@appliqation/scriptgen 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Appliqation Pty Ltd
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,70 @@
+# Appliqation Scriptgen
+
+**Drafts and verifies an enterprise-grade Playwright script for one test case — and never claims it passes without actually running it.**
+
+Point it at a test case that has no canonical automation yet, and it investigates the surrounding context (scenario intent, sibling test flakiness, linked defects, prior execution evidence), writes a real Playwright spec into your repo, and iterates against a real `npx playwright test` run until it's genuinely green — not until the model *says* it's green.
+
+## Why this exists
+
+Most "AI writes your tests" tools generate a script and hope. This one is judged by a single rule: **`testRun.ok` is only ever `true` if a real, `execFile`-reported Playwright process exited 0, and that run happened *after* the most recent file write.** An earlier passing run that predates the latest edit doesn't count — that's a stale result, not a verification. If the generated script never actually ran, the exit code reflects that honestly, every time.
+
+## How it works
+
+```mermaid
+flowchart TD
+    A[test case UUID] --> B[gather context:<br/>scenario, sibling flakiness,<br/>linked defects, evidence]
+    B --> C[draft a Playwright spec]
+    C --> D[npx playwright test]
+    D --> E{passed?}
+    E -- no --> F[read the real failure,<br/>revise the spec]
+    F --> D
+    E -- yes --> G[report: verified: true<br/>+ the written file path]
+```
+
+The context-gathering and drafting *methodology* itself lives in Appliqation's own `appq:automate` MCP prompt — this repo is deliberately thin: it just gives that workflow two tool surfaces (read-only Appliqation context tools, and real filesystem + an allowlisted shell) and lets it do the work.
+
+- **No appq write tool, no git operation.** This agent writes local files only — nothing is synced back to Appliqation and nothing is committed. [`appliqation-pr-raise`](https://github.com/appliqation/appliqation-pr-raise) handles turning the result into a real PR.
+- **A hardcoded, non-negotiable shell allowlist.** `npm init/install -D`, `npx playwright install/--version/test`, `node --version`, `git status/diff` — nothing else can run, checked before execution, spawned via `execFile` with an explicit argv array (never a shell string).
+
+## Quick start
+
+```bash
+npm install -g @appliqation/scriptgen
+```
+
+Create a `.env` file (in whatever directory you'll run it from) with:
+
+```
+APPQ_API_KEY=your-appliqation-api-key
+ANTHROPIC_API_KEY=your-anthropic-key   # or OPENAI_API_KEY — pick one
+```
+
+```bash
+appliqation-scriptgen generate \
+  --test-case-uuid <uuid> \
+  --repo-path /path/to/your/checkout
+```
+
+Add `--environment <name>` if the target repo needs a fresh Playwright config bootstrapped (its `baseURL` context), `--role <name>` to authenticate as a specific role (otherwise inferred per-TC automatically), `--autotest-run-id <id>` to ground the draft in a prior [`appliqation-autotest`](https://github.com/appliqation/appliqation-autotest) run's real execution evidence, and `--json`/`--ci` for a structured summary + CI-friendly exit code.
+
+## Configuration
+
+Copy `.env.example` to `.env`. Requires `APPQ_API_KEY` and one of `ANTHROPIC_API_KEY`/`OPENAI_API_KEY`.
+
+## Development
+
+```bash
+git clone https://github.com/appliqation/appliqation-scriptgen.git
+cd appliqation-scriptgen
+npm install
+cp .env.example .env   # fill in APPQ_API_KEY and one LLM provider key
+npm run dev -- generate --test-case-uuid <uuid> --repo-path <path>
+npm run typecheck
+npm test
+```
+
+See `CLAUDE.md` for a map of this repo if you're working in it with an AI coding assistant.
+
+## License
+
+MIT — see [LICENSE](./LICENSE).

package/dist/cli/audit.js

@@ -0,0 +1,25 @@
+// Extracted out of cli/index.ts so this is testable without triggering that
+// file's top-level program.parseAsync(process.argv) side effect — same
+// reasoning as appliqation-autotest's cli/resolvers.ts.
+import { safeRecord } from '@appliqation/agent-core';
+import { exitCodeFor } from './output.js';
+export async function recordGenerateRun(args) {
+    const { sink, startedAt, endedAt, model, usage, testCaseUuid, result } = args;
+    const summary = result
+        ? { testCaseUuid, writtenPaths: result.writtenPaths, testRan: result.testRun.ran, verified: result.testRun.ok, report: result.report }
+        : undefined;
+    await safeRecord(sink, {
+        agent: 'appliqation-scriptgen',
+        subcommand: 'generate',
+        startedAt,
+        endedAt,
+        durationMillis: endedAt - startedAt,
+        model,
+        usage,
+        turns: result?.turns,
+        budgetExceeded: result?.budgetExceeded,
+        exitCode: summary ? exitCodeFor(summary) : 1,
+        outcome: summary ? { ...summary } : { testCaseUuid, error: true },
+    });
+}
+//# sourceMappingURL=audit.js.map

package/dist/cli/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../src/cli/audit.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,wDAAwD;AAExD,OAAO,EAAE,UAAU,EAAoC,MAAM,yBAAyB,CAAC;AAEvF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAc1C,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,IAA2B;IACjE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC9E,MAAM,OAAO,GAAgC,MAAM;QACjD,CAAC,CAAC,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACtI,CAAC,CAAC,SAAS,CAAC;IAEd,MAAM,UAAU,CAAC,IAAI,EAAE;QACrB,KAAK,EAAE,uBAAuB;QAC9B,UAAU,EAAE,UAAU;QACtB,SAAS;QACT,OAAO;QACP,cAAc,EAAE,OAAO,GAAG,SAAS;QACnC,KAAK;QACL,KAAK;QACL,KAAK,EAAE,MAAM,EAAE,KAAK;QACpB,cAAc,EAAE,MAAM,EAAE,cAAc;QACtC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE;KAClE,CAAC,CAAC;AACL,CAAC"}

