agentplane 0.3.9 → 0.3.10

package/dist/commands/pr/open.js

@@ -1,20 +1,9 @@
-import { mkdir, readFile } from "node:fs/promises";
 import path from "node:path";
-import { atomicWriteFile } from "@agentplaneorg/core";
 import { mapBackendError } from "../../cli/error-map.js";
 import { exitCodeForError } from "../../cli/exit-codes.js";
-import { fileExists } from "../../cli/fs-utils.js";
-import { createCliEmitter, workflowModeMessage } from "../../cli/output.js";
+import { createCliEmitter } from "../../cli/output.js";
 import { CliError } from "../../shared/errors.js";
-import { writeJsonStableIfChanged, writeTextIfChanged } from "../../shared/write-if-changed.js";
-import { gitCurrentBranch } from "../shared/git-ops.js";
-import { buildOpenedPrMeta, parsePrMeta } from "../shared/pr-meta.js";
-import { loadBackendTask, loadCommandContext, } from "../shared/task-backend.js";
-import { resolvePrPaths } from "./internal/pr-paths.js";
-import { renderPrReviewTemplate } from "./internal/review-template.js";
-function nowIso() {
-    return new Date().toISOString();
-}
+import { syncPrArtifacts } from "./internal/sync.js";
 export async function cmdPrOpen(opts) {
     try {
         const output = createCliEmitter();
@@ -26,51 +15,15 @@ export async function cmdPrOpen(opts) {
                 message: "Invalid value for --author.",
             });
         }
-        const ctx = opts.ctx ??
-            (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
-        const { task } = await loadBackendTask({
-            ctx,
+        const { prDir, resolved } = await syncPrArtifacts({
+            ctx: opts.ctx,
             cwd: opts.cwd,
             rootOverride: opts.rootOverride,
             taskId: opts.taskId,
+            mode: "open",
+            author,
+            branch: opts.branch,
         });
-        const { resolved, config, prDir, metaPath, diffstatPath, verifyLogPath, reviewPath } = await resolvePrPaths({ ...opts, ctx });
-        if (config.workflow_mode !== "branch_pr") {
-            throw new CliError({
-                exitCode: exitCodeForError("E_USAGE"),
-                code: "E_USAGE",
-                message: workflowModeMessage(config.workflow_mode, "branch_pr"),
-            });
-        }
-        const branch = (opts.branch ?? (await gitCurrentBranch(resolved.gitRoot))).trim();
-        if (!branch) {
-            throw new CliError({
-                exitCode: exitCodeForError("E_USAGE"),
-                code: "E_USAGE",
-                message: "Branch could not be resolved (use --branch).",
-            });
-        }
-        await mkdir(prDir, { recursive: true });
-        const now = nowIso();
-        let meta = null;
-        if (await fileExists(metaPath)) {
-            const raw = await readFile(metaPath, "utf8");
-            meta = parsePrMeta(raw, task.id);
-        }
-        const createdAt = meta?.created_at ?? now;
-        const nextMeta = buildOpenedPrMeta({
-            taskId: task.id,
-            branch,
-            at: now,
-            previousMeta: meta,
-        });
-        await writeJsonStableIfChanged(metaPath, nextMeta);
-        await writeTextIfChanged(diffstatPath, "");
-        await writeTextIfChanged(verifyLogPath, "");
-        if (!(await fileExists(reviewPath))) {
-            const review = renderPrReviewTemplate({ author, createdAt, branch });
-            await atomicWriteFile(reviewPath, review, "utf8");
-        }
         output.success("pr open", path.relative(resolved.gitRoot, prDir));
         return 0;
     }

