agentplane 0.1.6 → 0.1.8

package/dist/commands/recipes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recipes.d.ts","sourceRoot":"","sources":["../../src/commands/recipes.ts"],"names":[],"mappings":"AA2kEA,wBAAsB,UAAU,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwGlB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDlB"}
+{"version":3,"file":"recipes.d.ts","sourceRoot":"","sources":["../../src/commands/recipes.ts"],"names":[],"mappings":"AAinEA,wBAAsB,UAAU,CAAC,IAAI,EAAE;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyGlB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDlB"}

package/dist/commands/recipes.js

@@ -1,10 +1,10 @@
 import { execFile } from "node:child_process";
 import { createPublicKey, verify } from "node:crypto";
-import { cp, mkdir, mkdtemp, readdir, readFile, realpath, rename, rm, writeFile, } from "node:fs/promises";
+import { cp, mkdir, mkdtemp, readdir, readFile, realpath, rename, rm } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { promisify } from "node:util";
-import { resolveProject } from "@agentplaneorg/core";
+import { atomicWriteFile, defaultConfig, loadConfig, resolveProject } from "@agentplaneorg/core";
 import { extractArchive } from "../cli/archive.js";
 import { sha256File } from "../cli/checksum.js";
 import { mapCoreError } from "../cli/error-map.js";
@@ -12,6 +12,7 @@ import { fileExists, getPathKind } from "../cli/fs-utils.js";
 import { downloadToFile, fetchJson, fetchText } from "../cli/http.js";
 import { emptyStateMessage, infoMessage, invalidFieldMessage, invalidPathMessage, missingValueMessage, missingFileMessage, requiredFieldMessage, successMessage, usageMessage, } from "../cli/output.js";
 import { CliError } from "../shared/errors.js";
+import { ensureNetworkApproved } from "./shared/network-approval.js";
 const execFileAsync = promisify(execFile);
 const INSTALLED_RECIPES_NAME = "recipes.json";
 const RECIPES_DIR_NAME = "recipes";
@@ -25,7 +26,7 @@ const RECIPE_INFO_USAGE = "Usage: agentplane recipes info <id>";
 const RECIPE_INFO_USAGE_EXAMPLE = "agentplane recipes info viewer";
 const RECIPE_EXPLAIN_USAGE = "Usage: agentplane recipes explain <id>";
 const RECIPE_EXPLAIN_USAGE_EXAMPLE = "agentplane recipes explain viewer";
-const RECIPE_INSTALL_USAGE = "Usage: agentplane recipes install --name <id> [--index <path|url>] [--refresh] | --path <path> | --url <url>";
+const RECIPE_INSTALL_USAGE = "Usage: agentplane recipes install --name <id> [--index <path|url>] [--refresh] [--yes] | --path <path> | --url <url> [--yes]";
 const RECIPE_INSTALL_USAGE_EXAMPLE = "agentplane recipes install --name viewer";
 const RECIPE_REMOVE_USAGE = "Usage: agentplane recipes remove <id>";
 const RECIPE_REMOVE_USAGE_EXAMPLE = "agentplane recipes remove viewer";
@@ -33,7 +34,7 @@ const RECIPE_CACHE_USAGE = "Usage: agentplane recipes cache <prune> [args]";
 const RECIPE_CACHE_USAGE_EXAMPLE = "agentplane recipes cache prune --dry-run";
 const RECIPE_CACHE_PRUNE_USAGE = "Usage: agentplane recipes cache prune [--dry-run] [--all]";
 const RECIPE_CACHE_PRUNE_USAGE_EXAMPLE = "agentplane recipes cache prune --dry-run";
-const RECIPE_LIST_REMOTE_USAGE = "Usage: agentplane recipes list-remote [--refresh] [--index <path|url>]";
+const RECIPE_LIST_REMOTE_USAGE = "Usage: agentplane recipes list-remote [--refresh] [--index <path|url>] [--yes]";
 const RECIPE_LIST_REMOTE_USAGE_EXAMPLE = "agentplane recipes list-remote --refresh";
 const DEFAULT_RECIPES_INDEX_URL = "https://raw.githubusercontent.com/basilisk-labs/agentplane-recipes/main/index.json";
 const RECIPES_INDEX_PUBLIC_KEYS_ENV = "AGENTPLANE_RECIPES_INDEX_PUBLIC_KEYS";
@@ -166,7 +167,7 @@ async function writeScenarioReport(opts) {
         steps: opts.steps,
         git: opts.gitSummary,
     };
-    await writeFile(path.join(opts.runDir, SCENARIO_REPORT_NAME), `${JSON.stringify(report, null, 2)}\n`, "utf8");
+    await atomicWriteFile(path.join(opts.runDir, SCENARIO_REPORT_NAME), `${JSON.stringify(report, null, 2)}\n`, "utf8");
 }
 async function maybeResolveProject(opts) {
     try {
@@ -185,7 +186,7 @@ async function maybeResolveProject(opts) {
     }
 }
 function parseRecipeListRemoteFlags(args) {
-    const out = { refresh: false };
+    const out = { refresh: false, yes: false };
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
         if (!arg)
@@ -201,6 +202,10 @@ function parseRecipeListRemoteFlags(args) {
             out.refresh = true;
             continue;
         }
+        if (arg === "--yes") {
+            out.yes = true;
+            continue;
+        }
         const next = args[i + 1];
         if (!next) {
