agentplane 0.2.23 → 0.2.25

package/dist/commands/scenario/impl/commands.js

@@ -11,6 +11,15 @@ import { CliError } from "../../../shared/errors.js";
 import { RECIPES_DIR_NAME, RECIPES_SCENARIOS_DIR_NAME, RECIPES_SCENARIOS_INDEX_NAME, normalizeScenarioToolStep, readInstalledRecipesFile, readRecipeManifest, readScenarioDefinition, readScenarioIndex, resolveInstalledRecipeDir, resolveInstalledRecipesPath, resolveProjectRecipesCacheDir, } from "../../recipes.js";
 import { collectScenarioEnvKeys, getGitDiffSummary, redactArgs, writeScenarioReport, } from "./report.js";
 const execFileAsync = promisify(execFile);
+export function resolveRecipeToolInvocation(runtime, entrypoint, args) {
+    if (runtime === "node") {
+        return { command: "node", args: [entrypoint, ...args] };
+    }
+    return {
+        command: "bash",
+        args: [entrypoint, ...args],
+    };
+}
 export async function cmdScenarioListParsed(opts) {
     try {
         const installed = await readInstalledRecipesFile(resolveInstalledRecipesPath());
@@ -130,25 +139,46 @@ export async function cmdScenarioInfoParsed(opts) {
         throw mapCoreError(err, { command: "scenario info", root: opts.rootOverride ?? null });
     }
 }
-async function executeRecipeTool(opts) {
+export async function executeRecipeTool(opts) {
+    const { command, args } = resolveRecipeToolInvocation(opts.runtime, opts.entrypoint, opts.args);
     try {
-        const command = opts.runtime === "node" ? "node" : "bash";
-        const { stdout, stderr } = await execFileAsync(command, [opts.entrypoint, ...opts.args], {
+        const { stdout, stderr } = await execFileAsync(command, args, {
             cwd: opts.cwd,
             env: opts.env,
         });
         return { exitCode: 0, stdout: String(stdout), stderr: String(stderr) };
     }
     catch (err) {
+        const rawCode = err && typeof err === "object" && "code" in err
+            ? err.code
+            : undefined;
+        const code = typeof rawCode === "number" ? rawCode : undefined;
+        const isCommandNotFound = rawCode === "ENOENT" || code === 127;
         let execErr = null;
         if (err && typeof err === "object") {
             execErr = err;
         }
         const exitCode = typeof execErr?.code === "number" ? execErr.code : 1;
+        let stderrText = String(execErr?.stderr ?? "");
+        const isMissingNodeEntrypoint = command === "node" &&
+            /Cannot find module/i.test(stderrText) &&
+            (stderrText.includes(opts.entrypoint) || stderrText.includes(`${opts.entrypoint}.js`));
+        if (isMissingNodeEntrypoint && !isCommandNotFound) {
+            const runtimeLabel = opts.entrypoint.replace(/\.(js|mjs|cjs)$/, "");
+            stderrText = `Runtime command not found: ${runtimeLabel}`;
+            return {
+                exitCode: 1,
+                stdout: "",
+                stderr: stderrText,
+            };
+        }
+        if (isCommandNotFound && !stderrText) {
+            stderrText = `Runtime command not found: ${command}`;
+        }
         return {
             exitCode,
             stdout: String(execErr?.stdout ?? ""),
-            stderr: String(execErr?.stderr ?? ""),
+            stderr: stderrText,
         };
     }
 }
@@ -223,7 +253,9 @@ export async function cmdScenarioRunParsed(opts) {
                     message: `Tool not found in recipe manifest: ${step.tool}`,
                 });
             }
-            const runtime = toolEntry.runtime === "node" || toolEntry.runtime === "bash" ? toolEntry.runtime : "";
+            const runtime = toolEntry.runtime === "node" || toolEntry.runtime === "bash"
+                ? toolEntry.runtime
+                : "";
             const entrypoint = typeof toolEntry.entrypoint === "string" ? toolEntry.entrypoint : "";
             if (!runtime || !entrypoint) {
                 throw new CliError({

