agentplane 0.2.24 → 0.2.26

package/dist/commands/recipes/impl/commands/install.js

@@ -1,4 +1,4 @@
-import { mkdir, mkdtemp, rm } from "node:fs/promises";
+import { cp, mkdir, mkdtemp, rm } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { defaultConfig, loadConfig } from "@agentplaneorg/core";
@@ -8,6 +8,7 @@ import { mapCoreError } from "../../../../cli/error-map.js";
 import { exitCodeForError } from "../../../../cli/exit-codes.js";
 import { fileExists, getPathKind } from "../../../../cli/fs-utils.js";
 import { downloadToFile } from "../../../../cli/http.js";
+import { getBundledRecipeEntry, resolveBundledRecipeSourcePath, } from "../../../../recipes/bundled-recipes.js";
 import { CliError } from "../../../../shared/errors.js";
 import { ensureNetworkApproved } from "../../../shared/network-approval.js";
 import { resolvePathFallback } from "../../../shared/path.js";
@@ -86,7 +87,7 @@ export async function cmdRecipeInstall(opts) {
                     const filename = path.basename(url.pathname) || "recipe.tar.gz";
                     const target = path.join(tempRoot, filename);
                     await downloadToFile(latest.url, target);
-                    return target;
+                    return { kind: "archive", path: target };
                 }
                 const resolved = path.resolve(opts.cwd, latest.url);
                 if (!(await fileExists(resolved))) {
@@ -96,11 +97,19 @@ export async function cmdRecipeInstall(opts) {
                         message: `Recipe archive not found: ${latest.url}`,
                     });
                 }
-                return resolved;
+                return { kind: "archive", path: resolved };
             };
             const resolveSourcePath = async (source) => {
-                if (source.type === "name")
+                if (source.type === "name") {
+                    const bundledPath = resolveBundledRecipeSourcePath(source.value);
+                    if (bundledPath && (await fileExists(path.join(bundledPath, "manifest.json")))) {
+                        const bundledEntry = getBundledRecipeEntry(source.value);
+                        const bundledVersion = bundledEntry?.versions.at(-1)?.version ?? "unknown";
+                        sourceLabel = `bundled:${source.value}@${bundledVersion}`;
+                        return { kind: "directory", path: bundledPath };
+                    }
                     return await resolveFromIndex(source.value);
+                }
                 if (source.type === "url") {
                     await ensureApproved("recipes install downloads a recipe archive");
                     const url = new URL(source.value);
@@ -108,7 +117,7 @@ export async function cmdRecipeInstall(opts) {
                     const target = path.join(tempRoot, filename);
                     sourceLabel = source.value;
                     await downloadToFile(source.value, target);
-                    return target;
+                    return { kind: "archive", path: target };
                 }
                 if (source.type === "path") {
                     const candidate = await resolvePathFallback(source.value);
@@ -119,8 +128,13 @@ export async function cmdRecipeInstall(opts) {
                             message: `Recipe archive not found: ${source.value}`,
                         });
                     }
+                    const kind = await getPathKind(candidate);
+                    if (kind === "dir") {
+                        sourceLabel = candidate;
+                        return { kind: "directory", path: candidate };
+                    }
                     sourceLabel = candidate;
-                    return candidate;
+                    return { kind: "archive", path: candidate };
                 }
                 if (isHttpUrl(source.value)) {
                     return await resolveSourcePath({ type: "url", value: source.value });
@@ -131,10 +145,11 @@ export async function cmdRecipeInstall(opts) {
                 }
                 return await resolveSourcePath({ type: "name", value: source.value });
             };
-            const sourcePath = await resolveSourcePath(opts.source);
+            const sourceInput = await resolveSourcePath(opts.source);
+            const sourcePath = sourceInput.path;
             if (!sourceLabel)
                 sourceLabel = opts.source.value;
-            const actualSha = expectedSha ? await sha256File(sourcePath) : "";
+            const actualSha = expectedSha && sourceInput.kind === "archive" ? await sha256File(sourcePath) : "";
             if (expectedSha && actualSha !== expectedSha) {
                 throw new CliError({
                     exitCode: 3,
@@ -142,11 +157,19 @@ export async function cmdRecipeInstall(opts) {
                     message: `Recipe checksum mismatch for ${sourceLabel}`,
                 });
             }
-            await extractArchive({
-                archivePath: sourcePath,
-                destDir: tempRoot,
-            });
-            const recipeRoot = await resolveRecipeRoot(tempRoot);
+            let recipeRoot;
+            if (sourceInput.kind === "archive") {
+                await extractArchive({
+                    archivePath: sourcePath,
+                    destDir: tempRoot,
+                });
+                recipeRoot = await resolveRecipeRoot(tempRoot);
+            }
+            else {
+                const stagedRecipeRoot = path.join(tempRoot, "recipe");
+                await cp(sourcePath, stagedRecipeRoot, { recursive: true });
+                recipeRoot = stagedRecipeRoot;
+            }
             const manifest = await readRecipeManifest(path.join(recipeRoot, "manifest.json"));
             const resolvedTags = manifest.tags && manifest.tags.length > 0 ? manifest.tags : normalizeRecipeTags(indexTags);
             const manifestWithTags = resolvedTags.length > 0 ? { ...manifest, tags: resolvedTags } : manifest;

