automata-cli 0.1.0-feature-030-do-work.216 → 0.1.0-feature-030-do-work.218

package/dist/{ConfigWizard-O25ZZT5R.js → ConfigWizard-5B5AOGUU.js}

@@ -147,6 +147,9 @@ function ConfigWizard() {
   );
   const initialExecutorIndex = EXECUTOR_OPTIONS.findIndex((o) => o.value === existing.doWork?.executor);
   const [doWorkExecutorIndex, setDoWorkExecutorIndex] = useState(Math.max(initialExecutorIndex, 0));
+  const [doWorkProtectedBranches, setDoWorkProtectedBranches] = useState(
+    (existing.doWork?.protectedBranches ?? DEFAULT_DO_WORK.protectedBranches).join(", ")
+  );
   const [doWorkClaudeModel, setDoWorkClaudeModel] = useState(existing.doWork?.models?.claude ?? "");
   const [doWorkCodexModel, setDoWorkCodexModel] = useState(existing.doWork?.models?.codex ?? "");
   const [doWorkLockStale, setDoWorkLockStale] = useState(
@@ -246,9 +249,24 @@ function ConfigWizard() {
     },
     "do-work-base-branch": {
       setValue: setDoWorkBaseBranch,
-      onSubmit: () => setScreen("do-work-executor"),
+      onSubmit: () => setScreen("do-work-protected-branches"),
       onBack: () => setScreen("main")
     },
+    "do-work-protected-branches": {
+      setValue: (update) => {
+        setValidationError("");
+        setDoWorkProtectedBranches(update);
+      },
+      onSubmit: () => {
+        if (parseAllowedUsers(doWorkProtectedBranches).length === 0) {
+          setValidationError("Enter at least one branch name.");
+          return;
+        }
+        setValidationError("");
+        setScreen("do-work-executor");
+      },
+      onBack: () => setScreen("do-work-base-branch")
+    },
     "do-work-claude-model": {
       setValue: setDoWorkClaudeModel,
       onSubmit: () => setScreen("do-work-codex-model"),
@@ -293,6 +311,7 @@ function ConfigWizard() {
           doWork: {
             ...current.doWork,
             baseBranch: doWorkBaseBranch.trim() || void 0,
+            protectedBranches: parseAllowedUsers(doWorkProtectedBranches),
             executor: EXECUTOR_OPTIONS[doWorkExecutorIndex].value,
             models: {
               claude: doWorkClaudeModel.trim() || void 0,
@@ -375,7 +394,7 @@ function ConfigWizard() {
       length: EXECUTOR_OPTIONS.length,
       setIndex: setDoWorkExecutorIndex,
       onSelect: () => setScreen("do-work-claude-model"),
-      onBack: () => setScreen("do-work-base-branch")
+      onBack: () => setScreen("do-work-protected-branches")
     }
   };
   useInput((input, key) => {
@@ -439,6 +458,12 @@ function ConfigWizard() {
       value: doWorkBaseBranch,
       hint: `Type branch \xB7 Enter to continue \xB7 ${BACK}`
     },
+    "do-work-protected-branches": {
+      title: "Do Work \u2014 Protected Branches",
+      label: "Branches a build turn must never push to (comma separated):",
+      value: doWorkProtectedBranches,
+      hint: `Type branches \xB7 Enter to continue \xB7 ${BACK}`
+    },
     "do-work-claude-model": {
       title: "Do Work \u2014 Claude Model",
       label: "Default model when the executor is Claude (blank = the executor's own default):",

