agentplane 0.2.4 → 0.2.6

package/assets/AGENTS.md

@@ -6,7 +6,7 @@ default_initiator: ORCHESTRATOR
 
 # PURPOSE
 
-This document defines the **behavioral policy** for agents operating in an agentplane-managed development workspace.
+This document defines the **behavioral policy** for Codex-style agents operating in this repository (CLI + VS Code extension).
 Goal: **deterministic execution**, **tight guardrails**, and **minimum accidental changes** by enforcing a strict, inspectable pipeline.
 
 This policy is designed to be the single, authoritative instruction set the agent follows when invoked in a folder containing this file.
@@ -28,11 +28,9 @@ If two sources conflict, prefer the higher-priority source.
 
 All commands in this policy are written as `agentplane ...` and MUST use the `agentplane` CLI available on `PATH`.
 
-Do not use repository-relative entrypoints (for example `node .../bin/agentplane.js`) in instructions or automation.
-
 ## Scope boundary
 
-- All operations must remain within the workspace unless explicitly approved (see Approval Gates + Overrides).
+- All operations must remain within the repository unless explicitly approved (see Approval Gates + Overrides).
 - Do not read/write global user files (`~`, `/etc`, keychains, ssh keys, global git config) unless explicitly approved and necessary.
 
 ## Agent roles (authority boundaries)
@@ -62,16 +60,16 @@ Execution agents are defined by JSON files under `.agentplane/agents/*.json`. Th
 
 ## Definitions (remove ambiguity)
 
-- **Read-only inspection**: commands that may read workspace state but must not change tracked files or commit history.
+- **Read-only inspection**: commands that may read repo state but must not change tracked files or commit history.
   Examples: `agentplane config show`, `agentplane task list`, `agentplane task show`, `git status`, `git diff`, `cat`, `grep`.
-- **Mutating action**: anything that can change tracked files, task state, commits, branches, or outside-workspace state.
+- **Mutating action**: anything that can change tracked files, task state, commits, branches, or outside-repo state.
   Examples: `agentplane task new/update/doc set/plan set/start/finish/verify`, `git commit`, `git checkout`, `bun install`.
 
 If unsure whether an action mutates state, treat it as mutating.
 
 ## Truthfulness & safety (hard invariants)
 
-- Never invent facts about workspace state. Prefer inspection over guessing.
+- Never invent facts about repo state. Prefer inspection over guessing.
 - Never modify `.agentplane/tasks.json` manually. It is an **export-only snapshot** generated via `agentplane task export`.
 - Never expose raw internal chain-of-thought. Use structured artifacts instead (see OUTPUT CONTRACTS).
 
@@ -82,7 +80,7 @@ If unsure whether an action mutates state, treat it as mutating.
 - “Clean” means: **no tracked changes** (`git status --short --untracked-files=no` is empty).
 - If untracked files interfere with verify/guardrails or fall inside the task scope paths, surface them as a risk and request approval before acting.
 
-## Approval gates (network vs outside-workspace)
+## Approval gates (network vs outside-repo)
 
 ### Network
 
@@ -97,20 +95,15 @@ Network use includes (non-exhaustive):
 - `git fetch`, `git pull`
 - calling external HTTP APIs or remote services
 
-### Outside-workspace
+### Outside-repo
 
-Outside-workspace reading/writing is **always prohibited** unless the user explicitly approves it (regardless of `require_network`).
+Outside-repo reading/writing is **always prohibited** unless the user explicitly approves it (regardless of `require_network`).
 
-Outside-workspace includes (non-exhaustive):
+Outside-repo includes (non-exhaustive):
 
-- reading/writing outside the workspace (`~`, `/etc`, global configs)
+- reading/writing outside the repo (`~`, `/etc`, global configs)
 - modifying keychains, ssh keys, credential stores
-- any tool that mutates outside-workspace state
-
-### Interactive vs non-interactive runs (approvals mechanics)
-
-- Interactive: the user can approve prompts (for example network use) during the run.
-- Non-interactive (CI, scripted runs): approvals MUST be expressed via flags/config up front (for example `--yes`). If an approval is required and not granted, stop and request explicit user instruction.
+- any tool that mutates outside-repo state
 
 ---
 
@@ -156,18 +149,13 @@ This is the required substitute for raw chain-of-thought.
 