package/dist/commands/recipes/impl/scenario.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/scenario.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA4B3F,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAG1F;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,cAAc,EAAE,CAAC,CAAC;IAClB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C,CAAC,CAeD;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+CjC;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAyB/D"}
+{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/scenario.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAwD3F,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAG1F;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,cAAc,EAAE,CAAC,CAAC;IAClB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C,CAAC,CAeD;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+CjC;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAyB/D"}

package/dist/commands/recipes/impl/scenario.js

@@ -5,6 +5,30 @@ import { invalidFieldMessage, requiredFieldMessage } from "../../../cli/output.j
 import { isRecord } from "../../../shared/guards.js";
 import { RECIPES_SCENARIOS_DIR_NAME, RECIPES_SCENARIOS_INDEX_NAME } from "./constants.js";
 import { normalizeScenarioId } from "./normalize.js";
+function normalizeScenarioEvidence(raw, sourcePath) {
+    if (raw === undefined)
+        return undefined;
+    if (!isRecord(raw)) {
+        throw new Error(invalidFieldMessage("scenario.evidence", "object", sourcePath));
+    }
+    const required = raw.required === true;
+    let files = [];
+    if (raw.files !== undefined) {
+        if (!Array.isArray(raw.files)) {
+            throw new Error(invalidFieldMessage("scenario.evidence.files", "string[]", sourcePath));
+        }
+        files = raw.files
+            .map((value) => (typeof value === "string" ? value.trim() : ""))
+            .filter(Boolean);
+        if (files.length !== raw.files.length) {
+            throw new Error(invalidFieldMessage("scenario.evidence.files", "string[]", sourcePath));
+        }
+    }
+    if (required && files.length === 0) {
+        files = ["evidence.json"];
+    }
+    return { required, files };
+}
 function validateScenarioDefinition(raw, sourcePath) {
     if (!isRecord(raw))
         throw new Error(invalidFieldMessage("scenario", "object", sourcePath));
@@ -31,6 +55,7 @@ function validateScenarioDefinition(raw, sourcePath) {
         goal,
         inputs: raw.inputs,
         outputs: raw.outputs,
+        evidence: normalizeScenarioEvidence(raw.evidence, sourcePath),
         steps: raw.steps,
     };
 }

package/dist/commands/recipes/impl/types.d.ts

@@ -45,6 +45,10 @@ export type ScenarioDefinition = {
     goal: string;
     inputs: unknown;
     outputs: unknown;
+    evidence?: {
+        required: boolean;
+        files: string[];
+    };
     steps: unknown[];
 };
 export type RecipeScenarioDetail = {

package/dist/commands/recipes/impl/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE;QACN,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEjE,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,CAAC,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,MAAM,EAAE,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM,CAAC;YAChB,GAAG,EAAE,MAAM,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC;YACf,sBAAsB,CAAC,EAAE,MAAM,CAAC;YAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;SACjB,EAAE,CAAC;KACL,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;CACd,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE;QACN,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEjE,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,CAAC,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,MAAM,EAAE,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM,CAAC;YAChB,GAAG,EAAE,MAAM,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC;YACf,sBAAsB,CAAC,EAAE,MAAM,CAAC;YAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;SACjB,EAAE,CAAC;KACL,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;CACd,CAAC"}

