agentplane 0.2.6 → 0.2.13

package/dist/commands/upgrade.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAoCA,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AA2DF,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,GAAG;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB,CAWA;AAED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,GACG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAqB1C;AAUD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAgBT;AAkPD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6dlB"}
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAmCA,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,EAAE,OAAO,CAAC;CACd,CAAC;AAEF,KAAK,aAAa,GAAG;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,oBAAoB,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAgGF,wBAAgB,kCAAkC,CAAC,MAAM,EAAE,MAAM,GAAG;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;CACnB,CAWA;AAED,wBAAgB,iCAAiC,CAAC,IAAI,EAAE;IACtD,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB,GACG;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAqB1C;AAUD,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GAAG,MAAM,CAgBT;AAqQD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE;IAC3C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;CACrB,GAAG,OAAO,CAAC,MAAM,CAAC,CA2mBlB"}

package/dist/commands/upgrade.js

@@ -1,4 +1,4 @@
-import { lstat, mkdir, mkdtemp, readdir, readFile, readlink, rm, symlink, writeFile, } from "node:fs/promises";
+import { lstat, mkdir, mkdtemp, readdir, readFile, readlink, rm, writeFile, } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
@@ -15,6 +15,21 @@ const DEFAULT_UPGRADE_ASSET = "agentplane-upgrade.tar.gz";
 const DEFAULT_UPGRADE_CHECKSUM_ASSET = "agentplane-upgrade.tar.gz.sha256";
 const UPGRADE_DOWNLOAD_TIMEOUT_MS = 60_000;
 const UPGRADE_RELEASE_METADATA_TIMEOUT_MS = 15_000;
+async function safeRemovePath(targetPath) {
+    try {
+        await rm(targetPath, { recursive: true, force: true });
+    }
+    catch {
+        // best-effort cleanup
+    }
+}
+async function cleanupAutoUpgradeArtifacts(opts) {
+    for (const backupPath of opts.createdBackups) {
+        await safeRemovePath(backupPath);
+    }
+    // Keep durable state files at .upgrade root; remove transient per-run agent artifacts.
+    await safeRemovePath(path.join(opts.upgradeStateDir, "agent"));
+}
 const ASSETS_DIR_URL = new URL("../../assets/", import.meta.url);
 async function loadFrameworkManifestFromPath(manifestPath) {
     const text = await readFile(manifestPath, "utf8");
@@ -230,6 +245,23 @@ function jsonEqual(a, b) {
     const cb = JSON.stringify(canonicalizeJson(b)) ?? "__undefined__";
     return ca === cb;
 }
+function textChangedForType(opts) {
+    if (opts.aText === null && opts.bText === null)
+        return false;
+    if (opts.aText === null || opts.bText === null)
+        return true;
+    if (opts.type === "json") {
+        try {
+            const a = JSON.parse(opts.aText);
+            const b = JSON.parse(opts.bText);
+            return !jsonEqual(a, b);
+        }
+        catch {
+            return opts.aText.trim() !== opts.bText.trim();
+        }
+    }
+    return opts.aText.trimEnd() !== opts.bText.trimEnd();
+}
 // Used as a fallback for 3-way merges when no baseline is available. Incoming (upstream) values
 // win for scalar/object conflicts, while user-added keys and array items are preserved.
 function mergeAgentJsonIncomingWins(incomingText, currentText) {
@@ -398,6 +430,7 @@ export async function cmdUpgradeParsed(opts) {
     const useRemote = flags.remote === true || hasRemoteHints;
     let tempRoot = null;
     let extractRoot = null;
+    const createdBackups = [];
     try {
         tempRoot = await mkdtemp(path.join(os.tmpdir(), "agentplane-upgrade-"));
         let bundlePath = "";
@@ -519,6 +552,8 @@ export async function cmdUpgradeParsed(opts) {
         const fileContents = new Map();
         const merged = [];
         const missingRequired = [];
+        const reviewRecords = [];
+        const reviewSnapshots = new Map();
         const readBaselineText = async (baselineKey) => {
             try {
                 return await readFile(path.join(baselineDirNew, baselineKey), "utf8");
@@ -588,6 +623,12 @@ export async function cmdUpgradeParsed(opts) {
             if (kind !== null) {
                 existingBuf = await readFile(destPath);
             }
+            const incomingTextOriginal = data.toString("utf8");
+            const currentTextForReview = existingBuf ? existingBuf.toString("utf8") : null;
+            const baselineKey = toBaselineKey(rel);
+            const baselineText = baselineKey ? await readBaselineText(baselineKey) : null;
+            let mergeApplied = false;
+            let mergePath = "none";
             // Merge logic only needs text for a small subset of managed files.
             if (existingBuf) {
                 if (entry.merge_strategy === "agents_policy_markdown" && rel === "AGENTS.md") {
@@ -595,18 +636,16 @@ export async function cmdUpgradeParsed(opts) {
                     const mergedText = mergeAgentsPolicyMarkdown(data.toString("utf8"), existingText);
                     data = Buffer.from(mergedText, "utf8");
                     merged.push(rel);
+                    mergeApplied = true;
+                    mergePath = "markdownOverrides";
                 }
                 else if (entry.merge_strategy === "agent_json_3way" &&
                     rel.startsWith(".agentplane/agents/") &&
                     rel.endsWith(".json")) {
                     existingText = existingBuf.toString("utf8");
