agentplane 0.2.25 → 0.2.26

package/dist/commands/doctor.run.js

@@ -5,6 +5,7 @@ import { warnMessage, successMessage } from "../cli/output.js";
 import { RUNTIME_GITIGNORE_LINES } from "../shared/runtime-artifacts.js";
 import { execFileAsync, gitEnv } from "./shared/git.js";
 import { loadCommandContext } from "./shared/task-backend.js";
+import { emitWorkflowEvent, isWorkflowEnforcementDisabled, resolveWorkflowPaths, safeAutofixWorkflowText, validateWorkflowAtPath, workflowEnforcementEnvHint, } from "../workflow-runtime/index.js";
 async function listTsFiles(rootDir) {
     const out = [];
     async function walk(absDir) {
@@ -160,6 +161,75 @@ async function safeFixTaskIndex(repoRoot) {
         return { changed: false, note: "Skip: could not rebuild tasks index cache." };
     }
 }
+async function checkWorkflowContract(repoRoot) {
+    const result = await validateWorkflowAtPath(repoRoot);
+    const findings = result.diagnostics.map((d) => `[${d.severity}] ${d.code} ${d.path}: ${d.message}`);
+    emitWorkflowEvent({
+        event: "workflow_doctor_check",
+        details: { ok: result.ok, findings: result.diagnostics.length },
+    });
+    return findings;
+}
+function findingSeverity(problem) {
+    const normalized = problem.trimStart();
+    if (normalized.startsWith("[WARN]"))
+        return "WARN";
+    if (normalized.startsWith("[INFO]"))
+        return "INFO";
+    if (normalized.startsWith("[ERROR]"))
+        return "ERROR";
+    return "ERROR";
+}
+async function safeFixWorkflow(repoRoot) {
+    const paths = resolveWorkflowPaths(repoRoot);
+    let current = "";
+    let sourcePath = paths.workflowPath;
+    try {
+        current = await fs.readFile(paths.workflowPath, "utf8");
+    }
+    catch {
+        try {
+            current = await fs.readFile(paths.legacyWorkflowPath, "utf8");
+            sourcePath = paths.legacyWorkflowPath;
+        }
+        catch {
+            return { changed: false, note: "Skip: workflow contract file not found." };
+        }
+    }
+    const fixed = safeAutofixWorkflowText(current);
+    if (fixed.diagnostics.some((d) => d.code === "WF_FIX_SKIPPED_UNSAFE")) {
+        const details = fixed.diagnostics.map((d) => `${d.path}`).join(", ");
+        return {
+            changed: false,
+            note: `Skip: unsafe workflow autofix required (unknown keys). Proposed manual review: ${details}`,
+        };
+    }
+    if (!fixed.changed) {
+        if (sourcePath === paths.workflowPath) {
+            return { changed: false, note: "OK: workflow contract already normalized." };
+        }
+        await fs.mkdir(path.dirname(paths.workflowPath), { recursive: true });
+        await fs.writeFile(paths.workflowPath, current, "utf8");
+        await fs.rm(paths.legacyWorkflowPath, { force: true });
+        await fs.mkdir(paths.workflowDir, { recursive: true });
+        await fs.copyFile(paths.workflowPath, paths.lastKnownGoodPath);
+        return {
+            changed: true,
+            note: "Fixed: moved legacy WORKFLOW.md into .agentplane and refreshed last-known-good.",
+        };
+    }