package/dist/commands/shared/pr-meta.d.ts

@@ -11,6 +11,11 @@ export type PrMeta = {
         command?: string;
     };
 };
+export type ShellInvocation = {
+    command: string;
+    args: string[];
+};
+export declare function resolveShellInvocation(command: string): ShellInvocation;
 export declare function parsePrMeta(raw: string, taskId: string): PrMeta;
 export declare function extractLastVerifiedSha(logText: string): string | null;
 export declare function appendVerifyLog(logPath: string, header: string, content: string): Promise<void>;

package/dist/commands/shared/pr-meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr-meta.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/pr-meta.ts"],"names":[],"mappings":"AAaA,MAAM,MAAM,MAAM,GAAG;IACnB,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE,CAAC;AAEF,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAc/D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQrE;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAoBD"}
+{"version":3,"file":"pr-meta.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/pr-meta.ts"],"names":[],"mappings":"AAcA,MAAM,MAAM,MAAM,GAAG;IACnB,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAQvE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAc/D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQrE;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAqBD"}

package/dist/commands/shared/pr-meta.js

@@ -1,4 +1,5 @@
 import { mkdir, writeFile } from "node:fs/promises";
+import os from "node:os";
 import path from "node:path";
 import { execFileAsync } from "./git.js";
 function isRecord(value) {
@@ -7,6 +8,14 @@ function isRecord(value) {
 function isIsoDate(value) {
     return typeof value === "string" && !Number.isNaN(Date.parse(value));
 }
+export function resolveShellInvocation(command) {
+    if (os.platform() === "win32") {
+        const rawComspec = process.env.ComSpec ?? process.env.COMSPEC;
+        const shellCommand = rawComspec && rawComspec !== "undefined" && rawComspec !== "null" ? rawComspec : "cmd.exe";
+        return { command: shellCommand, args: ["/d", "/s", "/c", command] };
+    }
+    return { command: "sh", args: ["-lc", command] };
+}
 export function parsePrMeta(raw, taskId) {
     let parsed;
     try {
@@ -46,8 +55,9 @@ export async function appendVerifyLog(logPath, header, content) {
     await writeFile(logPath, `${lines.join("\n")}\n`, { flag: "a" });
 }
 export async function runShellCommand(command, cwd) {
+    const invocation = resolveShellInvocation(command);
     try {
-        const { stdout, stderr } = await execFileAsync("sh", ["-lc", command], {
+        const { stdout, stderr } = await execFileAsync(invocation.command, invocation.args, {
             cwd,
             env: process.env,
             maxBuffer: 10 * 1024 * 1024,

package/dist/commands/start.spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.spec.d.ts","sourceRoot":"","sources":["../../src/commands/start.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKvD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,WAAW,CA0H9C,CAAC"}
+{"version":3,"file":"start.spec.d.ts","sourceRoot":"","sources":["../../src/commands/start.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AASvD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,WAAW,CA8I9C,CAAC"}

