agentplane 0.3.13 → 0.3.14

package/dist/runtime/incidents/shared.d.ts

@@ -0,0 +1,34 @@
+import type { IncidentAdviceMatch, IncidentRegistry, IncidentRegistryEntry, IncidentRegistryEntryState } from "./types.js";
+export declare const STRUCTURED_INCIDENTS_HEADER: string;
+export declare const COMPACT_INCIDENTS_HEADER: string;
+export declare function normalizeLines(text: string): string[];
+export declare function normalizeKey(key: string): string;
+export declare function normalizeSearchText(text: string): string;
+export declare function tokenize(text: string): string[];
+export declare function dedupeCaseInsensitive(values: readonly string[]): string[];
+export declare function parseCsvList(value: string | null | undefined): string[];
+export declare function incidentField(key: string, value: string): [string, string];
+export declare function parseBoolean(value: string | null | undefined): boolean;
+export declare function parseFixability(value: string | null | undefined): "external" | "repo-fixable" | null;
+export declare function parseEntryState(value: string | null | undefined): IncidentRegistryEntryState;
+export declare function appendFieldValue(record: Record<string, string>, key: string, value: string, joiner?: string): void;
+export declare function deriveSourceTask(explicitSourceTask: string | null | undefined, evidence: string | null | undefined): string | null;
+export declare function buildIncidentSignature(entry: Pick<IncidentRegistryEntry, "scope" | "failure" | "rule">): string;
+export declare function buildIncidentFingerprint(entry: Pick<IncidentRegistryEntry, "sourceTask" | "scope" | "failure" | "rule">): string;
+export declare function buildMatchTerms(opts: {
+    scope: string;
+    tags: readonly string[];
+    explicitMatch: readonly string[];
+    extraText?: readonly string[];
+}): string[];
+export declare function occursWithinDays(date: string, now: Date, days: number): boolean;
+export declare function entryStateRank(state: IncidentRegistryEntryState): number;
+export declare function compareIncidentAdviceMatch(left: IncidentAdviceMatch, right: IncidentAdviceMatch): number;
+export declare function summarizeTaskScope(scope: string | null | undefined, title: string): string;
+export declare function buildDerivedIncidentRule(scope: string): string;
+export declare function resolveIncidentState(opts: {
+    registry: IncidentRegistry;
+    entry: Pick<IncidentRegistryEntry, "scope" | "failure" | "rule">;
+    now: Date;
+}): IncidentRegistryEntryState;
+//# sourceMappingURL=shared.d.ts.map

package/dist/runtime/incidents/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/runtime/incidents/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,mBAAmB,EACnB,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC3B,MAAM,YAAY,CAAC;AAEpB,eAAO,MAAM,2BAA2B,QAI5B,CAAC;AAEb,eAAO,MAAM,wBAAwB,QAGzB,CAAC;AAEb,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAErD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKhD;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKxD;AAED,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAO/C;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAYzE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,EAAE,CAQvE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAE1E;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAKtE;AAED,wBAAgB,eAAe,CAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC/B,UAAU,GAAG,cAAc,GAAG,IAAI,CAQpC;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,0BAA0B,CAE5F;AAED,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,MAAM,EACb,MAAM,SAAM,GACX,IAAI,CAMN;AAED,wBAAgB,gBAAgB,CAC9B,kBAAkB,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAC7C,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,GAAG,IAAI,CAKf;AAED,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,GAC/D,MAAM,CAMR;AAED,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,YAAY,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,GAC9E,MAAM,CAER;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACxB,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC/B,GAAG,MAAM,EAAE,CASX;AAQD,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAM/E;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,0BAA0B,GAAG,MAAM,CAIxE;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,mBAAmB,EACzB,KAAK,EAAE,mBAAmB,GACzB,MAAM,CAMR;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAW1F;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE9D;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE;IACzC,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,KAAK,EAAE,IAAI,CAAC,qBAAqB,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC,CAAC;IACjE,GAAG,EAAE,IAAI,CAAC;CACX,GAAG,0BAA0B,CAgB7B"}