 Preflight is **read-only inspection**. It is allowed before user approval.
 
-Before any planning or execution, ORCHESTRATOR must:
+Before any planning or execution, ORCHESTRATOR must run:
 
-1. Determine whether the current directory is an initialized agentplane workspace (e.g. `.agentplane/config.json` exists).
-2. Attempt git inspection:
-   - `git status --short --untracked-files=no`
-   - `git rev-parse --abbrev-ref HEAD`
-3. If the workspace is initialized, also run:
-   - `agentplane config show`
-   - `agentplane quickstart` (CLI instructions)
-   - `agentplane task list`
-
-If a command fails because the workspace is not initialized or not a git repo, record that fact in the Preflight Summary instead of guessing or proceeding with mutating actions.
+1. `agentplane config show`
+2. `agentplane quickstart` (CLI instructions)
+3. `agentplane task list`
+4. `git status --short --untracked-files=no`
+5. `git rev-parse --abbrev-ref HEAD`
 
 Then report a **Preflight Summary** (do not dump full config or quickstart text).
 
@@ -178,8 +166,6 @@ You MUST explicitly state:
 - Config loaded: yes/no
 - CLI instructions loaded: yes/no
 - Task list loaded: yes/no
-- Workspace initialized: yes/no
-- Git repository detected: yes/no
 - Working tree clean (tracked-only): yes/no
 - Current git branch: `<name>`
 - `workflow_mode`: `direct` / `branch_pr` / unknown
@@ -187,7 +173,7 @@ You MUST explicitly state:
   - `require_plan`: true/false/unknown
   - `require_verify`: true/false/unknown
   - `require_network`: true/false/unknown
-- Outside-workspace: not needed / needed (if needed, requires explicit user approval)
+- Outside-repo: not needed / needed (if needed, requires explicit user approval)
 
 Do not output the full contents of config or quickstart unless the user explicitly asks.
 
@@ -199,7 +185,7 @@ Do not output the full contents of config or quickstart unless the user explicit
 - ORCHESTRATOR starts by producing a top-level plan + task decomposition.
 - **Before explicit user approval, do not perform mutating actions.**
   - Allowed: read-only inspection (including preflight).
-  - Prohibited: creating/updating tasks, editing files, starting/finishing tasks, commits, branching, verify runs that mutate task state, network use, outside-workspace access.
+  - Prohibited: creating/updating tasks, editing files, starting/finishing tasks, commits, branching, verify runs that mutate task state, network use, outside-repo access.
 
 ---
 
@@ -219,7 +205,7 @@ ORCHESTRATOR MUST produce:
 - **Decomposition**
   - Atomic tasks assignable to existing agents
 - **Approvals**
-  - Whether network and/or outside-workspace actions will be needed
+  - Whether network and/or outside-repo actions will be needed
   - Any requested overrides (see Override Protocol)
 - **Verification criteria**
   - What will be considered "done" + checks to run
@@ -234,7 +220,7 @@ ORCHESTRATOR MUST produce:
 - PLANNER creates any additional tasks from the approved decomposition.
 - Task IDs are referenced in comments/notes for traceability.
 
-**Task tracking is mandatory** for any work that changes workspace state. Exceptions require explicit user approval (Override Protocol).
+**Task tracking is mandatory** for any work that changes repo state. Exceptions require explicit user approval (Override Protocol).
 
 ---
 
@@ -244,7 +230,7 @@ Overrides exist to let the user intentionally relax guardrails **in a controlled
 
 ## Hard invariants (cannot be overridden)
 
-- No fabricated workspace facts.
+- No fabricated repo facts.
 - No raw chain-of-thought.
 - No manual editing of `.agentplane/tasks.json` (exports are generated, not edited).
 
@@ -253,7 +239,7 @@ Overrides exist to let the user intentionally relax guardrails **in a controlled
 Common overridable guardrails:
 
 - **Network**: allow network access even when `require_network=true`.
-- **Outside-workspace**: allow reading/writing outside the workspace (scoped).
+- **Outside-repo**: allow reading/writing outside the repo (scoped).
 - **Pipeline**: skip/relax steps (e.g., skip task tracking for analysis-only; skip exports).
 - **Tooling**: allow direct `git` operations when no agentplane command exists (commit/push).
 - **Force flags**: allow `--force` status transitions / dependency bypass.
@@ -282,7 +268,7 @@ Any approved override MUST be recorded:
 
 ## Golden rule
 
-If an agent changes workspace state, that work must be traceable to a task ID and a filled task README.
+If an agent changes repo state, that work must be traceable to a task ID and a filled task README.
 
