@appliqation/defect-fix 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Appliqation Pty Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,71 @@
+# Appliqation Defect-Fix
+
+**Loads full defect context, locates and applies a real code fix, syncs the Appliqation scenario, and verifies it by actually running Playwright — never by asking the model if it thinks the fix works.**
+
+Point it at a defect ID and it investigates like an engineer would: reads the tester's report, the failing test steps, related defects on the same component, console/network errors, and the routes involved — then reads and edits your actual source, and only calls it done once a real Playwright run against the fix passes.
+
+## Why this exists
+
+Autotest tells you a test case is failing. Scriptgen locks in coverage once behaviour is known-good. Neither one touches the underlying bug. This is the agent that closes that gap: given a defect, it does the investigation, applies the fix, and proves it — the same three-phase discipline (investigate → fix → verify with a real tool call) every other agent in this family already applies to its own narrower job.
+
+## How it works
+
+```mermaid
+flowchart TD
+    A[defect ID] --> B[load context: tester report,<br/>failing steps, defect history,<br/>console/network errors, routes]
+    B --> C[locate the code:<br/>routes_visited -> source files]
+    C --> D[apply a fix]
+    D --> E[sync the Appliqation scenario<br/>if new/changed test coverage is needed]
+    E --> F[npx playwright test]
+    F --> G{passed?}
+    G -- no --> D
+    G -- yes --> H[report: verified: true<br/>+ files changed]
+```
+
+- **The one agent besides autotest's validator with real Appliqation write access** — it can sync test cases (`update_test_cases`/`add_test_cases`) and create a verification run, gated behind `--dry-run` so you can watch it work before trusting it with real writes.
+- **`--test-instruction`** lets a caller (typically [`appliqation-autopilot`](https://github.com/appliqation/appliqation-autopilot), which has the broader context to judge this) specify testing scope beyond the default single-test-case re-run — e.g. "this touches shared validation code, re-verify the whole scenario."
+- **No git operation.** Like scriptgen, this agent writes local files only; [`appliqation-pr-raise`](https://github.com/appliqation/appliqation-pr-raise) handles committing and opening the PR.
+
+## Quick start
+
+```bash
+npm install -g @appliqation/defect-fix
+```
+
+Create a `.env` file (in whatever directory you'll run it from) with:
+
+```
+APPQ_API_KEY=your-appliqation-api-key   # needs write access
+ANTHROPIC_API_KEY=your-anthropic-key    # or OPENAI_API_KEY — pick one
+```
+
+```bash
+appliqation-defect-fix fix \
+  --defect-id <id> \
+  --repo-path /path/to/your/checkout \
+  --dry-run
+```
+
+`--dry-run` is the recommended default for your first run against a real project — the code investigation, fix, and Playwright verification all happen for real, but the Appliqation scenario/run writeback is suppressed and logged instead of sent. Add `--test-instruction "<text>"` to specify verification scope, and `--json`/`--ci` for a structured summary + CI-friendly exit code.
+
+## Configuration
+
+Copy `.env.example` to `.env`. Requires `APPQ_API_KEY` (with write access, unless every run uses `--dry-run`) and one of `ANTHROPIC_API_KEY`/`OPENAI_API_KEY`.
+
+## Development
+
+```bash
+git clone https://github.com/appliqation/appliqation-defect-fix.git
+cd appliqation-defect-fix
+npm install
+cp .env.example .env   # fill in APPQ_API_KEY (needs write access) and one LLM provider key
+npm run dev -- fix --defect-id <id> --repo-path <path>
+npm run typecheck
+npm test
+```
+
+See `CLAUDE.md` for a map of this repo if you're working in it with an AI coding assistant.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/cli/audit.js

