@momentiq/dark-factory-cli 2.1.0 → 2.2.0

package/dist/onboard/writers/merge.js

@@ -0,0 +1,142 @@
+// packages/cli/src/onboard/writers/merge.ts
+//
+// CLAUDE.md / AGENTS.md additive-append merge. THE Cycle 15 risk surface.
+//
+// Contract:
+//   - First run: append `\n<BEGIN>\n<tailored_content>\n<END>\n` after the
+//     existing file. NEVER touches the existing bytes.
+//   - Re-run: if BEGIN/END pair is found, REPLACE the content between them
+//     with the new tailored_content; preserve everything else byte-for-byte.
+//   - Parse failure (binary, > 128 KB, unbalanced fences): SKIP — leave the
+//     file untouched, emit a stderr warning. Non-fatal.
+//
+// The file is treated as bytes-on-disk; the heading parse is only used as a
+// sanity gate (Phase B never NEEDS the heading list for the merge — that's a
+// Phase A docs-analyzer concern).
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname, isAbsolute, relative, resolve } from "node:path";
+export const BEGIN_MARKER = "<!-- df onboard: inserted-by-cycle-15 BEGIN -->";
+export const END_MARKER = "<!-- df onboard: inserted-by-cycle-15 END -->";
+const MAX_TARGET_SIZE = 128 * 1024;
+function safeResolve(root, p) {
+    if (isAbsolute(p)) {
+        throw new Error(`df onboard: refuses to merge to absolute path "${p}" (outside the target root).`);
+    }
+    const resolved = resolve(root, p);
+    const rel = relative(root, resolved);
+    if (rel.startsWith("..") || isAbsolute(rel)) {
+        throw new Error(`df onboard: path traversal blocked — "${p}" resolves outside the target root.`);
+    }
+    return resolved;
+}
+function isBinaryBuffer(buf) {
+    const cap = Math.min(buf.length, 8192);
+    for (let i = 0; i < cap; i++)
+        if (buf[i] === 0)
+            return true;
+    return false;
+}
+// Best-effort fence balance check. Counts unescaped triple-backtick runs; an
+// odd count means an unpaired fence (or a fence inside another fence — both
+// are conditions where the heading regex can't safely traverse the file).
+function fencesBalanced(text) {
+    // Lines starting with ``` (possibly preceded by spaces) toggle fence state.
+    let inFence = false;
+    for (const line of text.split(/\r?\n/)) {
+        if (/^\s*```/.test(line))
+            inFence = !inFence;
+    }
+    return !inFence;
+}
+// Heading detector — same `^#{1,6}\s+(.+)$` regex Phase A's docs analyzer
+// (`docs.ts`) uses, with the same fenced-code-block tracking so a `# inside
+// code` line in a code block doesn't count. The merge handler skips files
+// with zero detected headings: appending after a heading-less prose blob
+// (or YAML, or boilerplate) would yield a structurally surprising file the
+// operator probably didn't intend to mark up. Per B-D6.
+const HEADING_RE = /^#{1,6}\s+(.+)$/;
+function detectHeadings(text) {
+    const out = [];
+    let inFence = false;
+    for (const line of text.split(/\r?\n/)) {
+        if (/^\s*```/.test(line)) {
+            inFence = !inFence;
+            continue;
+        }
+        if (inFence)
+            continue;
+        const m = line.match(HEADING_RE);
+        if (m)
+            out.push(m[1]);
+    }
+    return out;
+}
+function findMarkerBlock(text) {
