@pmelab/gtd 27.3.0 → 27.5.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "gtd",
-  "version": "27.3.0",
+  "version": "27.5.0",
   "description": "Drive the gtd loop inside Claude Code: agent turns run as subagents, gtd decides every beat",
   "author": {
     "name": "Philipp Melab"

package/README.md

@@ -552,6 +552,14 @@ unknown key. `gtd.config.ts` is the only repository config: gtd 23 removed the
 home directory — fails every command until you delete it. See
 [Migrating from `.gtdrc`](https://github.com/pmelab/gtd/blob/main/docs/configuration.md#migrating-from-gtdrc).
 
+**Naive pass (flag `GTD_FLAG_NAIVE_PASS=1`, off by default).** Instead of an
+architecture and package files, the agent first implements the requirements
+directly. A judge checks whether it changed anything outside the expected set
+(tests, steering files; see `seamAllow`). Incidental changes land; a needed seam
+change goes to you for approval and is refactored first; a wrong approach is
+retried twice, then rests for you to steer or overrule it. Details in
+[the naive-pass path](docs/configuration.md#the-naive-pass-path).
+
 ### Rolling out and cleaning up release flags
 
 Two more bundled workflows retire a release flag:
@@ -581,7 +589,7 @@ kept before it squashes.
 
 ```sh
 gtd history list                 # one line per kept process
-gtd history show <ref>           # replay its steps and judge verdicts
+gtd history show <ref>           # replay its steps, judge verdicts and approvals
 gtd history fetch | sh           # pull every kept ref from origin
 ```
 
@@ -601,6 +609,19 @@ of on the branch (see [Kept tips](docs/configuration.md#kept-tips)). Those refs
 are not process history: `gtd history` does not list them, and the
 `refs/gtd/history/*` refspecs above neither push nor fetch them.
 
+A workflow can rest at an approval gate (`human(name, { approve: true })`; the
+`seamGate` helper does this after a `refactor-first` diff-shape judgment). Only
+a clean `gtd land` approves it, and the commit records who in a
+`Gtd-Approved: {"step":"<step>#<n>","name":"<name>","email":"<email>"}` trailer;
+a landing with any edit is refused (as is a script run after the tree changed —
+revert and land again), and `gtd abandon` is the only other way out. `approve`
+cannot be combined with `mode` or `file` (refused when replay reaches the step).
+Git hooks do not run on the approval commit; `commit.gpgSign` still applies, so
+a failing signer refuses the approval. `gtd next --json` lists the process's
+approvals as `approvals` (`[]` when none), and `gtd history show` prints each as
+`approved <step>#<n> by <name> <<email>>`. See
+[Step options](docs/configuration.md#step-options).
+
 ## Entrypoints
 