 ## Scaffold is mandatory
 
@@ -396,9 +382,7 @@ If config sets `agents.approvals.require_plan=true`:
 
 # COMMIT WORKFLOW
 
-Default: commits and pushes should go through `agentplane` commands (instead of direct `git commit`/`git push`) to enforce policy and allowlists.
-
-Override: direct git operations are allowed only with explicit user approval, and must be logged under the task `## Notes` → `### Approvals / Overrides`.
+- Commits and pushes must go through `agentplane` commands (no direct `git commit`/`git push`) unless explicitly overridden.
 
 ## Commit message semantics (canonical)
 
@@ -431,12 +415,25 @@ In this mode:
 
 `<emoji> <suffix> <scope>: <summary>`
 
+`<suffix>` rules:
+
+- Task commits: `<suffix>` must equal the task id suffix (e.g. task `202601010101-ABCDEF` -> `ABCDEF`).
+- Non-task commits: `<suffix>` may be omitted. Preferred: `<emoji> <scope>: <summary>`.
+- Optional explicit non-task suffix: `DEV` is allowed as `<emoji> DEV <scope>: <summary>`.
+
 Recommended action/status emojis:
 
 - `🚧` start / DOING
 - `⛔` blocked / BLOCKED
 - `✅` finish / DONE
 
+Executor agent emoji policy (status/comment-driven commits):
+
+- In `workflow_mode=direct`, status/comment-driven commits prefer the active `work start` lock (`.agentplane/cache/direct-work.json`) when present.
+- The emoji for status/comment-driven commits is derived from the executor agent id (recorded by `agentplane work start ... --agent <ID>`).
+- Users may override the emoji per agent by adding `commit_emoji` to `.agentplane/agents/<ID>.json`.
+- Finish commits MUST use `✅` (enforced by CLI and by the `commit-msg` hook for agentplane-generated commits).
+
 Agents must not reinterpret `-m` as "body-only" or "comment-only". `-m` is a commit message.
 
 ## Allowlist staging (guardrails)
@@ -455,7 +452,7 @@ Always follow `workflow_mode` from `.agentplane/config.json`.
 Rules:
 
 - Do all work in the current checkout.
-- Task branches are allowed in `direct` (single working directory). Note: `agentplane work start <task-id> --agent <ROLE> --slug <slug>` will create/checkout `task/<task-id>/<slug>` in-place.
+- In `direct` (single working directory), agentplane uses a single-stream workflow in the current checkout. `agentplane work start <task-id> --agent <ROLE> --slug <slug>` records the active task and keeps the current branch (no task branches).
 - Do not use worktrees in `direct`. `agentplane work start ... --worktree` is `branch_pr`-only.
 - If you only need artifacts/docs without switching branches, prefer `agentplane task scaffold <task-id>`.
 
@@ -509,7 +506,7 @@ Re-approval is required if any of the following becomes true:
 
 - Scope expands beyond the approved in-scope paths/artifacts.
 - New tasks are needed that were not in the approved decomposition.
-- Any network or outside-workspace access becomes necessary (and was not approved).
+- Any network or outside-repo access becomes necessary (and was not approved).
 - Verification criteria change materially.
 - Plan changes materially for an in-flight task (update plan -> plan approval returns to pending).
 - Guardrails require `--force` to proceed.

