@wrongstack/tools 0.295.0 → 0.295.1

package/dist/builtin.js

@@ -5067,6 +5067,7 @@ function emitStructuredLog(level, event, message, error) {
 }
 var HEARTBEAT_INTERVAL_MS = 5e3;
 var STALE_THRESHOLD_MS = 3e4;
+var LOCK_STALE_MS = 3e4;
 var LOCKFILE = ".process-registry.lock";
 function generateInstanceId() {
   const hostname2 = os2.hostname();
@@ -5095,21 +5096,26 @@ async function acquireLock(lockfilePath, timeoutMs = 5e3) {
         try {
           const content = await fs6.readFile(lockfilePath, "utf-8");
           const parts = content.split(":");
-          const lockPidStr = parts[0] ?? "0";
-          const lockPid = parseInt(lockPidStr, 10);
-          if (process.platform !== "win32") {
+          const lockPid = parseInt(parts[0] ?? "0", 10);
+          const lockTs = Number(parts[parts.length - 1]);
+          const staleByAge = Number.isFinite(lockTs) && Date.now() - lockTs > LOCK_STALE_MS;
+          let holderDead = false;
+          if (process.platform !== "win32" && Number.isFinite(lockPid) && lockPid > 0) {
             try {
               process.kill(lockPid, 0);
             } catch {
-              await fs6.unlink(lockfilePath);
-              continue;
+              holderDead = true;
             }
           }
-        } catch {
-          try {
-            await fs6.unlink(lockfilePath);
-          } catch {
+          if (holderDead || staleByAge) {
+            await fs6.unlink(lockfilePath).catch(() => {
+            });
+            continue;
           }
+        } catch {
+          await fs6.unlink(lockfilePath).catch(() => {
+          });
+          continue;
         }
         await new Promise((r) => setTimeout(r, 100));
         continue;
@@ -5119,25 +5125,35 @@ async function acquireLock(lockfilePath, timeoutMs = 5e3) {
   }
   throw new Error(`Failed to acquire lock after ${timeoutMs}ms`);
 }
+function freshRegistryData() {
+  return {
+    version: 1,
+    instances: /* @__PURE__ */ new Map(),
+    protectedPatterns: ["wrongstack", "node"],
+    lastCleanup: Date.now()
+  };
+}
 async function readRegistryFile(filePath) {
+  let content;
   try {
-    const content = await fs6.readFile(filePath, "utf-8");
-    const parsed = JSON.parse(content);
-    if (parsed.instances && Array.isArray(parsed.instances)) {
-      parsed.instances = new Map(parsed.instances);
-    }
-    return parsed;
+    content = await fs6.readFile(filePath, "utf-8");
   } catch (err) {
-    if (isNodeError(err) && err.code === "ENOENT") {
-      return {
-        version: 1,
-        instances: /* @__PURE__ */ new Map(),
-        protectedPatterns: ["wrongstack", "node"],
-        lastCleanup: Date.now()
-      };
-    }
+    if (isNodeError(err) && err.code === "ENOENT") return freshRegistryData();
     throw err;
   }
+  try {
+    const parsed = JSON.parse(content);
+    if (!parsed || typeof parsed !== "object") return freshRegistryData();
+    const base = freshRegistryData();
+    return {
+      version: 1,
+      instances: Array.isArray(parsed.instances) ? new Map(parsed.instances) : base.instances,
+      protectedPatterns: Array.isArray(parsed.protectedPatterns) ? parsed.protectedPatterns : base.protectedPatterns,
+      lastCleanup: typeof parsed.lastCleanup === "number" ? parsed.lastCleanup : base.lastCleanup
+    };
+  } catch {
+    return freshRegistryData();
+  }
 }
 async function writeRegistryFile(filePath, data) {
   const tmpPath = `${filePath}.tmp.${process.pid}`;
@@ -9130,11 +9146,12 @@ var IndexStore = class _IndexStore {
       }
     }
     const refRows = this.stmt(
-      `SELECT r.call_type, sf.file AS from_file, st.file AS to_file
+      `SELECT r.call_type, sf.file AS from_file, st.file AS to_file, COUNT(*) AS n
        FROM refs r
        JOIN symbols sf ON sf.id = r.from_id
        JOIN symbols st ON st.id = r.to_id
-       WHERE r.to_id IS NOT NULL AND r.call_type != 'import'`
+       WHERE r.to_id IS NOT NULL AND r.call_type != 'import'
