agentplane 0.1.9 → 0.2.1

package/dist/commands/scenario.js

@@ -1,501 +1 @@
-import { execFile } from "node:child_process";
-import { mkdir, readdir } from "node:fs/promises";
-import path from "node:path";
-import { promisify } from "node:util";
-import { atomicWriteFile, resolveProject } from "@agentplaneorg/core";
-import { mapCoreError } from "../cli/error-map.js";
-import { fileExists, getPathKind } from "../cli/fs-utils.js";
-import { emptyStateMessage, usageMessage } from "../cli/output.js";
-import { CliError } from "../shared/errors.js";
-import { dedupeStrings } from "../shared/strings.js";
-import { RECIPES_DIR_NAME, RECIPES_SCENARIOS_DIR_NAME, RECIPES_SCENARIOS_INDEX_NAME, normalizeScenarioToolStep, readInstalledRecipesFile, readRecipeManifest, readScenarioDefinition, readScenarioIndex, resolveInstalledRecipeDir, resolveInstalledRecipesPath, resolveProjectRecipesCacheDir, } from "./recipes.js";
-const execFileAsync = promisify(execFile);
-const SCENARIO_USAGE = "Usage: agentplane scenario <list|info|run> [args]";
-const SCENARIO_USAGE_EXAMPLE = "agentplane scenario list";
-const SCENARIO_INFO_USAGE = "Usage: agentplane scenario info <recipe:scenario>";
-const SCENARIO_INFO_USAGE_EXAMPLE = "agentplane scenario info viewer:demo";
-const SCENARIO_RUN_USAGE = "Usage: agentplane scenario run <recipe:scenario>";
-const SCENARIO_RUN_USAGE_EXAMPLE = "agentplane scenario run viewer:demo";
-const SCENARIO_REPORT_NAME = "report.json";
-const SENSITIVE_ARG_FLAGS = new Set([
-    "--token",
-    "--secret",
-    "--password",
-    "--api-key",
-    "--apikey",
-    "--access-key",
-    "--client-secret",
-    "--auth",
-    "--authorization",
-    "--bearer",
-]);
-function redactArgs(args) {
-    const out = [...args];
-    for (let i = 0; i < out.length; i++) {
-        const arg = out[i];
-        if (!arg)
-            continue;
-        const eqIndex = arg.indexOf("=");
-        const flag = eqIndex === -1 ? arg : arg.slice(0, eqIndex);
-        if (!SENSITIVE_ARG_FLAGS.has(flag))
-            continue;
-        if (eqIndex !== -1) {
-            out[i] = `${flag}=<redacted>`;
-            continue;
-        }
-        out[i] = flag;
-        if (i + 1 < out.length && !out[i + 1]?.startsWith("-")) {
-            out[i + 1] = "<redacted>";
-            i += 1;
-        }
-    }
-    return out;
-}
-function isNotGitRepoError(err) {
-    if (err instanceof Error) {
-        return err.message.startsWith("Not a git repository");
-    }
-    return false;
-}
-async function getGitDiffSummary(cwd) {
-    try {
-        const [diff, staged, status] = await Promise.all([
-            execFileAsync("git", ["diff", "--stat"], { cwd }),
-            execFileAsync("git", ["diff", "--stat", "--staged"], { cwd }),
-            execFileAsync("git", ["status", "--porcelain"], { cwd }),
-        ]);
-        const diffStat = String(diff.stdout).trim();
-        const stagedStat = String(staged.stdout).trim();
-        const statusLines = String(status.stdout).trim();
-        return {
-            diff_stat: diffStat || undefined,
-            staged_stat: stagedStat || undefined,
-            status: statusLines
-                ? statusLines
-                    .split("\n")
-                    .map((line) => line.trim())
-                    .filter(Boolean)
-                : [],
-        };
-    }
-    catch (err) {
-        if (isNotGitRepoError(err))
-            return undefined;
-        return undefined;
-    }
-}
-function collectScenarioEnvKeys(stepEnv) {
-    return dedupeStrings([
-        ...Object.keys(stepEnv ?? {}),
-        "AGENTPLANE_RUN_DIR",
-        "AGENTPLANE_STEP_DIR",
-        "AGENTPLANE_RECIPES_CACHE_DIR",
-        "AGENTPLANE_RECIPE_ID",
-        "AGENTPLANE_SCENARIO_ID",
-        "AGENTPLANE_TOOL_ID",
-    ]);
-}
-async function writeScenarioReport(opts) {
-    const report = {
-        schema_version: 1,
-        recipe: opts.recipeId,
-        scenario: opts.scenarioId,
-        run_id: opts.runId,
-        started_at: opts.startedAt,
-        ended_at: new Date().toISOString(),
-        status: opts.status,
