@bhargavvc/sdd-cc 1.35.0 → 1.42.4

package/sdk/dist/query/commit.js

@@ -0,0 +1,340 @@
+/**
+ * Git commit and check-commit query handlers.
+ *
+ * Ported from sdd/bin/lib/commands.cjs (cmdCommit, cmdCheckCommit)
+ * and core.cjs (execGit). Provides commit creation with message sanitization
+ * and pre-commit validation.
+ *
+ * @example
+ * ```typescript
+ * import { commit, checkCommit } from './commit.js';
+ *
+ * await commit(['docs: update state', '.planning/STATE.md'], '/project');
+ * // { data: { committed: true, hash: 'abc1234', message: 'docs: update state', files: [...] } }
+ *
+ * await checkCommit([], '/project');
+ * // { data: { can_commit: true, reason: 'commit_docs_enabled', ... } }
+ * ```
+ */
+import { readFile } from 'node:fs/promises';
+import { spawnSync } from 'node:child_process';
+import { SDDError } from '../errors.js';
+import { planningPaths, resolvePathUnderProject } from './helpers.js';
+// ─── execGit ──────────────────────────────────────────────────────────────
+/**
+ * Run a git command in the given working directory.
+ *
+ * Ported from core.cjs lines 531-542.
+ *
+ * @param cwd - Working directory for the git command
+ * @param args - Git command arguments (e.g., ['commit', '-m', 'msg'])
+ * @returns Object with exitCode, stdout, and stderr
+ */
+export function execGit(cwd, args) {
+    const result = spawnSync('git', args, {
+        cwd,
+        stdio: 'pipe',
+        encoding: 'utf-8',
+    });
+    return {
+        exitCode: result.status ?? 1,
+        stdout: (result.stdout ?? '').toString().trim(),
+        stderr: (result.stderr ?? '').toString().trim(),
+    };
+}
+// ─── sanitizeCommitMessage ────────────────────────────────────────────────
+/**
+ * Sanitize a commit message to prevent prompt injection.
+ *
+ * Ported from security.cjs sanitizeForPrompt.
+ * Strips zero-width characters, null bytes, and neutralizes
+ * known injection markers that could hijack agent context.
+ *
+ * @param text - Raw commit message
+ * @returns Sanitized message safe for git commit
+ */
+export function sanitizeCommitMessage(text) {
+    if (!text || typeof text !== 'string')
+        return '';
+    let sanitized = text;
+    // Strip null bytes
+    sanitized = sanitized.replace(/\0/g, '');
+    // Strip zero-width characters that could hide instructions
+    sanitized = sanitized.replace(/[\u200B-\u200F\u2028-\u202F\uFEFF\u00AD]/g, '');
+    // Neutralize XML/HTML tags that mimic system boundaries
+    sanitized = sanitized.replace(/<(\/?)?(?:system|assistant|human)>/gi, (_match, slash) => `\uFF1C${slash || ''}system-text\uFF1E`);
+    // Neutralize [SYSTEM] / [INST] markers
+    sanitized = sanitized.replace(/\[(SYSTEM|INST)\]/gi, '[$1-TEXT]');
+    // Neutralize <<SYS>> markers
+    sanitized = sanitized.replace(/<<\s*SYS\s*>>/gi, '\u00ABSYS-TEXT\u00BB');
+    return sanitized;
+}
+// ─── commit ───────────────────────────────────────────────────────────────
+/**
+ * Stage files and create a git commit.
+ *
+ * Checks commit_docs config (unless --force), sanitizes message,
+ * stages specified files (or all .planning/), and commits.
+ *
+ * By default, `--files <paths>` runs `git add -- <path>` for each named file
+ * before committing. This means any per-hunk staging set up via `git add -p`
+ * is **overwritten** by a full re-stage of the file's working-tree content.
+ *
+ * Pass `--respect-staged` to skip the `git add` step entirely. The handler
+ * will commit only what is already staged within the requested pathspec. If
+ * nothing is staged within that scope, the handler returns
+ * `{ committed: false, reason: 'nothing staged' }` without error. The #3061
+ * leak-prevention invariant still holds: the trailing `-- <paths>` pathspec
+ * on the commit ensures files staged outside `--files <paths>` are excluded.
