@aperant/framework 0.6.2

package/dist/cli/task/ids.mjs

@@ -0,0 +1,55 @@
+/**
+ * ids.mjs — task-id generation + path helpers (C29).
+ */
+import { join, resolve } from 'node:path';
+/**
+ * Format a date according to user preferences.
+ * Supported formats: YY-MM-DD (default, sorts chronologically), DD-MM-YY, MM-DD-YY
+ * Uses hyphens as separators for filesystem safety.
+ */
+export function formatDateForTask(dateFormat) {
+    const now = new Date();
+    const yy = String(now.getFullYear()).slice(2);
+    const mm = String(now.getMonth() + 1).padStart(2, '0');
+    const dd = String(now.getDate()).padStart(2, '0');
+    switch (dateFormat) {
+        case 'DD-MM-YY':
+            return `${dd}-${mm}-${yy}`;
+        case 'MM-DD-YY':
+            return `${mm}-${dd}-${yy}`;
+        case 'YY-MM-DD':
+        default:
+            return `${yy}-${mm}-${dd}`;
+    }
+}
+/**
+ * Generate a short task ID from description + timestamp.
+ * Format: {date}_{slug}-{4-char-hash}
+ * Date comes first so tasks sort chronologically in file explorers.
+ * Date format is configurable via preferences.date_format in config.
+ */
+export function generateTaskId(description, config) {
+    const slug = description
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-|-$/g, '')
+        .slice(0, 40);
+    const dateFormat = config?.preferences?.date_format || 'YY-MM-DD';
+    const date = formatDateForTask(dateFormat);
+    const hash = Math.random().toString(36).slice(2, 6);
+    return `${date}_${slug}-${hash}`;
+}
+export function getTaskDir(projectDir, taskId) {
+    return join(resolve(projectDir), '.aperant', 'tasks', taskId);
+}
+/**
+ * C28 — scope-aware proof directory.
+ * Returns `.aperant/proof/{scope}/{task-id}/` for proof evidence that belongs
+ * to a specific task. Callers pass the task's scope (from state.active_tasks)
+ * so unseeded tasks default cleanly.
+ */
+export function getProofDir(projectDir, scope, taskId) {
+    const resolvedScope = (scope || 'project').trim() || 'project';
+    return join(resolve(projectDir), '.aperant', 'proof', resolvedScope, taskId);
+}
+//# sourceMappingURL=ids.mjs.map

package/dist/cli/task/ids.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"ids.mjs","sourceRoot":"","sources":["../../../src/cli/task/ids.mjs"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAEzC;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,UAAU;IAC3C,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAA;IACtB,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAC7C,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACtD,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;IACjD,QAAQ,UAAU,EAAE,CAAC;QACpB,KAAK,UAAU;YACd,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAA;QAC3B,KAAK,UAAU;YACd,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAA;QAC3B,KAAK,UAAU,CAAC;QAChB;YACC,OAAO,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAA;IAC5B,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,WAAW,EAAE,MAAM;IACjD,MAAM,IAAI,GAAG,WAAW;SACtB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACd,MAAM,UAAU,GAAG,MAAM,EAAE,WAAW,EAAE,WAAW,IAAI,UAAU,CAAA;IACjE,MAAM,IAAI,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAA;IAC1C,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IACnD,OAAO,GAAG,IAAI,IAAI,IAAI,IAAI,IAAI,EAAE,CAAA;AACjC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,UAAU,EAAE,MAAM;IAC5C,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,UAAU,EAAE,KAAK,EAAE,MAAM;IACpD,MAAM,aAAa,GAAG,CAAC,KAAK,IAAI,SAAS,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAA;IAC9D,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,CAAA;AAC7E,CAAC"}

package/dist/cli/task/index-md.d.mts

@@ -0,0 +1,6 @@
+/**
+ * Regenerate .aperant/tasks/INDEX.md from state.json.
+ * One line per task — lightweight project task management view.
+ */
+export function regenerateTaskIndex(targetDir: any): void;
+//# sourceMappingURL=index-md.d.mts.map

package/dist/cli/task/index-md.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-md.d.mts","sourceRoot":"","sources":["../../../src/cli/task/index-md.mjs"],"names":[],"mappings":"AASA;;;GAGG;AACH,0DA4EC"}