+    await fs.mkdir(path.dirname(paths.workflowPath), { recursive: true });
+    await fs.writeFile(paths.workflowPath, fixed.text, "utf8");
+    if (sourcePath === paths.legacyWorkflowPath) {
+        await fs.rm(paths.legacyWorkflowPath, { force: true });
+    }
+    await fs.mkdir(paths.workflowDir, { recursive: true });
+    await fs.copyFile(paths.workflowPath, paths.lastKnownGoodPath);
+    return {
+        changed: true,
+        note: "Fixed: normalized workflow contract and refreshed last-known-good.",
+    };
+}
 async function checkDoneTaskCommitInvariants(repoRoot) {
     const tasksPath = path.join(repoRoot, ".agentplane", "tasks.json");
     let raw = "";
@@ -228,22 +298,38 @@ async function checkDoneTaskCommitInvariants(repoRoot) {
 export const runDoctor = async (ctx, p) => {
     const resolved = await resolveProject({ cwd: ctx.cwd, rootOverride: ctx.rootOverride ?? null });
     const repoRoot = resolved.gitRoot;
-    const problems = await checkWorkspace(repoRoot);
-    problems.push(...(await checkDoneTaskCommitInvariants(repoRoot)));
-    if (p.dev) {
-        problems.push(...(await checkLayering(repoRoot)));
-    }
-    if (problems.length > 0) {
-        console.error(warnMessage(`doctor found ${problems.length} problem(s):`));
-        for (const prob of problems)
-            console.error(`- ${prob}`);
-        return 1;
+    const runChecks = async () => {
+        const checks = await checkWorkspace(repoRoot);
+        checks.push(...(await checkDoneTaskCommitInvariants(repoRoot)));
+        if (!isWorkflowEnforcementDisabled()) {
+            checks.push(...(await checkWorkflowContract(repoRoot)));
+        }
+        if (p.dev) {
+            checks.push(...(await checkLayering(repoRoot)));
+        }
+        return checks;
+    };
+    if (isWorkflowEnforcementDisabled()) {
+        console.log(successMessage("doctor", undefined, `workflow contract checks disabled via ${workflowEnforcementEnvHint()}.`));
     }
     if (p.fix) {
         const fix = await safeFixGitignore(repoRoot);
         console.log(successMessage("doctor fix", undefined, fix.note));
         const idx = await safeFixTaskIndex(repoRoot);
         console.log(successMessage("doctor fix", undefined, idx.note));
+        const workflowFix = await safeFixWorkflow(repoRoot);
+        console.log(successMessage("doctor fix", undefined, workflowFix.note));
+    }
+    const problems = await runChecks();
+    const errors = problems.filter((problem) => findingSeverity(problem) === "ERROR");
+    if (problems.length > 0) {
+        const warningCount = problems.filter((problem) => findingSeverity(problem) === "WARN").length;
+        const infoCount = problems.filter((problem) => findingSeverity(problem) === "INFO").length;
+        console.error(warnMessage(`doctor findings: errors=${errors.length} warnings=${warningCount} info=${infoCount}`));
+        for (const prob of problems)
+            console.error(`- ${prob}`);
+        if (errors.length > 0)
+            return 1;
     }
     console.log(successMessage("doctor", undefined, "OK"));
     return 0;