+ *
+ * @param args - args[0]=message, remaining=file paths or flags
+ *               (--force, --amend, --no-verify, --respect-staged)
+ * @param projectDir - Project root directory
+ * @returns QueryResult with commit result
+ */
+export const commit = async (args, projectDir, workstream) => {
+    const allArgs = [...args];
+    // Extract flags
+    const hasForce = allArgs.includes('--force');
+    const hasAmend = allArgs.includes('--amend');
+    const hasNoVerify = allArgs.includes('--no-verify');
+    const hasRespectStaged = allArgs.includes('--respect-staged');
+    const filesIndex = allArgs.indexOf('--files');
+    const endIndex = filesIndex !== -1 ? filesIndex : allArgs.length;
+    // CodeRabbit #6: don't strip arbitrary `--foo` tokens from commit messages
+    const knownFlags = new Set(['--force', '--amend', '--no-verify', '--respect-staged']);
+    const messageArgs = allArgs.slice(0, endIndex).filter(a => !knownFlags.has(a));
+    const message = messageArgs.join(' ') || undefined;
+    const filePaths = filesIndex !== -1 ? allArgs.slice(filesIndex + 1).filter(a => !a.startsWith('--')) : [];
+    if (!message && !hasAmend) {
+        return { data: { committed: false, reason: 'commit message required' } };
+    }
+    // Check commit_docs config unless --force
+    if (!hasForce) {
+        const paths = planningPaths(projectDir, workstream);
+        try {
+            const raw = await readFile(paths.config, 'utf-8');
+            const config = JSON.parse(raw);
+            if (config.commit_docs === false) {
+                return { data: { committed: false, reason: 'commit_docs disabled' } };
+            }
+        }
+        catch {
+            // No config or malformed — allow commit
+        }
+    }
+    // Sanitize message
+    const sanitized = message ? sanitizeCommitMessage(message) : message;
+    // If --files was passed explicitly, the caller asked for an explicit scope.
+    // Falling back to .planning/ when every following token got filtered out
+    // would silently swap the requested scope, so reject the call instead.
+    if (filesIndex !== -1 && filePaths.length === 0) {
+        return { data: { committed: false, reason: '--files requires at least one path' } };
+    }
+    // Compute pathspec once: the handler commits exactly the paths it staged,
+    // never anything that was pre-staged externally (#3061).
+    const pathsToCommit = filePaths.length > 0 ? filePaths : ['.planning/'];
+    // When --respect-staged is set, skip re-staging so that per-hunk staging
+    // from `git add -p` is preserved. Without the flag, run git add for each
+    // path (default behavior, back-compat).
+    if (!hasRespectStaged) {
+        for (const file of pathsToCommit) {
+            // The `--` separator keeps any path that starts with `-` from being
+            // interpreted as a git option (e.g. a file literally named `-A`).
+            const addResult = execGit(projectDir, ['add', '--', file]);
+            if (addResult.exitCode !== 0) {
+                return { data: { committed: false, reason: addResult.stderr || `failed to stage ${file}`, exitCode: addResult.exitCode } };
+            }
+        }
+    }
+    // Check if anything is staged within the pathspec we're about to commit.
+    // When --respect-staged is set the caller may list paths that git doesn't
+    // know yet (e.g. untracked files the operator intentionally skipped via
+    // `git add -p`). Passing those unknown paths directly as a git pathspec
+    // causes `git diff --cached` to exit non-zero with "pathspec did not match".
+    // To avoid that, get all staged files and filter by the requested paths in
+    // TypeScript instead.
+    const stagedFilesResult = (() => {
+        if (hasRespectStaged) {
+            const allStaged = execGit(projectDir, ['diff', '--cached', '--name-only']);
+            if (allStaged.exitCode !== 0) {
+                return {
+                    error: {
+                        reason: allStaged.stderr || allStaged.stdout || 'failed to inspect staged files',
+                        exitCode: allStaged.exitCode,
+                    },
+                };
+            }
+            const allStagedFiles = allStaged.stdout ? allStaged.stdout.split('\n').filter(Boolean) : [];
+            const normalizePathspec = (p) => p.replace(/\\/g, '/').replace(/\/+$/, '');
+            const normalizedSpecs = pathsToCommit.map(normalizePathspec);
+            return {
+                files: allStagedFiles.filter(file => {
+                    const normalizedFile = normalizePathspec(file);
+                    return normalizedSpecs.some(spec => normalizedFile === spec || normalizedFile.startsWith(`${spec}/`));
+                }),
+            };
+        }
+        const diffResult = execGit(projectDir, ['diff', '--cached', '--name-only', '--', ...pathsToCommit]);
+        if (diffResult.exitCode !== 0) {
+            return {
+                error: {
+                    reason: diffResult.stderr || diffResult.stdout || 'failed to inspect staged files',
+                    exitCode: diffResult.exitCode,
+                },
+            };
+        }
+        return { files: diffResult.stdout ? diffResult.stdout.split('\n').filter(Boolean) : [] };
+    })();
+    if ('error' in stagedFilesResult) {
+        return { data: { committed: false, ...stagedFilesResult.error } };
+    }
+    const stagedFiles = stagedFilesResult.files;
+    if (stagedFiles.length === 0) {
+        return { data: { committed: false, reason: 'nothing staged' } };
+    }
+    // Build commit command. The trailing pathspec ensures the commit captures
+    // only files within the requested scope (#3061 invariant).