-        steps: opts.steps,
-        git: opts.gitSummary,
-    };
-    await atomicWriteFile(path.join(opts.runDir, SCENARIO_REPORT_NAME), `${JSON.stringify(report, null, 2)}\n`, "utf8");
-}
-async function cmdScenarioList(opts) {
-    try {
-        const installed = await readInstalledRecipesFile(resolveInstalledRecipesPath());
-        const entries = [];
-        for (const recipe of installed.recipes) {
-            const recipeDir = resolveInstalledRecipeDir(recipe);
-            const scenariosDir = path.join(recipeDir, RECIPES_SCENARIOS_DIR_NAME);
-            if ((await getPathKind(scenariosDir)) === "dir") {
-                const files = await readdir(scenariosDir);
-                const jsonFiles = files.filter((entry) => entry.toLowerCase().endsWith(".json")).toSorted();
-                for (const file of jsonFiles) {
-                    const scenario = await readScenarioDefinition(path.join(scenariosDir, file));
-                    entries.push({ recipeId: recipe.id, scenarioId: scenario.id, summary: scenario.summary });
-                }
-                continue;
-            }
-            const scenariosIndexPath = path.join(recipeDir, RECIPES_SCENARIOS_INDEX_NAME);
-            if (await fileExists(scenariosIndexPath)) {
-                const index = await readScenarioIndex(scenariosIndexPath);
-                for (const scenario of index.scenarios) {
-                    entries.push({
-                        recipeId: recipe.id,
-                        scenarioId: scenario.id,
-                        summary: scenario.summary,
-                    });
-                }
-            }
-        }
-        if (entries.length === 0) {
-            process.stdout.write(`${emptyStateMessage("scenarios", "Install a recipe to add scenarios.")}\n`);
-            return 0;
-        }
-        const sorted = entries.toSorted((a, b) => {
-            const byRecipe = a.recipeId.localeCompare(b.recipeId);
-            if (byRecipe !== 0)
-                return byRecipe;
-            return a.scenarioId.localeCompare(b.scenarioId);
-        });
-        for (const entry of sorted) {
-            process.stdout.write(`${entry.recipeId}:${entry.scenarioId} - ${entry.summary ?? "No summary"}\n`);
-        }
-        return 0;
-    }
-    catch (err) {
-        if (err instanceof CliError)
-            throw err;
-        throw mapCoreError(err, { command: "scenario list", root: opts.rootOverride ?? null });
-    }
-}
-async function cmdScenarioInfo(opts) {
-    try {
-        const [recipeId, scenarioId] = opts.id.split(":");
-        if (!recipeId || !scenarioId) {
-            throw new CliError({
-                exitCode: 2,
-                code: "E_USAGE",
-                message: usageMessage(SCENARIO_INFO_USAGE, SCENARIO_INFO_USAGE_EXAMPLE),
-            });
-        }
-        const installed = await readInstalledRecipesFile(resolveInstalledRecipesPath());
-        const entry = installed.recipes.find((recipe) => recipe.id === recipeId);
-        if (!entry) {
-            throw new CliError({
-                exitCode: 5,
-                code: "E_IO",
-                message: `Recipe not installed: ${recipeId}`,
-            });
-        }
-        const recipeDir = resolveInstalledRecipeDir(entry);
-        const scenariosDir = path.join(recipeDir, RECIPES_SCENARIOS_DIR_NAME);
-        let scenario = null;
-        if ((await getPathKind(scenariosDir)) === "dir") {
-            const files = await readdir(scenariosDir);
-            const jsonFiles = files.filter((file) => file.toLowerCase().endsWith(".json")).toSorted();
-            for (const file of jsonFiles) {
-                const candidate = await readScenarioDefinition(path.join(scenariosDir, file));
-                if (candidate.id === scenarioId) {
-                    scenario = candidate;
-                    break;
-                }
-            }
-        }
-        let summary;
-        if (!scenario) {
-            const scenariosIndexPath = path.join(recipeDir, RECIPES_SCENARIOS_INDEX_NAME);
-            if (await fileExists(scenariosIndexPath)) {