package/dist/commands/guard/impl/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/guard/impl/commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAOvF,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAyDxE,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBlB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9E;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,kBAAkB,EAAE,OAAO,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CAgJlB"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/guard/impl/commands.ts"],"names":[],"mappings":"AAGA,OAAO,EAAsB,KAAK,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAQvF,OAAO,EAAoB,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAyDxE,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAsBlB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC;CAC1B,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlB;AAED,wBAAsB,cAAc,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC,CAa9E;AAED,wBAAsB,SAAS,CAAC,IAAI,EAAE;IACpC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,UAAU,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,EAAE,OAAO,CAAC;IACrB,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,YAAY,EAAE,OAAO,CAAC;IACtB,KAAK,EAAE,OAAO,CAAC;IACf,kBAAkB,EAAE,OAAO,CAAC;IAC5B,cAAc,EAAE,OAAO,CAAC;CACzB,GAAG,OAAO,CAAC,MAAM,CAAC,CAmJlB"}

package/dist/commands/guard/impl/commands.js

@@ -4,6 +4,7 @@ import { CliError } from "../../../shared/errors.js";
 import { loadCommandContext } from "../../shared/task-backend.js";
 import { loadTaskFromContext } from "../../shared/task-backend.js";
 import { execFileAsync, gitEnv } from "../../shared/git.js";
+import { ensureReconciledBeforeMutation } from "../../shared/reconcile-check.js";
 import { suggestAllowPrefixes } from "./allow.js";
 import { buildCloseCommitMessage, taskReadmePathForTask } from "./close-message.js";
 import { buildGitCommitEnv } from "./env.js";
@@ -111,7 +112,10 @@ export async function cmdGuardSuggestAllow(opts) {
 }
 export async function cmdGuardCommit(opts) {
     try {
-        await guardCommitCheck(opts);
+        const ctx = opts.ctx ??
+            (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
+        await ensureReconciledBeforeMutation({ ctx, command: "guard commit" });
+        await guardCommitCheck({ ...opts, ctx });
         if (!opts.quiet)
             process.stdout.write("OK\n");
         return 0;
@@ -124,9 +128,12 @@ export async function cmdGuardCommit(opts) {
 }
 export async function cmdCommit(opts) {
     try {
+        const ctx = opts.ctx ??
+            (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
         if (opts.close) {
-            const ctx = opts.ctx ??
-                (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
+            if (!opts.closeCheckOnly) {
+                await ensureReconciledBeforeMutation({ ctx, command: "commit" });
+            }
             // Make the close commit deterministic: start from a clean index unless --unstage-others is used.
             let staged = await ctx.git.statusStagedPaths();
             if (staged.length > 0 && opts.closeUnstageOthers) {
@@ -208,8 +215,9 @@ export async function cmdCommit(opts) {
                 message: "--auto-allow is disabled; pass explicit --allow <path-prefix>.",
             });
         }
+        await ensureReconciledBeforeMutation({ ctx, command: "commit" });
         await guardCommitCheck({
-            ctx: opts.ctx,
+            ctx,
             cwd: opts.cwd,
             rootOverride: opts.rootOverride,
             taskId: opts.taskId,
@@ -224,8 +232,6 @@ export async function cmdCommit(opts) {
             requireClean: opts.requireClean,
             quiet: opts.quiet,
         });
-        const ctx = opts.ctx ??
-            (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
         const env = buildGitCommitEnv({
             taskId: opts.taskId,
             allowTasks: opts.allowTasks,

package/dist/commands/recipes/impl/commands/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/install.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAM3E,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,GAAG,EAAE,OAAO,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CAkMlB"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/install.ts"],"names":[],"mappings":"AAkCA,OAAO,KAAK,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAM3E,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,mBAAmB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,UAAU,EAAE,kBAAkB,CAAC;IAC/B,GAAG,EAAE,OAAO,CAAC;CACd,GAAG,OAAO,CAAC,MAAM,CAAC,CA6NlB"}