package/bin/agentplane.js

@@ -1,2 +1,110 @@
 #!/usr/bin/env node
-import "../dist/cli.js";
+import path from "node:path";
+import { readdir, stat } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+
+async function exists(p) {
+  try {
+    await stat(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function isTestLikePath(absPath) {
+  // The repo build does not emit test files to dist. If we treat test mtimes as
+  // "src is newer than dist", we can block normal commits that only change tests.
+  const normalized = absPath.replaceAll("\\", "/");
+  if (normalized.includes("/__snapshots__/")) return true;
+  if (normalized.endsWith(".snap")) return true;
+  if (/\.(unit\.)?test\.[cm]?ts$/.test(normalized)) return true;
+  if (/\.(unit\.)?test\.tsx$/.test(normalized)) return true;
+  return false;
+}
+
+// Keep this file dependency-free and simple: rely on directory mtime scans below.
+async function newestMtimeMsInDir(dir) {
+  let newest = 0;
+  const stack = [dir];
+  while (stack.length > 0) {
+    const current = stack.pop();
+    if (!current) continue;
+    let entries;
+    try {
+      entries = await readdir(current, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const entry of entries) {
+      const abs = path.join(current, entry.name);
+      if (entry.isDirectory()) {
+        stack.push(abs);
+        continue;
+      }
+      if (!entry.isFile()) continue;
+      if (isTestLikePath(abs)) continue;
+      try {
+        const s = await stat(abs);
+        if (s.mtimeMs > newest) newest = s.mtimeMs;
+      } catch {
+        // ignore
+      }
+    }
+  }
+  return newest;
+}
+
+async function assertDistUpToDate() {
+  const here = path.dirname(fileURLToPath(import.meta.url));
+  const agentplaneRoot = path.resolve(here, "..");
+  const inRepo = await exists(path.join(agentplaneRoot, "src", "cli.ts"));
+  if (!inRepo) return true;
+
+  const allowStale = (process.env.AGENTPLANE_DEV_ALLOW_STALE_DIST ?? "").trim() === "1";
+  const agentplaneDistDir = path.join(agentplaneRoot, "dist");
+  if (!(await exists(agentplaneDistDir))) {
+    process.stderr.write(
+      "error: agentplane dist is missing for this repo checkout.\n" +
+        "Fix:\n" +
+        "  bun run --filter=@agentplaneorg/core build\n" +
+        "  bun run --filter=agentplane build\n",
+    );
+    process.exitCode = 2;
+    return false;
+  }
+
+  const agentplaneSrcDir = path.join(agentplaneRoot, "src");
+  const agentplaneSrcNewest = await newestMtimeMsInDir(agentplaneSrcDir);
+  const agentplaneDistNewest = await newestMtimeMsInDir(agentplaneDistDir);
+  const isStaleAgentplane = agentplaneSrcNewest > agentplaneDistNewest;
+
+  // If we're in the monorepo, also check core dist because the CLI imports it.
+  const repoRoot = path.resolve(agentplaneRoot, "..", "..");
+  const coreRoot = path.join(repoRoot, "packages", "core");
+  const coreSrcDir = path.join(coreRoot, "src");
+  const coreDistDir = path.join(coreRoot, "dist");
+  let isStaleCore = false;
+  if ((await exists(coreSrcDir)) && (await exists(coreDistDir))) {
+    const coreSrcNewest = await newestMtimeMsInDir(coreSrcDir);
+    const coreDistNewest = await newestMtimeMsInDir(coreDistDir);
+    isStaleCore = coreSrcNewest > coreDistNewest;
+  }
+
+  if ((isStaleAgentplane || isStaleCore) && !allowStale) {
+    process.stderr.write(
+      "error: refusing to run a stale repo build (dist is older than src).\n" +
+        "Fix:\n" +
+        "  bun run --filter=@agentplaneorg/core build\n" +
+        "  bun run --filter=agentplane build\n" +
+        "Override (not recommended): set AGENTPLANE_DEV_ALLOW_STALE_DIST=1\n",
+    );
+    process.exitCode = 2;
+    return false;
+  }
+
+  return true;
+}
+
+const ok = await assertDistUpToDate();
+if (ok) await import("../dist/cli.js");

