@williambeto/ai-workflow 2.4.8 → 2.6.3

package/src/commands/doctor.js

@@ -1,202 +0,0 @@
-import fs from "node:fs/promises";
-import path from "node:path";
-import { exists, readJson, readJsonc } from "../core/filesystem.js";
-import { OpenCodeAdapter } from "../core/runtime/opencode-adapter.js";
-
-const REQUIRED_FILES = [
-  ".ai-workflow",
-  "opencode/README.md"
-];
-
-async function isSymlink(filePath) {
-  try {
-    const stat = await fs.lstat(filePath);
-    return stat.isSymbolicLink();
-  } catch {
-    return false;
-  }
-}
-
-export async function runDoctor({ cwd }) {
-  let hasFailure = false;
-  let hasWarning = false;
-  let managedBlocks = [];
-
-  console.log("Doctor report:");
-
-  // Check OpenCode runtime
-  const adapter = new OpenCodeAdapter({ cwd });
-  const inspection = await adapter.inspect();
-  if (inspection.available) {
-    console.log("PASS opencode CLI is available");
-    const supportedStr = Object.entries(inspection.supports)
-      .filter(([_, v]) => v)
-      .map(([k, _]) => k)
-      .join(", ");
-    console.log(`PASS opencode capabilities detected: ${supportedStr || "none"}`);
-  } else {
-    hasFailure = true;
-    console.log("FAIL opencode CLI is not installed or not available in PATH");
-  }
-
-  for (const relativePath of REQUIRED_FILES) {
-    const ok = await exists(path.join(cwd, relativePath));
-
-    if (ok) {
-      console.log(`PASS ${relativePath}`);
-    } else {
-      hasFailure = true;
-      console.log(`FAIL ${relativePath} missing`);
-    }
-  }
-
-  const configPathV2 = path.join(cwd, ".ai-workflow/config.json");
-  const configPathLegacy = path.join(cwd, ".ai-workflow.json");
-  let configPath = null;
-
-  if (await exists(configPathV2)) {
-    configPath = configPathV2;
-  } else if (await exists(configPathLegacy)) {
-    configPath = configPathLegacy;
-  }
-
-  if (configPath) {
-    try {
-      const config = await readJson(configPath);
-
-      if (config.installMode === "project-local" || config.mode === "standalone") {
-        console.log("PASS install mode is project-local/standalone");
-      } else {
-        hasWarning = true;
-        console.log(`WARN install mode is not project-local/standalone in ${path.basename(configPath)}`);
-      }
-
-      if (config.profile) {
-        console.log(`PASS profile detected: ${config.profile}`);
-      } else {
-        hasWarning = true;
-        console.log(`WARN profile is missing in ${path.basename(configPath)}`);
-      }
-
-      if (config.runtime) {
-        console.log(`PASS runtime: ${config.runtime}`);
-      } else {
-        console.log(`NOTE runtime field not present in ${path.basename(configPath)}`);
-      }
-
-      if (Array.isArray(config.managedBlocks)) {
-        managedBlocks = config.managedBlocks;
-      } else {
-        console.log(`NOTE managedBlocks not present in ${path.basename(configPath)} (legacy field)`);
-      }
-
-      if (Array.isArray(config.managedFiles)) {
-        for (const relativePath of config.managedFiles) {
-          const fileExists = await exists(path.join(cwd, relativePath));
-          if (!fileExists) {
-            hasWarning = true;
-            console.log(`WARN managed file missing: ${relativePath}`);
-          }
-        }
-      }
-
-      if (Array.isArray(config.managedLinks)) {
-        for (const relativePath of config.managedLinks) {
-          const absolutePath = path.join(cwd, relativePath);
-          const linkExists = await exists(absolutePath);
-          if (!linkExists) {
-            hasWarning = true;
-            console.log(`WARN managed link missing: ${relativePath}`);
-            continue;
-          }
-
-          const isLink = await isSymlink(absolutePath);
-          if (!isLink) {
-            hasWarning = true;
-            console.log(`WARN managed link is not a symlink: ${relativePath}`);
-          }
-        }
-      }
-    } catch {
-      hasFailure = true;
-      console.log(`FAIL ${path.basename(configPath)} is not valid JSON`);
-    }
-  }
-
-  const opencodePath = path.join(cwd, "opencode.jsonc");
-  if (!(await exists(opencodePath))) {
-    hasFailure = true;
-    console.log("FAIL opencode.jsonc missing");
-  } else {
-    try {
-      const opencodeConfig = await readJsonc(opencodePath);
-      console.log("PASS opencode.jsonc is valid JSONC");
-
-      const needsAgentDefault = managedBlocks.includes("opencode.jsonc:agent.default");
-      if (!needsAgentDefault || opencodeConfig.agent?.default) {
-        console.log("PASS opencode agent.default available");
-      } else {
-        hasFailure = true;
-        console.log("FAIL opencode agent.default missing");
-      }
-
-      const requiredCommands = managedBlocks
-        .filter((block) => block.startsWith("opencode.jsonc:command."))