package/dist/runtime/incidents/shared.js

@@ -0,0 +1,171 @@
+export const STRUCTURED_INCIDENTS_HEADER = [
+    "# Policy Incidents Log",
+    "",
+    "This is the single file for incident-derived and situational policy rules.",
+].join("\n");
+export const COMPACT_INCIDENTS_HEADER = [
+    "# Policy Incidents Log",
+    "- Append-only. Required fields: `id`, `date`, `scope`, `failure`, `rule`, `evidence`, `enforcement`, `state`; optional: `tags`, `match`, `advice`, `source_task`, `fixability`.",
+].join("\n");
+export function normalizeLines(text) {
+    return text.replaceAll("\r\n", "\n").split("\n");
+}
+export function normalizeKey(key) {
+    return key
+        .trim()
+        .toLowerCase()
+        .replaceAll(/[\s_-]+/g, "");
+}
+export function normalizeSearchText(text) {
+    return text
+        .toLowerCase()
+        .replaceAll(/[^a-z0-9]+/gi, " ")
+        .trim();
+}
+export function tokenize(text) {
+    const normalized = normalizeSearchText(text);
+    if (!normalized)
+        return [];
+    return normalized
+        .split(/\s+/)
+        .map((token) => token.trim())
+        .filter((token) => token.length >= 3);
+}
+export function dedupeCaseInsensitive(values) {
+    const seen = new Set();
+    const out = [];
+    for (const value of values) {
+        const trimmed = String(value ?? "").trim();
+        if (!trimmed)
+            continue;
+        const key = trimmed.toLowerCase();
+        if (seen.has(key))
+            continue;
+        seen.add(key);
+        out.push(trimmed);
+    }
+    return out;
+}
+export function parseCsvList(value) {
+    if (!value)
+        return [];
+    return dedupeCaseInsensitive(value
+        .split(",")
+        .map((item) => item.trim())
+        .filter(Boolean));
+}
+export function incidentField(key, value) {
+    return [key, value];
+}
+export function parseBoolean(value) {
+    const normalized = String(value ?? "")
+        .trim()
+        .toLowerCase();
+    return normalized === "true" || normalized === "yes" || normalized === "y" || normalized === "1";
+}
+export function parseFixability(value) {
+    const normalized = String(value ?? "")
+        .trim()
+        .toLowerCase()
+        .replaceAll(/[\s_-]+/g, "");
+    if (normalized === "external")
+        return "external";
+    if (normalized === "repofixable" || normalized === "internal")
+        return "repo-fixable";
+    return null;
+}
+export function parseEntryState(value) {
+    return value === "open" || value === "promoted" ? value : "stabilized";
+}
+export function appendFieldValue(record, key, value, joiner = " ") {
+    if (!record[key]) {
+        record[key] = value.trim();
+        return;
+    }
+    record[key] = `${record[key]}${joiner}${value.trim()}`.trim();
+}
+export function deriveSourceTask(explicitSourceTask, evidence) {
+    const direct = String(explicitSourceTask ?? "").trim();
+    if (direct)
+        return direct;
+    const match = /\btasks?\s+([A-Za-z0-9-]+)/iu.exec(String(evidence ?? ""));
+    return match?.[1]?.trim() ?? null;
+}
+export function buildIncidentSignature(entry) {
+    return [
+        normalizeSearchText(entry.scope),
+        normalizeSearchText(entry.failure),
+        normalizeSearchText(entry.rule),
+    ].join("|");
+}
+export function buildIncidentFingerprint(entry) {
+    return [entry.sourceTask ?? "", buildIncidentSignature(entry)].join("|");
+}
+export function buildMatchTerms(opts) {
+    const scopeTokens = tokenize(opts.scope);
+    const extraTokens = (opts.extraText ?? []).flatMap((value) => tokenize(value));
+    return dedupeCaseInsensitive([
+        ...opts.explicitMatch,
+        ...opts.tags,
+        ...scopeTokens,
+        ...extraTokens,
+    ]).slice(0, 16);
+}
+function parseDateOnly(value) {
+    if (!/^\d{4}-\d{2}-\d{2}$/.test(value))
+        return null;
+    const parsed = Date.parse(`${value}T00:00:00.000Z`);
+    return Number.isFinite(parsed) ? parsed : null;
+}
+export function occursWithinDays(date, now, days) {
+    const timestamp = parseDateOnly(date);
+    if (timestamp === null)
+        return false;
+    const delta = now.getTime() - timestamp;
+    if (delta < 0)
+        return false;
+    return delta <= days * 24 * 60 * 60 * 1000;
+}
+export function entryStateRank(state) {
+    if (state === "promoted")
+        return 2;
+    if (state === "stabilized")
+        return 1;
+    return 0;
+}
+export function compareIncidentAdviceMatch(left, right) {
+    if (right.score !== left.score)
+        return right.score - left.score;
+    const rightState = entryStateRank(right.entry.state);
+    const leftState = entryStateRank(left.entry.state);
+    if (rightState !== leftState)
+        return rightState - leftState;
+    return right.entry.date.localeCompare(left.entry.date);
+}
+export function summarizeTaskScope(scope, title) {
+    const lines = normalizeLines(scope ?? "");
+    for (const line of lines) {
+        const trimmed = line.trim();
+        if (!trimmed)
+            continue;
+        let candidate = trimmed.replace(/^-+\s*/, "");
+        candidate = candidate.replace(/^in scope:\s*/i, "").trim();
+        if (!candidate || /^out of scope:/i.test(candidate))
+            continue;
+        return candidate;
+    }
+    return title.trim();
+}
+export function buildDerivedIncidentRule(scope) {
+    return `Analogous ${scope} work MUST review and apply the recorded external incident advice before retrying.`;
+}
+export function resolveIncidentState(opts) {
+    const signature = buildIncidentSignature(opts.entry);
+    const similarEntries = opts.registry.entries.filter((candidate) => buildIncidentSignature(candidate) === signature);
+    if (similarEntries.some((candidate) => candidate.state === "promoted" ||
+        candidate.state === "stabilized" ||
+        occursWithinDays(candidate.date, opts.now, 30))) {
+        return "stabilized";
+    }
+    return "open";
+}