package/dist/cli/command-guide.js

@@ -89,7 +89,7 @@ const ROLE_GUIDES = [
     {
         role: "CODER",
         lines: [
-            "- direct mode: work in the current checkout; `agentplane work start <task-id> --agent <ROLE> --slug <slug>` creates/checks out `task/<task-id>/<slug>` in-place (no worktree). Use `agentplane task scaffold <task-id>` for docs without switching branches.",
+            "- direct mode: single-stream in the current checkout; `agentplane work start <task-id> --agent <ROLE> --slug <slug>` records the active task and keeps the current branch (no task branches). Use `agentplane task scaffold <task-id>` for docs without switching context.",
             "- branch_pr: `agentplane work start <task-id> --agent <ROLE> --slug <slug> --worktree`",
             '- Status updates: `agentplane start <task-id> --author <ROLE> --body "Start: ..."` / `agentplane block <task-id> --author <ROLE> --body "Blocked: ..."`',
             "- Verify Steps: `agentplane task verify-show <task-id>` (use as the verification contract before recording results).",
@@ -101,7 +101,7 @@ const ROLE_GUIDES = [
     {
         role: "TESTER",
         lines: [
-            "- direct mode: work in the current checkout; `agentplane work start <task-id> --agent <ROLE> --slug <slug>` creates/checks out `task/<task-id>/<slug>` in-place (no worktree). Use `agentplane task scaffold <task-id>` for docs without switching branches.",
+            "- direct mode: single-stream in the current checkout; `agentplane work start <task-id> --agent <ROLE> --slug <slug>` records the active task and keeps the current branch (no task branches). Use `agentplane task scaffold <task-id>` for docs without switching context.",
             "- branch_pr: `agentplane work start <task-id> --agent <ROLE> --slug <slug> --worktree`",
             '- Status updates: `agentplane start <task-id> --author <ROLE> --body "Start: ..."` / `agentplane block <task-id> --author <ROLE> --body "Blocked: ..."`',
             "- Verify Steps: `agentplane task verify-show <task-id>` (treat as the verification contract).",

package/dist/cli/critical/cli-runner.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cli-runner.d.ts.map

package/dist/cli/critical/cli-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-runner.d.ts","sourceRoot":"","sources":["../../../src/cli/critical/cli-runner.ts"],"names":[],"mappings":""}

package/dist/cli/critical/cli-runner.js

@@ -0,0 +1,11 @@
+import { runCli } from "../run-cli.js";
+async function main() {
+    const argv = process.argv.slice(2);
+    const code = await runCli(argv);
+    process.exitCode = code;
+}
+main().catch((err) => {
+    // Last-resort fallback. The contract for tests is "exit non-zero and surface the error".
+    console.error(err);
+    process.exitCode = 1;
+});

package/dist/cli/critical/harness.d.ts

@@ -0,0 +1,22 @@
+export type RunCliResult = {
+    code: number;
+    stdout: string;
+    stderr: string;
+};
+export declare function makeTempDir(prefix?: string): Promise<string>;
+export declare function ensureDir(dir: string): Promise<void>;
+export declare function writeText(filePath: string, content: string): Promise<void>;
+export declare function readText(filePath: string): Promise<string>;
+export declare function real(p: string): Promise<string>;
+export declare function pathExists(filePath: string): Promise<boolean>;
+export declare function listDirRecursive(root: string): Promise<string[]>;
+export declare function gitInit(repoRoot: string, branch?: string): Promise<void>;
+export declare function gitCommitAll(repoRoot: string, message: string): Promise<void>;
+export declare function gitHead(repoRoot: string): Promise<string>;
+export declare function runCli(args: string[], opts: {
+    cwd: string;
+    extraEnv?: Record<string, string>;
+}): Promise<RunCliResult>;
+export declare function expectCliError(result: RunCliResult, code: number, errCode: string): void;
+export declare function cleanGitEnv(): NodeJS.ProcessEnv;
+//# sourceMappingURL=harness.d.ts.map

package/dist/cli/critical/harness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"harness.d.ts","sourceRoot":"","sources":["../../../src/cli/critical/harness.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAgBF,wBAAsB,WAAW,CAAC,MAAM,SAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAElF;AAED,wBAAsB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE1D;AAED,wBAAsB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGhF;AAED,wBAAsB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAEhE;AAED,wBAAsB,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAErD;AAED,wBAAsB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnE;AAED,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAatE;AAED,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB9E;AAED,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGnF;AAED,wBAAsB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAM/D;AAED,wBAAsB,MAAM,CAC1B,IAAI,EAAE,MAAM,EAAE,EACd,IAAI,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,GACvD,OAAO,CAAC,YAAY,CAAC,CA8CvB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAexF;AAED,wBAAgB,WAAW,IAAI,MAAM,CAAC,UAAU,CAqB/C"}

