@visorcraft/idlehands 4.0.14 → 4.0.15

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 Docs: https://docs.idlehands.ai
 
+## 4.0.15
+
+### Fixes
+
+- Anton preflight correctness: remove unsafe fallback that previously allowed direct implementation when discovery failed to produce a verified plan file.
+- Anton completion integrity: in preflight mode, Anton now verifies repository change count before marking a task complete, preventing false positives when implementation returns success without making code changes.
+
 ## 4.0.14
 
 ### Fixes

package/dist/{agent-via-gateway-D-FbIr6E.js → agent-via-gateway-BFtbpQpT.js}

@@ -12,14 +12,14 @@ import "./boolean-CE7i9tBR.js";
 import "./env-B5G1qwGc.js";
 import "./dock-BgOmHcbh.js";
 import "./tokens-BRLyURxW.js";
-import { H as randomIdempotencyKey, V as callGateway, a as agentCommand, o as resolveSessionKeyForRequest, v as withProgress } from "./pi-embedded-ChimfAJ-.js";
+import { H as randomIdempotencyKey, V as callGateway, a as agentCommand, o as resolveSessionKeyForRequest, v as withProgress } from "./pi-embedded-7XGjNojd.js";
 import "./plugins-CRB60mCJ.js";
 import "./accounts-Dk8mJIrQ.js";
 import "./bindings-D3b5Fmc9.js";
 import "./auth-store-DXT-l7fO.js";
 import "./send-BeIZJuy4.js";
 import "./send-DmLC7aEF.js";
-import "./deliver-CVTXl0Cv.js";
+import "./deliver-BUiQ-9fE.js";
 import "./diagnostic-4owMk4vH.js";
 import "./diagnostic-session-state-BGF2r-kt.js";
 import "./accounts-BDVs8LTu.js";
@@ -27,8 +27,8 @@ import "./send-Dfa3sn6r.js";
 import "./image-ops-D1KtygWz.js";
 import "./pi-model-discovery-Bb__OY-j.js";
 import { d as GATEWAY_CLIENT_MODES, f as GATEWAY_CLIENT_NAMES, s as normalizeMessageChannel } from "./message-channel-C8QtrwEU.js";
-import "./pi-embedded-helpers-CyTpDKo5.js";
-import "./chrome-_2tzVjVl.js";
+import "./pi-embedded-helpers-CghCLoPo.js";
+import "./chrome-BcJB6PcM.js";
 import "./ssrf-CZeHDwVZ.js";
 import "./frontmatter-BOudmHMS.js";
 import "./skills-CnAPWfca.js";
@@ -42,7 +42,7 @@ import "./accounts-CIvVRRHb.js";
 import "./paths-D_qUel1T.js";
 import "./tool-images-CcGZpzmq.js";
 import "./thinking-z4_linel.js";
-import "./image-COw__ACq.js";
+import "./image-D8b_rlQC.js";
 import "./reply-prefix-BUgeSN2R.js";
 import "./manager-BE_76jWB.js";
 import "./gemini-auth-CIyaa44H.js";
@@ -57,7 +57,7 @@ import "./ir-B7IBoKLy.js";
 import "./render-MTSxc7LK.js";
 import "./commands-registry-j4vAzcF2.js";
 import "./skill-commands-Ck3flWX7.js";
-import "./runner-BzNdfqDz.js";
+import "./runner-PgRFPYUj.js";
 import "./fetch-CsfR_943.js";
 import "./channel-activity-D_TMOGQ0.js";
 import "./tables-5k-zOZ-s.js";
@@ -67,7 +67,7 @@ import "./send-D4bMycQu.js";
 import "./resolve-route-DuttYY7A.js";
 import "./proxy-CRB9oCP5.js";
 import "./replies-6_GxvQYe.js";
-import "./deps-7AsluBQV.js";
+import "./deps-KIFYHxig.js";
 
 //#region src/commands/agent-via-gateway.ts
 const NO_GATEWAY_TIMEOUT_MS = 2147e6;

package/dist/{agent-via-gateway-B0077UOc.js → agent-via-gateway-BvXS1sXv.js}

@@ -4,7 +4,7 @@ import { t as formatCliCommand } from "./command-format-CPa5ksO_.js";
 import { r as listAgentIds } from "./agent-scope-mLXQGQde.js";
 import { s as normalizeAgentId } from "./session-key-B9ePuoPx.js";
 import { h as GATEWAY_CLIENT_NAMES, l as normalizeMessageChannel, m as GATEWAY_CLIENT_MODES } from "./message-channel-Qpj4ExtQ.js";
-import { D as resolveSessionKeyForRequest, E as agentCommand } from "./subagent-registry-DHwrN9Oj.js";
+import { D as resolveSessionKeyForRequest, E as agentCommand } from "./subagent-registry-C6uygQa1.js";
 import { a as randomIdempotencyKey, n as callGateway } from "./call-DuNslqj2.js";
 import { n as withProgress } from "./progress-B76RkFx7.js";
 

