agentplane 0.3.23 → 0.3.26

package/dist/meta/release.js

@@ -1,52 +0,0 @@
-import { existsSync } from "node:fs";
-import path from "node:path";
-import { runProcessSync } from "@agentplaneorg/core/process";
-import { getVersion } from "./version.js";
-import { resolveAgentplanePackageRoot } from "../shared/package-paths.js";
-let cachedReleaseDate;
-function findGitRootSync(startDir) {
-    let dir = path.resolve(startDir);
-    for (;;) {
-        if (existsSync(path.join(dir, ".git")))
-            return dir;
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            return null;
-        dir = parent;
-    }
-}
-function resolveGitRootForReleaseLookup() {
-    // Prefer the caller's CWD, but fall back to the package location when invoked
-    // outside of the repository.
-    const fromCwd = findGitRootSync(process.cwd());
-    if (fromCwd)
-        return fromCwd;
-    return findGitRootSync(resolveAgentplanePackageRoot());
-}
-export function getReleaseCommitDate() {
-    if (cachedReleaseDate !== undefined)
-        return cachedReleaseDate;
-    const version = getVersion();
-    const tag = `v${version}`;
-    const gitRoot = resolveGitRootForReleaseLookup();
-    if (!gitRoot) {
-        cachedReleaseDate = null;
-        return cachedReleaseDate;
-    }
-    try {
-        const out = String(runProcessSync({
-            command: "git",
-            args: ["-C", gitRoot, "show", "-s", "--format=%cs", tag],
-            encoding: "utf8",
-            stdin: "ignore",
-            stdout: "pipe",
-            stderr: "ignore",
-        }).stdout).trim();
-        cachedReleaseDate = out || null;
-        return cachedReleaseDate;
-    }
-    catch {
-        cachedReleaseDate = null;
-        return cachedReleaseDate;
-    }
-}

package/dist/meta/version.d.ts

@@ -1,2 +0,0 @@
-export declare function getVersion(): string;
-//# sourceMappingURL=version.d.ts.map

package/dist/meta/version.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../src/meta/version.ts"],"names":[],"mappings":"AAMA,wBAAgB,UAAU,IAAI,MAAM,CAanC"}

package/dist/meta/version.js

@@ -1,20 +0,0 @@
-import { readFileSync } from "node:fs";
-import { resolveAgentplanePackageJsonPath } from "../shared/package-paths.js";
-let cachedVersion = null;
-export function getVersion() {
-    if (cachedVersion)
-        return cachedVersion;
-    try {
-        const raw = readFileSync(resolveAgentplanePackageJsonPath(), "utf8");
-        const parsed = JSON.parse(raw);
-        if (parsed.version) {
-            cachedVersion = String(parsed.version).trim();
-            if (cachedVersion)
-                return cachedVersion;
-        }
-    }
-    catch {
-        // Fall through to default.
-    }
-    return "0.0.0";
-}

package/dist/policy/engine.d.ts

@@ -1,23 +0,0 @@
-import type { AgentplaneConfig } from "@agentplaneorg/core/config";
-import { type PolicyActionDescriptor } from "./taxonomy.js";
-import type { PolicyAction, PolicyContext, PolicyProblem } from "./model.js";
-export type PolicyDecision = {
-    ok: boolean;
-    action: PolicyActionDescriptor;
-    violations: PolicyViolation[];
-};
-export type PolicyViolation = {
-    level: "error" | "warning";
-    code: PolicyProblem["code"];
-    exitCode: number;
-    message: string;
-};
-export type ActionId = PolicyAction | (string & {});
-export type PolicyEngineContext = Omit<PolicyContext, "action"> & {
-    action: ActionId;
-    config: AgentplaneConfig;
-};
-export declare class PolicyEngine {
-    evaluate(ctx: PolicyEngineContext): PolicyDecision;
-}
-//# sourceMappingURL=engine.d.ts.map

package/dist/policy/engine.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../src/policy/engine.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAGnE,OAAO,EAAiC,KAAK,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAC3F,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAgB,MAAM,YAAY,CAAC;AAE3F,MAAM,MAAM,cAAc,GAAG;IAC3B,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,sBAAsB,CAAC;IAC/B,UAAU,EAAE,eAAe,EAAE,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,OAAO,GAAG,SAAS,CAAC;IAC3B,IAAI,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,YAAY,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEpD,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG;IAChE,MAAM,EAAE,QAAQ,CAAC;IACjB,MAAM,EAAE,gBAAgB,CAAC;CAC1B,CAAC;AAkBF,qBAAa,YAAY;IACvB,QAAQ,CAAC,GAAG,EAAE,mBAAmB,GAAG,cAAc;CAcnD"}