             throw new CliError({ exitCode: 2, code: "E_USAGE", message: missingValueMessage(arg) });
@@ -575,7 +580,7 @@ async function writeInstalledRecipesFile(filePath, file) {
         updated_at: new Date().toISOString(),
     });
     await mkdir(path.dirname(filePath), { recursive: true });
-    await writeFile(filePath, `${JSON.stringify(sorted, null, 2)}\n`, "utf8");
+    await atomicWriteFile(filePath, `${JSON.stringify(sorted, null, 2)}\n`, "utf8");
 }
 async function readRecipeManifest(manifestPath) {
     const raw = JSON.parse(await readFile(manifestPath, "utf8"));
@@ -624,6 +629,7 @@ function parseRecipeInstallArgs(args) {
     let url = null;
     let index;
     let refresh = false;
+    let yes = false;
     const positional = [];
     for (let i = 0; i < args.length; i++) {
         const arg = args[i];
@@ -681,6 +687,10 @@ function parseRecipeInstallArgs(args) {
             refresh = true;
             continue;
         }
+        if (arg === "--yes") {
+            yes = true;
+            continue;
+        }
         if (arg === "--on-conflict") {
             const next = args[i + 1];
             if (!next)
@@ -732,13 +742,13 @@ function parseRecipeInstallArgs(args) {
         });
     }
     if (name)
-        return { source: { type: "name", value: name }, index, refresh, onConflict };
+        return { source: { type: "name", value: name }, index, refresh, onConflict, yes };
     if (localPath)
-        return { source: { type: "path", value: localPath }, index, refresh, onConflict };
+        return { source: { type: "path", value: localPath }, index, refresh, onConflict, yes };
     if (url)
-        return { source: { type: "url", value: url }, index, refresh, onConflict };
+        return { source: { type: "url", value: url }, index, refresh, onConflict, yes };
     if (positional.length === 1) {
-        return { source: { type: "auto", value: positional[0] }, index, refresh, onConflict };
+        return { source: { type: "auto", value: positional[0] }, index, refresh, onConflict, yes };
     }
     throw new CliError({
         exitCode: 2,
@@ -853,7 +863,7 @@ async function applyRecipeAgents(opts) {
             }
         }
         rawAgent.id = targetId;
-        await writeFile(targetPath, `${JSON.stringify(rawAgent, null, 2)}\n`, "utf8");
+        await atomicWriteFile(targetPath, `${JSON.stringify(rawAgent, null, 2)}\n`, "utf8");
     }
 }
 async function applyRecipeScenarios(opts) {
@@ -881,7 +891,7 @@ async function applyRecipeScenarios(opts) {
     }
     if (payload.scenarios.length === 0)
         return;
-    await writeFile(scenariosIndexPath, `${JSON.stringify(payload, null, 2)}\n`, "utf8");
+    await atomicWriteFile(scenariosIndexPath, `${JSON.stringify(payload, null, 2)}\n`, "utf8");
 }
 function isHttpUrl(value) {
     return value.startsWith("http://") || value.startsWith("https://");
@@ -913,8 +923,8 @@ async function loadRecipesRemoteIndex(opts) {
         verifyRecipesIndexSignature(indexText, signature);
         rawIndex = JSON.parse(indexText);
         await mkdir(cacheDir, { recursive: true });
-        await writeFile(cachePath, indexText, "utf8");
-        await writeFile(cacheSigPath, `${JSON.stringify(signature, null, 2)}\n`, "utf8");
+        await atomicWriteFile(cachePath, indexText, "utf8");
+        await atomicWriteFile(cacheSigPath, `${JSON.stringify(signature, null, 2)}\n`, "utf8");
     }
     else {
         const [indexText, sigText] = await Promise.all([
@@ -968,6 +978,22 @@ async function cmdRecipeList(opts) {
 async function cmdRecipeListRemote(opts) {
     const flags = parseRecipeListRemoteFlags(opts.args);
     try {
+        const project = await maybeResolveProject({ cwd: opts.cwd, rootOverride: opts.rootOverride });
+        let config = defaultConfig();
+        if (project) {
+            const loaded = await loadConfig(project.agentplaneDir);
+            config = loaded.config;
+        }
+        const source = flags.index ?? DEFAULT_RECIPES_INDEX_URL;
+        const cachePath = resolveRecipesIndexCachePath();
+        const willFetchRemote = (flags.refresh || !(await fileExists(cachePath))) && isHttpUrl(source);
+        if (willFetchRemote) {
+            await ensureNetworkApproved({
+                config,
+                yes: flags.yes,
+                reason: "recipes list-remote fetches the remote recipes index",
+            });
+        }
         const index = await loadRecipesRemoteIndex({
             cwd: opts.cwd,
             source: flags.index,
@@ -1256,8 +1282,8 @@ async function cmdScenarioRun(opts) {
                 env,