@@ -0,0 +1,25 @@
+// Extracted out of cli/index.ts so this is testable without triggering that
+// file's top-level program.parseAsync(process.argv) side effect — same
+// reasoning as appliqation-autotest's cli/resolvers.ts.
+import { safeRecord } from '@appliqation/agent-core';
+import { exitCodeFor } from './output.js';
+export async function recordFixRun(args) {
+    const { sink, startedAt, endedAt, model, usage, defectId, dryRun, result } = args;
+    const summary = result
+        ? { defectId, writtenPaths: result.writtenPaths, testRan: result.testRun.ran, verified: result.testRun.ok, dryRun, report: result.report }
+        : undefined;
+    await safeRecord(sink, {
+        agent: 'appliqation-defect-fix',
+        subcommand: 'fix',
+        startedAt,
+        endedAt,
+        durationMillis: endedAt - startedAt,
+        model,
+        usage,
+        turns: result?.turns,
+        budgetExceeded: result?.budgetExceeded,
+        exitCode: summary ? exitCodeFor(summary) : 1,
+        outcome: summary ? { ...summary } : { defectId, dryRun, error: true },
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/cli/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/cli/audit.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,wDAAwD;AAExD,OAAO,EAAE,UAAU,EAAoC,MAAM,yBAAyB,CAAC;AAEvF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAe1C,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAsB;IACvD,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAClF,MAAM,OAAO,GAA2B,MAAM;QAC5C,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QAC1I,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,CAAC,IAAI,EAAE;QACrB,KAAK,EAAE,wBAAwB;QAC/B,UAAU,EAAE,KAAK;QACjB,SAAS;QACT,OAAO;QACP,cAAc,EAAE,OAAO,GAAG,SAAS;QACnC,KAAK;QACL,KAAK;QACL,KAAK,EAAE,MAAM,EAAE,KAAK;QACpB,cAAc,EAAE,MAAM,EAAE,cAAc;QACtC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE;KACtE,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,124 @@
+#!/usr/bin/env node
+// `fix`: load full defect context, locate and apply a code fix, sync the
+// Appliqation scenario, and verify by actually running Playwright — via
+// appq's own appq:fix workflow given real filesystem + shell tools plus
+// (dry-run-gated) appq write access. See src/orchestrator/fix.ts for the
+// actual mechanism.
+import { Command } from 'commander';
+import { createMcpClient, createAnthropicAdapter, createOpenAiAdapter, createUsageAccumulator } from '@appliqation/agent-core';
+import { config, resolveProvider, resolveModel } from '../config/env.js';
+import { fix } from '../orchestrator/fix.js';
+import { recordFixRun } from './audit.js';
+import { printJsonSummary, printHumanSummary, exitCodeFor } from './output.js';
+const client = createMcpClient({ origin: config.appqOrigin, apiKey: config.appqApiKey() });
+function buildAdapter() {
+    const provider = resolveProvider();
+    const model = resolveModel();
+    return provider === 'anthropic'
+        ? createAnthropicAdapter(config.anthropicApiKey, model, config.anthropicMaxTokens)
+        : createOpenAiAdapter(config.openaiApiKey, model, config.openaiMaxOutputTokens);
+}
+function logEvent(prefix) {
+    return (e) => {
+        if (e.type === 'assistant') {
+            const text = (e.detail ?? '').trim();
+            if (text)
+                console.error(`${prefix}[thinking] ${text}`);
+        }
+        else if (e.type === 'tool') {
+            const d = e.detail;
+            console.error(`${prefix}[tool] ${d.name} -> ${d.result.slice(0, 300)}`);
+        }
+        else if (e.type === 'log') {
+            console.error(`${prefix}[log] ${e.detail}`);
+        }
+        else if (e.type === 'usage') {
+            const u = e.detail;
+            const cacheNote = u.cacheReadTokens
+                ? ` (${u.cacheReadTokens} from cache)`
+                : u.cacheWriteTokens
+                    ? ` (${u.cacheWriteTokens} written to cache)`
+                    : '';
+            console.error(`${prefix}[usage] in=${u.inputTokens} out=${u.outputTokens}${cacheNote}`);
+        }
+    };
+}
+const program = new Command();
+program
+    .name('appliqation-defect-fix')
+    .description('Fix an Appliqation defect: load full context, locate and apply a code fix, sync the scenario, and verify it by actually running Playwright.');
+program
+    .command('fix')
+    .description("Fix one defect via appq's appq:fix workflow (context: defect text, test steps, run context, defect " +
+    'history, console/network errors, recording URL), given real filesystem + an allowlisted shell so it ' +
+    'can locate and edit source, plus dry-run-gated appq write access so it can sync the Appliqation ' +
+    'scenario and create a real run to verify against — `npx playwright test` is what decides pass/fail, ' +
+    "never the model's own claim. No git operation — a separate agent (appliqation-pr-raise) commits and " +
+    'pushes whatever this one writes locally. project_id/scenario_id/test_case_uuid are never CLI options ' +
+    "— appq:fix's own Phase 1 derives all of that from get_defect_context.")
+    .requiredOption('--defect-id <id>', 'defect ID to fix')
+    .option('--repo-path <path>', 'target repo root every file/command tool call is scoped to', process.cwd())
+    .option('--test-instruction <text>', 'testing scope required beyond appq:fix\'s own Phase 5 default (re-running just the reproducing test ' +
+    'case) — e.g. "also re-run the whole scenario, this component has a history of regressions." Typically ' +
+    'supplied by a caller (like appliqation-autopilot) that has already gathered evidence about how much ' +
+    'verification this fix actually warrants.')
+    .option('--dry-run', 'apply and verify the fix normally, but suppress update_test_cases/add_test_cases/update_run_results — logs what would have been sent instead')
+    .option('--max-turns <n>', 'override BUDGET_MAX_TURNS for this run')
+    .option('--json', 'print a single structured JSON summary on stdout instead of a human-readable report')
+    .option('--ci', 'shorthand for --json; exit code already reflects the real, execFile-verified outcome either way')
+    .action(async (opts) => {
+    const json = (opts.json ?? false) || (opts.ci ?? false);
+    const adapter = buildAdapter();
+    const dryRun = opts.dryRun ?? false;
+    if (dryRun)
+        console.error('[setup] dry-run: appq test-case/run writes will be suppressed.');
+    const budget = { ...config.budget, ...(opts.maxTurns ? { maxTurns: Number(opts.maxTurns) } : {}) };
+    const startedAt = Date.now();
+    const usage = createUsageAccumulator();
+    const baseLog = logEvent('');
+    let result;
+    try {
+        result = await fix({
+            client,
+            adapter,
+            defectId: opts.defectId,
+            repoPath: opts.repoPath,
+            budget,
+            commandTimeoutMs: config.commandTimeoutMs,
+            dryRun,
+            testInstruction: opts.testInstruction,
+            onEvent: (e) => {
+                baseLog(e);
+                if (e.type === 'usage')
+                    usage.onUsage(e.detail);
+            },
+        });
+    }
+    finally {
+        // Audit write happens whether the run succeeded or threw — see
+        // @appliqation/agent-core's audit/sink.ts: safeRecord() (used
+        // inside recordFixRun) never lets a failed/unreachable audit sink
+        // affect this process's real outcome.
+        await recordFixRun({ sink: config.auditSink, startedAt, endedAt: Date.now(), model: resolveModel(), usage: usage.totals(), defectId: opts.defectId, dryRun, result });
+    }
+    if (!json) {
+        console.log('\n=== Report ===\n');
+        console.log(result.report);
+        console.error(`\n(${result.turns} turns, budget exceeded: ${result.budgetExceeded})`);
+    }
+    const summary = {
+        defectId: opts.defectId,
+        writtenPaths: result.writtenPaths,
+        testRan: result.testRun.ran,
+        verified: result.testRun.ok,
+        dryRun,
+        report: result.report,
+    };
+    if (json)
+        printJsonSummary(summary);
+    else
+        printHumanSummary(summary);
+    process.exitCode = exitCodeFor(summary);
+});
+program.parseAsync(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,yEAAyE;AACzE,wEAAwE;AACxE,wEAAwE;AACxE,yEAAyE;AACzE,oBAAoB;AAEpB,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAE/H,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,GAAG,EAAE,MAAM,wBAAwB,CAAC;AAE7C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/E,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAE3F,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,QAAQ,KAAK,WAAW;QAC7B,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,eAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACnF,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAa,EAAE,KAAK,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,CAAC,CAAqC,EAAE,EAAE;QAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAE,CAAC,CAAC,MAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,IAAI;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,MAA0C,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,MAA4G,CAAC;YACzH,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe;gBACjC,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,cAAc;gBACtC,CAAC,CAAC,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,oBAAoB;oBAC7C,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,YAAY,GAAG,SAAS,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,wBAAwB,CAAC;KAC9B,WAAW,CAAC,6IAA6I,CAAC,CAAC;AAE9J,OAAO;KACJ,OAAO,CAAC,KAAK,CAAC;KACd,WAAW,CACV,qGAAqG;IACnG,sGAAsG;IACtG,kGAAkG;IAClG,sGAAsG;IACtG,sGAAsG;IACtG,uGAAuG;IACvG,uEAAuE,CAC1E;KACA,cAAc,CAAC,kBAAkB,EAAE,kBAAkB,CAAC;KACtD,MAAM,CAAC,oBAAoB,EAAE,4DAA4D,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KACzG,MAAM,CACL,2BAA2B,EAC3B,sGAAsG;IACpG,wGAAwG;IACxG,sGAAsG;IACtG,0CAA0C,CAC7C;KACA,MAAM,CAAC,WAAW,EAAE,8IAA8I,CAAC;KACnK,MAAM,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;KACnE,MAAM,CAAC,QAAQ,EAAE,qFAAqF,CAAC;KACvG,MAAM,CAAC,MAAM,EAAE,iGAAiG,CAAC;KACjH,MAAM,CACL,KAAK,EAAE,IAQN,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC;IAEpC,IAAI,MAAM;QAAE,OAAO,CAAC,KAAK,CAAC,gEAAgE,CAAC,CAAC;IAE5F,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAEnG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,MAA6B,CAAC;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,GAAG,CAAC;YACjB,MAAM;YACN,OAAO;YACP,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;YACN,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM;YACN,eAAe,EAAE,IAAI,CAAC,eAAe;YACrC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,OAAO,CAAC,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAA4G,CAAC,CAAC;YACxJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,+DAA+D;QAC/D,8DAA8D;QAC9D,kEAAkE;QAClE,sCAAsC;QACtC,MAAM,YAAY,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACxK,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,KAAK,4BAA4B,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAAe;QAC1B,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;QAC3B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,IAAI,IAAI;QAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;;QAC/B,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC,CACF,CAAC;AAEJ,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/cli/output.js