 gtd is one package, `@pmelab/gtd`, and every entrypoint shares its version and

package/dist/chunks/{Schema-CyImoHTj.mjs → Schema-DO5ttJaI.mjs}

@@ -25449,4 +25449,4 @@ Struct({
 	description: "Represents an issue returned by the ArrayFormatter formatter"
 });
 //#endregion
-export { logWarning as $, format$4 as $i, map$4 as $n, make$20 as $r, provide$1 as $t, catchIf as A, get$7 as Ai, scopeMake as An, flatMap$3 as Ar, suspend$1 as At, flatMap$1 as B, isNone as Bi, get as Bn, sync$1 as Br, unsafeMakeLatch as Bt, all as C, toArray$1 as Ci, isInterrupted as Cn, exitFail as Cr, sandbox as Ct, async as D, GenericTag as Di, squash as Dn, exitZipRight as Dr, scopedWith as Dt, asVoid as E, unsafeHead as Ei, reduceWithContext as En, exitVoid$1 as Er, scoped as Et, ensuring as F, splitAt as Fi, join as Fn, map$5 as Fr, tryMap as Ft, forkIn as G, some as Gi, TypeId$4 as Gn, whenEffect as Gr, zipLeft as Gt, fnUntraced as H, map$11 as Hi, modify as Hn, uninterruptible$1 as Hr, when as Ht, exit as I, filter$3 as Ii, sequential$1 as In, onInterrupt as Ir, tryPromise as It, ignore as J, match$7 as Ji, all$2 as Jn, DeferredTypeId as Jr, spaced as Jt, forkScoped as K, isLeft as Ki, Class as Kn, withFiberRuntime$1 as Kr, zipRight as Kt, fail$1 as L, flatMap$6 as Li, bind as Ln, scopeClose as Lr, try_ as Lt, die as M, omit$1 as Mi, _await as Mn, interruptAsFiber as Mr, tap as Mt, dieMessage as N, empty$22 as Ni, inheritAll as Nn, interruptFiber as Nr, tapErrorCause as Nt, catchAll as O, Tag as Oi, ensuring$1 as On, fiberId as Or, serviceOption as Ot, either as P, fromIterable$6 as Pi, interruptAllAs as Pn, interruptible$2 as Pr, timeout as Pt, isEffect as Q, NodeInspectSymbol as Qi, isFailure as Qn, ids as Qr, mergeAll as Qt, failCause as R, fromNullable as Ri, bindTo as Rn, succeed$5 as Rr, uninterruptible as Rt, addFinalizer as S, takeRight as Si, isDieType as Sn, exitAs as Sr, runtime as St, as as T, unsafeGet as Ti, map$3 as Tn, exitSucceed$1 as Tr, scopeWith as Tt, forEach as U, match$6 as Ui, set as Un, uninterruptibleMask$2 as Ur, withFiberRuntime as Ut, flatten as V, isSome as Vi, make$12 as Vn, tap$1 as Vr, unsafeMakeSemaphore as Vt, forkDaemon as W, none$4 as Wi, update$1 as Wn, void_$2 as Wr, zip as Wt, interruptible as X, pipeArguments as Xi, fail$4 as Xn, combine$5 as Xr, tagged as Xt, interrupt as Y, right as Yi, die$2 as Yn, empty$15 as Yr, TaggedError$1 as Yt, intoDeferred as Z, BaseProto as Zi, failCause$2 as Zn, combineAll as Zr, fromEffect as Zt, decodeSync as _, of$1 as _i, fail$2 as _n, deferredIsDone as _r, raceWith as _t, Literal as a, constUndefined as aa, size$2 as ai, updateContext as an, zipRight$1 as ar, matchCause as at, acquireRelease as b, reverse$1 as bi, interrupt$1 as bn, deferredUnsafeDone as br, runPromise as bt, String$ as c, identity as ca, append as ci, Scope as cn, asyncInterrupt as cr, negate as ct, Union as d, empty$19 as di, close as dn, deferredAwait as dr, orElse$1 as dt, toJSON as ea, none$2 as ei, provideMerge as en, mapBoth$2 as er, makeSemaphore as et, between as f, filter$1 as fi, extend$1 as fn, deferredComplete as fr, orElseSucceed as ft, standardSchemaV1 as g, map$9 as gi, die$1 as gn, deferredInterruptWith as gr, race as gt, optionalWith as h, isEmpty$5 