAAW,MAAA,CAAO,CAAC,QAAQ,KAAA,CAAM,IAAA,CAAK,GAAG,CAAC,CAAA;AACnD;;;ACjEO,IAAM,wBAAA,GAA2B,aAAA;AAAA,EACtC,qBAAA;AAAA,EACA,OAAO,EAAE,KAAA,EAAM,KAAM;AACnB,IAAA,MAAM,IAAA,GAAO,MAAM,IAAA,IAAQ,aAAA;AAC3B,IAAA,MAAM,MAAA,GAAS,CAAA,GAAA,EAAM,KAAA,CAAM,IAAI,CAAA,CAAA;AAC/B,IAAA,MAAM,MAAM,OAAA,CAAQ,KAAA,CAAM,UAAU,IAAA,EAAM,YAAA,EAAc,MAAM,IAAI,CAAA;AAElE,IAAA,MAAM,OAAA,CAAQ,KAAA,CAAM,QAAA,EAAU,CAAC,UAAA,EAAY,OAAO,IAAA,EAAM,MAAA,EAAQ,GAAA,EAAK,IAAI,CAAC,CAAA;AAK1E,IAAA,KAAA,MAAW,GAAA,IAAO,KAAA,CAAM,SAAA,IAAa,EAAC,EAAG;AACvC,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,KAAA,CAAM,QAAA,EAAU,GAAG,CAAA;AAC1C,MAAA,MAAM,IAAA,GAAOA,IAAAA,CAAK,GAAA,EAAK,GAAG,CAAA;AAG1B,MAAA,MAAM,WAAW,MAAM,KAAA,CAAM,IAAI,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AACnD,MAAA,IAAI,QAAA,EAAU;AACd,MAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,MAAA,MAAM,OAAA,CAAQ,MAAA,EAAQ,IAAA,EAAM,KAAK,CAAA;AAAA,IACnC;AAEA,IAAA,IAAI,MAAM,OAAA,EAAS;AACjB,MAAA,MAAM,MAAA,GAAS,MAAM,SAAA,CAAU,KAAA,CAAM,SAAS,GAAG,CAAA;AACjD,MAAA,IAAI,MAAA,CAAO,aAAa,CAAA,EAAG;AACzB,QAAA,MAAM,IAAI,SAAA,CAAU;AAAA,UAClB,IAAA,EAAM,kBAAA;AAAA,UACN,OAAA,EAAS,CAAA,SAAA,EAAY,KAAA,CAAM,OAAO,CAAA,eAAA,EAAkB,MAAA,CAAO,QAAQ,CAAA,GAAA,EAAM,MAAA,CAAO,MAAA,IAAU,MAAA,CAAO,MAAM,CAAA;AAAA,SACxG,CAAA;AAAA,MACH;AAAA,IACF;AAEA,IAAA,KAAA,MAAW,OAAA,IAAW,KAAA,CAAM,SAAA,IAAa,EAAC,EAAG;AAC3C,MAAA,MAAM,OAAA,GAAU,MAAM,UAAA,CAAW,KAAA,CAAM,UAAU,OAAO,CAAA;AACxD,MAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,QAAA,MAAM,IAAA,GAAOA,IAAAA,CAAK,GAAA,EAAK,GAAG,CAAA;AAC1B,QAAA,MAAM,MAAM,OAAA,CAAQ,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAC9C,QAAA,MAAM,SAASA,IAAAA,CAAK,KAAA,CAAM,QAAA,EAAU,GAAG,GAAG,IAAI,CAAA;AAAA,MAChD;AAAA,IACF;AAEA,IAAA,OAAO,EAAE,KAAK,MAAA,EAAO;AAAA,EACvB;AACF,CAAA;AChDO,IAAM,sBAAA,GAAyBC,aAAAA;AAAA,EACpC,mBAAA;AAAA,EACA,OAAO,EAAE,KAAA,EAAM,KAAM;AAKnB,IAAA,MAAM,OAAA,CAAQ,MAAM,QAAA,EAAU,CAAC,YAAY,QAAA,EAAU,SAAA,EAAW,KAAA,CAAM,GAAG,CAAC,CAAA;AAC1E,IAAA,IAAI,KAAA,CAAM,YAAA,IAAgB,KAAA,CAAM,MAAA,EAAQ;AACtC,MAAA,MAAM,OAAA,CAAQ,MAAM,QAAA,EAAU,CAAC,UAAU,IAAA,EAAM,KAAA,CAAM,MAAM,CAAC,CAAA;AAAA,IAC9D;AACA,IAAA,OAAO,EAAE,SAAS,IAAA,EAAc;AAAA,EAClC;AACF,CAAA;ACbO,IAAM,iBAAiBA,aAAAA,CAAc,WAAA,EAAa,OAAO,EAAE,OAAM,KAAM;AAC5E,EAAA,MAAM,SAAS,MAAM,SAAA,CAAU,KAAA,CAAM,GAAA,EAAK,MAAM,GAAG,CAAA;AACnD,EAAA,OAAO,EAAE,MAAA,EAAQ,MAAA,CAAO,QAAA,KAAa,CAAA,EAAG,GAAG,MAAA,EAAO;AACpD,CAAC,CAAA;;;ACGM,IAAM,mBAAmB,YAAA,CAAa;AAAA,EAC3C,EAAA,EAAI,kBAAA;AAAA,EACJ,IAAA,EAAM,yBAAA;AAAA,EACN,WAAA,EACE,sKAAA;AAAA,EAGF,OAAA,EAAS,OAAA;AAAA,EACT,IAAA,EAAM,SAAA;AAAA,EACN,UAAA,EAAY;AAAA,IACV,EAAE,IAAA,EAAM,oBAAA,EAAsB,OAAA,EAAS,OAAA,EAAQ;AAAA,IAC/C,EAAE,IAAA,EAAM,kBAAA,EAAoB,OAAA,EAAS,OAAA,EAAQ;AAAA,IAC7C,EAAE,IAAA,EAAM,mBAAA,EAAqB,OAAA,EAAS,OAAA;AAAQ,GAChD;AAAA,EACA,eAAA,EAAiB,CAAC,wBAAA,EAA0B,sBAAA,EAAwB,cAAc;AACpF,CAAC","file":"chunk-BBAH3VLQ.mjs","sourcesContent":["import { spawn } from \"node:child_process\"\n\nexport interface ExecResult {\n  exitCode: number\n  stdout: string\n  stderr: string\n}\n\n/** Run an argv (no shell — args pass through verbatim, no injection risk). */\nexport function execArgv(\n  command: string,\n  args: readonly string[],\n  cwd: string,\n): Promise<ExecResult> {\n  return new Promise((resolvePromise, reject) => {\n    const child = spawn(command, args, { cwd, shell: false, env: process.env })\n    let stdout = \"\"\n    let stderr = \"\"\n    child.stdout?.on(\"data\", (d) => (stdout += d.toString(\"utf8\")))\n    child.stderr?.on(\"data\", (d) => (stderr += d.toString(\"utf8\")))\n    child.on(\"error\", reject)\n    child.on(\"close\", (code) => resolvePromise({ exitCode: code ?? -1, stdout, stderr }))\n  })\n}\n\n/**\n * Run a single command string through a shell. Callers pass `depsCmd` /\n * `gateCmd` as a trusted, developer-authored config value (the same trust\n * model as a CI job's `script:` line) — not untrusted end-user input.\n */\nexport function execShell(cmd: string, cwd: string): Promise<ExecResult> {\n  return new Promise((resolvePromise, reject) => {\n    const child = spawn(cmd, { cwd, shell: true, env: process.env })\n    let stdout = \"\"\n    let stderr = \"\"\n    child.stdout?.on(\"data\", (d) => (stdout += d.toString(\"utf8\")))\n    child.stderr?.on(\"data\", (d) => (stderr += d.toString(\"utf8\")))\n    child.on(\"error\", reject)\n    child.on(\"close\", (code) => resolvePromise({ exitCode: code ?? -1, stdout, stderr }))\n  })\n}\n\nexport async function execGit(repoRoot: string, args: readonly string[]): Promise<ExecResult> {\n  const result = await execArgv(\"git\", [\"-C\", repoRoot, ...args], repoRoot)\n  if (result.exitCode !== 0) {\n    throw new Error(`git ${args.join(\" \")} failed (exit ${result.exitCode}): ${result.stderr || result.stdout}`)\n  }\n  return result\n}\n","import { readdir } from \"node:fs/promises\"\nimport { join, posix } from \"node:path\"\n\nfunction escapeSegment(seg: string): string {\n  let out = \"\"\n  for (const ch of seg) {\n    if (ch === \"*\") out += \"[^/]*\"\n    else if (ch === \"?\") out += \"[^/]\"\n    else out += ch.replace(/[.+^${}()|[\\]\\\\]/g, \"\\\\$&\")\n  }\n  return out\n}\n\n/** Compile a `/`-separated glob (supporting `*`, `?`, `**`) into an anchored regex. */\nexport function globToRegExp(pattern: string): RegExp {\n  const segments = pattern.split(\"/\")\n  let out = \"^\"\n  segments.forEach((seg, i) => {\n    const isLast = i === segments.length - 1\n    if (seg === \"**\") {\n      out += isLast ? \".*\" : \"(?:[^/]+/)*\"\n      return\n    }\n    out += escapeSegment(seg)\n    if (!isLast) out += \"/\"\n  })\n  return new RegExp(out + \"$\")\n}\n\n/** The literal (non-wildcard) directory prefix of a glob — where to start walking. */\nfunction globBaseDir(pattern: string): string {\n  const segments = pattern.split(\"/\")\n  const literal: string[] = []\n  for (const seg of segments) {\n    if (seg.includes(\"*\") || seg.includes(\"?