+    const start = text.indexOf(BEGIN_MARKER);
+    if (start < 0)
+        return null;
+    const endRel = text.indexOf(END_MARKER, start + BEGIN_MARKER.length);
+    if (endRel < 0)
+        return null;
+    const end = endRel + END_MARKER.length;
+    return { start, end };
+}
+function replaceMarkerBlock(text, content, block) {
+    const before = text.slice(0, block.start);
+    const after = text.slice(block.end);
+    return `${before}${BEGIN_MARKER}\n${content}${content.endsWith("\n") ? "" : "\n"}${END_MARKER}${after}`;
+}
+function appendMarkerBlock(text, content) {
+    // Normalize so the file ends with exactly one newline, then add a blank line,
+    // the BEGIN marker, content, END marker, and a trailing newline.
+    let base = text;
+    if (!base.endsWith("\n"))
+        base += "\n";
+    const block = `\n${BEGIN_MARKER}\n${content}${content.endsWith("\n") ? "" : "\n"}${END_MARKER}\n`;
+    return base + block;
+}
+export async function writeMerge(rootDir, plan, opts = {}) {
+    const abs = safeResolve(rootDir, plan.path);
+    // Fall-back to emit semantics if target absent.
+    let existing;
+    try {
+        existing = await readFile(abs);
+    }
+    catch {
+        await mkdir(dirname(abs), { recursive: true });
+        await writeFile(abs, plan.tailored_content, "utf8");
+        return {
+            path: plan.path, action: "merge", wrote: true, skipped: false, fellBackToEmit: true,
+        };
+    }
+    // Parse-error gates.
+    if (existing.length > MAX_TARGET_SIZE) {
+        const reason = `target size ${existing.length} bytes exceeds 128 KB cap`;
+        opts.stderr?.(`df onboard: merge skipped for ${plan.path} — ${reason}; file left untouched.\n`);
+        return { path: plan.path, action: "merge", wrote: false, skipped: true, reason };
+    }
+    if (isBinaryBuffer(existing)) {
+        const reason = "target is binary";
+        opts.stderr?.(`df onboard: merge skipped for ${plan.path} — ${reason}; file left untouched.\n`);
+        return { path: plan.path, action: "merge", wrote: false, skipped: true, reason };
+    }
+    const text = existing.toString("utf8");
+    if (!fencesBalanced(text)) {
+        const reason = "could not parse headings — unbalanced fenced code blocks";
+        opts.stderr?.(`df onboard: merge skipped for ${plan.path} — ${reason}; file left untouched.\n`);
+        return { path: plan.path, action: "merge", wrote: false, skipped: true, reason };
+    }
+    if (detectHeadings(text).length === 0) {
+        const reason = "could not parse headings — no headings detected";
+        opts.stderr?.(`df onboard: merge skipped for ${plan.path} — ${reason}; file left untouched.\n`);
+        return { path: plan.path, action: "merge", wrote: false, skipped: true, reason };
+    }
+    // Re-run case: replace the existing marker block; preserve all bytes outside.
+    const block = findMarkerBlock(text);
+    const next = block
+        ? replaceMarkerBlock(text, plan.tailored_content, block)
+        : appendMarkerBlock(text, plan.tailored_content);
+    await writeFile(abs, next, "utf8");
+    return { path: plan.path, action: "merge", wrote: true, skipped: false };
+}
+//# sourceMappingURL=merge.js.map