-                    const baselineKey = toBaselineKey(rel);
                     let mergedText = null;
-                    if (baselineKey) {
+                    if (baselineText !== null) {
                         try {
-                            const baselineText = await readBaselineText(baselineKey);
-                            if (!baselineText)
-                                throw new Error("missing baseline");
                             mergedText = mergeAgentJson3Way({
                                 incomingText: data.toString("utf8"),
                                 currentText: existingText,
@@ -617,13 +656,75 @@ export async function cmdUpgradeParsed(opts) {
                             mergedText = null;
                         }
                     }
-                    mergedText ??= mergeAgentJsonIncomingWins(data.toString("utf8"), existingText);
+                    if (mergedText) {
+                        mergePath = "3way";
+                    }
+                    else {
+                        mergedText = mergeAgentJsonIncomingWins(data.toString("utf8"), existingText);
+                        if (mergedText) {
+                            mergePath = baselineText === null ? "incomingWins" : "incomingWinsFallback";
+                        }
+                    }
                     if (mergedText) {
                         data = Buffer.from(mergedText, "utf8");
                         merged.push(rel);
+                        mergeApplied = true;
+                    }
+                    else {
+                        mergePath = "parseFailed";
                     }
                 }
             }
+            const hasBaseline = baselineText !== null;
+            let changedCurrentVsBaseline = null;
+            let changedIncomingVsBaseline = null;
+            if (baselineText !== null) {
+                changedCurrentVsBaseline = textChangedForType({
+                    type: entry.type,
+                    aText: currentTextForReview,
+                    bText: baselineText,
+                });
+                changedIncomingVsBaseline = textChangedForType({
+                    type: entry.type,
+                    aText: incomingTextOriginal,
+                    bText: baselineText,
+                });
+            }
+            const proposedText = data.toString("utf8");
+            const currentDiffersFromIncoming = currentTextForReview === null
+                ? false
+                : textChangedForType({
+                    type: entry.type,
+                    aText: currentTextForReview,
+                    bText: incomingTextOriginal,
+                });
+            const baselineConflict = baselineText === null
+                ? false
+                : currentDiffersFromIncoming &&
+                    Boolean(changedCurrentVsBaseline) &&
+                    Boolean(changedIncomingVsBaseline);
+            const noBaselineConflict = baselineText === null ? currentDiffersFromIncoming : false;
+            const mergeNotAppliedConflict = mergeApplied ? false : currentDiffersFromIncoming;
+            const needsSemanticReview = baselineConflict || noBaselineConflict || mergeNotAppliedConflict;
+            reviewRecords.push({
+                relPath: rel,
+                mergeStrategy: entry.merge_strategy,
+                hasBaseline,
+                changedCurrentVsBaseline,
+                changedIncomingVsBaseline,
+                currentDiffersFromIncoming,
+                needsSemanticReview,
+                mergeApplied,
+                mergePath,
+            });
+            if (flags.mode === "agent" && needsSemanticReview) {
+                reviewSnapshots.set(rel, {
+                    incomingText: incomingTextOriginal,
+                    currentText: currentTextForReview,
+                    baselineText,
+                    proposedText,
+                });
+            }
             fileContents.set(rel, data);
             if (kind === null)
                 additions.push(rel);
@@ -691,7 +792,7 @@ export async function cmdUpgradeParsed(opts) {
                 `- .git/**\n\n` +
                 `## Notes\n\n` +
                 `- The upgrade bundle is validated against framework.manifest.json.\n` +
-                `- AGENTS.md is managed under .agentplane/AGENTS.md and workspace-root AGENTS.md is a symlink.\n`;
+                `- AGENTS.md is the canonical policy file at the workspace root.\n`;
             const reportMd = `# Upgrade report (${runId})\n\n` +
                 `## Actions taken\n\n` +
                 `- [ ] Reviewed plan.md\n` +
@@ -704,48 +805,77 @@ export async function cmdUpgradeParsed(opts) {
             await writeFile(path.join(runDir, "constraints.md"), constraintsMd, "utf8");
             await writeFile(path.join(runDir, "report.md"), reportMd, "utf8");
             await writeFile(path.join(runDir, "files.json"), JSON.stringify({ additions, updates, skipped, merged }, null, 2) + "\n", "utf8");
-            process.stdout.write(`Upgrade plan written: ${path.relative(resolved.gitRoot, runDir)}\n`);
+            const needsReview = reviewRecords.filter((r) => r.needsSemanticReview);
+            await writeFile(path.join(runDir, "review.json"), JSON.stringify({
+                generated_at: new Date().toISOString(),
+                counts: {
+                    total: reviewRecords.length,
+                    needsSemanticReview: needsReview.length,
+                },
+                files: reviewRecords,
+            }, null, 2) + "\n", "utf8");
+            if (needsReview.length > 0) {