+       GROUP BY r.call_type, sf.file, st.file`
     ).all();
     const edgeMap = /* @__PURE__ */ new Map();
     for (const r of refRows) {
@@ -9147,14 +9164,16 @@ var IndexStore = class _IndexStore {
         e = { weight: 0, types: /* @__PURE__ */ new Map() };
         edgeMap.set(key, e);
       }
-      e.weight++;
-      e.types.set(r.call_type, (e.types.get(r.call_type) ?? 0) + 1);
+      const n = Number(r.n) || 0;
+      e.weight += n;
+      e.types.set(r.call_type, (e.types.get(r.call_type) ?? 0) + n);
     }
     const importRows = this.stmt(
-      `SELECT r.to_name, s.file AS from_file
+      `SELECT r.to_name, s.file AS from_file, COUNT(*) AS n
        FROM refs r
        JOIN symbols s ON s.id = r.from_id
-       WHERE r.call_type = 'import'`
+       WHERE r.call_type = 'import'
+       GROUP BY r.to_name, s.file`
     ).all();
     for (const r of importRows) {
       const fromPkg = fileToPkg.get(r.from_file) ?? _IndexStore.derivePackage(r.from_file) ?? "(root)";
@@ -9166,8 +9185,9 @@ var IndexStore = class _IndexStore {
         edge = { weight: 0, types: /* @__PURE__ */ new Map() };
         edgeMap.set(key, edge);
       }
-      edge.weight++;
-      edge.types.set("import", (edge.types.get("import") ?? 0) + 1);
+      const n = Number(r.n) || 0;
+      edge.weight += n;
+      edge.types.set("import", (edge.types.get("import") ?? 0) + n);
     }
     const edges = [];
     for (const [key, e] of edgeMap) {
@@ -9232,11 +9252,12 @@ var IndexStore = class _IndexStore {
     }
     const indexedFiles = new Set(allFiles.map((f) => f.file));
     const refRows = this.stmt(
-      `SELECT r.from_id, r.to_id, r.call_type
+      `SELECT r.from_id, r.to_id, r.call_type, COUNT(*) AS n
        FROM refs r
        WHERE (r.from_id IN (SELECT id FROM symbols WHERE file IN (${filePlaceholders}))
            OR r.to_id IN (SELECT id FROM symbols WHERE file IN (${filePlaceholders})))
-         AND r.to_id IS NOT NULL`
+         AND r.to_id IS NOT NULL
+       GROUP BY r.from_id, r.to_id, r.call_type`
     ).all(...pkgFilePaths, ...pkgFilePaths);
     const knownSymIds = new Set(pkgSyms.map((s) => s.id));
     const crossRefIds = /* @__PURE__ */ new Set();
@@ -9271,14 +9292,16 @@ var IndexStore = class _IndexStore {
         e = { weight: 0, types: /* @__PURE__ */ new Map() };
         edgeMap.set(key, e);
       }
-      e.weight++;
-      e.types.set(r.call_type, (e.types.get(r.call_type) ?? 0) + 1);
+      const n = Number(r.n) || 0;
+      e.weight += n;
+      e.types.set(r.call_type, (e.types.get(r.call_type) ?? 0) + n);
     }
     const importRows = this.stmt(
-      `SELECT r.from_id, r.to_name
+      `SELECT r.from_id, r.to_name, COUNT(*) AS n
        FROM refs r
        WHERE r.call_type = 'import'
-         AND r.from_id IN (SELECT id FROM symbols WHERE file IN (${filePlaceholders}))`
+         AND r.from_id IN (SELECT id FROM symbols WHERE file IN (${filePlaceholders}))
+       GROUP BY r.from_id, r.to_name`
     ).all(...pkgFilePaths);
     for (const r of importRows) {
       const fromFile = symToFile.get(r.from_id);
@@ -9293,8 +9316,9 @@ var IndexStore = class _IndexStore {
         edge = { weight: 0, types: /* @__PURE__ */ new Map() };
         edgeMap.set(key, edge);
       }
-      edge.weight++;
-      edge.types.set("import", (edge.types.get("import") ?? 0) + 1);
+      const n = Number(r.n) || 0;
+      edge.weight += n;
+      edge.types.set("import", (edge.types.get("import") ?? 0) + n);
     }
     const edges = [];
     for (const [key, e] of edgeMap) {
@@ -9341,22 +9365,25 @@ var IndexStore = class _IndexStore {
       scope: s.scope,
       external: s.file !== fileFilter
     });
-    const symIds = new Set(syms.map((s) => s.id));
     const refRows = this.stmt(
-      `SELECT r.from_id, r.to_id, r.to_name, r.call_type, r.line
-       FROM refs r
-       JOIN symbols s ON s.id = r.from_id
-       WHERE s.file = ?