package/dist/commands/start.spec.js

@@ -1,4 +1,5 @@
 import { usageError } from "../cli/spec/errors.js";
+import { findRepoWideAllowPrefixes, repoWideAllowPrefixMessage, } from "../shared/allow-prefix-policy.js";
 import { toStringList } from "../cli/spec/parse-utils.js";
 export const startSpec = {
     id: ["start"],
@@ -44,13 +45,14 @@ export const startSpec = {
             name: "commit-allow",
             valueHint: "<path-prefix>",
             repeatable: true,
-            description: "Repeatable. Allowlist path prefixes to stage for the status commit (used with --commit-from-comment).",
+            description: "Repeatable. Allowlist path prefixes to stage for the status commit (used with --commit-from-comment). Use minimal prefixes; '.' is rejected.",
         },
         {
             kind: "boolean",
             name: "commit-auto-allow",
             default: false,
-            description: "Auto-allow inferred allowlist paths if none are provided (used with --commit-from-comment).",
+            description: "Deprecated. Disabled for safety; pass explicit --commit-allow prefixes.",
+            deprecated: "disabled",
         },
         {
             kind: "boolean",
@@ -99,10 +101,29 @@ export const startSpec = {
     validateRaw: (raw) => {
         const author = typeof raw.opts.author === "string" ? raw.opts.author.trim() : "";
         const body = typeof raw.opts.body === "string" ? raw.opts.body.trim() : "";
+        const commitAllow = toStringList(raw.opts["commit-allow"]);
         if (!author)
             throw usageError({ spec: startSpec, message: "Invalid value for --author: empty." });
         if (!body)
             throw usageError({ spec: startSpec, message: "Invalid value for --body: empty." });
+        if (findRepoWideAllowPrefixes(commitAllow).length > 0) {
+            throw usageError({
+                spec: startSpec,
+                message: repoWideAllowPrefixMessage("--commit-allow"),
+            });
+        }
+        if (raw.opts["commit-auto-allow"] === true) {
+            throw usageError({
+                spec: startSpec,
+                message: "--commit-auto-allow is disabled; pass explicit --commit-allow <path-prefix>.",
+            });
+        }
+        if (raw.opts["commit-from-comment"] === true && commitAllow.length === 0) {
+            throw usageError({
+                spec: startSpec,
+                message: "--commit-from-comment requires --commit-allow <path-prefix> (tip: `agentplane guard suggest-allow --format args`).",
+            });
+        }
     },
     parse: (raw) => ({
         taskId: typeof raw.args["task-id"] === "string" ? raw.args["task-id"] : "",

package/dist/commands/task/finish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finish.d.ts","sourceRoot":"","sources":["../../../src/commands/task/finish.ts"],"names":[],"mappings":"AAUA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AAmCnC,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,OAAO,CAAC;IAClC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqUlB"}
+{"version":3,"file":"finish.d.ts","sourceRoot":"","sources":["../../../src/commands/task/finish.ts"],"names":[],"mappings":"AAUA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AAmCnC,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,OAAO,CAAC;IAClC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2VlB"}

package/dist/commands/task/finish.js

@@ -40,13 +40,7 @@ export async function cmdFinish(opts) {
         }
         const { prefix, min_chars: minChars } = ctx.config.tasks.comments.verified;
         requireStructuredComment(opts.body, prefix, minChars);
-        const autoStatusCommit = (ctx.config.finish_auto_status_commit === true ||
-            ctx.config.commit_automation === "finish_only") &&
-            !opts.commitFromComment &&
-            !opts.statusCommit &&
-            opts.closeCommit !== true &&
-            opts.taskIds.length === 1;
-        const statusCommitRequested = opts.statusCommit || autoStatusCommit;
+        const statusCommitRequested = opts.statusCommit;
         if ((opts.commitFromComment || statusCommitRequested) && opts.taskIds.length !== 1) {
             throw new CliError({
                 exitCode: 2,
@@ -76,6 +70,34 @@ export async function cmdFinish(opts) {
                 message: "--commit-from-comment/--status-commit requires exactly one task id",
             });
         }
+        if (opts.commitAutoAllow) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--commit-auto-allow is disabled; pass explicit --commit-allow <path-prefix>.",
+            });
+        }
+        if (opts.statusCommitAutoAllow) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--status-commit-auto-allow is disabled; pass explicit --status-commit-allow <path-prefix>.",
+            });
+        }
+        if (opts.commitFromComment && opts.commitAllow.length === 0) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--commit-from-comment requires --commit-allow <path-prefix>",
+            });
+        }
+        if (statusCommitRequested && opts.statusCommitAllow.length === 0) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--status-commit requires --status-commit-allow <path-prefix>",
+            });
+        }
         const gitRoot = ctx.resolvedProject.gitRoot;
         const commitInfo = opts.commit
             ? await readCommitInfo(gitRoot, opts.commit)
@@ -168,7 +190,7 @@ export async function cmdFinish(opts) {
             enforceStatusCommitPolicy({
                 policy: ctx.config.status_commit_policy,
                 action: "finish",
-                confirmed: opts.confirmStatusCommit || autoStatusCommit,
+                confirmed: opts.confirmStatusCommit,
                 quiet: opts.quiet,
                 statusFrom: primaryStatusFrom ?? "UNKNOWN",
                 statusTo: "DONE",
@@ -208,7 +230,7 @@ export async function cmdFinish(opts) {
                 formattedComment: formatCommentBodyForCommit(opts.body, ctx.config),
                 emoji: opts.commitEmoji ?? defaultCommitEmojiForStatus("DONE"),
                 allow: opts.commitAllow,
-                autoAllow: opts.commitAutoAllow || opts.commitAllow.length === 0,
+                autoAllow: false,
                 allowTasks: opts.commitAllowTasks,
                 requireClean: opts.commitRequireClean,
                 quiet: opts.quiet,
@@ -269,7 +291,7 @@ export async function cmdFinish(opts) {
                 formattedComment: formatCommentBodyForCommit(opts.body, ctx.config),
                 emoji: opts.statusCommitEmoji ?? defaultCommitEmojiForStatus("DONE"),
                 allow: opts.statusCommitAllow,
-                autoAllow: opts.statusCommitAutoAllow || opts.statusCommitAllow.length === 0,
+                autoAllow: false,
                 allowTasks: true,
                 requireClean: opts.statusCommitRequireClean,
                 quiet: opts.quiet,