package/dist/commands/pr/pr.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr.command.d.ts","sourceRoot":"","sources":["../../../src/commands/pr/pr.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,KAAK,aAAa,GAAG,kBAAkB,CAAC;AAExC,eAAO,MAAM,MAAM,EAAE,WAAW,CAAC,aAAa,CAgB7C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAErF,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CAgChD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,cAAc,CAOpD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,aAAa,CAOlD,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CA0ChD,CAAC;AAWF,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,GAChD,cAAc,CAAC,kBAAkB,CAAC,CAEpC;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAUjE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACvE,KAAK,UAAU,EAAE,GAAG,cAAc,KAAG,OAAO,CAAC,MAAM,CAAC,CAQnE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACtE,KAAK,UAAU,EAAE,GAAG,aAAa,KAAG,OAAO,CAAC,MAAM,CAAC,CAQlE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAUjE"}
+{"version":3,"file":"pr.command.d.ts","sourceRoot":"","sources":["../../../src/commands/pr/pr.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACtF,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,KAAK,aAAa,GAAG,kBAAkB,CAAC;AAExC,eAAO,MAAM,MAAM,EAAE,WAAW,CAAC,aAAa,CAoB7C,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC;AAErF,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CAgChD,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,eAAO,MAAM,YAAY,EAAE,WAAW,CAAC,cAAc,CAOpD,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/C,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,aAAa,CAOlD,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5E,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,YAAY,CA0ChD,CAAC;AAWF,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,GAChD,cAAc,CAAC,kBAAkB,CAAC,CAEpC;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAUjE;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACvE,KAAK,UAAU,EAAE,GAAG,cAAc,KAAG,OAAO,CAAC,MAAM,CAAC,CAQnE;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACtE,KAAK,UAAU,EAAE,GAAG,aAAa,KAAG,OAAO,CAAC,MAAM,CAAC,CAQlE;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,IACrE,KAAK,UAAU,EAAE,GAAG,YAAY,KAAG,OAAO,CAAC,MAAM,CAAC,CAUjE"}

package/dist/commands/pr/pr.command.js

@@ -4,12 +4,15 @@ import { cmdPrCheck, cmdPrNote, cmdPrOpen, cmdPrUpdate } from "./index.js";
 export const prSpec = {
     id: ["pr"],
     group: "PR",
-    summary: "Manage local PR artifacts for a task (branch_pr workflow).",
+    summary: "Manage local PR review and GitHub publication artifacts for a task (branch_pr workflow).",
     synopsis: ["agentplane pr <open|update|check|note> <task-id> [options]"],
     args: [{ name: "cmd", required: false, variadic: true, valueHint: "<cmd>" }],
     examples: [
         { cmd: "agentplane pr open 202602030608-F1Q8AB --author CODER", why: "Create PR artifacts." },
-        { cmd: "agentplane pr update 202602030608-F1Q8AB", why: "Refresh diffstat and summary." },
+        {
+            cmd: "agentplane pr update 202602030608-F1Q8AB",
+            why: "Refresh review.md plus github-title/body projections.",
+        },
         { cmd: "agentplane pr check 202602030608-F1Q8AB", why: "Validate PR artifacts." },
         {
             cmd: 'agentplane pr note 202602030608-F1Q8AB --author REVIEWER --body "Looks good"',
@@ -54,7 +57,7 @@ export const prOpenSpec = {
 export const prUpdateSpec = {
     id: ["pr", "update"],
     group: "PR",
-    summary: "Update PR artifacts (diffstat and auto summary).",
+    summary: "Update PR artifacts (review packet, diffstat, and GitHub projections).",
     args: [{ name: "task-id", required: true, valueHint: "<task-id>" }],
     examples: [{ cmd: "agentplane pr update 202602030608-F1Q8AB", why: "Update artifacts." }],
     parse: (raw) => ({ taskId: String(raw.args["task-id"]) }),

package/dist/commands/pr/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/commands/pr/update.ts"],"names":[],"mappings":"AAaA,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,2BAA2B,CAAC;AASnC,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAwFlB"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/commands/pr/update.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,2BAA2B,CAAC;AAIhE,wBAAsB,WAAW,CAAC,IAAI,EAAE;IACtC,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,MAAM,CAAC,CAiBlB"}