-       UNION
-       SELECT r.from_id, r.to_id, r.to_name, r.call_type, r.line
-       FROM refs r
-       JOIN symbols s ON s.id = r.to_id
-       WHERE s.file = ?`
+      `SELECT from_id, to_id, call_type, COUNT(*) AS n
+       FROM (
+         SELECT r.from_id, r.to_id, r.to_name, r.call_type, r.line
+         FROM refs r
+         JOIN symbols s ON s.id = r.from_id
+         WHERE s.file = ?
+         UNION
+         SELECT r.from_id, r.to_id, r.to_name, r.call_type, r.line
+         FROM refs r
+         JOIN symbols s ON s.id = r.to_id
+         WHERE s.file = ?
+       )
+       WHERE to_id IS NOT NULL
+       GROUP BY from_id, to_id, call_type`
     ).all(fileFilter, fileFilter);
     const edgeMap = /* @__PURE__ */ new Map();
     for (const r of refRows) {
-      if (r.to_id === null) continue;
-      if (!symIds.has(r.from_id) && !symIds.has(r.to_id)) continue;
+      if (r.to_id == null) continue;
       relatedIds.add(r.from_id);
       relatedIds.add(r.to_id);
       const key = `${r.from_id}\0${r.to_id}`;
@@ -9365,8 +9392,9 @@ var IndexStore = class _IndexStore {
         e = { weight: 0, types: /* @__PURE__ */ new Map() };
         edgeMap.set(key, e);
       }
-      e.weight++;
-      e.types.set(r.call_type, (e.types.get(r.call_type) ?? 0) + 1);
+      const n = Number(r.n) || 0;
+      e.weight += n;
+      e.types.set(r.call_type, (e.types.get(r.call_type) ?? 0) + n);
     }
     const edges = [];
     for (const [key, e] of edgeMap) {
@@ -9423,7 +9451,7 @@ import { expectDefined as expectDefined6 } from "@wrongstack/core/utils";
 import * as fs14 from "node:fs/promises";
 import * as path20 from "node:path";
 import { availableParallelism } from "node:os";
-import { indexParallelBatchSize, isFrugalPerf } from "@wrongstack/core/utils";
+import { DEFAULT_WALK_IGNORE_DIRS, indexParallelBatchSize, isFrugalPerf } from "@wrongstack/core/utils";
 
 // src/codebase-index/ts-parser.ts
 import * as ts from "@typescript/typescript6";
@@ -10078,7 +10106,7 @@ import * as path16 from "node:path";
 var C_LIKE = [
   { re: /\b(?:class|struct|enum|interface|union)\s+([A-Za-z_]\w*)/g, kind: "class" },
   {
-    re: /\b(?:public|private|protected|static|final|async|override|virtual|inline|export)?\s*(?:[\w:<>\[\]\s\*&]+)\s+([A-Za-z_]\w*)\s*\([^;{]*\)\s*(?:const)?\s*[{;]/g,
+    re: /\b(?:public|private|protected|static|final|async|override|virtual|inline|export)?\s*(?:[\w:<>[\]\s*&]+)\s+([A-Za-z_]\w*)\s*\([^;{]*\)\s*(?:const)?\s*[{;]/g,
     kind: "function"
   },
   { re: /\b(?:namespace)\s+([A-Za-z_]\w*)/g, kind: "namespace" }
@@ -10109,7 +10137,7 @@ var LANG_PATTERNS = {
   java: [
     { re: /\b(?:class|interface|enum|record)\s+([A-Za-z_]\w*)/g, kind: "class" },
     {
-      re: /\b(?:public|private|protected|static|final|abstract|synchronized|native|default|\s)+\s*[\w.<>,\[\]\s]+\s+([A-Za-z_]\w*)\s*\(/g,
+      re: /\b(?:public|private|protected|static|final|abstract|synchronized|native|default|\s)+\s*[\w.<>,[\]\s]+\s+([A-Za-z_]\w*)\s*\(/g,
       kind: "method"
     }
   ],
@@ -10117,7 +10145,7 @@ var LANG_PATTERNS = {
     { re: /\b(?:class|interface|struct|enum|record)\s+([A-Za-z_]\w*)/g, kind: "class" },
     { re: /\bnamespace\s+([A-Za-z_.\w]+)/g, kind: "namespace" },
     {
-      re: /\b(?:public|private|protected|internal|static|async|override|virtual|\s)+\s*[\w.<>,\[\]\s]+\s+([A-Za-z_]\w*)\s*\(/g,
+      re: /\b(?:public|private|protected|internal|static|async|override|virtual|\s)+\s*[\w.<>,[\]\s]+\s+([A-Za-z_]\w*)\s*\(/g,
       kind: "method"
     }
   ],
@@ -10322,8 +10350,7 @@ function parseGeneric2(opts) {
   for (const pattern of patterns) {
     const re = new RegExp(pattern.re.source, pattern.re.flags.includes("g") ? pattern.re.flags : `${pattern.re.flags}g`);
     re.lastIndex = 0;
-    let match;
-    while ((match = re.exec(content)) !== null) {
+    for (const match of content.matchAll(re)) {
       if (symbols.length >= maxSymbols) break;
       let name = (match[1] ?? match[2] ?? "").trim();