package/dist/commands/task/new.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"new.d.ts","sourceRoot":"","sources":["../../../src/commands/task/new.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAQpF,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC5C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAyBF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsElB"}
+{"version":3,"file":"new.d.ts","sourceRoot":"","sources":["../../../src/commands/task/new.ts"],"names":[],"mappings":"AAMA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AASpF,MAAM,MAAM,aAAa,GAAG;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,KAAK,GAAG,QAAQ,GAAG,KAAK,GAAG,MAAM,CAAC;IAC5C,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB,CAAC;AAuIF,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,aAAa,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgFlB"}

package/dist/commands/task/new.js

@@ -1,15 +1,112 @@
+import { ensureDocSections, setMarkdownSection } from "@agentplaneorg/core";
 import { mapBackendError } from "../../cli/error-map.js";
 import { backendNotSupportedMessage, warnMessage } from "../../cli/output.js";
 import { CliError } from "../../shared/errors.js";
 import { loadCommandContext } from "../shared/task-backend.js";
-import { nowIso, requiresVerifyStepsByPrimary, resolvePrimaryTag, warnIfUnknownOwner, } from "./shared.js";
-function buildDefaultVerifyStepsDoc(opts) {
+import { ensureTaskDependsOnGraphIsAcyclic, nowIso, requiresVerifyStepsByPrimary, resolvePrimaryTag, warnIfUnknownOwner, } from "./shared.js";
+function dedupeTrimmed(values) {
+    const seen = new Set();
+    const out = [];
+    for (const raw of values) {
+        const value = String(raw ?? "").trim();
+        if (!value || seen.has(value))
+            continue;
+        seen.add(value);
+        out.push(value);
+    }
+    return out;
+}
+function sanitizeTaskNewParsed(p) {
+    const title = p.title.trim();
+    if (!title)
+        throw new CliError({
+            exitCode: 2,
+            code: "E_USAGE",
+            message: "Invalid value for --title: empty.",
+        });
+    const description = p.description.trim();
+    if (!description) {
+        throw new CliError({
+            exitCode: 2,
+            code: "E_USAGE",
+            message: "Invalid value for --description: empty.",
+        });
+    }
+    const owner = p.owner.trim();
+    if (!owner)
+        throw new CliError({
+            exitCode: 2,
+            code: "E_USAGE",
+            message: "Invalid value for --owner: empty.",
+        });
+    const tags = dedupeTrimmed(p.tags);
+    if (tags.length === 0) {
+        throw new CliError({
+            exitCode: 2,
+            code: "E_USAGE",
+            message: "Invalid value for --tag: provide at least one non-empty tag.",
+        });
+    }
+    const dependsOn = dedupeTrimmed(p.dependsOn);
+    const verify = dedupeTrimmed(p.verify);
+    return { ...p, title, description, owner, tags, dependsOn, verify };
+}
+function insertMarkdownSectionBefore(opts) {
+    const normalized = opts.body.replaceAll("\r\n", "\n");
+    if (normalized.includes(`## ${opts.section}`)) {
+        return setMarkdownSection(normalized, opts.section, opts.text);
+    }
+    const lines = normalized.split("\n");
+    const beforeHeading = `## ${opts.beforeSection}`;
+    const beforeIdx = lines.findIndex((line) => line.trim() === beforeHeading);
+    if (beforeIdx === -1)
