opencode-plugin-flow 4.0.1 → 4.1.1

package/dist/index.js

@@ -1,39 +1,181 @@
-import{createHash as St}from"node:crypto";import{mkdir as _t,readdir as nn,readFile as It,rm as rn,writeFile as M}from"node:fs/promises";import{createRequire as Ct}from"node:module";import{dirname as At,join as I,normalize as Pt,sep as Tt}from"node:path";var ae=`# Parallel orchestration
+import{createHash as Pt}from"node:crypto";import{mkdir as Tt,readdir as fn,readFile as Et,rm as mn,writeFile as M}from"node:fs/promises";import{createRequire as Ut}from"node:module";import{dirname as jt,join as I,normalize as Ot,sep as qt}from"node:path";var ae=`# Flow worker handoff contract
 
-Use fan-out for every worker category whose output can be merged as evidence,
-review, validation support, audit findings, or an isolated candidate patch. Flow
-execution still has one active feature, and the manager owns every
-state-changing Flow tool call.
+Flow managers merge only the worker's final response. Treat that response as the
+worker report of record: it must include the assigned scope, what was actually
+covered, the evidence for each useful claim, and the remaining gaps. End worker
+prompts with "Return only this Flow handoff."
+
+## Evidence, review, validation, or audit worker report
+
+Use this for \`flow-evidence-worker\`, \`flow-reviewer\`,
+\`flow-validation-worker\`, and \`flow-audit-worker\`.
+
+\`\`\`markdown
+## Status
+success | partial | blocked
+
+## Scope
+<owned slice: path set, module, command, risk lens, route, data range, or question set>
+
+## Coverage
+- Expected: <files, ranges, questions, commands, or findings assigned>
+- Checked: <actual coverage, for example "12/12 files" or "command not run">
+- Not checked: <items skipped with reason, or "none">
+
+## Findings or facts
+- [high|med|low] <claim>; evidence: <file:line | command summary | screenshot path | URL | metric>; corroboration: <N sources or "single source">
+- [high|med|low] <claim>; evidence: <...>; corroboration: <...>
+
+## Sources
+- <paths read, commands run, docs fetched, data ranges covered, screenshots inspected>
+
+## Confidence and verification
+- Verified: <claims directly re-run, recounted, traced, or cross-checked>
+- Single-source: <claims with exactly one supporting source>
+- Inferred: <claims derived from surrounding evidence rather than directly observed>
+- Unsettled: <claims, sources, or citations that could not be resolved>
+- Falsifier or missing input: <what would overturn or materially change the result>
+
+## Open questions / gaps
+- <ambiguity, missing source, contradiction, skipped item, or out-of-scope dependency>
+
+## Manager follow-ups
+- <concrete next tasks, verifier claims, validation commands, or Flow plan targets>
+\`\`\`
+
+Validation workers must include exact command names and raw outcome summaries
+for commands they actually ran. Audit workers must include guards checked for
+any blocking-severity candidate. Review workers must separate blocking findings
+from advisory notes.
+
+## Verifier worker report
+
+Use this for \`flow-verifier-worker\`. Give it atomic claims and the cited sources
+or commands. Do not include the generator's reasoning unless that reasoning is
+the thing being verified.
+
+\`\`\`markdown
+## Status
+success | partial | blocked
+
+## Scope
+<claim ids, sources or commands checked, and the acceptance question>
+
+## Verdict per claim
+- <claim id>: verdict=<supported | partly-supported | unsupported | source-not-found>
+  - claim: <claim text>
+  - evidence: <supporting snippet, path plus line, measured value, command result, or "none">
+  - source resolution: <URL, path, or command plus whether it resolved>
+  - confidence level: high | med | low
+  - recommended action: <keep, narrow, rewrite, or remove>
+
+## Overall
+<accept | revise | reject> because <brief reason>
+
+## Gaps
+- <unavailable source, ambiguous claim wording, missing oracle, or check not run>
+
+## Manager follow-ups
+- <narrow recheck, plan adjustment, review finding, or none>
+\`\`\`
+
+## Candidate implementation worker report
+
+Use this only for isolated worktrees or exact non-overlapping path ownership
+authorized by the manager.
+
+\`\`\`markdown
+## Status
+success | partial | blocked
+
+## Scope
+<isolated worktree or exact path-owned slice>
+
+## Changed or proposed patch
+- <path>: <what changed and why>
+
+## Coverage
+- Assigned: <owned files/modules>
+- Touched: <files changed or proposed>
+- Skipped: <anything assigned but not changed and why, or "none">
+
+## Verification
+live-verified | test-verified | type-check-only | not-verified
+- <command, observed outcome, pass/fail counts, or manual check>
+
+## Confidence and risk
+- Checked directly: <behavior, files, or commands verified by the worker>
+- Still open: <tests, review paths, or integration points the manager must cover>
+- Risk: low | medium | high -- <why>
+
+## Merge notes
+- <conflicts, nearby user changes, assumptions, or deviations>
+
+## Manager follow-ups
+- <merge, reject, rerun check, verifier pass, or replan task>
+\`\`\`
+
+The manager must inspect and validate any candidate patch before recording Flow
+completion.
+`;var ne=`# Parallel orchestration
+
+Use fan-out when Flow work is broad enough that independent workers can gather
+evidence faster than one linear pass. The manager still owns the Flow session:
+only the manager calls state-changing Flow tools, approves plans, completes
+features, records reviews, or closes sessions.
+
+Read these companion references before a broad wave:
+
+- \`handoff-format.md\` for the exact worker response shapes.
+- \`verification-gates.md\` for coverage checks, handoff acceptance, verifier
+  triggers, and synthesis rules.
 