+                const snapshotsRoot = path.join(runDir, "snapshots");
+                for (const [rel, snap] of reviewSnapshots.entries()) {
+                    const variants = [
+                        ["current", snap.currentText],
+                        ["incoming", snap.incomingText],
+                        ["baseline", snap.baselineText],
+                        ["proposed", snap.proposedText],
+                    ];
+                    for (const [variant, text] of variants) {
+                        if (text === null)
+                            continue;
+                        const outPath = path.join(snapshotsRoot, variant, rel);
+                        await mkdir(path.dirname(outPath), { recursive: true });
+                        await writeFile(outPath, text, "utf8");
+                    }
+                }
+            }
+            const relRunDir = path.relative(resolved.gitRoot, runDir);
+            process.stdout.write(`Upgrade plan written: ${relRunDir}\n`);
+            process.stdout.write(`Prompt merge required: ${needsReview.length} files\n`);
+            if (needsReview.length > 0) {
+                process.stdout.write(`Hint: Create an UPGRADER task and attach ${relRunDir}\n`);
+            }
             return 0;
         }
         for (const rel of [...additions, ...updates]) {
             const destPath = path.join(resolved.gitRoot, rel);
             if (flags.backup && (await fileExists(destPath))) {
-                await backupPath(destPath);
+                const backup = await backupPath(destPath);
+                createdBackups.push(backup);
             }
             await mkdir(path.dirname(destPath), { recursive: true });
             const data = fileContents.get(rel);
             if (data) {
                 if (rel === "AGENTS.md") {
-                    // Write the managed copy under .agentplane/ and keep the workspace-root policy path
-                    // as a symlink to it.
-                    const managedPath = path.join(resolved.agentplaneDir, "AGENTS.md");
-                    await mkdir(path.dirname(managedPath), { recursive: true });
-                    await writeFile(managedPath, data);
-                    // Replace AGENTS.md with a symlink if needed.
-                    const relTarget = path.relative(resolved.gitRoot, managedPath);
+                    // If AGENTS.md is a symlink, avoid overwriting an arbitrary external target.
+                    // This permits repo-internal symlinks (e.g. the agentplane repo itself) while
+                    // keeping user workspaces safe.
                     try {
                         const st = await lstat(destPath);
                         if (st.isSymbolicLink()) {
-                            const currentTarget = await readlink(destPath);
-                            if (currentTarget !== relTarget) {
-                                await rm(destPath, { force: true });
+                            const linkTarget = await readlink(destPath);
+                            const targetAbs = path.resolve(path.dirname(destPath), linkTarget);
+                            const relFromRoot = path.relative(resolved.gitRoot, targetAbs);
+                            if (relFromRoot.startsWith("..") || path.isAbsolute(relFromRoot)) {
+                                throw new CliError({
+                                    exitCode: exitCodeForError("E_VALIDATION"),
+                                    code: "E_VALIDATION",
+                                    message: `Refusing to overwrite symlinked AGENTS.md target outside repo: ${linkTarget}. ` +
+                                        "Replace the symlink with a regular file and retry.",
+                                });
                             }
                         }
-                        else {
-                            // If it's a regular file, remove it (backup already happened above when enabled).
-                            await rm(destPath, { force: true });
-                        }
-                    }
-                    catch {
-                        // destPath doesn't exist
                     }
-                    if (!(await fileExists(destPath))) {
-                        await symlink(relTarget, destPath);
+                    catch (err) {
+                        const code = err?.code;
+                        if (code !== "ENOENT")
+                            throw err;
                     }
                 }
-                else {
-                    await writeFile(destPath, data);
-                }
+                await writeFile(destPath, data);
             }
             // Record a baseline copy for future three-way merges.
             const baselineKey = toBaselineKey(rel);
@@ -766,6 +896,15 @@ export async function cmdUpgradeParsed(opts) {
             source: bundleLayout,
             updated: { add: additions.length, update: updates.length, unchanged: skipped.length },
         }, null, 2) + "\n", "utf8");
+        await writeFile(path.join(upgradeStateDir, "last-review.json"), JSON.stringify({
+            generated_at: new Date().toISOString(),
+            counts: {
+                total: reviewRecords.length,
+                needsSemanticReview: reviewRecords.filter((r) => r.needsSemanticReview).length,
+            },
+            files: reviewRecords,
+        }, null, 2) + "\n", "utf8");
+        await cleanupAutoUpgradeArtifacts({ upgradeStateDir, createdBackups });
         process.stdout.write(`Upgrade applied: ${additions.length} add, ${updates.length} update, ${skipped.length} unchanged\n`);
         return 0;
     }