+        return setMarkdownSection(normalized, opts.section, opts.text);
+    const textLines = opts.text.replaceAll("\r\n", "\n").split("\n");
+    const sectionLines = [`## ${opts.section}`, "", ...textLines, "", ""];
+    const out = [...lines.slice(0, beforeIdx), ...sectionLines, ...lines.slice(beforeIdx)];
+    return `${out.join("\n").trimEnd()}\n`;
+}
+function defaultTaskDoc(requiredSections) {
+    const verifyStepsTemplate = [
+        "<!-- TODO: FILL VERIFY STEPS -->",
+        "",
+        "### Scope",
+        "",
+        "",
+        "### Checks",
+        "",
+        "",
+        "### Evidence / Commands",
+        "",
+        "",
+        "### Pass criteria",
+        "",
+        "",
+    ].join("\n");
+    const verificationTemplate = [
+        "### Plan",
+        "",
+        "",
+        "### Results",
+        "",
+        "",
+        "<!-- BEGIN VERIFICATION RESULTS -->",
+        "<!-- END VERIFICATION RESULTS -->",
+    ].join("\n");
+    const baseDoc = ensureDocSections("", requiredSections);
+    const withVerifySteps = insertMarkdownSectionBefore({
+        body: baseDoc,
+        section: "Verify Steps",
+        text: verifyStepsTemplate,
+        beforeSection: "Verification",
+    });
+    return setMarkdownSection(withVerifySteps, "Verification", verificationTemplate);
+}
+function buildDefaultVerifyStepsSection(opts) {
     const checks = opts.verifyCommands.length > 0
         ? opts.verifyCommands.map((command) => `- \`${command}\``).join("\n")
         : "- Add explicit checks/commands for this task before approval.";
     return [
-        "## Verify Steps",
-        "",
         "### Scope",
         `- Primary tag: \`${opts.primary}\``,
         "",
@@ -25,7 +122,7 @@ function buildDefaultVerifyStepsDoc(opts) {
     ].join("\n");
 }
 export async function runTaskNewParsed(opts) {
-    const p = opts.parsed;
+    const p = sanitizeTaskNewParsed(opts.parsed);
     try {
         const ctx = opts.ctx ??
             (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
@@ -53,6 +150,7 @@ export async function runTaskNewParsed(opts) {
             doc_updated_at: nowIso(),
             doc_updated_by: p.owner,
             id_source: "generated",
+            doc: defaultTaskDoc(ctx.config.tasks.doc.required_sections),
         };
         const spikeTag = (ctx.config.tasks.verify.spike_tag ?? "spike").trim().toLowerCase();
         const primary = resolvePrimaryTag(p.tags, ctx);
@@ -61,11 +159,16 @@ export async function runTaskNewParsed(opts) {
         }
         const requiresVerifySteps = requiresVerifyStepsByPrimary(p.tags, ctx.config);
         await warnIfUnknownOwner(ctx, p.owner);
+        await ensureTaskDependsOnGraphIsAcyclic({
+            backend: ctx.taskBackend,
+            taskId,
+            dependsOn: p.dependsOn,
+        });
         if (requiresVerifySteps) {
-            task.doc = buildDefaultVerifyStepsDoc({
+            task.doc = setMarkdownSection(task.doc ?? "", "Verify Steps", buildDefaultVerifyStepsSection({
                 primary: primary.primary,
                 verifyCommands: p.verify,
-            });
+            }));
             process.stderr.write(`${warnMessage("task requires Verify Steps by primary tag; seeded a default ## Verify Steps section in README (review and refine before approval/start)")}\n`);
         }
         const hasSpike = p.tags.some((tag) => tag.trim().toLowerCase() === spikeTag);