package/dist/policy/engine.js

@@ -1,31 +0,0 @@
-import { evaluatePolicy } from "./evaluate.js";
-import { resolvePolicyActionDescriptor } from "./taxonomy.js";
-function toViolations(result) {
-    const out = [];
-    for (const err of result.errors) {
-        out.push({ level: "error", code: err.code, exitCode: err.exitCode, message: err.message });
-    }
-    for (const warn of result.warnings) {
-        out.push({
-            level: "warning",
-            code: warn.code,
-            exitCode: warn.exitCode,
-            message: warn.message,
-        });
-    }
-    return out;
-}
-export class PolicyEngine {
-    evaluate(ctx) {
-        const action = ctx.action;
-        const descriptor = resolvePolicyActionDescriptor(action);
-        // Delegate existing policy actions to the current rule engine.
-        if (descriptor.enforcement === "git_rules") {
-            const result = evaluatePolicy(ctx);
-            return { ok: result.ok, action: descriptor, violations: toViolations(result) };
-        }
-        // Default: no-op. Usecases should still call into the engine so we can harden
-        // policy coverage incrementally without duplicating checks across commands.
-        return { ok: true, action: descriptor, violations: [] };
-    }
-}

package/dist/policy/evaluate.d.ts

@@ -1,3 +0,0 @@
-import type { PolicyContext, PolicyResult } from "./model.js";
-export declare function evaluatePolicy(ctx: PolicyContext): PolicyResult;
-//# sourceMappingURL=evaluate.d.ts.map

package/dist/policy/evaluate.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"evaluate.d.ts","sourceRoot":"","sources":["../../src/policy/evaluate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAO9D,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CA2B/D"}

package/dist/policy/evaluate.js

@@ -1,27 +0,0 @@
-import { gitError, mergeResults, okResult } from "./result.js";
-import { allowlistRule } from "./rules/allowlist.js";
-import { branchPrBaseRule } from "./rules/branch-pr-base.js";
-import { cleanTreeRule } from "./rules/clean-tree.js";
-import { commitSubjectRule } from "./rules/commit-subject.js";
-import { protectedPathsRule } from "./rules/protected-paths.js";
-export function evaluatePolicy(ctx) {
-    const taskId = (ctx.taskId ?? "").trim();
-    if (!taskId && (ctx.action === "guard_commit" || ctx.action === "commit")) {
-        return { ok: false, errors: [gitError("Task id is required")], warnings: [] };
-    }
-    switch (ctx.action) {
-        case "hook_commit_msg": {
-            return commitSubjectRule(ctx);
-        }
-        case "hook_pre_commit": {
-            return mergeResults(protectedPathsRule(ctx), branchPrBaseRule(ctx));
-        }
-        case "guard_commit":
-        case "commit": {
-            return mergeResults(commitSubjectRule(ctx), cleanTreeRule(ctx), branchPrBaseRule(ctx), protectedPathsRule(ctx), allowlistRule(ctx));
-        }
-        default: {
-            return okResult();
-        }
-    }
-}

package/dist/policy/model.d.ts

@@ -1,39 +0,0 @@
-import type { AgentplaneConfig } from "@agentplaneorg/core/config";
-import type { PolicyActionId } from "./taxonomy.js";
-export type PolicyAction = PolicyActionId;
-export type PolicyProblemCode = "E_USAGE" | "E_GIT" | "E_INTERNAL";
-export type PolicyProblem = {
-    code: PolicyProblemCode;
-    exitCode: number;
-    message: string;
-};
-export type PolicyResult = {
-    ok: boolean;
-    errors: PolicyProblem[];
-    warnings: PolicyProblem[];
-};
-export type PolicyContext = {
-    action: PolicyAction;
-    config: AgentplaneConfig;
-    taskId: string;
-    git: {
-        stagedPaths: string[];
-        unstagedTrackedPaths?: string[];
-        currentBranch?: string;
-        baseBranch?: string | null;
-    };
-    commit?: {
-        subject?: string;
-    };
-    allow?: {
-        prefixes?: string[];
-        allowTasks?: boolean;
-        allowBase?: boolean;
-        allowPolicy?: boolean;
-        allowConfig?: boolean;
-        allowHooks?: boolean;
-        allowCI?: boolean;
-    };
-    requireClean?: boolean;
-};
-//# sourceMappingURL=model.d.ts.map

