agentplane 0.3.16 → 0.3.17

package/dist/commands/hooks/run.js

@@ -0,0 +1,45 @@
+import { mapBackendError } from "../../cli/error-map.js";
+import { CliError } from "../../shared/errors.js";
+import { runCommitMsgHook } from "./run.commit-msg.js";
+import { runPostMergeHook } from "./run.post-merge.js";
+import { runPreCommitHook } from "./run.pre-commit.js";
+import { runPrePushHook } from "./run.pre-push.js";
+async function runHook(opts) {
+    switch (opts.hook) {
+        case "commit-msg": {
+            return await runCommitMsgHook(opts);
+        }
+        case "pre-commit": {
+            return await runPreCommitHook(opts);
+        }
+        case "pre-push": {
+            return await runPrePushHook(opts);
+        }
+        case "post-merge": {
+            return await runPostMergeHook(opts);
+        }
+    }
+}
+export async function cmdHooksRun(opts) {
+    try {
+        return await runHook(opts);
+    }
+    catch (err) {
+        const status = err?.status;
+        const stdout = err?.stdout;
+        const stderr = err?.stderr;
+        if (typeof stdout === "string" && stdout.length > 0)
+            process.stdout.write(stdout);
+        if (typeof stderr === "string" && stderr.length > 0)
+            process.stderr.write(stderr);
+        if (typeof status === "number" && Number.isInteger(status) && status >= 0) {
+            return status;
+        }
+        if (err instanceof CliError)
+            throw err;
+        throw mapBackendError(err, {
+            command: `hooks run ${opts.hook}`,
+            root: opts.rootOverride ?? null,
+        });
+    }
+}

package/dist/commands/hooks/run.post-merge.d.ts

@@ -0,0 +1,3 @@
+import type { HooksRunOptions } from "./run.js";
+export declare function runPostMergeHook(opts: HooksRunOptions): Promise<number>;
+//# sourceMappingURL=run.post-merge.d.ts.map

package/dist/commands/hooks/run.post-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.post-merge.d.ts","sourceRoot":"","sources":["../../../src/commands/hooks/run.post-merge.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAEhD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAuC7E"}

package/dist/commands/hooks/run.post-merge.js

@@ -0,0 +1,44 @@
+import { resolveBaseBranch } from "@agentplaneorg/core";
+import { cmdCleanupMerged } from "../branch/index.js";
+import { gitCurrentBranch } from "../shared/git-ops.js";
+import { loadCommandContext } from "../shared/task-backend.js";
+export async function runPostMergeHook(opts) {
+    try {
+        const ctx = await loadCommandContext({
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride ?? null,
+        });
+        if (ctx.config.workflow_mode !== "branch_pr")
+            return 0;
+        const baseBranch = await resolveBaseBranch({
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride ?? null,
+            cliBaseOpt: null,
+            mode: ctx.config.workflow_mode,
+        });
+        if (!baseBranch)
+            return 0;
+        const currentBranch = await gitCurrentBranch(ctx.resolvedProject.gitRoot);
+        if (currentBranch !== baseBranch)
+            return 0;
+        return await cmdCleanupMerged({
+            ctx,
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride,
+            base: baseBranch,
+            yes: true,
+            archive: false,
+            deleteRemoteBranches: false,
+            fetch: false,
+            quiet: true,
+            skipUnsafeWorktrees: true,
+        });
+    }
+    catch (error) {
+        const message = error instanceof Error && error.message.trim().length > 0
+            ? error.message.trim()
+            : String(error);
+        process.stderr.write(`warning: post-merge cleanup skipped: ${message}\n`);
+        return 0;
+    }
+}

package/dist/commands/hooks/run.pre-commit.d.ts

@@ -0,0 +1,3 @@
+import type { HooksRunOptions } from "./run.js";
+export declare function runPreCommitHook(opts: HooksRunOptions): Promise<number>;
+//# sourceMappingURL=run.pre-commit.d.ts.map

package/dist/commands/hooks/run.pre-commit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.pre-commit.d.ts","sourceRoot":"","sources":["../../../src/commands/hooks/run.pre-commit.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAMhD,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAwC7E"}