package/dist/cli/index.js

@@ -0,0 +1,137 @@
+#!/usr/bin/env node
+// `generate`: draft + verify a Playwright script for one test case, via
+// appq's (enriched) appq:automate workflow given real filesystem + shell
+// tools. See src/orchestrator/generate.ts for the actual mechanism.
+import { Command } from 'commander';
+import { createMcpClient, createAnthropicAdapter, createOpenAiAdapter, createUsageAccumulator, resolveScenarioId, fetchScenarioInfo, resolveUrl, knownRolesForProject, inferRole, } from '@appliqation/agent-core';
+import { config, resolveProvider, resolveModel } from '../config/env.js';
+import { generate } from '../orchestrator/generate.js';
+import { recordGenerateRun } from './audit.js';
+import { printJsonSummary, printHumanSummary, exitCodeFor } from './output.js';
+const client = createMcpClient({ origin: config.appqOrigin, apiKey: config.appqApiKey() });
+function buildAdapter() {
+    const provider = resolveProvider();
+    const model = resolveModel();
+    return provider === 'anthropic'
+        ? createAnthropicAdapter(config.anthropicApiKey, model, config.anthropicMaxTokens)
+        : createOpenAiAdapter(config.openaiApiKey, model, config.openaiMaxOutputTokens);
+}
+function logEvent(prefix) {
+    return (e) => {
+        if (e.type === 'assistant') {
+            const text = (e.detail ?? '').trim();
+            if (text)
+                console.error(`${prefix}[thinking] ${text}`);
+        }
+        else if (e.type === 'tool') {
+            const d = e.detail;
+            console.error(`${prefix}[tool] ${d.name} -> ${d.result.slice(0, 300)}`);
+        }
+        else if (e.type === 'log') {
+            console.error(`${prefix}[log] ${e.detail}`);
+        }
+        else if (e.type === 'usage') {
+            const u = e.detail;
+            const cacheNote = u.cacheReadTokens
+                ? ` (${u.cacheReadTokens} from cache)`
+                : u.cacheWriteTokens
+                    ? ` (${u.cacheWriteTokens} written to cache)`
+                    : '';
+            console.error(`${prefix}[usage] in=${u.inputTokens} out=${u.outputTokens}${cacheNote}`);
+        }
+    };
+}
+const program = new Command();
+program
+    .name('appliqation-scriptgen')
+    .description('Draft and verify an enterprise-grade Playwright script for one Appliqation test case.');
+program
+    .command('generate')
+    .description("Compose a Playwright test for one TC via appq's appq:automate workflow (context: scenario, sibling-TC " +
+    'flakiness, linked defects, manual/agentic execution evidence, canonical script if present), given real ' +
+    'filesystem + an allowlisted shell so it can bootstrap the target repo and actually run the result — ' +
+    '`npx playwright test` is what decides pass/fail, never the model\'s own claim. Writes local files only: ' +
+    'no appq write tool call, no git operation. scenario_id/project_id are always derived from ' +
+    '--test-case-uuid, never accepted as separate inputs.')
+    .requiredOption('--test-case-uuid <uuid>', 'test case UUID to generate a script for')
+    .option('--environment <name>', 'environment name — its URL (from get_project_settings) is offered as context for the target app\'s ' +
+    'baseURL, only if the target repo needs a Playwright config bootstrapped from scratch')
+    .option('--role <name>', 'authenticate as this role in the generated script (setupAuth). Omit for per-TC inference from the TC\'s ' +
+    'own tag/name (same mechanism appliqation-autotest uses), or for ungated projects where neither applies.')
+    .option('--autotest-run-id <id>', 'a prior appliqation-autotest run for this TC. Passed straight through as appq:automate\'s autotest_run_id ' +
+    "arg — pulls that run's execution evidence and switches to autonomous mode (no confirmation steps, no " +
+    'live-browsing phase).')
+    .option('--repo-path <path>', 'target repo root every file/command tool call is scoped to', process.cwd())
+    .option('--file-path <path>', 'local spec file to extend or create. Omit to let the AI discover/propose one.')
+    .option('--max-turns <n>', 'override BUDGET_MAX_TURNS for this run')
+    .option('--json', 'print a single structured JSON summary on stdout instead of a human-readable report')
+    .option('--ci', 'shorthand for --json; exit code already reflects the real, execFile-verified outcome either way')
+    .action(async (opts) => {
+    const json = (opts.json ?? false) || (opts.ci ?? false);
+    const adapter = buildAdapter();
+    const scenarioId = resolveScenarioId({ testCaseUuid: opts.testCaseUuid });
+    const { projectId, tcs } = await fetchScenarioInfo(client, scenarioId);
+    const environmentUrl = opts.environment ? await resolveUrl(client, opts.environment, projectId) : undefined;
+    let role = opts.role;
+    if (!role) {
+        const knownRoles = knownRolesForProject(projectId);
+        const tcInfo = tcs.find((t) => t.testCaseUuid === opts.testCaseUuid);
+        const inferred = tcInfo ? inferRole(tcInfo, knownRoles) : null;
+        if (inferred) {
+            role = inferred;
+            console.error(`[setup] authenticated as role "${inferred}" (inferred)`);
+        }
+    }
+    const budget = { ...config.budget, ...(opts.maxTurns ? { maxTurns: Number(opts.maxTurns) } : {}) };
+    const startedAt = Date.now();
+    const usage = createUsageAccumulator();
+    const baseLog = logEvent('');
+    let result;
+    try {
+        result = await generate({
+            client,
+            adapter,
+            projectId,
+            scenarioId,
+            testCaseUuid: opts.testCaseUuid,
+            repoPath: opts.repoPath,
+            budget,
+            commandTimeoutMs: config.commandTimeoutMs,
+            filePath: opts.filePath,
+            autotestRunId: opts.autotestRunId,
+            role,
+            environmentUrl,
+            onEvent: (e) => {
+                baseLog(e);
+                if (e.type === 'usage')
+                    usage.onUsage(e.detail);
+            },
+        });
+    }
+    finally {
+        // Audit write happens whether the run succeeded or threw — see
+        // @appliqation/agent-core's audit/sink.ts: safeRecord() (used
+        // inside recordGenerateRun) never lets a failed/unreachable audit
+        // sink affect this process's real outcome.
+        await recordGenerateRun({ sink: config.auditSink, startedAt, endedAt: Date.now(), model: resolveModel(), usage: usage.totals(), testCaseUuid: opts.testCaseUuid, result });
+    }
+    if (!json) {
+        console.log('\n=== Report ===\n');
+        console.log(result.report);
+        console.error(`\n(${result.turns} turns, budget exceeded: ${result.budgetExceeded})`);
+    }
+    const summary = {
+        testCaseUuid: opts.testCaseUuid,
+        writtenPaths: result.writtenPaths,
+        testRan: result.testRun.ran,
+        verified: result.testRun.ok,
+        report: result.report,
+    };
+    if (json)
+        printJsonSummary(summary);
+    else
+        printHumanSummary(summary);
+    process.exitCode = exitCodeFor(summary);
+});
+program.parseAsync(process.argv);
+//# sourceMappingURL=index.js.map

