@aipper/aiws 0.0.28 → 0.0.30

package/src/commands/hooks-status.js

@@ -1,95 +0,0 @@
-import path from "node:path";
-import fs from "node:fs/promises";
-import { resolveWorkspaceRoot } from "../workspace.js";
-import { runCommand } from "../exec.js";
-import { pathExists } from "../fs.js";
-import { UserError } from "../errors.js";
-
-/**
- * @param {string} absPath
- */
-async function resolveGitRoot(absPath) {
-  let res;
-  try {
-    res = await runCommand("git", ["rev-parse", "--show-toplevel"], { cwd: absPath });
-  } catch (e) {
-    throw new UserError("git is required for hooks commands.", { details: e instanceof Error ? e.message : String(e) });
-  }
-  if (res.code !== 0) {
-    throw new UserError("Not a git repository.", { details: res.stderr || res.stdout });
-  }
-  const root = String(res.stdout || "").trim();
-  if (!root) throw new UserError("Failed to resolve git repository root.");
-  return root;
-}
-
-/**
- * @param {string} gitRoot
- * @param {string} key
- */
-async function readGitConfig(gitRoot, key) {
-  const res = await runCommand("git", ["config", "--get", key], { cwd: gitRoot });
-  if (res.code !== 0) return "";
-  return String(res.stdout || "").trim();
-}
-
-/**
- * @param {fs.Stats} st
- */
-function isExecutable(st) {
-  return (st.mode & 0o111) !== 0;
-}
-
-/**
- * @param {{ targetPath: string }} options
- */
-export async function hooksStatusCommand(options) {
-  const workspaceRoot = await resolveWorkspaceRoot(options.targetPath, { create: false });
-  const gitRoot = await resolveGitRoot(workspaceRoot);
-
-  const hooksPath = await readGitConfig(gitRoot, "core.hooksPath");
-  const normalizedHooksPath = hooksPath.replace(/[\\/]+$/, "");
-
-  const githooksDir = path.join(gitRoot, ".githooks");
-  const commitMsg = path.join(githooksDir, "commit-msg");
-  const preCommit = path.join(githooksDir, "pre-commit");
-  const prePush = path.join(githooksDir, "pre-push");
-
-  const githooksExists = await pathExists(githooksDir);
-  const commitMsgExists = await pathExists(commitMsg);
-  const preCommitExists = await pathExists(preCommit);
-  const prePushExists = await pathExists(prePush);
-
-  let commitMsgExec = false;
-  let preCommitExec = false;
-  let prePushExec = false;
-  if (commitMsgExists) {
-    const st = await fs.stat(commitMsg);
-    commitMsgExec = isExecutable(st);
-  }
-  if (preCommitExists) {
-    const st = await fs.stat(preCommit);
-    preCommitExec = isExecutable(st);
-  }
-  if (prePushExists) {
-    const st = await fs.stat(prePush);
-    prePushExec = isExecutable(st);
-  }
-
-  console.log(`✓ aiws hooks status: ${gitRoot}`);
-  console.log(`core.hooksPath: ${hooksPath ? hooksPath : "(default: .git/hooks)"}`);
-  console.log(`.githooks/: ${githooksExists ? "ok" : "missing"}`);
-  console.log(`.githooks/commit-msg: ${commitMsgExists ? (commitMsgExec ? "ok" : "not-executable") : "missing"}`);
-  console.log(`.githooks/pre-commit: ${preCommitExists ? (preCommitExec ? "ok" : "not-executable") : "missing"}`);
-  console.log(`.githooks/pre-push: ${prePushExists ? (prePushExec ? "ok" : "not-executable") : "missing"}`);
-
-  const enabled = normalizedHooksPath === ".githooks";
-  if (!enabled) {
-    console.log("Next: aiws hooks install .");
-    return;
-  }
-  if (!githooksExists || !commitMsgExists || !preCommitExists || !prePushExists || !commitMsgExec || !preCommitExec || !prePushExec) {
-    console.log("Next: aiws hooks install .");
-    return;