package/dist/testing/cli-harness/recipe-archives.d.ts

@@ -0,0 +1,28 @@
+export declare function createRecipeArchive(opts?: {
+    id?: string;
+    version?: string;
+    name?: string;
+    summary?: string;
+    description?: string;
+    tags?: string[];
+    format?: "tar" | "zip";
+    wrapDir?: boolean;
+}): Promise<{
+    archivePath: string;
+    manifest: Record<string, unknown>;
+}>;
+export declare function createRecipeArchiveWithManifest(opts: {
+    manifest: Record<string, unknown>;
+    files?: Record<string, string>;
+    format?: "tar" | "zip";
+    wrapDir?: boolean;
+}): Promise<string>;
+export declare function createUnsafeRecipeArchive(opts: {
+    format: "tar" | "zip";
+    entryPath?: string;
+}): Promise<string>;
+export declare function createUpgradeBundle(files: Record<string, string>): Promise<{
+    bundlePath: string;
+    checksumPath: string;
+}>;
+//# sourceMappingURL=recipe-archives.d.ts.map

package/dist/testing/cli-harness/recipe-archives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"recipe-archives.d.ts","sourceRoot":"","sources":["../../../src/testing/cli-harness/recipe-archives.ts"],"names":[],"mappings":"AAgBA,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE;IAC/C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAsKtE;AAED,wBAAsB,+BAA+B,CAAC,IAAI,EAAE;IAC1D,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,MAAM,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC;IACvB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBlB;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,MAAM,EAAE,KAAK,GAAG,KAAK,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,MAAM,CAAC,CA+GlB;AAyDD,wBAAsB,mBAAmB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC;IAChF,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC,CAkDD"}