package/dist/policy/model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../src/policy/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AACnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,MAAM,MAAM,YAAY,GAAG,cAAc,CAAC;AAE1C,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,OAAO,GAAG,YAAY,CAAC;AAEnE,MAAM,MAAM,aAAa,GAAG;IAC1B,IAAI,EAAE,iBAAiB,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,MAAM,EAAE,YAAY,CAAC;IAErB,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;IAGf,GAAG,EAAE;QACH,WAAW,EAAE,MAAM,EAAE,CAAC;QACtB,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;QAChC,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC5B,CAAC;IAEF,MAAM,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,CAAC;IAEF,KAAK,CAAC,EAAE;QACN,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QACpB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,WAAW,CAAC,EAAE,OAAO,CAAC;QACtB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,OAAO,CAAC,EAAE,OAAO,CAAC;KACnB,CAAC;IAEF,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB,CAAC"}

package/dist/policy/model.js

@@ -1 +0,0 @@
-export {};

package/dist/policy/result.d.ts

@@ -1,7 +0,0 @@
-import type { PolicyProblem, PolicyResult } from "./model.js";
-export declare function okResult(): PolicyResult;
-export declare function usageError(message: string): PolicyProblem;
-export declare function gitError(message: string): PolicyProblem;
-export declare function internalError(message: string): PolicyProblem;
-export declare function mergeResults(...items: PolicyResult[]): PolicyResult;
-//# sourceMappingURL=result.d.ts.map

package/dist/policy/result.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/policy/result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE9D,wBAAgB,QAAQ,IAAI,YAAY,CAEvC;AAED,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAEzD;AAED,wBAAgB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAEvD;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,aAAa,CAE5D;AAED,wBAAgB,YAAY,CAAC,GAAG,KAAK,EAAE,YAAY,EAAE,GAAG,YAAY,CAQnE"}

package/dist/policy/result.js

@@ -1,21 +0,0 @@
-export function okResult() {
-    return { ok: true, errors: [], warnings: [] };
-}
-export function usageError(message) {
-    return { code: "E_USAGE", exitCode: 2, message };
-}
-export function gitError(message) {
-    return { code: "E_GIT", exitCode: 5, message };
-}
-export function internalError(message) {
-    return { code: "E_INTERNAL", exitCode: 1, message };
-}
-export function mergeResults(...items) {
-    const out = okResult();
-    for (const item of items) {
-        out.errors.push(...item.errors);
-        out.warnings.push(...item.warnings);
-    }
-    out.ok = out.errors.length === 0;
-    return out;
-}

package/dist/policy/rules/allowlist.d.ts

@@ -1,3 +0,0 @@
-import type { PolicyContext, PolicyResult } from "../model.js";
-export declare function allowlistRule(ctx: PolicyContext): PolicyResult;
-//# sourceMappingURL=allowlist.d.ts.map

package/dist/policy/rules/allowlist.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"allowlist.d.ts","sourceRoot":"","sources":["../../../src/policy/rules/allowlist.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAqD9D"}