\")) break\n    literal.push(seg)\n  }\n  // Drop the last literal segment if it's the pattern's final segment (a filename),\n  // not a directory to walk into.\n  if (literal.length === segments.length) literal.pop()\n  return literal.join(\"/\")\n}\n\nasync function walk(root: string, dirRel: string): Promise<string[]> {\n  const abs = dirRel ? join(root, dirRel) : root\n  let entries\n  try {\n    entries = await readdir(abs, { withFileTypes: true })\n  } catch {\n    return []\n  }\n  const out: string[] = []\n  for (const entry of entries) {\n    if (entry.name === \".git\" || entry.name === \"node_modules\") continue\n    const rel = dirRel ? posix.join(dirRel, entry.name) : entry.name\n    // entry.isDirectory() is false for symlinked dirs (Dirent reports the link's own\n    // type, not the target's) — keep it that way so we never follow symlinks.\n    if (entry.isDirectory()) {\n      const children = await walk(root, rel)\n      for (const child of children) out.push(child)\n    } else if (entry.isFile()) {\n      out.push(rel)\n    }\n  }\n  return out\n}\n\n/** Expand a glob against `root`, returning root-relative posix paths of matching files. */\nexport async function expandGlob(root: string, pattern: string): Promise<string[]> {\n  const regex = globToRegExp(pattern)\n  const base = globBaseDir(pattern)\n  const candidates = await walk(root, base)\n  return candidates.filter((rel) => regex.test(rel))\n}\n","import { mkdir, copyFile, symlink, lstat } from \"node:fs/promises\"\nimport { dirname, join, resolve } from \"node:path\"\nimport { implementTool } from \"@agentproto/driver\"\nimport { ToolError } from \"@agentproto/tool\"\nimport { provisionWorktreeTool } from \"../../tools/provision-worktree.tool.js\"\nimport { execGit, execShell } from \"../../exec.js\"\nimport { expandGlob } from \"../../glob.js\"\n\nexport const provisionWorktreeBuiltin = implementTool(\n  provisionWorktreeTool,\n  async ({ input }) => {\n    const base = input.base ?? \"origin/main\"\n    const branch = `wt/${input.slug}`\n    const cwd = resolve(input.repoRoot, \"..\", \"_worktrees\", input.slug)\n\n    await execGit(input.repoRoot, [\"worktree\", \"add\", \"-b\", branch, cwd, base])\n\n    // Symlink gitignored, expensive-to-recreate trees from the host repo into\n    // the worktree BEFORE depsCmd, so a workspace whose graph spans gitignored\n    // dirs (sibling repos, node_modules) resolves without a full reinstall.\n    for (const rel of input.linkPaths ?? []) {\n      const target = resolve(input.repoRoot, rel)\n      const dest = join(cwd, rel)\n      // A fresh worktree shouldn't already carry a gitignored path; if it does\n      // (a tracked dir, or a re-run), leave it untouched rather than clobber.\n      const existing = await lstat(dest).catch(() => null)\n      if (existing) continue\n      await mkdir(dirname(dest), { recursive: true })\n      await symlink(target, dest, \"dir\")\n    }\n\n    if (input.depsCmd) {\n      const result = await execShell(input.depsCmd, cwd)\n      if (result.exitCode !== 0) {\n        throw new ToolError({\n          code: \"execution_failed\",\n          message: `depsCmd '${input.depsCmd}' failed (exit ${result.exitCode}): ${result.stderr || result.stdout}`,\n        })\n      }\n    }\n\n    for (const pattern of input.copyGlobs ?? []) {\n      const matches = await expandGlob(input.repoRoot, pattern)\n      for (const rel of matches) {\n        const dest = join(cwd, rel)\n        await mkdir(dirname(dest), { recursive: true })\n        await copyFile(join(input.repoRoot, rel), dest)\n      }\n    }\n\n    return { cwd, branch }\n  },\n)\n","import { implementTool } from \"@agentproto/driver\"\nimport { cleanupWorktreeTool } from \"../../tools/cleanup-worktree.tool.js\"\nimport { execGit } from \"../../exec.js\"\n\nexport const cleanupWorktreeBuiltin = implementTool(\n  cleanupWorktreeTool,\n  async ({ input }) => {\n    // --force: a provisioned worktree almost always carries untracked files\n    // by the time cleanup runs (installed deps, copied secrets, agent output)\n    // — plain `worktree remove` refuses those. Cleanup's whole job is to\n    // tear the directory down regardless.\n    await execGit(input.repoRoot, [\"worktree\", \"remove\", \"--force\", input.cwd])\n    if (input.deleteBranch && input.branch) {\n      await execGit(input.repoRoot, [\"branch\", \"-D\", input.branch])\n    }\n    return { removed: true as const }\n  },\n)\n","import { implementTool } from \"@agentproto/driver\"\nimport { runGateTool } from \"../../tools/run-gate.tool.js\"\nimport { execShell } from \"../../exec.js\"\n\nexport const runGateBuiltin = implementTool(runGateTool, async ({ input }) => {\n  const result = await execShell(input.cmd, input.cwd)\n  return { passed: result.exitCode === 0, ...result }\n})\n","import { defineDriver } from \"@agentproto/driver\"\nimport { provisionWorktreeBuiltin } from \"./bodies/provision-worktree.body.js\"\nimport { cleanupWorktreeBuiltin } from \"./bodies/cleanup-worktree.body.js\"\nimport { runGateBuiltin } from \"./bodies/run-gate.body.js\"\n\n/**\n * AIP-30 PROVIDER for the three `worktree.*` TOOL contracts. `kind: \"builtin\"`\n * — runs in-process, shelling out to `git` / the caller's commands directly.\n * No subprocess-DRIVER indirection, no network hop.\n */\nexport const worktreeProvider = defineDriver({\n  id: \"worktree-builtin\",\n  name: \"Git Worktree (built-in)\",\n  description:\n    \"In-process provision / gate / cleanup of git worktrees via direct git \" +\n    \"and shell invocations. No sandboxing — the host owns the filesystem \" +\n    \"and process boundary.\",\n  version: \"0.1.0\",\n  kind: \"builtin\",\n  implements: [\n    { tool: \"worktree.provision\", version: \"0.1.0\" },\n    { tool: \"worktree.cleanup\", version: \"0.1.0\" },\n    { tool: \"worktree.run-gate\", version: \"0.1.0\" },\n  ],\n  implementations: [provisionWorktreeBuiltin, cleanupWorktreeBuiltin, runGateBuiltin],\n})\n"]}