-  }
-}

package/src/commands/init.js

@@ -1,93 +0,0 @@
-import path from "node:path";
-import fs from "node:fs/promises";
-import { loadTemplate } from "../spec.js";
-import { expandManifestEntries, copyTemplateFileToWorkspace, applyManagedBlocksFromTemplate } from "../template.js";
-import { loadAiwsPackage } from "../aiws-package.js";
-import { writeWorkspaceManifest } from "../manifest.js";
-import { resolveWorkspaceRoot } from "../workspace.js";
-import { joinRel, normalizeRel } from "../path-utils.js";
-import { pathExists } from "../fs.js";
-import { BackupSession } from "../backup.js";
-
-/**
- * @param {{ targetPath: string, templateId: string }} options
- */
-export async function initCommand(options) {
-  const workspaceRoot = await resolveWorkspaceRoot(options.targetPath, { create: true });
-  const tpl = await loadTemplate(options.templateId);
-  const aiws = await loadAiwsPackage();
-
-  const defaults = tpl.manifest.defaults || {};
-  const includeOptional = defaults.include_optional !== false;
-  const tools = Array.isArray(defaults.tools) ? defaults.tools.map(String) : ["claude", "opencode", "codex"];
-
-  const required = await expandManifestEntries(tpl.templateDir, tpl.manifest.required || []);
-  const optional = includeOptional ? await expandManifestEntries(tpl.templateDir, tpl.manifest.optional || []) : [];
-  const allFiles = Array.from(new Set([...required, ...optional]));
-
-  const update = tpl.manifest.update || {};
-  const replaceFiles = new Set((update.replace_file || []).map(normalizeRel));
-  const managedBlocks = update.managed_blocks && typeof update.managed_blocks === "object" ? update.managed_blocks : {};
-
-  // If we are overwriting existing files, take a backup for rollback.
-  const backup = new BackupSession({ workspaceRoot, operation: "init" });
-  await backup.recordFile(".aiws/manifest.json");
-  for (const f of replaceFiles) {
-    if (f && f !== ".aiws/manifest.json") await backup.recordFile(f);
-  }
-  for (const f of Object.keys(managedBlocks)) await backup.recordFile(f);
-  await backup.finalize({ extra: { template_id: tpl.templateId } });
-
-  // Ensure .aiws directory (manifest will be generated at the end)
-  await fs.mkdir(path.join(workspaceRoot, ".aiws"), { recursive: true });
-
-  for (const rel of allFiles) {
-    const r = normalizeRel(rel);
-    if (!r) continue;
-    if (r === ".aiws/manifest.json") {
-      // Always generated, never copied from template.
-      continue;
-    }
-
-    if (replaceFiles.has(r)) {
-      await copyTemplateFileToWorkspace({
-        templateDir: tpl.templateDir,
-        workspaceRoot,
-        relPosix: r,
-        chmod: r.startsWith(".githooks/") ? 0o755 : undefined,
-      });
-      continue;
-    }
-
-    if (Object.prototype.hasOwnProperty.call(managedBlocks, r)) {
-      const blockIds = Array.isArray(managedBlocks[r]) ? managedBlocks[r].map(String) : [];
-      await applyManagedBlocksFromTemplate({
-        templateDir: tpl.templateDir,
-        workspaceRoot,
-        fileRel: r,
-        blockIds,
-        insertIfMissing: true,
-      });
-      continue;
-    }
-
-    // unmanaged: only create if missing
-    const dest = joinRel(workspaceRoot, r);
-    if (await pathExists(dest)) continue;
-    await copyTemplateFileToWorkspace({ templateDir: tpl.templateDir, workspaceRoot, relPosix: r });
-  }
-
-  const now = new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
-  await writeWorkspaceManifest({