-        .map((block) => block.replace("opencode.jsonc:command.", ""));
-
-      if (requiredCommands.length === 0) {
-        console.log("PASS no managed opencode commands required");
-      } else {
-        const missingCommands = requiredCommands.filter((command) => !opencodeConfig.command?.[command]);
-        if (missingCommands.length === 0) {
-          console.log(`PASS opencode managed commands available (${requiredCommands.length})`);
-        } else {
-          hasFailure = true;
-          console.log(`FAIL opencode command entries missing: ${missingCommands.join(", ")}`);
-        }
-      }
-
-      const requiredAgents = managedBlocks
-        .filter((block) => block.startsWith("opencode.jsonc:agent.") && !block.endsWith(".default"))
-        .map((block) => block.replace("opencode.jsonc:agent.", ""));
-
-      if (requiredAgents.length === 0) {
-        console.log("PASS no managed opencode agents required");
-      } else {
-        const missingAgents = requiredAgents.filter((agent) => !opencodeConfig.agent?.[agent]);
-        if (missingAgents.length === 0) {
-          console.log(`PASS opencode managed agents available (${requiredAgents.length})`);
-        } else {
-          hasFailure = true;
-          console.log(`FAIL opencode agent entries missing: ${missingAgents.join(", ")}`);
-        }
-      }
-    } catch {
-      hasFailure = true;
-      console.log("FAIL opencode.jsonc is not valid JSONC");
-    }
-  }
-
-  const packageJsonPath = path.join(cwd, "package.json");
-  if (await exists(packageJsonPath)) {
-    try {
-      const packageJson = await readJson(packageJsonPath);
-      const scripts = packageJson.scripts ?? {};
-
-      if (!scripts.validate) {
-        hasWarning = true;
-        console.log("WARN package.json has no validate script");
-      }
-    } catch {
-      hasFailure = true;
-      console.log("FAIL package.json is not valid JSON");
-    }
-  }
-
-  const finalStatus = hasFailure ? "FAIL" : hasWarning ? "PASS_WITH_NOTES" : "PASS";
-  console.log(`Final status: ${finalStatus}`);
-
-  if (hasFailure) {
-    process.exitCode = 1;
-  }
-}

package/src/commands/execute.js

@@ -1,382 +0,0 @@
-import { RequestClassifier } from "../core/request-classifier.js";
-import { ExecutionPlanner } from "../core/execution-planner.js";
-import { WorkflowStateMachine } from "../core/workflow-state-machine.js";
-import { BranchGate } from "../core/gates/branch-gate.js";
-import { EvidenceLedger } from "../core/evidence/evidence-ledger.js";
-import { DelegationController } from "../core/delegation-controller.js";
-import { OpenCodeAdapter } from "../core/runtime/opencode-adapter.js";
-import { runCollectEvidence } from "./collect-evidence.js";
-import { QualityGuard } from "../core/validation/quality-guard.js";
-import { HandoffEngine } from "../core/handoff/handoff-engine.js";
-import { HealerEngine } from "../core/healing/healer-engine.js";
-import { createRuntimeRemediationExecutor } from "../core/healing/runtime-remediation-executor.js";
-import { isRecoverableGateFailure, isTerminalFailure } from "../core/statuses.js";
