@miller-tech/uap 1.147.0 → 1.147.2

package/dist/config/policy-recommendations.js

@@ -26,7 +26,7 @@ export const SCENARIOS = [
         blurb: 'One person driving a local (llama.cpp/Qwen) model that needs strong guardrails.',
         extra: [
             { slug: 'codebase-read-before-plan', why: 'weaker models must read before proposing' },
-            { slug: 'validate-plan-before-build', why: 'catch a bad plan before it writes code' },
+            { slug: 'validate-plan-on-change', why: 'catch a bad plan before it writes code' },
             { slug: 'mcp-router-first', why: 'keeps the context window lean for a small model' },
             { slug: 'local-build-before-push', why: 'never push code that fails to build locally' },
             { slug: 'ship-loop-gate', why: 'converge to green before shipping' },
@@ -61,7 +61,7 @@ export const SCENARIOS = [
         title: 'High autonomy / hands-free',
         blurb: 'Long unattended builds where the model must not cut corners.',
         extra: [
-            { slug: 'validate-plan-before-build', why: 'a wrong plan wastes an entire autonomous run' },
+            { slug: 'validate-plan-on-change', why: 'a wrong plan wastes an entire autonomous run' },
             { slug: 'ship-loop-gate', why: 'the run only ends when the work is genuinely done' },
             { slug: 'artifact-hygiene', why: 'unattended runs must not leave debris' },
             { slug: 'doc-live-over-report', why: "grade the real system, not the model's optimism" },

package/dist/config/policy-recommendations.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-recommendations.js","sourceRoot":"","sources":["../../src/config/policy-recommendations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,wDAAwD;AACxD,MAAM,CAAC,MAAM,IAAI,GAAyB;IACxC,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,4DAA4D,EAAE;IAChG,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,wDAAwD,EAAE;IAC/F,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,qDAAqD,EAAE;IAChG,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,4CAA4C,EAAE;IAC5E,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,4CAA4C,EAAE;IACxE,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,2DAA2D,EAAE;IAChG,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,+CAA+C,EAAE;CAChF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAwB;IAC5C;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,iFAAiF;QACxF,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,0CAA0C,EAAE;YACtF,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,wCAAwC,EAAE;YACrF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpF,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,6CAA6C,EAAE;YACvF,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,mCAAmC,EAAE;YACpE,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,oDAAoD,EAAE;SAC5F;KACF;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,+DAA+D;QACtE,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACjF,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAChF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpF,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,+CAA+C,EAAE;YACtF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,kDAAkD,EAAE;SACtF;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,4DAA4D;QACnE,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,6CAA6C,EAAE;YACvF,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,2BAA2B,EAAE;YAC5D,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,yDAAyD,EAAE;YACvG,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,2CAA2C,EAAE;SAC/E;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,4BAA4B;QACnC,KAAK,EAAE,8DAA8D;QACrE,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC3F,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACpF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAC1E,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACxF,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,+CAA+C,EAAE;SAC5F;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,sDAAsD;QAC7D,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,4CAA4C,EAAE;YAC9E,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,0CAA0C,EAAE;YAC7E,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC3E,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,4CAA4C,EAAE;SAC1F;KACF;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,gDAAgD;QACvD,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,6CAA6C,EAAE;YACjF,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,qDAAqD,EAAE;SAC5F;KACF;CACF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"policy-recommendations.js","sourceRoot":"","sources":["../../src/config/policy-recommendations.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAeH,wDAAwD;AACxD,MAAM,CAAC,MAAM,IAAI,GAAyB;IACxC,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,4DAA4D,EAAE;IAChG,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,wDAAwD,EAAE;IAC/F,EAAE,IAAI,EAAE,0BAA0B,EAAE,GAAG,EAAE,qDAAqD,EAAE;IAChG,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,4CAA4C,EAAE;IAC5E,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,4CAA4C,EAAE;IACxE,EAAE,IAAI,EAAE,oBAAoB,EAAE,GAAG,EAAE,2DAA2D,EAAE;IAChG,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,+CAA+C,EAAE;CAChF,CAAC;AAEF,MAAM,CAAC,MAAM,SAAS,GAAwB;IAC5C;QACE,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,uBAAuB;QAC9B,KAAK,EAAE,iFAAiF;QACxF,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,0CAA0C,EAAE;YACtF,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,wCAAwC,EAAE;YAClF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpF,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,6CAA6C,EAAE;YACvF,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,mCAAmC,EAAE;YACpE,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,oDAAoD,EAAE;SAC5F;KACF;IACD;QACE,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,+DAA+D;QACtE,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACjF,EAAE,IAAI,EAAE,wBAAwB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAChF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACpF,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,+CAA+C,EAAE;YACtF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,kDAAkD,EAAE;SACtF;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,mBAAmB;QAC1B,KAAK,EAAE,4DAA4D;QACnE,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,6CAA6C,EAAE;YACvF,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,2BAA2B,EAAE;YAC5D,EAAE,IAAI,EAAE,6BAA6B,EAAE,GAAG,EAAE,yDAAyD,EAAE;YACvG,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,2CAA2C,EAAE;SAC/E;KACF;IACD;QACE,EAAE,EAAE,eAAe;QACnB,KAAK,EAAE,4BAA4B;QACnC,KAAK,EAAE,8DAA8D;QACrE,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,yBAAyB,EAAE,GAAG,EAAE,8CAA8C,EAAE;YACxF,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,mDAAmD,EAAE;YACpF,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,uCAAuC,EAAE;YAC1E,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,iDAAiD,EAAE;YACxF,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,EAAE,+CAA+C,EAAE;SAC5F;KACF;IACD;QACE,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,sDAAsD;QAC7D,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,iBAAiB,EAAE,GAAG,EAAE,4CAA4C,EAAE;YAC9E,EAAE,IAAI,EAAE,kBAAkB,EAAE,GAAG,EAAE,0CAA0C,EAAE;YAC7E,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,8CAA8C,EAAE;YAC3E,EAAE,IAAI,EAAE,4BAA4B,EAAE,GAAG,EAAE,4CAA4C,EAAE;SAC1F;KACF;IACD;QACE,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,kBAAkB;QACzB,KAAK,EAAE,gDAAgD;QACvD,KAAK,EAAE;YACL,EAAE,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,6CAA6C,EAAE;YACjF,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,qDAAqD,EAAE;SAC5F;KACF;CACF,CAAC;AAEF,MAAM,UAAU,WAAW,CAAC,EAAU;IACpC,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,cAAc,CAAC,UAAkB;IAC/C,MAAM,QAAQ,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACxD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QACjC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@miller-tech/uap",
-  "version": "1.147.0",
+  "version": "1.147.2",
   "description": "Autonomous AI agent memory system with CLAUDE.md protocol enforcement",
   "type": "module",
   "main": "dist/index.js",