       if (lang === "md" && match[2]) name = match[2].trim();
@@ -11279,17 +11306,7 @@ function throwIfAborted(signal) {
 function isAbortError(err) {
   return err instanceof DOMException && err.name === "AbortError";
 }
-var DEFAULT_IGNORE = [
-  "node_modules",
-  ".git",
-  "dist",
-  "build",
-  ".next",
-  "coverage",
-  ".turbo",
-  "__snapshots__",
-  ".nyc_output"
-];
+var DEFAULT_IGNORE = DEFAULT_WALK_IGNORE_DIRS;
 var DEFAULT_IGNORE_FILES = /* @__PURE__ */ new Set(["package-lock.json", "pnpm-lock.yaml", "pnpm-lock.yml"]);
 var MAX_INDEX_FILE_BYTES = 5 * 1024 * 1024;
 function isWithinProject(projectRoot, file) {
@@ -16053,7 +16070,7 @@ function runGit2(args, cwd, signal) {
 // src/glob.ts
 import * as fs20 from "node:fs/promises";
 import * as path26 from "node:path";
-import { compileGlob as compileGlob2 } from "@wrongstack/core/utils";
+import { compileGlob as compileGlob2, DEFAULT_WALK_IGNORE_DIRS as DEFAULT_WALK_IGNORE_DIRS2 } from "@wrongstack/core/utils";
 
 // src/_concurrency.ts
 async function mapWithConcurrency(items, limit, fn) {
@@ -16074,7 +16091,7 @@ async function mapWithConcurrency(items, limit, fn) {
 
 // src/glob.ts
 init_util();
-var DEFAULT_IGNORE2 = ["node_modules", ".git", "dist", "build", ".next", "coverage", ".turbo"];
+var DEFAULT_IGNORE2 = DEFAULT_WALK_IGNORE_DIRS2;
 var WALK_CONCURRENCY = 16;
 var globTool = {
   name: "glob",
@@ -16114,7 +16131,7 @@ var globTool = {
     const signal = opts?.signal;
     const base = input.path ? await safeResolveReal(input.path, ctx) : ctx.cwd;
     const limit = Math.max(1, Math.min(input.limit ?? 1e3, 5e3));
-    const ignored = await readGitignore(base);
+    const isGitIgnored = await loadGitignoreMatcher(base);
     const re = compileGlob2(input.pattern);
     const results = [];
     let truncated = false;
@@ -16154,12 +16171,13 @@ var globTool = {
       for (const e of entries) {
         const name = e.name;
         if (DEFAULT_IGNORE2.includes(name)) continue;
-        if (ignored.includes(name)) continue;
         const rel = relPrefix ? `${relPrefix}/${name}` : name;
         const full = path26.join(dir, name);
         if (e.isDirectory()) {
+          if (isGitIgnored(rel, true)) continue;
           subdirs.push({ full, rel });
         } else if (e.isFile()) {
+          if (isGitIgnored(rel, false)) continue;
           re.lastIndex = 0;
           const relMatch = re.test(rel);
           re.lastIndex = 0;
@@ -16171,10 +16189,12 @@ var globTool = {
           try {
             const st = await fs20.stat(full);
             if (st.isDirectory()) {
+              if (isGitIgnored(rel, true)) continue;
               const real = await fs20.realpath(full);
               await assertRealInsideRoot(real, ctx);
               subdirs.push({ full, rel });
             } else if (st.isFile()) {
+              if (isGitIgnored(rel, false)) continue;
               const real = await fs20.realpath(full);
               await assertRealInsideRoot(real, ctx);
               re.lastIndex = 0;
@@ -16198,14 +16218,6 @@ var globTool = {
     return { files: results.map((r) => r.rel), truncated };
   }
 };
-async function readGitignore(dir) {
-  try {
-    const raw = await fs20.readFile(path26.join(dir, ".gitignore"), "utf8");
-    return raw.split("\n").map((l) => l.trim()).filter((l) => l && !l.startsWith("#"));
-  } catch {
-    return [];
-  }
-}
 
 // src/grep.ts
 import { expectDefined as expectDefined7 } from "@wrongstack/core/utils";
@@ -16213,7 +16225,7 @@ import { spawn as spawn10 } from "node:child_process";
 import * as fs21 from "node:fs/promises";
 import * as path27 from "node:path";
 import { ToolValidationError as ToolValidationError4 } from "@wrongstack/core/types";
-import { buildChildEnv as buildChildEnv5, compileGlob as compileGlob3 } from "@wrongstack/core/utils";
+import { buildChildEnv as buildChildEnv5, compileGlob as compileGlob3, DEFAULT_WALK_IGNORE_DIRS as DEFAULT_WALK_IGNORE_DIRS3 } from "@wrongstack/core/utils";
 