-import { Finalizer } from "../core/finalization/finalizer.js";
-import fs from "node:fs/promises";
-import path from "node:path";
-import { execSync } from "node:child_process";
-
-async function captureReadOnlyState(cwd) {
-  const finalizer = new Finalizer({ cwd });
-  const snapshot = await finalizer.snapshotManager.capture();
-  
-  const execGit = (args) => {
-    try {
-      return execSync(`git ${args}`, { cwd, encoding: "utf8", stdio: "pipe" }).trim();
-    } catch {
-      return "";
-    }
-  };
-
-  const head = execGit("rev-parse HEAD");
-  const branch = execGit("rev-parse --abbrev-ref HEAD");
-  const indexTree = execGit("write-tree");
-  const porcelainStatus = execGit("status --porcelain");
-
-  return {
-    snapshot,
-    head,
-    branch,
-    indexTree,
-    porcelainStatus
-  };
-}
-
-function compareReadOnlyState(before, after) {
-  const violations = [];
-
-  // 1. Compare branch
-  if (before.branch !== after.branch) {
-    violations.push(`Branch changed from '${before.branch}' to '${after.branch}'`);
-  }
-
-  // 2. Compare HEAD
-  if (before.head !== after.head) {
-    violations.push(`Git HEAD changed from '${before.head}' to '${after.head}' (commit or reset made inside read-only task)`);
-  }
-
-  // 3. Compare index tree
-  if (before.indexTree !== after.indexTree) {
-    violations.push(`Git index tree changed from '${before.indexTree}' to '${after.indexTree}'`);
-  }
-
-  // 4. Compare porcelain status
-  if (before.porcelainStatus !== after.porcelainStatus) {
-    violations.push(`Git status changed. Before:\n${before.porcelainStatus}\nAfter:\n${after.porcelainStatus}`);
-  }
-
-  // 5. Compare workspace files (SHA-256 hashes)
-  const beforeFiles = before.snapshot.files || {};
-  const afterFiles = after.snapshot.files || {};
-
-  for (const [file, info] of Object.entries(afterFiles)) {
-    const prevInfo = beforeFiles[file];
-    if (!prevInfo) {
-      violations.push(`File added: ${file}`);
-    } else if (prevInfo.sha256 !== info.sha256) {
-      violations.push(`File content modified: ${file}`);
-    }
-  }
-  for (const file of Object.keys(beforeFiles)) {
-    if (!afterFiles[file]) {
-      violations.push(`File deleted: ${file}`);
-    }
-  }
-
-  return violations;
-}
-
-function slugify(text) {
-  return text
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, "-")
-    .replace(/^-+|-+$/g, "")
-    .slice(0, 32) || "task";
-}
-
-function combineValidation(evidence, quality) {
-  const statuses = [evidence.internalStatus, quality.overallStatus];
-  let overallStatus = "PASS";
-  if (statuses.includes("BLOCKED")) overallStatus = "BLOCKED";
-  else if (statuses.includes("FAIL")) overallStatus = "FAIL";
-  else if (statuses.includes("FAIL_DELEGATION_GATE")) overallStatus = "FAIL_DELEGATION_GATE";
-  else if (statuses.includes("FAIL_QUALITY_GATE")) overallStatus = "FAIL_QUALITY_GATE";
-  else if (statuses.includes("PASS_WITH_NOTES")) overallStatus = "PASS_WITH_NOTES";
-  return { overallStatus, evidence, quality };
-}
-
-/**
- * runExecute - Coordinators natural request execution.