@@ -0,0 +1,32 @@
+// --json/--ci's renderer, matching appliqation-scriptgen's output.ts shape.
+// exitCodeFor() never trusts the model's own report text — only
+// FixResult.testRun.ok, which is derived from a real execFile exit code,
+// decides success. A file that was never actually run — or was run before
+// its last edit — is not a verified fix, no matter what the report claims.
+export function printJsonSummary(summary) {
+    console.log(JSON.stringify(summary, null, 2));
+}
+export function printHumanSummary(summary) {
+    console.log(`\n=== Defect ${summary.defectId} ===\n`);
+    if (summary.writtenPaths.length === 0) {
+        console.log('  No files were written.');
+    }
+    else {
+        for (const p of summary.writtenPaths)
+            console.log(`  wrote  ${p}`);
+    }
+    if (!summary.testRan) {
+        console.log('\n  Never actually ran `npx playwright test` — not verified.');
+    }
+    else {
+        console.log(`\n  Verification: ${summary.verified ? 'PASSED' : 'FAILED (or stale — run predates the last edit)'}`);
+    }
+    if (summary.dryRun) {
+        console.log('\n  Dry run: any Appliqation test-case/run writes were suppressed, not actually sent.');
+    }
+}
+/** 1 unless the file was actually run — via a real, execFile-reported exit code — after its last edit, and passed. */
+export function exitCodeFor(summary) {
+    return summary.testRan && summary.verified ? 0 : 1;
+}
+//# sourceMappingURL=output.js.map

package/dist/cli/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/cli/output.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,gEAAgE;AAChE,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAW3E,MAAM,UAAU,gBAAgB,CAAC,OAAmB;IAClD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAmB;IACnD,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,QAAQ,QAAQ,CAAC,CAAC;IACtD,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gDAAgD,EAAE,CAAC,CAAC;IACrH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,OAAO,CAAC,GAAG,CAAC,uFAAuF,CAAC,CAAC;IACvG,CAAC;AACH,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,WAAW,CAAC,OAAmB;IAC7C,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/config/env.js