package/dist/cli/task/index-md.mjs

@@ -0,0 +1,85 @@
+/**
+ * index-md.mjs — .aperant/tasks/INDEX.md regenerator (C29).
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { withFileLock } from '../util/fs-lock.mjs';
+import { formatDateDisplay, formatTimeDisplay } from './format.mjs';
+/**
+ * Regenerate .aperant/tasks/INDEX.md from state.json.
+ * One line per task — lightweight project task management view.
+ */
+export function regenerateTaskIndex(targetDir) {
+    const statePath = join(targetDir, '.aperant', 'state.json');
+    if (!existsSync(statePath))
+        return;
+    const configPath = join(targetDir, '.aperant', 'config.json');
+    const config = existsSync(configPath) ? JSON.parse(readFileSync(configPath, 'utf-8')) : {};
+    if (config.preferences?.task_index === false)
+        return;
+    const state = JSON.parse(readFileSync(statePath, 'utf-8'));
+    const timeFormat = config.preferences?.time_format || '24h';
+    const active = state.active_tasks ? Object.values(state.active_tasks) : [];
+    const completed = (state.completed_tasks || []).slice().reverse();
+    // C28 — group rows by scope. Scope order: the default `project` scope
+    // first, everything else alphabetical. Within each scope: active rows
+    // first (by creation time desc), then completed rows (most recent first).
+    const scopeSet = new Set();
+    for (const t of active)
+        scopeSet.add(t?.scope || 'project');
+    for (const t of completed)
+        scopeSet.add(t?.scope || 'project');
+    const scopeOrder = (a, b) => {
+        if (a === b)
+            return 0;
+        if (a === 'project')
+            return -1;
+        if (b === 'project')
+            return 1;
+        return a.localeCompare(b);
+    };
+    const scopes = Array.from(scopeSet).sort(scopeOrder);
+    if (scopes.length === 0)
+        scopes.push('project');
+    const lines = ['# Task Index', ''];
+    const totalCount = active.length + completed.length;
+    if (totalCount === 0) {
+        lines.push('| Status | Date | Time | Task | ID |');
+        lines.push('|--------|------|------|------|----|');
+        lines.push('| | | | *No tasks yet* | |');
+    }
+    else {
+        for (const scope of scopes) {
+            const scopeActive = active.filter((t) => (t?.scope || 'project') === scope);
+            const scopeCompleted = completed.filter((t) => (t?.scope || 'project') === scope);
+            if (scopeActive.length === 0 && scopeCompleted.length === 0)
+                continue;
+            lines.push(`## Scope: ${scope}`);
+            lines.push('');
+            lines.push('| Status | Date | Time | Task | ID |');
+            lines.push('|--------|------|------|------|----|');
+            for (const t of scopeActive) {
+                const d = new Date(t.created_at);
+                const date = formatDateDisplay(d, config.preferences?.date_format);
+                const time = formatTimeDisplay(d, timeFormat);
+                lines.push(`| \u25b6 active | ${date} | ${time} | ${t.description} | \`${t.id}\` |`);
+            }
+            for (const t of scopeCompleted) {
+                const d = new Date(t.completed_at);
+                const date = formatDateDisplay(d, config.preferences?.date_format);
+                const time = formatTimeDisplay(d, timeFormat);
+                const verdict = t.qa_verdict ? ` (${t.qa_verdict})` : '';
+                lines.push(`| \u2713 done${verdict} | ${date} | ${time} | ${t.description} | \`${t.id}\` |`);
+            }
+            lines.push('');
+        }
+    }
+    lines.push('', `*Auto-generated by apt-tools \u2014 ${new Date().toISOString()}*`, '');
+    const indexPath = join(targetDir, '.aperant', 'tasks', 'INDEX.md');
+    mkdirSync(join(targetDir, '.aperant', 'tasks'), { recursive: true });
+    // Lock-protected — C28 R4. Concurrent regenerators must not interleave.
+    withFileLock(indexPath, () => {
+        writeFileSync(indexPath, lines.join('\n'), 'utf-8');
+    }, { projectRoot: targetDir });
+}
+//# sourceMappingURL=index-md.mjs.map