package/dist/cli/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/cli/index.ts"],"names":[],"mappings":";AACA,wEAAwE;AACxE,yEAAyE;AACzE,oEAAoE;AAEpE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,eAAe,EACf,sBAAsB,EACtB,mBAAmB,EACnB,sBAAsB,EACtB,iBAAiB,EACjB,iBAAiB,EACjB,UAAU,EACV,oBAAoB,EACpB,SAAS,GAEV,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACzE,OAAO,EAAE,QAAQ,EAAE,MAAM,6BAA6B,CAAC;AAEvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAG/E,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AAE3F,SAAS,YAAY;IACnB,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;IAC7B,OAAO,QAAQ,KAAK,WAAW;QAC7B,CAAC,CAAC,sBAAsB,CAAC,MAAM,CAAC,eAAgB,EAAE,KAAK,EAAE,MAAM,CAAC,kBAAkB,CAAC;QACnF,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,YAAa,EAAE,KAAK,EAAE,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACrF,CAAC;AAED,SAAS,QAAQ,CAAC,MAAc;IAC9B,OAAO,CAAC,CAAqC,EAAE,EAAE;QAC/C,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,IAAI,GAAG,CAAE,CAAC,CAAC,MAAiB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACjD,IAAI,IAAI;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC7B,MAAM,CAAC,GAAG,CAAC,CAAC,MAA0C,CAAC;YACvD,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,UAAU,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAC1E,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,SAAS,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9C,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,MAA4G,CAAC;YACzH,MAAM,SAAS,GAAG,CAAC,CAAC,eAAe;gBACjC,CAAC,CAAC,KAAK,CAAC,CAAC,eAAe,cAAc;gBACtC,CAAC,CAAC,CAAC,CAAC,gBAAgB;oBAClB,CAAC,CAAC,KAAK,CAAC,CAAC,gBAAgB,oBAAoB;oBAC7C,CAAC,CAAC,EAAE,CAAC;YACT,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,YAAY,GAAG,SAAS,EAAE,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE,CAAC;AAC9B,OAAO;KACJ,IAAI,CAAC,uBAAuB,CAAC;KAC7B,WAAW,CAAC,uFAAuF,CAAC,CAAC;AAExG,OAAO;KACJ,OAAO,CAAC,UAAU,CAAC;KACnB,WAAW,CACV,wGAAwG;IACtG,yGAAyG;IACzG,sGAAsG;IACtG,0GAA0G;IAC1G,4FAA4F;IAC5F,sDAAsD,CACzD;KACA,cAAc,CAAC,yBAAyB,EAAE,yCAAyC,CAAC;KACpF,MAAM,CACL,sBAAsB,EACtB,qGAAqG;IACnG,sFAAsF,CACzF;KACA,MAAM,CACL,eAAe,EACf,0GAA0G;IACxG,yGAAyG,CAC5G;KACA,MAAM,CACL,wBAAwB,EACxB,4GAA4G;IAC1G,uGAAuG;IACvG,uBAAuB,CAC1B;KACA,MAAM,CAAC,oBAAoB,EAAE,4DAA4D,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;KACzG,MAAM,CAAC,oBAAoB,EAAE,+EAA+E,CAAC;KAC7G,MAAM,CAAC,iBAAiB,EAAE,wCAAwC,CAAC;KACnE,MAAM,CAAC,QAAQ,EAAE,qFAAqF,CAAC;KACvG,MAAM,CAAC,MAAM,EAAE,iGAAiG,CAAC;KACjH,MAAM,CACL,KAAK,EAAE,IAUN,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,KAAK,CAAC,CAAC;IACxD,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;IAE/B,MAAM,UAAU,GAAG,iBAAiB,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC1E,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAEvE,MAAM,cAAc,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5G,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACrB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,MAAM,UAAU,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;QACnD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC/D,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,GAAG,QAAQ,CAAC;YAChB,OAAO,CAAC,KAAK,CAAC,kCAAkC,QAAQ,cAAc,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAEnG,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,sBAAsB,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC7B,IAAI,MAAkC,CAAC;IACvC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,QAAQ,CAAC;YACtB,MAAM;YACN,OAAO;YACP,SAAS;YACT,UAAU;YACV,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM;YACN,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,IAAI;YACJ,cAAc;YACd,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE;gBACb,OAAO,CAAC,CAAC,CAAC,CAAC;gBACX,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO;oBAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAA4G,CAAC,CAAC;YACxJ,CAAC;SACF,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,+DAA+D;QAC/D,8DAA8D;QAC9D,kEAAkE;QAClE,2CAA2C;QAC3C,MAAM,iBAAiB,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7K,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAClC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3B,OAAO,CAAC,KAAK,CAAC,MAAM,MAAM,CAAC,KAAK,4BAA4B,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IACxF,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,YAAY,EAAE,IAAI,CAAC,YAAY;QAC/B,YAAY,EAAE,MAAM,CAAC,YAAY;QACjC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;QAC3B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC;IACF,IAAI,IAAI;QAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;;QAC/B,iBAAiB,CAAC,OAAO,CAAC,CAAC;IAChC,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;AAC1C,CAAC,CACF,CAAC;AAEJ,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC"}

package/dist/cli/output.js

@@ -0,0 +1,29 @@
+// --json/--ci's renderer, matching appliqation-autotest's output.ts shape.
+// exitCodeFor() never trusts the model's own report text — only
+// GenerateResult.testRun.ok, which is derived from a real execFile exit
+// code, decides success. A file that was never actually run — or was run
+// before its last edit — is not a pass, no matter what the report claims.
+export function printJsonSummary(summary) {
+    console.log(JSON.stringify(summary, null, 2));
+}
+export function printHumanSummary(summary) {
+    console.log(`\n=== Test case ${summary.testCaseUuid} ===\n`);
+    if (summary.writtenPaths.length === 0) {
+        console.log('  No files were written.');
+    }
+    else {
+        for (const p of summary.writtenPaths)
+            console.log(`  wrote  ${p}`);
+    }
+    if (!summary.testRan) {
+        console.log('\n  Never actually ran `npx playwright test` — not verified.');
+    }
+    else {
+        console.log(`\n  Verification: ${summary.verified ? 'PASSED' : 'FAILED (or stale — run predates the last edit)'}`);
+    }
+}
+/** 1 unless the file was actually run — via a real, execFile-reported exit code — after its last edit, and passed. */
+export function exitCodeFor(summary) {
+    return summary.testRan && summary.verified ? 0 : 1;
+}
+//# sourceMappingURL=output.js.map

package/dist/cli/output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"output.js","sourceRoot":"","sources":["../../src/cli/output.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,gEAAgE;AAChE,wEAAwE;AACxE,yEAAyE;AACzE,0EAA0E;AAU1E,MAAM,UAAU,gBAAgB,CAAC,OAAwB;IACvD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAwB;IACxD,OAAO,CAAC,GAAG,CAAC,mBAAmB,OAAO,CAAC,YAAY,QAAQ,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC1C,CAAC;SAAM,CAAC;QACN,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,YAAY;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,8DAA8D,CAAC,CAAC;IAC9E,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,qBAAqB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,gDAAgD,EAAE,CAAC,CAAC;IACrH,CAAC;AACH,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,WAAW,CAAC,OAAwB;IAClD,OAAO,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/config/env.js