as hi, NoSuchElementException as hn, deferredInterrupt as hr, provideService as ht, Defect as i, constTrue as ia, has$1 as ii, unsafeRunPromiseExit as in, zip$1 as ir, match as it, catchTag as j, getOption as ji, scopeTag as jn, interrupt$2 as jr, sync as jt, catchAllCause as k, add$2 as ki, forEachConcurrentDiscard as kn, fiberRefLocally as kr, succeed$1 as kt, Struct as l, pipe as la, appendAll$1 as li, addFinalizer$1 as ln, catchAll$1 as lr, onError as lt, optional as m, isChunk as mi, make$2 as mn, deferredFailCause as mr, provide as mt, Boolean$ as n, hasProperty as na, make$22 as ni, succeed$2 as nn, succeed$4 as nr, mapBoth$1 as nt, Never as o, constVoid as oa, decode as oi, forkIn$1 as on, as$1 as or, matchCauseEffect as ot, decodeUnknown as p, fromIterable$5 as pi, fork as pn, deferredFail as pr, promise as pt, gen as q, left as qi, spanTag as qn, zipRight$2 as qr, zipWith as qt, Cause as r, constFalse as ra, set$3 as ri, unsafeFork as rn, void_$1 as rr, mapError$1 as rt, Number$ as s, dual as sa, isFinite as si, unsafeMakeSemaphore$1 as sn, asVoid$1 as sr, matchEffect as st, Array$ as t, equals$2 as ta, get$4 as ti, scoped$1 as tn, match$3 as tr, map$1 as tt, TaggedError as u, drop as ui, addFinalizerExit as un, currentContext as ur, orDie as ut, encodeSync as v, prepend$1 as vi, failureOrCause as vn, deferredMake as vr, repeat as vt, annotateLogs as w, unsafeFromArray as wi, isInterruptedOnly as wn, exitFailCause$1 as wr, scope as wt, acquireUseRelease as x, take as xi, interruptors as xn, deferredUnsafeMake as xr, runPromiseExit as xt, _void as y, reduce$6 as yi, flipCauseOption as yn, deferredSucceed as yr, retry as yt, fiberIdWith as z, getOrElse as zi, sleep as zn, suspend$3 as zr, uninterruptibleMask as zt };
+export { logWarning as $, NodeInspectSymbol as $i, map$4 as $n, make$20 as $r, provide$1 as $t, catchIf as A, add$2 as Ai, scopeMake as An, flatMap$3 as Ar, suspend$1 as At, flatMap$1 as B, getOrElse as Bi, get as Bn, sync$1 as Br, unsafeMakeLatch as Bt, all as C, toArray$1 as Ci, isInterrupted as Cn, exitFail as Cr, sandbox as Ct, async as D, GenericTag as Di, squash as Dn, exitZipRight as Dr, scopedWith as Dt, asVoid as E, unsafeHead as Ei, reduceWithContext as En, exitVoid$1 as Er, scoped as Et, ensuring as F, fromIterable$6 as Fi, join as Fn, map$5 as Fr, tryMap as Ft, forkIn as G, none$4 as Gi, TypeId$4 as Gn, whenEffect as Gr, zipLeft as Gt, fnUntraced as H, isSome as Hi, modify as Hn, uninterruptible$1 as Hr, when as Ht, exit as I, splitAt as Ii, sequential$1 as In, onInterrupt as Ir, tryPromise as It, ignore as J, left as Ji, all$2 as Jn, DeferredTypeId as Jr, spaced as Jt, forkScoped as K, some as Ki, Class as Kn, withFiberRuntime$1 as Kr, zipRight as Kt, fail$1 as L, filter$3 as Li, bind as Ln, scopeClose as Lr, try_ as Lt, die as M, getOption as Mi, _await as Mn, interruptAsFiber as Mr, tap as Mt, dieMessage as N, omit$1 as Ni, inheritAll as Nn, interruptFiber as Nr, tapErrorCause as Nt, catchAll as O, Reference as Oi, ensuring$1 as On, fiberId as Or, serviceOption as Ot, either as P, empty$22 as Pi, interruptAllAs as Pn, interruptible$2 as Pr, timeout as Pt, isEffect as Q, BaseProto as Qi, isFailure as Qn, ids as Qr, mergeAll as Qt, failCause as R, flatMap$6 