package/dist/commands/recipes/impl/commands/install.js

@@ -1,4 +1,4 @@
-import { mkdir, mkdtemp, rm } from "node:fs/promises";
+import { cp, mkdir, mkdtemp, rm } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { defaultConfig, loadConfig } from "@agentplaneorg/core";
@@ -8,6 +8,7 @@ import { mapCoreError } from "../../../../cli/error-map.js";
 import { exitCodeForError } from "../../../../cli/exit-codes.js";
 import { fileExists, getPathKind } from "../../../../cli/fs-utils.js";
 import { downloadToFile } from "../../../../cli/http.js";
+import { getBundledRecipeEntry, resolveBundledRecipeSourcePath, } from "../../../../recipes/bundled-recipes.js";
 import { CliError } from "../../../../shared/errors.js";
 import { ensureNetworkApproved } from "../../../shared/network-approval.js";
 import { resolvePathFallback } from "../../../shared/path.js";
@@ -86,7 +87,7 @@ export async function cmdRecipeInstall(opts) {
                     const filename = path.basename(url.pathname) || "recipe.tar.gz";
                     const target = path.join(tempRoot, filename);
                     await downloadToFile(latest.url, target);
-                    return target;
+                    return { kind: "archive", path: target };
                 }
                 const resolved = path.resolve(opts.cwd, latest.url);
                 if (!(await fileExists(resolved))) {
@@ -96,11 +97,19 @@ export async function cmdRecipeInstall(opts) {
                         message: `Recipe archive not found: ${latest.url}`,
                     });
                 }
-                return resolved;
+                return { kind: "archive", path: resolved };
             };
             const resolveSourcePath = async (source) => {
-                if (source.type === "name")
+                if (source.type === "name") {
+                    const bundledPath = resolveBundledRecipeSourcePath(source.value);
+                    if (bundledPath && (await fileExists(path.join(bundledPath, "manifest.json")))) {
+                        const bundledEntry = getBundledRecipeEntry(source.value);
+                        const bundledVersion = bundledEntry?.versions.at(-1)?.version ?? "unknown";
+                        sourceLabel = `bundled:${source.value}@${bundledVersion}`;
+                        return { kind: "directory", path: bundledPath };
+                    }
                     return await resolveFromIndex(source.value);
+                }
                 if (source.type === "url") {
                     await ensureApproved("recipes install downloads a recipe archive");
                     const url = new URL(source.value);
@@ -108,7 +117,7 @@ export async function cmdRecipeInstall(opts) {
                     const target = path.join(tempRoot, filename);
                     sourceLabel = source.value;
                     await downloadToFile(source.value, target);
-                    return target;
+                    return { kind: "archive", path: target };
                 }
                 if (source.type === "path") {
                     const candidate = await resolvePathFallback(source.value);
@@ -119,8 +128,13 @@ export async function cmdRecipeInstall(opts) {
                             message: `Recipe archive not found: ${source.value}`,
                         });
                     }
+                    const kind = await getPathKind(candidate);
+                    if (kind === "dir") {
+                        sourceLabel = candidate;
+                        return { kind: "directory", path: candidate };
+                    }
                     sourceLabel = candidate;
-                    return candidate;
+                    return { kind: "archive", path: candidate };
                 }
                 if (isHttpUrl(source.value)) {
                     return await resolveSourcePath({ type: "url", value: source.value });
@@ -131,10 +145,11 @@ export async function cmdRecipeInstall(opts) {
                 }
                 return await resolveSourcePath({ type: "name", value: source.value });
             };
-            const sourcePath = await resolveSourcePath(opts.source);
+            const sourceInput = await resolveSourcePath(opts.source);
+            const sourcePath = sourceInput.path;
             if (!sourceLabel)
                 sourceLabel = opts.source.value;
-            const actualSha = expectedSha ? await sha256File(sourcePath) : "";
+            const actualSha = expectedSha && sourceInput.kind === "archive" ? await sha256File(sourcePath) : "";
             if (expectedSha && actualSha !== expectedSha) {
                 throw new CliError({
                     exitCode: 3,
@@ -142,11 +157,19 @@ export async function cmdRecipeInstall(opts) {
                     message: `Recipe checksum mismatch for ${sourceLabel}`,
                 });
             }
-            await extractArchive({
-                archivePath: sourcePath,
-                destDir: tempRoot,
-            });
-            const recipeRoot = await resolveRecipeRoot(tempRoot);
+            let recipeRoot;
+            if (sourceInput.kind === "archive") {
+                await extractArchive({
+                    archivePath: sourcePath,
+                    destDir: tempRoot,
+                });
+                recipeRoot = await resolveRecipeRoot(tempRoot);
+            }
+            else {
+                const stagedRecipeRoot = path.join(tempRoot, "recipe");
+                await cp(sourcePath, stagedRecipeRoot, { recursive: true });
+                recipeRoot = stagedRecipeRoot;
+            }
             const manifest = await readRecipeManifest(path.join(recipeRoot, "manifest.json"));
             const resolvedTags = manifest.tags && manifest.tags.length > 0 ? manifest.tags : normalizeRecipeTags(indexTags);
             const manifestWithTags = resolvedTags.length > 0 ? { ...manifest, tags: resolvedTags } : manifest;

package/dist/commands/recipes/impl/scenario.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/scenario.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AA4B3F,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAG1F;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,cAAc,EAAE,CAAC,CAAC;IAClB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C,CAAC,CAeD;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+CjC;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAyB/D"}
+{"version":3,"file":"scenario.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/scenario.ts"],"names":[],"mappings":"AASA,OAAO,KAAK,EAAE,cAAc,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAwD3F,wBAAsB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAG1F;AAED,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IACjE,cAAc,EAAE,CAAC,CAAC;IAClB,SAAS,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC/C,CAAC,CAeD;AAED,wBAAsB,4BAA4B,CAChD,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,cAAc,GACvB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+CjC;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,UAAU,EAAE,MAAM,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAyB/D"}