package/dist/{agent-via-gateway-BCActbIf.js → agent-via-gateway-CIM26Dxl.js}

@@ -11,14 +11,14 @@ import { t as formatCliCommand } from "./command-format-BAxx4PW5.js";
 import "./env-BpvqFD5n.js";
 import "./dock-QcCdS4qA.js";
 import "./tokens-Cg4XNE3H.js";
-import { H as callGateway, U as randomIdempotencyKey, a as agentCommand, o as resolveSessionKeyForRequest, v as withProgress } from "./pi-embedded-bwvtdswf.js";
+import { H as callGateway, U as randomIdempotencyKey, a as agentCommand, o as resolveSessionKeyForRequest, v as withProgress } from "./pi-embedded-Swc7dke2.js";
 import "./plugins-D-_jp4FO.js";
 import "./accounts-BwrguHMw.js";
 import "./bindings-hT7SPhiA.js";
 import "./auth-store-D1JaYlig.js";
 import "./send-J10cQN4A.js";
 import "./send-DLZt92Da.js";
-import "./deliver-whAbSPLk.js";
+import "./deliver-5FLCa6tB.js";
 import "./diagnostic-jHCdo9Am.js";
 import "./diagnostic-session-state-Bx2Le86J.js";
 import "./accounts-BRVjft5i.js";
@@ -26,8 +26,8 @@ import "./send-Dd4xdAHf.js";
 import "./image-ops-BDG-MYYV.js";
 import "./pi-model-discovery-Dic-M5qw.js";
 import { d as GATEWAY_CLIENT_MODES, f as GATEWAY_CLIENT_NAMES, s as normalizeMessageChannel } from "./message-channel-DqqfOIdx.js";
-import "./pi-embedded-helpers-Ct2rwp-P.js";
-import "./chrome-Do5potHV.js";
+import "./pi-embedded-helpers-C2j0LfJC.js";
+import "./chrome-DEnkfZ9p.js";
 import "./ssrf-DappnhDp.js";
 import "./skills-nQcWk6Z6.js";
 import "./path-alias-guards-CGbCFqW8.js";
@@ -40,7 +40,7 @@ import "./accounts-CBoBCTgA.js";
 import "./paths-vOrMwCEQ.js";
 import "./tool-images-CpZSs-zE.js";
 import "./thinking-BFsWfunr.js";
-import "./image-BAsQlUqT.js";
+import "./image-C_aN5P6-.js";
 import "./manager-DYOflU5p.js";
 import "./gemini-auth-m2hi6OmF.js";
 import "./fetch-guard-BdCPmLBP.js";
@@ -54,7 +54,7 @@ import "./ir-BwkcXPZC.js";
 import "./render-Ddkk6wf8.js";
 import "./commands-registry-1-Rv2-IS.js";
 import "./skill-commands-CHpRgsOw.js";
-import "./runner-Bv_BA3vd.js";
+import "./runner-CZW_eyf2.js";
 import "./fetch-ChVgjTkv.js";
 import "./channel-activity-C3LJmSjf.js";
 import "./tables-CJKtUpY0.js";
@@ -64,7 +64,7 @@ import "./send-Cn2wvd3W.js";
 import "./resolve-route-BI3VjtwE.js";
 import "./proxy-CNZpb4NE.js";
 import "./replies-CqYEEgmA.js";
-import "./deps-CIF1pkFi.js";
+import "./deps-TwKaIh1I.js";
 
 //#region src/commands/agent-via-gateway.ts
 const NO_GATEWAY_TIMEOUT_MS = 2147e6;

package/dist/{agent-via-gateway-DFnFArbP.js → agent-via-gateway-CcaPUQrc.js}

@@ -1,5 +1,5 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
-import { Mt as resolveSessionKeyForRequest, jt as agentCommand } from "./reply-Cmj0wbnT.js";
+import { Mt as resolveSessionKeyForRequest, jt as agentCommand } from "./reply-ZWOav11z.js";
 import { r as listAgentIds } from "./agent-scope-RA0zXRpu.js";
 import { s as normalizeAgentId } from "./session-key-Cuihcz_O.js";
 import { It as loadConfig } from "./model-selection-0dGxYGp8.js";

