multi-agents-cli 1.0.53 → 1.0.55

package/core/workflow/agent.js

@@ -1183,6 +1183,15 @@ Mark each step complete. Only proceed to the task below when all are checked.
   );
   console.log(`  ${green('✓')} .claude-scope written`);
 
+  // ── Write scope.json ─────────────────────────────────────────────────────────
+
+  fs.writeFileSync(
+    path.join(worktreePath, 'scope.json'),
+    JSON.stringify({ agent, scope: project, branch: branchName, policy: project }, null, 2),
+    'utf8'
+  );
+  console.log(`  ${green('✓')} scope.json written`);
+
   // ── Generate IDE settings ─────────────────────────────────────────────────────
 
   const excludedFolders = {
@@ -1391,7 +1400,7 @@ ${excludedUrls}
   console.log(`  ${bold('2.')} ${bold(yellow('Open a NEW session in Claude Code CLI or Claude Code Extension - and type go or start to initiate'))}`);
   console.log(dim('     Do NOT reuse a previous session.\n'));
   console.log(`  ${bold('3.')} Start the session and let the agent run.\n`);
-  console.log(dim('     The agent will run `') + cyan('npm run complete') + dim('` autonomously when the task is done.\n'));
+  console.log(`  ${bold('4.')} When the agent is done, run: ${cyan('npm run complete')} to merge the task into main.\n`);
   separator();
   console.log('');
 

package/core/workflow/complete.js

@@ -176,6 +176,58 @@ const main = async () => {
 
   const { path: worktreePath, branch: branchName } = selectedWorktree;
 
+  // ── Scope validation (Trust + Verify) ────────────────────────────────────────
+
+  const scopeJsonPath   = path.join(worktreePath, 'scope.json');
+  const scopePolicyPath = path.join(ROOT, '.scaffold', 'scope-policy.json');
+
+  if (fs.existsSync(scopeJsonPath) && fs.existsSync(scopePolicyPath)) {
+    const scopeMeta   = JSON.parse(fs.readFileSync(scopeJsonPath, 'utf8'));
+    const scopePolicy = JSON.parse(fs.readFileSync(scopePolicyPath, 'utf8'));
+
+    const policyScope = scopePolicy[scopeMeta.policy];
+    const agentKey    = scopeMeta.agent && scopeMeta.agent.toUpperCase();
+    const override        = policyScope && policyScope.agentOverrides && policyScope.agentOverrides[agentKey];
+    const scaffoldedFlag  = (config.scaffolded || {})[scopeMeta.scope];
+    const overrideActive  = override && (!override.onlyBeforeScaffolded || !scaffoldedFlag);
+    const allowed         = (overrideActive && override.allowed) || (policyScope && policyScope.allowed) || [];
+    const blocked     = (policyScope && policyScope.blocked) || [];
+
+    const changedFiles = execSync('git diff --name-only main...HEAD', { cwd: worktreePath, stdio: 'pipe' })
+      .toString().trim().split('\n').filter(Boolean);
+
+    const matchesGlob = (file, pat) => {
+      if (pat.endsWith('/**')) return file.startsWith(pat.slice(0, -3));
+      if (pat.includes('*')) {
+        const re = pat.replace(/[.+^${}()|[\]\\]/g, '\\$&')
+                      .replace(/\*\*/g, 'DOUBLESTAR')
+                      .replace(/\*/g, '[^/]*')
+                      .replace(/DOUBLESTAR/g, '.*');
+        return new RegExp('^' + re + '$').test(file);
+      }
+      return file === pat;
+    };
+
+    const violations = changedFiles.filter(file => {
+      const isAllowed = allowed.some(pat => matchesGlob(file, pat));
+      const isBlocked = blocked.some(pat => matchesGlob(file, pat));
+      return !isAllowed || isBlocked;
+    });
+
+    if (violations.length > 0) {
+      console.log('\n' + red('  ✗ Scope violation - merge blocked.'));
+      console.log(dim('  The following files are outside the allowed scope for ' + scopeMeta.agent + ' (' + scopeMeta.scope + '):\n'));
+      violations.forEach(f => console.log('    ' + red('✗') + ' ' + f));
+      console.log('\n' + dim('  Fix the violations, then re-run npm run complete.\n'));
+      rl.close();
+      return;
+    }
+
+    console.log('  ' + green('✓') + ' Scope validation passed (' + changedFiles.length + ' files checked)');
+  } else {
+    console.log('  ' + dim('ℹ scope.json or scope-policy.json not found - skipping validation'));
+  }
+
   // ── Check TASK.md status ──────────────────────────────────────────────────────
 