+    //
+    // For the default path: use `pathsToCommit` (the caller's requested scope).
+    // For --respect-staged: use `stagedFiles` (the exact set already in the
+    // index within scope). This avoids git rejecting the commit when the caller
+    // listed paths that are not yet known to git (e.g. skipped hunks from
+    // `git add -p` that were intentionally left unstaged).
+    const commitPathspec = hasRespectStaged ? stagedFiles : pathsToCommit;
+    const commitArgs = hasAmend
+        ? ['commit', '--amend', '--no-edit']
+        : ['commit', '-m', sanitized ?? ''];
+    if (hasNoVerify)
+        commitArgs.push('--no-verify');
+    commitArgs.push('--', ...commitPathspec);
+    const commitResult = execGit(projectDir, commitArgs);
+    if (commitResult.exitCode !== 0) {
+        if (commitResult.stdout.includes('nothing to commit') || commitResult.stderr.includes('nothing to commit')) {
+            return { data: { committed: false, reason: 'nothing to commit' } };
+        }
+        return { data: { committed: false, reason: commitResult.stderr || 'commit failed', exitCode: commitResult.exitCode } };
+    }
+    // Get short hash
+    const hashResult = execGit(projectDir, ['rev-parse', '--short', 'HEAD']);
+    const hash = hashResult.exitCode === 0 ? hashResult.stdout : null;
+    return { data: { committed: true, hash, message: sanitized, files: stagedFiles } };
+};
+// ─── checkCommit ──────────────────────────────────────────────────────────
+/**
+ * Validate whether a commit can proceed.
+ *
+ * Checks commit_docs config and staged file state.
+ *
+ * @param _args - Unused
+ * @param projectDir - Project root directory
+ * @returns QueryResult with { can_commit, reason, commit_docs, staged_files }
+ */
+export const checkCommit = async (_args, projectDir, workstream) => {
+    const paths = planningPaths(projectDir, workstream);
+    let commitDocs = true;
+    try {
+        const raw = await readFile(paths.config, 'utf-8');
+        const config = JSON.parse(raw);
+        if (config.commit_docs === false) {
+            commitDocs = false;
+        }
+    }
+    catch {
+        // No config — default to allowing commits
+    }
+    // Check staged files
+    const diffResult = execGit(projectDir, ['diff', '--cached', '--name-only']);
+    const stagedFiles = diffResult.stdout ? diffResult.stdout.split('\n').filter(Boolean) : [];
+    if (!commitDocs) {
+        // If commit_docs is false, check if any .planning/ files are staged
+        const planningFiles = stagedFiles.filter(f => f.startsWith('.planning/') || f.startsWith('.planning\\'));
+        if (planningFiles.length > 0) {
+            return {
+                data: {
+                    allowed: false,
+                    can_commit: false,
+                    reason: `commit_docs is false but ${planningFiles.length} .planning/ file(s) are staged`,
+                    commit_docs: false,
+                    staged_files: planningFiles,
+                },
+            };
+        }
+    }
+    return {
+        data: {
+            allowed: true,
+            can_commit: true,
+            reason: commitDocs ? 'commit_docs_enabled' : 'no_planning_files_staged',
+            commit_docs: commitDocs,
+            staged_files: stagedFiles,
+        },
+    };
+};
+// ─── commitToSubrepo ─────────────────────────────────────────────────────
+export const commitToSubrepo = async (args, projectDir, workstream) => {
+    const filesIdx = args.indexOf('--files');
+    const endIdx = filesIdx >= 0 ? filesIdx : args.length;
+    const knownFlags = new Set(['--force', '--amend', '--no-verify']);
+    const messageArgs = args.slice(0, endIdx).filter(a => !knownFlags.has(a));
+    const message = messageArgs.join(' ') || undefined;
+    const files = filesIdx >= 0 ? args.slice(filesIdx + 1).filter(a => !a.startsWith('--')) : [];
+    if (!message) {
+        return { data: { committed: false, reason: 'commit message required' } };
+    }
+    const paths = planningPaths(projectDir, workstream);
+    let config = {};
+    try {
+        const raw = await readFile(paths.config, 'utf-8');
+        config = JSON.parse(raw);
+    }
+    catch {
+        /* no config */
+    }
+    const subRepos = config.sub_repos;