package/dist/{agents-DBtNXoSW.js → agents-DPlb4UQu.js}

@@ -6,18 +6,18 @@ import { t as formatCliCommand } from "./command-format-CPa5ksO_.js";
 import { a as resolveAgentDir, b as DEFAULT_IDENTITY_FILENAME, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-mLXQGQde.js";
 import { m as DEFAULT_ACCOUNT_ID, s as normalizeAgentId, t as DEFAULT_AGENT_ID } from "./session-key-B9ePuoPx.js";
 import { n as listChannelPlugins, r as normalizeChannelId, t as getChannelPlugin } from "./plugins-CCrfZ49T.js";
-import { M as identityHasValues, P as parseIdentityMarkdown } from "./subagent-registry-DHwrN9Oj.js";
+import { M as identityHasValues, P as parseIdentityMarkdown } from "./subagent-registry-C6uygQa1.js";
 import { l as resolveSessionTranscriptsDirForAgent } from "./paths-CC17i2eK.js";
 import { a as ensureWorkspaceAndSessions, l as moveToTrash } from "./onboard-helpers-Dp6wXNs7.js";
 import { t as WizardCancelledError } from "./prompts-D3HHe1ZZ.js";
 import { t as createClackPrompter } from "./clack-prompter-Bo7vS5xP.js";
 import { t as resolveChannelDefaultAccountId } from "./helpers-CIyuenBU.js";
 import { a as parseBindingSpecs, i as describeBinding, n as applyAgentBindings, o as removeAgentBindings, r as buildChannelBindings, t as requireValidConfigSnapshot } from "./config-validation-BgKexeQb.js";
-import { a as pruneAgentConfig, i as loadAgentIdentity, n as buildAgentSummaries, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-C48CGAxv.js";
-import { r as setupChannels } from "./onboard-channels-CHLOUR52.js";
+import { a as pruneAgentConfig, i as loadAgentIdentity, n as buildAgentSummaries, r as findAgentEntryIndex, t as applyAgentConfig } from "./agents.config-8pxRoZvL.js";
+import { r as setupChannels } from "./onboard-channels-mLWuxUlN.js";
 import { n as logConfigUpdated } from "./logging-MF6Thoxk.js";
 import { n as promptAuthChoiceGrouped } from "./auth-choice-prompt-kycZqH8q.js";
-import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-B9F26cWG.js";
+import { i as applyAuthChoice, r as warnIfModelConfigLooksOff } from "./auth-choice-D-_AVWgJ.js";
 import path from "node:path";
 import fs from "node:fs/promises";
 

package/dist/{agents.config-C48CGAxv.js → agents.config-8pxRoZvL.js}

@@ -1,6 +1,6 @@
 import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-mLXQGQde.js";
 import { s as normalizeAgentId } from "./session-key-B9ePuoPx.js";
-import { M as identityHasValues, N as loadAgentIdentityFromWorkspace } from "./subagent-registry-DHwrN9Oj.js";
+import { M as identityHasValues, N as loadAgentIdentityFromWorkspace } from "./subagent-registry-C6uygQa1.js";
 
 //#region src/commands/agents.config.ts
 function findAgentEntryIndex(list, agentId) {

package/dist/{agents.config-a7WEBiP9.js → agents.config-BKoyeUnK.js}

@@ -1,4 +1,4 @@
-import { en as identityHasValues, tn as loadAgentIdentityFromWorkspace } from "./reply-Cmj0wbnT.js";
+import { en as identityHasValues, tn as loadAgentIdentityFromWorkspace } from "./reply-ZWOav11z.js";
 import { a as resolveAgentDir, d as resolveDefaultAgentId, n as listAgentEntries, u as resolveAgentWorkspaceDir } from "./agent-scope-RA0zXRpu.js";
 import { s as normalizeAgentId } from "./session-key-Cuihcz_O.js";
 

package/dist/{anton-BzjiLD-a.js → anton-BTjKlGm7.js}

@@ -1,11 +1,14 @@
 import "./paths-BQL7-SbN.js";
 import { t as CONFIG_DIR } from "./utils-DWJR1fcE.js";
 import path from "node:path";
+import { promisify } from "node:util";
 import fs from "node:fs/promises";
+import { execFile } from "node:child_process";
 
 //#region src/commands/anton.ts
 const ANTON_STATE_PATH = path.join(CONFIG_DIR, "anton.state.json");
 const ANTON_LOCK_PATH = path.join(CONFIG_DIR, "anton.lock");
+const execFile$1 = promisify(execFile);
 async function ensureStateDir() {
 	await fs.mkdir(CONFIG_DIR, { recursive: true });
 }
@@ -216,7 +219,7 @@ async function loadAntonConfig() {
 	}
 }
 async function runAgentTask(args) {
-	const { agentCliCommand } = await import("./agent-via-gateway-BCActbIf.js");
+	const { agentCliCommand } = await import("./agent-via-gateway-CIM26Dxl.js");
 	const extraSystemPrompt = args.workspaceDir ? `Your working directory is: ${args.workspaceDir}\nAll file paths are relative to this directory. Use this as your cwd for all operations.` : void 0;
 	const result = await agentCliCommand({
 		message: args.message,
@@ -244,6 +247,14 @@ async function isPlanFileValid(filePath) {
 		return false;
 	}
 }
+async function getGitChangedFileCount(cwd) {
+	try {
+		const { stdout } = await execFile$1("git", ["status", "--porcelain"], { cwd });
+		return stdout.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).length;
+	} catch {
+		return null;
+	}
+}
 function extractJsonObject(text) {
 	const trimmed = text.trim();
 	if (!trimmed) return null;
@@ -621,6 +632,7 @@ async function runAnton(args) {
 							workspaceDir: args.workspaceDir
 						});
 					}
+					if (!planFile) throw new Error("Preflight discovery did not produce a verified plan file; refusing direct implementation fallback");
 				}
 				await notify({
 					phase: "implementation_start",
@@ -637,8 +649,11 @@ async function runAnton(args) {
 					task: task.text,
 					sessionId: implSessionId
 				});
+				const implPrompt = planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text);
+				const gitCwd = args.workspaceDir ? path.resolve(args.workspaceDir) : path.dirname(filePath);
+				const changedBefore = await getGitChangedFileCount(gitCwd);
 				await runAgentTask({
-					message: planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text),
+					message: implPrompt,
 					sessionId: implSessionId,
 					timeout: defaultTimeout,
 					agent: args.agent,
@@ -647,6 +662,8 @@ async function runAnton(args) {
 					deps: args.deps,
 					workspaceDir: args.workspaceDir
 				});
+				const changedAfter = await getGitChangedFileCount(gitCwd);
+				if (mode === "preflight" && changedBefore !== null && changedAfter !== null && changedAfter <= changedBefore) throw new Error("Implementation made no repository changes; refusing to mark task complete");
 				const updated = markTaskDone(await fs.readFile(filePath, "utf8"), task.line);
 				await fs.writeFile(filePath, updated, "utf8");
 				completed += 1;