package/dist/commands/pr/update.js

@@ -1,92 +1,18 @@
-import { readFile } from "node:fs/promises";
 import path from "node:path";
-import { resolveBaseBranch } from "@agentplaneorg/core";
 import { mapBackendError } from "../../cli/error-map.js";
-import { fileExists } from "../../cli/fs-utils.js";
-import { createCliEmitter, workflowModeMessage } from "../../cli/output.js";
+import { createCliEmitter } from "../../cli/output.js";
 import { CliError } from "../../shared/errors.js";
-import { writeJsonStableIfChanged, writeTextIfChanged } from "../../shared/write-if-changed.js";
-import { execFileAsync, gitEnv } from "../shared/git.js";
-import { gitCurrentBranch } from "../shared/git-ops.js";
-import { buildUpdatedPrMeta, parsePrMeta } from "../shared/pr-meta.js";
-import { loadBackendTask, loadCommandContext, } from "../shared/task-backend.js";
-import { resolvePrPaths } from "./internal/pr-paths.js";
-import { updateAutoSummaryBlock } from "./internal/review-template.js";
-function nowIso() {
-    return new Date().toISOString();
-}
+import { syncPrArtifacts } from "./internal/sync.js";
 export async function cmdPrUpdate(opts) {
     try {
         const output = createCliEmitter();
-        const ctx = opts.ctx ??
-            (await loadCommandContext({ cwd: opts.cwd, rootOverride: opts.rootOverride ?? null }));
-        await loadBackendTask({
-            ctx,
+        const { prDir, resolved } = await syncPrArtifacts({
+            ctx: opts.ctx,
             cwd: opts.cwd,
             rootOverride: opts.rootOverride,
             taskId: opts.taskId,
+            mode: "update",
         });
-        const { resolved, config, prDir, metaPath, diffstatPath, reviewPath } = await resolvePrPaths({
-            ...opts,
-            ctx,
-        });
-        if (config.workflow_mode !== "branch_pr") {
-            throw new CliError({
-                exitCode: 2,
-                code: "E_USAGE",
-                message: workflowModeMessage(config.workflow_mode, "branch_pr"),
-            });
-        }
-        if (!(await fileExists(metaPath)) || !(await fileExists(reviewPath))) {
-            const missing = [];
-            if (!(await fileExists(metaPath)))
-                missing.push(path.relative(resolved.gitRoot, metaPath));
-            if (!(await fileExists(reviewPath)))
-                missing.push(path.relative(resolved.gitRoot, reviewPath));
-            throw new CliError({
-                exitCode: 3,
-                code: "E_VALIDATION",
-                message: `PR artifacts missing: ${missing.join(", ")} (run \`agentplane pr open\`)`,
-            });
-        }
-        const baseBranch = await resolveBaseBranch({
-            cwd: opts.cwd,
-            rootOverride: opts.rootOverride ?? null,
-            cliBaseOpt: null,
-            mode: config.workflow_mode,
-        });
-        if (!baseBranch) {
-            throw new CliError({
-                exitCode: 2,
-                code: "E_USAGE",
-                message: "Base branch could not be resolved (use `agentplane branch base set`).",
-            });
-        }
-        const branch = await gitCurrentBranch(resolved.gitRoot);
-        const { stdout: diffStatOut } = await execFileAsync("git", ["diff", "--stat", `${baseBranch}...HEAD`], { cwd: resolved.gitRoot, env: gitEnv() });
-        const diffstat = diffStatOut.trimEnd();
-        await writeTextIfChanged(diffstatPath, diffstat ? `${diffstat}\n` : "");
-        const { stdout: headOut } = await execFileAsync("git", ["rev-parse", "HEAD"], {
-            cwd: resolved.gitRoot,
-            env: gitEnv(),
-        });
-        const headSha = headOut.trim();
-        const summaryLines = [
-            `- Updated: ${nowIso()}`,
-            `- Branch: ${branch}`,
-            `- Head: ${headSha.slice(0, 12)}`,
-            "- Diffstat:",
-            "```",
-            diffstat || "No changes detected.",
-            "```",
-        ];
-        const reviewText = await readFile(reviewPath, "utf8");
-        const nextReview = updateAutoSummaryBlock(reviewText, summaryLines.join("\n"));
-        await writeTextIfChanged(reviewPath, nextReview);
-        const rawMeta = await readFile(metaPath, "utf8");
-        const meta = parsePrMeta(rawMeta, opts.taskId);
-        const nextMeta = buildUpdatedPrMeta({ meta, branch, at: nowIso() });
-        await writeJsonStableIfChanged(metaPath, nextMeta);
         output.success("pr update", path.relative(resolved.gitRoot, prDir));
         return 0;
     }

package/dist/commands/recipes/impl/commands/cache-prune.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cache-prune.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/cache-prune.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AA6BzD,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,qBAAqB,CAAC;CAC9B,GAAG,OAAO,CAAC,MAAM,CAAC,CAkFlB"}
+{"version":3,"file":"cache-prune.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/cache-prune.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AA6BzD,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,qBAAqB,CAAC;CAC9B,GAAG,OAAO,CAAC,MAAM,CAAC,CA8FlB"}