@@ -0,0 +1,48 @@
+import 'dotenv/config';
+import { DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL } from '@appliqation/agent-core/providers';
+import { required, optional } from '@appliqation/agent-core/config';
+import { resolveAuditSink } from '@appliqation/agent-core/audit';
+export const config = {
+    appqOrigin: optional('APPQ_ORIGIN') ?? 'https://appq.appliqation.io',
+    appqApiKey: () => required('APPQ_API_KEY'),
+    anthropicApiKey: optional('ANTHROPIC_API_KEY'),
+    openaiApiKey: optional('OPENAI_API_KEY'),
+    anthropicModel: optional('ANTHROPIC_MODEL'),
+    openaiModel: optional('OPENAI_MODEL'),
+    anthropicMaxTokens: Number(optional('ANTHROPIC_MAX_TOKENS') ?? 8192),
+    openaiMaxOutputTokens: Number(optional('OPENAI_MAX_OUTPUT_TOKENS') ?? 8192),
+    // A single, generous budget — no executor/validator split here, just one
+    // investigate-fix-sync-verify pass that may need several rounds of "run
+    // the test, read the failure, adjust the fix".
+    budget: {
+        maxCalls: Number(optional('BUDGET_MAX_CALLS') ?? 60),
+        // No browser tools offered at all, so BudgetTracker's page counter never
+        // increments — a large, effectively-unreachable cap rather than 0 (0
+        // would trip immediately, since exceeded() checks pages >= maxPages).
+        maxPages: Number(optional('BUDGET_MAX_PAGES') ?? 999_999),
+        maxMillis: Number(optional('BUDGET_MAX_MILLIS') ?? 20 * 60 * 1000),
+        maxTurns: Number(optional('BUDGET_MAX_TURNS') ?? 60),
+    },
+    // Wall-clock cap per run_command invocation (npm install / playwright
+    // test can each legitimately take a while) — separate from the overall budget.
+    commandTimeoutMs: Number(optional('COMMAND_TIMEOUT_MS') ?? 5 * 60 * 1000),
+    // Observability, entirely opt-in — see @appliqation/agent-core's audit/sink.ts.
+    auditSink: resolveAuditSink({
+        auditMongoUri: optional('AUDIT_MONGO_URI'),
+        auditMongoDb: optional('AUDIT_MONGO_DB'),
+        auditMongoCollection: optional('AUDIT_MONGO_COLLECTION'),
+        auditJsonlPath: optional('AUDIT_JSONL_PATH'),
+    }),
+};
+export function resolveProvider() {
+    if (config.anthropicApiKey)
+        return 'anthropic';
+    if (config.openaiApiKey)
+        return 'openai';
+    throw new Error('Set ANTHROPIC_API_KEY or OPENAI_API_KEY');
+}
+export function resolveModel() {
+    const provider = resolveProvider();
+    return provider === 'anthropic' ? (config.anthropicModel ?? DEFAULT_ANTHROPIC_MODEL) : (config.openaiModel ?? DEFAULT_OPENAI_MODEL);
+}
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAClG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,IAAI,6BAA6B;IACpE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC1C,eAAe,EAAE,QAAQ,CAAC,mBAAmB,CAAC;IAC9C,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IACxC,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAC3C,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;IACpE,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,IAAI,CAAC;IAC3E,yEAAyE;IACzE,wEAAwE;IACxE,+CAA+C;IAC/C,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,yEAAyE;QACzE,qEAAqE;QACrE,sEAAsE;QACtE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC;QACzD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAClE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;KACrD;IACD,sEAAsE;IACtE,+EAA+E;IAC/E,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEzE,gFAAgF;IAChF,SAAS,EAAE,gBAAgB,CAAC;QAC1B,aAAa,EAAE,QAAQ,CAAC,iBAAiB,CAAC;QAC1C,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC;QACxC,oBAAoB,EAAE,QAAQ,CAAC,wBAAwB,CAAC;QACxD,cAAc,EAAE,QAAQ,CAAC,kBAAkB,CAAC;KAC7C,CAAC;CACH,CAAC;AAEF,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM,CAAC,eAAe;QAAE,OAAO,WAAW,CAAC;IAC/C,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;AACtI,CAAC"}

