@sabaiway/agent-workflow-kit 10.6.0 → 11.0.0

package/tools/tracked-tree-census.mjs

@@ -1,6 +1,6 @@
 // tracked-tree-census.mjs — how much of a project's TRACKED tree the changed-line coverage domain
 // can actually assess, in the closed vocabulary that domain already speaks. A LEAF: it imports the
-// classification and nothing else, and it spawns exactly one read-only `git ls-files`.
+// changed-surface classification and the shared git-spawn buffer from the git-location leaf, and it spawns exactly one read-only `git ls-files`.
 //
 // Why this exists: the coverage checker's domain is `.mjs/.cjs/.js` by design, and on a TS project
 // that domain is a rounding error of the tree. Certifying it and calling the flow optimal is the
@@ -10,9 +10,9 @@
 // Read-only: never writes, never commits. Dependency-free, Node >= 22. No side effects on import.
 
 import { spawnSync } from 'node:child_process';
-import { classifyChangedPath } from './changed-surface.mjs';
 
-const GIT_MAX_BUFFER = 256 * 1024 * 1024; // a large tracked tree; never truncate
+import { classifyChangedPath } from './changed-surface.mjs';
+import { GIT_MAX_BUFFER } from './git-env.mjs';
 
 export const CENSUS_VERDICT = Object.freeze({ NARROW: 'domain-narrow', WITHIN_DOMAIN: 'within-domain' });
 

package/tools/velocity-profile.mjs

@@ -133,7 +133,7 @@ export const SHELL_READONLY = Object.freeze([
 // seed time from the RUNNING tool's own location — resolved-absolute, so a moved or reinstalled
 // skill leaves a stale rule that FAIL-SAFE prompts again (never a silent widening).
 //
-// Membership (13, frozen): the read-only kit tools plus run-gates.mjs — which is NOT read-only but
+// Membership (14, frozen): the read-only kit tools plus run-gates.mjs — which is NOT read-only but
 // project-exec (it runs the project's OWN declared gates.json commands), so it seeds as ONE exact
 // byte-string pinned to this project root (`--cwd <resolved root>`): a wildcard would be BROADER
 // than the AD-037 hook boundary (`--cwd <dir>` executes an arbitrary OTHER project's gates.json)
@@ -163,6 +163,9 @@ export const KIT_READONLY_TOOLS = Object.freeze([
   // The round table the procedures advisor names every review round; its path argument is resolved
   // and compared, never opened as a pattern, so it rides the settings-level posture like the rest.
   'tools/review-rounds-cli.mjs',
+  // The control-byte gate: a pure reader over the work tree, run by hand before the matrix runs it.
+  'tools/control-bytes.mjs',
+  'tools/robustness-brief.mjs',
 ]);
 // Writer previews: ONLY writers whose ARG-FREE invocation is a documented dry-run ("Default is
 // --dry-run" in their usage) seed an EXACT preview byte-string — every --apply/--write/--yes keeps
@@ -780,7 +783,7 @@ export const screenAllowlistEntry = (pattern) => {
 };
 
 /**
- * Derive the opt-in kit-tools tier for a project: 12 wildcard entries (resolved-absolute script
+ * Derive the opt-in kit-tools tier for a project: 13 wildcard entries (resolved-absolute script
  * path + args wildcard), ONE exact run-gates entry pinned to the resolved project root, and the
  * writer-preview exact dry-run byte-strings. Pure derivation — a stale path simply prompts again.
  */

package/tools/worktree-handoff-return.mjs

@@ -34,12 +34,14 @@
 import { spawnSync } from 'node:child_process';
 import { lstatSync, readdirSync, realpathSync } from 'node:fs';
 import { createHash } from 'node:crypto';
+
 import { findSatelliteEntry, readSatelliteIdentity, WORKTREES_STOP } from './satellite-locator.mjs';
 import { locateProvisionRecordSection, parseProvisionRecord, displayValue } from './worktrees-record.mjs';
 import { readFileBytesNoFollow } from './fs-read-nofollow.mjs';
 import { computeNumerator } from './dispatch-record.mjs';
 import { resolveRepoRoot, formatRatio, buildObservationRecord } from './observation-builder.mjs';
 import { appendDelegationRecord, DELEGATION_STORE_STOP } from './dispatch-store.mjs';
+import { GIT_MAX_BUFFER } from './git-env.mjs';
 
 // The worktrees slug grammar, repeated here so the CLI can refuse a malformed slug as USAGE before
 // any probe echoes it — the locator's own refusal interpolates the slug into a terminal message.
@@ -57,8 +59,6 @@ const PROVENANCE = 'self-reported';
 const REGULAR_MODES = new Set(['100644', '100755']);
 const RECORD_HEADING = '## Provision record';
 
-const GIT_MAX_BUFFER = 64 * 1024 * 1024;
-
 const defaultGit = (args, cwd) => {
   const r = spawnSync('git', args, { cwd, encoding: 'utf8', windowsHide: true, maxBuffer: GIT_MAX_BUFFER });
   return {

package/tools/worktrees.mjs

@@ -16,6 +16,7 @@ import { join, dirname, basename, resolve, relative, isAbsolute, sep } from 'nod
 import { fileURLToPath } from 'node:url';
 import { spawnSync } from 'node:child_process';
 import { randomBytes } from 'node:crypto';
+
 import { MCP_JSON_REL, SERVER_NAME, SETTINGS_REL, withoutRegistration } from './mcp-registration.mjs';
 import {
   KIT_OWN_PATHS, KNOWN_FOOTPRINT, expandGlob, normalizeSlashes, isDirPattern, isGlobPattern,
@@ -25,6 +26,7 @@ import { isDirectRun } from './direct-run.mjs';
 import { isScratchPlanName, plansInFlight, PLANS_REL, shellQuoteArg } from './review-state.mjs';
 import { writeContainedFileAtomic } from './atomic-write.mjs';
 import { assertContainedRealPath } from './fs-safe.mjs';
+import { GIT_MAX_BUFFER } from './git-env.mjs';
 import { isFinalCapableDeclaration } from './run-gates.mjs';
 import {
   WORKTREES_STOP, stop, EXIT, handoffBasename, recordValue, hasControlByte, displayValue,
@@ -76,8 +78,6 @@ const TRACKED_PIN_DECLARATION =
 const TRANSFER_EXCLUSIONS = Object.freeze([':!docs/ai', ':!docs/plans']);
 const PREPARE_LOCK_BASENAME = 'aw-prepare-lock';
 
-const GIT_MAX_BUFFER = 256 * 1024 * 1024;
-
 const USAGE = [
   'usage: worktrees.mjs <subcommand> [args]',
   '',