 // src/_regex.ts
 var MAX_PATTERN_LEN = 256;
@@ -16262,7 +16274,7 @@ function capSubject(line) {
 
 // src/grep.ts
 init_util();
-var DEFAULT_IGNORE3 = ["node_modules", ".git", "dist", "build", ".next", "coverage"];
+var DEFAULT_IGNORE3 = DEFAULT_WALK_IGNORE_DIRS3;
 var NATIVE_SCAN_CONCURRENCY = 32;
 var NATIVE_READ_CHUNK_BYTES = 64 * 1024;
 var NATIVE_MAX_FILE_BYTES = 1e6;
@@ -16379,6 +16391,10 @@ async function* runRgStream(input, base, mode, limit, signal) {
   for (const ignored of DEFAULT_IGNORE3) {
     args.push("--glob", `!${ignored}/**`, "--glob", `!**/${ignored}/**`);
   }
+  const gitignorePath = path27.join(base, ".gitignore");
+  if (await fs21.access(gitignorePath).then(() => true, () => false)) {
+    args.push("--ignore-file", gitignorePath);
+  }
   if (input.glob) args.push("--glob", input.glob);
   args.push("--", input.pattern, base);
   const matches = [];
@@ -16504,6 +16520,7 @@ async function runNative(input, base, mode, limit, signal) {
   }
   const re = compiled.regex;
   const globRe = input.glob ? compileGlob3(input.glob) : null;
+  const isGitIgnored = await loadGitignoreMatcher(base);
   const matches = [];
   const countOnlyFirstHit = mode === "count" && limit === 1;
   const maxBytes = mode === "content" ? NATIVE_MAX_FILE_BYTES : Math.min(NATIVE_MAX_FILE_BYTES, 256 * 1024);
@@ -16591,7 +16608,7 @@ async function runNative(input, base, mode, limit, signal) {
     } catch {
     }
   };
-  const walk = async (dir) => {
+  const walk = async (dir, relPrefix) => {
     if (stopped || signal.aborted) return;
     let entries;
     try {
@@ -16605,17 +16622,24 @@ async function runNative(input, base, mode, limit, signal) {
       if (stopped) return;
       if (DEFAULT_IGNORE3.includes(e.name)) continue;
       if (e.isSymbolicLink()) continue;
+      const rel = relPrefix ? `${relPrefix}/${e.name}` : e.name;
       const full = path27.join(dir, e.name);
       if (e.isDirectory()) {
-        subdirs.push(full);
+        if (isGitIgnored(rel, true)) continue;
+        subdirs.push({ full, rel });
       } else if (e.isFile()) {
+        if (isGitIgnored(rel, false)) continue;
         files.push({ full, name: e.name });
       }
     }
     await mapWithConcurrency(files, NATIVE_SCAN_CONCURRENCY, ({ full, name }) => scanFile(full, name));
-    await mapWithConcurrency(subdirs, Math.min(16, NATIVE_SCAN_CONCURRENCY), walk);
+    await mapWithConcurrency(
+      subdirs,
+      Math.min(16, NATIVE_SCAN_CONCURRENCY),
+      ({ full, rel }) => walk(full, rel)
+    );
   };
-  await walk(base);
+  await walk(base, "");
   return {
     matches,
     count: total,
@@ -17345,9 +17369,35 @@ import {
   updateGoalMetricOnTask,
   updateTask,
   updateTaskAssignment,
-  verifyTaskCompletion
+  verifyTaskCompletion,
+  finalizeTaskCompletion,
+  assessTaskAtomicity,
+  proposeTaskDecomposition
 } from "@wrongstack/kanban";
 
+// src/kanban-evidence-bridge.ts
+import { recordCompletedWorkEvidence } from "@wrongstack/core/utils";
+function kanbanEvidenceKey(boardId, taskId) {
+  return `kanban:${boardId}:${taskId}`;
+}
+function kanbanEvidencePointer(boardId, taskId) {
+  return `kanban://${boardId}/${taskId}#verificationReport`;
+}
+function recordKanbanVerificationEvidence(ctx, report) {
+  try {
+    const passed = report.checks.filter((check) => check.status === "passed").length;
+    const completedAt = Date.parse(report.completedAt);
+    recordCompletedWorkEvidence(ctx, {
+      key: kanbanEvidenceKey(report.boardId, report.taskId),
+      source: "verification",
+      summary: `${report.taskTitle} \u2014 verification ${report.verdict} (${passed}/${report.checks.length} checks)`,
+      ...Number.isFinite(completedAt) ? { completedAt } : {},
+      evidence: kanbanEvidencePointer(report.boardId, report.taskId)
+    });
+  } catch {
+  }
+}
+
 // src/session-kanban.ts
 import { GlobalMailbox } from "@wrongstack/core/coordination";