- */
-export async function runExecute({ cwd, naturalRequest, taskSlug: taskSlugOverride }) {
-  if (!naturalRequest || !naturalRequest.trim()) {
-    throw new Error("Missing request. Please provide a natural request string via positional arguments or --request flag.");
-  }
-
-  const taskSlug = taskSlugOverride || slugify(naturalRequest);
-  console.log(`\n[AI WORKFLOW] Executing natural request intake [slug: ${taskSlug}]...\n`);
-
-  const ledger = new EvidenceLedger({ cwd, workflowId: taskSlug });
-  const delegationController = new DelegationController({ cwd, ledger, adapter: new OpenCodeAdapter({ cwd }) });
-
-  let plan = null;
-  try {
-    const stateMachine = new WorkflowStateMachine();
-
-    // 1. Classification
-    const classifier = new RequestClassifier();
-    const classification = classifier.classify(naturalRequest, { cwd });
-    console.log(`[CLASSIFIED] Intent: ${classification.intent}, Mode: ${classification.mode}, Profile: ${classification.profile}`);
-    stateMachine.transitionTo("CLASSIFIED");
-
-    await delegationController.route(naturalRequest, classification);
-
-    const routingDecision = classification.routingDecision || {};
-    if (routingDecision.permissionDecision === "blocked") {
-      stateMachine.transitionTo("BLOCKED");
-      throw new Error(`[ROUTE BLOCKED] ${routingDecision.reason}`);
-    }
-    if (routingDecision.permissionDecision === "rerouted") {
-      console.log(`[REROUTED] ${routingDecision.reason}`);
-    }
-
-    // 2. Planning
-    const planner = new ExecutionPlanner({ cwd });
-    plan = planner.plan(classification, taskSlug);
-    console.log(`[PLANNED] Owner: ${plan.owner}, Remediation limit: ${plan.remediationLimit}`);
-    stateMachine.transitionTo("PLANNED");
-
-    // 3. Branch Gate
-    const branchGate = new BranchGate({ memoryDir: path.join(cwd, ".ai-workflow"), cwd });
-    const gateResult = branchGate.check(undefined, {
-      autoRecover: true,
-      taskSlug,
-      readOnly: !plan.branchNeeded
-    });
-
-    if (gateResult.blocked) {
-      stateMachine.transitionTo("BLOCKED");
-      throw new Error(`[GATE BLOCKED] ${gateResult.reason}`);
-    }
-    console.log(`[PASS] Branch Gate: ${gateResult.recovered ? `${gateResult.branchBefore} -> ${gateResult.branch}` : `${gateResult.branch} is authorized`}.`);
-    stateMachine.transitionTo("BRANCH_READY");
-
-    const checkBranchSafety = () => {
-      if (plan.branchNeeded) {
-        const currentBranch = branchGate.getCurrentBranch();
-        if (branchGate.protectedBranches.includes(currentBranch)) {
-          stateMachine.transitionTo("BLOCKED");
-          throw new Error(`[WORKFLOW BLOCKED] Security violation: current branch is protected '${currentBranch}'!`);
-        }
-      }
-    };
-
-    // 4. Spec template creation (for full/deep mode)
-    if (plan.specPath) {
-      const fullSpecPath = path.join(cwd, plan.specPath);
-      const specExists = await fs.access(fullSpecPath).then(() => true).catch(() => false);
-      if (!specExists) {
-        await fs.mkdir(path.dirname(fullSpecPath), { recursive: true });
-        const specTemplatePath = path.join(cwd, ".ai-workflow/templates/specs/standard.md");
-        const templateContent = await fs.readFile(specTemplatePath, "utf8").catch(() => {
-          return `# [STANDARD] Specification: ${classification.request}\n\n## Metadata\n\n- ID: SPEC-${taskSlug}\n- Author: Spec-Engineer\n- Status: DRAFT\n- Date: ${new Date().toISOString().split("T")[0]}\n\n## Functional Requirements\n\n- ${classification.request}\n\n## Technical Implementation Plan\n\n### Files to Create/Modify\n\n- \`src/index.js\`\n\n## Acceptance Criteria\n\n- [ ] Implemented successfully\n\n## Testing Strategy\n\n- [ ] Behavior tests pass`;
-        });
-        await fs.writeFile(fullSpecPath, templateContent);
-        console.log(`[EXECUTE] Created DRAFT specification template at: ${plan.specPath}`);
-      }
-    }
-
-    // 5. Delegation