package/dist/{anton-GmxStpbM.js → anton-DKA8iAQE.js}

@@ -1,6 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { R as CONFIG_DIR } from "./entry.js";
+import { execFile } from "node:child_process";
 import path from "node:path";
+import { promisify } from "node:util";
 import fs from "node:fs/promises";
 
 //#region src/commands/anton.ts
@@ -12,6 +14,7 @@ var anton_exports = /* @__PURE__ */ __exportAll({
 });
 const ANTON_STATE_PATH = path.join(CONFIG_DIR, "anton.state.json");
 const ANTON_LOCK_PATH = path.join(CONFIG_DIR, "anton.lock");
+const execFile$1 = promisify(execFile);
 async function ensureStateDir() {
 	await fs.mkdir(CONFIG_DIR, { recursive: true });
 }
@@ -222,7 +225,7 @@ async function loadAntonConfig() {
 	}
 }
 async function runAgentTask(args) {
-	const { agentCliCommand } = await import("./agent-via-gateway-B0077UOc.js").then((n) => n.n);
+	const { agentCliCommand } = await import("./agent-via-gateway-BvXS1sXv.js").then((n) => n.n);
 	const extraSystemPrompt = args.workspaceDir ? `Your working directory is: ${args.workspaceDir}\nAll file paths are relative to this directory. Use this as your cwd for all operations.` : void 0;
 	const result = await agentCliCommand({
 		message: args.message,
@@ -250,6 +253,14 @@ async function isPlanFileValid(filePath) {
 		return false;
 	}
 }
+async function getGitChangedFileCount(cwd) {
+	try {
+		const { stdout } = await execFile$1("git", ["status", "--porcelain"], { cwd });
+		return stdout.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).length;
+	} catch {
+		return null;
+	}
+}
 function extractJsonObject(text) {
 	const trimmed = text.trim();
 	if (!trimmed) return null;
@@ -627,6 +638,7 @@ async function runAnton(args) {
 							workspaceDir: args.workspaceDir
 						});
 					}
+					if (!planFile) throw new Error("Preflight discovery did not produce a verified plan file; refusing direct implementation fallback");
 				}
 				await notify({
 					phase: "implementation_start",
@@ -643,8 +655,11 @@ async function runAnton(args) {
 					task: task.text,
 					sessionId: implSessionId
 				});
+				const implPrompt = planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text);
+				const gitCwd = args.workspaceDir ? path.resolve(args.workspaceDir) : path.dirname(filePath);
+				const changedBefore = await getGitChangedFileCount(gitCwd);
 				await runAgentTask({
-					message: planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text),
+					message: implPrompt,
 					sessionId: implSessionId,
 					timeout: defaultTimeout,
 					agent: args.agent,
@@ -653,6 +668,8 @@ async function runAnton(args) {
 					deps: args.deps,
 					workspaceDir: args.workspaceDir
 				});
+				const changedAfter = await getGitChangedFileCount(gitCwd);
+				if (mode === "preflight" && changedBefore !== null && changedAfter !== null && changedAfter <= changedBefore) throw new Error("Implementation made no repository changes; refusing to mark task complete");
 				const updated = markTaskDone(await fs.readFile(filePath, "utf8"), task.line);
 				await fs.writeFile(filePath, updated, "utf8");
 				completed += 1;

package/dist/{anton-BiE961do.js → anton-DhBvDNcB.js}

@@ -1,7 +1,9 @@
 import { t as __exportAll } from "./rolldown-runtime-Cbj13DAv.js";
 import { t as CONFIG_DIR } from "./utils-CXzXXV2o.js";
 import path from "node:path";
+import { promisify } from "node:util";
 import fs from "node:fs/promises";
+import { execFile } from "node:child_process";
 
