@shepai/cli 1.98.0 → 1.99.0

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/evidence-prompts.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Evidence Phase Prompt
+ *
+ * Instructs the agent to capture visual and textual evidence
+ * (screenshots, test outputs, terminal recordings) proving that
+ * completed tasks work as expected. Evidence files are saved to the
+ * shep home folder (~/.shep/repos/<hash>/evidence/). When commitEvidence
+ * is enabled, files are also committed to specs/<NNN>-<feature>/evidence/
+ * in the worktree. The agent outputs a structured JSON manifest of
+ * evidence records that the evidence-output-parser extracts for the
+ * graph state.
+ */
+import type { FeatureAgentState } from '../../state.js';
+export interface EvidencePromptOptions {
+    /** Whether to commit evidence to the worktree / feature branch */
+    commitEvidence: boolean;
+}
+export declare function buildEvidencePrompt(state: FeatureAgentState, options?: EvidencePromptOptions): string;
+//# sourceMappingURL=evidence-prompts.d.ts.map

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/evidence-prompts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-prompts.d.ts","sourceRoot":"","sources":["../../../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/evidence-prompts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAExD,MAAM,WAAW,qBAAqB;IACpC,kEAAkE;IAClE,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,iBAAiB,EACxB,OAAO,GAAE,qBAAiD,GACzD,MAAM,CA6LR"}