package/dist/commands/task/new.spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"new.spec.d.ts","sourceRoot":"","sources":["../../../src/commands/task/new.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAG9C,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,aAAa,CA8ElD,CAAC"}
+{"version":3,"file":"new.spec.d.ts","sourceRoot":"","sources":["../../../src/commands/task/new.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAE1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAG9C,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,aAAa,CA+ElD,CAAC"}

package/dist/commands/task/new.spec.js

@@ -3,7 +3,7 @@ export const taskNewSpec = {
     id: ["task", "new"],
     group: "Task",
     summary: "Create a new task (prints the generated task id).",
-    description: "Creates a TODO task with doc_version=2 and writes it via the configured task backend.",
+    description: "Creates a TODO task with doc_version=2, seeds standard README sections, and writes it via the configured task backend.",
     options: [
         {
             kind: "string",
@@ -65,6 +65,7 @@ export const taskNewSpec = {
         },
     ],
     notes: [
+        "Task README scaffolding is applied automatically during creation.",
         "For verify-required primary tags, this command seeds a default ## Verify Steps section in README.",
     ],
     parse: (raw) => ({

package/dist/commands/task/set-status.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"set-status.command.d.ts","sourceRoot":"","sources":["../../../src/commands/task/set-status.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAGtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,mBAAmB,CAoJ9D,CAAC;AAEF,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IAC5E,KAAK,UAAU,EAAE,GAAG,mBAAmB,KAAG,OAAO,CAAC,MAAM,CAAC,CAsBxE"}
+{"version":3,"file":"set-status.command.d.ts","sourceRoot":"","sources":["../../../src/commands/task/set-status.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAOtE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,mBAAmB,CAyK9D,CAAC;AAEF,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IAC5E,KAAK,UAAU,EAAE,GAAG,mBAAmB,KAAG,OAAO,CAAC,MAAM,CAAC,CAsBxE"}

package/dist/commands/task/set-status.command.js

@@ -1,5 +1,6 @@
 import { usageError } from "../../cli/spec/errors.js";
 import { toStringList } from "../../cli/spec/parse-utils.js";
+import { findRepoWideAllowPrefixes, repoWideAllowPrefixMessage, } from "../../shared/allow-prefix-policy.js";
 import { cmdTaskSetStatus } from "./set-status.js";
 export const taskSetStatusSpec = {
     id: ["task", "set-status"],
@@ -57,13 +58,14 @@ export const taskSetStatusSpec = {
             name: "commit-allow",
             valueHint: "<path-prefix>",
             repeatable: true,
-            description: "Repeatable. Allowlist prefix for commit-from-comment staging.",
+            description: "Repeatable. Allowlist prefix for commit-from-comment staging. Use minimal prefixes; '.' is rejected.",
         },
         {
             kind: "boolean",
             name: "commit-auto-allow",
             default: false,
-            description: "Auto-derive allowlist prefixes from staged paths (commit-from-comment).",
+            description: "Deprecated. Disabled for safety; pass explicit --commit-allow prefixes.",
+            deprecated: "disabled",
         },
         {
             kind: "boolean",
@@ -125,6 +127,24 @@ export const taskSetStatusSpec = {
                 message: "Invalid value for --commit-allow: empty.",
             });
         }
+        if (findRepoWideAllowPrefixes(allow).length > 0) {
+            throw usageError({
+                spec: taskSetStatusSpec,
+                message: repoWideAllowPrefixMessage("--commit-allow"),
+            });
+        }
+        if (raw.opts["commit-auto-allow"] === true) {
+            throw usageError({
+                spec: taskSetStatusSpec,
+                message: "--commit-auto-allow is disabled; pass explicit --commit-allow <path-prefix>.",
+            });
+        }
+        if (raw.opts["commit-from-comment"] === true && allow.length === 0) {
+            throw usageError({
+                spec: taskSetStatusSpec,
+                message: "--commit-from-comment requires --commit-allow <path-prefix> (tip: `agentplane guard suggest-allow --format args`).",
+            });
+        }
     },
     parse: (raw) => {
         const commitAllow = toStringList(raw.opts["commit-allow"]);

