@kylecheng3146/agent-ops 0.1.11 → 0.1.13

package/dist/packages/cli/src/commands/init.js

@@ -6,6 +6,7 @@ import { formatOperationPlan } from "../plan-output.js";
 import { toPublicInstallPlan } from "../public-plan.js";
 export function formatInstallPlan(plan) {
     const hooks = plan.manifest.hooks ?? [];
+    const detectedVerification = plan.detectedVerification;
     return formatOperationPlan({
         title: "Installation plan",
         metadata: [
@@ -17,6 +18,12 @@ export function formatInstallPlan(plan) {
                 : [
                     "Hooks:",
                     ...hooks.map((hook) => `  - ${hook.harness}: ${hook.path} (${hook.events.join(", ")})`)
+                ]),
+            ...(detectedVerification.length === 0
+                ? []
+                : [
+                    "Detected verifiers (review before confirming):",
+                    ...detectedVerification.map((command) => `  - ${command.id}: ${command.command} ${command.args.join(" ")}`.trimEnd())
                 ])
         ],
         operations: toPublicInstallPlan(plan).operations

package/dist/packages/cli/src/commands/update.js

@@ -3,6 +3,7 @@ import { okEnvelope } from "../output.js";
 import { formatOperationPlan } from "../plan-output.js";
 import { toPublicUpdatePlan } from "../public-plan.js";
 export function formatUpdatePlan(plan) {
+    const detectedVerification = plan.installation.detectedVerification;
     return formatOperationPlan({
         title: "Update plan",
         metadata: [
@@ -12,7 +13,13 @@ export function formatUpdatePlan(plan) {
                 ? "none"
                 : plan.migrationSteps
                     .map(({ fromVersion, toVersion }) => `${fromVersion} -> ${toVersion}`)
-                    .join(", ")}`
+                    .join(", ")}`,
+            ...(detectedVerification.length === 0
+                ? []
+                : [
+                    "Detected verifiers (review before confirming):",
+                    ...detectedVerification.map((command) => `  - ${command.id}: ${command.command} ${command.args.join(" ")}`.trimEnd())
+                ])
         ],
         operations: toPublicUpdatePlan(plan).installation.operations
     });

package/dist/packages/cli/src/public-plan.js

@@ -42,7 +42,8 @@ export function toPublicInstallPlan(plan) {
         profiles: plan.profiles,
         capabilities: plan.capabilities,
         manifest: plan.manifest,
-        operations: toPublicOperations(plan.operations)
+        operations: toPublicOperations(plan.operations),
+        detectedVerification: plan.detectedVerification
     };
 }
 export function toPublicUpdatePlan(plan) {

package/dist/runtime/src/install/harness.js

@@ -241,7 +241,7 @@ export function managedRules(descriptor, context) {
         ""
     ];
     if (context.capabilities.includes("rules")) {
-        lines.push("For every change:", "", "1. Define two to five mechanically verifiable acceptance criteria.", "2. Inspect the smallest relevant scope and preserve unrelated changes.", "3. Apply the smallest safe change.", "4. Run evidence-producing verification for every criterion.", "5. Obtain independent review before claiming completion.", "", "Treat `.agent-ops/config.json` as verifier authority. Discovery output is", "only a proposal until a user confirms it. Repository commands require an", "explicit matching trust record; installation approval never grants trust.", "");
+        lines.push("For every change:", "", "1. Define two to five mechanically verifiable acceptance criteria.", "2. Inspect the smallest relevant scope and preserve unrelated changes.", "3. Apply the smallest safe change.", "4. Run evidence-producing verification for every criterion.", "5. Obtain independent review before claiming completion, via", "   `agent-ops review` (or the CLI's equivalent invocation). Never call a", "   review-target CLI (agy, codex, claude) directly — direct calls skip", "   the enforced read-only sandbox flags and can hang or fail on command", "   permission prompts.", "", "Treat `.agent-ops/config.json` as verifier authority. Discovery output is", "only a proposal until a user confirms it. Repository commands require an", "explicit matching trust record; installation approval never grants trust.", "");
     }
     if (context.capabilities.includes("lifecycle-summary")) {
         lines.push("Advisory lifecycle summaries and local logs are informational. Advisory", "failures must remain fail-open and cannot become verification evidence.", "");