-                const index = await readScenarioIndex(scenariosIndexPath);
-                const entrySummary = index.scenarios.find((item) => item.id === scenarioId);
-                summary = entrySummary?.summary;
-            }
-        }
-        if (!scenario && !summary) {
-            throw new CliError({
-                exitCode: 5,
-                code: "E_IO",
-                message: `Scenario not found: ${recipeId}:${scenarioId}`,
-            });
-        }
-        process.stdout.write(`Scenario: ${recipeId}:${scenarioId}\n`);
-        if (summary)
-            process.stdout.write(`Summary: ${summary}\n`);
-        if (!scenario) {
-            process.stdout.write("Details: Scenario definition not found in recipe.\n");
-            return 0;
-        }
-        if (scenario.summary)
-            process.stdout.write(`Summary: ${scenario.summary}\n`);
-        if (scenario.description)
-            process.stdout.write(`Description: ${scenario.description}\n`);
-        process.stdout.write(`Goal: ${scenario.goal}\n`);
-        process.stdout.write(`Inputs: ${JSON.stringify(scenario.inputs, null, 2)}\n`);
-        process.stdout.write(`Outputs: ${JSON.stringify(scenario.outputs, null, 2)}\n`);
-        process.stdout.write("Steps:\n");
-        let stepIndex = 1;
-        for (const step of scenario.steps) {
-            process.stdout.write(`  ${stepIndex}. ${JSON.stringify(step)}\n`);
-            stepIndex += 1;
-        }
-        return 0;
-    }
-    catch (err) {
-        if (err instanceof CliError)
-            throw err;
-        throw mapCoreError(err, { command: "scenario info", root: opts.rootOverride ?? null });
-    }
-}
-async function executeRecipeTool(opts) {
-    try {
-        const command = opts.runtime === "node" ? "node" : "bash";
-        const { stdout, stderr } = await execFileAsync(command, [opts.entrypoint, ...opts.args], {
-            cwd: opts.cwd,
-            env: opts.env,
-        });
-        return { exitCode: 0, stdout: String(stdout), stderr: String(stderr) };
-    }
-    catch (err) {
-        let execErr = null;
-        if (err && typeof err === "object") {
-            execErr = err;
-        }
-        const exitCode = typeof execErr?.code === "number" ? execErr.code : 1;
-        return {
-            exitCode,
-            stdout: String(execErr?.stdout ?? ""),
-            stderr: String(execErr?.stderr ?? ""),
-        };
-    }
-}
-function sanitizeRunId(value) {
-    return value.replaceAll(/[^a-zA-Z0-9._-]/g, "_");
-}
-async function cmdScenarioRun(opts) {
-    try {
-        const resolved = await resolveProject({
-            cwd: opts.cwd,
-            rootOverride: opts.rootOverride ?? null,
-        });
-        const [recipeId, scenarioId] = opts.id.split(":");
-        if (!recipeId || !scenarioId) {
-            throw new CliError({
-                exitCode: 2,
-                code: "E_USAGE",
-                message: usageMessage(SCENARIO_RUN_USAGE, SCENARIO_RUN_USAGE_EXAMPLE),
-            });
-        }
-        const installed = await readInstalledRecipesFile(resolveInstalledRecipesPath());
-        const entry = installed.recipes.find((recipe) => recipe.id === recipeId);
-        if (!entry) {
-            throw new CliError({
-                exitCode: 5,
-                code: "E_IO",
-                message: `Recipe not installed: ${recipeId}`,
-            });
-        }
-        const recipeDir = resolveInstalledRecipeDir(entry);
-        const manifestPath = path.join(recipeDir, "manifest.json");
-        const manifest = await readRecipeManifest(manifestPath);
-        const scenariosDir = path.join(recipeDir, RECIPES_SCENARIOS_DIR_NAME);
-        if ((await getPathKind(scenariosDir)) !== "dir") {
-            throw new CliError({
-                exitCode: 5,
-                code: "E_IO",
-                message: `Scenario definitions not found for recipe: ${recipeId}`,
-            });
-        }
-        let scenario = null;
-        const files = await readdir(scenariosDir);