package/dist/testing/cli-harness/recipe-archives.js

@@ -0,0 +1,374 @@
+import { execFile } from "node:child_process";
+import { createHash } from "node:crypto";
+import { mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { promisify } from "node:util";
+import { gzipSync } from "node:zlib";
+const execFileAsync = promisify(execFile);
+const recipeArchiveCache = new Map();
+export async function createRecipeArchive(opts) {
+    const normalizedTags = opts?.tags ? [...opts.tags].toSorted() : undefined;
+    const cacheKey = JSON.stringify({
+        id: opts?.id ?? "viewer",
+        version: opts?.version ?? "1.2.3",
+        name: opts?.name ?? "Viewer",
+        summary: opts?.summary ?? "Preview task artifacts",
+        description: opts?.description ?? "Provides a local viewer for task artifacts.",
+        tags: normalizedTags,
+        format: opts?.format ?? "tar",
+        wrapDir: opts?.wrapDir ?? false,
+    });
+    const cached = recipeArchiveCache.get(cacheKey);
+    if (cached)
+        return cached;
+    const baseDir = await mkdtemp(path.join(os.tmpdir(), "agentplane-recipe-"));
+    const recipeDir = path.join(baseDir, opts?.wrapDir ? "bundle" : "recipe");
+    await mkdir(recipeDir, { recursive: true });
+    const manifest = {
+        schema_version: "1",
+        id: opts?.id ?? "viewer",
+        version: opts?.version ?? "1.2.3",
+        name: opts?.name ?? "Viewer",
+        summary: opts?.summary ?? "Preview task artifacts",
+        description: opts?.description ?? "Provides a local viewer for task artifacts.",
+        compatibility: {
+            min_agentplane_version: "0.3.5",
+            manifest_api_version: "1",
+            scenario_api_version: "1",
+            runtime_api_version: "1",
+            platforms: ["darwin", "linux"],
+            repo_types: ["generic"],
+        },
+        skills: [
+            {
+                id: "RECIPE_SKILL",
+                summary: "Recipe analysis skill",
+                file: "skills/analysis.md",
+            },
+        ],
+        agents: [
+            {
+                id: "RECIPE_AGENT",
+                display_name: "Recipe Agent",
+                role: "executor",
+                summary: "Recipe agent",
+                skills: ["RECIPE_SKILL"],
+                tools: ["RECIPE_TOOL"],
+                file: "agents/recipe.md",
+            },
+        ],
+        tools: [
+            { id: "RECIPE_TOOL", summary: "Recipe tool", runtime: "node", entrypoint: "tools/run.js" },
+        ],
+        scenarios: [
+            {
+                id: "RECIPE_SCENARIO",
+                name: "Recipe Scenario",
+                summary: "Recipe scenario",
+                use_when: ["Task artifacts need local preview"],
+                required_inputs: ["task_id"],
+                outputs: ["report"],
+                permissions: ["filesystem-write"],
+                artifacts: ["artifact.txt"],
+                agents_involved: ["RECIPE_AGENT"],
+                skills_used: ["RECIPE_SKILL"],
+                tools_used: ["RECIPE_TOOL"],
+                run_profile: {
+                    mode: "analysis",
+                    sandbox: "workspace-write",
+                    writes_artifacts_to: ["logs/", "reports/"],
+                },
+                file: "scenarios/recipe-scenario.json",
+            },
+        ],
+    };
+    if (normalizedTags) {
+        manifest.tags = normalizedTags;
+    }
+    await writeFile(path.join(recipeDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf8");
+    const agentsDir = path.join(recipeDir, "agents");
+    await mkdir(agentsDir, { recursive: true });
+    await writeFile(path.join(agentsDir, "recipe.md"), [
+        "# Recipe Agent",
+        "",
+        "Role: executor",
+        "",
+        "Instructions:",
+        "- Use recipe local policy.",
+        "- Materialize the declared scenario artifacts.",
+    ].join("\n"), "utf8");
+    const skillsDir = path.join(recipeDir, "skills");
+    await mkdir(skillsDir, { recursive: true });
+    await writeFile(path.join(skillsDir, "analysis.md"), [
+        "# Recipe Skill",
+        "",
+        "- Inspect the generated bundle before acting.",
+        "- Keep recipe-owned artifacts inside the declared output paths.",
+    ].join("\n"), "utf8");
+    const toolsDir = path.join(recipeDir, "tools");
+    await mkdir(toolsDir, { recursive: true });
+    await writeFile(path.join(toolsDir, "run.js"), [
+        'const fs = require("node:fs");',
+        'fs.writeFileSync(process.env.AGENTPLANE_RUN_DIR + "/artifact.txt", "ok");',
+    ].join("\n"), "utf8");
+    const scenariosDir = path.join(recipeDir, "scenarios");
+    await mkdir(scenariosDir, { recursive: true });
+    await writeFile(path.join(scenariosDir, "recipe-scenario.json"), JSON.stringify({
+        schema_version: "1",
+        id: "RECIPE_SCENARIO",
+        summary: "Recipe scenario",
+        goal: "Preview installed tasks.",
+        task_template: {
+            title: "Recipe scenario task",
+            description: "Materialize a task from the recipe scenario.",
+            owner: "CODER",
+            priority: "med",
+            tags: ["code", "recipes"],
+            verify: ["bunx vitest run packages/agentplane/src/commands/recipes.scenario.test.ts"],