-    stateMachine.transitionTo("DELEGATED");
-    stateMachine.transitionTo("IMPLEMENTING");
-
-    let promptMsg = classification.request;
-    if (plan.specPath) {
-      promptMsg = `Please review and fill in the specification file at: ${plan.specPath}. Make sure to change the Status field to 'APPROVED' in the Metadata section, and then implement the behavior described.`;
-    }
-
-    let readOnlyStateBefore = null;
-    if (!plan.branchNeeded) {
-      readOnlyStateBefore = await captureReadOnlyState(cwd);
-    }
-
-    const runResult = await delegationController.implement(promptMsg, plan.owner, { readOnly: !plan.branchNeeded });
-
-    if (!runResult.success) {
-      console.error(`[EXECUTE] OpenCode adapter execution reported failure: ${runResult.error || "Unknown error"}`);
-      stateMachine.transitionTo("BLOCKED");
-      throw new Error(`[WORKFLOW BLOCKED] OpenCode runtime execution failed: ${runResult.error || "Unknown error"}`);
-    }
-
-    if (!plan.branchNeeded) {
-      const readOnlyStateAfter = await captureReadOnlyState(cwd);
-      const violations = compareReadOnlyState(readOnlyStateBefore, readOnlyStateAfter);
-      if (violations.length > 0) {
-        console.error(`[EXECUTE] Read-only confinement violation detected:`);
-        for (const v of violations) {
-          console.error(`  - ${v}`);
-        }
-        stateMachine.transitionTo("BLOCKED");
-        throw new Error(`[WORKFLOW BLOCKED] Read-only confinement violation: files were written/modified, index or commits modified: \n${violations.join("\n")}`);
-      }
-
-      stateMachine.transitionTo("IMPLEMENTED");
-      stateMachine.transitionTo("VALIDATING");
-      stateMachine.transitionTo("COMPLETED");
-
-      console.log("\n--- Final Handoff ---");
-      console.log(`\n[AI WORKFLOW COMPLETE] COMPLETED`);
-      console.log(`Handoff Packet: [IN-MEMORY] (No handoff file written in read-only mode)\n`);
-
-      return {
-        overallStatus: "PASS",
-        evidence: {
-          internalStatus: "PASS",
-          commandsRun: []
-        },
-        quality: {
-          overallStatus: "PASS"
-        },
-        stateHistory: stateMachine.getHistory()
-      };
-    }
-
-    stateMachine.transitionTo("IMPLEMENTED");
-    checkBranchSafety();
-
-    // Capture snapshot immediately after last implementation write
-    const finalizer = new Finalizer({ cwd });
-    let lastWriteSnapshot = await finalizer.snapshotManager.capture();
-
-    // 6. Validation
-    stateMachine.transitionTo("VALIDATING");
-    const validateWorkflow = async () => {
-      const evidence = await runCollectEvidence({
-        cwd,
-        exitOnError: false,
-        taskSlug,
-        mode: plan.mode,
-        profile: plan.profile,
-        branchRecovery: gateResult.recovered ? `${gateResult.branchBefore} -> ${gateResult.branch}` : "NOT_REQUIRED",
-        userRequest: naturalRequest,
-        explicitApprovals: process.env.AI_WORKFLOW_APPROVALS ? process.env.AI_WORKFLOW_APPROVALS.split(",").map(a => a.trim()) : []
-      });
-      const quality = await new QualityGuard({ cwd, taskSlug, mode: plan.mode }).verify();
-      return combineValidation(evidence, quality);
-    };
-
-    let result = await delegationController.validate(taskSlug, plan.mode, plan.profile, validateWorkflow);
-
-    // 7. Bounded Remediation
-    if (isRecoverableGateFailure(result.overallStatus)) {
-      console.log(`\n[REMEDIATION REQUIRED] ${result.overallStatus}. Starting bounded ${plan.mode} remediation.`);
-      const executor = createRuntimeRemediationExecutor(cwd, ledger);
-      const healer = new HealerEngine({ cwd, mode: plan.mode, taskSlug, ledger });
-      
-      result = await healer.run({
-        initialResult: result,
-        validate: async () => {
-          stateMachine.transitionTo("REVALIDATING");
-          const res = await delegationController.validate(taskSlug, plan.mode, plan.profile, validateWorkflow);
-          return res;
-        },