             });
             const durationMs = Date.now() - startedAt;
-            await writeFile(path.join(stepDir, "stdout.log"), result.stdout, "utf8");
-            await writeFile(path.join(stepDir, "stderr.log"), result.stderr, "utf8");
+            await atomicWriteFile(path.join(stepDir, "stdout.log"), result.stdout, "utf8");
+            await atomicWriteFile(path.join(stepDir, "stderr.log"), result.stderr, "utf8");
             stepsMeta.push({
                 tool: step.tool,
                 runtime,
@@ -1287,7 +1313,7 @@ async function cmdScenarioRun(opts) {
                     steps: stepsReport,
                     gitSummary,
                 });
-                await writeFile(path.join(runDir, "meta.json"), `${JSON.stringify({
+                await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
                     recipe: recipeId,
                     scenario: scenarioId,
                     run_id: runId,
@@ -1311,7 +1337,7 @@ async function cmdScenarioRun(opts) {
             steps: stepsReport,
             gitSummary,
         });
-        await writeFile(path.join(runDir, "meta.json"), `${JSON.stringify({
+        await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
             recipe: recipeId,
             scenario: scenarioId,
             run_id: runId,
@@ -1464,6 +1490,19 @@ async function cmdRecipeExplain(opts) {
 }
 async function cmdRecipeInstall(opts) {
     try {
+        const project = await maybeResolveProject({ cwd: opts.cwd, rootOverride: opts.rootOverride });
+        let config = defaultConfig();
+        if (project) {
+            const loaded = await loadConfig(project.agentplaneDir);
+            config = loaded.config;
+        }
+        let networkApproved = false;
+        const ensureApproved = async (reason) => {
+            if (networkApproved)
+                return;
+            await ensureNetworkApproved({ config, yes: opts.yes, reason });
+            networkApproved = true;
+        };
         const tempRoot = await mkdtemp(path.join(os.tmpdir(), "agentplane-recipe-"));
         try {
             let sourcePath = "";
@@ -1471,6 +1510,12 @@ async function cmdRecipeInstall(opts) {
             let expectedSha = "";
             let indexTags = [];
             const resolveFromIndex = async (recipeId) => {
+                const indexSource = opts.index ?? DEFAULT_RECIPES_INDEX_URL;
+                const cachePath = resolveRecipesIndexCachePath();
+                const willFetchRemote = (opts.refresh || !(await fileExists(cachePath))) && isHttpUrl(indexSource);
+                if (willFetchRemote) {
+                    await ensureApproved("recipes install fetches the remote recipes index");
+                }
                 const index = await loadRecipesRemoteIndex({
                     cwd: opts.cwd,
                     source: opts.index,
@@ -1498,6 +1543,7 @@ async function cmdRecipeInstall(opts) {
                 sourceLabel = `${entry.id}@${latest.version}`;
                 indexTags = normalizeRecipeTags(latest.tags ?? []);
                 if (isHttpUrl(latest.url)) {
+                    await ensureApproved("recipes install downloads a recipe archive");
                     const url = new URL(latest.url);
                     const filename = path.basename(url.pathname) || "recipe.tar.gz";
                     const target = path.join(tempRoot, filename);
@@ -1518,6 +1564,7 @@ async function cmdRecipeInstall(opts) {
                 if (source.type === "name")
                     return await resolveFromIndex(source.value);
                 if (source.type === "url") {
+                    await ensureApproved("recipes install downloads a recipe archive");
                     const url = new URL(source.value);
                     const filename = path.basename(url.pathname) || "recipe.tar.gz";
                     const target = path.join(tempRoot, filename);
@@ -1595,10 +1642,6 @@ async function cmdRecipeInstall(opts) {
                 }
             }
             try {
-                const project = await maybeResolveProject({
-                    cwd: opts.cwd,
-                    rootOverride: opts.rootOverride,
-                });
                 if (project) {
                     await applyRecipeAgents({
                         manifest: manifestWithTags,
@@ -1819,6 +1862,7 @@ export async function cmdRecipes(opts) {
             index: parsed.index,
             refresh: parsed.refresh,
             onConflict: parsed.onConflict,
+            yes: parsed.yes,
         });
     }
     if (subcommand === "remove") {