package/dist/commands/verify.command.d.ts

@@ -1,16 +1,4 @@
-import type { CommandCtx, CommandSpec } from "../cli/spec/spec.js";
-import type { CommandContext } from "./shared/task-backend.js";
-type VerifyState = "ok" | "needs_rework";
-export type VerifyParsed = {
-    taskId: string;
-    state: VerifyState;
-    by: string;
-    note: string;
-    details?: string;
-    file?: string;
-    quiet: boolean;
-};
-export declare const verifySpec: CommandSpec<VerifyParsed>;
-export declare function makeRunVerifyHandler(getCtx: (cmd: string) => Promise<CommandContext>): (ctx: CommandCtx, p: VerifyParsed) => Promise<number>;
-export {};
+export { verifySpec } from "./verify.spec.js";
+export type { VerifyParsed } from "./verify.spec.js";
+export { makeRunVerifyHandler } from "./verify.run.js";
 //# sourceMappingURL=verify.command.d.ts.map

package/dist/commands/verify.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify.command.d.ts","sourceRoot":"","sources":["../../src/commands/verify.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAI/D,KAAK,WAAW,GAAG,IAAI,GAAG,cAAc,CAAC;AAEzC,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CA8FhD,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAcjE"}
+{"version":3,"file":"verify.command.d.ts","sourceRoot":"","sources":["../../src/commands/verify.command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,YAAY,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/commands/verify.command.js