package/dist/commands/recipes/impl/scenario.js

@@ -5,6 +5,30 @@ import { invalidFieldMessage, requiredFieldMessage } from "../../../cli/output.j
 import { isRecord } from "../../../shared/guards.js";
 import { RECIPES_SCENARIOS_DIR_NAME, RECIPES_SCENARIOS_INDEX_NAME } from "./constants.js";
 import { normalizeScenarioId } from "./normalize.js";
+function normalizeScenarioEvidence(raw, sourcePath) {
+    if (raw === undefined)
+        return undefined;
+    if (!isRecord(raw)) {
+        throw new Error(invalidFieldMessage("scenario.evidence", "object", sourcePath));
+    }
+    const required = raw.required === true;
+    let files = [];
+    if (raw.files !== undefined) {
+        if (!Array.isArray(raw.files)) {
+            throw new Error(invalidFieldMessage("scenario.evidence.files", "string[]", sourcePath));
+        }
+        files = raw.files
+            .map((value) => (typeof value === "string" ? value.trim() : ""))
+            .filter(Boolean);
+        if (files.length !== raw.files.length) {
+            throw new Error(invalidFieldMessage("scenario.evidence.files", "string[]", sourcePath));
+        }
+    }
+    if (required && files.length === 0) {
+        files = ["evidence.json"];
+    }
+    return { required, files };
+}
 function validateScenarioDefinition(raw, sourcePath) {
     if (!isRecord(raw))
         throw new Error(invalidFieldMessage("scenario", "object", sourcePath));
@@ -31,6 +55,7 @@ function validateScenarioDefinition(raw, sourcePath) {
         goal,
         inputs: raw.inputs,
         outputs: raw.outputs,
+        evidence: normalizeScenarioEvidence(raw.evidence, sourcePath),
         steps: raw.steps,
     };
 }

package/dist/commands/recipes/impl/types.d.ts

@@ -45,6 +45,10 @@ export type ScenarioDefinition = {
     goal: string;
     inputs: unknown;
     outputs: unknown;
+    evidence?: {
+        required: boolean;
+        files: string[];
+    };
     steps: unknown[];
 };
 export type RecipeScenarioDetail = {

package/dist/commands/recipes/impl/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE;QACN,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEjE,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,CAAC,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,MAAM,EAAE,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM,CAAC;YAChB,GAAG,EAAE,MAAM,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC;YACf,sBAAsB,CAAC,EAAE,MAAM,CAAC;YAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;SACjB,EAAE,CAAC;KACL,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;CACd,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/types.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,cAAc,GAAG;IAC3B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,KAAK,CAAC,EAAE;QACN,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;QAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,EAAE,CAAC;IACJ,SAAS,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEjE,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,cAAc,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,cAAc,EAAE,CAAC,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,oBAAoB,EAAE,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,cAAc,EAAE,GAAG,CAAC;IACpB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE;QACT,QAAQ,EAAE,OAAO,CAAC;QAClB,KAAK,EAAE,MAAM,EAAE,CAAC;KACjB,CAAC;IACF,KAAK,EAAE,OAAO,EAAE,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;IAClB,MAAM,EAAE,YAAY,GAAG,OAAO,GAAG,UAAU,CAAC;CAC7C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,cAAc,EAAE,CAAC,CAAC;IAClB,OAAO,EAAE;QACP,EAAE,EAAE,MAAM,CAAC;QACX,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,QAAQ,EAAE;YACR,OAAO,EAAE,MAAM,CAAC;YAChB,GAAG,EAAE,MAAM,CAAC;YACZ,MAAM,EAAE,MAAM,CAAC;YACf,sBAAsB,CAAC,EAAE,MAAM,CAAC;YAChC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;SACjB,EAAE,CAAC;KACL,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,cAAc,EAAE,CAAC,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAC3B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAC9B;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpC,MAAM,MAAM,qBAAqB,GAAG;IAClC,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,IAAI,EAAE,OAAO,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,OAAO,CAAC;CACd,CAAC"}