package/dist/cli/task/index-md.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index-md.mjs","sourceRoot":"","sources":["../../../src/cli/task/index-md.mjs"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEnE;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAS;IAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,YAAY,CAAC,CAAA;IAC3D,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAM;IAElC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,CAAC,CAAA;IAC7D,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1F,IAAI,MAAM,CAAC,WAAW,EAAE,UAAU,KAAK,KAAK;QAAE,OAAM;IAEpD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAA;IAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,WAAW,EAAE,WAAW,IAAI,KAAK,CAAA;IAE3D,MAAM,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC1E,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,CAAA;IAEjE,sEAAsE;IACtE,sEAAsE;IACtE,0EAA0E;IAC1E,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAA;IAC1B,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,CAAA;IAC3D,KAAK,MAAM,CAAC,IAAI,SAAS;QAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,CAAA;IAE9D,MAAM,UAAU,GAAG,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAA;QACrB,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAA;QAC9B,IAAI,CAAC,KAAK,SAAS;YAAE,OAAO,CAAC,CAAA;QAC7B,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAA;IAC1B,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACpD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAE/C,MAAM,KAAK,GAAG,CAAC,cAAc,EAAE,EAAE,CAAC,CAAA;IAClC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAA;IAEnD,IAAI,UAAU,KAAK,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;QAClD,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;QAClD,KAAK,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAA;IACzC,CAAC;SAAM,CAAC;QACP,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;YAC5B,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC,CAAA;YAC3E,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,CAAC,CAAA;YACjF,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAQ;YAErE,KAAK,CAAC,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC,CAAA;YAChC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YACd,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;YAClD,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAA;YAClD,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;gBAC7B,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAA;gBAChC,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;gBAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;gBAC7C,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YACrF,CAAC;YACD,KAAK,MAAM,CAAC,IAAI,cAAc,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAA;gBAClC,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,EAAE,MAAM,CAAC,WAAW,EAAE,WAAW,CAAC,CAAA;gBAClE,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,EAAE,UAAU,CAAC,CAAA;gBAC7C,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;gBACxD,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,MAAM,IAAI,MAAM,IAAI,MAAM,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAA;YAC7F,CAAC;YACD,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACf,CAAC;IACF,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,uCAAuC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE,EAAE,CAAC,CAAA;IAEtF,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,CAAC,CAAA;IAClE,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;IACpE,wEAAwE;IACxE,YAAY,CACX,SAAS,EACT,GAAG,EAAE;QACJ,aAAa,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAA;IACpD,CAAC,EACD,EAAE,WAAW,EAAE,SAAS,EAAE,CAC1B,CAAA;AACF,CAAC"}

package/dist/cli/task/outputs-guard.d.mts

@@ -0,0 +1,75 @@
+/**
+ * Resolve the canonical outputs for a new task based on its linkage.
+ *
+ * @internal
+ */
+export function resolveDefaultOutputs(task: any): string[];
+/**
+ * Minimal glob matcher. Supports:
+ *   - `**` matches any sequence of characters including `/`
+ *   - `*`  matches any sequence of non-`/` characters
+ *   - literal `.` and other path characters escaped safely
+ *
+ * Intentionally does NOT support negation, character classes, or braces —
+ * the outputs templates above are the only consumers, and they never need
+ * those features.
+ *
+ * @internal
+ */
+export function globToRegex(pat: any): RegExp;
+/**
+ * Check whether `path` is allowed by any glob in `patterns`.
+ *
+ * @internal
+ */
+export function matchesAny(path: any, patterns: any): boolean;
+/**
+ * Validate a list of paths against the task's declared outputs. Returns an
+ * array of offending paths (empty if everything is allowed).
+ *
+ * @internal
+ */
+export function findOutputsViolations(outputs: any, paths: any): any;
+/**
+ * Throw-on-violation variant. Error shape is structured so callers can emit
+ * a machine-readable JSON diagnostic.
+ *
+ * @internal
+ */
+export function assertWithinOutputs(outputs: any, paths: any): void;
+/**
+ * @internal
+ * outputs-guard.mjs — task outputs allowlist enforcement (R11).
+ *
+ * Roundtable recommendation (Innovation Scout): every task record declares
+ * the path set its lifecycle commits are allowed to touch. Before any
+ * partial-commit staging (roadmap sync, team sync), we intersect the dirty
+ * file list with the task's `outputs` globs. Anything outside the declared
+ * path set fails loud with the offending path.
+ *
+ * This is a belt to R7's suspenders: even if a future refactor forgets to
+ * route a git cwd to the worktree, the outputs guard catches the leak at the
+ * contract level by rejecting paths that don't belong to this task.
+ *
+ * Precedent: Buck2 hermetic outputs, Kubernetes managedFields, Nix
+ * allowedReferences. The glob matcher is deliberately tiny — hand-rolled to
+ * avoid pulling in minimatch/picomatch for one use site.
+ */
+/**
+ * Default outputs applied to brand-new tasks.
+ *
+ *   - `unlinked`: permissive `**` for tasks without milestone/phase linkage
+ *     (quick tasks, investigations). The user opted out of lifecycle commits
+ *     by not linking, so the allowlist is effectively unbounded.
+ *   - `phase-linked`: the exact path set that lifecycle commits and
+ *     bookkeeping writes need. Excludes the app source (apps/, packages/,
+ *     etc.) so the lifecycle machinery cannot stage project code — those
+ *     writes belong to the executor, not the framework.
+ *
+ * @internal
+ */
+export const DEFAULT_TASK_OUTPUTS: Readonly<{
+    unlinked: readonly string[];
+    'phase-linked': readonly string[];
+}>;
+//# sourceMappingURL=outputs-guard.d.mts.map