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/evidence-prompts.js

@@ -0,0 +1,197 @@
+/**
+ * Evidence Phase Prompt
+ *
+ * Instructs the agent to capture visual and textual evidence
+ * (screenshots, test outputs, terminal recordings) proving that
+ * completed tasks work as expected. Evidence files are saved to the
+ * shep home folder (~/.shep/repos/<hash>/evidence/). When commitEvidence
+ * is enabled, files are also committed to specs/<NNN>-<feature>/evidence/
+ * in the worktree. The agent outputs a structured JSON manifest of
+ * evidence records that the evidence-output-parser extracts for the
+ * graph state.
+ */
+import { join, dirname, relative } from 'node:path';
+import { readSpecFile, buildCommitPushBlock } from '../node-helpers.js';
+export function buildEvidencePrompt(state, options = { commitEvidence: false }) {
+    const specContent = readSpecFile(state.specDir, 'spec.yaml');
+    const tasksContent = readSpecFile(state.specDir, 'tasks.yaml');
+    const cwd = state.worktreePath || state.repositoryPath;
+    // Derive the shep home evidence directory from the worktree path.
+    // Worktree path is: ~/.shep/repos/<hash>/wt/<slug>
+    // Evidence path is: ~/.shep/repos/<hash>/evidence/<featureId>/
+    const repoHashDir = dirname(dirname(cwd)); // go up from wt/<slug>
+    const shepEvidenceDir = join(repoHashDir, 'evidence', state.featureId);
+    const specSection = specContent
+        ? `## Feature Specification (spec.yaml)
+
+\`\`\`yaml
+${specContent}
+\`\`\`
+`
+        : `## Feature Context
+
+Feature ID: ${state.featureId}
+`;
+    const tasksSection = tasksContent
+        ? `## Task List (tasks.yaml)
+
+\`\`\`yaml
+${tasksContent}
+\`\`\`
+`
+        : '';
+    // Relative spec dir path from worktree root (e.g., "specs/057-sidenav-feature-toggle")
+    const relativeSpecDir = relative(cwd, state.specDir);
+    const specEvidenceRelPath = `${relativeSpecDir}/evidence`;
+    const specEvidenceAbsPath = join(state.specDir, 'evidence');
+    const storageSection = options.commitEvidence
+        ? `## Evidence Storage
+
+Save all evidence files to BOTH locations:
+
+1. **Shep home folder** (persistent local storage):
+   \`mkdir -p ${shepEvidenceDir}/\`
+   Save each file here first.
+
+2. **Spec folder** (for PR commit):
+   \`mkdir -p ${specEvidenceAbsPath}/\`
+   Copy each file here too.
+
+3. Use descriptive file names (e.g., \`homepage-screenshot.png\`, \`unit-test-results.txt\`)
+4. In the output JSON, use relative paths from the repo root (e.g., \`${specEvidenceRelPath}/homepage-screenshot.png\`)`
+        : `## Evidence Storage
+
+Save all evidence files to the shep home folder:
+
+1. Create the directory if it does not exist: \`mkdir -p ${shepEvidenceDir}/\`
+2. Save each evidence file with a descriptive name (e.g., \`homepage-screenshot.png\`, \`unit-test-results.txt\`)
+3. In the output JSON, set relativePath to the absolute path in the shep home folder (e.g., \`${shepEvidenceDir}/homepage-screenshot.png\`)`;
+    const commitSection = options.commitEvidence
+        ? `\n${buildCommitPushBlock({
+            push: state.push,
+            files: [`${specEvidenceRelPath}/`],
+            commitHint: 'chore(agents): capture evidence for completed tasks',
+        })}`
+        : `\n## Git Operations
+
+Do NOT commit or push any files. Evidence is stored locally only.`;
+    return `You are a senior software engineer performing the EVIDENCE COLLECTION phase of feature development.
+
+Your goal is to capture visual and textual evidence proving that the implemented tasks work as expected.${options.commitEvidence ? ' This evidence will be embedded in the pull request body for reviewer verification.' : ' This evidence will be available for review locally.'}
+
+${specSection}
+${tasksSection}
+## Working Directory
+
+${cwd}
+
+## Evidence Capture Instructions
+
+Review the completed tasks above and capture evidence for each.
+
+### MANDATORY Screenshot Rule
+
+**If ANY task touches UI code (components, pages, views, styles, layouts, templates, JSX/TSX, HTML, CSS), you MUST capture at least one Screenshot.** This is non-negotiable. Changing a heading, button label, color, layout, or any visible element requires a screenshot proving the change renders correctly.
+
+To capture screenshots:
+1. Install Playwright if not already available: \`npx playwright install chromium --with-deps 2>/dev/null || npx playwright install chromium\`
+2. Start the dev server in the background (e.g., \`npm run dev &\` or \`pnpm dev &\`)
+3. Wait for the server to be ready
+4. Use a Playwright script to navigate and screenshot:
+   \`\`\`bash
+   node -e "
+   const { chromium } = require('playwright');
+   (async () => {
+     const browser = await chromium.launch();
+     const page = await browser.newPage({ viewport: { width: 1280, height: 720 } });
+     await page.goto('http://localhost:PORT');
+     await page.waitForLoadState('networkidle');
+     await page.screenshot({ path: 'SCREENSHOT_PATH' });
+     await browser.close();
+   })();
+   "
+   \`\`\`
+5. Stop the dev server after capturing
+
+If Playwright installation fails, try alternative approaches (e.g., \`npx puppeteer\`, \`curl\` for API responses). Only skip screenshots if ALL browser automation approaches fail — and in that case, explicitly note the failure reason in the evidence description.
+
+### Evidence by Task Type
+
+- **UI/Web tasks**: You MUST take screenshots (see mandatory rule above). Also run and capture test output.
+- **Backend/API tasks**: Run the relevant test suite and capture test output showing passing tests.
+- **CLI tasks**: Run the CLI commands and capture terminal output demonstrating correct behavior.
+- **Refactoring/Infrastructure tasks**: Capture test output or build output confirming no regressions.
+
+### Evidence Types
+
+- **Screenshot** — Visual proof of UI or output state (PNG/JPEG). **Required for any UI change.**
+- **Video** — Screen recording of a workflow or interaction (MP4/WebM)
+- **TestOutput** — Test suite execution results (TXT)
+- **TerminalRecording** — CLI command output capture (TXT)
+
+### Minimum Evidence Requirements
+
+Your output MUST include:
+1. At least one **Screenshot** if any task modifies UI/visual code (components, styles, templates, markup)
+2. At least one **TestOutput** if the project has a test suite
+3. Do NOT output only TestOutput/TerminalRecording when the feature involves visible UI changes — screenshots are mandatory in that case
+
+${storageSection}
+
+## File Size Constraints
+
+- Capture screenshots at standard resolution (1280x720 or similar) — do NOT use 4K or retina resolution
+- Compress images where possible (use PNG for screenshots, JPEG for photos)
+- Truncate test output and terminal recordings to the first 500 lines to avoid large files
+- Keep individual evidence files under 500KB where possible
+
+## Sensitive Data Redaction
+
+- Redact any API keys, tokens, passwords, or secrets visible in screenshots or terminal output
+- Do NOT capture screenshots of authentication screens or settings pages showing sensitive credentials
+- Strip environment variables containing sensitive values from test output before saving
+
+## Output Format
+
+After capturing all evidence, output a JSON array of evidence records in a fenced code block. This is CRITICAL — the system parses this block to extract evidence metadata.
+
+\`\`\`json
+[
+  {
+    "type": "Screenshot",
+    "capturedAt": "2026-01-01T12:00:00Z",
+    "description": "Homepage showing new feature banner",
+    "relativePath": "${options.commitEvidence ? `${specEvidenceRelPath}/homepage-banner.png` : `${shepEvidenceDir}/homepage-banner.png`}",
+    "taskRef": "task-1"
+  },
+  {
+    "type": "TestOutput",
+    "capturedAt": "2026-01-01T12:01:00Z",
+    "description": "Unit test results — all 42 tests passing",
+    "relativePath": "${options.commitEvidence ? `${specEvidenceRelPath}/unit-test-results.txt` : `${shepEvidenceDir}/unit-test-results.txt`}",
+    "taskRef": "task-2"
+  }
+]
+\`\`\`
+
+Each evidence record must have:
+- **type**: One of Screenshot, Video, TestOutput, TerminalRecording
+- **capturedAt**: ISO 8601 timestamp of when the evidence was captured
+- **description**: Human-readable description of what this evidence proves
+- **relativePath**: ${options.commitEvidence ? `Path relative to the repo root (must start with \`${specEvidenceRelPath}/\`)` : `Absolute path in the shep home evidence folder (must start with \`${shepEvidenceDir}/\`)`}
+- **taskRef**: (optional) Reference to the task ID this evidence proves
+
+If no evidence can be captured (e.g., no UI to screenshot, no tests to run), output an empty JSON array:
+
+\`\`\`json
+[]
+\`\`\`
+
+## Constraints
+
+- Capture evidence for completed tasks only — do NOT modify any implementation code
+- Capture evidence that proves the feature works — prioritize screenshots for UI changes, test output for logic changes
+- If a screenshot capture fails, document the failure reason in the evidence description and try alternative approaches before giving up
+- Do NOT capture evidence for documentation-only changes or spec files
+${commitSection}`;
+}