package/dist/commands/scenario/impl/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAmB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgCtE,KAAK,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,KAAK,oBAAoB,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,GACb,oBAAoB,CAQtB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDlB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoElB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2ChE;AAMD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;CACvD,GAAG,OAAO,CAAC,MAAM,CAAC,CAuNlB"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/commands.ts"],"names":[],"mappings":"AAKA,OAAO,EAAmB,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAgCtE,KAAK,iBAAiB,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,KAAK,oBAAoB,GAAG;IAC1B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,iBAAiB,EAC1B,UAAU,EAAE,MAAM,EAClB,IAAI,EAAE,MAAM,EAAE,GACb,oBAAoB,CAQtB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,GAAG,OAAO,CAAC,MAAM,CAAC,CAoDlB;AAED,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2ElB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,EAAE;IAC5C,OAAO,EAAE,iBAAiB,CAAC;IAC3B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7B,GAAG,OAAO,CAAC;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CA2ChE;AAkCD,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC;CACvD,GAAG,OAAO,CAAC,MAAM,CAAC,CAiQlB"}

package/dist/commands/scenario/impl/commands.js

@@ -125,6 +125,12 @@ export async function cmdScenarioInfoParsed(opts) {
         process.stdout.write(`Goal: ${scenario.goal}\n`);
         process.stdout.write(`Inputs: ${JSON.stringify(scenario.inputs, null, 2)}\n`);
         process.stdout.write(`Outputs: ${JSON.stringify(scenario.outputs, null, 2)}\n`);
+        if (scenario.evidence?.required) {
+            process.stdout.write(`Evidence: required (${normalizeExpectedEvidenceFiles(scenario.evidence.files).join(", ")})\n`);
+        }
+        else if (scenario.evidence?.files && scenario.evidence.files.length > 0) {
+            process.stdout.write(`Evidence: optional (${scenario.evidence.files.join(", ")})\n`);
+        }
         process.stdout.write("Steps:\n");
         let stepIndex = 1;
         for (const step of scenario.steps) {
@@ -185,6 +191,33 @@ export async function executeRecipeTool(opts) {
 function sanitizeRunId(value) {
     return value.replaceAll(/[^a-zA-Z0-9._-]/g, "_");
 }
+function normalizeExpectedEvidenceFiles(raw) {
+    if (!raw || raw.length === 0)
+        return ["evidence.json"];
+    const unique = [];
+    for (const value of raw) {
+        const file = value.trim();
+        if (!file)
+            continue;
+        if (unique.includes(file))
+            continue;
+        unique.push(file);
+    }
+    return unique.length > 0 ? unique : ["evidence.json"];
+}
+async function collectStepEvidenceFiles(stepDir, expectedFiles) {
+    const present = [];
+    const missing = [];
+    for (const file of expectedFiles) {
+        if (await fileExists(path.join(stepDir, file))) {
+            present.push(file);
+        }
+        else {
+            missing.push(file);
+        }
+    }
+    return { present, missing };
+}
 export async function cmdScenarioRunParsed(opts) {
     const resolved = opts.resolved ??
         (await resolveProject({
@@ -241,6 +274,13 @@ export async function cmdScenarioRunParsed(opts) {
             .replaceAll(".", "-")}-${sanitizeRunId(scenarioId)}`;
         const runDir = path.join(runsRoot, runId);
         await mkdir(runDir, { recursive: true });
+        const evidenceRequired = scenario.evidence?.required === true;
+        const expectedEvidenceFiles = evidenceRequired
+            ? normalizeExpectedEvidenceFiles(scenario.evidence?.files)
+            : normalizeExpectedEvidenceFiles(scenario.evidence?.files && scenario.evidence.files.length > 0
+                ? scenario.evidence.files
+                : undefined);
+        const missingEvidenceSteps = [];
         const stepsMeta = [];
         const stepsReport = [];