package/dist/commands/hooks/run.pre-commit.js

@@ -0,0 +1,48 @@
+import { loadConfig, resolveBaseBranch, resolveProject } from "@agentplaneorg/core";
+import { evaluatePolicy } from "../../policy/evaluate.js";
+import { GitContext } from "../shared/git-context.js";
+import { gitCurrentBranch } from "../shared/git-ops.js";
+import { throwIfPolicyDenied } from "../shared/policy-deny.js";
+function envFlag(name) {
+    return (process.env[name] ?? "").trim() === "1";
+}
+export async function runPreCommitHook(opts) {
+    const resolved = await resolveProject({
+        cwd: opts.cwd,
+        rootOverride: opts.rootOverride ?? null,
+    });
+    const staged = await new GitContext({ gitRoot: resolved.gitRoot }).statusStagedPaths();
+    if (staged.length === 0)
+        return 0;
+    const loaded = await loadConfig(resolved.agentplaneDir);
+    const inBranchPr = loaded.config.workflow_mode === "branch_pr";
+    const baseBranch = inBranchPr
+        ? await resolveBaseBranch({
+            cwd: opts.cwd,
+            rootOverride: opts.rootOverride ?? null,
+            cliBaseOpt: null,
+            mode: loaded.config.workflow_mode,
+        })
+        : null;
+    const currentBranch = inBranchPr ? await gitCurrentBranch(resolved.gitRoot) : undefined;
+    const res = evaluatePolicy({
+        action: "hook_pre_commit",
+        config: loaded.config,
+        taskId: (process.env.AGENTPLANE_TASK_ID ?? "").trim(),
+        git: {
+            stagedPaths: staged,
+            currentBranch,
+            baseBranch,
+        },
+        allow: {
+            allowTasks: envFlag("AGENTPLANE_ALLOW_TASKS"),
+            allowBase: envFlag("AGENTPLANE_ALLOW_BASE"),
+            allowPolicy: envFlag("AGENTPLANE_ALLOW_POLICY"),
+            allowConfig: envFlag("AGENTPLANE_ALLOW_CONFIG"),
+            allowHooks: envFlag("AGENTPLANE_ALLOW_HOOKS"),
+            allowCI: envFlag("AGENTPLANE_ALLOW_CI"),
+        },
+    });
+    throwIfPolicyDenied(res);
+    return 0;
+}

package/dist/commands/hooks/run.pre-push.d.ts

@@ -0,0 +1,6 @@
+import type { HooksRunOptions } from "./run.js";
+export declare function resolvePrePushHookScriptPath(gitRoot: string, opts?: {
+    bundledScriptPath?: string;
+}): Promise<string | null>;
+export declare function runPrePushHook(opts: HooksRunOptions): Promise<number>;
+//# sourceMappingURL=run.pre-push.d.ts.map

package/dist/commands/hooks/run.pre-push.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run.pre-push.d.ts","sourceRoot":"","sources":["../../../src/commands/hooks/run.pre-push.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,UAAU,CAAC;AAMhD,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;IAAE,iBAAiB,CAAC,EAAE,MAAM,CAAA;CAAO,GACxC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMxB;AA4CD,wBAAsB,cAAc,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAgC3E"}

package/dist/commands/hooks/run.pre-push.js

@@ -0,0 +1,88 @@
+import { runProcessSync, resolveProject } from "@agentplaneorg/core";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { fileExists } from "../../cli/fs-utils.js";
+import { CliError } from "../../shared/errors.js";
+function resolveBundledPrePushHookScriptPath() {
+    return fileURLToPath(new URL("../../../../../scripts/run-pre-push-hook.mjs", import.meta.url));
+}
+export async function resolvePrePushHookScriptPath(gitRoot, opts = {}) {
+    const repoScriptPath = path.join(gitRoot, "scripts", "run-pre-push-hook.mjs");
+    if (await fileExists(repoScriptPath))
+        return repoScriptPath;
+    const bundledScriptPath = opts.bundledScriptPath ?? resolveBundledPrePushHookScriptPath();
+    if (await fileExists(bundledScriptPath))
+        return bundledScriptPath;
+    return null;
+}
+async function readHookStdinUtf8(timeoutMs = 25) {
+    if (process.stdin.isTTY)
+        return "";
+    const chunks = [];
+    const consume = () => {
+        let chunk = process.stdin.read();
+        while (chunk !== null) {
+            chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk)));
+            chunk = process.stdin.read();
+        }
+    };
+    consume();
+    if (chunks.length > 0 || process.stdin.readableEnded) {
+        return Buffer.concat(chunks).toString("utf8");
+    }
+    await new Promise((resolve) => {
+        const finish = () => {
+            clearTimeout(timer);
+            process.stdin.off("readable", onReadable);
+            process.stdin.off("end", onEnd);
+            resolve();
+        };
+        const onReadable = () => {
+            consume();
+            finish();
+        };
+        const onEnd = () => {
+            consume();
+            finish();
+        };
+        const timer = setTimeout(finish, timeoutMs);
+        process.stdin.on("readable", onReadable);
+        process.stdin.on("end", onEnd);
+        process.stdin.resume();
+    });
+    consume();
+    return Buffer.concat(chunks).toString("utf8");
+}
+export async function runPrePushHook(opts) {
+    const resolved = await resolveProject({
+        cwd: opts.cwd,
+        rootOverride: opts.rootOverride ?? null,
+    });
+    const scriptPath = await resolvePrePushHookScriptPath(resolved.gitRoot);
+    if (!scriptPath) {
+        throw new CliError({
+            exitCode: 2,
+            code: "E_USAGE",
+            message: [
+                "Missing pre-push hook script: scripts/run-pre-push-hook.mjs",
+                "The pre-push hook needs a repository-local script or an installed CLI bundle that ships the fallback.",
+                "Fix:",
+                "  1) Restore scripts/run-pre-push-hook.mjs in this repository, or",
+                "  2) Run `agentplane hooks uninstall` if this repository should not use the agentplane pre-push gate.",
+            ].join("\n"),
+        });
+    }
+    const result = runProcessSync({
+        command: "node",
+        args: [scriptPath],
+        cwd: resolved.gitRoot,
+        env: process.env,
+        encoding: "utf8",
+        input: await readHookStdinUtf8(),
+        stdin: "pipe",
+        stdout: "inherit",
+        stderr: "inherit",
+        reject: false,
+    });
+    return result.exitCode ?? (result.signal ? 1 : 0);
+}