package/dist/cli/critical/harness.js

@@ -0,0 +1,164 @@
+import { execFile } from "node:child_process";
+import { mkdir, mkdtemp, readFile, readdir, realpath, stat, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFile);
+function renderExecField(v) {
+    if (v == null)
+        return "";
+    if (typeof v === "string")
+        return v;
+    if (Buffer.isBuffer(v))
+        return v.toString("utf8");
+    try {
+        return JSON.stringify(v);
+    }
+    catch {
+        return "[unserializable]";
+    }
+}
+export async function makeTempDir(prefix = "agentplane-critical-") {
+    return await mkdtemp(path.join(os.tmpdir(), prefix));
+}
+export async function ensureDir(dir) {
+    await mkdir(dir, { recursive: true });
+}
+export async function writeText(filePath, content) {
+    await ensureDir(path.dirname(filePath));
+    await writeFile(filePath, content, "utf8");
+}
+export async function readText(filePath) {
+    return await readFile(filePath, "utf8");
+}
+export async function real(p) {
+    return await realpath(p);
+}
+export async function pathExists(filePath) {
+    try {
+        await stat(filePath);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export async function listDirRecursive(root) {
+    const out = [];
+    async function walk(dir) {
+        const entries = await readdir(dir, { withFileTypes: true });
+        for (const entry of entries) {
+            const abs = path.join(dir, entry.name);
+            const rel = path.relative(root, abs);
+            out.push(rel);
+            if (entry.isDirectory())
+                await walk(abs);
+        }
+    }
+    if (await pathExists(root))
+        await walk(root);
+    return out.toSorted((a, b) => a.localeCompare(b));
+}
+export async function gitInit(repoRoot, branch = "main") {
+    await ensureDir(repoRoot);
+    // Use real git, but avoid reading developer global/system configs.
+    await execFileAsync("git", ["init", "-q", "-b", branch], {
+        cwd: repoRoot,
+        env: cleanGitEnv(),
+    }).catch(async () => {
+        // Older git: init without -b, then create branch.
+        await execFileAsync("git", ["init", "-q"], { cwd: repoRoot, env: cleanGitEnv() });
+        await execFileAsync("git", ["checkout", "-q", "-b", branch], {
+            cwd: repoRoot,
+            env: cleanGitEnv(),
+        });
+    });
+    // Repo-local identity to avoid relying on global git config.
+    await execFileAsync("git", ["config", "user.email", "agentplane-test@example.com"], {
+        cwd: repoRoot,
+        env: cleanGitEnv(),
+    });
+    await execFileAsync("git", ["config", "user.name", "Agentplane Test"], {
+        cwd: repoRoot,
+        env: cleanGitEnv(),
+    });
+}
+export async function gitCommitAll(repoRoot, message) {
+    await execFileAsync("git", ["add", "-A"], { cwd: repoRoot, env: cleanGitEnv() });
+    await execFileAsync("git", ["commit", "-m", message], { cwd: repoRoot, env: cleanGitEnv() });
+}
+export async function gitHead(repoRoot) {
+    const { stdout } = await execFileAsync("git", ["rev-parse", "HEAD"], {
+        cwd: repoRoot,
+        env: cleanGitEnv(),
+    });
+    return String(stdout).trim();
+}
+export async function runCli(args, opts) {
+    // Run as a separate process using bun to execute the TS runner.
+    const runnerPath = path.join(process.cwd(), "packages", "agentplane", "src", "cli", "critical", "cli-runner.ts");
+    const isolatedHome = await makeTempDir("agentplane-critical-home-");
+    const isolatedAgentplaneHome = await makeTempDir("agentplane-critical-ap-home-");
+    const env = {
+        ...process.env,
+        ...cleanGitEnv(),
+        HOME: isolatedHome,
+        XDG_CONFIG_HOME: path.join(isolatedHome, ".config"),
+        AGENTPLANE_HOME: isolatedAgentplaneHome,
+        AGENTPLANE_NO_UPDATE_CHECK: "1",
+        ...opts.extraEnv,
+    };
+    // execFileAsync throws on non-zero exit. Normalize into a stable `{code,stdout,stderr}` shape.
+    let code = 0;
+    let stdout = "";
+    let stderr = "";
+    try {
+        const ok = (await execFileAsync("bun", [runnerPath, ...args], {
+            cwd: opts.cwd,
+            env,
+            encoding: "utf8",
+            maxBuffer: 10 * 1024 * 1024,
+        }));
+        stdout = String(ok.stdout ?? "");
+        stderr = String(ok.stderr ?? "");
+    }
+    catch (err) {
+        const e = err;
+        stdout = renderExecField(e.stdout);
+        stderr = renderExecField(e.stderr);
+        code = typeof e.code === "number" ? e.code : 1;
+    }
+    return { code, stdout, stderr };
+}
+export function expectCliError(result, code, errCode) {
+    if (result.code !== code) {
+        throw new Error(`Expected exit code ${code} but got ${result.code}\n` +
+            `stdout:\n${result.stdout}\n` +
+            `stderr:\n${result.stderr}\n`);
+    }
+    if (!result.stderr.includes(`error [${errCode}]`)) {
+        throw new Error(`Expected stderr to include error [${errCode}]\n` +
+            `stdout:\n${result.stdout}\n` +
+            `stderr:\n${result.stderr}\n`);
+    }
+}
+export function cleanGitEnv() {
+    const env = { ...process.env };
+    // Prevent git from inheriting caller-specific repository bindings.
+    delete env.GIT_DIR;
+    delete env.GIT_WORK_TREE;
+    delete env.GIT_COMMON_DIR;
+    delete env.GIT_INDEX_FILE;
+    delete env.GIT_OBJECT_DIRECTORY;
+    delete env.GIT_ALTERNATE_OBJECT_DIRECTORIES;
+    // Disable global/system configs to avoid developer machine drift.
+    env.GIT_CONFIG_GLOBAL = "/dev/null";
+    env.GIT_CONFIG_SYSTEM = "/dev/null";
+    env.GIT_TERMINAL_PROMPT = "0";
+    // Provide identity for commits when commands rely on it.
+    env.GIT_AUTHOR_NAME = env.GIT_AUTHOR_NAME ?? "Agentplane Test";
+    env.GIT_AUTHOR_EMAIL = env.GIT_AUTHOR_EMAIL ?? "agentplane-test@example.com";
+    env.GIT_COMMITTER_NAME = env.GIT_COMMITTER_NAME ?? "Agentplane Test";
+    env.GIT_COMMITTER_EMAIL = env.GIT_COMMITTER_EMAIL ?? "agentplane-test@example.com";
+    return env;
+}