package/dist/chunk-FRVPZTQN.mjs

@@ -0,0 +1,67 @@
+import { z } from 'zod';
+import { defineTool } from '@agentproto/tool';
+
+/**
+ * @agentproto/worktree v0.1.0
+ * git-worktree provision / gate / cleanup TOOL contracts + builtin PROVIDER.
+ */
+
+var provisionWorktreeTool = defineTool({
+  id: "worktree.provision",
+  description: "Create a git worktree for `repoRoot` at a sibling '_worktrees/<slug>' directory, on a new branch 'wt/<slug>' cut from `base`. If `depsCmd` is given, it runs inside the new worktree afterwards (e.g. install deps). If `copyGlobs` is given, matching files under `repoRoot` (including gitignored ones, e.g. local secrets) are copied into the worktree at the same relative path. If `linkPaths` is given, each is symlinked from `repoRoot` into the worktree before `depsCmd` runs \u2014 for gitignored, expensive-to-recreate trees a fresh worktree lacks (node_modules, sibling workspace repos) so the workspace graph resolves without a full reinstall.",
+  version: "0.1.0",
+  inputSchema: z.object({
+    repoRoot: z.string().describe("Absolute path to the git repository root."),
+    base: z.string().optional().describe("Ref the new branch is cut from. Default 'origin/main'."),
+    slug: z.string().regex(/^[a-z0-9][a-z0-9-]*$/, "slug must be lowercase kebab-case").describe("Short identifier \u2014 names both the worktree directory and its branch."),
+    depsCmd: z.string().optional().describe("Shell command run inside the worktree after creation, e.g. 'pnpm install --prefer-offline'."),
+    copyGlobs: z.array(z.string()).optional().describe("Glob patterns (relative to repoRoot) of gitignored files to copy into the worktree, e.g. 'envs/**/.env.local'."),
+    linkPaths: z.array(z.string()).optional().describe("Relative paths (dirs or files) symlinked from repoRoot into the worktree before depsCmd, e.g. 'node_modules' or a gitignored sibling workspace repo. Lets the workspace graph resolve without a full reinstall.")
+  }),
+  outputSchema: z.object({
+    cwd: z.string().describe("Absolute path to the created worktree."),
+    branch: z.string().describe("The branch the worktree was created on.")
+  }),
+  mutates: ["fs:write"],
+  approval: "auto",
+  riskLevel: 1
+});
+var cleanupWorktreeTool = defineTool({
+  id: "worktree.cleanup",
+  description: "Remove a git worktree created by 'worktree.provision' (force-removed, since installed deps / copied secrets / agent output leave it with untracked files). If `deleteBranch` is true and `branch` is given, also force-delete that branch.",
+  version: "0.1.0",
+  inputSchema: z.object({
+    repoRoot: z.string().describe("Absolute path to the git repository root."),
+    cwd: z.string().describe("Absolute path to the worktree to remove."),
+    branch: z.string().optional().describe("The worktree's branch, for deleteBranch."),
+    deleteBranch: z.boolean().optional().describe("Also force-delete `branch` after removing the worktree.")
+  }),
+  outputSchema: z.object({
+    removed: z.literal(true)
+  }),
+  mutates: ["fs:write"],
+  approval: "auto",
+  riskLevel: 1
+});
+var runGateTool = defineTool({
+  id: "worktree.run-gate",
+  description: "Run a gate command (e.g. 'pnpm test') inside `cwd` and report pass/fail from its exit code, along with captured stdout/stderr.",
+  version: "0.1.0",
+  inputSchema: z.object({
+    cwd: z.string().describe("Directory to run the command in."),
+    cmd: z.string().describe("Shell command to run, e.g. 'pnpm test'.")
+  }),
+  outputSchema: z.object({
+    passed: z.boolean(),
+    exitCode: z.number().int(),
+    stdout: z.string(),
+    stderr: z.string()
+  }),
+  mutates: [],
+  approval: "auto",
+  riskLevel: 1
+});
+
+export { cleanupWorktreeTool, provisionWorktreeTool, runGateTool };
+//# sourceMappingURL=chunk-FRVPZTQN.mjs.map
+//# sourceMappingURL=chunk-FRVPZTQN.mjs.map

package/dist/chunk-FRVPZTQN.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tools/provision-worktree.tool.ts","../src/tools/cleanup-worktree.tool.ts","../src/tools/run-gate.tool.ts"],"names":["defineTool","z"],"mappings":";;;;;;;;AAQO,IAAM,wBAAwB,UAAA,CAAW;AAAA,EAC9C,EAAA,EAAI,oBAAA;AAAA,EACJ,WAAA,EACE,soBAAA;AAAA,EAUF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAa,EAAE,MAAA,CAAO;AAAA,IACpB,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2CAA2C,CAAA;AAAA,IACzE,MAAM,CAAA,CACH,MAAA,GACA,QAAA,EAAS,CACT,SAAS,wDAAwD,CAAA;AAAA,IACpE,IAAA,EAAM,EACH,MAAA,EAAO,CACP,MAAM,sBAAA,EAAwB,mCAAmC,CAAA,CACjE,QAAA,CAAS,2EAAsE,CAAA;AAAA,IAClF,SAAS,CAAA,CACN,MAAA,GACA,QAAA,EAAS,CACT,SAAS,6FAA6F,CAAA;AAAA,IACzG,SAAA,EAAW,CAAA,CACR,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAChB,QAAA,EAAS,CACT,QAAA,CAAS,gHAAgH,CAAA;AAAA,IAC5H,SAAA,EAAW,CAAA,CACR,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAChB,QAAA,EAAS,CACT,QAAA,CAAS,iNAAiN;AAAA,GAC9N,CAAA;AAAA,EACD,YAAA,EAAc,EAAE,MAAA,CAAO;AAAA,IACrB,GAAA,EAAK,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,wCAAwC,CAAA;AAAA,IACjE,MAAA,EAAQ,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,yCAAyC;AAAA,GACtE,CAAA;AAAA,EACD,OAAA,EAAS,CAAC,UAAU,CAAA;AAAA,EACpB,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;AChDM,IAAM,sBAAsBA,UAAAA,CAAW;AAAA,EAC5C,EAAA,EAAI,kBAAA;AAAA,EACJ,WAAA,EACE,4OAAA;AAAA,EAIF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2CAA2C,CAAA;AAAA,IACzE,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,0CAA0C,CAAA;AAAA,IACnE,QAAQA,CAAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,0CAA0C,CAAA;AAAA,IACjF,cAAcA,CAAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,yDAAyD;AAAA,GACxG,CAAA;AAAA,EACD,YAAA,EAAcA,EAAE,MAAA,CAAO;AAAA,IACrB,OAAA,EAASA,CAAAA,CAAE,OAAA,CAAQ,IAAI;AAAA,GACxB,CAAA;AAAA,EACD,OAAA,EAAS,CAAC,UAAU,CAAA;AAAA,EACpB,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC;ACfM,IAAM,cAAcD,UAAAA,CAAW;AAAA,EACpC,EAAA,EAAI,mBAAA;AAAA,EACJ,WAAA,EACE,gIAAA;AAAA,EAEF,OAAA,EAAS,OAAA;AAAA,EACT,WAAA,EAAaC,EAAE,MAAA,CAAO;AAAA,IACpB,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,kCAAkC,CAAA;AAAA,IAC3D,GAAA,EAAKA,CAAAA,CAAE,MAAA,EAAO,CAAE,SAAS,yCAAyC;AAAA,GACnE,CAAA;AAAA,EACD,YAAA,EAAcA,EAAE,MAAA,CAAO;AAAA,IACrB,MAAA,EAAQA,EAAE,OAAA,EAAQ;AAAA,IAClB,QAAA,EAAUA,CAAAA,CAAE,MAAA,EAAO,CAAE,GAAA,EAAI;AAAA,IACzB,MAAA,EAAQA,EAAE,MAAA,EAAO;AAAA,IACjB,MAAA,EAAQA,EAAE,MAAA;AAAO,GAClB,CAAA;AAAA,EACD,SAAS,EAAC;AAAA,EACV,QAAA,EAAU,MAAA;AAAA,EACV,SAAA,EAAW;AACb,CAAC","file":"chunk-FRVPZTQN.mjs","sourcesContent":["import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/**\n * AIP-14 contract: create a git worktree off a base ref, on its own branch,\n * optionally installing deps and copying gitignored files (secrets) into it.\n * Agnostic — no hardcoded package manager or env layout; both are inputs.\n */\nexport const provisionWorktreeTool = defineTool({\n  id: \"worktree.provision\",\n  description:\n    \"Create a git worktree for `repoRoot` at a sibling '_worktrees/<slug>' \" +\n    \"directory, on a new branch 'wt/<slug>' cut from `base`. If `depsCmd` is \" +\n    \"given, it runs inside the new worktree afterwards (e.g. install deps). \" +\n    \"If `copyGlobs` is given, matching files under `repoRoot` (including \" +\n    \"gitignored ones, e.g. local secrets) are copied into the worktree at \" +\n    \"the same relative path. If `linkPaths` is given, each is symlinked from \" +\n    \"`repoRoot` into the worktree before `depsCmd` runs — for gitignored, \" +\n    \"expensive-to-recreate trees a fresh worktree lacks (node_modules, \" +\n    \"sibling workspace repos) so the workspace graph resolves without a full \" +\n    \"reinstall.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    repoRoot: z.string().describe(\"Absolute path to the git repository root.\"),\n    base: z\n      .string()\n      .optional()\n      .describe(\"Ref the new branch is cut from. Default 'origin/main'.\"),\n    slug: z\n      .string()\n      .regex(/^[a-z0-9][a-z0-9-]*$/, \"slug must be lowercase kebab-case\")\n      .describe(\"Short identifier — names both the worktree directory and its branch.\"),\n    depsCmd: z\n      .string()\n      .optional()\n      .describe(\"Shell command run inside the worktree after creation, e.g. 'pnpm install --prefer-offline'.\"),\n    copyGlobs: z\n      .array(z.string())\n      .optional()\n      .describe(\"Glob patterns (relative to repoRoot) of gitignored files to copy into the worktree, e.g. 'envs/**/.env.local'.\"),\n    linkPaths: z\n      .array(z.string())\n      .optional()\n      .describe(\"Relative paths (dirs or files) symlinked from repoRoot into the worktree before depsCmd, e.g. 'node_modules' or a gitignored sibling workspace repo. Lets the workspace graph resolve without a full reinstall.\"),\n  }),\n  outputSchema: z.object({\n    cwd: z.string().describe(\"Absolute path to the created worktree.\"),\n    branch: z.string().describe(\"The branch the worktree was created on.\"),\n  }),\n  mutates: [\"fs:write\"],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/** AIP-14 contract: remove a git worktree, optionally deleting its branch. */\nexport const cleanupWorktreeTool = defineTool({\n  id: \"worktree.cleanup\",\n  description:\n    \"Remove a git worktree created by 'worktree.provision' (force-removed, \" +\n    \"since installed deps / copied secrets / agent output leave it with \" +\n    \"untracked files). If `deleteBranch` is true and `branch` is given, also \" +\n    \"force-delete that branch.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    repoRoot: z.string().describe(\"Absolute path to the git repository root.\"),\n    cwd: z.string().describe(\"Absolute path to the worktree to remove.\"),\n    branch: z.string().optional().describe(\"The worktree's branch, for deleteBranch.\"),\n    deleteBranch: z.boolean().optional().describe(\"Also force-delete `branch` after removing the worktree.\"),\n  }),\n  outputSchema: z.object({\n    removed: z.literal(true),\n  }),\n  mutates: [\"fs:write\"],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n","import { z } from \"zod\"\nimport { defineTool } from \"@agentproto/tool\"\n\n/**\n * AIP-14 contract: run a caller-provided gate/check command inside a\n * directory (typically a provisioned worktree) and report pass/fail.\n * `cmd` is a trusted, developer-authored config value (same trust model as\n * a CI job's `script:` line), run through a shell so it may include flags.\n */\nexport const runGateTool = defineTool({\n  id: \"worktree.run-gate\",\n  description:\n    \"Run a gate command (e.g. 'pnpm test') inside `cwd` and report pass/fail \" +\n    \"from its exit code, along with captured stdout/stderr.\",\n  version: \"0.1.0\",\n  inputSchema: z.object({\n    cwd: z.string().describe(\"Directory to run the command in.\"),\n    cmd: z.string().describe(\"Shell command to run, e.g. 'pnpm test'.\"),\n  }),\n  outputSchema: z.object({\n    passed: z.boolean(),\n    exitCode: z.number().int(),\n    stdout: z.string(),\n    stderr: z.string(),\n  }),\n  mutates: [],\n  approval: \"auto\",\n  riskLevel: 1,\n})\n"]}