package/dist/commands/recipes/impl/commands/cache-prune.js

@@ -1,9 +1,11 @@
 import { readdir, rm } from "node:fs/promises";
 import path from "node:path";
+import { defaultConfig } from "@agentplaneorg/core";
 import { mapCoreError } from "../../../../cli/error-map.js";
 import { fileExists } from "../../../../cli/fs-utils.js";
 import { infoMessage, successMessage } from "../../../../cli/output.js";
 import { CliError } from "../../../../shared/errors.js";
+import { ensureActionApproved } from "../../../shared/approval-requirements.js";
 import { readInstalledRecipesFile, writeInstalledRecipesFile } from "../installed-recipes.js";
 import { resolveGlobalRecipesDir, resolveInstalledRecipesPath } from "../paths.js";
 async function listRecipeCacheEntries(cacheDir) {
@@ -49,6 +51,12 @@ export async function cmdRecipeCachePruneParsed(opts) {
                 process.stdout.write(`${infoMessage(`dry-run: would remove ${cacheEntries.length} cached recipes`)}\n`);
                 return 0;
             }
+            await ensureActionApproved({
+                action: "dangerous_fs",
+                config: defaultConfig(),
+                yes: false,
+                reason: `recipes cache prune --all (${cacheEntries.length} cached recipes)`,
+            });
             await rm(cacheDir, { recursive: true, force: true });
             await writeInstalledRecipesFile(resolveInstalledRecipesPath(), {
                 schema_version: 1,
@@ -72,6 +80,12 @@ export async function cmdRecipeCachePruneParsed(opts) {
             process.stdout.write(`${infoMessage(`dry-run: would remove ${prune.length} cached recipes`)}\n`);
             return 0;
         }
+        await ensureActionApproved({
+            action: "dangerous_fs",
+            config: defaultConfig(),
+            yes: false,
+            reason: `recipes cache prune (${prune.length} cached recipes)`,
+        });
         const recipeDirs = new Set();
         for (const entry of prune) {
             recipeDirs.add(path.dirname(entry.path));

package/dist/commands/recipes/impl/commands/install.js

@@ -37,7 +37,7 @@ export async function cmdRecipeInstall(opts) {
         const ensureApproved = async (reason) => {
             if (networkApproved)
                 return;
-            await ensureNetworkApproved({ config, yes: opts.yes, reason });
+            await ensureNetworkApproved({ action: "recipe_install", config, yes: opts.yes, reason });
             networkApproved = true;
         };
         const tempRoot = await mkdtemp(path.join(os.tmpdir(), "agentplane-recipe-"));

package/dist/commands/recipes/impl/commands/list-remote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"list-remote.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/list-remote.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,qBAAqB,CAAC;CAC9B,GAAG,OAAO,CAAC,MAAM,CAAC,CAwClB"}
+{"version":3,"file":"list-remote.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/list-remote.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEzD,wBAAsB,yBAAyB,CAAC,IAAI,EAAE;IACpD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,qBAAqB,CAAC;CAC9B,GAAG,OAAO,CAAC,MAAM,CAAC,CAyClB"}

package/dist/commands/recipes/impl/commands/list-remote.js

@@ -25,6 +25,7 @@ export async function cmdRecipeListRemoteParsed(opts) {
         });
         if (willFetchRemote) {
             await ensureNetworkApproved({
+                action: "recipe_list_remote",
                 config,
                 yes: flags.yes,
                 reason: "recipes list-remote fetches the remote recipes index",

package/dist/commands/recipes/impl/commands/remove.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/remove.ts"],"names":[],"mappings":"AAYA,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,MAAM,CAAC,CAwBlB"}
+{"version":3,"file":"remove.d.ts","sourceRoot":"","sources":["../../../../../src/commands/recipes/impl/commands/remove.ts"],"names":[],"mappings":"AAaA,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;CACZ,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BlB"}

package/dist/commands/recipes/impl/commands/remove.js

@@ -1,9 +1,10 @@
-import { resolveProject } from "@agentplaneorg/core";
+import { loadConfig, resolveProject } from "@agentplaneorg/core";
 import { rm } from "node:fs/promises";
 import { mapCoreError } from "../../../../cli/error-map.js";
 import { exitCodeForError } from "../../../../cli/exit-codes.js";
 import { successMessage } from "../../../../cli/output.js";
 import { CliError } from "../../../../shared/errors.js";
+import { ensureActionApproved } from "../../../shared/approval-requirements.js";
 import { readProjectInstalledRecipes } from "../project-installed-recipes.js";
 import { resolveProjectInstalledRecipeDir } from "../paths.js";
 export async function cmdRecipeRemoveParsed(opts) {
@@ -12,6 +13,7 @@ export async function cmdRecipeRemoveParsed(opts) {
             cwd: opts.cwd,
             rootOverride: opts.rootOverride ?? null,
         });
+        const loaded = await loadConfig(resolved.agentplaneDir);
         const installed = await readProjectInstalledRecipes(resolved);
         const entry = installed.recipes.find((recipe) => recipe.id === opts.id);
         if (!entry) {
@@ -22,6 +24,12 @@ export async function cmdRecipeRemoveParsed(opts) {
             });
         }
         const recipeDir = resolveProjectInstalledRecipeDir(resolved, entry.id);
+        await ensureActionApproved({
+            action: "dangerous_fs",
+            config: loaded.config,
+            yes: false,
+            reason: `recipes remove ${entry.id}@${entry.version}`,
+        });
         await rm(recipeDir, { recursive: true, force: true });
         process.stdout.write(`${successMessage("removed recipe", `${entry.id}@${entry.version}`)}\n`);
         return 0;