   const taskMdPath = path.join(worktreePath, 'TASK.md');
@@ -304,6 +356,22 @@ const main = async () => {
     }
   } catch { /* best-effort */ }
 
+  // ── Update scaffold flags ──────────────────────────────────────────────────
+
+  try {
+    const parts = branchName.split('/');
+    if (parts.length >= 4) {
+      const scope = parts[1];
+      const agent = parts[2].toUpperCase();
+      const cfgPath = path.join(ROOT, '.scaffold', '.config.json');
+      const cfg = JSON.parse(fs.readFileSync(cfgPath, 'utf8'));
+      if (!cfg.scaffolded) cfg.scaffolded = { client: false, backend: false };
+      if (scope === 'client' && agent === 'UI')   cfg.scaffolded.client  = true;
+      if (scope === 'backend' && agent === 'INIT') cfg.scaffolded.backend = true;
+      fs.writeFileSync(cfgPath, JSON.stringify(cfg, null, 2), 'utf8');
+    }
+  } catch { /* best-effort */ }
+
   // ── Push to origin ────────────────────────────────────────────────────────────
 
   try {

package/init.js

@@ -1192,6 +1192,10 @@ const main = async () => {
       orm:       backendOrm,
       auth:      backendAuth,
     },
+    scaffolded: {
+      client:  false,
+      backend: false,
+    },
   };
 
   fs.writeFileSync(
@@ -1201,6 +1205,42 @@ const main = async () => {
   );
   console.log(`  ${green('✓')} .scaffold/.config.json written`);
 
+  // ── Write scope-policy.json ──────────────────────────────────────────────────
+
+  const scopePolicy = {
+    client: {
+      allowed: ['client/**'],
+      blocked: ['backend/**', 'shared/**', 'CONTRACTS.md', 'BUILD_STATE.md', 'TASKS_HISTORY.md'],
+      agentOverrides: {
+        UI: {
+          allowed: ['client/**', 'shared/wiring.config.json'],
+          onlyBeforeScaffolded: true,
+        },
+      },
+    },
+    backend: {
+      allowed: ['backend/**'],
+      blocked: ['client/**', 'shared/**', 'CONTRACTS.md', 'BUILD_STATE.md', 'TASKS_HISTORY.md'],
+      agentOverrides: {
+        INIT: {
+          allowed: ['backend/**', 'shared/wiring.config.json', 'CONTRACTS.md'],
+          onlyBeforeScaffolded: true,
+        },
+      },
+    },
+    shared: {
+      allowed: ['CLOUD_STATE.md', 'CLOUD.md', 'CLOUD_TEARDOWN.md', '.github/**', 'docker-compose*.yml', 'Dockerfile', '**/.env.example'],
+      blocked: ['client/**', 'backend/**', 'CONTRACTS.md', 'BUILD_STATE.md', 'TASKS_HISTORY.md'],
+    },
+  };
+
+  fs.writeFileSync(
+    path.join(RUNTIME_DIR, 'scope-policy.json'),
+    JSON.stringify(scopePolicy, null, 2),
+    'utf8'
+  );
+  console.log(`  ${green('✓')} .scaffold/scope-policy.json written`);
+
   // ── Generate BUILD_STATE.md ──────────────────────────────────────────────────
 
   const backendDisplay = backendType === 'integrated'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "multi-agents-cli",
-  "version": "1.0.53",
+  "version": "1.0.55",
   "description": "Multi-agent workflow orchestration for Claude Code — isolated git worktrees, structured state tracking, autonomous task chaining",
   "keywords": [
     "claude-code",