package/dist/orchestrator/fix.js

@@ -0,0 +1,65 @@
+// Calls appq's own appq:fix workflow through the shared engine, offering it
+// three tool surfaces: read-only appq context tools (get_defect_context,
+// get_scenario, ...), writable appq tools (update_test_cases/add_test_cases/
+// update_run_results — gated behind --dry-run, see tools/dryRun.ts), and
+// real coding tools (read_file/write_file/list_directory/run_command,
+// scoped to one repo). No git operation — a separate agent
+// (appliqation-pr-raise) is responsible for committing/pushing what this
+// one writes locally.
+import { fetchAppqToolDefs, createGatedAppqDispatcher, runWorkflow, } from '@appliqation/agent-core';
+import { READONLY_CONTEXT_TOOLS, WRITABLE_APPQ_TOOLS } from '../tools/safety.js';
+import { CODING_TOOL_DEFS, CodingTools } from '../tools/codingTools.js';
+import { createDryRunDispatcher } from '../tools/dryRun.js';
+function seedMessage(opts) {
+    const lines = [
+        `Defect ID: ${opts.defectId}`,
+        `Target repo root (every file/command tool call is scoped here): ${opts.repoPath}`,
+    ];
+    if (opts.dryRun) {
+        lines.push('Dry run: update_test_cases/add_test_cases/update_run_results calls will be logged, not actually sent ' +
+            'to Appliqation — proceed exactly as you normally would, the suppression happens below you.');
+    }
+    if (opts.testInstruction) {
+        lines.push(`Required testing scope for Phase 5, beyond just re-running the reproducing test case: ${opts.testInstruction}`);
+    }
+    lines.push('Begin now — start with get_defect_context.');
+    return lines.join('\n');
+}
+export async function fix(opts) {
+    const coding = new CodingTools(opts.repoPath, opts.commandTimeoutMs);
+    const appqAllowlist = new Set([...READONLY_CONTEXT_TOOLS, ...WRITABLE_APPQ_TOOLS]);
+    const appqToolDefs = await fetchAppqToolDefs(opts.client, appqAllowlist);
+    const gatedAppq = createDryRunDispatcher(createGatedAppqDispatcher(opts.client, appqAllowlist), opts.dryRun);
+    const codingToolNames = new Set(CODING_TOOL_DEFS.map((t) => t.name));
+    const dispatch = async (name, args) => {
+        if (codingToolNames.has(name))
+            return coding.dispatch(name, args);
+        return gatedAppq(name, args);
+    };
+    const loopResult = await runWorkflow({
+        source: { kind: 'appq', name: 'appq:fix', args: { defect_id: opts.defectId } },
+        fetchPrompt: opts.client.fetchPrompt,
+        seedMessage: seedMessage(opts),
+        tools: [...appqToolDefs, ...CODING_TOOL_DEFS],
+        dispatch,
+        adapter: opts.adapter,
+        budget: opts.budget,
+        onEvent: opts.onEvent,
+    });
+    const writtenPaths = coding.getWrittenPaths();
+    const lastTestRun = coding.lastPlaywrightTestRun();
+    const lastWriteAt = writtenPaths.size > 0 ? Math.max(...writtenPaths.values()) : 0;
+    const verifiedAfterLastWrite = lastTestRun !== null && lastTestRun.ok && lastTestRun.timestamp >= lastWriteAt;
+    return {
+        report: loopResult.report,
+        turns: loopResult.turns,
+        budgetExceeded: loopResult.budgetExceeded,
+        writtenPaths: [...writtenPaths.keys()],
+        testRun: {
+            ran: lastTestRun !== null,
+            ok: verifiedAfterLastWrite,
+            exitCode: lastTestRun?.exitCode ?? null,
+        },
+    };
+}
+//# sourceMappingURL=fix.js.map

package/dist/orchestrator/fix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fix.js","sourceRoot":"","sources":["../../src/orchestrator/fix.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,yEAAyE;AACzE,6EAA6E;AAC7E,yEAAyE;AACzE,sEAAsE;AACtE,2DAA2D;AAC3D,yEAAyE;AACzE,sBAAsB;AAEtB,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,GAKZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAwC5D,SAAS,WAAW,CAAC,IAAgB;IACnC,MAAM,KAAK,GAAG;QACZ,cAAc,IAAI,CAAC,QAAQ,EAAE;QAC7B,mEAAmE,IAAI,CAAC,QAAQ,EAAE;KACnF,CAAC;IACF,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAChB,KAAK,CAAC,IAAI,CACR,uGAAuG;YACrG,4FAA4F,CAC/F,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CACR,yFAAyF,IAAI,CAAC,eAAe,EAAE,CAChH,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;IACzD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,GAAG,CAAC,IAAgB;IACxC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrE,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,sBAAsB,EAAE,GAAG,mBAAmB,CAAC,CAAC,CAAC;IACnF,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IACzE,MAAM,SAAS,GAAG,sBAAsB,CAAC,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAE7G,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAmB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClE,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC;QACnC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE;QAC9E,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;QACpC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC;QAC9B,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,gBAAgB,CAAC;QAC7C,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,sBAAsB,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,EAAE,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC;IAE9G,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE;YACP,GAAG,EAAE,WAAW,KAAK,IAAI;YACzB,EAAE,EAAE,sBAAsB;YAC1B,QAAQ,EAAE,WAAW,EAAE,QAAQ,IAAI,IAAI;SACxC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/codingTools.js