 ## Manager sequence
 
-1. Call \`flow_status\` if a session may exist.
-2. Do a brief serial orientation pass so slices are real and non-overlapping.
-3. Name the manager's immediate local task; do not delegate the next blocker.
-4. Define slices by module, risk, route, command, artifact type, or worktree.
-5. Send workers narrow prompts with exact ownership and expected output shape.
+1. Call \`flow_status\` if a Flow session may already exist.
+2. Do a serial orientation pass. Read enough files, schemas, docs, tests,
+   commands, or artifacts to identify real slices.
+3. Define the local manager task. Do not delegate the immediate blocker that
+   determines whether fan-out is even valid.
+4. Build a pre-fan-out coverage gate:
+   - total files, modules, routes, commands, findings, rows, or claims in scope.
+   - one line per slice with path/range/lens and expected count.
+   - partition check showing slices add back to the total when the work is
+     countable.
+   - overlap/gap check showing no duplicate ownership, empty slices, or missing
+     target areas.
+5. Spawn only named Flow workers. Use exact slices and the required handoff
+   shape. Keep each prompt self-contained.
 6. Continue non-overlapping manager work while workers run.
-7. Reconcile handoffs yourself; dedupe, refute, and decide what belongs in the
-   plan, completion payload, review payload, or follow-up feature.
-8. Run second waves only for material gaps, conflicts, or missing coverage.
+7. Read every handoff. Keep only claims that have evidence, match the assigned
+   scope, and carry confidence labels.
+8. Send important low-confidence, single-source, contested, or citation-heavy
+   claims to \`flow-verifier-worker\`.
+9. Run second waves only for material gaps, conflicts, narrowed scope, or
+   verification needs.
+10. Synthesize one Flow artifact: plan fields, completion evidence, review
+    payload, audit report, or candidate patch decision. Do not paste worker
+    handoffs as the user-facing result.
 