package/dist/cli/task/outputs-guard.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs-guard.d.mts","sourceRoot":"","sources":["../../../src/cli/task/outputs-guard.mjs"],"names":[],"mappings":"AA8DA;;;;GAIG;AACH,2DAcC;AAED;;;;;;;;;;;GAWG;AACH,8CAkBC;AAED;;;;GAIG;AACH,8DAMC;AAED;;;;;GAKG;AACH,qEAYC;AAED;;;;;GAKG;AACH,oEAWC;AArKD;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;GAYG;AACH;;;GA4BE"}

package/dist/cli/task/outputs-guard.mjs

@@ -0,0 +1,166 @@
+/**
+ * @internal
+ * outputs-guard.mjs — task outputs allowlist enforcement (R11).
+ *
+ * Roundtable recommendation (Innovation Scout): every task record declares
+ * the path set its lifecycle commits are allowed to touch. Before any
+ * partial-commit staging (roadmap sync, team sync), we intersect the dirty
+ * file list with the task's `outputs` globs. Anything outside the declared
+ * path set fails loud with the offending path.
+ *
+ * This is a belt to R7's suspenders: even if a future refactor forgets to
+ * route a git cwd to the worktree, the outputs guard catches the leak at the
+ * contract level by rejecting paths that don't belong to this task.
+ *
+ * Precedent: Buck2 hermetic outputs, Kubernetes managedFields, Nix
+ * allowedReferences. The glob matcher is deliberately tiny — hand-rolled to
+ * avoid pulling in minimatch/picomatch for one use site.
+ */
+/**
+ * Default outputs applied to brand-new tasks.
+ *
+ *   - `unlinked`: permissive `**` for tasks without milestone/phase linkage
+ *     (quick tasks, investigations). The user opted out of lifecycle commits
+ *     by not linking, so the allowlist is effectively unbounded.
+ *   - `phase-linked`: the exact path set that lifecycle commits and
+ *     bookkeeping writes need. Excludes the app source (apps/, packages/,
+ *     etc.) so the lifecycle machinery cannot stage project code — those
+ *     writes belong to the executor, not the framework.
+ *
+ * @internal
+ */
+export const DEFAULT_TASK_OUTPUTS = Object.freeze({
+    unlinked: Object.freeze(['**']),
+    'phase-linked': Object.freeze([
+        '.aperant/tasks/<id>/**',
+        // C11 — explicit entry for the per-task token telemetry file. Already
+        // covered by the wildcard above, but listed by name so the artifact's
+        // existence is discoverable when grepping the allowlist.
+        '.aperant/tasks/<id>/tokens.json',
+        '.aperant/tasks/INDEX.md',
+        '.aperant/roadmap/<scope>/phases/<phase-id>.json',
+        '.aperant/roadmap/<scope>/phases/**',
+        '.aperant/roadmap/<scope>/milestones.json',
+        '.aperant/roadmap/<scope>/ROADMAP.md',
+        '.aperant/roadmap/**',
+        '.aperant/events/**',
+        '.aperant/team-status/**',
+        '.aperant/state.json',
+        // C17 — declarative YAML workflow runs emit artifacts under
+        // .aperant/wfrun/{run-id}/ (manifest.json, plan.json, result.json).
+        // The `<id>` placeholder used for tasks doesn't apply here — run-ids
+        // are orthogonal, so the allowlist uses a literal wildcard.
+        '.aperant/wfrun/**',
+        // C27 — apt-tools design-scan writes tokens.json plus future design
+        // artifacts under .aperant/design/. Shared across tasks (a single
+        // design-scan run feeds every downstream apt:design task), so the
+        // allowlist is a literal wildcard rather than task-scoped.
+        '.aperant/design/**',
+    ]),
+});
+/**
+ * Resolve the canonical outputs for a new task based on its linkage.
+ *
+ * @internal
+ */
+export function resolveDefaultOutputs(task) {
+    const linked = Boolean(task?.milestone_id && task?.phase_id);
+    const template = linked ? DEFAULT_TASK_OUTPUTS['phase-linked'] : DEFAULT_TASK_OUTPUTS.unlinked;
+    // Expand `<id>`, `<scope>`, `<phase-id>` tokens so the stored allowlist is
+    // self-contained (no re-expansion at check time).
+    const id = task?.id || task?.task_id || '';
+    const scope = task?.scope || 'project';
+    const phaseId = task?.phase_id || '';
+    return template.map((pat) => pat
+        .replace(/<id>/g, id)
+        .replace(/<scope>/g, scope)
+        .replace(/<phase-id>/g, phaseId));
+}
+/**
+ * Minimal glob matcher. Supports:
+ *   - `**` matches any sequence of characters including `/`
+ *   - `*`  matches any sequence of non-`/` characters
+ *   - literal `.` and other path characters escaped safely
+ *
+ * Intentionally does NOT support negation, character classes, or braces —
+ * the outputs templates above are the only consumers, and they never need
+ * those features.
+ *
+ * @internal
+ */
+export function globToRegex(pat) {
+    let re = '';
+    for (let i = 0; i < pat.length; i++) {
+        const c = pat[i];
+        if (c === '*' && pat[i + 1] === '*') {
+            re += '.*';
+            i++;
+        }
+        else if (c === '*') {
+            re += '[^/]*';
+        }
+        else if ('+.()|^$?{}[]\\'.includes(c)) {
+            re += `\\${c}`;
+        }
+        else if (c === '/') {
+            re += '/';
+        }
+        else {
+            re += c;
+        }
+    }
+    return new RegExp(`^${re}$`);
+}
+/**
+ * Check whether `path` is allowed by any glob in `patterns`.
+ *
+ * @internal
+ */
+export function matchesAny(path, patterns) {
+    for (const pat of patterns) {
+        if (!pat)
+            continue;
+        if (globToRegex(pat).test(path))
+            return true;
+    }
+    return false;
+}
+/**
+ * Validate a list of paths against the task's declared outputs. Returns an
+ * array of offending paths (empty if everything is allowed).
+ *
+ * @internal
+ */
+export function findOutputsViolations(outputs, paths) {
+    // Treat a missing or empty outputs list as "reject everything" — the
+    // sentinel originally exercised by C29's smoke-drain harness (retired in
+    // C30 in favor of src/__tests__/command-coverage.test.ts). Callers that
+    // want unrestricted writes pass `['**']` explicitly.
+    if (!Array.isArray(outputs))
+        return paths.slice();
+    if (outputs.length === 0)
+        return paths.slice();
+    const bad = [];
+    for (const p of paths) {
+        if (!matchesAny(p, outputs))
+            bad.push(p);
+    }
+    return bad;
+}
+/**
+ * Throw-on-violation variant. Error shape is structured so callers can emit
+ * a machine-readable JSON diagnostic.
+ *
+ * @internal
+ */
+export function assertWithinOutputs(outputs, paths) {
+    const violations = findOutputsViolations(outputs, paths);
+    if (violations.length > 0) {
+        const err = new Error(`outputs-violation: ${violations.length} path(s) outside task outputs: ${violations.slice(0, 5).join(', ')}`);
+        err.code = 'outputs-violation';
+        err.violations = violations;
+        err.outputs = outputs;
+        throw err;
+    }
+}
+//# sourceMappingURL=outputs-guard.mjs.map