as Ri, bindTo as Rn, succeed$5 as Rr, uninterruptible as Rt, addFinalizer as S, takeRight as Si, isDieType as Sn, exitAs as Sr, runtime as St, as as T, unsafeGet as Ti, map$3 as Tn, exitSucceed$1 as Tr, scopeWith as Tt, forEach as U, map$11 as Ui, set as Un, uninterruptibleMask$2 as Ur, withFiberRuntime as Ut, flatten as V, isNone as Vi, make$12 as Vn, tap$1 as Vr, unsafeMakeSemaphore as Vt, forkDaemon as W, match$6 as Wi, update$1 as Wn, void_$2 as Wr, zip as Wt, interruptible as X, right as Xi, fail$4 as Xn, combine$5 as Xr, tagged as Xt, interrupt as Y, match$7 as Yi, die$2 as Yn, empty$15 as Yr, TaggedError$1 as Yt, intoDeferred as Z, pipeArguments as Zi, failCause$2 as Zn, combineAll as Zr, fromEffect as Zt, decodeSync as _, of$1 as _i, fail$2 as _n, deferredIsDone as _r, raceWith as _t, Literal as a, constTrue as aa, size$2 as ai, updateContext as an, zipRight$1 as ar, matchCause as at, acquireRelease as b, reverse$1 as bi, interrupt$1 as bn, deferredUnsafeDone as br, runPromise as bt, String$ as c, dual as ca, append as ci, Scope as cn, asyncInterrupt as cr, negate as ct, Union as d, empty$19 as di, close as dn, deferredAwait as dr, orElse$1 as dt, format$4 as ea, none$2 as ei, provideMerge as en, mapBoth$2 as er, makeSemaphore as et, between as f, filter$1 as fi, extend$1 as fn, deferredComplete as fr, orElseSucceed as ft, standardSchemaV1 as g, map$9 as gi, die$1 as gn, deferredInterruptWith as gr, race as gt, optionalWith as h, isEmpty$5 as hi, NoSuchElementException as hn, deferredInterrupt as hr, provideService as ht, Defect as i, constFalse as ia, has$1 as ii, unsafeRunPromiseExit as in, zip$1 as ir, match as it, catchTag as j, get$7 as ji, scopeTag as jn, interrupt$2 as jr, sync as jt, catchAllCause as k, Tag as ki, forEachConcurrentDiscard as kn, fiberRefLocally as kr, succeed$1 as kt, Struct as l, identity as la, appendAll$1 as li, addFinalizer$1 as ln, catchAll$1 as lr, onError as lt, optional as m, isChunk as mi, make$2 as mn, deferredFailCause as mr, provide as mt, Boolean$ as n, equals$2 as na, make$22 as ni, succeed$2 as nn, succeed$4 as nr, mapBoth$1 as nt, Never as o, constUndefined as oa, decode as oi, forkIn$1 as on, as$1 as or, matchCauseEffect as ot, decodeUnknown as p, fromIterable$5 as pi, fork as pn, deferredFail as pr, promise as pt, gen as q, isLeft as qi, spanTag as qn, zipRight$2 as qr, zipWith as qt, Cause as r, hasProperty as ra, set$3 as ri, unsafeFork as rn, void_$1 as rr, mapError$1 as rt, Number$ as s, constVoid as sa, isFinite as si, unsafeMakeSemaphore$1 as sn, asVoid$1 as sr, matchEffect as st, Array$ as t, toJSON as ta, get$4 as ti, scoped$1 as tn, match$3 as tr, map$1 as tt, TaggedError as u, pipe as ua, drop as ui, addFinalizerExit as un, currentContext as ur, orDie as ut, encodeSync as v, prepend$1 as vi, failureOrCause as vn, deferredMake as vr, repeat as vt, annotateLogs as w, unsafeFromArray as wi, isInterruptedOnly as wn, exitFailCause$1 as wr, scope as wt, acquireUseRelease as x, take as xi, interruptors as xn, deferredUnsafeMake as xr, runPromiseExit as xt, _void as y, reduce$6 as yi, flipCauseOption as yn, deferredSucceed as yr, retry as yt, fiberIdWith as z, fromNullable as zi, sleep as zn, suspend$3 as zr, uninterruptibleMask as zt };