 ## Modes
 
 When fanning out Flow work, select the matching hidden Flow agent by name. Do
-not use generic subagents for Flow slices because the Flow workers carry the
+not use generic subagents for Flow slices because Flow workers carry the
 permission boundaries for each mode.
 
 | Mode | Use agent | Worker output | Write access | Flow tools |
 | --- | --- | --- | --- | --- |
-| \`evidence\` | \`flow-evidence-worker\` | Facts, files inspected, gaps, suggested plan targets | No | \`flow_status\` only if needed |
-| \`review\` | \`flow-reviewer\` | Candidate findings or review slice summary | No | \`flow_status\` only if needed |
-| \`validation\` | \`flow-validation-worker\` | Command options, raw output summaries, coverage gaps | No code edits; commands only when explicitly allowed | \`flow_status\` only if needed |
-| \`audit\` | \`flow-audit-worker\` | Refuted or surviving finding candidates | No | \`flow_status\` only if needed |
+| \`evidence\` | \`flow-evidence-worker\` | Coverage, facts, files inspected, confidence, gaps, suggested plan targets | No | \`flow_status\` only if needed |
+| \`review\` | \`flow-reviewer\` | Coverage, candidate findings or review slice summary, confidence, gaps | No | \`flow_status\` only if needed |
+| \`validation\` | \`flow-validation-worker\` | Command options or manager-authorized raw output, coverage, confidence, gaps | No code edits; commands only when explicitly allowed | \`flow_status\` only if needed |
+| \`audit\` | \`flow-audit-worker\` | Refuted or surviving finding candidates, guards checked, confidence, gaps | No | \`flow_status\` only if needed |
+| \`verifier\` | \`flow-verifier-worker\` | Per-claim verdicts against cited evidence or commands | No | \`flow_status\` only if needed |
 | \`candidate-implementation\` | \`flow-candidate-worker\` | Candidate patch summary from an isolated worktree or exact path-owned slice | Only with explicit user authorization plus isolation or exact non-overlapping path ownership | No state-changing Flow tools |
 
-Do not fan out parallel \`flow_run_start\`, \`flow_feature_complete\`,
-\`flow_feature_reset\`, or \`flow_session_close\` calls. Runtime locking serializes
-file writes, but the Flow model accepts only one active feature result at a time.
+Do not fan out parallel \`flow_plan_save\`, \`flow_plan_approve\`,
+\`flow_run_start\`, \`flow_feature_complete\`, \`flow_feature_reset\`, or
+\`flow_session_close\` calls. Runtime locking protects files, but Flow accepts only
+one active feature result at a time.
 
 ## Worker rules
 
@@ -51,9 +193,9 @@ Workers must not edit \`.flow/**\` and must not call:
 - \`flow_feature_reset\`
 - \`flow_session_close\`
 
-Workers also must not approve work, close sessions, or claim validation they did
-not run. A worker may report raw validation output it actually ran; the manager
-decides whether it is strong enough to record.
+Workers also must not approve work, close sessions, record Flow validation, or
+claim validation they did not run. A worker may report raw validation output it
+actually ran; the manager decides whether it is strong enough to record.
 
 ## Prompt contract
 
@@ -61,31 +203,17 @@ Every worker prompt includes:
 
 \`\`\`text
 Overall goal, context only: <goal>
-Mode: evidence | review | validation | audit | candidate-implementation
-Your exact slice: <paths, modules, command, risk lens, or worktree>
+Mode: evidence | review | validation | audit | verifier | candidate-implementation
+Your exact slice: <paths, modules, command, claim ids, risk lens, or worktree>
+Expected coverage: <count, paths, range, or complete question set>
 Do: <bounded actions>
-Do not: call Flow state tools, edit .flow/**, own sibling slices, or make the final verdict.
-Return exactly the handoff shape below.
-\`\`\`
-
-Ask workers for:
-
-\`\`\`text
-Scope
-Evidence inspected
-Findings or facts
-Open questions / gaps
-Suggested Flow follow-ups
+Do not: call Flow state tools, edit .flow/**, own sibling slices, or make the final Flow verdict.
+Return exactly the matching handoff shape from handoff-format.md.
 \`\`\`
 
-For candidate implementation workers, ask for:
-
-\`\`\`text
-Changed or proposed patch
-Verification run
-Merge risks
-Manager follow-ups
-\`\`\`
+For research or current-doc slices, require source checks for versioned or
+time-sensitive facts. For implementation candidates, remind workers that other
+work may be active and that they must not revert unrelated changes.
 