package/dist/commands/scenario/impl/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAmB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgCtE,KAAK,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,KAAK,oBAAoB,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,GACb,oBAAoB,CAQtB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDlB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoElB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2ChE;AAMD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;CACvD,GAAG,OAAO,CAAC,MAAM,CAAC,CAuNlB"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAmB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgCtE,KAAK,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,KAAK,oBAAoB,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,GACb,oBAAoB,CAQtB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDlB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2ElB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2ChE;AAkCD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;CACvD,GAAG,OAAO,CAAC,MAAM,CAAC,CAiQlB"}

package/dist/commands/scenario/impl/commands.js

@@ -125,6 +125,12 @@ export async function cmdScenarioInfoParsed(opts) {
         process.stdout.write(`Goal: ${scenario.goal}\n`);
         process.stdout.write(`Inputs: ${JSON.stringify(scenario.inputs, null, 2)}\n`);
         process.stdout.write(`Outputs: ${JSON.stringify(scenario.outputs, null, 2)}\n`);
+        if (scenario.evidence?.required) {
+            process.stdout.write(`Evidence: required (${normalizeExpectedEvidenceFiles(scenario.evidence.files).join(", ")})\n`);
+        }
+        else if (scenario.evidence?.files && scenario.evidence.files.length > 0) {
+            process.stdout.write(`Evidence: optional (${scenario.evidence.files.join(", ")})\n`);
+        }
         process.stdout.write("Steps:\n");
         let stepIndex = 1;
         for (const step of scenario.steps) {
@@ -185,6 +191,33 @@ export async function executeRecipeTool(opts) {
 function sanitizeRunId(value) {
     return value.replaceAll(/[^a-zA-Z0-9._-]/g, "_");
 }
+function normalizeExpectedEvidenceFiles(raw) {
+    if (!raw || raw.length === 0)
+        return ["evidence.json"];
+    const unique = [];
+    for (const value of raw) {
+        const file = value.trim();
+        if (!file)
+            continue;
+        if (unique.includes(file))
+            continue;
+        unique.push(file);
+    }
+    return unique.length > 0 ? unique : ["evidence.json"];
+}
+async function collectStepEvidenceFiles(stepDir, expectedFiles) {
+    const present = [];
+    const missing = [];
+    for (const file of expectedFiles) {
+        if (await fileExists(path.join(stepDir, file))) {
+            present.push(file);
+        }
+        else {
+            missing.push(file);
+        }
+    }
+    return { present, missing };
+}
 export async function cmdScenarioRunParsed(opts) {
     const resolved = opts.resolved ??
         (await resolveProject({
@@ -241,6 +274,13 @@ export async function cmdScenarioRunParsed(opts) {
             .replaceAll(".", "-")}-${sanitizeRunId(scenarioId)}`;
         const runDir = path.join(runsRoot, runId);
         await mkdir(runDir, { recursive: true });
+        const evidenceRequired = scenario.evidence?.required === true;
+        const expectedEvidenceFiles = evidenceRequired
+            ? normalizeExpectedEvidenceFiles(scenario.evidence?.files)
+            : normalizeExpectedEvidenceFiles(scenario.evidence?.files && scenario.evidence.files.length > 0
+                ? scenario.evidence.files
+                : undefined);
+        const missingEvidenceSteps = [];
         const stepsMeta = [];
         const stepsReport = [];
         for (let index = 0; index < scenario.steps.length; index++) {
@@ -299,6 +339,11 @@ export async function cmdScenarioRunParsed(opts) {
             const durationMs = Date.now() - startedAt;
             await atomicWriteFile(path.join(stepDir, "stdout.log"), result.stdout, "utf8");
             await atomicWriteFile(path.join(stepDir, "stderr.log"), result.stderr, "utf8");
+            const stepEvidence = await collectStepEvidenceFiles(stepDir, expectedEvidenceFiles);
+            const missingRequiredEvidence = evidenceRequired ? stepEvidence.missing : [];
+            if (missingRequiredEvidence.length > 0) {
+                missingEvidenceSteps.push(index + 1);
+            }
             stepsMeta.push({
                 tool: step.tool,
                 runtime,
@@ -313,10 +358,12 @@ export async function cmdScenarioRunParsed(opts) {
                 entrypoint,
                 args: redactArgs(step.args),
                 env_keys: stepEnvKeys,
+                evidence_files: stepEvidence.present,
+                missing_evidence_files: missingRequiredEvidence.length > 0 ? missingRequiredEvidence : undefined,
                 exit_code: result.exitCode,
                 duration_ms: durationMs,
             });
-            if (result.exitCode !== 0) {
+            if (result.exitCode !== 0 || missingRequiredEvidence.length > 0) {
                 const gitSummary = await getGitDiffSummary(resolved.gitRoot);
                 await writeScenarioReport({
                     runDir,
@@ -326,18 +373,32 @@ export async function cmdScenarioRunParsed(opts) {
                     startedAt: runStartedAt,
                     status: "failed",
                     steps: stepsReport,
+                    evidence: {
+                        required: evidenceRequired,
+                        expected_files: expectedEvidenceFiles,
+                        missing_steps: missingEvidenceSteps,
+                    },
                     gitSummary,
                 });
                 await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
                     recipe: recipeId,
                     scenario: scenarioId,
                     run_id: runId,
+                    evidence: {
+                        required: evidenceRequired,
+                        expected_files: expectedEvidenceFiles,
+                        missing_steps: missingEvidenceSteps,
+                    },
                     steps: stepsMeta,
                 }, null, 2)}\n`, "utf8");
+                const reason = missingRequiredEvidence.length > 0
+                    ? `Scenario step missing required evidence: ${step.tool} (${missingRequiredEvidence.join(", ")})`
+                    : `Scenario step failed: ${step.tool}`;
+                const stepExitCode = result.exitCode === 0 ? 1 : result.exitCode;
                 throw new CliError({
-                    exitCode: result.exitCode,
+                    exitCode: stepExitCode,
                     code: "E_INTERNAL",
-                    message: `Scenario step failed: ${step.tool}`,
+                    message: reason,
                 });
             }
         }
@@ -350,12 +411,22 @@ export async function cmdScenarioRunParsed(opts) {
             startedAt: runStartedAt,
             status: "success",
             steps: stepsReport,
+            evidence: {
+                required: evidenceRequired,
+                expected_files: expectedEvidenceFiles,
+                missing_steps: missingEvidenceSteps,
+            },
             gitSummary,
         });
         await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
             recipe: recipeId,
             scenario: scenarioId,
             run_id: runId,
+            evidence: {
+                required: evidenceRequired,
+                expected_files: expectedEvidenceFiles,
+                missing_steps: missingEvidenceSteps,
+            },
             steps: stepsMeta,
         }, null, 2)}\n`, "utf8");
         process.stdout.write(`Run artifacts: ${path.relative(resolved.gitRoot, runDir)}\n`);