+            doc: {
+                summary: "Recipe-backed task execution.",
+                scope: "Run the scenario without task materialization heuristics.",
+                plan: "1. Materialize the task. 2. Execute the shared runner.",
+                verify_steps: "1. Run scenario execution tests.",
+                rollback_plan: "Revert the generated task and runner artifacts.",
+            },
+        },
+        inputs: [{ name: "task_id", type: "string" }],
+        outputs: [{ name: "report", type: "html" }],
+        steps: [{ tool: "RECIPE_TOOL" }],
+    }, null, 2), "utf8");
+    const format = opts?.format ?? "tar";
+    const archivePath = format === "zip" ? path.join(baseDir, "recipe.zip") : path.join(baseDir, "recipe.tar.gz");
+    if (format === "zip") {
+        await (opts?.wrapDir
+            ? execFileAsync("zip", ["-qr", archivePath, path.basename(recipeDir)], { cwd: baseDir })
+            : execFileAsync("zip", ["-qr", archivePath, "."], { cwd: recipeDir }));
+    }
+    else {
+        await (opts?.wrapDir
+            ? execFileAsync("tar", ["-czf", archivePath, "-C", baseDir, path.basename(recipeDir)])
+            : execFileAsync("tar", ["-czf", archivePath, "-C", recipeDir, "."]));
+    }
+    const payload = { archivePath, manifest };
+    recipeArchiveCache.set(cacheKey, payload);
+    return payload;
+}
+export async function createRecipeArchiveWithManifest(opts) {
+    const baseDir = await mkdtemp(path.join(os.tmpdir(), "agentplane-recipe-bad-"));
+    const recipeDir = path.join(baseDir, opts.wrapDir ? "bundle" : "recipe");
+    await mkdir(recipeDir, { recursive: true });
+    await writeFile(path.join(recipeDir, "manifest.json"), JSON.stringify(opts.manifest, null, 2));
+    if (opts.files) {
+        for (const [relPath, content] of Object.entries(opts.files)) {
+            const fullPath = path.join(recipeDir, relPath);
+            await mkdir(path.dirname(fullPath), { recursive: true });
+            await writeFile(fullPath, content, "utf8");
+        }
+    }
+    const format = opts.format ?? "tar";
+    const archivePath = format === "zip" ? path.join(baseDir, "recipe.zip") : path.join(baseDir, "recipe.tar.gz");
+    if (format === "zip") {
+        await (opts.wrapDir
+            ? execFileAsync("zip", ["-qr", archivePath, path.basename(recipeDir)], { cwd: baseDir })
+            : execFileAsync("zip", ["-qr", archivePath, "."], { cwd: recipeDir }));
+    }
+    else {
+        await (opts.wrapDir
+            ? execFileAsync("tar", ["-czf", archivePath, "-C", baseDir, path.basename(recipeDir)])
+            : execFileAsync("tar", ["-czf", archivePath, "-C", recipeDir, "."]));
+    }
+    return archivePath;
+}
+export async function createUnsafeRecipeArchive(opts) {
+    const baseDir = await mkdtemp(path.join(os.tmpdir(), "agentplane-recipe-unsafe-"));
+    const recipeDir = path.join(baseDir, "recipe");
+    await mkdir(recipeDir, { recursive: true });
+    const manifest = {
+        schema_version: "1",
+        id: "unsafe",
+        version: "0.0.1",
+        name: "Unsafe",
+        summary: "Unsafe recipe",
+        description: "Used for archive validation tests.",
+        skills: [
+            {
+                id: "RECIPE_SKILL",
+                summary: "Recipe skill",
+                file: "skills/recipe.md",
+            },
+        ],
+        agents: [
+            {
+                id: "RECIPE_AGENT",
+                display_name: "Recipe Agent",
+                role: "executor",
+                summary: "Recipe agent",
+                skills: ["RECIPE_SKILL"],
+                tools: ["RECIPE_TOOL"],
+                file: "agents/recipe.md",
+            },
+        ],
+        tools: [
+            { id: "RECIPE_TOOL", summary: "Recipe tool", runtime: "bash", entrypoint: "tools/run.sh" },
+        ],
+        scenarios: [
+            {
+                id: "RECIPE_SCENARIO",
+                name: "Recipe Scenario",
+                summary: "Recipe scenario",
+                use_when: ["Unsafe validation fixture"],
+                required_inputs: [],
+                outputs: [],
+                permissions: [],
+                artifacts: [],
+                agents_involved: ["RECIPE_AGENT"],
+                skills_used: ["RECIPE_SKILL"],
+                tools_used: ["RECIPE_TOOL"],
+                run_profile: { mode: "analysis" },
+                file: "scenarios/recipe-scenario.json",
+            },
+        ],
+    };
+    await writeFile(path.join(recipeDir, "manifest.json"), JSON.stringify(manifest, null, 2), "utf8");
+    const agentsDir = path.join(recipeDir, "agents");
+    await mkdir(agentsDir, { recursive: true });
+    await writeFile(path.join(agentsDir, "recipe.md"), "# Recipe Agent\n\nFollow the unsafe archive validation path.\n", "utf8");
+    const skillsDir = path.join(recipeDir, "skills");
+    await mkdir(skillsDir, { recursive: true });
+    await writeFile(path.join(skillsDir, "recipe.md"), "# Recipe Skill\n\nInspect archive contents before materialization.\n", "utf8");
+    const toolsDir = path.join(recipeDir, "tools");
+    await mkdir(toolsDir, { recursive: true });
+    await writeFile(path.join(toolsDir, "run.sh"), "#!/usr/bin/env bash\n", "utf8");
+    const scenariosDir = path.join(recipeDir, "scenarios");