         for (let index = 0; index < scenario.steps.length; index++) {
@@ -299,6 +339,11 @@ export async function cmdScenarioRunParsed(opts) {
             const durationMs = Date.now() - startedAt;
             await atomicWriteFile(path.join(stepDir, "stdout.log"), result.stdout, "utf8");
             await atomicWriteFile(path.join(stepDir, "stderr.log"), result.stderr, "utf8");
+            const stepEvidence = await collectStepEvidenceFiles(stepDir, expectedEvidenceFiles);
+            const missingRequiredEvidence = evidenceRequired ? stepEvidence.missing : [];
+            if (missingRequiredEvidence.length > 0) {
+                missingEvidenceSteps.push(index + 1);
+            }
             stepsMeta.push({
                 tool: step.tool,
                 runtime,
@@ -313,10 +358,12 @@ export async function cmdScenarioRunParsed(opts) {
                 entrypoint,
                 args: redactArgs(step.args),
                 env_keys: stepEnvKeys,
+                evidence_files: stepEvidence.present,
+                missing_evidence_files: missingRequiredEvidence.length > 0 ? missingRequiredEvidence : undefined,
                 exit_code: result.exitCode,
                 duration_ms: durationMs,
             });
-            if (result.exitCode !== 0) {
+            if (result.exitCode !== 0 || missingRequiredEvidence.length > 0) {
                 const gitSummary = await getGitDiffSummary(resolved.gitRoot);
                 await writeScenarioReport({
                     runDir,
@@ -326,18 +373,32 @@ export async function cmdScenarioRunParsed(opts) {
                     startedAt: runStartedAt,
                     status: "failed",
                     steps: stepsReport,
+                    evidence: {
+                        required: evidenceRequired,
+                        expected_files: expectedEvidenceFiles,
+                        missing_steps: missingEvidenceSteps,
+                    },
                     gitSummary,
                 });
                 await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
                     recipe: recipeId,
                     scenario: scenarioId,
                     run_id: runId,
+                    evidence: {
+                        required: evidenceRequired,
+                        expected_files: expectedEvidenceFiles,
+                        missing_steps: missingEvidenceSteps,
+                    },
                     steps: stepsMeta,
                 }, null, 2)}\n`, "utf8");
+                const reason = missingRequiredEvidence.length > 0
+                    ? `Scenario step missing required evidence: ${step.tool} (${missingRequiredEvidence.join(", ")})`
+                    : `Scenario step failed: ${step.tool}`;
+                const stepExitCode = result.exitCode === 0 ? 1 : result.exitCode;
                 throw new CliError({
-                    exitCode: result.exitCode,
+                    exitCode: stepExitCode,
                     code: "E_INTERNAL",
-                    message: `Scenario step failed: ${step.tool}`,
+                    message: reason,
                 });
             }
         }
@@ -350,12 +411,22 @@ export async function cmdScenarioRunParsed(opts) {
             startedAt: runStartedAt,
             status: "success",
             steps: stepsReport,
+            evidence: {
+                required: evidenceRequired,
+                expected_files: expectedEvidenceFiles,
+                missing_steps: missingEvidenceSteps,
+            },
             gitSummary,
         });
         await atomicWriteFile(path.join(runDir, "meta.json"), `${JSON.stringify({
             recipe: recipeId,
             scenario: scenarioId,
             run_id: runId,
+            evidence: {
+                required: evidenceRequired,
+                expected_files: expectedEvidenceFiles,
+                missing_steps: missingEvidenceSteps,
+            },
             steps: stepsMeta,
         }, null, 2)}\n`, "utf8");
         process.stdout.write(`Run artifacts: ${path.relative(resolved.gitRoot, runDir)}\n`);