package/dist/runtime/src/install/plan.js

@@ -1,5 +1,6 @@
 import { lstat, readFile } from "node:fs/promises";
 import { CONFIG_SCHEMA_VERSION, MANIFEST_SCHEMA_VERSION } from "../contracts.js";
+import { discoverProject } from "../discovery/index.js";
 import { sha256 } from "../fs/hash.js";
 import { applyManagedBlock, managedBlockMarkers, removeManagedBlock } from "../fs/managed-block.js";
 import { formatInstallManifest, parseInstallManifest } from "../fs/manifest.js";
@@ -40,16 +41,50 @@ async function readCurrentFile(root, path) {
         throw error;
     }
 }
-function formatConfig(profiles, existing, reviewTargets = []) {
+/**
+ * Converts a stack-detected verifier proposal into a verification command.
+ * Proposal IDs use a colon-separated namespace (e.g. "node:test"); config
+ * IDs must be kebab-case identifiers.
+ */
+function verificationCommandFromProposal(proposal) {
+    return {
+        id: proposal.id.replace(/:/g, "-"),
+        command: proposal.command,
+        args: proposal.args,
+        cwd: proposal.cwd,
+        required: proposal.required,
+        evidence: proposal.evidence
+    };
+}
+/**
+ * Verification commands are never invented for a project that already
+ * declares them; detection only fills the gap while the field is empty, so
+ * a deliberate "remove all verifiers" edit is not silently reversed by a
+ * different stack adapter next run.
+ */
+async function detectVerificationCommands(root) {
+    const discovery = await discoverProject(root);
+    if (discovery.kind !== "project") {
+        return [];
+    }
+    return discovery.proposals
+        .filter((proposal) => proposal.confidence === "high")
+        .map(verificationCommandFromProposal);
+}
+function formatConfig(profiles, existing, reviewTargets = [], detectedCommands = []) {
     // Absent reviewRoles means external review is disabled; an empty selection
     // must therefore omit the field rather than write an empty array.
     const reviewRoles = reviewTargets.length > 0
         ? [{ role: "independent-review", targets: [...reviewTargets] }]
         : existing?.reviewRoles;
+    const verification = existing?.verification !== undefined &&
+        existing.verification.commands.length > 0
+        ? existing.verification
+        : { commands: detectedCommands };
     return `${JSON.stringify({
         schemaVersion: CONFIG_SCHEMA_VERSION,
         profiles,
-        verification: existing?.verification ?? { commands: [] },
+        verification,
         features: existing?.features ?? {
             stopVerification: {
                 enabled: false
@@ -92,7 +127,11 @@ async function planConfig(root, profiles, existingManifest, suppliedConfig, revi
         }
         existingConfig = result.value;
     }
-    const content = formatConfig(profiles, existingConfig, reviewTargets);
+    const detectedCommands = existingConfig === undefined ||
+        existingConfig.verification.commands.length === 0
+        ? await detectVerificationCommands(root)
+        : [];
+    const content = formatConfig(profiles, existingConfig, reviewTargets, detectedCommands);
     return {
         operation: {
             kind: "write",
@@ -105,7 +144,8 @@ async function planConfig(root, profiles, existingManifest, suppliedConfig, revi
             path: CONFIG_PATH,
             hash: sha256(content),
             owner: "agent-ops"
-        }
+        },
+        detectedVerification: detectedCommands
     };
 }
 function pathKey(path) {
@@ -528,6 +568,7 @@ export async function createInstallPlan(options) {
         profiles: resolved.profiles,
         capabilities: resolved.capabilities,
         manifest,
-        operations
+        operations,
+        detectedVerification: config.detectedVerification
     };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kylecheng3146/agent-ops",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "Evidence-driven development loops for Codex, Claude Code, and opencode",
   "type": "module",
   "license": "MIT",