package/dist/chunk-P7FOHOQ3.mjs

@@ -0,0 +1,176 @@
+import { worktreeProvider } from './chunk-BBAH3VLQ.mjs';
+import { provisionWorktreeTool, runGateTool, cleanupWorktreeTool } from './chunk-FRVPZTQN.mjs';
+import { z } from 'zod';
+import { resolveMcpUrl, HarnessClient } from '@agentproto/harness';
+
+/**
+ * @agentproto/worktree v0.1.0
+ * git-worktree provision / gate / cleanup TOOL contracts + builtin PROVIDER.
+ */
+var worktreeAgentInputSchema = z.object({
+  repoRoot: z.string().describe("Absolute path to the git repository root."),
+  slug: z.string().describe("Worktree/branch identifier, e.g. 'fix-flaky-test'."),
+  base: z.string().optional().describe("Ref to cut the worktree branch from. Default 'origin/main'."),
+  depsCmd: z.string().optional().describe("Command to install deps inside the worktree, e.g. 'pnpm install --prefer-offline'."),
+  copyGlobs: z.array(z.string()).optional().describe("Gitignored files to copy into the worktree, e.g. secrets."),
+  linkPaths: z.array(z.string()).optional().describe("Gitignored dirs/files symlinked from the host repo into the worktree before depsCmd (node_modules, sibling workspace repos) so the graph resolves without a full reinstall."),
+  task: z.string().describe("The prompt sent to the coding agent."),
+  adapter: z.string().optional().describe("Agent adapter slug. Default 'claude-code'."),
+  gateCmd: z.string().describe("Command run inside the worktree to check the agent's work, e.g. 'pnpm test'."),
+  deleteBranch: z.boolean().optional().describe("Delete the worktree's branch on cleanup. Default true.")
+});
+var candidates = [worktreeProvider];
+function input(b) {
+  return b.input;
+}
+var worktreeAgentWorkflow = {
+  id: "worktree-agent",
+  description: "Launch a coding agent inside a fresh git worktree, gate its work with a check command, get a human ack, then clean up. On gate failure the worktree is left in place for inspection instead of being cleaned up.",
+  steps: [
+    {
+      kind: "tool",
+      id: "provision",
+      tool: provisionWorktreeTool,
+      candidates,
+      input: (b) => {
+        const i = input(b);
+        return {
+          repoRoot: i.repoRoot,
+          slug: i.slug,
+          base: i.base,
+          depsCmd: i.depsCmd,
+          copyGlobs: i.copyGlobs,
+          linkPaths: i.linkPaths
+        };
+      }
+    },
+    {
+      kind: "agent",
+      id: "code",
+      adapter: (b) => input(b).adapter ?? "claude-code",
+      cwd: (b) => b.steps.provision.cwd,
+      prompt: (b) => input(b).task
+    },
+    {
+      kind: "tool",
+      id: "gate",
+      tool: runGateTool,
+      candidates,
+      input: (b) => ({
+        cwd: b.steps.provision.cwd,
+        cmd: input(b).gateCmd
+      })
+    },
+    {
+      kind: "branch",
+      id: "route",
+      cond: (b) => b.steps.gate.passed,
+      then: [
+        {
+          kind: "approval",
+          id: "approval",
+          prompt: () => "Gate passed. Approve worktree cleanup?",
+          onApprove: [
+            {
+              kind: "tool",
+              id: "cleanup",
+              tool: cleanupWorktreeTool,
+              candidates,
+              input: (b) => ({
+                repoRoot: input(b).repoRoot,
+                cwd: b.steps.provision.cwd,
+                branch: b.steps.provision.branch,
+                deleteBranch: input(b).deleteBranch ?? true
+              })
+            }
+          ],
+          onReject: [
+            {
+              kind: "transform",
+              id: "held",
+              compute: () => ({ removed: false, reason: "cleanup_rejected" })
+            }
+          ]
+        }
+      ],
+      otherwise: [
+        {
+          kind: "transform",
+          id: "gate-failed",
+          compute: () => ({ removed: false, reason: "gate_failed" })
+        }
+      ]
+    }
+  ],
+  output: (b) => ({
+    cwd: b.steps.provision.cwd,
+    branch: b.steps.provision.branch,
+    gate: b.steps.gate,
+    cleanup: b.steps.cleanup ?? b.steps.held ?? b.steps["gate-failed"]
+  })
+};
+var MAX_POLL_MS = 49e3;
+async function connectDaemonAgentSessionHost(opts) {
+  const url = resolveMcpUrl(opts);
+  let client;
+  try {
+    client = await HarnessClient.connect({ url });
+  } catch (err) {
+    throw new Error(
+      `worktree-agent: could not reach the agentproto daemon's MCP endpoint at ${url}. Start the daemon (\`agentproto daemon start\`), or point at a running one via AGENTPROTO_MCP_URL, before running this command.
+(${err instanceof Error ? err.message : String(err)})`
+    );
+  }
+  return makeDaemonAgentSessionHost(client);
+}
+function makeDaemonAgentSessionHost(client) {
+  const sessionByStepId = /* @__PURE__ */ new Map();
+  return {
+    async spawn(adapter, opts) {
+      const desc = await client.start({
+        adapter,
+        ...opts.cwd !== void 0 ? { cwd: opts.cwd } : {},
+        ...opts.workspaceSlug !== void 0 ? { workspaceSlug: opts.workspaceSlug } : {},
+        ...opts.stepId !== void 0 ? { label: opts.stepId } : {}
+      });
+      if (opts.stepId) sessionByStepId.set(opts.stepId, desc.id);
+      return desc.id;
+    },
+    async sendPromptAndWait(sessionId, prompt) {
+      const waitPromise = waitForSettled(client, sessionId);
+      await client.prompt(sessionId, prompt);
+      await waitPromise;
+    },
+    resolveByLabel(stepId) {
+      return sessionByStepId.get(stepId);
+    },
+    async start(args) {
+      return client.start(args);
+    },
+    async prompt(sessionId, prompt, opts) {
+      await client.prompt(sessionId, prompt, opts);
+    },
+    async output(sessionId, lastN) {
+      return client.output(sessionId, lastN);
+    },
+    async kill(sessionId) {
+      await client.kill(sessionId);
+    },
+    async waitForAny(sessionIds, opts) {
+      return client.waitForAny(sessionIds, opts);
+    },
+    async close() {
+      await client.close();
+    }
+  };
+}
+async function waitForSettled(client, sessionId) {
+  for (; ; ) {
+    const result = await client.waitForAny([sessionId], { event: "any", timeoutMs: MAX_POLL_MS });
+    if (!result.timedOut) return;
+  }
+}
+
+export { connectDaemonAgentSessionHost, makeDaemonAgentSessionHost, worktreeAgentInputSchema, worktreeAgentWorkflow };
+//# sourceMappingURL=chunk-P7FOHOQ3.mjs.map
+//# sourceMappingURL=chunk-P7FOHOQ3.mjs.map