package/dist/commands/shared/git-diff.d.ts

@@ -0,0 +1,9 @@
+export declare function toGitPath(filePath: string): string;
+export declare function gitShowFile(cwd: string, ref: string, relPath: string): Promise<string>;
+export declare function gitDiffNames(cwd: string, base: string, branch: string): Promise<string[]>;
+export declare function gitDiffStat(cwd: string, base: string, branch: string): Promise<string>;
+export declare function gitAheadBehind(cwd: string, base: string, branch: string): Promise<{
+    ahead: number;
+    behind: number;
+}>;
+//# sourceMappingURL=git-diff.d.ts.map

package/dist/commands/shared/git-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-diff.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/git-diff.ts"],"names":[],"mappings":"AAIA,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM5F;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAS/F;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM5F;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAa5C"}

package/dist/commands/shared/git-diff.js

@@ -0,0 +1,41 @@
+import path from "node:path";
+import { execFileAsync, gitEnv } from "./git.js";
+export function toGitPath(filePath) {
+    return filePath.split(path.sep).join("/");
+}
+export async function gitShowFile(cwd, ref, relPath) {
+    const { stdout } = await execFileAsync("git", ["show", `${ref}:${relPath}`], {
+        cwd,
+        env: gitEnv(),
+    });
+    return stdout;
+}
+export async function gitDiffNames(cwd, base, branch) {
+    const { stdout } = await execFileAsync("git", ["diff", "--name-only", `${base}...${branch}`], {
+        cwd,
+        env: gitEnv(),
+    });
+    return stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+}
+export async function gitDiffStat(cwd, base, branch) {
+    const { stdout } = await execFileAsync("git", ["diff", "--stat", `${base}...${branch}`], {
+        cwd,
+        env: gitEnv(),
+    });
+    return stdout.trimEnd();
+}
+export async function gitAheadBehind(cwd, base, branch) {
+    const { stdout } = await execFileAsync("git", ["rev-list", "--left-right", "--count", `${base}...${branch}`], { cwd, env: gitEnv() });
+    const trimmed = stdout.trim();
+    if (!trimmed)
+        return { ahead: 0, behind: 0 };
+    const parts = trimmed.split(/\s+/);
+    if (parts.length !== 2)
+        return { ahead: 0, behind: 0 };
+    const behind = Number.parseInt(parts[0] ?? "0", 10) || 0;
+    const ahead = Number.parseInt(parts[1] ?? "0", 10) || 0;
+    return { ahead, behind };
+}