package/dist/commands/hooks/shared.d.ts

@@ -0,0 +1,7 @@
+export declare const HOOK_MARKER = "agentplane-hook";
+export declare const SHIM_MARKER = "agentplane-hook-shim";
+export declare const HOOK_NAMES: readonly ["commit-msg", "pre-commit", "pre-push", "post-merge"];
+export type HookName = (typeof HOOK_NAMES)[number];
+export declare function resolveGitHooksDir(cwd: string): Promise<string>;
+export declare function fileIsManaged(filePath: string, marker: string): Promise<boolean>;
+//# sourceMappingURL=shared.d.ts.map

package/dist/commands/hooks/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../src/commands/hooks/shared.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,WAAW,oBAAoB,CAAC;AAC7C,eAAO,MAAM,WAAW,yBAAyB,CAAC;AAClD,eAAO,MAAM,UAAU,iEAAkE,CAAC;AAC1F,MAAM,MAAM,QAAQ,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC;AAEnD,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BrE;AAED,wBAAsB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAOtF"}

package/dist/commands/hooks/shared.js

@@ -0,0 +1,41 @@
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { gitRevParse } from "../shared/git-ops.js";
+import { isPathWithin } from "../shared/path.js";
+import { CliError } from "../../shared/errors.js";
+export const HOOK_MARKER = "agentplane-hook";
+export const SHIM_MARKER = "agentplane-hook-shim";
+export const HOOK_NAMES = ["commit-msg", "pre-commit", "pre-push", "post-merge"];
+export async function resolveGitHooksDir(cwd) {
+    const repoRoot = await gitRevParse(cwd, ["--show-toplevel"]);
+    const commonDirRaw = await gitRevParse(cwd, ["--git-common-dir"]);
+    const hooksRaw = await gitRevParse(cwd, ["--git-path", "hooks"]);
+    const commonDir = path.resolve(path.isAbsolute(commonDirRaw) ? commonDirRaw : path.join(repoRoot, commonDirRaw));
+    const hooksDir = path.resolve(path.isAbsolute(hooksRaw) ? hooksRaw : path.join(repoRoot, hooksRaw));
+    const resolvedRoot = path.resolve(repoRoot);
+    if (!isPathWithin(resolvedRoot, hooksDir) && !isPathWithin(commonDir, hooksDir)) {
+        throw new CliError({
+            exitCode: 5,
+            code: "E_GIT",
+            message: [
+                "Refusing to manage git hooks outside the repository.",
+                `hooks_path=${hooksDir}`,
+                `repo_root=${resolvedRoot}`,
+                `common_dir=${commonDir}`,
+                "Fix:",
+                "  1) Use a repo-relative core.hooksPath (e.g., .git/hooks)",
+                "  2) Re-run `agentplane hooks install`",
+            ].join("\n"),
+        });
+    }
+    return hooksDir;
+}
+export async function fileIsManaged(filePath, marker) {
+    try {
+        const content = await readFile(filePath, "utf8");
+        return content.includes(marker);
+    }
+    catch {
+        return false;
+    }
+}

package/dist/commands/recipes/impl/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAyB,MAAM,wBAAwB,CAAC;AAsIlF,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,YAAY,CAAC,CA0BxB;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAGV"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/commands/recipes/impl/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,YAAY,EAAyB,MAAM,wBAAwB,CAAC;AA2JlF,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB,GAAG,OAAO,CAAC,YAAY,CAAC,CA0BxB;AAED,wBAAgB,2BAA2B,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,eAAe,EAAE,OAAO,CAAC;CAC1B,GAAG,OAAO,CAGV"}