package/dist/commands/scenario/impl/report.d.ts

@@ -10,9 +10,16 @@ export type ScenarioRunReportStep = {
     entrypoint: string;
     args: string[];
     env_keys: string[];
+    evidence_files: string[];
+    missing_evidence_files?: string[];
     exit_code: number;
     duration_ms: number;
 };
+type ScenarioRunEvidenceSummary = {
+    required: boolean;
+    expected_files: string[];
+    missing_steps: number[];
+};
 export declare function redactArgs(args: string[]): string[];
 export declare function getGitDiffSummary(cwd: string): Promise<ScenarioRunGitSummary | undefined>;
 export declare function collectScenarioEnvKeys(stepEnv: Record<string, string> | undefined): string[];
@@ -24,6 +31,7 @@ export declare function writeScenarioReport(opts: {
     startedAt: string;
     status: "success" | "failed";
     steps: ScenarioRunReportStep[];
+    evidence: ScenarioRunEvidenceSummary;
     gitSummary?: ScenarioRunGitSummary;
 }): Promise<void>;
 export {};

package/dist/commands/scenario/impl/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/report.ts"],"names":[],"mappings":"AAYA,KAAK,qBAAqB,GAAG;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AA2BF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBnD;AASD,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAwB/F;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CAU5F;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/report.ts"],"names":[],"mappings":"AAYA,KAAK,qBAAqB,GAAG;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AA4BF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBnD;AASD,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAwB/F;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CAU5F;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,QAAQ,EAAE,0BAA0B,CAAC;IACrC,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhB"}

package/dist/commands/scenario/impl/report.js

@@ -93,6 +93,7 @@ export async function writeScenarioReport(opts) {
         ended_at: new Date().toISOString(),
         status: opts.status,
         steps: opts.steps,
+        evidence: opts.evidence,
         git: opts.gitSummary,
     };
     await atomicWriteFile(path.join(opts.runDir, SCENARIO_REPORT_NAME), `${JSON.stringify(report, null, 2)}\n`, "utf8");