package/dist/cli/task/outputs-guard.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"outputs-guard.mjs","sourceRoot":"","sources":["../../../src/cli/task/outputs-guard.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC,MAAM,CAAC;IACjD,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;IAC/B,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;QAC7B,wBAAwB;QACxB,sEAAsE;QACtE,sEAAsE;QACtE,yDAAyD;QACzD,iCAAiC;QACjC,yBAAyB;QACzB,iDAAiD;QACjD,oCAAoC;QACpC,0CAA0C;QAC1C,qCAAqC;QACrC,qBAAqB;QACrB,oBAAoB;QACpB,yBAAyB;QACzB,qBAAqB;QACrB,4DAA4D;QAC5D,oEAAoE;QACpE,qEAAqE;QACrE,4DAA4D;QAC5D,mBAAmB;QACnB,oEAAoE;QACpE,kEAAkE;QAClE,kEAAkE;QAClE,2DAA2D;QAC3D,oBAAoB;KACpB,CAAC;CACF,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAI;IACzC,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,QAAQ,CAAC,CAAA;IAC5D,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAC,QAAQ,CAAA;IAC9F,2EAA2E;IAC3E,kDAAkD;IAClD,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,OAAO,IAAI,EAAE,CAAA;IAC1C,MAAM,KAAK,GAAG,IAAI,EAAE,KAAK,IAAI,SAAS,CAAA;IACtC,MAAM,OAAO,GAAG,IAAI,EAAE,QAAQ,IAAI,EAAE,CAAA;IACpC,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAC3B,GAAG;SACD,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;SACpB,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC;SAC1B,OAAO,CAAC,aAAa,EAAE,OAAO,CAAC,CACjC,CAAA;AACF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,WAAW,CAAC,GAAG;IAC9B,IAAI,EAAE,GAAG,EAAE,CAAA;IACX,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QAChB,IAAI,CAAC,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;YACrC,EAAE,IAAI,IAAI,CAAA;YACV,CAAC,EAAE,CAAA;QACJ,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,EAAE,IAAI,OAAO,CAAA;QACd,CAAC;aAAM,IAAI,gBAAgB,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,EAAE,IAAI,KAAK,CAAC,EAAE,CAAA;QACf,CAAC;aAAM,IAAI,CAAC,KAAK,GAAG,EAAE,CAAC;YACtB,EAAE,IAAI,GAAG,CAAA;QACV,CAAC;aAAM,CAAC;YACP,EAAE,IAAI,CAAC,CAAA;QACR,CAAC;IACF,CAAC;IACD,OAAO,IAAI,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,CAAA;AAC7B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,IAAI,EAAE,QAAQ;IACxC,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG;YAAE,SAAQ;QAClB,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;IAC7C,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAO,EAAE,KAAK;IACnD,qEAAqE;IACrE,yEAAyE;IACzE,wEAAwE;IACxE,qDAAqD;IACrD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,EAAE,CAAA;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,KAAK,EAAE,CAAA;IAC9C,MAAM,GAAG,GAAG,EAAE,CAAA;IACd,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;IACzC,CAAC;IACD,OAAO,GAAG,CAAA;AACX,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAO,EAAE,KAAK;IACjD,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;IACxD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,IAAI,KAAK,CACpB,sBAAsB,UAAU,CAAC,MAAM,kCAAkC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC5G,CAAA;QACD,GAAG,CAAC,IAAI,GAAG,mBAAmB,CAAA;QAC9B,GAAG,CAAC,UAAU,GAAG,UAAU,CAAA;QAC3B,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;QACrB,MAAM,GAAG,CAAA;IACV,CAAC;AACF,CAAC"}