package/dist/cli/run-cli/commands/init/git.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../../../src/cli/run-cli/commands/init/git.ts"],"names":[],"mappings":"AAIA,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAAC,CASxD"}
+{"version":3,"file":"git.d.ts","sourceRoot":"","sources":["../../../../../src/cli/run-cli/commands/init/git.ts"],"names":[],"mappings":"AAKA,wBAAsB,aAAa,CAAC,IAAI,EAAE;IACxC,QAAQ,EAAE,MAAM,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B,GAAG,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,OAAO,CAAA;CAAE,CAAC,CAUxD"}

package/dist/cli/run-cli/commands/init/git.js

@@ -1,12 +1,14 @@
-import { findGitRoot } from "@agentplaneorg/core";
+import path from "node:path";
 import { gitInitRepo } from "../../../../commands/workflow.js";
+import { getPathKind } from "../../../fs-utils.js";
 export async function ensureGitRoot(opts) {
-    const existingGitRoot = await findGitRoot(opts.initRoot);
-    const gitRootExisted = Boolean(existingGitRoot);
-    let gitRoot = existingGitRoot;
-    if (!gitRoot) {
+    // Init is intentionally scoped to initRoot only. We do not search parent directories
+    // for an existing git repository, to avoid accidentally initializing the wrong workspace.
+    const dotGit = path.join(opts.initRoot, ".git");
+    const kind = await getPathKind(dotGit);
+    const gitRootExisted = kind === "dir";
+    if (!gitRootExisted) {
         await gitInitRepo(opts.initRoot, opts.baseBranchFallback);
-        gitRoot = opts.initRoot;
     }
-    return { gitRoot, gitRootExisted };
+    return { gitRoot: opts.initRoot, gitRootExisted };
 }