package/dist/commands/task/shared.d.ts

@@ -37,6 +37,11 @@ export type DependencyState = {
     missing: string[];
     incomplete: string[];
 };
+export declare function ensureTaskDependsOnGraphIsAcyclic(opts: {
+    backend: Pick<TaskBackend, "listTasks">;
+    taskId: string;
+    dependsOn: string[];
+}): Promise<void>;
 export declare function resolveTaskDependencyState(task: TaskData, backend: Pick<TaskBackend, "getTask" | "getTasks">): Promise<DependencyState>;
 export declare function buildDependencyState(tasks: TaskData[]): Map<string, DependencyState>;
 export declare function formatTaskLine(task: TaskData, depState?: DependencyState): string;

package/dist/commands/task/shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/commands/task/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK9C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAW5D,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAKjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,eAAO,MAAM,aAAa,+BAAsB,CAAC;AAiBjD,wBAAgB,MAAM,IAAI,MAAM,CAE/B;AAED,eAAO,MAAM,wBAAwB,qCAAqC,CAAC;AAE3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBjF;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAKvE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAI/D;AAID,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAczD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAKtD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAI9E;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CAAC;AAsCF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,gBAAgB,GAAG,aAAa,CAkBzF;AAoCD,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,EAAE,gBAAgB,GACvB,oBAAoB,CAgDtB;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAG9F;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAG/F;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,cAAc,GAAG,oBAAoB,CAE3F;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAe1F;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,CAW7E;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAc3F;AAED,wBAAgB,qCAAqC,CACnD,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,gBAAgB,GACvB,IAAI,CAkBN;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAEF,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,UAAU,CAAC,GACjD,OAAO,CAAC,eAAe,CAAC,CAuB1B;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAqBpF;AAgBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,MAAM,CAgBjF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAO1E;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,IAAI,CAUP;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAmBP;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAgB7F;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAI5F;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CA8BP;AAUD,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK3F;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAI5C;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMlE;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,eAAe,CA8EjB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAiBnD"}
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/commands/task/shared.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAK9C,OAAO,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAW5D,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAKjG,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAExD,eAAO,MAAM,aAAa,+BAAsB,CAAC;AAiBjD,wBAAgB,MAAM,IAAI,MAAM,CAE/B;AAED,eAAO,MAAM,wBAAwB,qCAAqC,CAAC;AAE3E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAiBjF;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAKvE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAI/D;AAID,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAczD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAKtD;AAED,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,GAAG,OAAO,CAI9E;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,YAAY,EAAE,OAAO,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,aAAa,EAAE,OAAO,CAAC;IACvB,eAAe,EAAE,MAAM,CAAC;IACxB,mBAAmB,EAAE,OAAO,CAAC;CAC9B,CAAC;AAsCF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,cAAc,GAAG,gBAAgB,GAAG,aAAa,CAkBzF;AAoCD,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,MAAM,EAAE,EACd,MAAM,EAAE,gBAAgB,GACvB,oBAAoB,CAgDtB;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAG9F;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAG/F;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,cAAc,GAAG,oBAAoB,CAE3F;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAgB1F;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,GAAG,SAAS,EAAE,CAW7E;AAED,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAc3F;AAED,wBAAgB,qCAAqC,CACnD,IAAI,EAAE,QAAQ,EACd,MAAM,EAAE,gBAAgB,GACvB,IAAI,CAkBN;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB,CAAC;AAkCF,wBAAsB,iCAAiC,CAAC,IAAI,EAAE;IAC5D,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IACxC,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB,GAAG,OAAO,CAAC,IAAI,CAAC,CA2BhB;AAED,wBAAsB,0BAA0B,CAC9C,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,GAAG,UAAU,CAAC,GACjD,OAAO,CAAC,eAAe,CAAC,CAuB1B;AAED,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAqBpF;AAgBD,wBAAgB,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,eAAe,GAAG,MAAM,CAgBjF;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAO1E;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE;IAClD,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,IAAI,CAUP;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CAmBP;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAgB7F;AAED,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAI5F;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IACjD,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB,GAAG,IAAI,CA8BP;AAUD,wBAAgB,6BAA6B,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK3F;AAED,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAI5C;AAED,wBAAgB,2BAA2B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAMlE;AAED,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAGjB;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,GAAG,EAAE,MAAM,EAAE,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,CAAC,EAAE;IAAE,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,eAAe,CA8EjB;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAiBnD"}