package/src/policies/enforcers/expert_review_required.py

@@ -24,7 +24,7 @@ import sys
 from pathlib import Path
 
 sys.path.insert(0, str(Path(__file__).parent))
-from _common import emit, parse_cli, repo_root, run  # noqa: E402
+from _common import emit, parse_cli, worktree_root, run  # noqa: E402
 
 # Ship verbs are anchored to their tool prefix so that the bare tokens "merge"
 # or "signoff" inside read-only commands (git diff --merge-base, rg merge,
@@ -132,7 +132,11 @@ def main() -> None:
     if not any(p.search(cmd) for p in SHIP_PATTERNS):
         emit(True, "not a ship action")
 
-    root = repo_root()
+    # Resolve against the WORKING TREE the operation runs in (the worktree when a
+    # ship op runs from inside one), NOT the main checkout. repo_root() is pinned
+    # to MAIN_ROOT by the gate, so it always read the main checkout's branch and
+    # demanded a review for the wrong branch on every worktree commit/push.
+    root = worktree_root()
     branch = current_branch(root)
     if branch is None:
         emit(True, "branch not resolvable (detached/non-git) — fail-open")

package/src/policies/enforcers/local_build_before_push.py

@@ -25,7 +25,7 @@ import sys
 from pathlib import Path
 
 sys.path.insert(0, str(Path(__file__).parent))
-from _common import emit, parse_cli, repo_root, run  # noqa: E402
+from _common import emit, parse_cli, worktree_root, run  # noqa: E402
 
 MARKER = ".uap/local-build-pass.txt"
 
@@ -80,7 +80,10 @@ def main() -> None:
     if os.environ.get("UAP_SKIP_LOCAL_BUILD") == "1":
         emit(True, "UAP_SKIP_LOCAL_BUILD=1 override (justify in commit msg)")
 
-    root = repo_root()
+    # The push happens from the WORKING TREE the op runs in (the worktree when a
+    # push runs from inside one), not the pinned main checkout — mirror the
+    # expert-review fix so the changed-files diff targets the right branch.
+    root = worktree_root()
 
     changed = _changed_files(root)
     needs_build = any(

package/src/policies/enforcers/memory_before_plan.py

@@ -11,7 +11,7 @@ sys.path.insert(0, str(Path(__file__).parent))
 from _common import arg_str, emit, parse_cli, repo_root  # noqa: E402
 