@@ -0,0 +1,49 @@
+import 'dotenv/config';
+import { DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL } from '@appliqation/agent-core/providers';
+import { required, optional } from '@appliqation/agent-core/config';
+import { resolveAuditSink } from '@appliqation/agent-core/audit';
+export const config = {
+    appqOrigin: optional('APPQ_ORIGIN') ?? 'https://appq.appliqation.io',
+    appqApiKey: () => required('APPQ_API_KEY'),
+    anthropicApiKey: optional('ANTHROPIC_API_KEY'),
+    openaiApiKey: optional('OPENAI_API_KEY'),
+    anthropicModel: optional('ANTHROPIC_MODEL'),
+    openaiModel: optional('OPENAI_MODEL'),
+    anthropicMaxTokens: Number(optional('ANTHROPIC_MAX_TOKENS') ?? 8192),
+    openaiMaxOutputTokens: Number(optional('OPENAI_MAX_OUTPUT_TOKENS') ?? 8192),
+    // A single, generous budget — unlike appliqation-autotest there is no
+    // executor/validator split here, just one drafting-and-verifying pass that
+    // may need several rounds of "run the test, read the failure, fix it".
+    budget: {
+        maxCalls: Number(optional('BUDGET_MAX_CALLS') ?? 60),
+        // This agent never calls browser_navigate (no browser tools offered at
+        // all), so BudgetTracker's page counter never increments — a large,
+        // effectively-unreachable cap rather than 0, since 0 would trip
+        // immediately (exceeded() checks pages >= maxPages, and 0 >= 0 is true).
+        maxPages: Number(optional('BUDGET_MAX_PAGES') ?? 999_999),
+        maxMillis: Number(optional('BUDGET_MAX_MILLIS') ?? 20 * 60 * 1000),
+        maxTurns: Number(optional('BUDGET_MAX_TURNS') ?? 60),
+    },
+    // Wall-clock cap per run_command invocation (npm install / playwright test
+    // can each legitimately take a while) — separate from the overall budget.
+    commandTimeoutMs: Number(optional('COMMAND_TIMEOUT_MS') ?? 5 * 60 * 1000),
+    // Observability, entirely opt-in — see @appliqation/agent-core's audit/sink.ts.
+    auditSink: resolveAuditSink({
+        auditMongoUri: optional('AUDIT_MONGO_URI'),
+        auditMongoDb: optional('AUDIT_MONGO_DB'),
+        auditMongoCollection: optional('AUDIT_MONGO_COLLECTION'),
+        auditJsonlPath: optional('AUDIT_JSONL_PATH'),
+    }),
+};
+export function resolveProvider() {
+    if (config.anthropicApiKey)
+        return 'anthropic';
+    if (config.openaiApiKey)
+        return 'openai';
+    throw new Error('Set ANTHROPIC_API_KEY or OPENAI_API_KEY');
+}
+export function resolveModel() {
+    const provider = resolveProvider();
+    return provider === 'anthropic' ? (config.anthropicModel ?? DEFAULT_ANTHROPIC_MODEL) : (config.openaiModel ?? DEFAULT_OPENAI_MODEL);
+}
+//# sourceMappingURL=env.js.map

package/dist/config/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../src/config/env.ts"],"names":[],"mappings":"AAAA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AAClG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEjE,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,UAAU,EAAE,QAAQ,CAAC,aAAa,CAAC,IAAI,6BAA6B;IACpE,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC;IAC1C,eAAe,EAAE,QAAQ,CAAC,mBAAmB,CAAC;IAC9C,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC;IACxC,cAAc,EAAE,QAAQ,CAAC,iBAAiB,CAAC;IAC3C,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;IACrC,kBAAkB,EAAE,MAAM,CAAC,QAAQ,CAAC,sBAAsB,CAAC,IAAI,IAAI,CAAC;IACpE,qBAAqB,EAAE,MAAM,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,IAAI,CAAC;IAC3E,sEAAsE;IACtE,2EAA2E;IAC3E,uEAAuE;IACvE,MAAM,EAAE;QACN,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;QACpD,uEAAuE;QACvE,oEAAoE;QACpE,gEAAgE;QAChE,yEAAyE;QACzE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,OAAO,CAAC;QACzD,SAAS,EAAE,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;QAClE,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC;KACrD;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,gBAAgB,EAAE,MAAM,CAAC,QAAQ,CAAC,oBAAoB,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IAEzE,gFAAgF;IAChF,SAAS,EAAE,gBAAgB,CAAC;QAC1B,aAAa,EAAE,QAAQ,CAAC,iBAAiB,CAAC;QAC1C,YAAY,EAAE,QAAQ,CAAC,gBAAgB,CAAC;QACxC,oBAAoB,EAAE,QAAQ,CAAC,wBAAwB,CAAC;QACxD,cAAc,EAAE,QAAQ,CAAC,kBAAkB,CAAC;KAC7C,CAAC;CACH,CAAC;AAEF,MAAM,UAAU,eAAe;IAC7B,IAAI,MAAM,CAAC,eAAe;QAAE,OAAO,WAAW,CAAC;IAC/C,IAAI,MAAM,CAAC,YAAY;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,OAAO,QAAQ,KAAK,WAAW,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,IAAI,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,IAAI,oBAAoB,CAAC,CAAC;AACtI,CAAC"}