package/dist/onboard/writers/merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"merge.js","sourceRoot":"","sources":["../../../src/onboard/writers/merge.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,0EAA0E;AAC1E,EAAE;AACF,YAAY;AACZ,2EAA2E;AAC3E,uDAAuD;AACvD,2EAA2E;AAC3E,6EAA6E;AAC7E,4EAA4E;AAC5E,wDAAwD;AACxD,EAAE;AACF,4EAA4E;AAC5E,6EAA6E;AAC7E,kCAAkC;AAElC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAQ,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAQ,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzE,MAAM,CAAC,MAAM,YAAY,GAAG,iDAAiD,CAAC;AAC9E,MAAM,CAAC,MAAM,UAAU,GAAG,+CAA+C,CAAC;AAC1E,MAAM,eAAe,GAAG,GAAG,GAAG,IAAI,CAAC;AAenC,SAAS,WAAW,CAAC,IAAY,EAAE,CAAS;IAC1C,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,8BAA8B,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACrC,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,qCAAqC,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;QAAE,IAAI,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC5D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6EAA6E;AAC7E,4EAA4E;AAC5E,0EAA0E;AAC1E,SAAS,cAAc,CAAC,IAAY;IAClC,4EAA4E;IAC5E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,GAAG,CAAC,OAAO,CAAC;IAC/C,CAAC;IACD,OAAO,CAAC,OAAO,CAAC;AAClB,CAAC;AAED,0EAA0E;AAC1E,4EAA4E;AAC5E,0EAA0E;AAC1E,yEAAyE;AACzE,2EAA2E;AAC3E,wDAAwD;AACxD,MAAM,UAAU,GAAG,iBAAiB,CAAC;AAErC,SAAS,cAAc,CAAC,IAAY;IAClC,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACvC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAAC,OAAO,GAAG,CAAC,OAAO,CAAC;YAAC,SAAS;QAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,SAAS;QACtB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QACjC,IAAI,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACzC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IACrE,IAAI,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;AACxB,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,OAAe,EAAE,KAAqC;IAC9F,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACpC,OAAO,GAAG,MAAM,GAAG,YAAY,KAAK,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,UAAU,GAAG,KAAK,EAAE,CAAC;AAC1G,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY,EAAE,OAAe;IACtD,8EAA8E;IAC9E,iEAAiE;IACjE,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,IAAI,IAAI,IAAI,CAAC;IACvC,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,UAAU,IAAI,CAAC;IAClG,OAAO,IAAI,GAAG,KAAK,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,OAAe,EACf,IAAmB,EACnB,OAAqB,EAAE;IAEvB,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,gDAAgD;IAChD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/C,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAAC;QACpD,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI;SACpF,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,QAAQ,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,eAAe,QAAQ,CAAC,MAAM,2BAA2B,CAAC;QACzE,IAAI,CAAC,MAAM,EAAE,CAAC,iCAAiC,IAAI,CAAC,IAAI,MAAM,MAAM,0BAA0B,CAAC,CAAC;QAChG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,cAAc,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,kBAAkB,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC,iCAAiC,IAAI,CAAC,IAAI,MAAM,MAAM,0BAA0B,CAAC,CAAC;QAChG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1B,MAAM,MAAM,GAAG,0DAA0D,CAAC;QAC1E,IAAI,CAAC,MAAM,EAAE,CAAC,iCAAiC,IAAI,CAAC,IAAI,MAAM,MAAM,0BAA0B,CAAC,CAAC;QAChG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,MAAM,MAAM,GAAG,iDAAiD,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC,iCAAiC,IAAI,CAAC,IAAI,MAAM,MAAM,0BAA0B,CAAC,CAAC;QAChG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnF,CAAC;IAED,8EAA8E;IAC9E,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,KAAK;QAChB,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,CAAC;QACxD,CAAC,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAEnD,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC3E,CAAC"}