+    if (!subRepos || subRepos.length === 0) {
+        return {
+            data: { committed: false, reason: 'no sub_repos configured in .planning/config.json' },
+        };
+    }
+    if (files.length === 0) {
+        return { data: { committed: false, reason: '--files required for commit-to-subrepo' } };
+    }
+    const sanitized = sanitizeCommitMessage(message);
+    if (!sanitized && message) {
+        return { data: { committed: false, reason: 'commit message empty after sanitization' } };
+    }
+    try {
+        for (const file of files) {
+            try {
+                await resolvePathUnderProject(projectDir, file);
+            }
+            catch (err) {
+                if (err instanceof SDDError) {
+                    return { data: { committed: false, reason: `${err.message}: ${file}` } };
+                }
+                throw err;
+            }
+        }
+        const fileArgs = files.length > 0 ? files : ['.'];
+        // The `--` separator keeps any path that starts with `-` from being
+        // interpreted as a git option (e.g. a file literally named `-A`).
+        const addResult = spawnSync('git', ['-C', projectDir, 'add', '--', ...fileArgs], { stdio: 'pipe', encoding: 'utf-8' });
+        if (addResult.status !== 0) {
+            return { data: { committed: false, reason: addResult.stderr || 'git add failed' } };
+        }
+        // Pathspec on the commit keeps the scope identical to what was just staged,
+        // so any pre-staged external changes do not leak in (#3061).
+        const commitResult = spawnSync('git', ['-C', projectDir, 'commit', '-m', sanitized, '--', ...fileArgs], { stdio: 'pipe', encoding: 'utf-8' });
+        if (commitResult.status !== 0) {
+            return { data: { committed: false, reason: commitResult.stderr || 'commit failed' } };
+        }
+        const hashResult = spawnSync('git', ['-C', projectDir, 'rev-parse', '--short', 'HEAD'], { encoding: 'utf-8' });
+        const hash = hashResult.stdout.trim();
+        return { data: { committed: true, hash, message: sanitized } };
+    }
+    catch (err) {
+        return { data: { committed: false, reason: String(err) } };
+    }
+};
+//# sourceMappingURL=commit.js.map

package/sdk/dist/query/commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commit.js","sourceRoot":"","sources":["../../src/query/commit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAGtE,6EAA6E;AAE7E;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,GAAW,EAAE,IAAc;IACjD,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE;QACpC,GAAG;QACH,KAAK,EAAE,MAAM;QACb,QAAQ,EAAE,OAAO;KAClB,CAAC,CAAC;IACH,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;QAC5B,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;QAC/C,MAAM,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;KAChD,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEjD,IAAI,SAAS,GAAG,IAAI,CAAC;IAErB,mBAAmB;IACnB,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAEzC,2DAA2D;IAC3D,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,2CAA2C,EAAE,EAAE,CAAC,CAAC;IAE/E,wDAAwD;IACxD,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,sCAAsC,EAClE,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,SAAS,KAAK,IAAI,EAAE,mBAAmB,CAAC,CAAC;IAE9D,uCAAuC;IACvC,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,qBAAqB,EAAE,WAAW,CAAC,CAAC;IAElE,6BAA6B;IAC7B,SAAS,GAAG,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE,sBAAsB,CAAC,CAAC;IAEzE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6EAA6E;AAE7E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,MAAM,GAAiB,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;IACzE,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAE1B,gBAAgB;IAChB,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC;IACpD,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC9C,MAAM,QAAQ,GAAG,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACjE,2EAA2E;IAC3E,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACtF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IACnD,MAAM,SAAS,GACb,UAAU,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE1F,IAAI,CAAC,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,0CAA0C;IAC1C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;YAC1D,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