-        const jsonFiles = files.filter((file) => file.toLowerCase().endsWith(".json")).toSorted();
-        for (const file of jsonFiles) {
-            const candidate = await readScenarioDefinition(path.join(scenariosDir, file));
-            if (candidate.id === scenarioId) {
-                scenario = candidate;
-                break;
-            }
-        }
-        if (!scenario) {
-            throw new CliError({
-                exitCode: 5,
-                code: "E_IO",
-                message: `Scenario not found: ${recipeId}:${scenarioId}`,
-            });
-        }
-        const runsRoot = path.join(resolved.agentplaneDir, RECIPES_DIR_NAME, recipeId, "runs");
-        await mkdir(runsRoot, { recursive: true });
-        const recipesCacheDir = resolveProjectRecipesCacheDir(resolved);
-        await mkdir(recipesCacheDir, { recursive: true });
-        const runStartedAt = new Date().toISOString();
-        const runId = `${new Date()
-            .toISOString()
-            .replaceAll(":", "-")
-            .replaceAll(".", "-")}-${sanitizeRunId(scenarioId)}`;
-        const runDir = path.join(runsRoot, runId);
-        await mkdir(runDir, { recursive: true });
-        const stepsMeta = [];
-        const stepsReport = [];
-        for (let index = 0; index < scenario.steps.length; index++) {
-            const step = normalizeScenarioToolStep(scenario.steps[index], `${recipeId}:${scenarioId}`);
-            const toolEntry = manifest.tools?.find((tool) => tool?.id === step.tool);
-            if (!toolEntry) {
-                throw new CliError({
-                    exitCode: 5,
-                    code: "E_IO",
-                    message: `Tool not found in recipe manifest: ${step.tool}`,
-                });
-            }
-            const runtime = toolEntry.runtime === "node" || toolEntry.runtime === "bash" ? toolEntry.runtime : "";
-            const entrypoint = typeof toolEntry.entrypoint === "string" ? toolEntry.entrypoint : "";
-            if (!runtime || !entrypoint) {
-                throw new CliError({
-                    exitCode: 3,
-                    code: "E_VALIDATION",
-                    message: `Tool entry is missing runtime/entrypoint: ${step.tool}`,
-                });
-            }
-            if (Array.isArray(toolEntry.permissions) && toolEntry.permissions.length > 0) {
-                process.stdout.write(`Warning: tool ${toolEntry.id} declares permissions: ${toolEntry.permissions.join(", ")}\n`);
-            }
-            const entrypointPath = path.join(recipeDir, entrypoint);
-            if (!(await fileExists(entrypointPath))) {
-                throw new CliError({
-                    exitCode: 5,
-                    code: "E_IO",
-                    message: `Tool entrypoint not found: ${entrypoint}`,
-                });
-            }
-            const stepDir = path.join(runDir, `step-${index + 1}-${sanitizeRunId(step.tool)}`);
-            await mkdir(stepDir, { recursive: true });
-            const stepEnvKeys = collectScenarioEnvKeys(step.env);
-            const env = {
-                ...process.env,
-                ...step.env,
-                AGENTPLANE_RUN_DIR: runDir,
-                AGENTPLANE_STEP_DIR: stepDir,
-                AGENTPLANE_RECIPES_CACHE_DIR: recipesCacheDir,
-                AGENTPLANE_RECIPE_ID: recipeId,
-                AGENTPLANE_SCENARIO_ID: scenarioId,
-                AGENTPLANE_TOOL_ID: step.tool,
-            };
-            const startedAt = Date.now();
-            const result = await executeRecipeTool({
-                runtime,
-                entrypoint: entrypointPath,
-                args: step.args,
-                cwd: recipeDir,
-                env,
-            });
-            const durationMs = Date.now() - startedAt;
-            await atomicWriteFile(path.join(stepDir, "stdout.log"), result.stdout, "utf8");
-            await atomicWriteFile(path.join(stepDir, "stderr.log"), result.stderr, "utf8");
-            stepsMeta.push({
-                tool: step.tool,
-                runtime,
-                entrypoint,