package/dist/policy/rules/allowlist.js

@@ -1,51 +0,0 @@
-import { gitPathIsUnderPrefix, normalizeGitPathPrefix } from "../../shared/git-path.js";
-import { protectedPathAllowPrefixes } from "../../shared/protected-paths.js";
-import { gitError, okResult } from "../result.js";
-export function allowlistRule(ctx) {
-    const allowRaw = ctx.allow?.prefixes ?? [];
-    const staged = ctx.git.stagedPaths ?? [];
-    const allow = allowRaw.map((p) => normalizeGitPathPrefix(p));
-    const protectedAllow = protectedPathAllowPrefixes({
-        tasksPath: ctx.config.paths.tasks_path,
-        workflowDir: ctx.config.paths.workflow_dir,
-        taskId: ctx.taskId,
-        allowTasks: ctx.allow?.allowTasks === true,
-        allowPolicy: ctx.allow?.allowPolicy === true,
-        allowConfig: ctx.allow?.allowConfig === true,
-        allowHooks: ctx.allow?.allowHooks === true,
-        allowCI: ctx.allow?.allowCI === true,
-    });
-    const effectiveAllow = [...new Set([...allow, ...protectedAllow])];
-    if (staged.length === 0) {
-        return { ok: false, errors: [gitError("No staged files (git index empty)")], warnings: [] };
-    }
-    if (effectiveAllow.length === 0) {
-        const message = ctx.action === "guard_commit" || ctx.action === "commit"
-            ? "Provide at least one --allow <path> prefix"
-            : "Provide at least one allowlist prefix";
-        return {
-            ok: false,
-            errors: [gitError(message)],
-            warnings: [],
-        };
-    }
-    if (effectiveAllow.includes(".")) {
-        return {
-            ok: false,
-            errors: [
-                gitError("Repo-wide allowlist ('.') is not allowed; choose minimal prefixes (tip: `agentplane guard suggest-allow --format args`)."),
-            ],
-            warnings: [],
-        };
-    }
-    const errors = [];
-    for (const filePath of staged) {
-        if (!effectiveAllow.some((prefix) => gitPathIsUnderPrefix(filePath, prefix))) {
-            errors.push(`Staged file is outside allowlist: ${filePath}`);
-        }
-    }
-    if (errors.length > 0) {
-        return { ok: false, errors: errors.map((msg) => gitError(msg)), warnings: [] };
-    }
-    return okResult();
-}

package/dist/policy/rules/branch-pr-base.d.ts

@@ -1,3 +0,0 @@
-import type { PolicyContext, PolicyResult } from "../model.js";
-export declare function branchPrBaseRule(ctx: PolicyContext): PolicyResult;
-//# sourceMappingURL=branch-pr-base.d.ts.map

package/dist/policy/rules/branch-pr-base.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"branch-pr-base.d.ts","sourceRoot":"","sources":["../../../src/policy/rules/branch-pr-base.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CA4CjE"}

package/dist/policy/rules/branch-pr-base.js

@@ -1,43 +0,0 @@
-import { gitError, internalError, okResult, usageError } from "../result.js";
-export function branchPrBaseRule(ctx) {
-    if (ctx.config.workflow_mode !== "branch_pr")
-        return okResult();
-    const baseBranch = ctx.git.baseBranch;
-    const currentBranch = ctx.git.currentBranch;
-    const staged = ctx.git.stagedPaths ?? [];
-    const tasksPath = ctx.config.paths.tasks_path;
-    if (!baseBranch) {
-        return {
-            ok: false,
-            errors: [usageError("Base branch could not be resolved (use `agentplane branch base set`).")],
-            warnings: [],
-        };
-    }
-    if (!currentBranch) {
-        return {
-            ok: false,
-            errors: [internalError("Internal error: current branch is required in branch_pr mode")],
-            warnings: [],
-        };
-    }
-    const allowBase = ctx.allow?.allowBase === true;
-    const tasksStaged = staged.includes(tasksPath);
-    const nonTasks = staged.filter((p) => p !== tasksPath);
-    if (tasksStaged && currentBranch !== baseBranch) {
-        return {
-            ok: false,
-            errors: [
-                gitError(`${tasksPath} commits are allowed only on ${baseBranch} in branch_pr mode`),
-            ],
-            warnings: [],
-        };
-    }
-    if (nonTasks.length > 0 && currentBranch === baseBranch && !allowBase) {
-        return {
-            ok: false,
-            errors: [gitError(`Code commits are forbidden on ${baseBranch} in branch_pr mode`)],
-            warnings: [],
-        };
-    }
-    return okResult();
-}

package/dist/policy/rules/clean-tree.d.ts

@@ -1,3 +0,0 @@
-import type { PolicyContext, PolicyResult } from "../model.js";
-export declare function cleanTreeRule(ctx: PolicyContext): PolicyResult;
-//# sourceMappingURL=clean-tree.d.ts.map

package/dist/policy/rules/clean-tree.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"clean-tree.d.ts","sourceRoot":"","sources":["../../../src/policy/rules/clean-tree.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,wBAAgB,aAAa,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAgB9D"}