package/dist/onboard/writers/pr-writer.d.ts

@@ -0,0 +1,44 @@
+import type { ScaffoldPlan } from "../scaffold-schema.js";
+export type SubprocessRunner = (cmd: string, args: string[], opts?: {
+    cwd?: string;
+}) => Promise<{
+    stdout: string;
+    stderr: string;
+}>;
+export declare const defaultRunner: SubprocessRunner;
+export interface PrModeOptions {
+    run?: SubprocessRunner;
+    canonicalName: string;
+    /** Resolved default-branch name (e.g. "main"). Comes from
+     *  `analysis.git.defaultBranch` — Phase A resolves it ONCE via
+     *  `git symbolic-ref refs/remotes/origin/HEAD` with HEAD fallback. For
+     *  repos where Phase A's heuristic misses (non-`origin` remote, shallow
+     *  clone, local-only repo, missing remote HEAD) the empty-string value
+     *  triggers runPrMode's defensive "main" fallback. Hardening tracked at
+     *  DFP #262. */
+    defaultBranch: string;
+    force?: boolean;
+}
+export interface PrModeResult {
+    branch: string;
+    prUrl: string;
+}
+/** Preflight check #1 — `gh` CLI authenticated.
+ *  Stream-portability note: `gh auth status` has historically split the
+ *  "Logged in to github.com" banner between stdout and stderr across
+ *  versions. We concatenate both streams before matching so the check is
+ *  robust to either shape (cli/cli#7019 / #7619). */
+export declare function preflightGhAuth(run: SubprocessRunner, rootDir: string): Promise<void>;
+/** Preflight check #2 — working tree is clean.
+ *  Replaces the older default-branch-block check. A dirty worktree is the
+ *  real footgun (the dirty changes flow into the new df/onboard-<sha8>
+ *  branch silently); a clean main is harmless because the --pr writer
+ *  creates a NEW branch regardless. */
+export declare function preflightCleanWorktree(run: SubprocessRunner, rootDir: string): Promise<void>;
+/** Single entry point for the two cheap, deterministic preflight checks.
+ *  cmdOnboard MUST call this BEFORE generatePlan so operators don't pay an
+ *  LLM round-trip just to discover gh isn't logged in or their worktree is
+ *  dirty. */
+export declare function preflightPr(run: SubprocessRunner, rootDir: string): Promise<void>;
+export declare function runPrMode(rootDir: string, plan: ScaffoldPlan, analysisSha8: string, opts: PrModeOptions, stderr?: (s: string) => void): Promise<PrModeResult>;
+//# sourceMappingURL=pr-writer.d.ts.map