 ## Where handoffs go
 
@@ -97,12 +225,117 @@ Manager follow-ups
   and raw outcome are concrete enough to trust.
 - Review evidence informs \`featureReview\` or \`finalReview\`, but the manager owns
   the pass/fail verdict.
+- Audit evidence becomes findings only after refutation and verification rules
+  in \`verification-gates.md\`.
 - Candidate patches are inspected, merged, and validated by the manager before
   any Flow completion call.
 
-If worker results conflict, prefer the directly inspected source artifact over
-summaries and rerun the narrowest missing check.
-`;var ne='# Recovery playbook\n\nUse this when a Flow tool returns `status: "error"`, a blocker, or a `nextAction` that conflicts with memory.\n\n## First response\n\n1. Re-anchor with `flow_status`.\n2. Read the returned `summary`, `recovery`, `lastError`, and active feature.\n3. Fix the cause, then retry the smallest valid Flow action.\n\n## Common cases\n\n- `missing_session`: start with `flow_plan_save` using the user\'s goal.\n- `missing_goal`: ask for a concrete goal before planning.\n- `Approved plans cannot be changed`: use `flow_feature_reset` when only affected features need another pass; otherwise close and start a new goal.\n- `No feature is currently running`: call `flow_run_start` before completing.\n- `already in progress`: finish, reset, or block the active feature before starting another.\n- `Completion requires recorded validation evidence`: run real validation and include at least one passing `validationRun`.\n- `Completion requires all recorded validation to pass`: fix failures and rerun. Do not relabel failed checks as passed.\n- `Non-final feature completion requires targeted validation`: use `validationScope: "targeted"` for ordinary features.\n- `Final feature completion requires broad validation`: run the project-level gate and use `validationScope: "broad"`.\n- `Completion requires a passing featureReview`: run or request a real review and include a passing `featureReview` only when there are no blocking findings.\n- `Final feature completion requires a finalReview`: perform final review and include `finalReview`.\n- `Final review depth must match the plan policy`: use `reviewDepth` equal to the approved plan\'s `finalReviewPolicy`.\n- `Cannot close ... unfinished features`: complete, reset, defer, or abandon honestly. Do not mark completed while work remains.\n\n## Reset guidance\n\nUse `flow_feature_reset` when the active or completed work was built on the wrong assumption, validation revealed a design issue, dependencies need to be rerun, or dependent features must be invalidated. Resetting a feature also resets its dependents.\n\n## Closure guidance\n\nUse `flow_session_close`:\n\n- `completed`: only after all planned features are complete.\n- `deferred`: the user intentionally postpones unfinished work.\n- `abandoned`: the session should be archived without claiming delivery.\n\nAfter closure, the active `.flow/session.json` is removed and the archived JSON is stored under `.flow/history/`.\n';var re="---\nname: flow\ndescription: Main Flow loop for skills-first OpenCode work. Use when a user asks for Flow-guided planning, autonomous execution, resumable implementation, session status, or end-to-end delivery with validation and review gates.\n---\n\n# Flow\n\nUse Flow as a minimal state ledger, not as a framework. Skills provide judgment; the runtime only records the approved plan, active feature, validation evidence, review evidence, and closure.\n\n## Loop\n\n1. Call `flow_status` first. Trust its active session and next action over conversation memory.\n2. If there is no active session and the user gave a goal, load `flow-plan`, save a plan with `flow_plan_save`, then approve it with `flow_plan_approve`. If there is no goal, ask for one.\n3. Load `flow-run`, call `flow_run_start`, implement exactly one feature, validate it, and prepare a `flow_feature_complete` payload.\n4. Load `flow-review` for the required feature review. The reviewer reports a `featureReview` payload; the manager records it inside `flow_feature_complete`.\n5. On the final feature, run broad validation and include `finalReview` in the same `flow_feature_complete` call. Its `reviewDepth` must match the plan's `finalReviewPolicy`.\n6. After all features are complete, archive the session with `flow_session_close` using `kind: \"completed\"`.\n\nUse `references/parallel-orchestration.md` for broad read-only discovery, audit, or review. The manager owns every `flow_*` state change.