package/dist/cli/run-cli/commands/init.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../src/cli/run-cli/commands/init.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAatE,KAAK,SAAS,GAAG;IACf,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IACtC,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAsBF,KAAK,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5D,eAAO,MAAM,QAAQ,EAAE,WAAW,CAAC,UAAU,CA0I5C,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,cAAc,CAAC,UAAU,CACmB,CAAC"}
+{"version":3,"file":"init.d.ts","sourceRoot":"","sources":["../../../../src/cli/run-cli/commands/init.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAatE,KAAK,SAAS,GAAG;IACf,GAAG,CAAC,EAAE,OAAO,GAAG,QAAQ,GAAG,UAAU,CAAC;IACtC,QAAQ,CAAC,EAAE,QAAQ,GAAG,WAAW,CAAC;IAClC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC9B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,sBAAsB,CAAC,EAAE,OAAO,CAAC;IACjC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAsBF,KAAK,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG;IAAE,GAAG,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5D,eAAO,MAAM,QAAQ,EAAE,WAAW,CAAC,UAAU,CA0I5C,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,cAAc,CAAC,UAAU,CACmB,CAAC"}

package/dist/cli/run-cli/commands/init.js

@@ -1,5 +1,4 @@
 import path from "node:path";
-import { resolveProject } from "@agentplaneorg/core";
 import { mapCoreError } from "../../error-map.js";
 import { promptChoice, promptInput, promptYesNo } from "../../prompts.js";
 import { invalidValueForFlag } from "../../output.js";
@@ -40,7 +39,7 @@ export const initSpec = {
     id: ["init"],
     group: "Setup",
     summary: "Initialize agentplane project files under .agentplane/.",
-    description: "Creates .agentplane/ config, backend stubs, and agent templates. In interactive mode it prompts for missing inputs; use --yes for non-interactive mode.",
+    description: "Creates .agentplane/ config, backend stubs, and agent templates in the target directory. If the target directory is not a git repository, it initializes one and writes an initial install commit. In interactive mode it prompts for missing inputs; use --yes for non-interactive mode.",
     options: [
         {
             kind: "string",
@@ -253,10 +252,7 @@ async function cmdInit(opts) {
         const initRoot = path.resolve(opts.rootOverride ?? opts.cwd);
         const baseBranchFallback = "main";
         const { gitRoot, gitRootExisted } = await ensureGitRoot({ initRoot, baseBranchFallback });
-        const resolved = await resolveProject({
-            cwd: gitRoot,
-            rootOverride: gitRoot,
-        });
+        const resolved = { gitRoot, agentplaneDir: path.join(gitRoot, ".agentplane") };
         const initBaseBranch = await resolveInitBaseBranchForInit({
             gitRoot: resolved.gitRoot,
             baseBranchFallback,

package/dist/cli/run-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-cli.d.ts","sourceRoot":"","sources":["../../src/cli/run-cli.ts"],"names":[],"mappings":"AAmVA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoI5D"}
+{"version":3,"file":"run-cli.d.ts","sourceRoot":"","sources":["../../src/cli/run-cli.ts"],"names":[],"mappings":"AAwVA,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAoI5D"}

package/dist/cli/run-cli.js

@@ -298,7 +298,10 @@ async function maybeResolveProject(opts) {
         });
     }
     catch (err) {
-        if (err instanceof Error && err.message.startsWith("Not a git repository")) {
+        if (err instanceof Error &&
+            (err.message.startsWith("Not an agentplane project") ||
+                err.message.startsWith("Not a git repository") ||
+                err.message.startsWith("Agentplane project root is not a git repository"))) {
             return null;
         }
         throw err;

package/dist/commands/branch/work-start.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"work-start.command.d.ts","sourceRoot":"","sources":["../../../src/commands/branch/work-start.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAc,MAAM,wBAAwB,CAAC;AAGtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAGhE,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,eAAe,CAgDtD,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,CAAC,sBAAsB,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,GAClE,cAAc,CAAC,eAAe,CAAC,CA4BjC"}
+{"version":3,"file":"work-start.command.d.ts","sourceRoot":"","sources":["../../../src/commands/branch/work-start.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAc,MAAM,wBAAwB,CAAC;AAGtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAGhE,MAAM,MAAM,eAAe,GAAG;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,eAAe,CAkDtD,CAAC;AAEF,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,CAAC,sBAAsB,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,GAClE,cAAc,CAAC,eAAe,CAAC,CA4BjC"}