package/dist/cli/task/worktree-cleanup.d.mts

@@ -0,0 +1,8 @@
+/**
+ * @param {object} task - closed task record with worktree_path/branch/base_branch.
+ * @param {string} mode - 'never' | 'ask' | 'auto'
+ * @param {string} targetDir - main-repo project directory (cwd for git ops).
+ * @returns {object|null} cleanup report block, or null if no worktree on task.
+ */
+export function computeWorktreeCleanup(task: object, mode: string, targetDir: string): object | null;
+//# sourceMappingURL=worktree-cleanup.d.mts.map

package/dist/cli/task/worktree-cleanup.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-cleanup.d.mts","sourceRoot":"","sources":["../../../src/cli/task/worktree-cleanup.mjs"],"names":[],"mappings":"AAcA;;;;;GAKG;AACH,6CALW,MAAM,QACN,MAAM,aACN,MAAM,GACJ,MAAM,GAAC,IAAI,CA8GvB"}

package/dist/cli/task/worktree-cleanup.mjs

@@ -0,0 +1,128 @@
+/**
+ * task/worktree-cleanup.mjs — honor task_isolation.cleanup_on_close on task close (C29).
+ *
+ * Extracted from cmdTask close-case to keep bin/apt-tools.mjs → commands/task.mjs
+ * under the 800 LOC gate. Pure behavior move, no semantic change.
+ *
+ * Modes:
+ *   'never' → no-op, return action:'noop'
+ *   'ask'   → return cleanup_command for the skill to prompt
+ *   'auto'  → merge back into base_branch, then remove the worktree + branch
+ */
+import { execFileSync } from 'node:child_process';
+/**
+ * @param {object} task - closed task record with worktree_path/branch/base_branch.
+ * @param {string} mode - 'never' | 'ask' | 'auto'
+ * @param {string} targetDir - main-repo project directory (cwd for git ops).
+ * @returns {object|null} cleanup report block, or null if no worktree on task.
+ */
+export function computeWorktreeCleanup(task, mode, targetDir) {
+    if (!task?.worktree_path)
+        return null;
+    const wtPath = task.worktree_path;
+    const taskBranch = task.branch;
+    const baseBranch = task.base_branch || 'main';
+    if (mode === 'never') {
+        return {
+            mode,
+            worktree_path: wtPath,
+            branch: taskBranch,
+            base_branch: baseBranch,
+            action: 'noop',
+        };
+    }
+    if (mode === 'ask') {
+        return {
+            mode,
+            worktree_path: wtPath,
+            branch: taskBranch,
+            base_branch: baseBranch,
+            action: 'pending',
+            cleanup_command: `git checkout ${baseBranch} && git merge --no-edit ${taskBranch} && git worktree remove ${wtPath} && git branch -d ${taskBranch}`,
+        };
+    }
+    // mode === 'auto' — attempt merge-back in the main repo (never in the worktree).
+    let mergeOk = false;
+    let mergeError = null;
+    try {
+        execFileSync('git', ['checkout', baseBranch], {
+            cwd: targetDir,
+            encoding: 'utf-8',
+            stdio: 'pipe',
+        });
+        execFileSync('git', ['merge', '--no-edit', taskBranch], {
+            cwd: targetDir,
+            encoding: 'utf-8',
+            stdio: 'pipe',
+        });
+        mergeOk = true;
+    }
+    catch (err) {
+        mergeError = (err.stderr || err.message || '')
+            .toString()
+            .trim()
+            .split('\n')
+            .slice(0, 3)
+            .join(' ');
+        // Abort the failed merge so the main repo is left clean.
+        try {
+            execFileSync('git', ['merge', '--abort'], {
+                cwd: targetDir,
+                encoding: 'utf-8',
+                stdio: 'pipe',
+            });
+        }
+        catch {
+            /* */
+        }
+    }
+    if (mergeOk) {
+        try {
+            execFileSync('git', ['worktree', 'remove', wtPath], {
+                cwd: targetDir,
+                encoding: 'utf-8',
+                stdio: 'pipe',
+            });
+        }
+        catch {
+            try {
+                execFileSync('git', ['worktree', 'remove', '--force', wtPath], {
+                    cwd: targetDir,
+                    encoding: 'utf-8',
+                    stdio: 'pipe',
+                });
+            }
+            catch {
+                /* */
+            }
+        }
+        try {
+            execFileSync('git', ['branch', '-d', taskBranch], {
+                cwd: targetDir,
+                encoding: 'utf-8',
+                stdio: 'pipe',
+            });
+        }
+        catch {
+            /* already deleted or unmerged */
+        }
+        return {
+            mode,
+            worktree_path: wtPath,
+            branch: taskBranch,
+            base_branch: baseBranch,
+            action: 'merged_and_removed',
+        };
+    }
+    // Preserve the branch + worktree — surface merge-pending.
+    return {
+        mode,
+        worktree_path: wtPath,
+        branch: taskBranch,
+        base_branch: baseBranch,
+        action: 'merge_pending',
+        merge_error: mergeError,
+        message: `Task branch ${taskBranch} has merge conflicts against ${baseBranch}. Worktree preserved at ${wtPath}. Resolve manually: git checkout ${baseBranch} && git merge ${taskBranch}`,
+    };
+}
+//# sourceMappingURL=worktree-cleanup.mjs.map