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/merge-prompts.d.ts

@@ -5,14 +5,30 @@
  * 1. buildCommitPushPrPrompt — commit (always), push (conditional), PR create (conditional)
  * 2. buildMergeSquashPrompt — merge/squash PR or branch
  */
+import { type Evidence } from '../../../../../../domain/generated/output.js';
 import type { FeatureAgentState } from '../../state.js';
+/**
+ * Parse a GitHub remote URL (HTTPS or SSH) into owner/repo.
+ * Returns null if the URL does not match a known GitHub format.
+ */
+export declare function parseGitHubOwnerRepo(remoteUrl: string): {
+    owner: string;
+    repo: string;
+} | null;
+/**
+ * Build a markdown evidence section from evidence records.
+ * Returns empty string when no evidence is available.
+ * When branch and repoUrl are provided, image paths are converted to
+ * absolute raw.githubusercontent.com URLs for correct rendering in PR bodies.
+ */
+export declare function formatEvidenceSection(evidence: Evidence[], branch?: string, repoUrl?: string): string;
 /**
  * Build a prompt for the commit + push + PR agent call.
  *
  * The agent always commits. Push and PR creation are conditional based
  * on state.push and state.openPr flags.
  */
-export declare function buildCommitPushPrPrompt(state: FeatureAgentState, branch: string, baseBranch: string): string;
+export declare function buildCommitPushPrPrompt(state: FeatureAgentState, branch: string, baseBranch: string, repoUrl?: string): string;
 /**
  * Build a prompt for the CI watch/fix agent call.
  *

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/merge-prompts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"merge-prompts.d.ts","sourceRoot":"","sources":["../../../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/merge-prompts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAwCxD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,GACjB,MAAM,CA+DR;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,MAAM,CA0BR;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,SAAS,UAAQ,GAChB,MAAM,CAkER"}
+{"version":3,"file":"merge-prompts.d.ts","sourceRoot":"","sources":["../../../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/merge-prompts.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAgB,KAAK,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAE3E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAwCxD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAU9F;AAuCD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CACnC,QAAQ,EAAE,QAAQ,EAAE,EACpB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,CAUR;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,CAmER;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,EACrB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,GACb,MAAM,CA0BR;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,iBAAiB,EACxB,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,SAAS,UAAQ,GAChB,MAAM,CAkER"}