@@ -0,0 +1,173 @@
+// The capability appq:fix's own prompt (Phase 2/4/5) assumes a full coding-
+// agent session has: read local code to locate the defect, write a fix, and
+// run real shell commands to actually verify it. Every path is scoped to
+// repoPath (no traversal out of it); every command goes through
+// commandGate.ts's allowlist AND is spawned via execFile with an explicit
+// argv array — never a shell string — so the OS never parses arguments as
+// shell syntax in the first place.
+import { readFile, writeFile, mkdir, readdir } from 'node:fs/promises';
+import { resolve, dirname, relative, isAbsolute } from 'node:path';
+import { execFile } from 'node:child_process';
+import { assertCommandAllowed } from './commandGate.js';
+// Hand-rolled rather than util.promisify(execFile) — Node's real execFile
+// resolves {stdout, stderr} via an internal util.promisify.custom symbol
+// that a mocked module in tests won't have, so promisify(execFile) silently
+// degrades to generic single-value promisify (stdout only, stderr dropped)
+// under mocking. This wrapper has one obvious behavior either way.
+function execFileAsync(command, args, options) {
+    return new Promise((resolvePromise, rejectPromise) => {
+        execFile(command, args, options, (error, stdout, stderr) => {
+            if (error) {
+                const failure = error;
+                failure.stdout = String(stdout ?? '');
+                failure.stderr = String(stderr ?? '');
+                rejectPromise(failure);
+            }
+            else {
+                resolvePromise({ stdout: String(stdout ?? ''), stderr: String(stderr ?? '') });
+            }
+        });
+    });
+}
+export const CODING_TOOL_DEFS = [
+    {
+        name: 'read_file',
+        description: 'Read a text file, relative to the target repo root.',
+        inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] },
+    },
+    {
+        name: 'write_file',
+        description: 'Write (create or overwrite) a text file, relative to the target repo root. Creates parent ' +
+            'directories as needed. This is how you apply the code fix.',
+        inputSchema: {
+            type: 'object',
+            properties: { path: { type: 'string' }, content: { type: 'string' } },
+            required: ['path', 'content'],
+        },
+    },
+    {
+        name: 'list_directory',
+        description: 'List entries (files and directories) in a directory, relative to the target repo root.',
+        inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: [] },
+    },
+    {
+        name: 'run_command',
+        description: 'Run an allowlisted shell command (npm init/install -D, npx playwright install/--version/test, ' +
+            'node --version, git status/diff) in the target repo. Anything outside that allowlist is refused ' +
+            'before it runs. Use this for Phase 5 verification — never claim a fix works without actually ' +
+            'running the test here.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                command: { type: 'string', description: 'The binary, e.g. "npm", "npx", "node", "git".' },
+                args: { type: 'array', items: { type: 'string' }, description: 'Argv, one element per argument.' },
+            },
+            required: ['command', 'args'],
+        },
+    },
+];
+/** Wraps a real filesystem + shell surface, scoped to one repo root, tracking what actually happened. */
+export class CodingTools {
+    repoPath;
+    commandTimeoutMs;
+    writtenPaths = new Map(); // relative path -> last-written timestamp
+    commandHistory = [];
+    constructor(repoPath, commandTimeoutMs) {
+        this.repoPath = repoPath;
+        this.commandTimeoutMs = commandTimeoutMs;
+    }
+    resolveScoped(relPath) {
+        const resolved = resolve(this.repoPath, relPath);
+        const rel = relative(this.repoPath, resolved);
+        if (rel.startsWith('..') || isAbsolute(rel)) {
+            throw new Error(`Path "${relPath}" escapes the target repo root — refusing.`);
+        }
+        return resolved;
+    }
+    /** Relative paths written so far, each with the timestamp of its most recent write. */
+    getWrittenPaths() {
+        return new Map(this.writtenPaths);
+    }
+    getCommandHistory() {
+        return [...this.commandHistory];
+    }
+    /** The most recent `npx playwright test` invocation's real, execFile-reported outcome — or null if none ran. */
+    lastPlaywrightTestRun() {
+        for (let i = this.commandHistory.length - 1; i >= 0; i--) {
+            const r = this.commandHistory[i];
+            if (r.command === 'npx' && r.args[0] === 'playwright' && r.args[1] === 'test')
+                return r;
+        }
+        return null;
+    }
+    async dispatch(name, args) {
+        switch (name) {
+            case 'read_file': {
+                const rawPath = String(args.path ?? '');
+                try {
+                    const content = await readFile(this.resolveScoped(rawPath), 'utf-8');
+                    return {
+                        ok: true,
+                        text: content.length > 50_000 ? `${content.slice(0, 50_000)}\n... (truncated)` : content,
+                    };
+                }
+                catch (err) {
+                    return { ok: false, text: `Could not read "${rawPath}": ${err.message}` };
+                }
+            }
+            case 'write_file': {
+                const rawPath = String(args.path ?? '');
+                const content = String(args.content ?? '');
+                const resolved = this.resolveScoped(rawPath);
+                await mkdir(dirname(resolved), { recursive: true });
+                await writeFile(resolved, content, 'utf-8');
+                this.writtenPaths.set(rawPath, Date.now());
+                return { ok: true, text: `Wrote ${content.length} bytes to ${rawPath}` };
+            }
+            case 'list_directory': {
+                const rawPath = String(args.path ?? '.');
+                try {
+                    const entries = await readdir(this.resolveScoped(rawPath), { withFileTypes: true });
+                    const lines = entries.map((e) => `${e.isDirectory() ? 'dir ' : 'file'}  ${e.name}`).sort();
+                    return { ok: true, text: lines.join('\n') || '(empty directory)' };
+                }
+                catch (err) {
+                    return { ok: false, text: `Could not list "${rawPath}": ${err.message}` };
+                }
+            }
+            case 'run_command': {
+                const command = String(args.command ?? '');
+                const cmdArgs = Array.isArray(args.args) ? args.args.map(String) : [];
+                try {
+                    assertCommandAllowed(command, cmdArgs);
+                }
+                catch (err) {
+                    return { ok: false, text: err.message };
+                }
+                return this.runAllowed(command, cmdArgs);
+            }
+            default:
+                return { ok: false, text: `Unknown coding tool "${name}"` };
+        }
+    }
+    async runAllowed(command, cmdArgs) {
+        try {
+            const { stdout, stderr } = await execFileAsync(command, cmdArgs, {
+                cwd: this.repoPath,
+                timeout: this.commandTimeoutMs,
+                maxBuffer: 10 * 1024 * 1024,
+            });
+            this.commandHistory.push({ command, args: cmdArgs, exitCode: 0, ok: true, timestamp: Date.now() });
+            const out = `${stdout}${stderr ? `\n[stderr]\n${stderr}` : ''}`.trim();
+            return { ok: true, text: out.length > 20_000 ? out.slice(-20_000) : out || '(no output, exit 0)' };
+        }
+        catch (err) {
+            const e = err;
+            const exitCode = typeof e.code === 'number' ? e.code : null;
+            this.commandHistory.push({ command, args: cmdArgs, exitCode, ok: false, timestamp: Date.now() });
+            const out = `${e.stdout ?? ''}\n[stderr]\n${e.stderr ?? e.message}`.trim();
+            return { ok: false, text: out.length > 20_000 ? out.slice(-20_000) : out };
+        }
+    }
+}
+//# sourceMappingURL=codingTools.js.map