 //#region src/commands/anton.ts
 var anton_exports = /* @__PURE__ */ __exportAll({
@@ -12,6 +14,7 @@ var anton_exports = /* @__PURE__ */ __exportAll({
 });
 const ANTON_STATE_PATH = path.join(CONFIG_DIR, "anton.state.json");
 const ANTON_LOCK_PATH = path.join(CONFIG_DIR, "anton.lock");
+const execFile$1 = promisify(execFile);
 async function ensureStateDir() {
 	await fs.mkdir(CONFIG_DIR, { recursive: true });
 }
@@ -222,7 +225,7 @@ async function loadAntonConfig() {
 	}
 }
 async function runAgentTask(args) {
-	const { agentCliCommand } = await import("./agent-via-gateway-DFnFArbP.js").then((n) => n.n);
+	const { agentCliCommand } = await import("./agent-via-gateway-CcaPUQrc.js").then((n) => n.n);
 	const extraSystemPrompt = args.workspaceDir ? `Your working directory is: ${args.workspaceDir}\nAll file paths are relative to this directory. Use this as your cwd for all operations.` : void 0;
 	const result = await agentCliCommand({
 		message: args.message,
@@ -250,6 +253,14 @@ async function isPlanFileValid(filePath) {
 		return false;
 	}
 }
+async function getGitChangedFileCount(cwd) {
+	try {
+		const { stdout } = await execFile$1("git", ["status", "--porcelain"], { cwd });
+		return stdout.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).length;
+	} catch {
+		return null;
+	}
+}
 function extractJsonObject(text) {
 	const trimmed = text.trim();
 	if (!trimmed) return null;
@@ -627,6 +638,7 @@ async function runAnton(args) {
 							workspaceDir: args.workspaceDir
 						});
 					}
+					if (!planFile) throw new Error("Preflight discovery did not produce a verified plan file; refusing direct implementation fallback");
 				}
 				await notify({
 					phase: "implementation_start",
@@ -643,8 +655,11 @@ async function runAnton(args) {
 					task: task.text,
 					sessionId: implSessionId
 				});
+				const implPrompt = planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text);
+				const gitCwd = args.workspaceDir ? path.resolve(args.workspaceDir) : path.dirname(filePath);
+				const changedBefore = await getGitChangedFileCount(gitCwd);
 				await runAgentTask({
-					message: planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text),
+					message: implPrompt,
 					sessionId: implSessionId,
 					timeout: defaultTimeout,
 					agent: args.agent,
@@ -653,6 +668,8 @@ async function runAnton(args) {
 					deps: args.deps,
 					workspaceDir: args.workspaceDir
 				});
+				const changedAfter = await getGitChangedFileCount(gitCwd);
+				if (mode === "preflight" && changedBefore !== null && changedAfter !== null && changedAfter <= changedBefore) throw new Error("Implementation made no repository changes; refusing to mark task complete");
 				const updated = markTaskDone(await fs.readFile(filePath, "utf8"), task.line);
 				await fs.writeFile(filePath, updated, "utf8");
 				completed += 1;

package/dist/{anton-fsipCiB9.js → anton-Dyhtv3C8.js}

@@ -2,10 +2,13 @@ import "./paths-BYNVLNi_.js";
 import { t as CONFIG_DIR } from "./utils-CTFLl_ji.js";
 import fs from "node:fs/promises";
 import path from "node:path";
+import { promisify } from "node:util";
+import { execFile } from "node:child_process";
 
 //#region src/commands/anton.ts
 const ANTON_STATE_PATH = path.join(CONFIG_DIR, "anton.state.json");
 const ANTON_LOCK_PATH = path.join(CONFIG_DIR, "anton.lock");
+const execFile$1 = promisify(execFile);
 async function ensureStateDir() {
 	await fs.mkdir(CONFIG_DIR, { recursive: true });
 }
@@ -216,7 +219,7 @@ async function loadAntonConfig() {
 	}
 }
 async function runAgentTask(args) {
-	const { agentCliCommand } = await import("./agent-via-gateway-D-FbIr6E.js");
+	const { agentCliCommand } = await import("./agent-via-gateway-BFtbpQpT.js");
 	const extraSystemPrompt = args.workspaceDir ? `Your working directory is: ${args.workspaceDir}\nAll file paths are relative to this directory. Use this as your cwd for all operations.` : void 0;
 	const result = await agentCliCommand({
 		message: args.message,
@@ -244,6 +247,14 @@ async function isPlanFileValid(filePath) {
 		return false;
 	}
 }
+async function getGitChangedFileCount(cwd) {
+	try {
+		const { stdout } = await execFile$1("git", ["status", "--porcelain"], { cwd });
+		return stdout.split(/\r?\n/).map((line) => line.trim()).filter(Boolean).length;
+	} catch {
+		return null;
+	}
+}
 function extractJsonObject(text) {
 	const trimmed = text.trim();
 	if (!trimmed) return null;
@@ -621,6 +632,7 @@ async function runAnton(args) {
 							workspaceDir: args.workspaceDir
 						});
 					}
+					if (!planFile) throw new Error("Preflight discovery did not produce a verified plan file; refusing direct implementation fallback");
 				}
 				await notify({
 					phase: "implementation_start",
@@ -637,8 +649,11 @@ async function runAnton(args) {
 					task: task.text,
 					sessionId: implSessionId
 				});
+				const implPrompt = planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text);
+				const gitCwd = args.workspaceDir ? path.resolve(args.workspaceDir) : path.dirname(filePath);
+				const changedBefore = await getGitChangedFileCount(gitCwd);
 				await runAgentTask({
-					message: planFile ? buildImplementationPrompt(task.text, planFile) : buildDirectTaskPrompt(task.text),
+					message: implPrompt,
 					sessionId: implSessionId,
 					timeout: defaultTimeout,
 					agent: args.agent,
@@ -647,6 +662,8 @@ async function runAnton(args) {
 					deps: args.deps,
 					workspaceDir: args.workspaceDir
 				});
+				const changedAfter = await getGitChangedFileCount(gitCwd);
+				if (mode === "preflight" && changedBefore !== null && changedAfter !== null && changedAfter <= changedBefore) throw new Error("Implementation made no repository changes; refusing to mark task complete");
 				const updated = markTaskDone(await fs.readFile(filePath, "utf8"), task.line);
 				await fs.writeFile(filePath, updated, "utf8");
 				completed += 1;