package/dist/policy/rules/clean-tree.js

@@ -1,19 +0,0 @@
-import { gitError, internalError, okResult } from "../result.js";
-export function cleanTreeRule(ctx) {
-    if (ctx.requireClean !== true)
-        return okResult();
-    const unstaged = ctx.git.unstagedTrackedPaths ?? null;
-    if (!unstaged) {
-        return {
-            ok: false,
-            errors: [
-                internalError("Internal error: unstaged tracked paths are required for requireClean"),
-            ],
-            warnings: [],
-        };
-    }
-    if (unstaged.length > 0) {
-        return { ok: false, errors: [gitError("Working tree is dirty")], warnings: [] };
-    }
-    return okResult();
-}

package/dist/policy/rules/commit-subject.d.ts

@@ -1,3 +0,0 @@
-import type { PolicyContext, PolicyResult } from "../model.js";
-export declare function commitSubjectRule(ctx: PolicyContext): PolicyResult;
-//# sourceMappingURL=commit-subject.d.ts.map

package/dist/policy/rules/commit-subject.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"commit-subject.d.ts","sourceRoot":"","sources":["../../../src/policy/rules/commit-subject.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE/D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAmBlE"}

package/dist/policy/rules/commit-subject.js

@@ -1,21 +0,0 @@
-import { validateCommitSubject } from "@agentplaneorg/core/commit";
-import { gitError, okResult } from "../result.js";
-export function commitSubjectRule(ctx) {
-    const subject = (ctx.commit?.subject ?? "").trim();
-    if (!subject) {
-        return { ok: false, errors: [gitError("Commit message subject is empty")], warnings: [] };
-    }
-    const policy = validateCommitSubject({
-        subject,
-        taskId: (ctx.taskId ?? "").trim() || undefined,
-        genericTokens: ctx.config.commit.generic_tokens,
-    });
-    if (!policy.ok) {
-        return {
-            ok: false,
-            errors: policy.errors.map((msg) => gitError(msg)),
-            warnings: [],
-        };
-    }
-    return okResult();
-}

package/dist/policy/rules/protected-paths.d.ts

@@ -1,3 +0,0 @@
-import type { PolicyContext, PolicyResult } from "../model.js";
-export declare function protectedPathsRule(ctx: PolicyContext): PolicyResult;
-//# sourceMappingURL=protected-paths.d.ts.map

package/dist/policy/rules/protected-paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"protected-paths.d.ts","sourceRoot":"","sources":["../../../src/policy/rules/protected-paths.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAgB,aAAa,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAc7E,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,aAAa,GAAG,YAAY,CAqDnE"}

package/dist/policy/rules/protected-paths.js

@@ -1,58 +0,0 @@
-import { getProtectedPathOverride, protectedPathKindForFile, } from "../../shared/protected-paths.js";
-import { gitError, okResult } from "../result.js";
-function renderProtectedMessage(opts) {
-    if (opts.action === "hook_pre_commit") {
-        return `${opts.filePath} is protected by agentplane hooks (set ${opts.overrideEnvVar}=1 to override)`;
-    }
-    return `Staged file is protected by default: ${opts.filePath} (use ${opts.overrideFlag} to override)`;
-}
-export function protectedPathsRule(ctx) {
-    const staged = ctx.git.stagedPaths ?? [];
-    if (staged.length === 0)
-        return okResult();
-    const tasksPath = ctx.config.paths.tasks_path;
-    const allowTasks = ctx.allow?.allowTasks === true;
-    const allowPolicy = ctx.allow?.allowPolicy === true;
-    const allowConfig = ctx.allow?.allowConfig === true;
-    const allowHooks = ctx.allow?.allowHooks === true;
-    const allowCI = ctx.allow?.allowCI === true;
-    const errors = [];
-    for (const filePath of staged) {
-        const kind = protectedPathKindForFile({
-            filePath,
-            tasksPath,
-            workflowDir: ctx.config.paths.workflow_dir,
-            taskId: ctx.taskId,
-        });
-        if (!kind)
-            continue;
-        if (kind === "tasks" && !allowTasks) {
-            const override = getProtectedPathOverride(kind);
-            errors.push(ctx.action === "hook_pre_commit"
-                ? `${tasksPath} is protected by agentplane hooks (set ${override.envVar}=1 to override)`
-                : `Staged file is forbidden by default: ${filePath} (use ${override.cliFlag} to override)`);
-            continue;
-        }
-        if (kind === "policy" && allowPolicy)
-            continue;
-        if (kind === "config" && allowConfig)
-            continue;
-        if (kind === "hooks" && allowHooks)
-            continue;
-        if (kind === "ci" && allowCI)
-            continue;
-        if (kind !== "tasks") {
-            const override = getProtectedPathOverride(kind);
-            errors.push(renderProtectedMessage({
-                action: ctx.action,
-                filePath,
-                overrideFlag: override.cliFlag,
-                overrideEnvVar: override.envVar,
-            }));
-        }
-    }
-    if (errors.length > 0) {
-        return { ok: false, errors: errors.map((msg) => gitError(msg)), warnings: [] };
-    }
-    return okResult();
-}