package/dist/chunk-P7FOHOQ3.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/workflow.ts","../src/agent-session-host.ts"],"names":[],"mappings":";;;;;;;;;AASO,IAAM,wBAAA,GAA2B,EAAE,MAAA,CAAO;AAAA,EAC/C,QAAA,EAAU,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,2CAA2C,CAAA;AAAA,EACzE,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,oDAAoD,CAAA;AAAA,EAC9E,MAAM,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,6DAA6D,CAAA;AAAA,EAClG,SAAS,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,oFAAoF,CAAA;AAAA,EAC5H,SAAA,EAAW,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,2DAA2D,CAAA;AAAA,EAC9G,SAAA,EAAW,CAAA,CAAE,KAAA,CAAM,CAAA,CAAE,MAAA,EAAQ,CAAA,CAAE,QAAA,EAAS,CAAE,QAAA,CAAS,6KAA6K,CAAA;AAAA,EAChO,IAAA,EAAM,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,sCAAsC,CAAA;AAAA,EAChE,SAAS,CAAA,CAAE,MAAA,GAAS,QAAA,EAAS,CAAE,SAAS,4CAA4C,CAAA;AAAA,EACpF,OAAA,EAAS,CAAA,CAAE,MAAA,EAAO,CAAE,SAAS,8EAA8E,CAAA;AAAA,EAC3G,cAAc,CAAA,CAAE,OAAA,GAAU,QAAA,EAAS,CAAE,SAAS,wDAAwD;AACxG,CAAC;AAID,IAAM,UAAA,GAAa,CAAC,gBAAgB,CAAA;AAEpC,SAAS,MAAM,CAAA,EAA2C;AACxD,EAAA,OAAO,CAAA,CAAE,KAAA;AACX;AAOO,IAAM,qBAAA,GAAyC;AAAA,EACpD,EAAA,EAAI,gBAAA;AAAA,EACJ,WAAA,EACE,kNAAA;AAAA,EAGF,KAAA,EAAO;AAAA,IACL;AAAA,MACE,IAAA,EAAM,MAAA;AAAA,MACN,EAAA,EAAI,WAAA;AAAA,MACJ,IAAA,EAAM,qBAAA;AAAA,MACN,UAAA;AAAA,MACA,KAAA,EAAO,CAAC,CAAA,KAAgB;AACtB,QAAA,MAAM,CAAA,GAAI,MAAM,CAAC,CAAA;AACjB,QAAA,OAAO;AAAA,UACL,UAAU,CAAA,CAAE,QAAA;AAAA,UACZ,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,SAAS,CAAA,CAAE,OAAA;AAAA,UACX,WAAW,CAAA,CAAE,SAAA;AAAA,UACb,WAAW,CAAA,CAAE;AAAA,SACf;AAAA,MACF;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,OAAA;AAAA,MACN,EAAA,EAAI,MAAA;AAAA,MACJ,SAAS,CAAC,CAAA,KAAgB,KAAA,CAAM,CAAC,EAAE,OAAA,IAAW,aAAA;AAAA,MAC9C,GAAA,EAAK,CAAC,CAAA,KAAiB,CAAA,CAAE,MAAM,SAAA,CAA8B,GAAA;AAAA,MAC7D,MAAA,EAAQ,CAAC,CAAA,KAAgB,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,KACpC;AAAA,IACA;AAAA,MACE,IAAA,EAAM,MAAA;AAAA,MACN,EAAA,EAAI,MAAA;AAAA,MACJ,IAAA,EAAM,WAAA;AAAA,MACN,UAAA;AAAA,MACA,KAAA,EAAO,CAAC,CAAA,MAAiB;AAAA,QACvB,GAAA,EAAM,CAAA,CAAE,KAAA,CAAM,SAAA,CAA8B,GAAA;AAAA,QAC5C,GAAA,EAAK,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA,OAChB;AAAA,KACF;AAAA,IACA;AAAA,MACE,IAAA,EAAM,QAAA;AAAA,MACN,EAAA,EAAI,OAAA;AAAA,MACJ,IAAA,EAAM,CAAC,CAAA,KAAiB,CAAA,CAAE,MAAM,IAAA,CAA6B,MAAA;AAAA,MAC7D,IAAA,EAAM;AAAA,QACJ;AAAA,UACE,IAAA,EAAM,UAAA;AAAA,UACN,EAAA,EAAI,UAAA;AAAA,UACJ,QAAQ,MAAM,wCAAA;AAAA,UACd,SAAA,EAAW;AAAA,YACT;AAAA,cACE,IAAA,EAAM,MAAA;AAAA,cACN,EAAA,EAAI,SAAA;AAAA,cACJ,IAAA,EAAM,mBAAA;AAAA,cACN,UAAA;AAAA,cACA,KAAA,EAAO,CAAC,CAAA,MAAiB;AAAA,gBACvB,QAAA,EAAU,KAAA,CAAM,CAAC,CAAA,CAAE,QAAA;AAAA,gBACnB,GAAA,EAAM,CAAA,CAAE,KAAA,CAAM,SAAA,CAA8B,GAAA;AAAA,gBAC5C,MAAA,EAAS,CAAA,CAAE,KAAA,CAAM,SAAA,CAAiC,MAAA;AAAA,gBAClD,YAAA,EAAc,KAAA,CAAM,CAAC,CAAA,CAAE,YAAA,IAAgB;AAAA,eACzC;AAAA;AACF,WACF;AAAA,UACA,QAAA,EAAU;AAAA,YACR;AAAA,cACE,IAAA,EAAM,WAAA;AAAA,cACN,EAAA,EAAI,MAAA;AAAA,cACJ,SAAS,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,kBAAA,EAA4B;AAAA;AACxE;AACF;AACF,OACF;AAAA,MACA,SAAA,EAAW;AAAA,QACT;AAAA,UACE,IAAA,EAAM,WAAA;AAAA,UACN,EAAA,EAAI,aAAA;AAAA,UACJ,SAAS,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,QAAQ,aAAA,EAAuB;AAAA;AACnE;AACF;AACF,GACF;AAAA,EACA,MAAA,EAAQ,CAAC,CAAA,MAAiB;AAAA,IACxB,GAAA,EAAM,CAAA,CAAE,KAAA,CAAM,SAAA,CAA8B,GAAA;AAAA,IAC5C,MAAA,EAAS,CAAA,CAAE,KAAA,CAAM,SAAA,CAAiC,MAAA;AAAA,IAClD,IAAA,EAAM,EAAE,KAAA,CAAM,IAAA;AAAA,IACd,OAAA,EAAS,EAAE,KAAA,CAAM,OAAA,IAAW,EAAE,KAAA,CAAM,IAAA,IAAQ,CAAA,CAAE,KAAA,CAAM,aAAa;AAAA,GACnE;AACF;AC/GA,IAAM,WAAA,GAAc,IAAA;AAoCpB,eAAsB,8BACpB,IAAA,EACiC;AACjC,EAAA,MAAM,GAAA,GAAM,cAAc,IAAI,CAAA;AAC9B,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,MAAM,aAAA,CAAc,OAAA,CAAQ,EAAE,KAAK,CAAA;AAAA,EAC9C,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,2EAA2E,GAAG,CAAA;AAAA,CAAA,EAGxE,eAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,KACxD;AAAA,EACF;AACA,EAAA,OAAO,2BAA2B,MAAM,CAAA;AAC1C;AAGO,SAAS,2BAA2B,MAAA,EAA8C;AACvF,EAAA,MAAM,eAAA,uBAAsB,GAAA,EAAoB;AAEhD,EAAA,OAAO;AAAA,IACL,MAAM,KAAA,CAAM,OAAA,EAAS,IAAA,EAAuB;AAC1C,MAAA,MAAM,IAAA,GAAO,MAAM,MAAA,CAAO,KAAA,CAAM;AAAA,QAC9B,OAAA;AAAA,QACA,GAAI,KAAK,GAAA,KAAQ,MAAA,GAAY,EAAE,GAAA,EAAK,IAAA,CAAK,GAAA,EAAI,GAAI,EAAC;AAAA,QAClD,GAAI,KAAK,aAAA,KAAkB,MAAA,GAAY,EAAE,aAAA,EAAe,IAAA,CAAK,aAAA,EAAc,GAAI,EAAC;AAAA,QAChF,GAAI,KAAK,MAAA,KAAW,MAAA,GAAY,EAAE,KAAA,EAAO,IAAA,CAAK,MAAA,EAAO,GAAI;AAAC,OAC3D,CAAA;AACD,MAAA,IAAI,KAAK,MAAA,EAAQ,eAAA,CAAgB,IAAI,IAAA,CAAK,MAAA,EAAQ,KAAK,EAAE,CAAA;AACzD,MAAA,OAAO,IAAA,CAAK,EAAA;AAAA,IACd,CAAA;AAAA,IAEA,MAAM,iBAAA,CAAkB,SAAA,EAAW,MAAA,EAAuB;AAGxD,MAAA,MAAM,WAAA,GAAc,cAAA,CAAe,MAAA,EAAQ,SAAS,CAAA;AACpD,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAM,CAAA;AACrC,MAAA,MAAM,WAAA;AAAA,IACR,CAAA;AAAA,IAEA,eAAe,MAAA,EAA4B;AACzC,MAAA,OAAO,eAAA,CAAgB,IAAI,MAAM,CAAA;AAAA,IACnC,CAAA;AAAA,IAEA,MAAM,MAAM,IAAA,EAAkC;AAC5C,MAAA,OAAO,MAAA,CAAO,MAAM,IAAI,CAAA;AAAA,IAC1B,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,SAAA,EAAW,MAAA,EAAQ,IAAA,EAAqB;AACnD,MAAA,MAAM,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,MAAA,EAAQ,IAAI,CAAA;AAAA,IAC7C,CAAA;AAAA,IAEA,MAAM,MAAA,CAAO,SAAA,EAAW,KAAA,EAAwB;AAC9C,MAAA,OAAO,MAAA,CAAO,MAAA,CAAO,SAAA,EAAW,KAAK,CAAA;AAAA,IACvC,CAAA;AAAA,IAEA,MAAM,KAAK,SAAA,EAA0B;AACnC,MAAA,MAAM,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,IAC7B,CAAA;AAAA,IAEA,MAAM,UAAA,CAAW,UAAA,EAAY,IAAA,EAA2B;AACtD,MAAA,OAAO,MAAA,CAAO,UAAA,CAAW,UAAA,EAAY,IAAI,CAAA;AAAA,IAC3C,CAAA;AAAA,IAEA,MAAM,KAAA,GAAuB;AAC3B,MAAA,MAAM,OAAO,KAAA,EAAM;AAAA,IACrB;AAAA,GACF;AACF;AASA,eAAe,cAAA,CAAe,QAAsB,SAAA,EAAkC;AACpF,EAAA,WAAS;AACP,IAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,UAAA,CAAW,CAAC,SAAS,CAAA,EAAG,EAAE,KAAA,EAAO,KAAA,EAAO,SAAA,EAAW,WAAA,EAAa,CAAA;AAC5F,IAAA,IAAI,CAAC,OAAO,QAAA,EAAU;AAAA,EACxB;AACF","file":"chunk-P7FOHOQ3.mjs","sourcesContent":["import { z } from \"zod\"\nimport type { Bindings, RuntimeWorkflow } from \"@agentproto/workflow-runtime\"\nimport { provisionWorktreeTool, cleanupWorktreeTool, runGateTool } from \"./tools/index.js\"\nimport { worktreeProvider } from \"./provider/index.js\"\n\n/**\n * Input to the worktree-agent workflow: launch a coding agent inside a\n * fresh git worktree, gate its work, and — on approval — clean up.\n */\nexport const worktreeAgentInputSchema = z.object({\n  repoRoot: z.string().describe(\"Absolute path to the git repository root.\"),\n  slug: z.string().describe(\"Worktree/branch identifier, e.g. 'fix-flaky-test'.\"),\n  base: z.string().optional().describe(\"Ref to cut the worktree branch from. Default 'origin/main'.\"),\n  depsCmd: z.string().optional().describe(\"Command to install deps inside the worktree, e.g. 'pnpm install --prefer-offline'.\"),\n  copyGlobs: z.array(z.string()).optional().describe(\"Gitignored files to copy into the worktree, e.g. secrets.\"),\n  linkPaths: z.array(z.string()).optional().describe(\"Gitignored dirs/files symlinked from the host repo into the worktree before depsCmd (node_modules, sibling workspace repos) so the graph resolves without a full reinstall.\"),\n  task: z.string().describe(\"The prompt sent to the coding agent.\"),\n  adapter: z.string().optional().describe(\"Agent adapter slug. Default 'claude-code'.\"),\n  gateCmd: z.string().describe(\"Command run inside the worktree to check the agent's work, e.g. 'pnpm test'.\"),\n  deleteBranch: z.boolean().optional().describe(\"Delete the worktree's branch on cleanup. Default true.\"),\n})\n\nexport type WorktreeAgentInput = z.infer<typeof worktreeAgentInputSchema>\n\nconst candidates = [worktreeProvider]\n\nfunction input(b: { input: unknown }): WorktreeAgentInput {\n  return b.input as WorktreeAgentInput\n}\n\n/**\n * provision (tool) → code (AgentStep, cwd bound to provision's output) →\n * gate (tool) → on pass: approval → cleanup (tool); on fail: leave the\n * worktree in place for inspection.\n */\nexport const worktreeAgentWorkflow: RuntimeWorkflow = {\n  id: \"worktree-agent\",\n  description:\n    \"Launch a coding agent inside a fresh git worktree, gate its work with a \" +\n    \"check command, get a human ack, then clean up. On gate failure the \" +\n    \"worktree is left in place for inspection instead of being cleaned up.\",\n  steps: [\n    {\n      kind: \"tool\",\n      id: \"provision\",\n      tool: provisionWorktreeTool,\n      candidates,\n      input: (b: Bindings) => {\n        const i = input(b)\n        return {\n          repoRoot: i.repoRoot,\n          slug: i.slug,\n          base: i.base,\n          depsCmd: i.depsCmd,\n          copyGlobs: i.copyGlobs,\n          linkPaths: i.linkPaths,\n        }\n      },\n    },\n    {\n      kind: \"agent\",\n      id: \"code\",\n      adapter: (b: Bindings) => input(b).adapter ?? \"claude-code\",\n      cwd: (b: Bindings) => (b.steps.provision as { cwd: string }).cwd,\n      prompt: (b: Bindings) => input(b).task,\n    },\n    {\n      kind: \"tool\",\n      id: \"gate\",\n      tool: runGateTool,\n      candidates,\n      input: (b: Bindings) => ({\n        cwd: (b.steps.provision as { cwd: string }).cwd,\n        cmd: input(b).gateCmd,\n      }),\n    },\n    {\n      kind: \"branch\",\n      id: \"route\",\n      cond: (b: Bindings) => (b.steps.gate as { passed: boolean }).passed,\n      then: [\n        {\n          kind: \"approval\",\n          id: \"approval\",\n          prompt: () => \"Gate passed. Approve worktree cleanup?\",\n          onApprove: [\n            {\n              kind: \"tool\",\n              id: \"cleanup\",\n              tool: cleanupWorktreeTool,\n              candidates,\n              input: (b: Bindings) => ({\n                repoRoot: input(b).repoRoot,\n                cwd: (b.steps.provision as { cwd: string }).cwd,\n                branch: (b.steps.provision as { branch: string }).branch,\n                deleteBranch: input(b).deleteBranch ?? true,\n              }),\n            },\n          ],\n          onReject: [\n            {\n              kind: \"transform\",\n              id: \"held\",\n              compute: () => ({ removed: false, reason: \"cleanup_rejected\" as const }),\n            },\n          ],\n        },\n      ],\n      otherwise: [\n        {\n          kind: \"transform\",\n          id: \"gate-failed\",\n          compute: () => ({ removed: false, reason: \"gate_failed\" as const }),\n        },\n      ],\n    },\n  ],\n  output: (b: Bindings) => ({\n    cwd: (b.steps.provision as { cwd: string }).cwd,\n    branch: (b.steps.provision as { branch: string }).branch,\n    gate: b.steps.gate,\n    cleanup: b.steps.cleanup ?? b.steps.held ?? b.steps[\"gate-failed\"],\n  }),\n}\n","import {\n  HarnessClient,\n  