package/dist/orchestrator/generate.js

@@ -0,0 +1,77 @@
+// Calls the (now enriched, see appq's AutomatePrompt.php) appq:automate
+// workflow through the shared engine, offering it exactly two tool
+// surfaces: read-only appq context tools (get_scenario, get_run_evidence,
+// get_defect_context, ...) and real coding tools (read_file/write_file/
+// list_directory/run_command, scoped to one repo). No appq write tool, no
+// git operation, no browser — the prompt's own Phase 0/3/5/6 already
+// describe exactly the bootstrap-draft-verify loop needed, and Phase 4
+// (optional live browsing) is skipped outright once autotest_run_id is
+// passed (see AutomatePrompt.php's autonomous mode).
+import { fetchAppqToolDefs, createGatedAppqDispatcher, runWorkflow, } from '@appliqation/agent-core';
+import { READONLY_CONTEXT_TOOLS } from '../tools/safety.js';
+import { CODING_TOOL_DEFS, CodingTools } from '../tools/codingTools.js';
+function seedMessage(opts) {
+    const lines = [
+        `Project ID: ${opts.projectId}`,
+        `Scenario ID: ${opts.scenarioId}`,
+        `Test case UUID: ${opts.testCaseUuid}`,
+        `Target repo root (every file/command tool call is scoped here): ${opts.repoPath}`,
+    ];
+    if (opts.filePath)
+        lines.push(`Target spec file: ${opts.filePath}`);
+    if (opts.role) {
+        lines.push(`This TC authenticates as role "${opts.role}" — if the target app is gated, the generated script ` +
+            `should call setupAuth({ project_id: ${opts.projectId}, role: "${opts.role}" }) per the contract rule.`);
+    }
+    if (opts.environmentUrl) {
+        lines.push(`Target app base URL (for playwright.config's baseURL, only if you need to bootstrap one): ${opts.environmentUrl}`);
+    }
+    lines.push('Begin now — start with get_scenario.');
+    return lines.join('\n');
+}
+export async function generate(opts) {
+    const coding = new CodingTools(opts.repoPath, opts.commandTimeoutMs);
+    const appqToolDefs = await fetchAppqToolDefs(opts.client, READONLY_CONTEXT_TOOLS);
+    const gatedAppq = createGatedAppqDispatcher(opts.client, READONLY_CONTEXT_TOOLS);
+    const codingToolNames = new Set(CODING_TOOL_DEFS.map((t) => t.name));
+    const dispatch = async (name, args) => {
+        if (codingToolNames.has(name))
+            return coding.dispatch(name, args);
+        return gatedAppq(name, args);
+    };
+    const promptArgs = {
+        project_id: opts.projectId,
+        scenario_id: opts.scenarioId,
+        test_case_uuid: opts.testCaseUuid,
+    };
+    if (opts.filePath)
+        promptArgs.file_path = opts.filePath;
+    if (opts.autotestRunId)
+        promptArgs.autotest_run_id = opts.autotestRunId;
+    const loopResult = await runWorkflow({
+        source: { kind: 'appq', name: 'appq:automate', args: promptArgs },
+        fetchPrompt: opts.client.fetchPrompt,
+        seedMessage: seedMessage(opts),
+        tools: [...appqToolDefs, ...CODING_TOOL_DEFS],
+        dispatch,
+        adapter: opts.adapter,
+        budget: opts.budget,
+        onEvent: opts.onEvent,
+    });
+    const writtenPaths = coding.getWrittenPaths();
+    const lastTestRun = coding.lastPlaywrightTestRun();
+    const lastWriteAt = writtenPaths.size > 0 ? Math.max(...writtenPaths.values()) : 0;
+    const verifiedAfterLastWrite = lastTestRun !== null && lastTestRun.ok && lastTestRun.timestamp >= lastWriteAt;
+    return {
+        report: loopResult.report,
+        turns: loopResult.turns,
+        budgetExceeded: loopResult.budgetExceeded,
+        writtenPaths: [...writtenPaths.keys()],
+        testRun: {
+            ran: lastTestRun !== null,
+            ok: verifiedAfterLastWrite,
+            exitCode: lastTestRun?.exitCode ?? null,
+        },
+    };
+}
+//# sourceMappingURL=generate.js.map

package/dist/orchestrator/generate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate.js","sourceRoot":"","sources":["../../src/orchestrator/generate.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,mEAAmE;AACnE,0EAA0E;AAC1E,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,uEAAuE;AACvE,uEAAuE;AACvE,qDAAqD;AAErD,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,WAAW,GAKZ,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AA0CxE,SAAS,WAAW,CAAC,IAAqB;IACxC,MAAM,KAAK,GAAG;QACZ,eAAe,IAAI,CAAC,SAAS,EAAE;QAC/B,gBAAgB,IAAI,CAAC,UAAU,EAAE;QACjC,mBAAmB,IAAI,CAAC,YAAY,EAAE;QACtC,mEAAmE,IAAI,CAAC,QAAQ,EAAE;KACnF,CAAC;IACF,IAAI,IAAI,CAAC,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,qBAAqB,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;IACpE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CACR,kCAAkC,IAAI,CAAC,IAAI,uDAAuD;YAChG,uCAAuC,IAAI,CAAC,SAAS,YAAY,IAAI,CAAC,IAAI,6BAA6B,CAC1G,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,CAAC,cAAc,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,6FAA6F,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;IACjI,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;IACnD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAAC,IAAqB;IAClD,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAClF,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;IAEjF,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAmB,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;QACpD,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAClE,OAAO,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC/B,CAAC,CAAC;IAEF,MAAM,UAAU,GAA4B;QAC1C,UAAU,EAAE,IAAI,CAAC,SAAS;QAC1B,WAAW,EAAE,IAAI,CAAC,UAAU;QAC5B,cAAc,EAAE,IAAI,CAAC,YAAY;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,QAAQ;QAAE,UAAU,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC;IACxD,IAAI,IAAI,CAAC,aAAa;QAAE,UAAU,CAAC,eAAe,GAAG,IAAI,CAAC,aAAa,CAAC;IAExE,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC;QACnC,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,UAAU,EAAE;QACjE,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW;QACpC,WAAW,EAAE,WAAW,CAAC,IAAI,CAAC;QAC9B,KAAK,EAAE,CAAC,GAAG,YAAY,EAAE,GAAG,gBAAgB,CAAC;QAC7C,QAAQ;QACR,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,OAAO,EAAE,IAAI,CAAC,OAAO;KACtB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,CAAC;IAC9C,MAAM,WAAW,GAAG,MAAM,CAAC,qBAAqB,EAAE,CAAC;IACnD,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,sBAAsB,GAAG,WAAW,KAAK,IAAI,IAAI,WAAW,CAAC,EAAE,IAAI,WAAW,CAAC,SAAS,IAAI,WAAW,CAAC;IAE9G,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,KAAK,EAAE,UAAU,CAAC,KAAK;QACvB,cAAc,EAAE,UAAU,CAAC,cAAc;QACzC,YAAY,EAAE,CAAC,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE;YACP,GAAG,EAAE,WAAW,KAAK,IAAI;YACzB,EAAE,EAAE,sBAAsB;YAC1B,QAAQ,EAAE,WAAW,EAAE,QAAQ,IAAI,IAAI;SACxC;KACF,CAAC;AACJ,CAAC"}