package/dist/commands/shared/reconcile-check.d.ts

@@ -0,0 +1,7 @@
+import { type CommandContext } from "./task-backend.js";
+export declare function ensureReconciledBeforeMutation(opts: {
+    ctx: CommandContext;
+    command: string;
+    strictTaskScan?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=reconcile-check.d.ts.map

package/dist/commands/shared/reconcile-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-check.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/reconcile-check.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAgBvE,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IACzD,GAAG,EAAE,cAAc,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ChB"}

package/dist/commands/shared/reconcile-check.js

@@ -0,0 +1,60 @@
+import { exitCodeForError } from "../../cli/exit-codes.js";
+import { CliError } from "../../shared/errors.js";
+import { listTasksMemo } from "./task-backend.js";
+function compactError(err) {
+    if (err instanceof Error) {
+        const text = err.message.trim();
+        return text.length > 0 ? text : err.name;
+    }
+    return String(err);
+}
+function summarizeWarnings(warnings) {
+    const preview = warnings.slice(0, 3).join("; ");
+    const suffix = warnings.length > 3 ? `; +${warnings.length - 3} more` : "";
+    return `skipped ${warnings.length} task files during scan (${preview}${suffix})`;
+}
+export async function ensureReconciledBeforeMutation(opts) {
+    try {
+        await opts.ctx.git.statusChangedPaths();
+    }
+    catch (err) {
+        throw new CliError({
+            exitCode: exitCodeForError("E_GIT"),
+            code: "E_GIT",
+            message: `reconcile check failed: cannot inspect git status (${compactError(err)})`,
+            context: {
+                command: opts.command,
+                reason_code: "reconcile_git_state_unreadable",
+            },
+        });
+    }
+    if (opts.strictTaskScan === false)
+        return;
+    try {
+        await listTasksMemo(opts.ctx);
+    }
+    catch (err) {
+        throw new CliError({
+            exitCode: exitCodeForError("E_VALIDATION"),
+            code: "E_VALIDATION",
+            message: `reconcile check failed: task scan error (${compactError(err)})`,
+            context: {
+                command: opts.command,
+                reason_code: "reconcile_task_scan_failed",
+            },
+        });
+    }
+    const warnings = opts.ctx.taskBackend.getLastListWarnings?.() ?? [];
+    if (warnings.length === 0)
+        return;
+    throw new CliError({
+        exitCode: exitCodeForError("E_VALIDATION"),
+        code: "E_VALIDATION",
+        message: `reconcile check failed: ${summarizeWarnings(warnings)}`,
+        context: {
+            command: opts.command,
+            reason_code: "reconcile_task_scan_incomplete",
+            warning_count: warnings.length,
+        },
+    });
+}

package/dist/commands/start.spec.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"start.spec.d.ts","sourceRoot":"","sources":["../../src/commands/start.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAKvD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,WAAW,CA0H9C,CAAC"}
+{"version":3,"file":"start.spec.d.ts","sourceRoot":"","sources":["../../src/commands/start.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AASvD,MAAM,MAAM,WAAW,GAAG;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;IACb,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,WAAW,CAAC,WAAW,CA8I9C,CAAC"}