 PLAN_OPS = {"ExitPlanMode", "Plan", "TodoWrite", "plan", "design"}
-# Only match standalone words, not compounds like 'validate-plan-before-build'
+# Only match standalone words, not compounds like 'validate-plan-on-change'
 PLAN_WORD_RE = re.compile(r"(?<![-\w/])(plan the|design the|architect the|propose a plan|roadmap for)", re.I)
 RECENT_SEC = 300
 

package/src/policies/enforcers/validate_plan_before_build.py

@@ -1,75 +0,0 @@
-#!/usr/bin/env python3
-"""validate-plan-before-build enforcer.
-
-On the first mutating tool call after a plan is marked ready, block and require
-the agent to run the `validate the plan` prompt. State tracked in .uap/plan_state.json.
-"""
-from __future__ import annotations
-import json
-import os
-import sys
-import time
-from pathlib import Path
-
-sys.path.insert(0, str(Path(__file__).parent))
-from _common import emit, parse_cli  # noqa: E402
-
-STATE = Path(os.environ.get("UAP_STATE_DIR", ".uap")) / "plan_state.json"
-MUTATING_OPS = {"Edit", "Write", "MultiEdit", "edit", "write", "multiedit"}
-BUILD_BASH_RE = (
-    "git commit",
-    "git push",
-    "kubectl apply",
-    "helm upgrade",
-    "helm install",
-    "terraform apply",
-    "npm run build",
-    "pnpm build",
-)
-
-
-def load_state() -> dict:
-    if not STATE.exists():
-        return {}
-    try:
-        return json.loads(STATE.read_text())
-    except json.JSONDecodeError:
-        return {}
-
-
-def save_state(s: dict) -> None:
-    STATE.parent.mkdir(parents=True, exist_ok=True)
-    STATE.write_text(json.dumps(s))
-
-
-def main() -> None:
-    op, args = parse_cli()
-    state = load_state()
-
-    # Mutating?
-    cmd = (args.get("command") or "").lower()
-    mutating = op in MUTATING_OPS or any(p in cmd for p in BUILD_BASH_RE)
-    if not mutating:
-        emit(True, "not a build/mutation op")
-
-    plan_ready = bool(state.get("plan_ready"))
-    validated_at = float(state.get("validated_at", 0))
-    ready_at = float(state.get("ready_at", 0))
-
-    if not plan_ready:
-        emit(True, "no active plan-ready marker")
-
-    if validated_at and validated_at >= ready_at:
-        emit(True, "plan validated since marking ready")
-
-    emit(
-        False,
-        "validate-plan-before-build: plan is ready but not validated. "
-        "Run the prompt `validate the plan` before making changes. "
-        "After a pass, write {\"validated_at\": <epoch>} to .uap/plan_state.json.",
-        inject_prompt="validate the plan",
-    )
-
-
-if __name__ == "__main__":
-    main()

package/src/policies/schemas/policies/validate-plan-before-build.md

@@ -1,28 +0,0 @@
-# validate-plan-before-build
-
-**Category**: workflow
-**Level**: REQUIRED
-**Enforcement Stage**: pre-exec
-**Tags**: planning, validation, accuracy
-
-## Rule
-
-When a plan is marked ready and the agent is about to begin implementation (first mutating tool call after plan emission: `Edit`, `Write`, `MultiEdit`, `Bash` that modifies state), the agent MUST first execute the prompt `validate the plan` and receive an explicit pass before proceeding.
-
-A plan is "ready" when:
-- User approves with "go", "build", "implement", "proceed", "ship it", "complete all", or similar
-- OR the agent emits ExitPlanMode / transitions out of a Plan phase
-
-## Why
-
-User directive: "when a plan is ready to build, execute prompt 'validate the plan'". Prevents shipping on stale/unvalidated plans — catches last-mile gaps before code changes begin.
-
-## Enforcement
-
-Python enforcer `validate_plan_before_build.py` tracks plan-ready state in session memory; on first mutating tool call post-ready, blocks and injects the `validate the plan` prompt. Unblocks only after a validation result is recorded.
-
-```rules
-- title: "Ready plans require explicit validation"
-  keywords: [edit, write, multiedit, implement, build, ship, commit]
-  antiPatterns: [unvalidated-plan, skip-validation, plan-stale]
-```