 import {
@@ -17636,7 +17686,9 @@ var kanbanTool = {
           "add_note",
           "add_link",
           "verify_completion",
-          "split_atomic"
+          "split_atomic",
+          "assess_atomicity",
+          "propose_decomposition"
         ]
       },
       boardId: { type: "string" },
@@ -17772,7 +17824,24 @@ var kanbanTool = {
       includeCompletedTasks: { type: "boolean" },
       preserveAssignment: { type: "boolean" },
       preserveDependencies: { type: "boolean" },
-      moveTasksToColumnId: { type: "string" }
+      moveTasksToColumnId: { type: "string" },
+      atomicityMode: { type: "string", enum: ["off", "assess", "enforce"] },
+      atomicityDecomposition: { type: "string", enum: ["auto", "propose"] },
+      gateEnforcement: { type: "string", enum: ["strict", "soft", "off"] },
+      subtasks: {
+        type: "array",
+        minItems: 2,
+        items: {
+          type: "object",
+          properties: {
+            title: { type: "string" },
+            description: { type: "string" },
+            successCriteria: { type: "array", items: { type: "string" } },
+            dependsOnIndex: { type: "array", items: { type: "number" } }
+          },
+          required: ["title"]
+        }
+      }
     },
     required: ["action"]
   },
@@ -17812,7 +17881,14 @@ var kanbanTool = {
               title: input.title,
               ...input.description !== void 0 ? { description: input.description } : {},
               ...input.tags !== void 0 ? { tags: input.tags } : {},
-              ...input.generatedBy !== void 0 ? { generatedBy: input.generatedBy } : {}
+              ...input.generatedBy !== void 0 ? { generatedBy: input.generatedBy } : {},
+              ...input.atomicityMode !== void 0 ? {
+                atomicity: {
+                  mode: input.atomicityMode,
+                  decomposition: input.atomicityDecomposition ?? "propose"
+                }
+              } : {},
+              ...input.gateEnforcement !== void 0 ? { completionGate: { enforcement: input.gateEnforcement } } : {}
             });
             return { ok: true, message: `Board created: ${board.title}`, board };
           }
@@ -17821,7 +17897,14 @@ var kanbanTool = {
             const board = await updateBoard2(projectRoot, input.boardId, {
               ...input.title !== void 0 ? { title: input.title } : {},
               ...input.description !== void 0 ? { description: input.description } : {},
-              ...input.tags !== void 0 ? { tags: input.tags } : {}
+              ...input.tags !== void 0 ? { tags: input.tags } : {},
+              ...input.atomicityMode !== void 0 ? {
+                atomicity: {
+                  mode: input.atomicityMode,
+                  decomposition: input.atomicityDecomposition ?? "propose"
+                }
+              } : {},
+              ...input.gateEnforcement !== void 0 ? { completionGate: { enforcement: input.gateEnforcement } } : {}
             });
             return board ? okBoard(board, "Board updated.") : fail("Board not found.");
           }
@@ -18029,7 +18112,12 @@ var kanbanTool = {
           case "add_task": {
             if (!input.boardId || !input.title) return fail("add_task requires boardId and title.");
             const result2 = await addTask(projectRoot, input.boardId, taskInput(input));
-            return result2 ? okTask(result2.board, result2.task, "Task added.") : fail("Board not found.");
+            if (!result2) return fail("Board not found.");
+            return okTask(
+              result2.board,
+              result2.task,
+              `Task added.${atomicityNudge(result2.task)}`
+            );
           }
           case "split_task": {
             if (!input.boardId || !input.taskId || !input.childTitles?.length) {
@@ -18109,6 +18197,19 @@ var kanbanTool = {
                 "transition_task requires boardId, taskId, lifecycleStage, author, and transitionComment."