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/nodes/prompts/merge-prompts.js

@@ -6,6 +6,7 @@
  * 2. buildMergeSquashPrompt — merge/squash PR or branch
  */
 import yaml from 'js-yaml';
+import { EvidenceType } from '../../../../../../domain/generated/output.js';
 import { readSpecFile } from '../node-helpers.js';
 /**
  * Extract merge-phase rejection feedback from spec.yaml.
@@ -42,17 +43,86 @@ ${olderSection}
     }
     return '';
 }
+/**
+ * Parse a GitHub remote URL (HTTPS or SSH) into owner/repo.
+ * Returns null if the URL does not match a known GitHub format.
+ */
+export function parseGitHubOwnerRepo(remoteUrl) {
+    // HTTPS: https://github.com/owner/repo.git or https://github.com/owner/repo
+    const httpsMatch = remoteUrl.match(/github\.com\/([^/]+)\/([^/.]+?)(?:\.git)?$/);
+    if (httpsMatch)
+        return { owner: httpsMatch[1], repo: httpsMatch[2] };
+    // SSH: git@github.com:owner/repo.git or git@github.com:owner/repo
+    const sshMatch = remoteUrl.match(/github\.com:([^/]+)\/([^/.]+?)(?:\.git)?$/);
+    if (sshMatch)
+        return { owner: sshMatch[1], repo: sshMatch[2] };
+    return null;
+}
+/**
+ * Convert a relative evidence path to an absolute GitHub raw URL.
+ * Falls back to the relative path if repoUrl is unavailable or not a GitHub repo.
+ */
+function toGitHubRawUrl(relativePath, branch, repoUrl) {
+    if (!repoUrl || !branch)
+        return relativePath;
+    const parsed = parseGitHubOwnerRepo(repoUrl);
+    if (!parsed)
+        return relativePath;
+    return `https://raw.githubusercontent.com/${parsed.owner}/${parsed.repo}/${branch}/${relativePath}`;
+}
+/**
+ * Format a single evidence record as GitHub-compatible markdown.
+ * When repoUrl and branch are provided, converts relative paths to
+ * absolute raw.githubusercontent.com URLs so images render in PR bodies.
+ */
+function formatEvidenceItem(e, branch, repoUrl) {
+    const taskLine = e.taskRef ? ` (${e.taskRef})` : '';
+    const url = toGitHubRawUrl(e.relativePath, branch, repoUrl);
+    switch (e.type) {
+        case EvidenceType.Screenshot:
+            return `- **${e.description}**${taskLine}\n  ![${e.description}](${url})`;
+        case EvidenceType.TestOutput:
+            return `- **${e.description}**${taskLine}\n  See: \`${e.relativePath}\``;
+        case EvidenceType.Video:
+            return `- [${e.description}](${url})${taskLine}`;
+        case EvidenceType.TerminalRecording:
+            return `- [${e.description}](${url})${taskLine}`;
+        default:
+            return `- [${e.description}](${url})${taskLine}`;
+    }
+}
+/**
+ * Build a markdown evidence section from evidence records.
+ * Returns empty string when no evidence is available.
+ * When branch and repoUrl are provided, image paths are converted to
+ * absolute raw.githubusercontent.com URLs for correct rendering in PR bodies.
+ */
+export function formatEvidenceSection(evidence, branch, repoUrl) {
+    if (!evidence || evidence.length === 0)
+        return '';
+    const items = evidence.map((e) => formatEvidenceItem(e, branch, repoUrl)).join('\n');
+    return `\n## Evidence
+
+The following evidence was captured to prove task completion. Include this section in the PR body:
+
+${items}
+`;
+}
 /**
  * Build a prompt for the commit + push + PR agent call.
  *
  * The agent always commits. Push and PR creation are conditional based
  * on state.push and state.openPr flags.
  */
-export function buildCommitPushPrPrompt(state, branch, baseBranch) {
+export function buildCommitPushPrPrompt(state, branch, baseBranch, repoUrl) {
     const specContent = readSpecFile(state.specDir, 'spec.yaml');
     const cwd = state.worktreePath || state.repositoryPath;
     const shouldPush = state.push || state.openPr;
     const rejectionSection = getMergeRejectionFeedback(specContent);
+    // Only include evidence in the PR body when commitEvidence is enabled
+    const evidenceSection = state.evidence?.length
+        ? formatEvidenceSection(state.evidence, branch, repoUrl)
+        : '';
     const steps = [];
     // Step 1: Commit (always)
     steps.push(`1. Review the current changes using \`git diff\` and \`git status\`
@@ -98,7 +168,7 @@ ${cwd}
 ## Instructions
 