package/dist/commands/release/apply.command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.command.d.ts","sourceRoot":"","sources":["../../../src/commands/release/apply.command.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AA6B1E,OAAO,KAAK,EAAE,kBAAkB,EAA0C,MAAM,kBAAkB,CAAC;AA0NnG,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,kBAAkB,CAiF5D,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,kBAAkB,CAmF9D,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"apply.command.d.ts","sourceRoot":"","sources":["../../../src/commands/release/apply.command.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AA8B1E,OAAO,KAAK,EAAE,kBAAkB,EAA0C,MAAM,kBAAkB,CAAC;AAkOnG,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,kBAAkB,CAiF5D,CAAC;AAEF,eAAO,MAAM,eAAe,EAAE,cAAc,CAAC,kBAAkB,CAmF9D,CAAC;AAEF,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/commands/release/apply.command.js

@@ -7,6 +7,7 @@ import { withDiagnosticContext } from "../../shared/diagnostics.js";
 import { CliError } from "../../shared/errors.js";
 import { execFileAsync, gitEnv } from "../shared/git.js";
 import { GitContext } from "../shared/git-context.js";
+import { ensureActionApproved } from "../shared/approval-requirements.js";
 import { ensureNetworkApproved } from "../shared/network-approval.js";
 import { runOperatorPipeline } from "../shared/operator-pipeline.js";
 import { cleanHookEnv, maybePersistExpectedCliVersion, maybeRefreshGeneratedReference, maybeUpdateBunLockfile, replaceAgentplanePackageMetadata, replacePackageVersionInFile, } from "./apply.mutation.js";
@@ -84,11 +85,19 @@ async function ensureReleasePlanMatchesRepoState(opts) {
 async function runPushPreflight(opts) {
     const loaded = await loadConfig(opts.agentplaneDir);
     await ensureNetworkApproved({
+        action: "release_apply",
         config: loaded.config,
         yes: opts.yes,
         reason: "release apply --push validates npm version availability and pushes over network",
         interactive: Boolean(process.stdin.isTTY),
     });
+    await ensureActionApproved({
+        action: "git_push",
+        config: loaded.config,
+        yes: opts.yes,
+        reason: `release apply --push will push HEAD and ${opts.nextTag} to ${opts.remote}`,
+        interactive: Boolean(process.stdin.isTTY),
+    });
     await ensureRemoteExists(opts.gitRoot, opts.remote);
     await ensureRemoteTagDoesNotExist(opts.gitRoot, opts.remote, opts.nextTag);
     await ensureNpmVersionsAvailable(opts.gitRoot, opts.nextVersion);

package/dist/commands/shared/approval-requirements.d.ts

@@ -1,15 +1,13 @@
 import type { AgentplaneConfig } from "@agentplaneorg/core";
-export type ApprovalAction = "network_access" | "force_action" | "policy_write" | "config_write" | "dangerous_fs" | "git_push";
-export type ApprovalRequirement = {
-    required: boolean;
-    reason: string;
-};
+import type { PolicyActionId, PolicyApprovalKind } from "../../policy/taxonomy.js";
+import { type ApprovalRequirement } from "../../runtime/approvals/index.js";
+export type ApprovalAction = PolicyApprovalKind;
 export declare function getApprovalRequirements(opts: {
     config: AgentplaneConfig;
-    action: ApprovalAction;
+    action: PolicyActionId;
 }): ApprovalRequirement;
 export declare function ensureActionApproved(opts: {
-    action: ApprovalAction;
+    action: PolicyActionId;
     config: AgentplaneConfig;
     yes: boolean;
     reason: string;