               );
             }
+            if (input.lifecycleStage === "done") {
+              const boardBefore = await getBoard2(projectRoot, input.boardId);
+              const taskBefore = boardBefore ? await getTask(projectRoot, input.boardId, input.taskId) : null;
+              if (boardBefore && taskBefore && !taskBefore.verificationReport && (taskBefore.atomic || Boolean(taskBefore.successCriteria?.length))) {
+                const preGate = await verifyTaskCompletion(projectRoot, input.boardId, taskBefore.id, {
+                  persist: false
+                });
+                await updateTask(projectRoot, input.boardId, taskBefore.id, {
+                  verificationReport: preGate.report,
+                  successCriteria: preGate.task.successCriteria
+                });
+              }
+            }
             const result2 = await transitionTask(projectRoot, input.boardId, input.taskId, {
               to: input.lifecycleStage,
               actor: input.author,
@@ -18123,6 +18224,9 @@ var kanbanTool = {
               } : {},
               patch: taskPatch(input)
             });
+            if (result2 && input.lifecycleStage === "done" && result2.task.verificationReport) {
+              recordKanbanVerificationEvidence(ctx, result2.task.verificationReport);
+            }
             return result2 ? okTask(result2.board, result2.task, `Task advanced to ${result2.transition.to}.`) : fail("Board or task not found.");
           }
           case "move_task": {
@@ -18236,7 +18340,31 @@ var kanbanTool = {
               // is atomic inside updateTaskAssignment's mutateBoard lock.
               input.expectedLeaseId !== void 0 ? { expectedLeaseId: input.expectedLeaseId } : {}
             );
-            return board ? okBoard(board, "Assignment updated.") : fail("Task not found.");
+            if (!board) return fail("Task not found.");
+            if (assignmentStatus === "completed") {
+              const envGate = readEnvGateEnforcement();
+              const finalized = await finalizeTaskCompletion(projectRoot, board.id, input.taskId, {
+                ...board.completionGate === void 0 && envGate !== void 0 ? { enforcement: envGate } : {},
+                ...ctx.agentId !== void 0 ? { eventContext: { actor: ctx.agentId } } : {}
+              });
+              if (finalized) {
+                if (finalized.gate.report) {
+                  recordKanbanVerificationEvidence(ctx, finalized.gate.report);
+                }
+                const gateSummary = {
+                  enforcement: finalized.gate.enforcement,
+                  allowed: finalized.gate.allowed,
+                  verdict: finalized.gate.verdict,
+                  issues: finalized.gate.issues.map((issue) => issue.message)
+                };
+                const gateMessage = finalized.gate.allowed ? `Completion gate ${finalized.gate.verdict === "skipped" ? "skipped" : "passed"}; task completed.` : finalized.gate.enforcement === "strict" ? `Completion gate BLOCKED (verdict: ${finalized.gate.verdict}); task parked in review. Issues: ${gateSummary.issues.join(" | ")}` : `Completion gate failed softly (verdict: ${finalized.gate.verdict}); task completed with warnings. Issues: ${gateSummary.issues.join(" | ")}`;
+                return {
+                  ...okTask(finalized.board, finalized.task, `Assignment updated. ${gateMessage}`),
+                  gate: gateSummary
+                };
+              }
+            }
+            return okBoard(board, "Assignment updated.");
           }
           case "heartbeat_assignment": {
             if (!input.boardId || !input.taskId) {
@@ -18400,6 +18528,49 @@ var kanbanTool = {
             });
             return board ? okBoard(board, "Link added.") : fail("Task not found.");
           }
+          case "assess_atomicity": {
+            if (!input.boardId || !input.taskId) {
+              return fail("assess_atomicity requires boardId and taskId.");
+            }
+            const result2 = await assessTaskAtomicity(projectRoot, input.boardId, input.taskId, {
+              assessedBy: "agent",
+              ...ctx.agentId !== void 0 ? { eventContext: { actor: ctx.agentId } } : {}
+            });
+            if (!result2) return fail("Task not found.");