package/dist/{audio-preflight-BSlR2jEq.js → audio-preflight-CW8IH1lU.js}

@@ -17,8 +17,8 @@ import "./accounts-BDVs8LTu.js";
 import "./image-ops-D1KtygWz.js";
 import "./pi-model-discovery-Bb__OY-j.js";
 import "./message-channel-C8QtrwEU.js";
-import "./pi-embedded-helpers-CyTpDKo5.js";
-import "./chrome-_2tzVjVl.js";
+import "./pi-embedded-helpers-CghCLoPo.js";
+import "./chrome-BcJB6PcM.js";
 import "./ssrf-CZeHDwVZ.js";
 import "./frontmatter-BOudmHMS.js";
 import "./skills-CnAPWfca.js";
@@ -32,11 +32,11 @@ import "./accounts-CIvVRRHb.js";
 import "./paths-D_qUel1T.js";
 import "./tool-images-CcGZpzmq.js";
 import "./thinking-z4_linel.js";
-import "./image-COw__ACq.js";
+import "./image-D8b_rlQC.js";
 import "./gemini-auth-CIyaa44H.js";
 import "./fetch-guard-iuQsIjqN.js";
 import "./local-roots-KN4Hp1yZ.js";
-import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-BzNdfqDz.js";
+import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-PgRFPYUj.js";
 
 //#region src/media-understanding/audio-preflight.ts
 /**

package/dist/{audio-preflight-CSSlgO89.js → audio-preflight-vD3mDc6w.js}

@@ -15,8 +15,8 @@ import "./accounts-BRVjft5i.js";
 import "./image-ops-BDG-MYYV.js";
 import "./pi-model-discovery-Dic-M5qw.js";
 import "./message-channel-DqqfOIdx.js";
-import "./pi-embedded-helpers-Ct2rwp-P.js";
-import "./chrome-Do5potHV.js";
+import "./pi-embedded-helpers-C2j0LfJC.js";
+import "./chrome-DEnkfZ9p.js";
 import "./ssrf-DappnhDp.js";
 import "./skills-nQcWk6Z6.js";
 import "./path-alias-guards-CGbCFqW8.js";
@@ -29,11 +29,11 @@ import "./accounts-CBoBCTgA.js";
 import "./paths-vOrMwCEQ.js";
 import "./tool-images-CpZSs-zE.js";
 import "./thinking-BFsWfunr.js";
-import "./image-BAsQlUqT.js";
+import "./image-C_aN5P6-.js";
 import "./gemini-auth-m2hi6OmF.js";
 import "./fetch-guard-BdCPmLBP.js";
 import "./local-roots-BnWzOrXv.js";
-import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-Bv_BA3vd.js";
+import { a as resolveMediaAttachmentLocalRoots, n as createMediaAttachmentCache, o as runCapability, r as normalizeMediaAttachments, t as buildProviderRegistry, u as isAudioAttachment } from "./runner-CZW_eyf2.js";
 