\n\n## Runtime Surface\n\n- `flow_status`: read the active session.\n- `flow_plan_save`: create a session and/or save a draft plan.\n- `flow_plan_approve`: lock the draft plan.\n- `flow_run_start`: start one runnable feature.\n- `flow_feature_complete`: record completion or a real blocker with validation and review evidence.\n- `flow_feature_reset`: reset one feature and its dependents.\n- `flow_session_close`: archive the active session as `completed`, `deferred`, or `abandoned`.\n\nThere is no `flow_context`, no separate review-record tool, and no multi-session activation surface. The single active source of truth is `.flow/session.json`; closed sessions are archived under `.flow/history/`.\n\n## Hard Gates\n\n- Approved plans are immutable. To change direction, reset affected features or close the session and start a new goal.\n- Only one feature can be active at a time.\n- Completion requires at least one passing `validationRun` entry.\n- Non-final completion requires `validationScope: \"targeted\"`.\n- Final completion requires `validationScope: \"broad\"` and a passing `finalReview`.\n- Every completed feature requires a passing `featureReview` with no blocking findings.\n- `flow_session_close` accepts `kind: \"completed\"` only after an approved plan has passed final completion.\n\n## Recovery\n\n- Confused state: call `flow_status` and follow `nextAction`.\n- Wrong assumption or failed implementation path: use `flow_feature_reset` for the feature and dependents, then rerun from the corrected plan.\n- Missing validation or review evidence: gather real evidence, then call `flow_feature_complete`.\n- Approved plan is materially wrong: reset the affected features, save a revised plan if the session is back in planning; otherwise close and start a new goal.\n- Unknown runtime error: read `summary` and `recovery`; see `references/recovery-playbook.md` for common cases.\n\nNever fabricate validation output, backfill review approval you did not perform, or close as `deferred`/`abandoned` merely to avoid an unfinished-work blocker.\n";var oe=`# Safe refactor workflow
+When worker results conflict, inspect the underlying artifact directly and rerun
+the smallest check that can settle the disagreement.
+
+## Second waves
+
+Start a follow-up wave when first-wave handoffs reveal:
+
+- missing coverage in the original slice map.
+- conflicting findings that matter to the Flow decision.
+- a specialized follow-up that was intentionally out of scope.
+- high-stakes, low-confidence, or single-source claims needing verification.
+- bounded implementation candidates after research converges.
+
+Do not recurse by default. If a worker says it needs another worker, the manager
+decides whether that is a second wave and writes the next bounded prompt.
+`;var re='# Recovery playbook\n\nUse this when a Flow tool returns `status: "error"`, a blocker, or a `nextAction` that conflicts with memory.\n\n## First response\n\n1. Re-anchor with `flow_status`.\n2. Read the returned `summary`, `recovery`, `lastError`, and active feature.\n3. Fix the cause, then retry the smallest valid Flow action.\n\n## Common cases\n\n- `missing_session`: start with `flow_plan_save` using the user\'s goal.\n- `missing_goal`: ask for a concrete goal before planning.\n- `Approved plans cannot be changed`: use `flow_feature_reset` when only affected features need another pass; otherwise close and start a new goal.\n- `No feature is currently running`: call `flow_run_start` before completing.\n- `already in progress`: finish, reset, or block the active feature before starting another.\n- `Completion requires recorded validation evidence`: run real validation and include at least one passing `validationRun`.\n- `Completion requires all recorded validation to pass`: fix failures and rerun. Do not relabel failed checks as passed.\n- `Non-final feature completion requires targeted validation`: use `validationScope: "targeted"` for ordinary features.\n- `Final feature completion requires broad validation`: run the project-level gate and use `validationScope: "broad"`.\n- `Completion requires a passing featureReview`: run or request a real review and include a passing `featureReview` only when there are no blocking findings.\n- `Final feature completion requires a finalReview`: perform final review and include `finalReview`.\n- `Final review depth must match the plan policy`: use `reviewDepth` equal to the approved plan\'s `finalReviewPolicy`.