package/dist/onboard/writers/pr-writer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-writer.d.ts","sourceRoot":"","sources":["../../../src/onboard/writers/pr-writer.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAI1D,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,KACpB,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEjD,eAAO,MAAM,aAAa,EAAE,gBAG3B,CAAC;AAEF,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;;oBAMgB;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;qDAIqD;AACrD,wBAAsB,eAAe,CACnC,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;uCAIuC;AACvC,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAcf;AAED;;;aAGa;AACb,wBAAsB,WAAW,CAC/B,GAAG,EAAE,gBAAgB,EACrB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,YAAY,EAClB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,aAAa,EACnB,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,IAAI,GAC3B,OAAO,CAAC,YAAY,CAAC,CAuDvB"}

package/dist/onboard/writers/pr-writer.js

@@ -0,0 +1,104 @@
+// packages/cli/src/onboard/writers/pr-writer.ts
+//
+// --pr mode: gh-auth precondition + branch + applyPlan + commit + gh pr create.
+// Subprocess calls run through SubprocessRunner so unit tests stub them out.
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { applyPlan } from "../apply-plan.js";
+const execFileAsync = promisify(execFile);
+export const defaultRunner = async (cmd, args, opts) => {
+    const result = await execFileAsync(cmd, args, opts?.cwd !== undefined ? { cwd: opts.cwd } : {});
+    return { stdout: String(result.stdout), stderr: String(result.stderr) };
+};
+/** Preflight check #1 — `gh` CLI authenticated.
+ *  Stream-portability note: `gh auth status` has historically split the
+ *  "Logged in to github.com" banner between stdout and stderr across
+ *  versions. We concatenate both streams before matching so the check is
+ *  robust to either shape (cli/cli#7019 / #7619). */
+export async function preflightGhAuth(run, rootDir) {
+    try {
+        const { stdout, stderr } = await run("gh", ["auth", "status"], { cwd: rootDir });
+        const combined = `${stdout ?? ""}\n${stderr ?? ""}`;
+        if (!/Logged in to github\.com/.test(combined)) {
+            throw new Error("gh auth status did not show github.com login");
+        }
+    }
+    catch (e) {
+        throw new Error(`df onboard: --pr mode requires gh CLI authentication. ` +
+            `Run \`gh auth login\` and re-try. (underlying: ${e.message})`);
+    }
+}
+/** Preflight check #2 — working tree is clean.
+ *  Replaces the older default-branch-block check. A dirty worktree is the
+ *  real footgun (the dirty changes flow into the new df/onboard-<sha8>
+ *  branch silently); a clean main is harmless because the --pr writer
+ *  creates a NEW branch regardless. */
+export async function preflightCleanWorktree(run, rootDir) {
+    const { stdout } = await run("git", ["status", "--porcelain"], { cwd: rootDir });
+    const dirty = stdout.split("\n").filter((l) => l.trim().length > 0);
+    if (dirty.length > 0) {
+        const sample = dirty.slice(0, 20).join("\n");
+        const more = dirty.length > 20 ? `\n  ... ${dirty.length - 20} more` : "";
+        throw new Error(`df onboard: refuses --pr with a dirty working tree (${dirty.length} ${dirty.length === 1 ? "path" : "paths"}). ` +
+            `Commit or stash before re-running, or use --apply for an in-place write that doesn't open a PR.\n` +
+            `Dirty paths:\n${sample}${more}`);
+    }
+}
+/** Single entry point for the two cheap, deterministic preflight checks.
+ *  cmdOnboard MUST call this BEFORE generatePlan so operators don't pay an
+ *  LLM round-trip just to discover gh isn't logged in or their worktree is
+ *  dirty. */
+export async function preflightPr(run, rootDir) {
+    await preflightGhAuth(run, rootDir);
+    await preflightCleanWorktree(run, rootDir);
+}
+export async function runPrMode(rootDir, plan, analysisSha8, opts, stderr) {
+    const run = opts.run ?? defaultRunner;
+    await preflightPr(run, rootDir);
+    // Defensive defaultBranch fallback (DFP #262). Phase B does NOT re-resolve;
+    // we fall back to "main" so `--base ""` is impossible, and warn loudly so
+    // the operator notices.
+    let defaultBranch = opts.defaultBranch;
+    if (!defaultBranch || defaultBranch.trim().length === 0) {
+        (stderr ?? ((s) => process.stderr.write(s)))("df onboard: WARNING — analysis.git.defaultBranch is empty; falling back to \"main\" for `gh pr create --base`. " +
+            "Hardening tracked at https://github.com/momentiq-ai/dark-factory-platform/issues/262.\n");
+        defaultBranch = "main";
+    }
+    const branch = `df/onboard-${analysisSha8}`;
+    const switchFlag = opts.force ? "-C" : "-c";
+    await run("git", ["switch", switchFlag, branch], { cwd: rootDir });
+    await applyPlan(rootDir, plan, opts.force !== undefined ? { mode: "apply", force: opts.force } : { mode: "apply" });
+    const commitMsg = `feat: df onboard scaffold (${opts.canonicalName}) — cycle 15 Phase B\n\n` +
+        `Tailored scaffold from template ${plan.templateRef}.\n` +
+        `Plan summary: ${plan.summary}\n`;
+    await run("git", ["add", "-A"], { cwd: rootDir });
+    await run("git", ["commit", "-m", commitMsg], { cwd: rootDir });
+    await run("git", ["push", "-u", "origin", branch], { cwd: rootDir });
+    const title = `feat: df onboard scaffold for ${opts.canonicalName}`;
+    const bodyLines = [];
+    bodyLines.push("## Summary");
+    bodyLines.push("");
+    bodyLines.push(plan.summary);
+    bodyLines.push("");
+    bodyLines.push("## Per-file actions");
+    bodyLines.push("");
+    bodyLines.push("```json");
+    bodyLines.push(JSON.stringify({
+        templateRef: plan.templateRef,
+        generatedAtIso: plan.generatedAtIso,
+        files: plan.files.map((f) => ({ path: f.path, action: f.action, rationale: f.rationale })),
+    }, null, 2));
+    bodyLines.push("```");
+    bodyLines.push("");
+    bodyLines.push("Generated by `df onboard --pr` (Dark Factory CLI cycle 15 Phase B).");
+    const { stdout } = await run("gh", [
+        "pr", "create",
+        "--title", title,
+        "--body", bodyLines.join("\n"),
+        "--base", defaultBranch,
+        "--head", branch,
+    ], { cwd: rootDir });
+    const prUrl = stdout.trim().split(/\s+/).pop() ?? "";
+    return { branch, prUrl };
+}
+//# sourceMappingURL=pr-writer.js.map