package/dist/commands/recipes/impl/index.js

@@ -8,6 +8,10 @@ import { isRecord } from "../../../shared/guards.js";
 import { writeJsonStableIfChanged, writeTextIfChanged } from "../../../shared/write-if-changed.js";
 import { DEFAULT_RECIPES_INDEX_URL, RECIPES_INDEX_PUBLIC_KEYS, RECIPES_INDEX_PUBLIC_KEYS_ENV, } from "./constants.js";
 import { resolveRecipesIndexCachePath, resolveRecipesIndexCacheSigPath } from "./paths.js";
+const DEFAULT_RECIPES_INDEX_SIGNATURE_ALGORITHM = "ed25519";
+const recipesIndexSignatureVerifiers = {
+    ed25519: verifyRecipesIndexEd25519Signature,
+};
 function loadRecipesIndexPublicKeys() {
     const raw = process.env[RECIPES_INDEX_PUBLIC_KEYS_ENV];
     if (!raw)
@@ -36,13 +40,19 @@ function validateRecipesIndexSignature(raw) {
     if (!keyId || !signature) {
         throw new Error(invalidFieldMessage("recipes index signature", "key_id, signature"));
     }
-    const algorithm = typeof raw.algorithm === "string" ? raw.algorithm.trim() : undefined;
+    const algorithm = typeof raw.algorithm === "string" && raw.algorithm.trim() ? raw.algorithm.trim() : undefined;
     return { schema_version: 1, key_id: keyId, signature, algorithm };
 }
 function verifyRecipesIndexSignature(indexText, signature) {
-    if (signature.algorithm && signature.algorithm !== "ed25519") {
-        throw new Error(invalidFieldMessage("recipes index signature.algorithm", "ed25519"));
+    const algorithm = signature.algorithm ?? DEFAULT_RECIPES_INDEX_SIGNATURE_ALGORITHM;
+    const verifier = recipesIndexSignatureVerifiers[algorithm];
+    if (!verifier) {
+        const supportedAlgorithms = Object.keys(recipesIndexSignatureVerifiers).toSorted().join(", ");
+        throw new Error(`Unsupported recipes index signature algorithm "${algorithm}". Supported algorithms: ${supportedAlgorithms}`);
     }
+    verifier(indexText, signature);
+}
+function verifyRecipesIndexEd25519Signature(indexText, signature) {
     const keys = loadRecipesIndexPublicKeys();
     const publicKey = keys[signature.key_id];
     if (!publicKey) {

package/dist/commands/task/hosted-close-pr.command.d.ts

@@ -1,11 +1,6 @@
 import type { CommandCtx, CommandSpec } from "../../cli/spec/spec.js";
-import { type CommandContext } from "../shared/task-backend.js";
-type TaskHostedClosePrParsed = {
-    taskIds: string[];
-    branch: string | null;
-    repo: string | null;
-};
+import type { CommandContext } from "../shared/task-backend.js";
+import type { TaskHostedClosePrParsed } from "./hosted-close-pr.types.js";
 export declare const taskHostedClosePrSpec: CommandSpec<TaskHostedClosePrParsed>;
 export declare function makeRunTaskHostedClosePrHandler(getCtx: (cmd: string) => Promise<CommandContext>): (ctx: CommandCtx, p: TaskHostedClosePrParsed) => Promise<number>;
-export {};
 //# sourceMappingURL=hosted-close-pr.command.d.ts.map

package/dist/commands/task/hosted-close-pr.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-close-pr.command.d.ts","sourceRoot":"","sources":["../../../src/commands/task/hosted-close-pr.command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAStE,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AASnC,KAAK,uBAAuB,GAAG;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACrB,CAAC;AAgBF,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,uBAAuB,CAoEtE,CAAC;AA4cF,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IAChF,KAAK,UAAU,EAAE,GAAG,uBAAuB,KAAG,OAAO,CAAC,MAAM,CAAC,CAsB5E"}
+{"version":3,"file":"hosted-close-pr.command.d.ts","sourceRoot":"","sources":["../../../src/commands/task/hosted-close-pr.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAItE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAShE,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAE1E,eAAO,MAAM,qBAAqB,EAAE,WAAW,CAAC,uBAAuB,CAoEtE,CAAC;AAqBF,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IAChF,KAAK,UAAU,EAAE,GAAG,uBAAuB,KAAG,OAAO,CAAC,MAAM,CAAC,CAsB5E"}