+    await mkdir(scenariosDir, { recursive: true });
+    await writeFile(path.join(scenariosDir, "recipe-scenario.json"), JSON.stringify({
+        schema_version: "1",
+        id: "RECIPE_SCENARIO",
+        summary: "Recipe scenario",
+        goal: "Exercise unsafe archive validation.",
+        task_template: {
+            title: "Unsafe archive task",
+            description: "Validate unsafe archive handling.",
+            owner: "CODER",
+        },
+        inputs: [],
+        outputs: [],
+        steps: [{ tool: "RECIPE_TOOL" }],
+    }, null, 2), "utf8");
+    const entryPath = opts.entryPath ?? "../evil.txt";
+    await writeFile(path.join(baseDir, "evil.txt"), "evil", "utf8");
+    const archivePath = opts.format === "zip" ? path.join(baseDir, "unsafe.zip") : path.join(baseDir, "unsafe.tar.gz");
+    if (opts.format === "zip") {
+        await execFileAsync("zip", ["-qr", archivePath, ".", entryPath], { cwd: recipeDir });
+        return archivePath;
+    }
+    const tar = buildTar([
+        {
+            name: "./manifest.json",
+            data: Buffer.from(JSON.stringify(manifest, null, 2) + "\n", "utf8"),
+        },
+        { name: entryPath, data: Buffer.from("evil\n", "utf8") },
+    ]);
+    const gz = gzipSync(tar);
+    await writeFile(archivePath, gz);
+    return archivePath;
+}
+function buildTar(entries) {
+    const out = [];
+    for (const ent of entries) {
+        const header = tarHeader({
+            name: ent.name,
+            size: ent.data.length,
+            mtime: 0,
+            typeflag: "0",
+        });
+        out.push(header, ent.data, zeroPadTo512(ent.data.length));
+    }
+    out.push(Buffer.alloc(1024, 0));
+    return Buffer.concat(out);
+}
+function zeroPadTo512(n) {
+    const rem = n % 512;
+    if (rem === 0)
+        return Buffer.alloc(0);
+    return Buffer.alloc(512 - rem, 0);
+}
+function tarHeader(opts) {
+    const buf = Buffer.alloc(512, 0);
+    writeTarString(buf, 0, 100, opts.name);
+    writeTarOctal(buf, 100, 8, 0o644);
+    writeTarOctal(buf, 108, 8, 0);
+    writeTarOctal(buf, 116, 8, 0);
+    writeTarOctal(buf, 124, 12, opts.size);
+    writeTarOctal(buf, 136, 12, opts.mtime);
+    buf.fill(0x20, 148, 156);
+    writeTarString(buf, 156, 1, opts.typeflag);
+    writeTarString(buf, 257, 6, "ustar");
+    writeTarString(buf, 263, 2, "00");
+    const sum = buf.reduce((acc, b) => acc + b, 0);
+    writeTarChecksum(buf, sum);
+    return buf;
+}
+function writeTarString(buf, offset, length, value) {
+    const b = Buffer.from(value, "utf8");
+    b.copy(buf, offset, 0, Math.min(length, b.length));
+}
+function writeTarOctal(buf, offset, length, value) {
+    const raw = Math.max(0, value).toString(8);
+    const padded = raw.padStart(length - 1, "0") + "\0";
+    writeTarString(buf, offset, length, padded);
+}
+function writeTarChecksum(buf, sum) {
+    const raw = Math.max(0, sum).toString(8).padStart(6, "0");
+    writeTarString(buf, 148, 8, `${raw}\0 `);
+}
+export async function createUpgradeBundle(files) {
+    const manifestUrl = new URL("../../../assets/framework.manifest.json", import.meta.url);
+    const manifestText = typeof files["framework.manifest.json"] === "string"
+        ? files["framework.manifest.json"]
+        : await readFile(fileURLToPath(manifestUrl), "utf8");
+    const manifest = JSON.parse(manifestText);
+    const normalizedFiles = {};
+    for (const [relPath, content] of Object.entries(files)) {
+        const mapped = relPath.startsWith(".agentplane/agents/")
+            ? relPath.replace(/^\.agentplane\/agents\//, "agents/")
+            : relPath;
+        normalizedFiles[mapped] = content;
+    }
+    normalizedFiles["framework.manifest.json"] ??= manifestText;
+    if (manifest.schema_version === 1 && Array.isArray(manifest.files)) {
+        for (const entry of manifest.files) {
+            if (!entry?.required)
+                continue;
+            const sourceRel = (entry.source_path ?? entry.path ?? "").trim();
+            if (!sourceRel)
+                continue;
+            if (normalizedFiles[sourceRel] !== undefined)
+                continue;
+            if (entry.type === "json")
+                normalizedFiles[sourceRel] = "{}\n";
+            else if (sourceRel.endsWith(".md"))
+                normalizedFiles[sourceRel] = "# AGENTS\n";
+            else
+                normalizedFiles[sourceRel] = "\n";
+        }
+    }
+    const baseDir = await mkdtemp(path.join(os.tmpdir(), "agentplane-upgrade-bundle-"));
+    const bundleDir = path.join(baseDir, "bundle");
+    await mkdir(bundleDir, { recursive: true });
+    for (const [relPath, content] of Object.entries(normalizedFiles)) {
+        const fullPath = path.join(bundleDir, relPath);
+        await mkdir(path.dirname(fullPath), { recursive: true });
+        await writeFile(fullPath, content, "utf8");
+    }
+    const bundlePath = path.join(baseDir, "agentplane-upgrade.tar.gz");
+    await execFileAsync("tar", ["-czf", bundlePath, "-C", bundleDir, "."]);
+    const checksum = createHash("sha256")
+        .update(await readFile(bundlePath))
+        .digest("hex");
+    const checksumPath = `${bundlePath}.sha256`;
+    await writeFile(checksumPath, `${checksum}  agentplane-upgrade.tar.gz\n`, "utf8");
+    return { bundlePath, checksumPath };
+}