;gBACjC,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,CAAC;YACxE,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wCAAwC;QAC1C,CAAC;IACH,CAAC;IAED,mBAAmB;IACnB,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAErE,4EAA4E;IAC5E,yEAAyE;IACzE,uEAAuE;IACvE,IAAI,UAAU,KAAK,CAAC,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,oCAAoC,EAAE,EAAE,CAAC;IACtF,CAAC;IAED,0EAA0E;IAC1E,yDAAyD;IACzD,MAAM,aAAa,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;IAExE,yEAAyE;IACzE,yEAAyE;IACzE,wCAAwC;IACxC,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YACjC,oEAAoE;YACpE,kEAAkE;YAClE,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,mBAAmB,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC7H,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,6EAA6E;IAC7E,2EAA2E;IAC3E,sBAAsB;IACtB,MAAM,iBAAiB,GAA0E,CAAC,GAAG,EAAE;QACrG,IAAI,gBAAgB,EAAE,CAAC;YACrB,MAAM,SAAS,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;YAC3E,IAAI,SAAS,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;gBAC7B,OAAO;oBACL,KAAK,EAAE;wBACL,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,IAAI,gCAAgC;wBAChF,QAAQ,EAAE,SAAS,CAAC,QAAQ;qBAC7B;iBACF,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5F,MAAM,iBAAiB,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACnF,MAAM,eAAe,GAAG,aAAa,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YAC7D,OAAO;gBACL,KAAK,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;oBAClC,MAAM,cAAc,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;oBAC/C,OAAO,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,cAAc,KAAK,IAAI,IAAI,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;gBACxG,CAAC,CAAC;aACH,CAAC;QACJ,CAAC;QACD,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,IAAI,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;QACpG,IAAI,UAAU,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO;gBACL,KAAK,EAAE;oBACL,MAAM,EAAE,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,MAAM,IAAI,gCAAgC;oBAClF,QAAQ,EAAE,UAAU,CAAC,QAAQ;iBAC9B;aACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC3F,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,OAAO,IAAI,iBAAiB,EAAE,CAAC;QACjC,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,KAAK,EAAE,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC;IAC5C,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,EAAE,CAAC;IAClE,CAAC;IAED,0EAA0E;IAC1E,2DAA2D;IAC3D,EAAE;IACF,4EAA4E;IAC5E,wEAAwE;IACxE,4EAA4E;IAC5E,sEAAsE;IACtE,uDAAuD;IACvD,MAAM,cAAc,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,CAAC;IACtE,MAAM,UAAU,GAAa,QAAQ;QACnC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,WAAW,CAAC;QACpC,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC;IACtC,IAAI,WAAW;QAAE,UAAU,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAChD,UAAU,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,cAAc,CAAC,CAAC;IAEzC,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,YAAY,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAChC,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC3G,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,CAAC;QACrE,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,eAAe,EAAE,QAAQ,EAAE,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC;IACzH,CAAC;IAED,iBAAiB;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACzE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAElE,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CAAC;AACrF,CAAC,CAAC;AAEF,6EAA6E;AAE7E;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,WAAW,GAAiB,KAAK,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;IAC/E,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAEpD,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,MAAM,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;YACjC,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IAED,qBAAqB;IACrB,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;IAC5E,MAAM,WAAW,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE3F,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,oEAAoE;QACpE,MAAM,aAAa,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC;QACzG,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC7B,OAAO;gBACL,IAAI,EAAE;oBACJ,OAAO,EAAE,KAAK;oBACd,UAAU,EAAE,KAAK;oBACjB,MAAM,EAAE,4BAA4B,aAAa,CAAC,MAAM,gCAAgC;oBACxF,WAAW,