resolveMcpUrl,\n  type ConnectHarnessOptions,\n  type SessionDescriptor,\n  type StartAgentArgs,\n  type TurnEvent,\n  type TurnResult,\n} from \"@agentproto/harness\"\nimport type { AgentSessionHost } from \"@agentproto/workflow-runtime\"\n\n/** `session_monitor`'s max accepted long-poll window (`orchestration-tools.ts`). */\nconst MAX_POLL_MS = 49_000\n\n/** The subset of `HarnessClient` the host drives — narrowed for fake-client tests. */\nexport type DaemonClient = Pick<\n  HarnessClient,\n  \"start\" | \"prompt\" | \"output\" | \"kill\" | \"waitForAny\" | \"close\"\n>\n\nexport interface DaemonAgentSessionHost extends AgentSessionHost {\n  close(): Promise<void>\n  /** Full `agent_start`, returning the raw descriptor and forwarding every\n   *  `StartAgentArgs` field (`mcpServers`, `model`, `effort`, `label`, …) —\n   *  unlike `spawn()` above (the narrow AgentStep-shaped convenience\n   *  wrapper), which only takes `cwd`/`workspaceSlug`/`stepId`. Consumers\n   *  that need finer per-turn control than the AgentStep contract provides\n   *  (e.g. `@agentproto/sandbox`'s sandbox agent-session proxy) use this\n   *  plus `prompt`/`output`/`kill`/`waitForAny` directly instead of\n   *  `spawn`/`sendPromptAndWait`. */\n  start(args: StartAgentArgs): Promise<SessionDescriptor>\n  /** Send a follow-up turn — `opts.interrupt` cancels an in-flight turn and\n   *  redirects the session onto this prompt (mirrors `agent_prompt`). */\n  prompt(sessionId: string, prompt: string, opts?: { interrupt?: boolean }): Promise<void>\n  /** Tail the ring buffer (`agent_output`). */\n  output(sessionId: string, lastN?: number): Promise<string>\n  /** SIGTERM the session (`agent_kill`). */\n  kill(sessionId: string): Promise<void>\n  /** Multiplexed long-poll (`session_monitor`) — see `HarnessClient.waitForAny`. */\n  waitForAny(sessionIds: string[], opts?: { timeoutMs?: number; event?: TurnEvent }): Promise<TurnResult>\n}\n\n/**\n * Connect to the agentproto daemon's MCP endpoint and return a real,\n * supervisable `AgentSessionHost` — every `AgentStep` becomes an `agent_start`\n * daemon session rather than a bare subprocess. Fails loudly (no silent\n * fallback) if the daemon isn't reachable.\n */\nexport async function connectDaemonAgentSessionHost(\n  opts?: ConnectHarnessOptions,\n): Promise<DaemonAgentSessionHost> {\n  const url = resolveMcpUrl(opts)\n  let client: HarnessClient\n  try {\n    client = await HarnessClient.connect({ url })\n  } catch (err) {\n    throw new Error(\n      `worktree-agent: could not reach the agentproto daemon's MCP endpoint at ${url}. ` +\n        \"Start the daemon (`agentproto daemon start`), or point at a running one via \" +\n        `AGENTPROTO_MCP_URL, before running this command.\\n` +\n        `(${err instanceof Error ? err.message : String(err)})`,\n    )\n  }\n  return makeDaemonAgentSessionHost(client)\n}\n\n/** Build the host over an already-connected client (exported for tests with a fake client). */\nexport function makeDaemonAgentSessionHost(client: DaemonClient): DaemonAgentSessionHost {\n  const sessionByStepId = new Map<string, string>()\n\n  return {\n    async spawn(adapter, opts): Promise<string> {\n      const desc = await client.start({\n        adapter,\n        ...(opts.cwd !== undefined ? { cwd: opts.cwd } : {}),\n        ...(opts.workspaceSlug !== undefined ? { workspaceSlug: opts.workspaceSlug } : {}),\n        ...(opts.stepId !== undefined ? { label: opts.stepId } : {}),\n      })\n      if (opts.stepId) sessionByStepId.set(opts.stepId, desc.id)\n      return desc.id\n    },\n\n    async sendPromptAndWait(sessionId, prompt): Promise<void> {\n      // Subscribe before sending: an extremely fast turn could otherwise settle\n      // before the wait call subscribes (same race `harness`'s `ask()` avoids).\n      const waitPromise = waitForSettled(client, sessionId)\n      await client.prompt(sessionId, prompt)\n      await waitPromise\n    },\n\n    resolveByLabel(stepId): string | undefined {\n      return sessionByStepId.get(stepId)\n    },\n\n    async start(args): Promise<SessionDescriptor> {\n      return client.start(args)\n    },\n\n    async prompt(sessionId, prompt, opts): Promise<void> {\n      await client.prompt(sessionId, prompt, opts)\n    },\n\n    async output(sessionId, lastN): Promise<string> {\n      return client.output(sessionId, lastN)\n    },\n\n    async kill(sessionId): Promise<void> {\n      await client.kill(sessionId)\n    },\n\n    async waitForAny(sessionIds, opts): Promise<TurnResult> {\n      return client.waitForAny(sessionIds, opts)\n    },\n\n    async close(): Promise<void> {\n      await client.close()\n    },\n  }\n}\n\n/**\n * `session_monitor` long-polls cap at 49s; loop past timeouts for longer\n * turns. A clean timeout comes back as `{ timedOut: true, sessionIds }` —\n * there is no `event: \"timeout\"` on the wire, `event` is only ever set on a\n * real match. Keep polling while `timedOut` is true; stop once it's\n * falsy/absent (a real turn-end/awaiting-input/exited match).\n */\nasync function waitForSettled(client: DaemonClient, sessionId: string): Promise<void> {\n  for (;;) {\n    const result = await client.waitForAny([sessionId], { event: \"any\", timeoutMs: MAX_POLL_MS })\n    if (!result.timedOut) return\n  }\n}\n"]}