package/dist/chunks/{reserved-BPdVZkgv.mjs → reserved-DM5W_LAt.mjs}

@@ -1,6 +1,6 @@
-import { accessFor, agent, answered, changesSince, check, codeThreads, defineWorkflow, env, head, human, judge, numeric, quote, skillsFor, start, vars } from "../flows.mjs";
+import { accessFor, agent, answered, changesSince, check, codeThreads, defineWorkflow, displayPath, env, head, human, judge, numeric, quote, skillsFor, start, vars } from "../flows.mjs";
 import { escalation as escalation$1, gate as gate$1, healthy as healthy$1, lensScopes, lensesOf, removedAssertions } from "../workflow-kit.mjs";
-import { c as String$, g as standardSchemaV1, h as optionalWith, l as Struct } from "./Schema-CyImoHTj.mjs";
+import { c as String$, g as standardSchemaV1, h as optionalWith, l as Struct } from "./Schema-DO5ttJaI.mjs";
 //#region src/workflows/shared/prose.ts
 const skillsPreamble = `- Load whatever's listed here that your harness actually has installed,
   skip anything it doesn't — silently, never stopping or asking about a
@@ -1071,6 +1071,60 @@ ${it.processCostByModel.map((m) => `- ${m.model}: ${m.cost}\n`).join("")}
 Print the closing message and stop — this writes nothing itself.
 `;
 };
+const listed = (paths, unreadable = []) => paths.map((path) => `  - \`${displayPath(path)}\`${unreadable.includes(path) ? " (unreadable)" : ""}`).join("\n");
+const naivePassPrompt = (rejection) => `${stateFileRules}
+- Read \`.gtd/REQUIREMENTS.md\`: the settled requirements for this change
+- Implement them the quickest way that works — the naive version. Do not
+  restructure, abstract or refactor around the change; a later step judges
+  the shape of your diff and a reviewer makes it fit
+- Add tests as you go, and leave \`.gtd/\` untouched
+- Leave everything uncommitted and finish your turn — do not commit
+${rejection === void 0 ? "" : `
+Your previous attempt was rejected: the judge answered \`reject\` (p=${rejection.p}),
+meaning the naive pass solved the task the wrong way — discard it and
+re-implement. It changed these files outside the expected set:
+${listed(rejection.strays)}
+Start over and choose a different approach; do not rebuild the same diff.
+`}`;
+const implementBuildingPrompt = (reference) => `${stateFileRules}
+- Read \`.gtd/REQUIREMENTS.md\`: the settled requirements for this change
+- Implement them properly, fitting the codebase's seams and conventions
+- Reference only: \`git show ${reference}\` shows an earlier naive attempt.
+  Read it for ideas; never apply, cherry-pick or check it out — write
+  the change fresh
+- Put the new behaviour behind a new release flag, following the
+  repository's flag conventions
+- Write the tests first, then the code that makes them pass
+- Leave \`.gtd/REQUIREMENTS.md\` in place and everything uncommitted, then
+  finish your turn
+`;
+const implementFixPrompt = () => `${stateFileRules}
+${fixFeedbackPrompt}
+- Leave everything uncommitted and finish your turn — do not commit
+`;
+const seamSteerMessage = (rejection) => `The naive pass was rejected three times and the retries are spent.
+The last attempt changed these files outside the expected set:
+${listed(rejection.strays)}
+
+Two ways forward (then run \`gtd land\`):
+- **Steer** — edit \`.gtd/REQUIREMENTS.md\` to redirect the change; the naive
+  pass runs again with a fresh retry budget
+- **Overrule** — land a clean tree to accept the last attempt's approach:
+  the implementation is built against it as reference, with no seam gate
+  and no refactor. Risk: this ships the seam the judge objected to,
+  unaddressed — the choice is recorded in history.
+
+An edit together with an approval counts as steer. Only
+\`.gtd/REQUIREMENTS.md\` is meant to change here: any other edit lands on the
+branch unjudged.
+`;
+const seamByHandMessage = (strays, unreadable, reference) => `The judge could not read some of these files, so the diff was never
+fully judged and no refactor runs. Unreadable ones are marked:
+${listed(strays, unreadable)}
+
+See them with \`git show ${reference} -- <path>\` and review by hand. Land a
+clean tree to go on to the implementation, which runs next.