package/dist/tools/codingTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingTools.js","sourceRoot":"","sources":["../../src/tools/codingTools.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,gEAAgE;AAChE,0EAA0E;AAC1E,0EAA0E;AAC1E,mCAAmC;AAEnC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAaxD,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,mEAAmE;AACnE,SAAS,aAAa,CACpB,OAAe,EACf,IAAc,EACd,OAA4D;IAE5D,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,KAAoB,CAAC;gBACrC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,qDAAqD;QAClE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;KAC9F;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,4FAA4F;YAC5F,4DAA4D;QAC9D,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACrE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;SAC9B;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,wFAAwF;QACrG,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;KACxF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,gGAAgG;YAChG,kGAAkG;YAClG,+FAA+F;YAC/F,wBAAwB;QAC1B,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;gBACzF,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;aACnG;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;SAC9B;KACF;CACF,CAAC;AAUF,yGAAyG;AACzG,MAAM,OAAO,WAAW;IAKH;IACA;IALF,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,0CAA0C;IACpF,cAAc,GAAuB,EAAE,CAAC;IAEzD,YACmB,QAAgB,EAChB,gBAAwB;QADxB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,qBAAgB,GAAhB,gBAAgB,CAAQ;IACxC,CAAC;IAEI,aAAa,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,4CAA4C,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,uFAAuF;IACvF,eAAe;QACb,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,gHAAgH;IAChH,qBAAqB;QACnB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;QACxD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;oBACrE,OAAO;wBACL,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO;qBACzF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAC7C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,aAAa,OAAO,EAAE,EAAE,CAAC;YAC3E,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACrE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC;oBACH,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;gBACrD,CAAC;gBACD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,IAAI,GAAG,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,OAAiB;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC/D,GAAG,EAAE,IAAI,CAAC,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,gBAAgB;gBAC9B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnG,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAkB,CAAC;YAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACjG,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;CACF"}

package/dist/tools/commandGate.js

@@ -0,0 +1,77 @@
+// This agent's own real shell capability, needed to actually run the
+// Playwright test appq:fix's Phase 5 requires for verification — same
+// mechanism appliqation-scriptgen already established for the same reason.
+//
+// Hardcoded, non-negotiable invariant (same class of thing as
+// destructiveActionGate.ts / the appq tool allowlists elsewhere in this
+// family): an explicit allowlist of (command, argv-shape), checked BEFORE
+// execution, never widened by prompt text. The actual execution path
+// (codingTools.ts) uses child_process.execFile with an argv array — never a
+// shell string — so even an allowed command can't smuggle a second command
+// via `;`/`&&`/backticks; the OS never parses the arguments as shell syntax
+// in the first place. The allowlist is defense in depth on top of that, not
+// the only layer.
+//
+// Extends scriptgen's own allowlist in one place: appq:fix's Phase 5
+// verification invocation is `npx playwright test -- --appq-run-id={run_id}
+// --grep "{name}"` verbatim — the literal `--` separator and an
+// `--appq-run-id=<id>` flag need to be recognized, and --grep must be
+// optional so a broader (whole-file/whole-suite) run is possible when a
+// caller's --test-instruction calls for one.
+const PACKAGE_SPEC_RE = /^@?[a-z0-9][a-z0-9._/-]*(@[\w.\-^~]+)?$/i;
+const APPQ_RUN_ID_FLAG_RE = /^--appq-run-id=[\w-]+$/;
+function isPlainPackageSpec(spec) {
+    return PACKAGE_SPEC_RE.test(spec) && !spec.includes('..') && !spec.startsWith('-');
+}
+/** A path-shaped argument (a test file glob/relative path) — no traversal, no shell metacharacters. */
+function isSafePathArg(arg) {
+    return !arg.includes('..') && !/[;&|`$(){}<>]/.test(arg) && !arg.startsWith('-');
+}
+const ALLOWED_COMMANDS = {
+    npm: (args) => {
+        if (args.length === 2 && args[0] === 'init' && args[1] === '-y')
+            return true;
+        // npm install -D <package...> — dev deps only, plain package specs only.
+        if (args.length >= 3 && args[0] === 'install' && args[1] === '-D') {
+            return args.slice(2).every(isPlainPackageSpec);
+        }
+        return false;
+    },
+    npx: (args) => {
+        if (args[0] !== 'playwright')
+            return false;
+        if (args[1] === '--version' && args.length === 2)
+            return true;
+        if (args[1] === 'install') {
+            // optional browser names (chromium/firefox/webkit) or --with-deps
+            return args.slice(2).every((a) => /^(chromium|firefox|webkit|--with-deps)$/.test(a));
+        }
+        if (args[1] === 'test') {
+            // optional `--` separator, an --appq-run-id=<id> flag, a --grep
+            // "<title>" pair, and/or a relative spec file path — any combination,
+            // any order (mirrors appq:fix's exact Phase 5 invocation shape).
+            return args.slice(2).every((a) => a === '--' || a === '--grep' || APPQ_RUN_ID_FLAG_RE.test(a) || isSafePathArg(a));
+        }
+        return false;
+    },
+    node: (args) => args.length === 1 && args[0] === '--version',
+    git: (args) => {
+        if (args.length === 1 && args[0] === 'status')
+            return true;
+        if (args.length === 1 && args[0] === 'diff')
+            return true;
+        if (args.length === 2 && args[0] === 'diff' && args[1] === '--stat')
+            return true;
+        return false;
+    },
+};
+export function assertCommandAllowed(command, args) {
+    const validator = ALLOWED_COMMANDS[command];
+    if (!validator || !validator(args)) {
+        throw new Error(`Command "${command} ${args.join(' ')}" is not in the allowlist. This is a hardcoded ` +
+            `boundary — no workflow prompt can widen it. Allowed: npm init -y, npm install -D <pkgs>, ` +
+            `npx playwright install/--version/test (with an optional -- separator, --appq-run-id=<id>, ` +
+            `--grep, and/or a spec path), node --version, git status/diff.`);
+    }
+}
+//# sourceMappingURL=commandGate.js.map