package/dist/commands/shared/git-ops.d.ts

@@ -0,0 +1,24 @@
+export declare function gitRevParse(cwd: string, args: string[]): Promise<string>;
+export declare function gitCurrentBranch(cwd: string): Promise<string>;
+export declare function gitBranchExists(cwd: string, branch: string): Promise<boolean>;
+export declare function gitListBranches(cwd: string): Promise<string[]>;
+export declare function gitStagedPaths(cwd: string): Promise<string[]>;
+export declare function gitAddPaths(cwd: string, paths: string[]): Promise<void>;
+export declare function gitCommit(cwd: string, message: string, opts?: {
+    env?: NodeJS.ProcessEnv;
+    skipHooks?: boolean;
+}): Promise<void>;
+export declare function gitInitRepo(cwd: string, branch: string): Promise<void>;
+export declare function resolveInitBaseBranch(gitRoot: string, fallback: string): Promise<string>;
+export declare function promptInitBaseBranch(opts: {
+    gitRoot: string;
+    fallback: string;
+}): Promise<string>;
+export declare function ensureInitCommit(opts: {
+    gitRoot: string;
+    baseBranch: string;
+    installPaths: string[];
+    version: string;
+    skipHooks: boolean;
+}): Promise<void>;
+//# sourceMappingURL=git-ops.d.ts.map

package/dist/commands/shared/git-ops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-ops.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/git-ops.ts"],"names":[],"mappings":"AAKA,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAK9E;AAED,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAkBnE;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAYnF;AAED,wBAAsB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CASpE;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CASnE;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAG7E;AAED,wBAAsB,SAAS,CAC7B,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,EACf,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GACtD,OAAO,CAAC,IAAI,CAAC,CAKf;AAED,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB5E;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAe9F;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiDlB;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwBhB"}

package/dist/commands/shared/git-ops.js

@@ -0,0 +1,181 @@
+import { execFileAsync, gitEnv } from "./git.js";
+import { setPinnedBaseBranch } from "@agentplaneorg/core";
+import { promptChoice, promptInput } from "../../cli/prompts.js";
+import { CliError } from "../../shared/errors.js";
+export async function gitRevParse(cwd, args) {
+    const { stdout } = await execFileAsync("git", ["rev-parse", ...args], { cwd, env: gitEnv() });
+    const trimmed = stdout.trim();
+    if (!trimmed)
+        throw new Error("Failed to resolve git path");
+    return trimmed;
+}
+export async function gitCurrentBranch(cwd) {
+    try {
+        const { stdout } = await execFileAsync("git", ["symbolic-ref", "--short", "HEAD"], {
+            cwd,
+            env: gitEnv(),
+        });
+        const trimmed = stdout.trim();
+        if (trimmed)
+            return trimmed;
+    }
+    catch {
+        // fall through
+    }
+    const { stdout } = await execFileAsync("git", ["rev-parse", "--abbrev-ref", "HEAD"], {
+        cwd,
+        env: gitEnv(),
+    });
+    const trimmed = stdout.trim();
+    if (!trimmed || trimmed === "HEAD")
+        throw new Error("Failed to resolve git branch");
+    return trimmed;
+}
+export async function gitBranchExists(cwd, branch) {
+    try {
+        await execFileAsync("git", ["show-ref", "--verify", "--quiet", `refs/heads/${branch}`], {
+            cwd,
+            env: gitEnv(),
+        });
+        return true;
+    }
+    catch (err) {
+        const code = err?.code;
+        if (code === 1)
+            return false;
+        throw err;
+    }
+}
+export async function gitListBranches(cwd) {
+    const { stdout } = await execFileAsync("git", ["branch", "--format=%(refname:short)"], {
+        cwd,
+        env: gitEnv(),
+    });
+    return stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+}
+export async function gitStagedPaths(cwd) {
+    const { stdout } = await execFileAsync("git", ["diff", "--cached", "--name-only"], {