package/dist/commands/scenario/impl/report.d.ts

@@ -10,9 +10,16 @@ export type ScenarioRunReportStep = {
     entrypoint: string;
     args: string[];
     env_keys: string[];
+    evidence_files: string[];
+    missing_evidence_files?: string[];
     exit_code: number;
     duration_ms: number;
 };
+type ScenarioRunEvidenceSummary = {
+    required: boolean;
+    expected_files: string[];
+    missing_steps: number[];
+};
 export declare function redactArgs(args: string[]): string[];
 export declare function getGitDiffSummary(cwd: string): Promise<ScenarioRunGitSummary | undefined>;
 export declare function collectScenarioEnvKeys(stepEnv: Record<string, string> | undefined): string[];
@@ -24,6 +31,7 @@ export declare function writeScenarioReport(opts: {
     startedAt: string;
     status: "success" | "failed";
     steps: ScenarioRunReportStep[];
+    evidence: ScenarioRunEvidenceSummary;
     gitSummary?: ScenarioRunGitSummary;
 }): Promise<void>;
 export {};

package/dist/commands/scenario/impl/report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/report.ts"],"names":[],"mappings":"AAYA,KAAK,qBAAqB,GAAG;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AA2BF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBnD;AASD,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAwB/F;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CAU5F;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBhB"}
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../../../src/commands/scenario/impl/report.ts"],"names":[],"mappings":"AAYA,KAAK,qBAAqB,GAAG;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,sBAAsB,CAAC,EAAE,MAAM,EAAE,CAAC;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB,CAAC;AAEF,KAAK,0BAA0B,GAAG;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB,CAAC;AA4BF,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAmBnD;AASD,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,GAAG,SAAS,CAAC,CAwB/F;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,GAAG,MAAM,EAAE,CAU5F;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC7B,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,QAAQ,EAAE,0BAA0B,CAAC;IACrC,UAAU,CAAC,EAAE,qBAAqB,CAAC;CACpC,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBhB"}

package/dist/commands/scenario/impl/report.js

@@ -93,6 +93,7 @@ export async function writeScenarioReport(opts) {
         ended_at: new Date().toISOString(),
         status: opts.status,
         steps: opts.steps,
+        evidence: opts.evidence,
         git: opts.gitSummary,
     };
     await atomicWriteFile(path.join(opts.runDir, SCENARIO_REPORT_NAME), `${JSON.stringify(report, null, 2)}\n`, "utf8");

package/dist/commands/shared/reconcile-check.d.ts

@@ -0,0 +1,7 @@
+import { type CommandContext } from "./task-backend.js";
+export declare function ensureReconciledBeforeMutation(opts: {
+    ctx: CommandContext;
+    command: string;
+    strictTaskScan?: boolean;
+}): Promise<void>;
+//# sourceMappingURL=reconcile-check.d.ts.map

package/dist/commands/shared/reconcile-check.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconcile-check.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/reconcile-check.ts"],"names":[],"mappings":"AAEA,OAAO,EAAiB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAgBvE,wBAAsB,8BAA8B,CAAC,IAAI,EAAE;IACzD,GAAG,EAAE,cAAc,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAAC,IAAI,CAAC,CA4ChB"}

package/dist/commands/shared/reconcile-check.js

@@ -0,0 +1,60 @@
+import { exitCodeForError } from "../../cli/exit-codes.js";
+import { CliError } from "../../shared/errors.js";
+import { listTasksMemo } from "./task-backend.js";
+function compactError(err) {
+    if (err instanceof Error) {
+        const text = err.message.trim();
+        return text.length > 0 ? text : err.name;
+    }
+    return String(err);
+}
+function summarizeWarnings(warnings) {
+    const preview = warnings.slice(0, 3).join("; ");
+    const suffix = warnings.length > 3 ? `; +${warnings.length - 3} more` : "";
+    return `skipped ${warnings.length} task files during scan (${preview}${suffix})`;
+}
+export async function ensureReconciledBeforeMutation(opts) {
+    try {
+        await opts.ctx.git.statusChangedPaths();
+    }
+    catch (err) {
+        throw new CliError({
+            exitCode: exitCodeForError("E_GIT"),
+            code: "E_GIT",
+            message: `reconcile check failed: cannot inspect git status (${compactError(err)})`,
+            context: {
+                command: opts.command,
+                reason_code: "reconcile_git_state_unreadable",
+            },
+        });
+    }
+    if (opts.strictTaskScan === false)
+        return;
+    try {
+        await listTasksMemo(opts.ctx);
+    }
+    catch (err) {
+        throw new CliError({
+            exitCode: exitCodeForError("E_VALIDATION"),
+            code: "E_VALIDATION",
+            message: `reconcile check failed: task scan error (${compactError(err)})`,
+            context: {
+                command: opts.command,
+                reason_code: "reconcile_task_scan_failed",
+            },
+        });
+    }
+    const warnings = opts.ctx.taskBackend.getLastListWarnings?.() ?? [];
+    if (warnings.length === 0)
+        return;
+    throw new CliError({
+        exitCode: exitCodeForError("E_VALIDATION"),
+        code: "E_VALIDATION",
+        message: `reconcile check failed: ${summarizeWarnings(warnings)}`,
+        context: {
+            command: opts.command,
+            reason_code: "reconcile_task_scan_incomplete",
+            warning_count: warnings.length,
+        },
+    });
+}