package/dist/testing/cli-harness/stdio.d.ts

@@ -0,0 +1,26 @@
+export type AgentJsonEnvelope = {
+    schema_version?: number;
+    mode?: string;
+    command?: string;
+    ok?: boolean;
+    exit_code?: number;
+    stdout?: string;
+    stderr?: string;
+    data?: unknown;
+};
+export declare function captureStdIO(): {
+    readonly stdout: string;
+    readonly stderr: string;
+    restore(): void;
+};
+export declare function splitOutputLines(text: string): string[];
+export declare function parseAgentJsonEnvelope(stdout: string): AgentJsonEnvelope;
+export declare function expectAgentJsonEnvelope(payload: AgentJsonEnvelope, opts: {
+    command: string;
+    ok: boolean;
+    exitCode: number;
+    hasData?: boolean;
+}): void;
+export declare function silenceStdIO(): () => void;
+export declare function runCliSilent(args: string[]): Promise<number>;
+//# sourceMappingURL=stdio.d.ts.map

package/dist/testing/cli-harness/stdio.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../../src/testing/cli-harness/stdio.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,iBAAiB,GAAG;IAC9B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB,CAAC;AAEF,wBAAgB,YAAY;;;;EAgC3B;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAMvD;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,iBAAiB,CAExE;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,iBAAiB,EAC1B,IAAI,EAAE;IACJ,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,GACA,IAAI,CAYN;AAED,wBAAgB,YAAY,IAAI,MAAM,IAAI,CAkBzC;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAOlE"}