package/dist/onboard/writers/pr-writer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr-writer.js","sourceRoot":"","sources":["../../../src/onboard/writers/pr-writer.ts"],"names":[],"mappings":"AAAA,gDAAgD;AAChD,EAAE;AACF,gFAAgF;AAChF,6EAA6E;AAE7E,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAG7C,MAAM,aAAa,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAQ1C,MAAM,CAAC,MAAM,aAAa,GAAqB,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE;IACvE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAChG,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAC1E,CAAC,CAAC;AAqBF;;;;qDAIqD;AACrD,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAqB,EACrB,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;QACjF,MAAM,QAAQ,GAAG,GAAG,MAAM,IAAI,EAAE,KAAK,MAAM,IAAI,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC/C,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,wDAAwD;YACtD,kDAAmD,CAAW,CAAC,OAAO,GAAG,CAC5E,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;uCAIuC;AACvC,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,GAAqB,EACrB,OAAe;IAEf,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,WAAW,KAAK,CAAC,MAAM,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,KAAK,CACb,uDAAuD,KAAK,CAAC,MAAM,IACjE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAChC,KAAK;YACH,mGAAmG;YACnG,iBAAiB,MAAM,GAAG,IAAI,EAAE,CACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;aAGa;AACb,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,GAAqB,EACrB,OAAe;IAEf,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAAe,EACf,IAAkB,EAClB,YAAoB,EACpB,IAAmB,EACnB,MAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,aAAa,CAAC;IACtC,MAAM,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IAChC,4EAA4E;IAC5E,0EAA0E;IAC1E,wBAAwB;IACxB,IAAI,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACvC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,CAAC,MAAM,IAAI,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAClD,iHAAiH;YAC/G,yFAAyF,CAC5F,CAAC;QACF,aAAa,GAAG,MAAM,CAAC;IACzB,CAAC;IAED,MAAM,MAAM,GAAG,cAAc,YAAY,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACnE,MAAM,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;IAEpH,MAAM,SAAS,GACb,8BAA8B,IAAI,CAAC,aAAa,0BAA0B;QAC1E,mCAAmC,IAAI,CAAC,WAAW,KAAK;QACxD,iBAAiB,IAAI,CAAC,OAAO,IAAI,CAAC;IACpC,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAChE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAErE,MAAM,KAAK,GAAG,iCAAiC,IAAI,CAAC,aAAa,EAAE,CAAC;IACpE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,SAAS,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;QAC5B,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;KAC3F,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACb,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACtB,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,SAAS,CAAC,IAAI,CAAC,qEAAqE,CAAC,CAAC;IAEtF,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE;QACjC,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,KAAK;QAChB,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;QAC9B,QAAQ,EAAE,aAAa;QACvB,QAAQ,EAAE,MAAM;KACjB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACrB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;IACrD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;AAC3B,CAAC"}

package/dist/onboard/writers/skip.d.ts

@@ -0,0 +1,9 @@
+import type { SkipFilePlan } from "../scaffold-schema.js";
+export interface SkipResult {
+    path: string;
+    action: "skip";
+    rationale: string;
+    wrote: false;
+}
+export declare function writeSkip(_rootDir: string, plan: SkipFilePlan): Promise<SkipResult>;
+//# sourceMappingURL=skip.d.ts.map

package/dist/onboard/writers/skip.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip.d.ts","sourceRoot":"","sources":["../../../src/onboard/writers/skip.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,CAAC;CACd;AAED,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,CAOzF"}

package/dist/onboard/writers/skip.js

@@ -0,0 +1,9 @@
+export async function writeSkip(_rootDir, plan) {
+    return {
+        path: plan.path,
+        action: "skip",
+        rationale: plan.rationale,
+        wrote: false,
+    };
+}
+//# sourceMappingURL=skip.js.map

package/dist/onboard/writers/skip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"skip.js","sourceRoot":"","sources":["../../../src/onboard/writers/skip.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAkB;IAClE,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,IAAI;QACf,MAAM,EAAE,MAAM;QACd,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,KAAK,EAAE,KAAK;KACb,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@momentiq/dark-factory-cli",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Dark Factory OSS CLI — multi-vendor adversarial critic orchestration (Cursor, Codex, Gemini, Grok) with min-complete-quorum aggregation and trusted-surface rebind",
   "license": "Apache-2.0",
   "homepage": "https://momentiq.ai/dark-factory",
@@ -93,6 +93,7 @@
     "node": ">=20"
   },
   "dependencies": {
+    "@anthropic-ai/sdk": "^0.100.1",
     "@cursor/sdk": "^1.0.12",
     "@google/genai": "^2.2.0",
     "@iarna/toml": "2.2.5",
@@ -102,12 +103,14 @@
     "@yarnpkg/lockfile": "1.1.0",
     "ajv": "^8.20.0",
     "ajv-formats": "^3.0.1",
+    "diff": "^5.2.2",
     "openai": "^6.37.0",
     "yaml": "^2.9.0",
     "zod": "^3.23.0",
     "zod-to-json-schema": "^3.25.2"
   },
   "devDependencies": {
+    "@types/diff": "^5.2.3",
     "@types/node": "^20.11.0",
     "@types/yarnpkg__lockfile": "^1.1.9",
     "@vitest/coverage-v8": "^2.1.9",