EAAE,KAAK;oBAClB,YAAY,EAAE,aAAa;iBAC5B;aACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE;YACJ,OAAO,EAAE,IAAI;YACb,UAAU,EAAE,IAAI;YAChB,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,0BAA0B;YACvE,WAAW,EAAE,UAAU;YACvB,YAAY,EAAE,WAAW;SAC1B;KACF,CAAC;AACJ,CAAC,CAAC;AAEF,4EAA4E;AAE5E,MAAM,CAAC,MAAM,eAAe,GAAiB,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;IAClF,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IACtD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IACnD,MAAM,KAAK,GAAG,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7F,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,EAAE,EAAE,CAAC;IAC3E,CAAC;IAED,MAAM,KAAK,GAAG,aAAa,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACpD,IAAI,MAAM,GAA4B,EAAE,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,CAAC,SAAiC,CAAC;IAC1D,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvC,OAAO;YACL,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,kDAAkD,EAAE;SACvF,CAAC;IACJ,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,wCAAwC,EAAE,EAAE,CAAC;IAC1F,CAAC;IAED,MAAM,SAAS,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,SAAS,IAAI,OAAO,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,yCAAyC,EAAE,EAAE,CAAC;IAC3F,CAAC;IAED,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,IAAI,CAAC;gBACH,MAAM,uBAAuB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAClD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,GAAG,YAAY,QAAQ,EAAE,CAAC;oBAC5B,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,EAAE,EAAE,CAAC;gBAC3E,CAAC;gBACD,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAClD,oEAAoE;QACpE,kEAAkE;QAClE,MAAM,SAAS,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACvH,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3B,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,gBAAgB,EAAE,EAAE,CAAC;QACtF,CAAC;QAED,4EAA4E;QAC5E,6DAA6D;QAC7D,MAAM,YAAY,GAAG,SAAS,CAC5B,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,EACvE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CACrC,CAAC;QACF,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,IAAI,eAAe,EAAE,EAAE,CAAC;QACxF,CAAC;QAED,MAAM,UAAU,GAAG,SAAS,CAC1B,KAAK,EAAE,CAAC,IAAI,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,CAAC,EACzD,EAAE,QAAQ,EAAE,OAAO,EAAE,CACtB,CAAC;QACF,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACtC,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC;IACjE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC7D,CAAC;AACH,CAAC,CAAC"}

package/sdk/dist/query/config-gates.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Batch workflow config for orchestration decisions (`check.config-gates`).
+ *
+ * Replaces many repeated `config-get workflow.*` calls with one JSON object.
+ * See `.planning/research/decision-routing-audit.md` §3.3.
+ */
+import type { QueryHandler } from './utils.js';
+/**
+ * Merge workflow defaults with project config, then expose stable keys for workflows.
+ */
+export declare const checkConfigGates: QueryHandler;
+//# sourceMappingURL=config-gates.d.ts.map

package/sdk/dist/query/config-gates.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-gates.d.ts","sourceRoot":"","sources":["../../src/query/config-gates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAc/C;;GAEG;AACH,eAAO,MAAM,gBAAgB,EAAE,YA2C9B,CAAC"}

package/sdk/dist/query/config-gates.js

@@ -0,0 +1,66 @@
+/**
+ * Batch workflow config for orchestration decisions (`check.config-gates`).
+ *
+ * Replaces many repeated `config-get workflow.*` calls with one JSON object.
+ * See `.planning/research/decision-routing-audit.md` §3.3.
+ */
+import { CONFIG_DEFAULTS, loadConfig } from '../config.js';
+/** Treat stringly YAML booleans safely (`Boolean('false')` is true — avoid that). */
+function workflowBool(v, defaultVal) {
+    if (v === undefined || v === null)
+        return defaultVal;
+    if (typeof v === 'boolean')
+        return v;
+    if (typeof v === 'string') {
+        const s = v.toLowerCase().trim();
+        if (s === 'false' || s === '0' || s === 'no' || s === 'off')
+            return false;
+        if (s === 'true' || s === '1' || s === 'yes' || s === 'on')
+            return true;
+    }
+    return Boolean(v);
+}
+/**
+ * Merge workflow defaults with project config, then expose stable keys for workflows.