package/dist/commands/start.spec.js

@@ -1,4 +1,5 @@
 import { usageError } from "../cli/spec/errors.js";
+import { findRepoWideAllowPrefixes, repoWideAllowPrefixMessage, } from "../shared/allow-prefix-policy.js";
 import { toStringList } from "../cli/spec/parse-utils.js";
 export const startSpec = {
     id: ["start"],
@@ -44,13 +45,14 @@ export const startSpec = {
             name: "commit-allow",
             valueHint: "<path-prefix>",
             repeatable: true,
-            description: "Repeatable. Allowlist path prefixes to stage for the status commit (used with --commit-from-comment).",
+            description: "Repeatable. Allowlist path prefixes to stage for the status commit (used with --commit-from-comment). Use minimal prefixes; '.' is rejected.",
         },
         {
             kind: "boolean",
             name: "commit-auto-allow",
             default: false,
-            description: "Auto-allow inferred allowlist paths if none are provided (used with --commit-from-comment).",
+            description: "Deprecated. Disabled for safety; pass explicit --commit-allow prefixes.",
+            deprecated: "disabled",
         },
         {
             kind: "boolean",
@@ -99,10 +101,29 @@ export const startSpec = {
     validateRaw: (raw) => {
         const author = typeof raw.opts.author === "string" ? raw.opts.author.trim() : "";
         const body = typeof raw.opts.body === "string" ? raw.opts.body.trim() : "";
+        const commitAllow = toStringList(raw.opts["commit-allow"]);
         if (!author)
             throw usageError({ spec: startSpec, message: "Invalid value for --author: empty." });
         if (!body)
             throw usageError({ spec: startSpec, message: "Invalid value for --body: empty." });
+        if (findRepoWideAllowPrefixes(commitAllow).length > 0) {
+            throw usageError({
+                spec: startSpec,
+                message: repoWideAllowPrefixMessage("--commit-allow"),
+            });
+        }
+        if (raw.opts["commit-auto-allow"] === true) {
+            throw usageError({
+                spec: startSpec,
+                message: "--commit-auto-allow is disabled; pass explicit --commit-allow <path-prefix>.",
+            });
+        }
+        if (raw.opts["commit-from-comment"] === true && commitAllow.length === 0) {
+            throw usageError({
+                spec: startSpec,
+                message: "--commit-from-comment requires --commit-allow <path-prefix> (tip: `agentplane guard suggest-allow --format args`).",
+            });
+        }
     },
     parse: (raw) => ({
         taskId: typeof raw.args["task-id"] === "string" ? raw.args["task-id"] : "",

package/dist/commands/sync.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync.command.d.ts","sourceRoot":"","sources":["../../src/commands/sync.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAE9D,eAAO,MAAM,QAAQ,EAAE,WAAW,CAAC,UAAU,CA6C5C,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACnE,KAAK,UAAU,EAAE,GAAG,UAAU,KAAG,OAAO,CAAC,MAAM,CAAC,CAS/D"}
+{"version":3,"file":"sync.command.d.ts","sourceRoot":"","sources":["../../src/commands/sync.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAE9D,eAAO,MAAM,QAAQ,EAAE,WAAW,CAAC,UAAU,CAmD5C,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACnE,KAAK,UAAU,EAAE,GAAG,UAAU,KAAG,OAAO,CAAC,MAAM,CAAC,CAS/D"}

package/dist/commands/sync.command.js

@@ -1,3 +1,4 @@
+import { COMMAND_SNIPPETS } from "../cli/command-snippets.js";
 import { cmdSyncParsed } from "./backend.js";
 export const syncSpec = {
     id: ["sync"],
@@ -33,8 +34,14 @@ export const syncSpec = {
         { kind: "boolean", name: "quiet", default: false, description: "Reduce output noise." },
     ],
     examples: [
-        { cmd: "agentplane sync --direction pull", why: "Pull from backend (configured backend id)." },
-        { cmd: "agentplane sync redmine --direction push --yes", why: "Push to redmine backend." },
+        {
+            cmd: COMMAND_SNIPPETS.sync.pullConfigured,
+            why: "Pull from backend (configured backend id).",
+        },
+        {
+            cmd: COMMAND_SNIPPETS.sync.pushRedmineExplicitWithYes,
+            why: "Push to redmine backend.",
+        },
     ],
     parse: (raw) => ({
         backendId: raw.args.id ? String(raw.args.id) : null,

package/dist/commands/task/finish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"finish.d.ts","sourceRoot":"","sources":["../../../src/commands/task/finish.ts"],"names":[],"mappings":"AAUA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AAmCnC,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,OAAO,CAAC;IAClC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqUlB"}
+{"version":3,"file":"finish.d.ts","sourceRoot":"","sources":["../../../src/commands/task/finish.ts"],"names":[],"mappings":"AAWA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AAmCnC,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,iBAAiB,EAAE,OAAO,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,kBAAkB,EAAE,OAAO,CAAC;IAC5B,YAAY,EAAE,OAAO,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,qBAAqB,EAAE,OAAO,CAAC;IAC/B,wBAAwB,EAAE,OAAO,CAAC;IAClC,mBAAmB,EAAE,OAAO,CAAC;IAC7B,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4VlB"}