+        cwd,
+        env: gitEnv(),
+    });
+    return stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+}
+export async function gitAddPaths(cwd, paths) {
+    if (paths.length === 0)
+        return;
+    await execFileAsync("git", ["add", "--", ...paths], { cwd, env: gitEnv() });
+}
+export async function gitCommit(cwd, message, opts) {
+    const args = ["commit", "-m", message];
+    if (opts?.skipHooks)
+        args.push("--no-verify");
+    const env = opts?.env ? { ...gitEnv(), ...opts.env } : gitEnv();
+    await execFileAsync("git", args, { cwd, env });
+}
+export async function gitInitRepo(cwd, branch) {
+    try {
+        await execFileAsync("git", ["init", "-q", "-b", branch], { cwd, env: gitEnv() });
+        return;
+    }
+    catch {
+        await execFileAsync("git", ["init", "-q"], { cwd, env: gitEnv() });
+    }
+    try {
+        const current = await gitCurrentBranch(cwd);
+        if (current !== branch) {
+            await execFileAsync("git", ["checkout", "-q", "-b", branch], { cwd, env: gitEnv() });
+        }
+    }
+    catch {
+        await execFileAsync("git", ["checkout", "-q", "-b", branch], { cwd, env: gitEnv() });
+    }
+}
+export async function resolveInitBaseBranch(gitRoot, fallback) {
+    let current = null;
+    try {
+        current = await gitCurrentBranch(gitRoot);
+    }
+    catch {
+        current = null;
+    }
+    const branches = await gitListBranches(gitRoot);
+    if (current)
+        return current;
+    if (branches.includes(fallback))
+        return fallback;
+    if (branches.length > 0) {
+        const first = branches[0];
+        if (first)
+            return first;
+    }
+    return fallback;
+}
+export async function promptInitBaseBranch(opts) {
+    const branches = await gitListBranches(opts.gitRoot);
+    let current = null;
+    try {
+        current = await gitCurrentBranch(opts.gitRoot);
+    }
+    catch {
+        current = null;
+    }
+    const promptNewBranch = async (hasBranches) => {
+        const raw = await promptInput(`Enter new base branch name (default ${opts.fallback}): `);
+        const candidate = raw.trim() || opts.fallback;
+        if (!candidate) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "Base branch name cannot be empty",
+            });
+        }
+        if (await gitBranchExists(opts.gitRoot, candidate))
+            return candidate;
+        try {
+            await execFileAsync("git", hasBranches ? ["branch", candidate] : ["checkout", "-q", "-b", candidate], { cwd: opts.gitRoot, env: gitEnv() });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : `Failed to create branch ${candidate}`;
+            throw new CliError({ exitCode: 5, code: "E_GIT", message });
+        }
+        return candidate;
+    };
+    if (branches.length === 0) {
+        return await promptNewBranch(false);
+    }
+    const createLabel = "Create new branch";
+    const defaultChoice = current && branches.includes(current) ? current : (branches[0] ?? opts.fallback);
+    const choice = await promptChoice("Select base branch", [...branches, createLabel], defaultChoice);
+    if (choice === createLabel) {
+        return await promptNewBranch(true);
+    }
+    return choice;
+}
+export async function ensureInitCommit(opts) {
+    const stagedBefore = await gitStagedPaths(opts.gitRoot);
+    if (stagedBefore.length > 0) {
+        throw new CliError({
+            exitCode: 5,
+            code: "E_GIT",
+            message: "Git index has staged changes; commit or unstage them before running agentplane init.",
+        });
+    }
+    await setPinnedBaseBranch({
+        cwd: opts.gitRoot,
+        rootOverride: opts.gitRoot,
+        value: opts.baseBranch,
+    });
+    const dedupedPaths = [...new Set(opts.installPaths)].filter((entry) => entry.length > 0);
+    await gitAddPaths(opts.gitRoot, dedupedPaths);
+    const staged = await gitStagedPaths(opts.gitRoot);
+    if (staged.length === 0)
+        return;
+    const message = `chore: install agentplane ${opts.version}`;
+    await gitCommit(opts.gitRoot, message, { skipHooks: opts.skipHooks });
+}