\n- `Cannot close ... unfinished features`: complete, reset, defer, or abandon honestly. Do not mark completed while work remains.\n\n## Reset guidance\n\nUse `flow_feature_reset` when the active or completed work was built on the wrong assumption, validation revealed a design issue, dependencies need to be rerun, or dependent features must be invalidated. Resetting a feature also resets its dependents.\n\n## Closure guidance\n\nUse `flow_session_close`:\n\n- `completed`: only after all planned features are complete.\n- `deferred`: the user intentionally postpones unfinished work.\n- `abandoned`: the session should be archived without claiming delivery.\n\nAfter closure, the active `.flow/session.json` is removed and the archived JSON is stored under `.flow/history/`.\n';var oe=`# Verification gates
+
+Verification is how Flow keeps parallel work from turning into parallel
+guesswork. Worker handoffs are candidate evidence; the manager decides what can
+enter the plan, validation record, review payload, audit report, or final
+answer.
+
+## Before fan-out
+
+Run a pre-fan-out gate after serial orientation and before spawning workers:
+
+- Count the total work items when countable: files, modules, routes, commands,
+  rows, findings, screenshots, or claims.
+- List every slice with path/range/lens and expected count.
+- Check that countable slices add back to the total.
+- Check for overlapping ownership, missing areas, empty slices, and ambiguous
+  shared contracts.
+- Fix the slice map centrally before spawning if the gate does not reconcile.
+
+If the scope cannot be counted, state the completeness rule instead, such as
+"all changed files plus callers" or "all public commands plus release docs."
+
+## Every handoff
+
+Accept a handoff only after a cheap manager-side pass:
+
+- \`Status\` is terminal: \`success\`, \`partial\`, or \`blocked\`.
+- Coverage matches the assigned slice, or skips are explicit.
+- Important claims have concrete evidence and confidence tags.
+- Cited paths, commands, screenshots, URLs, or metrics resolve.
+- The evidence supports the claim, not just the topic.
+- Findings stay inside the worker's slice.
+- Headline counts can be recounted or traced.
+- Contradictions between workers are either resolved or explicitly marked as
+  contested.
+
+Demote, drop, re-task, or verify claims that fail this pass.
+
+## Verifier triggers
+
+Use \`flow-verifier-worker\` when a claim is:
+
+- blocking or release-sensitive.
+- high-stakes for user data, security, persistence, permissions, or public API
+  behavior.
+- low-confidence, inferred, surprising, or single-sourced.
+- citation-heavy enough that source drift would change the conclusion.
+- contradicted by another worker or by manager inspection.
+- a count, benchmark, command result, or pass/fail claim that a Flow payload will
+  rely on.
+
+Give the verifier atomic claims, cited sources or commands, and the acceptance
+question. Do not ask it to redesign the work or review the whole feature.
+
+## Flow payload acceptance
+
+Planning fields may use worker evidence only when the source and scope are clear.
+Unverified broad findings should become a review-first feature, not a fix plan.
+
+\`validationRun\` entries may use worker-reported commands only when the worker
+was explicitly authorized to run the command and reported the exact command,
+status, and raw outcome summary.
+
+\`featureReview\` and \`finalReview\` may use worker review slices, but the manager
+owns the pass/fail decision and must resolve blockers, contradictions, and
+coverage gaps before returning the payload.
+
+Audit reports may include only findings that survived refutation. Blocking audit
+findings need guards checked, deployment context, and evidence that the current
+code exhibits the behavior.
+
+Candidate implementation patches are not Flow evidence until the manager
+inspects, merges or rejects them, and runs suitable validation in the main
+Flow-managed workspace.
+
+## Final synthesis
+
+Before presenting or recording the result:
+
+- Preserve confidence: verified, single-sourced, inferred, and unresolved claims
+  stay distinct when it matters.
+- When workers disagree, inspect the cited artifact or rerun the cited command
+  instead of arbitrating from summaries.
+- Run the strongest practical local check for the deliverable.
+- Re-read critical files or docs that will be cited in the final decision.