package/dist/index.js

@@ -109,6 +109,16 @@ var configSetDoWorkBaseBranch = new Command("do-work-base-branch").description("
   process.stdout.write(`do-work base branch set to: ${branch}
 `);
 });
+var configSetDoWorkProtectedBranches = new Command("do-work-protected-branches").description("Set the branches a `do-work` build turn must never check out and push to").argument("<value>", `Comma-separated branch names (default: ${DEFAULT_DO_WORK.protectedBranches.join(",")})`).action((value) => {
+  const branches = value.split(",").map((branch) => branch.trim()).filter((branch) => branch.length > 0);
+  if (branches.length === 0) {
+    process.stderr.write("Error: do-work-protected-branches requires at least one branch name.\n");
+    process.exit(1);
+  }
+  writeDoWork({ protectedBranches: branches });
+  process.stdout.write(`do-work protected branches set to: ${branches.join(", ")}
+`);
+});
 var configSetDoWorkExecutor = new Command("do-work-executor").description("Set the default executor `do-work` invokes").argument("<value>", `Executor: ${VALID_EXECUTORS.join(", ")}`).action((value) => {
   if (!VALID_EXECUTORS.includes(value)) {
     process.stderr.write(`Error: invalid executor "${value}". Must be one of: ${VALID_EXECUTORS.join(", ")}
@@ -179,12 +189,12 @@ var configSetDoWorkPrompt = new Command("do-work-prompt").description("Set the t
   process.stdout.write(`do-work ${turnKind} prompt set.
 `);
 });
-var configSet = new Command("set").description("Set a configuration value").addCommand(configSetType).addCommand(configSetIssueDiscoveryTechnique).addCommand(configSetIssueDiscoveryValue).addCommand(configSetClaudeSystemPrompt).addCommand(configSetAllowedUsers).addCommand(configSetAgentUser).addCommand(configSetDoWorkBaseBranch).addCommand(configSetDoWorkExecutor).addCommand(configSetDoWorkModel).addCommand(configSetDoWorkMaxRuns).addCommand(configSetDoWorkLockStaleMinutes).addCommand(configSetDoWorkPrompt);
+var configSet = new Command("set").description("Set a configuration value").addCommand(configSetType).addCommand(configSetIssueDiscoveryTechnique).addCommand(configSetIssueDiscoveryValue).addCommand(configSetClaudeSystemPrompt).addCommand(configSetAllowedUsers).addCommand(configSetAgentUser).addCommand(configSetDoWorkBaseBranch).addCommand(configSetDoWorkProtectedBranches).addCommand(configSetDoWorkExecutor).addCommand(configSetDoWorkModel).addCommand(configSetDoWorkMaxRuns).addCommand(configSetDoWorkLockStaleMinutes).addCommand(configSetDoWorkPrompt);
 var configCommand = new Command("config").description("Configure automata settings").addCommand(configSet).action(async () => {
   const [{ render }, React, { ConfigWizard }] = await Promise.all([
     import("ink"),
     import("react"),
-    import("./ConfigWizard-O25ZZT5R.js")
+    import("./ConfigWizard-5B5AOGUU.js")
   ]);
   const { waitUntilExit } = render(React.createElement(ConfigWizard));
   await waitUntilExit();
@@ -3024,7 +3034,7 @@ function makeHandle(path, token) {
     }
   };
 }
-function write(path, command, token, flag = "wx") {
+function publishLock(path, command, token) {
   const owner = {
     pid: process.pid,
     startedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -3033,17 +3043,31 @@ function write(path, command, token, flag = "wx") {
     token,
     pidStartedAt: processStartedAt(process.pid) ?? void 0
   };
-  writeFileSync(path, JSON.stringify(owner, null, 2) + "\n", { encoding: "utf8", flag });
+  const staging = `${path}.staging.${token}`;
+  try {
+    writeFileSync(staging, JSON.stringify(owner, null, 2) + "\n", { encoding: "utf8", flag: "wx" });
+  } catch {
+    return false;
+  }
+  try {
+    linkSync(staging, path);
+    return true;
+  } catch (err) {
+    if (err.code !== "EEXIST") throw err;
+    return false;
+  } finally {
+    try {
+      unlinkSync(staging);
+    } catch {
+    }
+  }
 }
 function acquireRunLock(command, staleMinutes) {
   const path = lockPath();
   const token = randomUUID();
   mkdirSync(join2(process.cwd(), LOCK_DIR), { recursive: true });
-  try {
-    write(path, command, token);
+  if (publishLock(path, command, token)) {
     return { ok: true, handle: makeHandle(path, token) };
-  } catch (err) {
-    if (err.code !== "EEXIST") throw err;
   }
   const owner = readOwner(path);
   if (!isStale(owner, staleMinutes)) {
@@ -3145,10 +3169,9 @@ function reclaim(path, command, token, expected) {
     }
     const claimed = `${path}.stale.${token}`;
     try {
-      write(path, command, token, "wx");
-      return { ok: true, handle: makeHandle(path, token) };
-    } catch (err) {
-      if (err.code !== "EEXIST") throw err;
+      if (publishLock(path, command, token)) {
+        return { ok: true, handle: makeHandle(path, token) };
+      }
       return { ok: false, heldBy: readOwner(path) ?? UNKNOWN_OWNER, suspect: false };
     } finally {
       try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "automata-cli",
-  "version": "0.1.0-feature-030-do-work.216",
+  "version": "0.1.0-feature-030-do-work.218",
   "description": "Automata CLI tool",
   "type": "module",
   "bin": {