-                exitCode: result.exitCode,
-                duration_ms: durationMs,
-            });
-            stepsReport.push({
-                step: index + 1,
-                tool: step.tool,
-                runtime,
-                entrypoint,
-                args: redactArgs(step.args),
-                env_keys: stepEnvKeys,
-                exit_code: result.exitCode,
-                duration_ms: durationMs,
-            });
-            if (result.exitCode !== 0) {
-                const gitSummary = await getGitDiffSummary(resolved.gitRoot);
-                await writeScenarioReport({
-                    runDir,
-                    recipeId,
-                    scenarioId,
-                    runId,
-                    startedAt: runStartedAt,
-                    status: "failed",
-                    steps: stepsReport,
-                    gitSummary,
-                });
-                await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
-                    recipe: recipeId,
-                    scenario: scenarioId,
-                    run_id: runId,
-                    steps: stepsMeta,
-                }, null, 2)}\n`, "utf8");
-                throw new CliError({
-                    exitCode: result.exitCode,
-                    code: "E_INTERNAL",
-                    message: `Scenario step failed: ${step.tool}`,
-                });
-            }
-        }
-        const gitSummary = await getGitDiffSummary(resolved.gitRoot);
-        await writeScenarioReport({
-            runDir,
-            recipeId,
-            scenarioId,
-            runId,
-            startedAt: runStartedAt,
-            status: "success",
-            steps: stepsReport,
-            gitSummary,
-        });
-        await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
-            recipe: recipeId,
-            scenario: scenarioId,
-            run_id: runId,
-            steps: stepsMeta,
-        }, null, 2)}\n`, "utf8");
-        process.stdout.write(`Run artifacts: ${path.relative(resolved.gitRoot, runDir)}\n`);
-        return 0;
-    }
-    catch (err) {
-        if (err instanceof CliError)
-            throw err;
-        throw mapCoreError(err, { command: "scenario run", root: opts.rootOverride ?? null });
-    }
-}
-export async function cmdScenario(opts) {
-    const sub = opts.command;
-    if (!sub) {
-        throw new CliError({
-            exitCode: 2,
-            code: "E_USAGE",
-            message: usageMessage(SCENARIO_USAGE, SCENARIO_USAGE_EXAMPLE),
-        });
-    }
-    if (sub === "list") {
-        if (opts.args.length > 0) {
-            throw new CliError({
-                exitCode: 2,
-                code: "E_USAGE",
-                message: usageMessage(SCENARIO_USAGE, SCENARIO_USAGE_EXAMPLE),
-            });
-        }
-        return await cmdScenarioList({ cwd: opts.cwd, rootOverride: opts.rootOverride });
-    }
-    if (sub === "info") {
-        if (opts.args.length !== 1) {
-            throw new CliError({
-                exitCode: 2,
-                code: "E_USAGE",
-                message: usageMessage(SCENARIO_INFO_USAGE, SCENARIO_INFO_USAGE_EXAMPLE),
-            });
-        }
-        return await cmdScenarioInfo({
-            cwd: opts.cwd,
-            rootOverride: opts.rootOverride,
-            id: opts.args[0],
-        });
-    }
-    if (sub === "run") {
-        if (opts.args.length !== 1) {
-            throw new CliError({
-                exitCode: 2,
-                code: "E_USAGE",
-                message: usageMessage(SCENARIO_RUN_USAGE, SCENARIO_RUN_USAGE_EXAMPLE),
-            });
-        }
-        return await cmdScenarioRun({
-            cwd: opts.cwd,
-            rootOverride: opts.rootOverride,
-            id: opts.args[0],
-        });
-    }
-    throw new CliError({
-        exitCode: 2,
-        code: "E_USAGE",
-        message: usageMessage(SCENARIO_USAGE, SCENARIO_USAGE_EXAMPLE),
-    });
-}
+export { cmdScenarioInfoParsed, cmdScenarioListParsed, cmdScenarioRunParsed, } from "./scenario/impl/commands.js";