package/dist/tools/commandGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandGate.js","sourceRoot":"","sources":["../../src/tools/commandGate.ts"],"names":[],"mappings":"AAAA,qEAAqE;AACrE,sEAAsE;AACtE,2EAA2E;AAC3E,EAAE;AACF,8DAA8D;AAC9D,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,kBAAkB;AAClB,EAAE;AACF,qEAAqE;AACrE,4EAA4E;AAC5E,gEAAgE;AAChE,sEAAsE;AACtE,wEAAwE;AACxE,6CAA6C;AAE7C,MAAM,eAAe,GAAG,0CAA0C,CAAC;AACnE,MAAM,mBAAmB,GAAG,wBAAwB,CAAC;AAErD,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACnF,CAAC;AAID,MAAM,gBAAgB,GAA8B;IAClD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7E,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1B,kEAAkE;YAClE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACvB,gEAAgE;YAChE,sEAAsE;YACtE,iEAAiE;YACjE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QACrH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW;IAC5D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,IAAc;IAClE,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iDAAiD;YACpF,2FAA2F;YAC3F,4FAA4F;YAC5F,+DAA+D,CAClE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/dryRun.js

@@ -0,0 +1,23 @@
+// --dry-run support: computes/applies the fix normally but suppresses the
+// actual appq writeback (update_test_cases/add_test_cases/update_run_results
+// — see tools/safety.ts's WRITABLE_APPQ_TOOLS). Implemented as a dispatch-
+// level intercept, not a prompt instruction — appq:fix's own workflow prose
+// is what decides to call these, so "don't write" has to be enforced below
+// that, not asked of it. Same pattern as appliqation-autotest's
+// tools/dryRun.ts, adapted to this agent's own write-tool set (test-case
+// sync + run creation, not a verdict/defect write).
+import { WRITABLE_APPQ_TOOLS } from './safety.js';
+export function createDryRunDispatcher(inner, dryRun) {
+    if (!dryRun)
+        return inner;
+    return async (name, args) => {
+        if (!WRITABLE_APPQ_TOOLS.has(name))
+            return inner(name, args);
+        console.error(`[dry-run] would call ${name} with: ${JSON.stringify(args, null, 2)}`);
+        return {
+            ok: true,
+            text: `[dry-run] ${name} suppressed — no write happened. Args were logged for review, not sent to appq.`,
+        };
+    };
+}
+//# sourceMappingURL=dryRun.js.map

package/dist/tools/dryRun.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dryRun.js","sourceRoot":"","sources":["../../src/tools/dryRun.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,6EAA6E;AAC7E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,gEAAgE;AAChE,yEAAyE;AACzE,oDAAoD;AAGpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAElD,MAAM,UAAU,sBAAsB,CACpC,KAA2E,EAC3E,MAAe;IAEf,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAE1B,OAAO,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QAC1B,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAE7D,OAAO,CAAC,KAAK,CAAC,wBAAwB,IAAI,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO;YACL,EAAE,EAAE,IAAI;YACR,IAAI,EAAE,aAAa,IAAI,iFAAiF;SACzG,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/safety.js

@@ -0,0 +1,25 @@
+// This agent's own domain knowledge of which appq tools it may touch — the
+// enforcement mechanism (assertToolAllowed / the gated dispatcher) lives in
+// @appliqation/agent-core, shared with every sibling agent; only the
+// allowlist content is local.
+//
+// Unlike appliqation-scriptgen (read-only), this agent genuinely needs write
+// access: appq:fix's Phase 4 requires syncing the Appliqation scenario
+// (update_test_cases/add_test_cases) after a code fix, and Phase 5 requires
+// creating a real run (update_run_results) to verify it. That write access
+// is real appq state, not local files — see tools/dryRun.ts for how it's
+// gated behind --dry-run, the same discipline appliqation-autotest's
+// validator already applies to its own writes.
+export const READONLY_CONTEXT_TOOLS = new Set([
+    'get_defect_context',
+    'get_defects',
+    'get_scenario',
+    'get_failure_patterns',
+    'get_run_evidence',
+    'get_execution_evidence',
+    'get_automation_readiness',
+    'get_coverage_analysis',
+    'get_test_results',
+]);
+export const WRITABLE_APPQ_TOOLS = new Set(['update_test_cases', 'add_test_cases', 'update_run_results']);
+//# sourceMappingURL=safety.js.map

package/dist/tools/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,8BAA8B;AAC9B,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AACvE,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,qEAAqE;AACrE,+CAA+C;AAE/C,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,oBAAoB;IACpB,aAAa;IACb,cAAc;IACd,sBAAsB;IACtB,kBAAkB;IAClB,wBAAwB;IACxB,0BAA0B;IAC1B,uBAAuB;IACvB,kBAAkB;CACnB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,mBAAmB,EAAE,gBAAgB,EAAE,oBAAoB,CAAC,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,36 @@
+{
+  "name": "@appliqation/defect-fix",
+  "version": "0.1.1",
+  "description": "Standalone agent that fixes an Appliqation defect: loads full defect context, locates and applies a code fix, syncs the Appliqation scenario, and verifies the fix by actually running Playwright.",
+  "type": "module",
+  "bin": {
+    "appliqation-defect-fix": "./dist/cli/index.js"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx src/cli/index.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint src --ext .ts",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@appliqation/agent-core": "^0.1.0",
+    "commander": "^13.1.0",
+    "dotenv": "^16.4.7"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.10",
+    "tsx": "^4.19.3",
+    "typescript": "^5.8.2",
+    "vitest": "^3.2.7"
+  }
+}