+ */
+export const checkConfigGates = async (args, projectDir) => {
+    const config = await loadConfig(projectDir);
+    const wf = {
+        ...config.workflow,
+    };
+    const root = config;
+    const contextWindow = typeof root.context_window === 'number' ? root.context_window : 200000;
+    /** Prefer explicit `plan_checker` when present (alias); else `plan_check` (defaults include only the latter). */
+    const w = wf;
+    const planCheckFlag = w.plan_checker !== undefined ? w.plan_checker : w.plan_check;
+    const data = {
+        workflow: args[0] ?? null,
+        research_enabled: workflowBool(wf.research, true),
+        plan_checker_enabled: workflowBool(planCheckFlag, true),
+        nyquist_validation: workflowBool(wf.nyquist_validation, true),
+        security_enforcement: workflowBool(wf.security_enforcement, true),
+        security_asvs_level: wf.security_asvs_level ?? 1,
+        security_block_on: wf.security_block_on ?? 'high',
+        ui_phase: workflowBool(wf.ui_phase, true),
+        ui_safety_gate: workflowBool(wf.ui_safety_gate, true),
+        ui_review: workflowBool(wf.ui_review, true),
+        text_mode: workflowBool(wf.text_mode, false),
+        auto_advance: workflowBool(wf.auto_advance, false),
+        auto_chain_active: workflowBool(wf._auto_chain_active, false),
+        code_review: workflowBool(wf.code_review, true),
+        code_review_depth: wf.code_review_depth ?? 'standard',
+        context_window: contextWindow,
+        discuss_mode: String(wf.discuss_mode ?? 'discuss'),
+        use_worktrees: workflowBool(wf.use_worktrees, true),
+        skip_discuss: workflowBool(wf.skip_discuss, false),
+        max_discuss_passes: wf.max_discuss_passes ?? 3,
+        node_repair: workflowBool(wf.node_repair, true),
+        research_before_questions: workflowBool(wf.research_before_questions, false),
+        verifier: workflowBool(wf.verifier, true),
+        plan_check: workflowBool(planCheckFlag, true),
+        subagent_timeout: wf.subagent_timeout ?? CONFIG_DEFAULTS.workflow.subagent_timeout,
+        context_coverage_gate: workflowBool(wf.context_coverage_gate, true),
+    };
+    return { data };
+};
+//# sourceMappingURL=config-gates.js.map

package/sdk/dist/query/config-gates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-gates.js","sourceRoot":"","sources":["../../src/query/config-gates.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG3D,qFAAqF;AACrF,SAAS,YAAY,CAAC,CAAU,EAAE,UAAmB;IACnD,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IACrD,IAAI,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,CAAC,CAAC;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK;YAAE,OAAO,KAAK,CAAC;QAC1E,IAAI,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC;IAC1E,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,CAAC;AACpB,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAiB,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE;IACvE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAC;IAC5C,MAAM,EAAE,GAA4B;QAClC,GAAI,MAAM,CAAC,QAA+C;KAC3D,CAAC;IACF,MAAM,IAAI,GAAG,MAAiC,CAAC;IAC/C,MAAM,aAAa,GACjB,OAAO,IAAI,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC;IAEzE,iHAAiH;IACjH,MAAM,CAAC,GAAG,EAA6B,CAAC;IACxC,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAEnF,MAAM,IAAI,GAA4B;QACpC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI;QACzB,gBAAgB,EAAE,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;QACjD,oBAAoB,EAAE,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC;QACvD,kBAAkB,EAAE,YAAY,CAAC,EAAE,CAAC,kBAAkB,EAAE,IAAI,CAAC;QAC7D,oBAAoB,EAAE,YAAY,CAAC,EAAE,CAAC,oBAAoB,EAAE,IAAI,CAAC;QACjE,mBAAmB,EAAE,EAAE,CAAC,mBAAmB,IAAI,CAAC;QAChD,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,IAAI,MAAM;QACjD,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;QACzC,cAAc,EAAE,YAAY,CAAC,EAAE,CAAC,cAAc,EAAE,IAAI,CAAC;QACrD,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,IAAI,CAAC;QAC3C,SAAS,EAAE,YAAY,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,CAAC;QAC5C,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;QAClD,iBAAiB,EAAE,YAAY,CAAC,EAAE,CAAC,kBAAkB,EAAE,KAAK,CAAC;QAC7D,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;QAC/C,iBAAiB,EAAE,EAAE,CAAC,iBAAiB,IAAI,UAAU;QACrD,cAAc,EAAE,aAAa;QAC7B,YAAY,EAAE,MAAM,CAAC,EAAE,CAAC,YAAY,IAAI,SAAS,CAAC;QAClD,aAAa,EAAE,YAAY,CAAC,EAAE,CAAC,aAAa,EAAE,IAAI,CAAC;QACnD,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC,YAAY,EAAE,KAAK,CAAC;QAClD,kBAAkB,EAAE,EAAE,CAAC,kBAAkB,IAAI,CAAC;QAC9C,WAAW,EAAE,YAAY,CAAC,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC;QAC/C,yBAAyB,EAAE,YAAY,CAAC,EAAE,CAAC,yBAAyB,EAAE,KAAK,CAAC;QAC5E,QAAQ,EAAE,YAAY,CAAC,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC;QACzC,UAAU,EAAE,YAAY,CAAC,aAAa,EAAE,IAAI,CAAC;QAC7C,gBAAgB,EAAE,EAAE,CAAC,gBAAgB,IAAI,eAAe,CAAC,QAAQ,CAAC,gBAAgB;QAClF,qBAAqB,EAAE,YAAY,CAAC,EAAE,CAAC,qBAAqB,EAAE,IAAI,CAAC;KACpE,CAAC;IAEF,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC,CAAC"}

package/sdk/dist/query/config-mutation.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Config mutation handlers — write operations for .planning/config.json.