 ${steps.join('\n')}
-
+${evidenceSection}
 ## Constraints
 
 - Write a meaningful conventional commit message derived from the actual diff — do NOT use generic messages

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/state.d.ts

@@ -1,4 +1,4 @@
-import type { ApprovalGates, CiFixRecord } from '../../../../domain/generated/output.js';
+import type { ApprovalGates, CiFixRecord, Evidence } from '../../../../domain/generated/output.js';
 /**
  * State annotation for the feature-agent graph.
  *
@@ -48,6 +48,7 @@ export declare const FeatureAgentAnnotation: import("@langchain/langgraph").Anno
     ciStatus: import("@langchain/langgraph").BinaryOperatorAggregate<string | null, string | null>;
     push: import("@langchain/langgraph").BinaryOperatorAggregate<boolean, boolean>;
     openPr: import("@langchain/langgraph").BinaryOperatorAggregate<boolean, boolean>;
+    evidence: import("@langchain/langgraph").BinaryOperatorAggregate<Evidence[], Evidence[]>;
     ciFixAttempts: import("@langchain/langgraph").BinaryOperatorAggregate<number, number>;
     ciFixHistory: import("@langchain/langgraph").BinaryOperatorAggregate<CiFixRecord[], CiFixRecord[]>;
     ciFixStatus: import("@langchain/langgraph").BinaryOperatorAggregate<"success" | "timeout" | "idle" | "watching" | "fixing" | "exhausted", "success" | "timeout" | "idle" | "watching" | "fixing" | "exhausted">;

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/state.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,8BAA8B,CAAC;AAE/E;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAsFjC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,OAAO,sBAAsB,CAAC,KAAK,CAAC"}
+{"version":3,"file":"state.d.ts","sourceRoot":"","sources":["../../../../../../../../packages/core/src/infrastructure/services/agents/feature-agent/state.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,8BAA8B,CAAC;AAEzF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA2FjC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,OAAO,sBAAsB,CAAC,KAAK,CAAC"}

package/dist/packages/core/src/infrastructure/services/agents/feature-agent/state.js

@@ -79,6 +79,11 @@ export const FeatureAgentAnnotation = Annotation.Root({
         reducer: (_prev, next) => next,
         default: () => false,
     }),
+    // --- Evidence state ---
+    evidence: Annotation({
+        reducer: (prev, next) => [...prev, ...next],
+        default: () => [],
+    }),
     // --- CI watch/fix loop state ---
     ciFixAttempts: Annotation({
         reducer: (_prev, next) => next,

package/dist/src/presentation/web/app/actions/get-merge-review-data.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-merge-review-data.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/actions/get-merge-review-data.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sDAAsD,CAAC;AAG5F,KAAK,wBAAwB,GAAG,eAAe,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAiD7F"}
+{"version":3,"file":"get-merge-review-data.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/actions/get-merge-review-data.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EACV,eAAe,EAEhB,MAAM,sDAAsD,CAAC;AAG9D,KAAK,wBAAwB,GAAG,eAAe,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpE,wBAAsB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAgF7F"}