-    workspaceRoot,
-    templateId: tpl.templateId,
-    specVersion: tpl.specVersion,
-    aiwsVersion: aiws.version,
-    installedAt: now,
-    updatedAt: now,
-    tools,
-    templateManifest: tpl.manifest,
-  });
-
-  console.log(`✓ aiws init: ${workspaceRoot} (template=${tpl.templateId})`);
-}

package/src/commands/opencode-status.js

@@ -1,61 +0,0 @@
-import { resolveWorkspaceRoot } from "../workspace.js";
-import { detectOpenCodeEnvironment } from "../opencode-env.js";
-
-/**
- * @param {{ targetPath: string }} options
- */
-export async function opencodeStatusCommand(options) {
-  const workspaceRoot = await resolveWorkspaceRoot(options.targetPath, { create: false });
-  const env = await detectOpenCodeEnvironment(workspaceRoot);
-
-  console.log(`✓ aiws opencode status: ${workspaceRoot}`);
-  console.log(`.opencode/: ${env.opencodeDirExists ? "ok" : "missing"}`);
-  console.log(`mode: ${env.mode}`);
-  console.log(
-    `oMo config: ${
-      env.configStatus === "loaded"
-        ? `${env.rel.configPath} (ok)`
-        : env.configStatus === "invalid"
-          ? `${env.rel.configPath} (invalid JSON: ${env.configError})`
-          : "missing"
-    }`,
-  );
-  console.log(`oMo example: ${env.exampleExists ? `${env.rel.examplePath} (present)` : "missing"}`);
-  console.log(`recommended_agents_ready: ${env.recommendedAgentsReady}`);
-  console.log(`enabled_agents: ${env.enabledAgents.length > 0 ? env.enabledAgents.join(", ") : "(none)"}`);
-
-  const planner = env.agents["planner-sisyphus"];
-  const librarian = env.agents.librarian;
-  const explore = env.agents.explore;
-  const oracle = env.agents.oracle;
-  console.log(
-    `aiws_roles: planner=${planner.enabled ? "planner-sisyphus" : "missing"}, explorer=${[
-      explore.enabled ? "explore" : "",
-      librarian.enabled ? "librarian" : "",
-    ]
-      .filter(Boolean)
-      .join("+") || "missing"}, reviewer=${oracle.enabled ? "oracle" : "missing"}, integrator=current-agent`,
-  );
-
-  if (planner.present) {
-    console.log(`planner-sisyphus.replace_plan: ${planner.replacePlan === null ? "(unset)" : String(planner.replacePlan)}`);
-  }
-
-  if (env.configStatus === "invalid") {
-    console.log(`Next: 修复 ${env.rel.configPath} 的 JSON，然后重新运行 aiws opencode status .`);
-    return;
-  }
-  if (!env.configExists && env.exampleExists) {
-    console.log(`Next: 如需启用 oMo 优先模式，可复制 ${env.rel.examplePath} -> ${env.rel.configPath} 后按项目调整 agents。`);
-    return;
-  }
-  if (env.mode === "oMo-enabled" && !env.recommendedAgentsReady) {
-    console.log("Next: 补齐 planner-sisyphus / librarian / explore / oracle，或接受 fallback 到 standard-opencode。");
-    return;
-  }
-  if (env.mode === "oMo-enabled") {
-    console.log("Next: 运行 /using-aiws 或 /ws-preflight，确认技能路由输出 OpenCode mode: oMo-enabled。");
-    return;
-  }
-  console.log("Next: 当前按 standard-opencode 运行；如需多 agent 优先委托，可启用 oh-my-opencode 项目配置。");
-}

package/src/commands/rollback.js

@@ -1,13 +0,0 @@
-import { resolveWorkspaceRoot } from "../workspace.js";
-import { resolveBackupRoot, rollbackFromBackup } from "../backup.js";
-
-/**
- * @param {{ targetPath: string, stamp: string }} options
- */
-export async function rollbackCommand(options) {
-  const workspaceRoot = await resolveWorkspaceRoot(options.targetPath, { create: false });
-  const backupRoot = await resolveBackupRoot(workspaceRoot, options.stamp);
-  await rollbackFromBackup(workspaceRoot, backupRoot);