+ *
+ * Ported from sdd/bin/lib/config.cjs.
+ * Provides config-set (with key validation and value coercion),
+ * config-set-model-profile, config-new-project, and config-ensure-section.
+ *
+ * @example
+ * ```typescript
+ * import { configSet, configNewProject } from './config-mutation.js';
+ *
+ * await configSet(['model_profile', 'quality'], '/project');
+ * // { data: { updated: true, key: 'model_profile', value: 'quality', previousValue: 'balanced' } }
+ *
+ * await configNewProject([], '/project');
+ * // { data: { created: true, path: '.planning/config.json' } }
+ * ```
+ */
+import type { QueryHandler } from './utils.js';
+/**
+ * Check whether a config key path is valid.
+ *
+ * Supports exact matches from VALID_CONFIG_KEYS plus dynamic patterns
+ * like `agent_skills.<agent-type>` and `features.<feature_name>`.
+ * Uses curated CONFIG_KEY_SUGGESTIONS before LCP fallback for typo correction.
+ *
+ * @param keyPath - Dot-notation config key path
+ * @returns Object with valid flag and optional suggestion for typos
+ */
+export declare function isValidConfigKey(keyPath: string): {
+    valid: boolean;
+    suggestion?: string;
+};
+/**
+ * Coerce a CLI string value to its native type.
+ *
+ * Ported from config.cjs lines 344-351.
+ *
+ * @param value - String value from CLI
+ * @returns Coerced value: boolean, number, parsed JSON, or original string
+ */
+export declare function parseConfigValue(value: string): unknown;
+/**
+ * Write a validated key-value pair to config.json.
+ *
+ * Validates key against VALID_CONFIG_KEYS allowlist, coerces value
+ * from CLI string to native type, and writes config.json.
+ *
+ * @param args - args[0]=key, args[1]=value
+ * @param projectDir - Project root directory
+ * @returns QueryResult matching sdd-tools `config-set` JSON: `{ updated, key, value, previousValue }`
+ * @throws SDDError with Validation if key is invalid or args missing
+ */
+export declare const configSet: QueryHandler;
+/**
+ * Validate and set the model profile in config.json.
+ *
+ * @param args - args[0]=profileName
+ * @param projectDir - Project root directory
+ * @returns QueryResult with { set: true, profile, agents }
+ * @throws SDDError with Validation if profile is invalid
+ */
+export declare const configSetModelProfile: QueryHandler;
+/**
+ * Create config.json with defaults and optional user choices.
+ *
+ * Idempotent: if config.json already exists, returns { created: false }.
+ * Detects API key availability from environment variables.
+ *
+ * @param args - args[0]=optional JSON string of user choices
+ * @param projectDir - Project root directory
+ * @returns QueryResult with { created: true, path } or { created: false, reason }
+ */
+export declare const configNewProject: QueryHandler;
+/**
+ * Idempotently ensure a top-level section exists in config.json.
+ *
+ * If the section key doesn't exist, creates it as an empty object.
+ * If it already exists, preserves its contents.
+ *
+ * @param args - args[0]=sectionName
+ * @param projectDir - Project root directory
+ * @returns QueryResult with { ensured: true, section }
+ */
+export declare const configEnsureSection: QueryHandler;
+//# sourceMappingURL=config-mutation.d.ts.map

package/sdk/dist/query/config-mutation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-mutation.d.ts","sourceRoot":"","sources":["../../src/query/config-mutation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAYH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AA0H/C;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,CAiCzF;AAID;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQvD;AAwCD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,SAAS,EAAE,YAuEvB,CAAC;AAIF;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,EAAE,YAgDnC,CAAC;AAIF;;;;;;;;;GASG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAgI9B,CAAC;AAIF;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,EAAE,YAsBjC,CAAC"}