package/dist/src/presentation/web/app/actions/get-merge-review-data.js

@@ -1,4 +1,6 @@
 'use server';
+import { readFileSync, existsSync } from 'node:fs';
+import { join, dirname } from 'node:path';
 import { resolve } from '../../lib/server-container.js';
 import { computeWorktreePath } from '../../../../../packages/core/src/infrastructure/services/ide-launchers/compute-worktree-path.js';
 export async function getMergeReviewData(featureId) {
@@ -25,8 +27,33 @@ export async function getMergeReviewData(featureId) {
             (feature.repositoryPath && feature.branch
                 ? computeWorktreePath(feature.repositoryPath, feature.branch)
                 : null);
+        // Load evidence manifest (best-effort)
+        let evidence;
+        let evidenceBasePath;
+        if (worktreePath) {
+            try {
+                // Worktree path: ~/.shep/repos/<hash>/wt/<slug>
+                // Evidence manifest: ~/.shep/repos/<hash>/evidence/<featureId>/manifest.json
+                const repoHashDir = dirname(dirname(worktreePath));
+                const evidenceDir = join(repoHashDir, 'evidence', featureId);
+                const manifestPath = join(evidenceDir, 'manifest.json');
+                if (existsSync(manifestPath)) {
+                    evidence = JSON.parse(readFileSync(manifestPath, 'utf-8'));
+                    evidenceBasePath = worktreePath;
+                }
+            }
+            catch {
+                // Evidence unavailable — not critical
+            }
+        }
         if (!worktreePath) {
-            return { pr, branch, warning: pr ? undefined : 'No PR or diff data available' };
+            return {
+                pr,
+                branch,
+                evidence,
+                evidenceBasePath,
+                warning: pr ? undefined : 'No PR or diff data available',
+            };
         }
         try {
             const gitPrService = resolve('IGitPrService');
@@ -34,10 +61,16 @@ export async function getMergeReviewData(featureId) {
                 gitPrService.getPrDiffSummary(worktreePath, 'main'),
                 gitPrService.getFileDiffs(worktreePath, 'main').catch(() => undefined),
             ]);
-            return { pr, branch, diffSummary, fileDiffs };
+            return { pr, branch, diffSummary, fileDiffs, evidence, evidenceBasePath };
         }
         catch {
-            return { pr, branch, warning: 'Diff statistics unavailable' };
+            return {
+                pr,
+                branch,
+                evidence,
+                evidenceBasePath,
+                warning: 'Diff statistics unavailable',
+            };
         }
     }
     catch (error) {

package/dist/src/presentation/web/app/actions/get-workflow-defaults.d.ts

@@ -6,6 +6,8 @@ export interface WorkflowDefaults {
     };
     push: boolean;
     openPr: boolean;
+    enableEvidence: boolean;
+    commitEvidence: boolean;
 }
 export declare function getWorkflowDefaults(): Promise<WorkflowDefaults>;
 //# sourceMappingURL=get-workflow-defaults.d.ts.map

package/dist/src/presentation/web/app/actions/get-workflow-defaults.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-workflow-defaults.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/actions/get-workflow-defaults.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE;QACb,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAarE"}
+{"version":3,"file":"get-workflow-defaults.d.ts","sourceRoot":"","sources":["../../../../../../src/presentation/web/app/actions/get-workflow-defaults.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE;QACb,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;CACzB;AAED,wBAAsB,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAerE"}

package/dist/src/presentation/web/app/actions/get-workflow-defaults.js

@@ -11,5 +11,7 @@ export async function getWorkflowDefaults() {
         },
         push: workflow.approvalGateDefaults.pushOnImplementationComplete,
         openPr: workflow.openPrOnImplementationComplete,
+        enableEvidence: workflow.enableEvidence,
+        commitEvidence: workflow.commitEvidence,
     };
 }

package/dist/src/presentation/web/app/api/evidence/route.d.ts

@@ -0,0 +1,8 @@
+import type { NextRequest } from 'next/server';
+import { NextResponse } from 'next/server';
+/**
+ * Serves evidence files from ~/.shep/repos/ directories.
+ * Security: only paths within SHEP_HOME/repos/ are allowed.
+ */
+export declare function GET(request: NextRequest): Promise<NextResponse>;
+//# sourceMappingURL=route.d.ts.map

package/dist/src/presentation/web/app/api/evidence/route.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/app/api/evidence/route.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAsB3C;;;GAGG;AACH,wBAAsB,GAAG,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,CA6BrE"}