package/dist/chunk-PSFICTF7.mjs

@@ -0,0 +1,3 @@
+
+//# sourceMappingURL=chunk-PSFICTF7.mjs.map
+//# sourceMappingURL=chunk-PSFICTF7.mjs.map

package/dist/chunk-PSFICTF7.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"chunk-PSFICTF7.mjs"}

package/dist/index.d.ts

@@ -0,0 +1,91 @@
+export { cleanupWorktreeTool, provisionWorktreeTool, runGateTool } from './tools/index.js';
+export { worktreeProvider } from './provider/index.js';
+import { z } from 'zod';
+import { RuntimeWorkflow, AgentSessionHost } from '@agentproto/workflow-runtime';
+import { StartAgentArgs, SessionDescriptor, TurnEvent, TurnResult, HarnessClient, ConnectHarnessOptions } from '@agentproto/harness';
+import '@agentproto/tool';
+import '@agentproto/driver';
+
+interface ExecResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+/** Run an argv (no shell — args pass through verbatim, no injection risk). */
+declare function execArgv(command: string, args: readonly string[], cwd: string): Promise<ExecResult>;
+/**
+ * Run a single command string through a shell. Callers pass `depsCmd` /
+ * `gateCmd` as a trusted, developer-authored config value (the same trust
+ * model as a CI job's `script:` line) — not untrusted end-user input.
+ */
+declare function execShell(cmd: string, cwd: string): Promise<ExecResult>;
+declare function execGit(repoRoot: string, args: readonly string[]): Promise<ExecResult>;
+
+/** Compile a `/`-separated glob (supporting `*`, `?`, `**`) into an anchored regex. */
+declare function globToRegExp(pattern: string): RegExp;
+/** Expand a glob against `root`, returning root-relative posix paths of matching files. */
+declare function expandGlob(root: string, pattern: string): Promise<string[]>;
+
+/**
+ * Input to the worktree-agent workflow: launch a coding agent inside a
+ * fresh git worktree, gate its work, and — on approval — clean up.
+ */
+declare const worktreeAgentInputSchema: z.ZodObject<{
+    repoRoot: z.ZodString;
+    slug: z.ZodString;
+    base: z.ZodOptional<z.ZodString>;
+    depsCmd: z.ZodOptional<z.ZodString>;
+    copyGlobs: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    linkPaths: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    task: z.ZodString;
+    adapter: z.ZodOptional<z.ZodString>;
+    gateCmd: z.ZodString;
+    deleteBranch: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strip>;
+type WorktreeAgentInput = z.infer<typeof worktreeAgentInputSchema>;
+/**
+ * provision (tool) → code (AgentStep, cwd bound to provision's output) →
+ * gate (tool) → on pass: approval → cleanup (tool); on fail: leave the
+ * worktree in place for inspection.
+ */
+declare const worktreeAgentWorkflow: RuntimeWorkflow;
+
+/** The subset of `HarnessClient` the host drives — narrowed for fake-client tests. */
+type DaemonClient = Pick<HarnessClient, "start" | "prompt" | "output" | "kill" | "waitForAny" | "close">;
+interface DaemonAgentSessionHost extends AgentSessionHost {
+    close(): Promise<void>;
+    /** Full `agent_start`, returning the raw descriptor and forwarding every
+     *  `StartAgentArgs` field (`mcpServers`, `model`, `effort`, `label`, …) —
+     *  unlike `spawn()` above (the narrow AgentStep-shaped convenience
+     *  wrapper), which only takes `cwd`/`workspaceSlug`/`stepId`. Consumers
+     *  that need finer per-turn control than the AgentStep contract provides
+     *  (e.g. `@agentproto/sandbox`'s sandbox agent-session proxy) use this
+     *  plus `prompt`/`output`/`kill`/`waitForAny` directly instead of
+     *  `spawn`/`sendPromptAndWait`. */
+    start(args: StartAgentArgs): Promise<SessionDescriptor>;
+    /** Send a follow-up turn — `opts.interrupt` cancels an in-flight turn and
+     *  redirects the session onto this prompt (mirrors `agent_prompt`). */
+    prompt(sessionId: string, prompt: string, opts?: {
+        interrupt?: boolean;
+    }): Promise<void>;
+    /** Tail the ring buffer (`agent_output`). */
+    output(sessionId: string, lastN?: number): Promise<string>;
+    /** SIGTERM the session (`agent_kill`). */
+    kill(sessionId: string): Promise<void>;
+    /** Multiplexed long-poll (`session_monitor`) — see `HarnessClient.waitForAny`. */
+    waitForAny(sessionIds: string[], opts?: {
+        timeoutMs?: number;
+        event?: TurnEvent;
+    }): Promise<TurnResult>;
+}
+/**
+ * Connect to the agentproto daemon's MCP endpoint and return a real,
+ * supervisable `AgentSessionHost` — every `AgentStep` becomes an `agent_start`
+ * daemon session rather than a bare subprocess. Fails loudly (no silent
+ * fallback) if the daemon isn't reachable.
+ */
+declare function connectDaemonAgentSessionHost(opts?: ConnectHarnessOptions): Promise<DaemonAgentSessionHost>;
+/** Build the host over an already-connected client (exported for tests with a fake client). */
+declare function makeDaemonAgentSessionHost(client: DaemonClient): DaemonAgentSessionHost;
+
+export { type DaemonAgentSessionHost, type DaemonClient, type ExecResult, type WorktreeAgentInput, connectDaemonAgentSessionHost, execArgv, execGit, execShell, expandGlob, globToRegExp, makeDaemonAgentSessionHost, worktreeAgentInputSchema, worktreeAgentWorkflow };

package/dist/index.mjs

@@ -0,0 +1,6 @@
+export { connectDaemonAgentSessionHost, makeDaemonAgentSessionHost, worktreeAgentInputSchema, worktreeAgentWorkflow } from './chunk-P7FOHOQ3.mjs';
+import './chunk-PSFICTF7.mjs';
+export { execArgv, execGit, execShell, expandGlob, globToRegExp, worktreeProvider } from './chunk-BBAH3VLQ.mjs';
+export { cleanupWorktreeTool, provisionWorktreeTool, runGateTool } from './chunk-FRVPZTQN.mjs';
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/provider/index.d.ts

@@ -0,0 +1,10 @@
+import * as _agentproto_driver from '@agentproto/driver';
+
+/**
+ * AIP-30 PROVIDER for the three `worktree.*` TOOL contracts. `kind: "builtin"`
+ * — runs in-process, shelling out to `git` / the caller's commands directly.
+ * No subprocess-DRIVER indirection, no network hop.
+ */
+declare const worktreeProvider: _agentproto_driver.DriverHandle;
+
+export { worktreeProvider };

package/dist/provider/index.mjs

@@ -0,0 +1,4 @@
+export { worktreeProvider } from '../chunk-BBAH3VLQ.mjs';
+import '../chunk-FRVPZTQN.mjs';
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/provider/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/dist/tools/index.d.ts

@@ -0,0 +1,46 @@
+import * as _agentproto_tool from '@agentproto/tool';
+
+/**
+ * AIP-14 contract: create a git worktree off a base ref, on its own branch,
+ * optionally installing deps and copying gitignored files (secrets) into it.
+ * Agnostic — no hardcoded package manager or env layout; both are inputs.
+ */
+declare const provisionWorktreeTool: _agentproto_tool.ToolHandle<{
+    repoRoot: string;
+    slug: string;
+    base?: string | undefined;
+    depsCmd?: string | undefined;
+    copyGlobs?: string[] | undefined;
+    linkPaths?: string[] | undefined;
+}, {
+    cwd: string;
+    branch: string;
+}, _agentproto_tool.ToolContext>;
+
+/** AIP-14 contract: remove a git worktree, optionally deleting its branch. */
+declare const cleanupWorktreeTool: _agentproto_tool.ToolHandle<{
+    repoRoot: string;
+    cwd: string;
+    branch?: string | undefined;
+    deleteBranch?: boolean | undefined;
+}, {
+    removed: true;
+}, _agentproto_tool.ToolContext>;
+
+/**
+ * AIP-14 contract: run a caller-provided gate/check command inside a
+ * directory (typically a provisioned worktree) and report pass/fail.
+ * `cmd` is a trusted, developer-authored config value (same trust model as
+ * a CI job's `script:` line), run through a shell so it may include flags.
+ */
+declare const runGateTool: _agentproto_tool.ToolHandle<{
+    cwd: string;
+    cmd: string;
+}, {
+    passed: boolean;
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}, _agentproto_tool.ToolContext>;
+
+export { cleanupWorktreeTool, provisionWorktreeTool, runGateTool };

package/dist/tools/index.mjs

@@ -0,0 +1,4 @@
+import '../chunk-PSFICTF7.mjs';
+export { cleanupWorktreeTool, provisionWorktreeTool, runGateTool } from '../chunk-FRVPZTQN.mjs';
+//# sourceMappingURL=index.mjs.map
+//# sourceMappingURL=index.mjs.map

package/dist/tools/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"index.mjs"}

package/package.json

@@ -0,0 +1,81 @@
+{
+  "name": "@agentproto/worktree",
+  "version": "0.2.0",
+  "description": "AIP-14 TOOL contracts + builtin AIP-30 PROVIDER for provisioning, gating, and cleaning up a git worktree — the primitive an AgentStep binds its `cwd` to for a launch-agent-in-a-worktree workflow.",
+  "keywords": [
+    "agentproto",
+    "aip-14",
+    "aip-30",
+    "worktree",
+    "git",
+    "workflow",
+    "open-standard",
+    "agentic"
+  ],
+  "homepage": "https://agentproto.sh",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/agentproto/ts",
+    "directory": "packages/worktree"
+  },
+  "bugs": {
+    "url": "https://github.com/agentproto/ts/issues"
+  },
+  "license": "MIT",
+  "type": "module",
+  "main": "dist/index.mjs",
+  "module": "dist/index.mjs",
+  "types": "dist/index.d.ts",
+  "bin": {
+    "worktree-agent": "dist/bin/worktree-agent.mjs"
+  },
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.mjs",
+      "default": "./dist/index.mjs"
+    },
+    "./tools": {
+      "types": "./dist/tools/index.d.ts",
+      "import": "./dist/tools/index.mjs",
+      "default": "./dist/tools/index.mjs"
+    },
+    "./provider": {
+      "types": "./dist/provider/index.d.ts",
+      "import": "./dist/provider/index.mjs",
+      "default": "./dist/provider/index.mjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "zod": "^4.4.3",
+    "@agentproto/harness": "0.2.0",
+    "@agentproto/driver": "0.1.2",
+    "@agentproto/tool": "0.2.0",
+    "@agentproto/workflow-runtime": "0.3.0"
+  },
+  "devDependencies": {
+    "@types/node": "^25.6.2",
+    "tsup": "^8.5.1",
+    "typescript": "^5.9.3",
+    "vitest": "^3.2.4",
+    "@agentproto/tooling": "0.1.0-alpha.0"
+  },
+  "scripts": {
+    "dev": "tsup --watch",
+    "build": "tsup",
+    "clean": "rm -rf dist",
+    "check-types": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  }
+}