+`;
 //#endregion
 //#region src/workflows/shared/steps.ts
 const FEEDBACK = ".gtd/FEEDBACK.md";
@@ -1257,6 +1311,8 @@ const defaults = {
 	reviewNoteActionable: "0.7",
 	reviewSeverityMinP: "0.7",
 	refactorFlagPattern: "\\bGTD_FLAG_\\w+",
+	seamAllow: "**/*.test.*, **/*.spec.*, **/*.feature, **/tests/**, **/test/**, **/__tests__/**, .gtd/**",
+	flag_naive_pass: "0",
 	qualityReviews: "correctness, owasp-security, ponytail-review, test-audit, conventions, spec-challenge"
 };
 /** Environment settings. */
@@ -1275,6 +1331,7 @@ const ShippedOptions = Struct({
 	reviewNoteActionable: setting,
 	reviewSeverityMinP: setting,
 	refactorFlagPattern: setting,
+	seamAllow: setting,
 	qualityReviews: setting,
 	testCommand: setting,
 	plannerModel: setting,
@@ -1339,6 +1396,10 @@ const skills = (vars) => ({
 	refactor: ["ponytail"],
 	"refactor.fix.suite": ["ponytail", "debugging-and-error-recovery"],
 	"refactor.health": ["ponytail", "debugging-and-error-recovery"],
+	seam: ["incremental-implementation"],
+	implement: ["test-driven-development", "incremental-implementation"],
+	"implement.fix.suite": ["debugging-and-error-recovery"],
+	"implement.health": ["debugging-and-error-recovery"],
 	...lensScopes("build.quality", lensesOf(vars.qualityReviews ?? ""), (lens) => builtInLenses[lens]?.skills ?? [lens])
 });
 //#endregion
@@ -1362,4 +1423,4 @@ const steering = {
 	[REVIEW]: "review"
 };
 //#endregion
-export { reviewGateBlockedMessage as $, architectureAuthorPrompt as A, designGateAnswerMessage as B, fixRisks as C, reviewing as D, reviewQuality as E, buildReviewCollectingPrompt as F, handOffAwaitReviewMessage as G, designTriagePrompt as H, buildReviewFixNitsPrompt as I, packagesItemFixSuitePrompt as J, idleMessage as K, buildReviewTriageMessage as L, architectureGateAnswerMessage as M, buildReviewAnswerQuestionsPrompt as N, agentWithSkills as O, buildReviewAwaitAfterDeferMessage as P, reviewEditsCapture as Q, builderSystem as R, fixQuality as S, reviewMissing as T, finisherSystem as U, designSystem as V, fixReviewNotesPrompt as W, refactorFixPrompt as X, refactorBuildingPrompt as Y, reviewEditNotesCapture as Z, REQUIREMENTS as _, flagShipped as a, coder as b, envDefaults as c, gate as d, reviewNotesCapture as et, guarded as f, QUALITY as g, FEEDBACK as h, skills as i, unwindFailure as it, architectureDecomposePrompt as j, architectSystem as k, baseline as l, ARCHITECTURE as m, summary as n, startGateBlockedMessage as nt, shipped as o, healthy as p, packagesItemBuildingPrompt as q, access as r, unwindFailedMessage as rt, defaults as s, steering as t, reviewerSystem as tt, escalation as u, REVIEW as v, planner as w, fixCheck as x, awaitReview as y, deferNotesScript as z };
+export { refactorFixPrompt as $, architectureAuthorPrompt as A, designGateAnswerMessage as B, fixRisks as C, reviewing as D, reviewQuality as E, buildReviewCollectingPrompt as F, handOffAwaitReviewMessage as G, designTriagePrompt as H, buildReviewFixNitsPrompt as I, implementFixPrompt as J, idleMessage as K, buildReviewTriageMessage as L, architectureGateAnswerMessage as M, buildReviewAnswerQuestionsPrompt as N, agentWithSkills as O, buildReviewAwaitAfterDeferMessage as P, refactorBuildingPrompt as Q, builderSystem as R, fixQuality as S, reviewMissing as T, finisherSystem as U, designSystem as V, fixReviewNotesPrompt as W, packagesItemBuildingPrompt as X, naivePassPrompt as Y, packagesItemFixSuitePrompt as Z, REQUIREMENTS as _, flagShipped as a, seamByHandMessage as at, coder as b, envDefaults as c, unwindFailedMessage as ct, gate as d, reviewEditNotesCapture as et, guarded as f, QUALITY as g, FEEDBACK as h, skills as i, reviewerSystem as it, architectureDecomposePrompt as j, architectSystem as k, baseline as l, unwindFailure as lt, ARCHITECTURE as m, summary as n, reviewGateBlockedMessage as nt, shipped as o, seamSteerMessage as ot, healthy as p, implementBuildingPrompt as q, access as r, reviewNotesCapture as rt, defaults as s, startGateBlockedMessage as st, steering as t, reviewEditsCapture as tt, escalation as u, REVIEW as v, planner as w, fixCheck as x, awaitReview as y, deferNotesScript as z };