+            const failing = result2.assessment.criteria.filter((entry) => entry.score < 1).map((entry) => entry.reason);
+            const guidance = result2.assessment.verdict === "needs_decomposition" ? ` This task should be split before dispatch \u2014 call propose_decomposition with 2+ subtasks (each with one verifiable success criterion). Reasons: ${failing.join(" | ")}` : result2.assessment.verdict === "composite" ? " Container task: work happens in its children; it is verified via subtask aggregation." : "";
+            return okTask(
+              result2.board,
+              result2.task,
+              `Atomicity verdict: ${result2.assessment.verdict} (score ${result2.assessment.score}).${guidance}`
+            );
+          }
+          case "propose_decomposition": {
+            if (!input.boardId || !input.taskId || !input.subtasks?.length) {
+              return fail("propose_decomposition requires boardId, taskId, and subtasks (2+).");
+            }
+            if (input.subtasks.length < 2) {
+              return fail("propose_decomposition requires at least two subtasks.");
+            }
+            const invalid = input.subtasks.find(
+              (subtask) => typeof subtask?.title !== "string" || !subtask.title.trim()
+            );
+            if (invalid) return fail("Every proposed subtask needs a non-blank title.");
+            const result2 = await proposeTaskDecomposition(
+              projectRoot,
+              input.boardId,
+              input.taskId,
+              {
+                subtasks: input.subtasks,
+                ...input.note !== void 0 ? { rationale: input.note } : {},
+                ...ctx.agentId !== void 0 ? { proposedBy: ctx.agentId } : {}
+              },
+              ctx.agentId !== void 0 ? { actor: ctx.agentId } : {}
+            );
+            if (!result2) return fail("Task not found.");
+            const message = result2.proposal.status === "applied" ? `Decomposition applied: ${result2.proposal.appliedChildTaskIds?.length ?? 0} child tasks created (parent marked atomic).` : 'Decomposition proposal recorded \u2014 awaiting approval (board policy is "propose"). It can be approved from the WebUI or via update_task.';
+            return okTask(result2.board, result2.task, message);
+          }
           case "verify_completion": {
             if (!input.boardId || !input.taskId) {
               return fail("verify_completion requires boardId and taskId.");
@@ -18417,6 +18588,7 @@ var kanbanTool = {
                 board: verResult.board
               };
             }
+            recordKanbanVerificationEvidence(ctx, verResult.report);
             const freshTask = persistedBoard.tasks?.find((t) => t.id === input.taskId);
             const deterministicVerdicts = ["passed", "failed", "needs_human", "incomplete"];
             return {
@@ -18443,6 +18615,15 @@ var kanbanTool = {
     }
   }
 };
+function atomicityNudge(task) {
+  if (task.atomicityAssessment?.verdict !== "needs_decomposition") return "";
+  const reasons = task.atomicityAssessment.criteria.filter((entry) => entry.score < 1).map((entry) => entry.reason).join(" | ");
+  return ` Atomicity: needs_decomposition (score ${task.atomicityAssessment.score}) \u2014 call propose_decomposition with 2+ subtasks before dispatch. Reasons: ${reasons}`;
+}
+function readEnvGateEnforcement() {
+  const raw = process.env["WRONGSTACK_KANBAN_GATE"]?.trim().toLowerCase();
+  return raw === "strict" || raw === "soft" || raw === "off" ? raw : void 0;
+}
 function fail(message) {
   return { ok: false, message };
 }
@@ -21664,22 +21845,10 @@ var toolUseTool = {
 
 // src/tree.ts
 init_util();
-import { expectDefined as expectDefined10 } from "@wrongstack/core/utils";
+import { DEFAULT_WALK_IGNORE_DIRS as DEFAULT_WALK_IGNORE_DIRS4, expectDefined as expectDefined10 } from "@wrongstack/core/utils";
 import * as fs28 from "node:fs/promises";
 import * as path32 from "node:path";
-var DEFAULT_IGNORE5 = [
-  "node_modules",
-  ".git",
-  "dist",
-  "build",
-  ".next",
-  "coverage",
-  "__pycache__",
-  ".wrongstack",
-  ".ssh",
-  ".gnupg",
-  ".aws"
-];
+var DEFAULT_IGNORE5 = [...DEFAULT_WALK_IGNORE_DIRS4, ".wrongstack", ".ssh", ".gnupg", ".aws"];
 var treeTool = {
   name: "tree",
   category: "Filesystem",