-  console.log(`✓ aiws rollback: ${workspaceRoot} (${options.stamp})`);
-}
-

package/src/commands/update.js

@@ -1,133 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import { loadTemplate } from "../spec.js";
-import { loadAiwsPackage } from "../aiws-package.js";
-import { resolveWorkspaceRoot } from "../workspace.js";
-import { readText, pathExists } from "../fs.js";
-import { UserError } from "../errors.js";
-import { normalizeNewlines } from "../hash.js";
-import { findManagedBlock } from "../managed-blocks.js";
-import { BackupSession } from "../backup.js";
-import { normalizeRel, joinRel } from "../path-utils.js";
-import { copyTemplateFileToWorkspace, applyManagedBlocksFromTemplate } from "../template.js";
-import { writeWorkspaceManifest } from "../manifest.js";
-
-/**
- * @param {{ targetPath: string }} options
- */
-export async function updateCommand(options) {
-  const workspaceRoot = await resolveWorkspaceRoot(options.targetPath, { create: false });
-  const aiws = await loadAiwsPackage();
-
-  const manifestPath = path.join(workspaceRoot, ".aiws", "manifest.json");
-  if (!(await pathExists(manifestPath))) {
-    throw new UserError("Missing .aiws/manifest.json. Run `aiws init` first.");
-  }
-  const stored = JSON.parse(await readText(manifestPath));
-  const templateId = String(stored.template_id || "workspace");
-  const tpl = await loadTemplate(templateId);
-  const storedManagedByPath = new Map(
-    (Array.isArray(stored.managed) ? stored.managed : [])
-      .filter((entry) => entry && typeof entry === "object")
-      .map((entry) => [normalizeRel(String(entry.path || "")), entry]),
-  );
-  const defaults = tpl.manifest.defaults || {};
-  const defaultTools = Array.isArray(defaults.tools) ? defaults.tools.map(String) : ["claude", "opencode", "codex"];
-  const allowedTools = new Set(defaultTools);
-
-  const update = tpl.manifest.update || {};
-  const replaceFiles = (update.replace_file || []).map(normalizeRel);
-  const managedBlocks = update.managed_blocks && typeof update.managed_blocks === "object" ? update.managed_blocks : {};
-
-  // Preflight: existing managed-block files must be intact.
-  // Missing files that were not previously managed are treated as newly introduced
-  // template surfaces and will be created during applyManagedBlocksFromTemplate.
-  for (const [fileRelRaw, blockIdsRaw] of Object.entries(managedBlocks)) {
-    const fileRel = normalizeRel(fileRelRaw);
-    const abs = joinRel(workspaceRoot, fileRel);
-    const hadManagedBefore = storedManagedByPath.has(fileRel);
-    if (!(await pathExists(abs))) {
-      if (hadManagedBefore) {
-        throw new UserError("Managed block file missing; run `aiws init` or restore the file.", { details: `Missing: ${fileRel}` });
-      }
-      continue;
-    }
-    const text = normalizeNewlines(await readText(abs));
-    const ids = Array.isArray(blockIdsRaw) ? blockIdsRaw.map(String) : [];
-    for (const id of ids) {
-      if (!findManagedBlock(text, id)) {
-        throw new UserError("Managed block markers are missing or broken; refusing to update.", {
-          details: `File: ${fileRel}\nBlock: ${id}\nHint: re-run \`aiws init\` or repair markers manually.`,
-        });
-      }
-    }
-  }
-
-  const removeFiles = (update.remove || []).map(normalizeRel);
-
-  const backup = new BackupSession({ workspaceRoot, operation: "update" });
-  // Backup every file we might touch (including missing, for rollback deletions).