package/dist/tools/codingTools.js

@@ -0,0 +1,173 @@
+// The capability appq:automate's own prompt (Phase 0/3/5/6) assumes a full
+// coding-agent session has: read/write a local repo, and run real shell
+// commands to bootstrap Playwright and actually verify the generated spec.
+// Every path is scoped to repoPath (no traversal out of it); every command
+// goes through commandGate.ts's allowlist AND is spawned via execFile with
+// an explicit argv array — never a shell string — so the OS never parses
+// arguments as shell syntax in the first place.
+import { readFile, writeFile, mkdir, readdir } from 'node:fs/promises';
+import { resolve, dirname, relative, isAbsolute } from 'node:path';
+import { execFile } from 'node:child_process';
+import { assertCommandAllowed } from './commandGate.js';
+// Hand-rolled rather than util.promisify(execFile) — Node's real execFile
+// resolves {stdout, stderr} via an internal util.promisify.custom symbol
+// that a mocked module in tests won't have, so promisify(execFile) silently
+// degrades to generic single-value promisify (stdout only, stderr dropped)
+// under mocking. This wrapper has one obvious behavior either way.
+function execFileAsync(command, args, options) {
+    return new Promise((resolvePromise, rejectPromise) => {
+        execFile(command, args, options, (error, stdout, stderr) => {
+            if (error) {
+                const failure = error;
+                failure.stdout = String(stdout ?? '');
+                failure.stderr = String(stderr ?? '');
+                rejectPromise(failure);
+            }
+            else {
+                resolvePromise({ stdout: String(stdout ?? ''), stderr: String(stderr ?? '') });
+            }
+        });
+    });
+}
+export const CODING_TOOL_DEFS = [
+    {
+        name: 'read_file',
+        description: 'Read a text file, relative to the target repo root.',
+        inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: ['path'] },
+    },
+    {
+        name: 'write_file',
+        description: 'Write (create or overwrite) a text file, relative to the target repo root. Creates parent ' +
+            'directories as needed. This is how you write the generated spec and any config files.',
+        inputSchema: {
+            type: 'object',
+            properties: { path: { type: 'string' }, content: { type: 'string' } },
+            required: ['path', 'content'],
+        },
+    },
+    {
+        name: 'list_directory',
+        description: 'List entries (files and directories) in a directory, relative to the target repo root.',
+        inputSchema: { type: 'object', properties: { path: { type: 'string' } }, required: [] },
+    },
+    {
+        name: 'run_command',
+        description: 'Run an allowlisted shell command (npm init/install -D, npx playwright install/--version/test, ' +
+            'node --version, git status/diff) in the target repo. Anything outside that allowlist is refused ' +
+            'before it runs. Use this for Phase 0 bootstrap and Phase 6 verification — never claim a test ' +
+            'passed without actually running it here.',
+        inputSchema: {
+            type: 'object',
+            properties: {
+                command: { type: 'string', description: 'The binary, e.g. "npm", "npx", "node", "git".' },
+                args: { type: 'array', items: { type: 'string' }, description: 'Argv, one element per argument.' },
+            },
+            required: ['command', 'args'],
+        },
+    },
+];
+/** Wraps a real filesystem + shell surface, scoped to one repo root, tracking what actually happened. */
+export class CodingTools {
+    repoPath;
+    commandTimeoutMs;
+    writtenPaths = new Map(); // relative path -> last-written timestamp
+    commandHistory = [];
+    constructor(repoPath, commandTimeoutMs) {
+        this.repoPath = repoPath;
+        this.commandTimeoutMs = commandTimeoutMs;
+    }
+    resolveScoped(relPath) {
+        const resolved = resolve(this.repoPath, relPath);
+        const rel = relative(this.repoPath, resolved);
+        if (rel.startsWith('..') || isAbsolute(rel)) {
+            throw new Error(`Path "${relPath}" escapes the target repo root — refusing.`);
+        }
+        return resolved;
+    }
+    /** Relative paths written so far, each with the timestamp of its most recent write. */
+    getWrittenPaths() {
+        return new Map(this.writtenPaths);
+    }
+    getCommandHistory() {
+        return [...this.commandHistory];
+    }
+    /** The most recent `npx playwright test` invocation's real, execFile-reported outcome — or null if none ran. */
+    lastPlaywrightTestRun() {
+        for (let i = this.commandHistory.length - 1; i >= 0; i--) {
+            const r = this.commandHistory[i];
+            if (r.command === 'npx' && r.args[0] === 'playwright' && r.args[1] === 'test')
+                return r;
+        }
+        return null;
+    }
+    async dispatch(name, args) {
+        switch (name) {
+            case 'read_file': {
+                const rawPath = String(args.path ?? '');
+                try {
+                    const content = await readFile(this.resolveScoped(rawPath), 'utf-8');
+                    return {
+                        ok: true,
+                        text: content.length > 50_000 ? `${content.slice(0, 50_000)}\n... (truncated)` : content,
+                    };
+                }
+                catch (err) {
+                    return { ok: false, text: `Could not read "${rawPath}": ${err.message}` };
+                }
+            }
+            case 'write_file': {
+                const rawPath = String(args.path ?? '');
+                const content = String(args.content ?? '');
+                const resolved = this.resolveScoped(rawPath);
+                await mkdir(dirname(resolved), { recursive: true });
+                await writeFile(resolved, content, 'utf-8');
+                this.writtenPaths.set(rawPath, Date.now());
+                return { ok: true, text: `Wrote ${content.length} bytes to ${rawPath}` };
+            }
+            case 'list_directory': {
+                const rawPath = String(args.path ?? '.');
+                try {
+                    const entries = await readdir(this.resolveScoped(rawPath), { withFileTypes: true });
+                    const lines = entries.map((e) => `${e.isDirectory() ? 'dir ' : 'file'}  ${e.name}`).sort();
+                    return { ok: true, text: lines.join('\n') || '(empty directory)' };
+                }
+                catch (err) {
+                    return { ok: false, text: `Could not list "${rawPath}": ${err.message}` };
+                }
+            }
+            case 'run_command': {
+                const command = String(args.command ?? '');
+                const cmdArgs = Array.isArray(args.args) ? args.args.map(String) : [];
+                try {
+                    assertCommandAllowed(command, cmdArgs);
+                }
+                catch (err) {
+                    return { ok: false, text: err.message };
+                }
+                return this.runAllowed(command, cmdArgs);
+            }
+            default:
+                return { ok: false, text: `Unknown coding tool "${name}"` };
+        }
+    }
+    async runAllowed(command, cmdArgs) {
+        try {
+            const { stdout, stderr } = await execFileAsync(command, cmdArgs, {
+                cwd: this.repoPath,
+                timeout: this.commandTimeoutMs,
+                maxBuffer: 10 * 1024 * 1024,
+            });
+            this.commandHistory.push({ command, args: cmdArgs, exitCode: 0, ok: true, timestamp: Date.now() });
+            const out = `${stdout}${stderr ? `\n[stderr]\n${stderr}` : ''}`.trim();
+            return { ok: true, text: out.length > 20_000 ? out.slice(-20_000) : out || '(no output, exit 0)' };
+        }
+        catch (err) {
+            const e = err;
+            const exitCode = typeof e.code === 'number' ? e.code : null;
+            this.commandHistory.push({ command, args: cmdArgs, exitCode, ok: false, timestamp: Date.now() });
+            const out = `${e.stdout ?? ''}\n[stderr]\n${e.stderr ?? e.message}`.trim();
+            return { ok: false, text: out.length > 20_000 ? out.slice(-20_000) : out };
+        }
+    }
+}
+//# sourceMappingURL=codingTools.js.map