package/dist/commands/shared/git-context.d.ts

@@ -0,0 +1,23 @@
+export declare class GitContext {
+    readonly gitRoot: string;
+    private memo;
+    constructor(opts: {
+        gitRoot: string;
+    });
+    private statusPorcelainZ;
+    statusChangedPaths(): Promise<string[]>;
+    statusStagedPaths(): Promise<string[]>;
+    statusUnstagedTrackedPaths(): Promise<string[]>;
+    headCommit(): Promise<string>;
+    stage(paths: string[]): Promise<void>;
+    commit(opts: {
+        message: string;
+        body?: string;
+        env?: NodeJS.ProcessEnv;
+    }): Promise<void>;
+    headHashSubject(): Promise<{
+        hash: string;
+        subject: string;
+    }>;
+}
+//# sourceMappingURL=git-context.d.ts.map

package/dist/commands/shared/git-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-context.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/git-context.ts"],"names":[],"mappings":"AAyEA,qBAAa,UAAU;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAEzB,OAAO,CAAC,IAAI,CAGL;gBAEK,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE;YAIvB,gBAAgB;IAmBxB,kBAAkB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKvC,iBAAiB,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKtC,0BAA0B,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAKrD,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC;IAWvB,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAWrC,MAAM,CAAC,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAcxF,eAAe,IAAI,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAWpE"}

package/dist/commands/shared/git-context.js

@@ -0,0 +1,140 @@
+import { execFileAsync, gitEnv } from "./git.js";
+function uniqSorted(paths) {
+    return [...new Set(paths)].toSorted((a, b) => a.localeCompare(b));
+}
+function parsePorcelainV1Z(output) {
+    const text = Buffer.isBuffer(output) ? output.toString("utf8") : output;
+    const parts = text.split("\0").filter((p) => p.length > 0);
+    const changed = [];
+    const staged = [];
+    const unstagedTracked = [];
+    const untracked = [];
+    for (let i = 0; i < parts.length; i++) {
+        const entry = parts[i] ?? "";
+        if (entry.length < 3)
+            continue;
+        const x = entry[0] ?? " ";
+        const y = entry[1] ?? " ";
+        // Porcelain v1: `XY <path>` (or `XY <orig>` NUL `<path>` for renames/copies).
+        if (entry[2] !== " ")
+            continue;
+        const pathA = entry.slice(3);
+        if (!pathA)
+            continue;
+        if (x === "!" && y === "!") {
+            // Ignored file (`!!`): not a "changed path" for guard/staging semantics.
+            continue;
+        }
+        const isUntracked = x === "?" && y === "?";
+        if (isUntracked) {
+            changed.push(pathA);
+            untracked.push(pathA);
+            continue;
+        }
+        const isRenameOrCopy = x === "R" || x === "C";
+        if (isRenameOrCopy) {
+            const pathB = parts[i + 1] ?? "";
+            if (pathB) {
+                // Include both sides so allowlist staging can cover renames across prefixes.
+                changed.push(pathA, pathB);
+                staged.push(pathA, pathB);
+            }
+            else {
+                changed.push(pathA);
+                staged.push(pathA);
+            }
+            i++;
+            continue;
+        }
+        changed.push(pathA);
+        if (x !== " ")
+            staged.push(pathA);
+        if (y !== " ")
+            unstagedTracked.push(pathA);
+    }
+    return {
+        changedPaths: uniqSorted(changed),
+        stagedPaths: uniqSorted(staged),
+        unstagedTrackedPaths: uniqSorted(unstagedTracked),
+        untrackedPaths: uniqSorted(untracked),
+    };
+}
+export class GitContext {
+    gitRoot;
+    memo = {};
+    constructor(opts) {
+        this.gitRoot = opts.gitRoot;
+    }
+    async statusPorcelainZ() {
+        this.memo.status ??= (async () => {
+            // `--untracked-files=all` is required so allowlist staging can match individual files
+            // under untracked directories (tests + real-world "new task" flows).