package/dist/commands/task/finish.js

@@ -6,6 +6,7 @@ import { readFile, rm } from "node:fs/promises";
 import path from "node:path";
 import { buildGitCommitEnv, cmdCommit, commitFromComment } from "../guard/index.js";
 import { ensureActionApproved } from "../shared/approval-requirements.js";
+import { ensureReconciledBeforeMutation } from "../shared/reconcile-check.js";
 import { loadCommandContext, loadTaskFromContext, } from "../shared/task-backend.js";
 import { backendIsLocalFileBackend, getTaskStore } from "../shared/task-store.js";
 import { readDirectWorkLock } from "../../shared/direct-work-lock.js";
@@ -30,6 +31,7 @@ export async function cmdFinish(opts) {
     try {
         const ctx = opts.ctx ??
             (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
+        await ensureReconciledBeforeMutation({ ctx, command: "finish" });
         if (opts.force) {
             await ensureActionApproved({
                 action: "force_action",
@@ -40,13 +42,7 @@ export async function cmdFinish(opts) {
         }
         const { prefix, min_chars: minChars } = ctx.config.tasks.comments.verified;
         requireStructuredComment(opts.body, prefix, minChars);
-        const autoStatusCommit = (ctx.config.finish_auto_status_commit === true ||
-            ctx.config.commit_automation === "finish_only") &&
-            !opts.commitFromComment &&
-            !opts.statusCommit &&
-            opts.closeCommit !== true &&
-            opts.taskIds.length === 1;
-        const statusCommitRequested = opts.statusCommit || autoStatusCommit;
+        const statusCommitRequested = opts.statusCommit;
         if ((opts.commitFromComment || statusCommitRequested) && opts.taskIds.length !== 1) {
             throw new CliError({
                 exitCode: 2,
@@ -76,6 +72,34 @@ export async function cmdFinish(opts) {
                 message: "--commit-from-comment/--status-commit requires exactly one task id",
             });
         }
+        if (opts.commitAutoAllow) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--commit-auto-allow is disabled; pass explicit --commit-allow <path-prefix>.",
+            });
+        }
+        if (opts.statusCommitAutoAllow) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--status-commit-auto-allow is disabled; pass explicit --status-commit-allow <path-prefix>.",
+            });
+        }
+        if (opts.commitFromComment && opts.commitAllow.length === 0) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--commit-from-comment requires --commit-allow <path-prefix>",
+            });
+        }
+        if (statusCommitRequested && opts.statusCommitAllow.length === 0) {
+            throw new CliError({
+                exitCode: 2,
+                code: "E_USAGE",
+                message: "--status-commit requires --status-commit-allow <path-prefix>",
+            });
+        }
         const gitRoot = ctx.resolvedProject.gitRoot;
         const commitInfo = opts.commit
             ? await readCommitInfo(gitRoot, opts.commit)
@@ -168,7 +192,7 @@ export async function cmdFinish(opts) {
             enforceStatusCommitPolicy({
                 policy: ctx.config.status_commit_policy,
                 action: "finish",
-                confirmed: opts.confirmStatusCommit || autoStatusCommit,
+                confirmed: opts.confirmStatusCommit,
                 quiet: opts.quiet,
                 statusFrom: primaryStatusFrom ?? "UNKNOWN",
                 statusTo: "DONE",
@@ -208,7 +232,7 @@ export async function cmdFinish(opts) {
                 formattedComment: formatCommentBodyForCommit(opts.body, ctx.config),
                 emoji: opts.commitEmoji ?? defaultCommitEmojiForStatus("DONE"),
                 allow: opts.commitAllow,
-                autoAllow: opts.commitAutoAllow || opts.commitAllow.length === 0,
+                autoAllow: false,
                 allowTasks: opts.commitAllowTasks,
                 requireClean: opts.commitRequireClean,
                 quiet: opts.quiet,
@@ -269,7 +293,7 @@ export async function cmdFinish(opts) {
                 formattedComment: formatCommentBodyForCommit(opts.body, ctx.config),
                 emoji: opts.statusCommitEmoji ?? defaultCommitEmojiForStatus("DONE"),
                 allow: opts.statusCommitAllow,
-                autoAllow: opts.statusCommitAutoAllow || opts.statusCommitAllow.length === 0,
+                autoAllow: false,
                 allowTasks: true,
                 requireClean: opts.statusCommitRequireClean,
                 quiet: opts.quiet,

package/dist/commands/task/list.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/task/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAqC,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEnG,OAAO,EAKL,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAErB,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CA4ClB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAElB"}
+{"version":3,"file":"list.d.ts","sourceRoot":"","sources":["../../../src/commands/task/list.ts"],"names":[],"mappings":"AACA,OAAO,EAAqC,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAEnG,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,aAAa,CAAC;AAErB,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CA6ClB;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,eAAe,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAElB"}