package/dist/tools/codingTools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codingTools.js","sourceRoot":"","sources":["../../src/tools/codingTools.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,wEAAwE;AACxE,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,yEAAyE;AACzE,gDAAgD;AAEhD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAE9C,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAaxD,0EAA0E;AAC1E,yEAAyE;AACzE,4EAA4E;AAC5E,2EAA2E;AAC3E,mEAAmE;AACnE,SAAS,aAAa,CACpB,OAAe,EACf,IAAc,EACd,OAA4D;IAE5D,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;QACnD,QAAQ,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;YACzD,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,OAAO,GAAG,KAAoB,CAAC;gBACrC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;gBACtC,aAAa,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,cAAc,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAiB;IAC5C;QACE,IAAI,EAAE,WAAW;QACjB,WAAW,EAAE,qDAAqD;QAClE,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE;KAC9F;IACD;QACE,IAAI,EAAE,YAAY;QAClB,WAAW,EACT,4FAA4F;YAC5F,uFAAuF;QACzF,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;YACrE,QAAQ,EAAE,CAAC,MAAM,EAAE,SAAS,CAAC;SAC9B;KACF;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,WAAW,EAAE,wFAAwF;QACrG,WAAW,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;KACxF;IACD;QACE,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,gGAAgG;YAChG,kGAAkG;YAClG,+FAA+F;YAC/F,0CAA0C;QAC5C,WAAW,EAAE;YACX,IAAI,EAAE,QAAQ;YACd,UAAU,EAAE;gBACV,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,+CAA+C,EAAE;gBACzF,IAAI,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,iCAAiC,EAAE;aACnG;YACD,QAAQ,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC;SAC9B;KACF;CACF,CAAC;AAUF,yGAAyG;AACzG,MAAM,OAAO,WAAW;IAKH;IACA;IALF,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC,CAAC,0CAA0C;IACpF,cAAc,GAAuB,EAAE,CAAC;IAEzD,YACmB,QAAgB,EAChB,gBAAwB;QADxB,aAAQ,GAAR,QAAQ,CAAQ;QAChB,qBAAgB,GAAhB,gBAAgB,CAAQ;IACxC,CAAC;IAEI,aAAa,CAAC,OAAe;QACnC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QACjD,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC9C,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,SAAS,OAAO,4CAA4C,CAAC,CAAC;QAChF,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,uFAAuF;IACvF,eAAe;QACb,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAED,iBAAiB;QACf,OAAO,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC;IAClC,CAAC;IAED,gHAAgH;IAChH,qBAAqB;QACnB,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YACzD,MAAM,CAAC,GAAG,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;gBAAE,OAAO,CAAC,CAAC;QAC1F,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,IAA6B;QACxD,QAAQ,IAAI,EAAE,CAAC;YACb,KAAK,WAAW,CAAC,CAAC,CAAC;gBACjB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;oBACrE,OAAO;wBACL,EAAE,EAAE,IAAI;wBACR,IAAI,EAAE,OAAO,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC,CAAC,OAAO;qBACzF,CAAC;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,KAAK,YAAY,CAAC,CAAC,CAAC;gBAClB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;gBACxC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;gBAC7C,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBACpD,MAAM,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC5C,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;gBAC3C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,OAAO,CAAC,MAAM,aAAa,OAAO,EAAE,EAAE,CAAC;YAC3E,CAAC;YACD,KAAK,gBAAgB,CAAC,CAAC,CAAC;gBACtB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBACzC,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;oBACpF,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;oBAC3F,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,mBAAmB,EAAE,CAAC;gBACrE,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,OAAO,MAAO,GAAa,CAAC,OAAO,EAAE,EAAE,CAAC;gBACvF,CAAC;YACH,CAAC;YACD,KAAK,aAAa,CAAC,CAAC,CAAC;gBACnB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC;oBACH,oBAAoB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACzC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC;gBACrD,CAAC;gBACD,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC3C,CAAC;YACD;gBACE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,IAAI,GAAG,EAAE,CAAC;QAChE,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,UAAU,CAAC,OAAe,EAAE,OAAiB;QACzD,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE;gBAC/D,GAAG,EAAE,IAAI,CAAC,QAAQ;gBAClB,OAAO,EAAE,IAAI,CAAC,gBAAgB;gBAC9B,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI;aAC5B,CAAC,CAAC;YACH,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACnG,MAAM,GAAG,GAAG,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,eAAe,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC;YACvE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,qBAAqB,EAAE,CAAC;QACrG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,CAAC,GAAG,GAAkB,CAAC;YAC7B,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YACjG,MAAM,GAAG,GAAG,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,eAAe,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC7E,CAAC;IACH,CAAC;CACF"}