 //#region src/media-understanding/audio-preflight.ts
 /**

package/dist/{auth-choice-DCHD89CG.js → auth-choice-CMUzxwaw.js}

@@ -6,7 +6,7 @@ import { n as loadModelCatalog } from "./model-catalog-D9no0CH2.js";
 import { f as openUrl } from "./onboard-helpers-BQmbMJxJ.js";
 import { t as enablePluginInConfig } from "./enable-o_s6PBsC.js";
 import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-BJq87X3o.js";
-import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-DZhIVPGv.js";
+import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-CKIkgNDk.js";
 import { a as ensureApiKeyFromOptionEnvOrPrompt, c as applyDefaultModelChoice, d as validateApiKeyInput, l as ensureModelAllowlistEntry, n as createAuthChoiceDefaultModelApplier, o as normalizeSecretInputModeInput, r as createAuthChoiceModelStateBridge, s as normalizeTokenProviderInput, t as createAuthChoiceAgentModelNoter, u as normalizeApiKeyInput } from "./auth-choice.apply-helpers-CGcniL1T.js";
 import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-7J6cw1rA.js";
 import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-BkXoTOiA.js";

package/dist/{auth-choice-B9F26cWG.js → auth-choice-D-_AVWgJ.js}

@@ -6,7 +6,7 @@ import { n as loadModelCatalog } from "./model-catalog-DYWymzg_.js";
 import { f as openUrl } from "./onboard-helpers-Dp6wXNs7.js";
 import { t as enablePluginInConfig } from "./enable-CMXupNXl.js";
 import { $ as ZAI_DEFAULT_MODEL_REF, A as applyTogetherConfig, B as applyLitellmConfig, C as applyMoonshotProviderConfigCn, Ct as writeOAuthCredentials, D as applyQianfanProviderConfig, Dt as QIANFAN_DEFAULT_MODEL_REF, E as applyQianfanConfig, Et as MOONSHOT_DEFAULT_MODEL_REF, F as applyXaiProviderConfig, G as applyVercelAiGatewayProviderConfig, H as applyCloudflareAiGatewayConfig, I as applyXiaomiConfig, J as LITELLM_DEFAULT_MODEL_REF, K as applyAgentDefaultModelPrimary, L as applyXiaomiProviderConfig, M as applyVeniceConfig, N as applyVeniceProviderConfig, O as applySyntheticConfig, Ot as XAI_DEFAULT_MODEL_REF, P as applyXaiConfig, Q as XIAOMI_DEFAULT_MODEL_REF, R as applyZaiConfig, S as applyMoonshotProviderConfig, St as setZaiApiKey, T as applyOpenrouterProviderConfig, Tt as MISTRAL_DEFAULT_MODEL_REF, U as applyCloudflareAiGatewayProviderConfig, V as applyLitellmProviderConfig, W as applyVercelAiGatewayConfig, X as TOGETHER_DEFAULT_MODEL_REF, Y as OPENROUTER_DEFAULT_MODEL_REF, Z as VERCEL_AI_GATEWAY_DEFAULT_MODEL_REF, _ as applyKimiCodeProviderConfig, _t as setVeniceApiKey, a as applyMinimaxApiConfig, at as setKilocodeApiKey, b as applyMoonshotConfig, bt as setXaiApiKey, c as applyMinimaxApiProviderConfigCn, ct as setMinimaxApiKey, d as applyAuthProfileConfig, dt as setOpenaiApiKey, et as setAnthropicApiKey, ft as setOpencodeZenApiKey, g as applyKimiCodeConfig, gt as setTogetherApiKey, h as applyKilocodeProviderConfig, ht as setSyntheticApiKey, i as applyOpencodeZenProviderConfig, it as setHuggingfaceApiKey, j as applyTogetherProviderConfig, k as applySyntheticProviderConfig, l as applyMinimaxConfig, lt as setMistralApiKey, m as applyKilocodeConfig, mt as setQianfanApiKey, n as validateAnthropicSetupToken, nt as setCloudflareAiGatewayConfig, o as applyMinimaxApiConfigCn, ot as setKimiCodingApiKey, p as applyHuggingfaceProviderConfig, pt as setOpenrouterApiKey, q as HUGGINGFACE_DEFAULT_MODEL_REF, r as applyOpencodeZenConfig, rt as setGeminiApiKey, s as applyMinimaxApiProviderConfig, st as setLitellmApiKey, t as buildTokenProfileId, tt as setByteplusApiKey, u as applyMinimaxProviderConfig, ut as setMoonshotApiKey, v as applyMistralConfig, vt as setVercelAiGatewayApiKey, w as applyOpenrouterConfig, wt as KIMI_CODING_MODEL_REF, x as applyMoonshotConfigCn, xt as setXiaomiApiKey, y as applyMistralProviderConfig, yt as setVolcengineApiKey, z as applyZaiProviderConfig } from "./auth-token-BQ_ECwH7.js";
-import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-ZH_-N5zd.js";
+import { a as createVpsAwareOAuthHandlers, c as githubCopilotLoginCommand, i as resolveProviderMatch, n as mergeConfigPatch, o as isRemoteEnvironment, r as pickAuthMethod, s as resolvePluginProviders, t as applyDefaultModel } from "./provider-auth-helpers-CrjXAqYu.js";
 import { a as ensureApiKeyFromOptionEnvOrPrompt, c as applyDefaultModelChoice, d as validateApiKeyInput, l as ensureModelAllowlistEntry, n as createAuthChoiceDefaultModelApplier, o as normalizeSecretInputModeInput, r as createAuthChoiceModelStateBridge, s as normalizeTokenProviderInput, t as createAuthChoiceAgentModelNoter, u as normalizeApiKeyInput } from "./auth-choice.apply-helpers-Bj-Y-Sar.js";
 import { a as GOOGLE_GEMINI_DEFAULT_MODEL, i as detectZaiEndpoint, n as applyOpenAIConfig, o as applyGoogleGeminiModelDefault, r as applyOpenAIProviderConfig, t as OPENAI_DEFAULT_MODEL } from "./openai-model-default-DTIibBxa.js";
 import { c as OPENAI_CODEX_DEFAULT_MODEL, l as applyOpenAICodexModelDefault, r as applyPrimaryModel, s as promptAndConfigureVllm } from "./model-picker-D_yngXMe.js";