package/dist/chunks/{tail-iLAMoigl.mjs → tail-6gvLXXcg.mjs}

@@ -1,6 +1,6 @@
 import { read, refuse, removeScript, run, scope, showScript, vars } from "../flows.mjs";
 import { fixFindings, lensesOf, qualityLap as qualityLap$1, reviewToHandOff } from "../workflow-kit.mjs";
-import { C as fixRisks, D as reviewing, E as reviewQuality, G as handOffAwaitReviewMessage, S as fixQuality, T as reviewMissing, f as guarded, g as QUALITY, p as healthy, u as escalation, v as REVIEW, x as fixCheck, y as awaitReview } from "./reserved-BPdVZkgv.mjs";
+import { C as fixRisks, D as reviewing, E as reviewQuality, G as handOffAwaitReviewMessage, S as fixQuality, T as reviewMissing, f as guarded, g as QUALITY, p as healthy, u as escalation, v as REVIEW, x as fixCheck, y as awaitReview } from "./reserved-DM5W_LAt.mjs";
 //#region src/workflows/shared/tail.ts
 /** The reviewer's own `.gtd/REVIEW.md`, kept beside the human's notes so `fix` can tell them apart. */
 const REVIEW_ORIG = ".gtd/REVIEW.orig.md";

package/dist/chunks/{wire-BY1S-obW.mjs → wire-C12dahrH.mjs}

@@ -110,7 +110,7 @@ const demandOf = (input) => {
 * instead of failing loudly.
 */
 const statusOf = (input) => {
-	const { rendered, idle, initial, workflow, log, changes, next, cost, costByModel } = input;
+	const { rendered, idle, initial, workflow, log, changes, next, cost, costByModel, approvals } = input;
 	return {
 		idle,
 		initial,
@@ -128,7 +128,8 @@ const statusOf = (input) => {
 		next,
 		cost,
 		costByModel,
-		judge: rendered.judge
+		judge: rendered.judge,
+		approvals
 	};
 };
 //#endregion
@@ -168,7 +169,7 @@ const dispatchFieldsOf = (demand) => {
 	}
 };
 /**
-* Flatten a `Demand` plus its `BeatStatus` into the single 24-key document
+* Flatten a `Demand` plus its `BeatStatus` into the single 25-key document
 * `gtd next --json` emits — the ONLY place the two are joined. `cost`/
 * `costByModel` are omitted together, exactly when no cost was recorded
 * (`cost <= 0`).
@@ -200,7 +201,8 @@ const beatDocument = (demand, status) => {
 		costByModel: hasCost ? status.costByModel : void 0,
 		judge: status.judge,
 		skills,
-		access
+		access,
+		approvals: status.approvals
 	};
 };
 const renderBeatJson = (document) => JSON.stringify(document) + "\n";