package/dist/tools/commandGate.js

@@ -0,0 +1,67 @@
+// This agent's ONE genuinely new, more-dangerous capability compared to the
+// rest of the family: it can run real shell commands (npm/npx/git), needed
+// to bootstrap a target repo's Playwright setup and actually execute the
+// generated spec — appq:automate's Phase 0/5/6 assume exactly this.
+//
+// Hardcoded, non-negotiable invariant (same class of thing as
+// destructiveActionGate.ts / the appq tool allowlists elsewhere in this
+// family): an explicit allowlist of (command, argv-shape), checked BEFORE
+// execution, never widened by prompt text. The actual execution path
+// (codingTools.ts) uses child_process.execFile with an argv array — never a
+// shell string — so even an allowed command can't smuggle a second command
+// via `;`/`&&`/backticks; the OS never parses the arguments as shell syntax
+// in the first place. The allowlist is defense in depth on top of that, not
+// the only layer.
+const PACKAGE_SPEC_RE = /^@?[a-z0-9][a-z0-9._/-]*(@[\w.\-^~]+)?$/i;
+function isPlainPackageSpec(spec) {
+    return PACKAGE_SPEC_RE.test(spec) && !spec.includes('..') && !spec.startsWith('-');
+}
+/** A path-shaped argument (a test file glob/relative path) — no traversal, no shell metacharacters. */
+function isSafePathArg(arg) {
+    return !arg.includes('..') && !/[;&|`$(){}<>]/.test(arg) && !arg.startsWith('-');
+}
+const ALLOWED_COMMANDS = {
+    npm: (args) => {
+        if (args.length === 2 && args[0] === 'init' && args[1] === '-y')
+            return true;
+        // npm install -D <package...> — dev deps only, plain package specs only.
+        if (args.length >= 3 && args[0] === 'install' && args[1] === '-D') {
+            return args.slice(2).every(isPlainPackageSpec);
+        }
+        return false;
+    },
+    npx: (args) => {
+        if (args[0] !== 'playwright')
+            return false;
+        if (args[1] === '--version' && args.length === 2)
+            return true;
+        if (args[1] === 'install') {
+            // optional browser names (chromium/firefox/webkit) or --with-deps
+            return args.slice(2).every((a) => /^(chromium|firefox|webkit|--with-deps)$/.test(a));
+        }
+        if (args[1] === 'test') {
+            // optional --grep "<title>" and/or a relative spec file path
+            return args.slice(2).every((a) => isSafePathArg(a) || a === '--grep');
+        }
+        return false;
+    },
+    node: (args) => args.length === 1 && args[0] === '--version',
+    git: (args) => {
+        if (args.length === 1 && args[0] === 'status')
+            return true;
+        if (args.length === 1 && args[0] === 'diff')
+            return true;
+        if (args.length === 2 && args[0] === 'diff' && args[1] === '--stat')
+            return true;
+        return false;
+    },
+};
+export function assertCommandAllowed(command, args) {
+    const validator = ALLOWED_COMMANDS[command];
+    if (!validator || !validator(args)) {
+        throw new Error(`Command "${command} ${args.join(' ')}" is not in the allowlist. This is a hardcoded ` +
+            `boundary — no workflow prompt can widen it. Allowed: npm init -y, npm install -D <pkgs>, ` +
+            `npx playwright install/--version/test, node --version, git status/diff.`);
+    }
+}
+//# sourceMappingURL=commandGate.js.map

package/dist/tools/commandGate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandGate.js","sourceRoot":"","sources":["../../src/tools/commandGate.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,2EAA2E;AAC3E,yEAAyE;AACzE,oEAAoE;AACpE,EAAE;AACF,8DAA8D;AAC9D,wEAAwE;AACxE,0EAA0E;AAC1E,qEAAqE;AACrE,4EAA4E;AAC5E,2EAA2E;AAC3E,4EAA4E;AAC5E,4EAA4E;AAC5E,kBAAkB;AAElB,MAAM,eAAe,GAAG,0CAA0C,CAAC;AAEnE,SAAS,kBAAkB,CAAC,IAAY;IACtC,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACrF,CAAC;AAED,uGAAuG;AACvG,SAAS,aAAa,CAAC,GAAW;IAChC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACnF,CAAC;AAID,MAAM,gBAAgB,GAA8B;IAClD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;QAC7E,yEAAyE;QACzE,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;YAClE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,YAAY;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9D,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;YAC1B,kEAAkE;YAClE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,yCAAyC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACvF,CAAC;QACD,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;YACvB,6DAA6D;YAC7D,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,WAAW;IAC5D,GAAG,EAAE,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACzD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACjF,OAAO,KAAK,CAAC;IACf,CAAC;CACF,CAAC;AAEF,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,IAAc;IAClE,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,YAAY,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,iDAAiD;YACpF,2FAA2F;YAC3F,yEAAyE,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/tools/safety.js

@@ -0,0 +1,25 @@
+// This agent's own domain knowledge of which appq tools it may touch — the
+// enforcement mechanism (assertToolAllowed / the gated dispatcher) lives in
+// @appliqation/agent-core, shared with every sibling agent; only the
+// allowlist content is local. Zero write tools — not gated behind a flag,
+// genuinely absent from the set. This agent never calls an appq write tool
+// and never performs a git operation; it writes local files only, and a
+// separate future agent is responsible for reviewing/committing/pushing
+// them.
+export const READONLY_CONTEXT_TOOLS = new Set([
+    'get_scenario',
+    'get_defect_context',
+    'get_analytics',
+    'get_failure_patterns',
+    'get_execution_evidence',
+    'get_run_evidence',
+    'get_automation_readiness',
+    'get_coverage_analysis',
+    'get_evidence_summary',
+    'get_test_results',
+    'get_project_settings',
+    'get_validation_targets',
+    'search_tests',
+    'get_project_test_data',
+]);
+//# sourceMappingURL=safety.js.map

package/dist/tools/safety.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safety.js","sourceRoot":"","sources":["../../src/tools/safety.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,4EAA4E;AAC5E,qEAAqE;AACrE,0EAA0E;AAC1E,2EAA2E;AAC3E,wEAAwE;AACxE,wEAAwE;AACxE,QAAQ;AAER,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IAC5C,cAAc;IACd,oBAAoB;IACpB,eAAe;IACf,sBAAsB;IACtB,wBAAwB;IACxB,kBAAkB;IAClB,0BAA0B;IAC1B,uBAAuB;IACvB,sBAAsB;IACtB,kBAAkB;IAClB,sBAAsB;IACtB,wBAAwB;IACxB,cAAc;IACd,uBAAuB;CACxB,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,37 @@
+{
+  "name": "@appliqation/scriptgen",
+  "version": "0.1.1",
+  "description": "Standalone agent that generates enterprise-grade Playwright automation scripts for Appliqation test cases, grounded in every available signal (manual/agentic execution evidence, defects, flakiness, sibling test cases) and verified by actually running the result.",
+  "type": "module",
+  "bin": {
+    "appliqation-scriptgen": "./dist/cli/index.js"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "files": [
+    "dist/",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "dev": "tsx src/cli/index.ts",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "lint": "eslint src --ext .ts",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@appliqation/agent-core": "^0.1.0",
+    "@appliqation/automation-sdk": "^2.7.0",
+    "commander": "^13.1.0",
+    "dotenv": "^16.4.7"
+  },
+  "devDependencies": {
+    "@types/node": "^22.13.10",
+    "tsx": "^4.19.3",
+    "typescript": "^5.8.2",
+    "vitest": "^3.2.7"
+  }
+}