package/dist/cli/task/worktree-cleanup.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"worktree-cleanup.mjs","sourceRoot":"","sources":["../../../src/cli/task/worktree-cleanup.mjs"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS;IAC3D,IAAI,CAAC,IAAI,EAAE,aAAa;QAAE,OAAO,IAAI,CAAA;IAErC,MAAM,MAAM,GAAG,IAAI,CAAC,aAAa,CAAA;IACjC,MAAM,UAAU,GAAG,IAAI,CAAC,MAAM,CAAA;IAC9B,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,IAAI,MAAM,CAAA;IAE7C,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACtB,OAAO;YACN,IAAI;YACJ,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,MAAM;SACd,CAAA;IACF,CAAC;IAED,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACpB,OAAO;YACN,IAAI;YACJ,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,SAAS;YACjB,eAAe,EAAE,gBAAgB,UAAU,2BAA2B,UAAU,2BAA2B,MAAM,qBAAqB,UAAU,EAAE;SAClJ,CAAA;IACF,CAAC;IAED,iFAAiF;IACjF,IAAI,OAAO,GAAG,KAAK,CAAA;IACnB,IAAI,UAAU,GAAG,IAAI,CAAA;IACrB,IAAI,CAAC;QACJ,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE;YAC7C,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,MAAM;SACb,CAAC,CAAA;QACF,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE;YACvD,GAAG,EAAE,SAAS;YACd,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,MAAM;SACb,CAAC,CAAA;QACF,OAAO,GAAG,IAAI,CAAA;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,UAAU,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC;aAC5C,QAAQ,EAAE;aACV,IAAI,EAAE;aACN,KAAK,CAAC,IAAI,CAAC;aACX,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,IAAI,CAAC,GAAG,CAAC,CAAA;QACX,yDAAyD;QACzD,IAAI,CAAC;YACJ,YAAY,CAAC,KAAK,EAAE,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE;gBACzC,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;aACb,CAAC,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACR,KAAK;QACN,CAAC;IACF,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACb,IAAI,CAAC;YACJ,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnD,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;aACb,CAAC,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC;gBACJ,YAAY,CAAC,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,EAAE;oBAC9D,GAAG,EAAE,SAAS;oBACd,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,MAAM;iBACb,CAAC,CAAA;YACH,CAAC;YAAC,MAAM,CAAC;gBACR,KAAK;YACN,CAAC;QACF,CAAC;QACD,IAAI,CAAC;YACJ,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,UAAU,CAAC,EAAE;gBACjD,GAAG,EAAE,SAAS;gBACd,QAAQ,EAAE,OAAO;gBACjB,KAAK,EAAE,MAAM;aACb,CAAC,CAAA;QACH,CAAC;QAAC,MAAM,CAAC;YACR,iCAAiC;QAClC,CAAC;QACD,OAAO;YACN,IAAI;YACJ,aAAa,EAAE,MAAM;YACrB,MAAM,EAAE,UAAU;YAClB,WAAW,EAAE,UAAU;YACvB,MAAM,EAAE,oBAAoB;SAC5B,CAAA;IACF,CAAC;IAED,0DAA0D;IAC1D,OAAO;QACN,IAAI;QACJ,aAAa,EAAE,MAAM;QACrB,MAAM,EAAE,UAAU;QAClB,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,eAAe;QACvB,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,eAAe,UAAU,gCAAgC,UAAU,2BAA2B,MAAM,oCAAoC,UAAU,iBAAiB,UAAU,EAAE;KACxL,CAAA;AACF,CAAC"}