@@ -1,113 +1,2 @@
-import { usageError } from "../cli/spec/errors.js";
-import { cmdVerifyParsed } from "./task/verify-record.js";
-export const verifySpec = {
-    id: ["verify"],
-    group: "Lifecycle",
-    summary: "Record a verification outcome for a task (record-only; does not execute commands).",
-    args: [
-        {
-            name: "task-id",
-            required: true,
-            valueHint: "<task-id>",
-            description: "Existing task id.",
-        },
-    ],
-    options: [
-        {
-            kind: "boolean",
-            name: "ok",
-            default: false,
-            description: "Record an OK verification outcome.",
-        },
-        {
-            kind: "boolean",
-            name: "rework",
-            default: false,
-            description: "Record a needs-rework verification outcome.",
-        },
-        {
-            kind: "string",
-            name: "by",
-            valueHint: "<id>",
-            required: true,
-            description: "Verifier id (e.g. REVIEWER).",
-        },
-        {
-            kind: "string",
-            name: "note",
-            valueHint: "<text>",
-            required: true,
-            description: "Short note describing the verification outcome.",
-        },
-        {
-            kind: "string",
-            name: "details",
-            valueHint: "<text>",
-            description: "Optional free-form details (mutually exclusive with --file).",
-        },
-        {
-            kind: "string",
-            name: "file",
-            valueHint: "<path>",
-            description: "Read details from a file path (mutually exclusive with --details).",
-        },
-        { kind: "boolean", name: "quiet", default: false, description: "Suppress output." },
-    ],
-    examples: [
-        {
-            cmd: 'agentplane verify 202602030608-F1Q8AB --ok --by REVIEWER --note "Looks good" --quiet',
-            why: "Record an OK verification outcome.",
-        },
-        {
-            cmd: 'agentplane verify 202602030608-F1Q8AB --rework --by REVIEWER --note "Needs changes" --details "Missing tests"',
-            why: "Record a needs-rework outcome with details.",
-        },
-    ],
-    validateRaw: (raw) => {
-        const ok = raw.opts.ok === true;
-        const rework = raw.opts.rework === true;
-        if (ok === rework) {
-            throw usageError({
-                spec: verifySpec,
-                command: "verify",
-                message: "Exactly one of --ok or --rework must be provided.",
-            });
-        }
-        if (typeof raw.opts.details === "string" && typeof raw.opts.file === "string") {
-            throw usageError({
-                spec: verifySpec,
-                command: "verify",
-                message: "Options --details and --file are mutually exclusive.",
-            });
-        }
-    },
-    parse: (raw) => {
-        const ok = raw.opts.ok === true;
-        const state = ok ? "ok" : "needs_rework";
-        return {
-            taskId: typeof raw.args["task-id"] === "string" ? raw.args["task-id"] : "",
-            state,
-            by: raw.opts.by,
-            note: raw.opts.note,
-            details: raw.opts.details,
-            file: raw.opts.file,
-            quiet: raw.opts.quiet === true,
-        };
-    },
-};
-export function makeRunVerifyHandler(getCtx) {
-    return async (ctx, p) => {
-        return await cmdVerifyParsed({
-            ctx: await getCtx("verify"),
-            cwd: ctx.cwd,
-            rootOverride: ctx.rootOverride,
-            taskId: p.taskId,
-            state: p.state,
-            by: p.by,
-            note: p.note,
-            details: p.details,
-            file: p.file,
-            quiet: p.quiet,
-        });
-    };
-}
+export { verifySpec } from "./verify.spec.js";
+export { makeRunVerifyHandler } from "./verify.run.js";

package/dist/commands/verify.run.d.ts

@@ -0,0 +1,5 @@
+import type { CommandCtx } from "../cli/spec/spec.js";
+import type { CommandContext } from "./shared/task-backend.js";
+import type { VerifyParsed } from "./verify.spec.js";
+export declare function makeRunVerifyHandler(getCtx: (cmd: string) => Promise<CommandContext>): (ctx: CommandCtx, p: VerifyParsed) => Promise<number>;
+//# sourceMappingURL=verify.run.d.ts.map

package/dist/commands/verify.run.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.run.d.ts","sourceRoot":"","sources":["../../src/commands/verify.run.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAcjE"}

package/dist/commands/verify.run.js

@@ -0,0 +1,17 @@
+import { cmdVerifyParsed } from "./task/verify-record.js";
+export function makeRunVerifyHandler(getCtx) {
+    return async (ctx, p) => {
+        return await cmdVerifyParsed({
+            ctx: await getCtx("verify"),
+            cwd: ctx.cwd,
+            rootOverride: ctx.rootOverride,
+            taskId: p.taskId,
+            state: p.state,
+            by: p.by,
+            note: p.note,
+            details: p.details,
+            file: p.file,
+            quiet: p.quiet,
+        });
+    };
+}