-  await backup.recordFile(".aiws/manifest.json", { recordMissing: true });
-  for (const f of replaceFiles) await backup.recordFile(f, { recordMissing: true });
-  for (const f of Object.keys(managedBlocks)) await backup.recordFile(f, { recordMissing: true });
-  for (const f of removeFiles) await backup.recordFile(f);
-  await backup.finalize({ extra: { template_id: tpl.templateId } });
-
-  // Remove deprecated files (backed up above; restorable via `aiws rollback`).
-  let removedCount = 0;
-  for (const rel of removeFiles) {
-    if (!rel) continue;
-    const abs = joinRel(workspaceRoot, rel);
-    if (await pathExists(abs)) {
-      await fs.rm(abs, { force: true });
-      removedCount++;
-      // Remove empty parent directory (safe: rmdir fails on non-empty).
-      try { await fs.rmdir(path.dirname(abs)); } catch { /* non-empty or gone */ }
-    }
-  }
-  if (removedCount > 0) {
-    console.log(`  removed ${removedCount} deprecated file(s)`);
-  }
-
-  // Replace files (except manifest, generated later).
-  for (const rel of replaceFiles) {
-    if (!rel || rel === ".aiws/manifest.json") continue;
-    await copyTemplateFileToWorkspace({
-      templateDir: tpl.templateDir,
-      workspaceRoot,
-      relPosix: rel,
-      chmod: rel.startsWith(".githooks/") ? 0o755 : undefined,
-    });
-  }
-
-  // Update managed blocks only (do not insert missing blocks).
-  for (const [fileRelRaw, blockIdsRaw] of Object.entries(managedBlocks)) {
-    const fileRel = normalizeRel(fileRelRaw);
-    const ids = Array.isArray(blockIdsRaw) ? blockIdsRaw.map(String) : [];
-    await applyManagedBlocksFromTemplate({
-      templateDir: tpl.templateDir,
-      workspaceRoot,
-      fileRel,
-      blockIds: ids,
-      insertIfMissing: false,
-    });
-  }
-
-  const now = new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
-  const installedAt = String(stored.installed_at || now);
-  const storedTools = Array.isArray(stored.tools) ? stored.tools.map(String).filter((tool) => allowedTools.has(tool)) : [];
-  const tools = storedTools.length > 0 ? storedTools : defaultTools;
-
-  await writeWorkspaceManifest({
-    workspaceRoot,
-    templateId: tpl.templateId,
-    specVersion: tpl.specVersion,
-    aiwsVersion: aiws.version,
-    installedAt,
-    updatedAt: now,
-    tools,
-    templateManifest: tpl.manifest,
-  });
-
-  console.log(`✓ aiws update: ${workspaceRoot}`);
-}

package/src/commands/validate.js

@@ -1,222 +0,0 @@
-import path from "node:path";
-import { loadTemplate } from "../spec.js";
-import { resolveWorkspaceRoot } from "../workspace.js";
-import { ensureDir, pathExists, readText, writeText } from "../fs.js";
-import { UserError } from "../errors.js";
-import { validateDrift } from "../manifest.js";
-import { runCommand } from "../exec.js";
-import { expandManifestEntries } from "../template.js";
-import { loadAiwsPackage } from "../aiws-package.js";
-
-/**
- * Enforce deterministic submodule branch policy:
- * - If `.gitmodules` exists and declares submodules, each submodule must declare `submodule.<name>.branch`.
- * - This avoids guessing which branch to attach/push for workflows like ws-pull/ws-finish.
- *
- * @param {string} workspaceRoot
- */
-async function validateSubmoduleBranchPolicy(workspaceRoot) {
-  const gitmodules = path.join(workspaceRoot, ".gitmodules");
-  if (!(await pathExists(gitmodules))) return;
-
-  const list = await runCommand("git", ["config", "--file", ".gitmodules", "--get-regexp", "^submodule\\..*\\.path$"], {
-    cwd: workspaceRoot,
-  });
-  if (list.code !== 0) {
-    // `.gitmodules` exists but no submodule path entries: treat as ok.