package/dist/flows.mjs

@@ -354,7 +354,8 @@ const strayContent = (strays) => strays.map((c) => [
 */
 const judgeDiffShape = async (name, options) => {
 	const { changes: all, allow } = options;
-	const isStray = (c) => !allow.some((pattern) => matches(c.path, pattern));
+	const exempt = options.exempt ?? [];
+	const isStray = (c) => !exempt.includes(c.path) && !allow.some((pattern) => matches(c.path, pattern));
 	const strayChanges = all.filter(isStray).sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0).map(({ path, status, before, after }) => ({
 		path,
 		status,
@@ -400,6 +401,28 @@ const judgeDiffShape = async (name, options) => {
 		judgment
 	};
 };
+const displayPath = (path) => /[\x00-\x1f\x7f-\x9f]/.test(path) ? JSON.stringify(path) : path;
+const seamReport = (shape) => {
+	const unreadable = new Set(shape.unreadable);
+	return [
+		"Seam report: the judge found the diff's shape needs a refactor first. These paths stray outside the allowlist:",
+		"",
+		...shape.strays.map((path) => `- ${displayPath(path)}${unreadable.has(path) ? " (unreadable — not judged)" : ""}`),
+		"",
+		"Landing a clean tree with `gtd land` approves this diff exactly as judged; edits are refused. To stop instead, run `gtd abandon`."
+	].join("\n");
+};
+/**
+* Rest at an approval gate `name` showing the seam report — only when
+* `shape.choice` is `refactor-first`. `land` and `reject` reach no step.
+*/
+const seamGate = async (name, shape) => {
+	if (shape.choice !== "refactor-first") return;
+	await human(name, {
+		message: seamReport(shape),
+		approve: true
+	});
+};
 //#endregion
 //#region src/flows/factory.ts
 const FACTORY = Symbol.for("@pmelab/gtd/workflow-factory");
@@ -578,6 +601,7 @@ var flows_exports = /* @__PURE__ */ __exportAll({
 	configure: () => configure,
 	defineConfig: () => defineConfig,
 	defineWorkflow: () => defineWorkflow,
+	displayPath: () => displayPath,
 	env: () => env,
 	glob: () => glob,
 	hasThreadFor: () => hasThreadFor,
@@ -607,6 +631,7 @@ var flows_exports = /* @__PURE__ */ __exportAll({
 	revertScript: () => revertScript,
 	run: () => run,
 	scope: () => scope,
+	seamGate: () => seamGate,
 	sectionBodies: () => sectionBodies,
 	sections: () => sections,
 	showScript: () => showScript,
@@ -617,4 +642,4 @@ var flows_exports = /* @__PURE__ */ __exportAll({
 	wrote: () => wrote
 });
 //#endregion
-export { FLOWS_PROTOCOL, FlowsProtocolError, accessFor, agent, answered, changes, changesSince, check, checkScript, codeChanges, codeThreads, configProblems, configure, defineConfig, defineWorkflow, env, glob, hasThreadFor, head, human, installContext, isFactoryWorkflow, judge, judgeDiffShape, kept, matches, moveScript, numeric, openQuestions, protocolMismatch, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireRevert, requireThreadsClosed, restart, restoreScript, revertScript, run, scope, sectionBodies, sections, showScript, skillsFor, start, flows_exports as t, threads, vars, wrote };
+export { FLOWS_PROTOCOL, FlowsProtocolError, accessFor, agent, answered, changes, changesSince, check, checkScript, codeChanges, codeThreads, configProblems, configure, defineConfig, defineWorkflow, displayPath, env, glob, hasThreadFor, head, human, installContext, isFactoryWorkflow, judge, judgeDiffShape, kept, matches, moveScript, numeric, openQuestions, protocolMismatch, quote, read, refuse, removeScript, requireAnswers, requireProgress, requireReplies, requireRevert, requireThreadsClosed, restart, restoreScript, revertScript, run, scope, seamGate, sectionBodies, sections, showScript, skillsFor, start, flows_exports as t, threads, vars, wrote };