package/dist/commands/verify.spec.d.ts

@@ -0,0 +1,14 @@
+import type { CommandSpec } from "../cli/spec/spec.js";
+type VerifyState = "ok" | "needs_rework";
+export type VerifyParsed = {
+    taskId: string;
+    state: VerifyState;
+    by: string;
+    note: string;
+    details?: string;
+    file?: string;
+    quiet: boolean;
+};
+export declare const verifySpec: CommandSpec<VerifyParsed>;
+export {};
+//# sourceMappingURL=verify.spec.d.ts.map

package/dist/commands/verify.spec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.spec.d.ts","sourceRoot":"","sources":["../../src/commands/verify.spec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGvD,KAAK,WAAW,GAAG,IAAI,GAAG,cAAc,CAAC;AAEzC,MAAM,MAAM,YAAY,GAAG;IACzB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,WAAW,CAAC;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CA8FhD,CAAC"}

package/dist/commands/verify.spec.js

@@ -0,0 +1,96 @@
+import { usageError } from "../cli/spec/errors.js";
+export const verifySpec = {
+    id: ["verify"],
+    group: "Lifecycle",
+    summary: "Record a verification outcome for a task (record-only; does not execute commands).",
+    args: [
+        {
+            name: "task-id",
+            required: true,
+            valueHint: "<task-id>",
+            description: "Existing task id.",
+        },
+    ],
+    options: [
+        {
+            kind: "boolean",
+            name: "ok",
+            default: false,
+            description: "Record an OK verification outcome.",
+        },
+        {
+            kind: "boolean",
+            name: "rework",
+            default: false,
+            description: "Record a needs-rework verification outcome.",
+        },
+        {
+            kind: "string",
+            name: "by",
+            valueHint: "<id>",
+            required: true,
+            description: "Verifier id (e.g. REVIEWER).",
+        },
+        {
+            kind: "string",
+            name: "note",
+            valueHint: "<text>",
+            required: true,
+            description: "Short note describing the verification outcome.",
+        },
+        {
+            kind: "string",
+            name: "details",
+            valueHint: "<text>",
+            description: "Optional free-form details (mutually exclusive with --file).",
+        },
+        {
+            kind: "string",
+            name: "file",
+            valueHint: "<path>",
+            description: "Read details from a file path (mutually exclusive with --details).",
+        },
+        { kind: "boolean", name: "quiet", default: false, description: "Suppress output." },
+    ],
+    examples: [
+        {
+            cmd: 'agentplane verify 202602030608-F1Q8AB --ok --by REVIEWER --note "Looks good" --quiet',
+            why: "Record an OK verification outcome.",
+        },
+        {
+            cmd: 'agentplane verify 202602030608-F1Q8AB --rework --by REVIEWER --note "Needs changes" --details "Missing tests"',
+            why: "Record a needs-rework outcome with details.",
+        },
+    ],
+    validateRaw: (raw) => {
+        const ok = raw.opts.ok === true;
+        const rework = raw.opts.rework === true;
+        if (ok === rework) {
+            throw usageError({
+                spec: verifySpec,
+                command: "verify",
+                message: "Exactly one of --ok or --rework must be provided.",
+            });
+        }
+        if (typeof raw.opts.details === "string" && typeof raw.opts.file === "string") {
+            throw usageError({
+                spec: verifySpec,
+                command: "verify",
+                message: "Options --details and --file are mutually exclusive.",
+            });
+        }
+    },
+    parse: (raw) => {
+        const ok = raw.opts.ok === true;
+        const state = ok ? "ok" : "needs_rework";
+        return {
+            taskId: typeof raw.args["task-id"] === "string" ? raw.args["task-id"] : "",
+            state,
+            by: raw.opts.by,
+            note: raw.opts.note,
+            details: raw.opts.details,
+            file: raw.opts.file,
+            quiet: raw.opts.quiet === true,
+        };
+    },
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentplane",
-  "version": "0.2.6",
+  "version": "0.2.13",
   "description": "Agent Plane CLI for task workflows, recipes, and project automation.",
   "keywords": [
     "agentplane",