package/dist/commands/task/shared.js

@@ -204,10 +204,14 @@ export async function warnIfUnknownOwner(ctx, owner) {
     const ids = await listAgentIdsMemo(ctx);
     if (ids.length === 0)
         return;
-    if (!ids.includes(trimmed)) {
-        process.stderr.write(`${warnMessage(`unknown task owner id: ${trimmed} (not found under ${ctx.config.paths.agents_dir}; ` +
-            `pick an existing agent id or create ${ctx.config.paths.agents_dir}/${trimmed}.json)`)}\n`);
-    }
+    if (ids.includes(trimmed))
+        return;
+    throw new CliError({
+        exitCode: 3,
+        code: "E_VALIDATION",
+        message: `unknown task owner id: ${trimmed} (not found under ${ctx.config.paths.agents_dir}; ` +
+            `pick an existing agent id or create ${ctx.config.paths.agents_dir}/${trimmed}.json)`,
+    });
 }
 export function appendTaskEvent(task, event) {
     const existing = Array.isArray(task.events)
@@ -249,6 +253,66 @@ export function ensureVerificationSatisfiedIfRequired(task, config) {
             `(verification.state=${JSON.stringify(state)}; ${hint} or set agents.approvals.require_verify=false).`,
     });
 }
+function hasDependsOnCycle(dependsOnMap) {
+    const visiting = new Set();
+    const visited = new Set();
+    const stack = [];
+    function dfs(taskId) {
+        if (visited.has(taskId))
+            return null;
+        if (visiting.has(taskId)) {
+            const start = stack.indexOf(taskId);
+            return start === -1 ? [taskId] : [...stack.slice(start), taskId];
+        }
+        visiting.add(taskId);
+        stack.push(taskId);
+        const deps = dependsOnMap.get(taskId) ?? [];
+        for (const depId of deps) {
+            const cycle = dfs(depId);
+            if (cycle)
+                return cycle;
+        }
+        stack.pop();
+        visiting.delete(taskId);
+        visited.add(taskId);
+        return null;
+    }
+    for (const taskId of dependsOnMap.keys()) {
+        const cycle = dfs(taskId);
+        if (cycle)
+            return cycle;
+    }
+    return null;
+}
+export async function ensureTaskDependsOnGraphIsAcyclic(opts) {
+    const nextDepends = dedupeStrings(opts.dependsOn);
+    if (nextDepends.includes(opts.taskId)) {
+        throw new CliError({
+            exitCode: 2,
+            code: "E_USAGE",
+            message: `depends_on cannot include task itself (${opts.taskId})`,
+        });
+    }
+    const allTasks = await opts.backend.listTasks();
+    const depMap = new Map();
+    for (const task of allTasks) {
+        const taskId = String(task.id || "").trim();
+        if (!taskId)
+            continue;
+        if (taskId === opts.taskId)
+            continue;
+        depMap.set(taskId, dedupeStrings(toStringArray(task.depends_on)));
+    }
+    depMap.set(opts.taskId, nextDepends);
+    const cycle = hasDependsOnCycle(depMap);
+    if (!cycle)
+        return;
+    throw new CliError({
+        exitCode: 2,
+        code: "E_USAGE",
+        message: `depends_on cycle detected: ${cycle.join(" -> ")}`,
+    });
+}
 export async function resolveTaskDependencyState(task, backend) {
     const dependsOn = dedupeStrings(toStringArray(task.depends_on));
     if (dependsOn.length === 0) {

package/dist/commands/task/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/commands/task/update.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAUpF,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GAAG,OAAO,CAAC,MAAM,CAAC,CAwElB"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/commands/task/update.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAWpF,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,aAAa,EAAE,OAAO,CAAC;IACvB,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,GAAG,OAAO,CAAC,MAAM,CAAC,CA6ElB"}