package/dist/policy/taxonomy.d.ts

@@ -1,17 +0,0 @@
-export type KnownPolicyActionId = "guard_commit" | "commit" | "hook_pre_commit" | "hook_commit_msg" | "network_access" | "force_action" | "policy_write" | "config_write" | "dangerous_fs" | "git_push" | "task_list" | "task_new" | "task_mutation" | "task_status_transition" | "task_start" | "task_block" | "task_set_status" | "task_finish" | "task_plan_set" | "task_plan_approve" | "task_verify" | "task_run" | "scenario_execute" | "recipe_install" | "recipe_list_remote" | "backend_sync" | "backend_migrate_canonical_state" | "backend_inspect" | "upgrade_apply" | "release_apply" | "doctor_fix";
-export type PolicyActionId = KnownPolicyActionId | (string & {});
-export type PolicyActionFamily = "git" | "task" | "runner" | "recipe" | "backend" | "release" | "upgrade" | "workflow" | "network" | "policy" | "config" | "filesystem" | "diagnostics" | "custom";
-export type PolicyApprovalKind = "network_access" | "force_action" | "policy_write" | "config_write" | "dangerous_fs" | "git_push";
-export type PolicyActionDescriptor = {
-    id: PolicyActionId;
-    family: PolicyActionFamily;
-    summary: string;
-    mutates_state: boolean;
-    risky: boolean;
-    destructive: boolean;
-    approval: PolicyApprovalKind | null;
-    enforcement: "git_rules" | "approval_only" | "none";
-    source: "builtin" | "custom";
-};
-export declare function resolvePolicyActionDescriptor(action: PolicyActionId): PolicyActionDescriptor;
-//# sourceMappingURL=taxonomy.d.ts.map

package/dist/policy/taxonomy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"taxonomy.d.ts","sourceRoot":"","sources":["../../src/policy/taxonomy.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,mBAAmB,GAC3B,cAAc,GACd,QAAQ,GACR,iBAAiB,GACjB,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,cAAc,GACd,cAAc,GACd,UAAU,GACV,WAAW,GACX,UAAU,GACV,eAAe,GACf,wBAAwB,GACxB,YAAY,GACZ,YAAY,GACZ,iBAAiB,GACjB,aAAa,GACb,eAAe,GACf,mBAAmB,GACnB,aAAa,GACb,UAAU,GACV,kBAAkB,GAClB,gBAAgB,GAChB,oBAAoB,GACpB,cAAc,GACd,iCAAiC,GACjC,iBAAiB,GACjB,eAAe,GACf,eAAe,GACf,YAAY,CAAC;AAEjB,MAAM,MAAM,cAAc,GAAG,mBAAmB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAEjE,MAAM,MAAM,kBAAkB,GAC1B,KAAK,GACL,MAAM,GACN,QAAQ,GACR,QAAQ,GACR,SAAS,GACT,SAAS,GACT,SAAS,GACT,UAAU,GACV,SAAS,GACT,QAAQ,GACR,QAAQ,GACR,YAAY,GACZ,aAAa,GACb,QAAQ,CAAC;AAEb,MAAM,MAAM,kBAAkB,GAC1B,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,cAAc,GACd,cAAc,GACd,UAAU,CAAC;AAEf,MAAM,MAAM,sBAAsB,GAAG;IACnC,EAAE,EAAE,cAAc,CAAC;IACnB,MAAM,EAAE,kBAAkB,CAAC;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,OAAO,CAAC;IACvB,KAAK,EAAE,OAAO,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;IACrB,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IACpC,WAAW,EAAE,WAAW,GAAG,eAAe,GAAG,MAAM,CAAC;IACpD,MAAM,EAAE,SAAS,GAAG,QAAQ,CAAC;CAC9B,CAAC;AA8RF,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,cAAc,GAAG,sBAAsB,CAoB5F"}