package/dist/commands/shared/approval-requirements.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"approval-requirements.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/approval-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAK5D,MAAM,MAAM,cAAc,GACtB,gBAAgB,GAChB,cAAc,GACd,cAAc,GACd,cAAc,GACd,cAAc,GACd,UAAU,CAAC;AAEf,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAmCF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,mBAAmB,CAkCtB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBhB"}
+{"version":3,"file":"approval-requirements.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/approval-requirements.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AACnF,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAEnG,MAAM,MAAM,cAAc,GAAG,kBAAkB,CAAC;AAEhD,wBAAgB,uBAAuB,CAAC,IAAI,EAAE;IAC5C,MAAM,EAAE,gBAAgB,CAAC;IACzB,MAAM,EAAE,cAAc,CAAC;CACxB,GAAG,mBAAmB,CAEtB;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE;IAC/C,MAAM,EAAE,cAAc,CAAC;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAEhB"}

package/dist/commands/shared/approval-requirements.js

@@ -1,77 +1,7 @@
-import { promptYesNo } from "../../cli/prompts.js";
-import { CliError } from "../../shared/errors.js";
-function resolveEffectiveApprovals(config) {
-    const approvals = config.agents?.approvals;
-    const base = {
-        require_plan: approvals?.require_plan === true,
-        require_network: approvals?.require_network === true,
-        require_verify: approvals?.require_verify === true,
-        // Backward-compatible with older @agentplaneorg/core typings where require_force is absent.
-        require_force: approvals?.require_force === true,
-    };
-    if (config.execution.profile === "conservative") {
-        return {
-            ...base,
-            require_network: true,
-            require_force: true,
-        };
-    }
-    return base;
-}
+import { createApprovalRuntime } from "../../runtime/approvals/index.js";
 export function getApprovalRequirements(opts) {
-    const effectiveApprovals = resolveEffectiveApprovals(opts.config);
-    switch (opts.action) {
-        case "network_access": {
-            const required = effectiveApprovals.require_network === true;
-            return {
-                required,
-                reason: "Network access requires explicit approval",
-            };
-        }
-        case "force_action": {
-            return {
-                required: effectiveApprovals.require_force === true,
-                reason: "Force action requires explicit approval",
-            };
-        }
-        case "policy_write": {
-            return { required: false, reason: "Policy writes require explicit approval" };
-        }
-        case "config_write": {
-            return { required: false, reason: "Config writes require explicit approval" };
-        }
-        case "dangerous_fs": {
-            return { required: false, reason: "Potentially dangerous file operations require approval" };
-        }
-        case "git_push": {
-            return { required: false, reason: "Git push requires explicit approval" };
-        }
-        default: {
-            const exhaustive = opts.action;
-            return exhaustive;
-        }
-    }
+    return createApprovalRuntime({ config: opts.config }).resolve({ action: opts.action });
 }
 export async function ensureActionApproved(opts) {
-    const req = getApprovalRequirements({ config: opts.config, action: opts.action });
-    if (!req.required)
-        return;
-    if (opts.yes)
-        return;
-    const interactive = opts.interactive ?? Boolean(process.stdin.isTTY);
-    if (!interactive) {
-        throw new CliError({
-            exitCode: 3,
-            code: "E_VALIDATION",
-            message: `${req.reason} (pass --yes): ${opts.reason}`,
-        });
-    }
-    const approved = await promptYesNo(`Allow ${opts.action}? ${opts.reason}`, false);
-    if (!approved) {
-        throw new CliError({
-            exitCode: 3,
-            code: "E_VALIDATION",
-            message: `${req.reason} denied: ${opts.reason}`,
-        });
-    }
+    await createApprovalRuntime({ config: opts.config }).ensure(opts);
 }

package/dist/commands/shared/network-approval.d.ts

@@ -1,5 +1,7 @@
 import type { AgentplaneConfig } from "@agentplaneorg/core";
+import type { PolicyActionId } from "../../policy/taxonomy.js";
 export declare function ensureNetworkApproved(opts: {
+    action?: PolicyActionId;
     config: AgentplaneConfig;
     yes: boolean;
     reason: string;

package/dist/commands/shared/network-approval.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"network-approval.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/network-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAI5D,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB"}
+{"version":3,"file":"network-approval.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/network-approval.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAG/D,wBAAsB,qBAAqB,CAAC,IAAI,EAAE;IAChD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,gBAAgB,CAAC;IACzB,GAAG,EAAE,OAAO,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQhB"}

package/dist/commands/shared/network-approval.js

@@ -1,7 +1,7 @@
 import { ensureActionApproved } from "./approval-requirements.js";
 export async function ensureNetworkApproved(opts) {
     await ensureActionApproved({
-        action: "network_access",
+        action: opts.action ?? "network_access",
         config: opts.config,
         yes: opts.yes,
         reason: opts.reason,