package/dist/src/presentation/web/app/api/evidence/route.js

@@ -0,0 +1,50 @@
+import { NextResponse } from 'next/server';
+import { readFile, stat } from 'fs/promises';
+import { extname, resolve } from 'path';
+import { getShepHomeDir } from '../../../../../../packages/core/src/infrastructure/services/filesystem/shep-directory.service.js';
+const MIME_MAP = {
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.webp': 'image/webp',
+    '.svg': 'image/svg+xml',
+    '.bmp': 'image/bmp',
+    '.mp4': 'video/mp4',
+    '.webm': 'video/webm',
+    '.mov': 'video/quicktime',
+    '.txt': 'text/plain',
+    '.log': 'text/plain',
+    '.json': 'application/json',
+    '.cast': 'application/json',
+};
+/**
+ * Serves evidence files from ~/.shep/repos/ directories.
+ * Security: only paths within SHEP_HOME/repos/ are allowed.
+ */
+export async function GET(request) {
+    const path = request.nextUrl.searchParams.get('path');
+    if (!path) {
+        return NextResponse.json({ error: 'Missing path parameter' }, { status: 400 });
+    }
+    const resolved = resolve(path);
+    const reposRoot = resolve(getShepHomeDir(), 'repos');
+    if (!resolved.startsWith(reposRoot)) {
+        return NextResponse.json({ error: 'Access denied' }, { status: 403 });
+    }
+    try {
+        await stat(resolved);
+        const buffer = await readFile(resolved);
+        const ext = extname(resolved).toLowerCase();
+        const contentType = MIME_MAP[ext] ?? 'application/octet-stream';
+        return new NextResponse(buffer, {
+            headers: {
+                'Content-Type': contentType,
+                'Cache-Control': 'private, max-age=3600',
+            },
+        });
+    }
+    catch {
+        return NextResponse.json({ error: 'File not found' }, { status: 404 });
+    }
+}

package/dist/src/presentation/web/components/common/feature-create-drawer/feature-create-drawer.d.ts

@@ -25,6 +25,8 @@ export interface FeatureCreatePayload {
     };
     push: boolean;
     openPr: boolean;
+    enableEvidence: boolean;
+    commitEvidence: boolean;
     parentId?: string;
     /** When true, skip SDLC phases and implement directly from the prompt. */
     fast: boolean;

package/dist/src/presentation/web/components/common/feature-create-drawer/feature-create-drawer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-create-drawer.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/components/common/feature-create-drawer/feature-create-drawer.tsx"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAI5E,YAAY,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAE/F,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE;QACb,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAC;IACd,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA+ED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,kGAAkG;IAClG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,mBAAmB,CAAC,EAClC,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,cAAc,EACd,YAAoB,EACpB,gBAAgB,EAChB,QAAQ,EACR,eAAe,EACf,gBAAgB,EAChB,YAAY,GACb,EAAE,wBAAwB,2CAymB1B"}
+{"version":3,"file":"feature-create-drawer.d.ts","sourceRoot":"","sources":["../../../../../../../src/presentation/web/components/common/feature-create-drawer/feature-create-drawer.tsx"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAI5E,YAAY,EAAE,cAAc,EAAE,MAAM,0DAA0D,CAAC;AAE/F,uFAAuF;AACvF,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,0DAA0D;AAC1D,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,EAAE,CAAC;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE;QACb,QAAQ,EAAE,OAAO,CAAC;QAClB,SAAS,EAAE,OAAO,CAAC;QACnB,UAAU,EAAE,OAAO,CAAC;KACrB,CAAC;IACF,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,OAAO,CAAC;IAChB,cAAc,EAAE,OAAO,CAAC;IACxB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,IAAI,EAAE,OAAO,CAAC;IACd,wDAAwD;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AA+ED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,IAAI,CAAC;IACpB,QAAQ,EAAE,CAAC,IAAI,EAAE,oBAAoB,KAAK,IAAI,CAAC;IAC/C,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,gBAAgB,CAAC,EAAE,gBAAgB,CAAC;IACpC,qEAAqE;IACrE,QAAQ,CAAC,EAAE,mBAAmB,EAAE,CAAC;IACjC,kGAAkG;IAClG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yCAAyC;IACzC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,mBAAmB,CAAC,EAClC,IAAI,EACJ,OAAO,EACP,QAAQ,EACR,cAAc,EACd,YAAoB,EACpB,gBAAgB,EAChB,QAAQ,EACR,eAAe,EACf,gBAAgB,EAChB,YAAY,GACb,EAAE,wBAAwB,2CA8rB1B"}