-    return;
-  }
-
-  /** @type {Array<{ name: string, path: string }>} */
-  const subs = [];
-  for (const line of String(list.stdout || "").split("\n")) {
-    const t = line.trim();
-    if (!t) continue;
-    const idx = t.indexOf(" ");
-    if (idx <= 0) continue;
-    const key = t.slice(0, idx).trim();
-    const subPath = t.slice(idx + 1).trim();
-    const m = key.match(/^submodule\.(.+)\.path$/);
-    if (!m) continue;
-    const name = m[1] || "";
-    if (!name || !subPath) continue;
-    subs.push({ name, path: subPath });
-  }
-  if (subs.length === 0) return;
-
-  /** @type {Array<{ name: string, path: string }>} */
-  const missing = [];
-  for (const s of subs) {
-    const br = await runCommand("git", ["config", "--file", ".gitmodules", "--get", `submodule.${s.name}.branch`], {
-      cwd: workspaceRoot,
-    });
-    if (br.code !== 0 || !String(br.stdout || "").trim()) {
-      missing.push(s);
-    }
-  }
-
-  if (missing.length > 0) {
-    const lines = missing.map((m) => `- ${m.name} (${m.path}): missing submodule.${m.name}.branch`);
-    const hints = missing
-      .slice(0, 8)
-      .map((m) => `git submodule set-branch --branch main ${m.path}`)
-      .join("\n");
-    throw new UserError("Submodule branch policy failed: missing `.gitmodules` branch config.", {
-      details:
-        `${lines.join("\n")}\n\n` +
-        "Fix:\n" +
-        "- Run `ws-submodule-setup` (recommended), or set per submodule:\n" +
-        `${hints}\n\n` +
-        "Then commit `.gitmodules` in the superproject.",
-    });
-  }
-}
-
-/**
- * @param {string | undefined} v
- */
-function envFlag(v) {
-  const s = String(v || "")
-    .trim()
-    .toLowerCase();
-  return s === "1" || s === "true" || s === "yes" || s === "y" || s === "on";
-}
-
-/**
- * @returns {string} e.g. 20260204-140026Z
- */
-function nowStampUtc() {
-  const d = new Date();
-  const y = String(d.getUTCFullYear());
-  const m = String(d.getUTCMonth() + 1).padStart(2, "0");
-  const day = String(d.getUTCDate()).padStart(2, "0");
-  const hh = String(d.getUTCHours()).padStart(2, "0");
-  const mm = String(d.getUTCMinutes()).padStart(2, "0");
-  const ss = String(d.getUTCSeconds()).padStart(2, "0");
-  const ms = String(d.getUTCMilliseconds()).padStart(3, "0");
-  return `${y}${m}${day}-${hh}${mm}${ss}${ms}Z`;
-}
-
-/**
- * @returns {string} e.g. 2026-01-28T14:00:26Z
- */
-function nowIsoUtc() {
-  return new Date().toISOString().replace(/\.\d{3}Z$/, "Z");
-}
-
-/**
- * @param {any} error
- * @returns {{ name: string, message: string, details?: string } | null}
- */
-function serializeError(error) {
-  if (!error) return null;
-  if (error instanceof UserError) {
-    return { name: error.name, message: error.message, details: error.details };
-  }
-  if (error instanceof Error) {
-    return { name: error.name, message: error.message };
-  }
-  return { name: "Error", message: String(error) };
-}
-
-/**
- * @param {{ targetPath: string, stamp?: boolean }} options
- */
-export async function validateCommand(options) {
-  const stampEnabled = options.stamp === true || envFlag(process.env.AIWS_VALIDATE_STAMP);
-  const startedAt = nowIsoUtc();
-  const startedTs = Math.floor(Date.now() / 1000);
-  let workspaceRoot = "";
-  let templateId = "";
-  let specVersion = "";
-  let aiwsVersion = "";
-  let status = /** @type {"ok" | "error"} */ ("ok");
-  let exitCode = 0;
-  let err = null;
-  let stampPath = "";
-
-  try {
-    workspaceRoot = await resolveWorkspaceRoot(options.targetPath, { create: false });
-    const aiws = await loadAiwsPackage();
-    aiwsVersion = aiws.version;
-
-    const manifestPath = path.join(workspaceRoot, ".aiws", "manifest.json");
-    if (!(await pathExists(manifestPath))) {
-      throw new UserError("Missing .aiws/manifest.json. Run `aiws init` first.");
-    }
-    const stored = JSON.parse(await readText(manifestPath));
-    templateId = String(stored.template_id || "workspace");
-    const tpl = await loadTemplate(templateId);
-    specVersion = tpl.specVersion;
-
-    // Required files/dirs.