package/dist/commands/shared/git-worktree.d.ts

@@ -0,0 +1,8 @@
+export declare function listWorktrees(cwd: string): Promise<{
+    path: string;
+    branch: string | null;
+}[]>;
+export declare function findWorktreeForBranch(cwd: string, branch: string): Promise<string | null>;
+export declare function parseTaskIdFromBranch(prefix: string, branch: string): string | null;
+export declare function gitListTaskBranches(cwd: string, prefix: string): Promise<string[]>;
+//# sourceMappingURL=git-worktree.d.ts.map

package/dist/commands/shared/git-worktree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-worktree.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/git-worktree.ts"],"names":[],"mappings":"AAEA,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,EAAE,CAAC,CAoBpD;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAQ/F;AAMD,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMnF;AAED,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAUxF"}

package/dist/commands/shared/git-worktree.js

@@ -0,0 +1,48 @@
+import { execFileAsync, gitEnv } from "./git.js";
+export async function listWorktrees(cwd) {
+    const { stdout } = await execFileAsync("git", ["worktree", "list", "--porcelain"], {
+        cwd,
+        env: gitEnv(),
+    });
+    const worktrees = [];
+    const lines = stdout.split("\n");
+    let current = null;
+    for (const line of lines) {
+        if (line.startsWith("worktree ")) {
+            if (current)
+                worktrees.push(current);
+            current = { path: line.slice("worktree ".length).trim(), branch: null };
+            continue;
+        }
+        if (line.startsWith("branch ") && current) {
+            current.branch = line.slice("branch ".length).trim();
+        }
+    }
+    if (current)
+        worktrees.push(current);
+    return worktrees;
+}
+export async function findWorktreeForBranch(cwd, branch) {
+    const target = branch.startsWith("refs/heads/") ? branch : `refs/heads/${branch}`;
+    const worktrees = await listWorktrees(cwd);
+    const match = worktrees.find((entry) => entry.branch === branch || entry.branch === target || entry.branch === `refs/heads/${branch}`);
+    return match ? match.path : null;
+}
+function stripBranchRef(branch) {
+    return branch.startsWith("refs/heads/") ? branch.slice("refs/heads/".length) : branch;
+}
+export function parseTaskIdFromBranch(prefix, branch) {
+    const normalized = stripBranchRef(branch);
+    if (!normalized.startsWith(`${prefix}/`))
+        return null;
+    const rest = normalized.slice(prefix.length + 1);
+    const taskId = rest.split("/", 1)[0];
+    return taskId ? taskId.trim() : null;
+}
+export async function gitListTaskBranches(cwd, prefix) {
+    const { stdout } = await execFileAsync("git", ["for-each-ref", "--format=%(refname:short)", `refs/heads/${prefix}`], { cwd, env: gitEnv() });
+    return stdout
+        .split("\n")
+        .map((line) => line.trim())
+        .filter((line) => line.length > 0);
+}

package/dist/commands/shared/git.d.ts

@@ -0,0 +1,4 @@
+import { execFile } from "node:child_process";
+export declare const execFileAsync: typeof execFile.__promisify__;
+export declare function gitEnv(): NodeJS.ProcessEnv;
+//# sourceMappingURL=git.d.ts.map

package/dist/commands/shared/git.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/git.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAG9C,eAAO,MAAM,aAAa,+BAAsB,CAAC;AAGjD,wBAAgB,MAAM,IAAI,MAAM,CAAC,UAAU,CAS1C"}

package/dist/commands/shared/git.js

@@ -0,0 +1,14 @@
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+export const execFileAsync = promisify(execFile);
+// Avoid leaking worktree-index overrides into git subprocesses.
+export function gitEnv() {
+    const env = { ...process.env };
+    delete env.GIT_DIR;
+    delete env.GIT_WORK_TREE;
+    delete env.GIT_COMMON_DIR;
+    delete env.GIT_INDEX_FILE;
+    delete env.GIT_OBJECT_DIRECTORY;
+    delete env.GIT_ALTERNATE_OBJECT_DIRECTORIES;
+    return env;
+}

package/dist/commands/shared/network-approval.d.ts

@@ -0,0 +1,8 @@
+import type { AgentplaneConfig } from "@agentplaneorg/core";
+export declare function ensureNetworkApproved(opts: {
+    config: AgentplaneConfig;
+    yes: boolean;
+    reason: string;
+    interactive?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=network-approval.d.ts.map

package/dist/commands/shared/network-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"network-approval.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/network-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAK5D,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB"}

package/dist/commands/shared/network-approval.js

@@ -0,0 +1,25 @@
+import { promptYesNo } from "../../cli/prompts.js";
+import { CliError } from "../../shared/errors.js";
+export async function ensureNetworkApproved(opts) {
+    const requireNetwork = opts.config.agents?.approvals.require_network === true;
+    if (!requireNetwork)
+        return;
+    if (opts.yes)
+        return;
+    const interactive = opts.interactive ?? Boolean(process.stdin.isTTY);
+    if (!interactive) {
+        throw new CliError({
+            exitCode: 3,
+            code: "E_VALIDATION",
+            message: `Network access requires explicit approval (pass --yes): ${opts.reason}`,
+        });
+    }
+    const approved = await promptYesNo(`Allow network access? ${opts.reason}`, false);
+    if (!approved) {
+        throw new CliError({
+            exitCode: 3,
+            code: "E_VALIDATION",
+            message: `Network access denied: ${opts.reason}`,
+        });
+    }
+}

package/dist/commands/shared/path.d.ts

@@ -0,0 +1,3 @@
+export declare function resolvePathFallback(filePath: string): Promise<string>;
+export declare function isPathWithin(parent: string, candidate: string): boolean;
+//# sourceMappingURL=path.d.ts.map