+            const { stdout } = await execFileAsync("git", ["status", "--porcelain", "-z", "--untracked-files=all"], {
+                cwd: this.gitRoot,
+                env: gitEnv(),
+                encoding: "buffer",
+                maxBuffer: 10 * 1024 * 1024,
+            });
+            return parsePorcelainV1Z(stdout);
+        })();
+        return await this.memo.status;
+    }
+    async statusChangedPaths() {
+        const status = await this.statusPorcelainZ();
+        return status.changedPaths;
+    }
+    async statusStagedPaths() {
+        const status = await this.statusPorcelainZ();
+        return status.stagedPaths;
+    }
+    async statusUnstagedTrackedPaths() {
+        const status = await this.statusPorcelainZ();
+        return status.unstagedTrackedPaths;
+    }
+    headCommit() {
+        this.memo.headCommit ??= (async () => {
+            const { stdout } = await execFileAsync("git", ["rev-parse", "HEAD"], {
+                cwd: this.gitRoot,
+                env: gitEnv(),
+            });
+            return String(stdout).trim();
+        })();
+        return this.memo.headCommit;
+    }
+    async stage(paths) {
+        const unique = uniqSorted(paths.map((p) => p.trim()).filter(Boolean));
+        if (unique.length === 0)
+            return;
+        await execFileAsync("git", ["add", "-A", "--", ...unique], {
+            cwd: this.gitRoot,
+            env: gitEnv(),
+        });
+        // Invalidate memoized status: staging changes index state.
+        this.memo.status = undefined;
+    }
+    async commit(opts) {
+        const args = ["commit", "-m", opts.message];
+        if (opts.body)
+            args.push("-m", opts.body);
+        await execFileAsync("git", args, {
+            cwd: this.gitRoot,
+            env: opts.env ?? gitEnv(),
+            // Commit hooks can produce large output (lint/test logs).
+            maxBuffer: 50 * 1024 * 1024,
+        });
+        // Invalidate memoized values: commit updates HEAD and working tree state.
+        this.memo.status = undefined;
+        this.memo.headCommit = undefined;
+    }
+    async headHashSubject() {
+        const { stdout } = await execFileAsync("git", ["log", "-1", "--pretty=%H%x00%s"], {
+            cwd: this.gitRoot,
+            env: gitEnv(),
+            encoding: "buffer",
+            maxBuffer: 1024 * 1024,
+        });
+        const text = Buffer.isBuffer(stdout) ? stdout.toString("utf8") : String(stdout);
+        const [hash = "", subject = ""] = text.split("\0", 2);
+        return { hash: hash.trim(), subject: subject.trim() };
+    }
+}

package/dist/commands/shared/policy-deny.d.ts

@@ -0,0 +1,3 @@
+import type { PolicyResult } from "../../policy/types.js";
+export declare function throwIfPolicyDenied(res: PolicyResult): void;
+//# sourceMappingURL=policy-deny.d.ts.map

package/dist/commands/shared/policy-deny.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-deny.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/policy-deny.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAG1D,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,YAAY,GAAG,IAAI,CAS3D"}

package/dist/commands/shared/policy-deny.js

@@ -0,0 +1,12 @@
+import { CliError } from "../../shared/errors.js";
+export function throwIfPolicyDenied(res) {
+    if (res.ok)
+        return;
+    const messages = res.errors.map((e) => e.message).join("\n");
+    const chosen = res.errors.find((e) => e.code === "E_INTERNAL") ??
+        res.errors.find((e) => e.code === "E_USAGE") ??
+        res.errors[0];
+    if (!chosen)
+        return;
+    throw new CliError({ exitCode: chosen.exitCode, code: chosen.code, message: messages });
+}