-        remediate: async (remedCtx) => {
-          stateMachine.transitionTo("REMEDIATING");
-          const remRes = await executor(remedCtx);
-          if (remRes.applied) {
-            checkBranchSafety();
-            // Update snapshot because remediation wrote new changes
-            lastWriteSnapshot = await finalizer.snapshotManager.capture();
-          }
-          return remRes;
-        }
-      });
-    }
-
-    if (isTerminalFailure(result.overallStatus)) {
-      stateMachine.transitionTo("BLOCKED");
-      throw new Error(`[WORKFLOW BLOCKED] ${result.overallStatus}: Validation could not be resolved safely.`);
-    }
-
-    checkBranchSafety();
-
-    // 8. Finalizer / Stabilization Loop
-    let integrity = await finalizer.verifyIntegrity(lastWriteSnapshot);
-    let revalidationCount = 0;
-    const maxRevalidations = 2;
-
-    while (!integrity.valid && revalidationCount < maxRevalidations) {
-      console.log(`\n[FINALIZER WARNING] Workspace mutated during validation! Re-running validation to stabilize.`);
-      console.log(`Changes detected:`, integrity.changes);
-
-      checkBranchSafety();
-
-      // Update snapshot to current workspace state before validation runs
-      lastWriteSnapshot = await finalizer.snapshotManager.capture();
-      revalidationCount++;
-
-      // Re-run validation
-      result = await delegationController.validate(taskSlug, plan.mode, plan.profile, validateWorkflow);
-
-      checkBranchSafety();
-
-      // Verify integrity against the snapshot taken before this validation iteration
-      integrity = await finalizer.verifyIntegrity(lastWriteSnapshot);
-    }
-
-    let finalStatus = result.overallStatus;
-    if (!integrity.valid) {
-      console.log(`\n[FINALIZER BLOCKED] BLOCKED: workspace did not stabilize`);
-      console.log(`Final changes detected:`, integrity.changes);
-      finalStatus = "FAIL_QUALITY_GATE";
-    } else {
-      // Workspace stabilized, now run Artifact Fidelity Gate
-      const fidelityResult = await finalizer.verifyFidelity({
-        userRequest: naturalRequest,
-        projectContext: result.evidence?.deliveryDecision?.projectContext || null,
-        deliveryDecision: result.evidence?.deliveryDecision || null,
-        changedFiles: result.evidence?.changedFiles || [],
-        evidence: result.evidence || null,
-        explicitApprovals: process.env.AI_WORKFLOW_APPROVALS ? process.env.AI_WORKFLOW_APPROVALS.split(",").map(a => a.trim()) : []
-      });
-      if (!fidelityResult.passed) {
-        console.log(`\n[FINALIZER BLOCKED] BLOCKED: Artifact fidelity check failed!`);
-        console.log(`Reason: ${fidelityResult.reason}`);
-        finalStatus = "FAIL_QUALITY_GATE";
-      }
-    }
-
-    const finalState = finalStatus === "PASS"
-      ? "COMPLETED"
-      : finalStatus === "PASS_WITH_NOTES"
-        ? "COMPLETED_WITH_NOTES"
-        : "BLOCKED";
-
-    stateMachine.transitionTo(finalState);
-
-    console.log("\n--- Final Handoff ---");
-    const handoffEngine = new HandoffEngine({ cwd });
-    const handoffPath = await handoffEngine.generate({
-      taskId: taskSlug,
-      status: finalState,
-      specPaths: plan.specPath ? [plan.specPath] : [],
-      evidence: result.evidence,
-      nextActions: `Profile ${plan.profile}. Observed execution completed with status ${finalState}.`
-    });
-
-    console.log(`\n[AI WORKFLOW COMPLETE] ${finalState}`);
-    console.log(`Handoff Packet: ${path.relative(cwd, handoffPath)}\n`);
-
-    return { ...result, overallStatus: finalStatus, stateHistory: stateMachine.getHistory() };
-  } finally {
-    if (typeof plan !== "undefined" && plan && !plan.branchNeeded) {
-      console.log(`\n[READ-ONLY LEDGER] (In-Memory/Stdout)\n${JSON.stringify(ledger.getEvents(), null, 2)}\n`);
-    } else {
-      try {
-        await ledger.save(`.ai-workflow/history/${taskSlug}-ledger.json`);
-      } catch (err) {
-        // ignore or log
-      }
-    }
-  }
-}