package/dist/{banner-DGxHi5f3.js → banner-B6ih1A5q.js}

@@ -1,5 +1,5 @@
 import { St as theme, g as visibleWidth, sn as hasRootVersionAlias, xt as isRich } from "./entry.js";
-import { Tn as resolveCommitHash } from "./subagent-registry-DHwrN9Oj.js";
+import { Tn as resolveCommitHash } from "./subagent-registry-C6uygQa1.js";
 
 //#region src/cli/tagline.ts
 const DEFAULT_TAGLINE = "All your chats, one IdleHands.";

package/dist/build-info.json

@@ -1,5 +1,5 @@
 {
-  "version": "4.0.14",
-  "commit": "cd69d743fcf3dd982f1ed349092813bfbf451283",
-  "builtAt": "2026-03-01T21:10:11.789Z"
+  "version": "4.0.15",
+  "commit": "5408e2978491f451433b52c92be3bb3772dcd1f6",
+  "builtAt": "2026-03-01T21:12:58.994Z"
 }

package/dist/bundled/boot-md/handler.js

@@ -11,14 +11,14 @@ import "../../boolean-CE7i9tBR.js";
 import "../../env-B5G1qwGc.js";
 import "../../dock-BgOmHcbh.js";
 import { n as SILENT_REPLY_TOKEN } from "../../tokens-BRLyURxW.js";
-import { a as agentCommand } from "../../pi-embedded-ChimfAJ-.js";
+import { a as agentCommand } from "../../pi-embedded-7XGjNojd.js";
 import "../../plugins-CRB60mCJ.js";
 import "../../accounts-Dk8mJIrQ.js";
 import "../../bindings-D3b5Fmc9.js";
 import "../../auth-store-DXT-l7fO.js";
 import "../../send-BeIZJuy4.js";
 import "../../send-DmLC7aEF.js";
-import "../../deliver-CVTXl0Cv.js";
+import "../../deliver-BUiQ-9fE.js";
 import "../../diagnostic-4owMk4vH.js";
 import "../../diagnostic-session-state-BGF2r-kt.js";
 import "../../accounts-BDVs8LTu.js";
@@ -26,8 +26,8 @@ import "../../send-Dfa3sn6r.js";
 import "../../image-ops-D1KtygWz.js";
 import "../../pi-model-discovery-Bb__OY-j.js";
 import "../../message-channel-C8QtrwEU.js";
-import "../../pi-embedded-helpers-CyTpDKo5.js";
-import "../../chrome-_2tzVjVl.js";
+import "../../pi-embedded-helpers-CghCLoPo.js";
+import "../../chrome-BcJB6PcM.js";
 import "../../ssrf-CZeHDwVZ.js";
 import "../../frontmatter-BOudmHMS.js";
 import "../../skills-CnAPWfca.js";
@@ -41,7 +41,7 @@ import "../../accounts-CIvVRRHb.js";
 import { u as resolveStorePath } from "../../paths-D_qUel1T.js";
 import "../../tool-images-CcGZpzmq.js";
 import "../../thinking-z4_linel.js";
-import "../../image-COw__ACq.js";
+import "../../image-D8b_rlQC.js";
 import "../../reply-prefix-BUgeSN2R.js";
 import "../../manager-BE_76jWB.js";
 import "../../gemini-auth-CIyaa44H.js";
@@ -56,7 +56,7 @@ import "../../ir-B7IBoKLy.js";
 import "../../render-MTSxc7LK.js";
 import "../../commands-registry-j4vAzcF2.js";
 import "../../skill-commands-Ck3flWX7.js";
-import "../../runner-BzNdfqDz.js";
+import "../../runner-PgRFPYUj.js";
 import "../../fetch-CsfR_943.js";
 import "../../channel-activity-D_TMOGQ0.js";
 import "../../tables-5k-zOZ-s.js";
@@ -66,7 +66,7 @@ import "../../send-D4bMycQu.js";
 import "../../resolve-route-DuttYY7A.js";
 import "../../proxy-CRB9oCP5.js";
 import "../../replies-6_GxvQYe.js";
-import { t as createDefaultDeps } from "../../deps-7AsluBQV.js";
+import { t as createDefaultDeps } from "../../deps-KIFYHxig.js";
 import fs from "node:fs/promises";
 import path from "node:path";
 import crypto from "node:crypto";