package/dist/cli/team/team.d.mts

@@ -0,0 +1,87 @@
+/**
+ * Check if team mode is enabled for this project.
+ */
+export function isTeamEnabled(targetDir: any): boolean;
+/**
+ * Auto-register the current user as a team member (called on every task op).
+ * Safe no-op if team mode is not enabled.
+ *
+ * Lock-protected: concurrent wave-mode agents may call this simultaneously;
+ * without the lock the read-modify-write clobbers sibling members. Same
+ * pattern as state.json writers (withFileLock + atomicWriteJson).
+ */
+export function updateTeamMember(targetDir: any): void;
+/**
+ * Compute the set of files that `team sync` should stage. Returns a sorted
+ * array of repo-relative paths (forward-slash). Scans `git status --porcelain`
+ * for any modified/untracked files under `.aperant/` and intersects with the
+ * allowlist (plus any tracked roadmap markdown/json).
+ *
+ * Pure function over git output so it's easy to reason about in tests.
+ */
+export function computeTeamSyncFiles(targetDir: any, opts?: {}): any[];
+/**
+ * Filter the staging list through `git check-ignore --stdin` so files matched
+ * by the project's `.gitignore` (e.g. a repo that ignores `.aperant/roadmap/`)
+ * are silently skipped instead of crashing the downstream `git add`. Returns
+ * `{ kept, skipped }` — both arrays of repo-relative paths, preserving order.
+ *
+ * Conservative fallback: if `git check-ignore` exits with a status other than
+ * 0 (ignored matches) or 1 (no ignored matches) — e.g. git not in PATH, repo
+ * corruption, or the binary unavailable — we return every file as kept so the
+ * existing `git add` path can run and surface its own error if needed.
+ */
+export function filterGitignored(files: any, gitCwd: any): {
+    kept: any[];
+    skipped: any[];
+};
+/**
+ * team sync implementation — shared entry used by cmdTeam and the task-close
+ * hook. Returns the result object (does not emit output).
+ *
+ * options: { push?: boolean, message?: string, cwd?: string }
+ *
+ * `options.cwd` controls where git runs — defaults to `targetDir`. Lifecycle
+ * handlers running against a worktree task pass the worktree path so the
+ * bookkeeping commit lands on the worktree's feature branch (R7 — fixes the
+ * C29 leak that landed bookkeeping on the main repo's branch).
+ */
+export function teamSync(targetDir: any, options?: {}): {
+    status: string;
+    committed: boolean;
+    sha: string | null;
+    files: any[];
+    pushed: boolean;
+    skipped_gitignored: number;
+} | {
+    status: string;
+    reason: string;
+    committed: boolean;
+    files: never[];
+    pushed: boolean;
+    skipped_gitignored: number;
+    error?: undefined;
+    violations?: undefined;
+    outputs?: undefined;
+} | {
+    status: string;
+    committed: boolean;
+    files: any[];
+    pushed: boolean;
+    skipped_gitignored: number;
+    error: string;
+    violations: any;
+    outputs: any;
+    reason?: undefined;
+} | {
+    status: string;
+    committed: boolean;
+    files: any[];
+    pushed: boolean;
+    skipped_gitignored: number;
+    error: string;
+    reason?: undefined;
+    violations?: undefined;
+    outputs?: undefined;
+};
+//# sourceMappingURL=team.d.mts.map

package/dist/cli/team/team.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.d.mts","sourceRoot":"","sources":["../../../src/cli/team/team.mjs"],"names":[],"mappings":"AAYA;;GAEG;AACH,uDASC;AAED;;;;;;;GAOG;AACH,uDAkCC;AAUD;;;;;;;GAOG;AACH,uEA8CC;AAED;;;;;;;;;;GAUG;AACH;;;EAqCC;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAqKC"}