package/dist/commands/shared/pr-meta.d.ts

@@ -13,11 +13,20 @@ export declare function buildOpenedPrMeta(opts: {
     branch: string;
     at: string;
     previousMeta: PrMeta | null;
+    base?: string | null;
+    headSha?: string | null;
 }): PrMeta;
 export declare function buildUpdatedPrMeta(opts: {
     meta: PrMeta;
     branch: string;
     at: string;
+    base?: string | null;
+    headSha?: string | null;
+}): PrMeta;
+export declare function buildVerifiedPrMeta(opts: {
+    meta: PrMeta;
+    at: string;
+    state: "pass" | "fail";
 }): PrMeta;
 export declare function buildIntegratedPrMeta(opts: {
     meta: PrMeta;

package/dist/commands/shared/pr-meta.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pr-meta.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/pr-meta.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAI1E,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC;AAChC,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG;IAClD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAOF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B,GAAG,MAAM,CAYT;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQ7F;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,GAAG,MAAM,CAsBT;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAQvE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAW/D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQrE;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAqBD"}
+{"version":3,"file":"pr-meta.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/pr-meta.ts"],"names":[],"mappings":"AAIA,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAI1E,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC;AAChC,MAAM,MAAM,mBAAmB,GAAG;IAChC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG,mBAAmB,GAAG;IAClD,IAAI,EAAE,MAAM,CAAC;CACd,CAAC;AAOF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,GAAG,MAAM,CAoBT;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,GAAG,MAAM,CAgBT;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;CACxB,GAAG,MAAM,CAST;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,EAAE,QAAQ,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC7C,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,eAAe,EAAE,OAAO,CAAC;IACzB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,GAAG,MAAM,CAsBT;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,EAAE,CAAC;CAChB,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAQvE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,MAAM,CAW/D;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQrE;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,eAAe,CACnC,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;IACT,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAqBD"}

package/dist/commands/shared/pr-meta.js

@@ -8,27 +8,51 @@ function nowOrExisting(value, fallback) {
     return trimmed || fallback;
 }
 export function buildOpenedPrMeta(opts) {
+    const nextBase = opts.base ?? opts.previousMeta?.base;
+    const nextHeadSha = opts.headSha ?? opts.previousMeta?.head_sha;
+    const changed = opts.previousMeta === null ||
+        (opts.previousMeta.branch ?? null) !== opts.branch ||
+        (opts.previousMeta.base ?? null) !== (nextBase ?? null) ||
+        (opts.previousMeta.head_sha ?? null) !== (nextHeadSha ?? null);
     return {
         schema_version: 1,
         task_id: opts.taskId,
         branch: opts.branch,
         created_at: opts.previousMeta?.created_at ?? opts.at,
-        updated_at: opts.at,
+        updated_at: changed ? opts.at : (opts.previousMeta?.updated_at ?? opts.at),
         last_verified_sha: opts.previousMeta?.last_verified_sha ?? null,
         last_verified_at: opts.previousMeta?.last_verified_at ?? null,
         verify: opts.previousMeta?.verify ?? { status: "skipped" },
-        base: opts.previousMeta?.base,
+        base: nextBase,
+        head_sha: nextHeadSha,
     };
 }
 export function buildUpdatedPrMeta(opts) {
+    const nextBase = opts.base ?? opts.meta.base;
+    const nextHeadSha = opts.headSha ?? opts.meta.head_sha;
+    const changed = (opts.meta.branch ?? null) !== opts.branch ||
+        (opts.meta.base ?? null) !== (nextBase ?? null) ||
+        (opts.meta.head_sha ?? null) !== (nextHeadSha ?? null);
     return {
         ...opts.meta,
         branch: opts.branch,
-        updated_at: opts.at,
+        base: nextBase,
+        head_sha: nextHeadSha,
+        updated_at: changed ? opts.at : opts.meta.updated_at,
         last_verified_sha: opts.meta.last_verified_sha ?? null,
         last_verified_at: opts.meta.last_verified_at ?? null,
     };
 }
+export function buildVerifiedPrMeta(opts) {
+    const verifiedSha = opts.meta.head_sha ?? null;
+    return {
+        ...opts.meta,
+        updated_at: opts.meta.updated_at,
+        last_verified_sha: verifiedSha,
+        last_verified_at: opts.at,
+        verify: opts.meta.verify ? { ...opts.meta.verify, status: opts.state } : { status: opts.state },
+    };
+}
 export function buildIntegratedPrMeta(opts) {
     const nextMeta = {
         ...opts.meta,