-    const required = await expandManifestEntries(tpl.templateDir, tpl.manifest.required || []);
-    /** @type {string[]} */
-    const missing = [];
-    for (const rel of required) {
-      const abs = path.join(workspaceRoot, ...String(rel).split("/"));
-      if (!(await pathExists(abs))) missing.push(rel);
-    }
-    if (missing.length > 0) {
-      throw new UserError("Missing required files.", { details: missing.join("\n") });
-    }
-
-    // Drift detection.
-    await validateDrift({ workspaceRoot, storedManifest: stored, templateManifest: tpl.manifest });
-
-    // Submodule branch policy (deterministic workflow; avoids guessing target branches).
-    await validateSubmoduleBranchPolicy(workspaceRoot);
-
-    // python3 gate.
-    const py = await runCommand("python3", ["--version"], { cwd: workspaceRoot });
-    if (py.code !== 0) {
-      throw new UserError("python3 is required for validate.", { details: py.stderr || py.stdout });
-    }
-
-    // Required gate scripts.
-    const wsCheck = await runCommand("python3", ["tools/ws_change_check.py", "--strict"], { cwd: workspaceRoot });
-    if (wsCheck.code !== 0) {
-      throw new UserError("change gate failed.", { details: wsCheck.stderr || wsCheck.stdout });
-    }
-    const reqCheck = await runCommand("python3", ["tools/requirements_contract.py", "validate"], { cwd: workspaceRoot });
-    if (reqCheck.code !== 0) {
-      throw new UserError("requirements contract gate failed.", { details: reqCheck.stderr || reqCheck.stdout });
-    }
-
-    console.log(`✓ aiws validate: ${workspaceRoot}`);
-  } catch (error) {
-    status = "error";
-    err = serializeError(error);
-    if (error instanceof UserError) {
-      exitCode = error.exitCode;
-    } else {
-      exitCode = 1;
-    }
-    throw error;
-  } finally {
-    if (stampEnabled && workspaceRoot) {
-      try {
-        const stampDir = path.join(workspaceRoot, ".agentdocs", "tmp", "aiws-validate");
-        await ensureDir(stampDir);
-        stampPath = path.join(stampDir, `${nowStampUtc()}.json`);
-        const stamp = {
-          timestamp: startedTs,
-          ws_root: workspaceRoot,
-          template_id: templateId || null,
-          aiws_version: aiwsVersion || null,
-          spec_version: specVersion || null,
-          started_at: startedAt,
-          finished_at: nowIsoUtc(),
-          status,
-          exit_code: status === "ok" ? 0 : exitCode || 1,
-          error: err,
-          note: "aiws validate stamp; does not include full stdout/stderr; do not put secrets in validation output.",
-        };
-        await writeText(stampPath, JSON.stringify(stamp, null, 2) + "\n");
-        console.log(`stamp: ${path.relative(workspaceRoot, stampPath)}`);
-      } catch (e) {
-        console.error(`warn: failed to write validate stamp: ${e instanceof Error ? e.message : String(e)}`);
-      }
-    }
-  }
-}