package/dist/commands/shared/task-backend.d.ts

@@ -1,4 +1,5 @@
 import { type AgentplaneConfig, type ResolvedProject } from "@agentplaneorg/core";
+import type { ResolvedHarnessContract } from "../../runtime/harness/index.js";
 import { loadTaskBackend, type TaskBackend, type TaskData, type TaskSummary } from "../../backends/task-backend.js";
 import { GitContext } from "./git-context.js";
 export type CommandMemo = {
@@ -6,6 +7,7 @@ export type CommandMemo = {
     changedPaths?: Promise<string[]>;
     headCommit?: Promise<string>;
     agentIds?: Promise<string[]>;
+    harness?: Promise<ResolvedHarnessContract>;
 };
 export type CommandContext = {
     resolvedProject: Awaited<ReturnType<typeof loadTaskBackend>>["resolved"];

package/dist/commands/shared/task-backend.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"task-backend.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/task-backend.ts"],"names":[],"mappings":"AACA,OAAO,EAOL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,eAAe,EAEf,KAAK,WAAW,EAEhB,KAAK,QAAQ,EACb,KAAK,WAAW,EACjB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,MAAM,WAAW,GAAG;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9D,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,UAAU,CAAC;IAEhB,IAAI,EAAE,WAAW,CAAC;CACnB,CAAC;AASF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAW3E;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2C7E;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,GAAG,OAAO,CAAC,cAAc,CAAC,CAiB1B;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,cAAc,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkBpB;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,EAAE,cAAc,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAiC3B;AAoBD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,EAAE,QAAQ,CAAC;CAChB,CAAC,CAaD;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,YAAY,CAAC,EACtD,KAAK,EAAE,SAAS,QAAQ,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAgBvF;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAQ3F;AAED,wBAAsB,4BAA4B,CAAC,IAAI,EAAE;IACvD,GAAG,EAAE,cAAc,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB"}
+{"version":3,"file":"task-backend.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/task-backend.ts"],"names":[],"mappings":"AACA,OAAO,EAOL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAE9E,OAAO,EACL,eAAe,EAEf,KAAK,WAAW,EAEhB,KAAK,QAAQ,EACb,KAAK,WAAW,EACjB,MAAM,gCAAgC,CAAC;AAExC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,MAAM,WAAW,GAAG;IACxB,cAAc,CAAC,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IACxC,YAAY,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACjC,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7B,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,EAAE,OAAO,CAAC,uBAAuB,CAAC,CAAC;CAC5C,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;IACzE,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;IAC9D,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACpE,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,GAAG,EAAE,UAAU,CAAC;IAEhB,IAAI,EAAE,WAAW,CAAC;CACnB,CAAC;AASF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAW3E;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA2C7E;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,MAAM,CAAC,EAAE,gBAAgB,CAAC;CAC3B,GAAG,OAAO,CAAC,cAAc,CAAC,CAiB1B;AAED,wBAAsB,mBAAmB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,cAAc,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkBpB;AAED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE;IACrD,GAAG,EAAE,cAAc,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAiC3B;AAoBD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,GAAG,CAAC,EAAE,cAAc,CAAC;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC;CAChB,GAAG,OAAO,CAAC;IACV,OAAO,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,QAAQ,EAAE,cAAc,CAAC,iBAAiB,CAAC,CAAC;IAC5C,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;IACjC,IAAI,EAAE,QAAQ,CAAC;CAChB,CAAC,CAaD;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,GAAG,YAAY,CAAC,EACtD,KAAK,EAAE,SAAS,QAAQ,EAAE,GACzB,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,CAgBvF;AAED,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,CAQ3F;AAED,wBAAsB,4BAA4B,CAAC,IAAI,EAAE;IACvD,GAAG,EAAE,cAAc,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAAC,IAAI,CAAC,CAchB"}

package/dist/commands/shared/task-local-freshness.d.ts

@@ -0,0 +1,13 @@
+export declare function isTaskLocalAdvancePath(opts: {
+    workflowDir: string;
+    taskId: string;
+    relPath: string;
+}): boolean;
+export declare function isTaskLocalOnlyAdvance(opts: {
+    gitRoot: string;
+    workflowDir: string;
+    taskId: string;
+    fromRef: string | null;
+    toRef: string;
+}): Promise<boolean>;
+//# sourceMappingURL=task-local-freshness.d.ts.map

package/dist/commands/shared/task-local-freshness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"task-local-freshness.d.ts","sourceRoot":"","sources":["../../../src/commands/shared/task-local-freshness.ts"],"names":[],"mappings":"AAQA,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAEV;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE;IACjD,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CAAC,OAAO,CAAC,CAenB"}