+- Record gaps honestly instead of converting missing evidence into success
+  language.
+
+\`Status: success\` only says the worker believes its slice is done. The manager
+still checks coverage and evidence before trusting the result.
+`;var ie="---\nname: flow\ndescription: Main Flow loop for skills-first OpenCode work. Use when a user asks for Flow-guided planning, autonomous execution, resumable implementation, session status, or end-to-end delivery with validation and review gates.\n---\n\n# Flow\n\nUse Flow as a minimal state ledger, not as a framework. Skills provide judgment; the runtime only records the approved plan, active feature, validation evidence, review evidence, and closure.\n\n## Loop\n\n1. Call `flow_status` first. Trust its active session and next action over conversation memory.\n2. If there is no active session and the user gave a goal, load `flow-plan`, save a plan with `flow_plan_save`, then approve it with `flow_plan_approve`. If there is no goal, ask for one.\n3. Load `flow-run`, call `flow_run_start`, implement exactly one feature, validate it, and prepare a `flow_feature_complete` payload.\n4. Load `flow-review` for the required feature review. The reviewer reports a `featureReview` payload; the manager records it inside `flow_feature_complete`.\n5. On the final feature, run broad validation and include `finalReview` in the same `flow_feature_complete` call. Its `reviewDepth` must match the plan's `finalReviewPolicy`.\n6. After all features are complete, archive the session with `flow_session_close` using `kind: \"completed\"`.\n\nUse `references/parallel-orchestration.md` for broad read-only discovery, audit, validation, review, verification, or candidate implementation waves. Its `references/handoff-format.md` and `references/verification-gates.md` companions define the worker contracts. The manager owns every `flow_*` state change.\n\n## Runtime Surface\n\n- `flow_status`: read the active session.\n- `flow_plan_save`: create a session and/or save a draft plan.\n- `flow_plan_approve`: lock the draft plan.\n- `flow_run_start`: start one runnable feature.\n- `flow_feature_complete`: record completion or a real blocker with validation and review evidence.\n- `flow_feature_reset`: reset one feature and its dependents.\n- `flow_session_close`: archive the active session as `completed`, `deferred`, or `abandoned`.\n\nThere is no `flow_context`, no separate review-record tool, and no multi-session activation surface. The single active source of truth is `.flow/session.json`; closed sessions are archived under `.flow/history/`.\n\n## Hard Gates\n\n- Approved plans are immutable. To change direction, reset affected features or close the session and start a new goal.\n- Only one feature can be active at a time.\n- Completion requires at least one passing `validationRun` entry.\n- Non-final completion requires `validationScope: \"targeted\"`.\n- Final completion requires `validationScope: \"broad\"` and a passing `finalReview`.\n- Every completed feature requires a passing `featureReview` with no blocking findings.\n- `flow_session_close` accepts `kind: \"completed\"` only after an approved plan has passed final completion.\n\n## Recovery\n\n- Confused state: call `flow_status` and follow `nextAction`.\n- Wrong assumption or failed implementation path: use `flow_feature_reset` for the feature and dependents, then rerun from the corrected plan.\n- Missing validation or review evidence: gather real evidence, then call `flow_feature_complete`.\n- Approved plan is materially wrong: reset the affected features, save a revised plan if the session is back in planning; otherwise close and start a new goal.\n- Unknown runtime error: read `summary` and `recovery`; see `references/recovery-playbook.md` for common cases.\n\nNever fabricate validation output, backfill review approval you did not perform, or close as `deferred`/`abandoned` merely to avoid an unfinished-work blocker.\n";var se=`# Safe refactor workflow
 
 Refactoring is a behavior-preserving sequence of small changes. This workflow keeps cleanup from becoming an unreviewable rewrite.
 
@@ -144,7 +377,7 @@ Weak evidence includes:
 - Public contracts and compatibility shims remain intact or were explicitly planned.
 - Deleted code is actually unreachable or obsolete.
 - Validation can catch a realistic mistake in the refactor.
-`;var ie=`# Deslop smell rubric
+`;var le=`# Deslop smell rubric
 
 Use this rubric to turn vague cleanup instincts into reviewable findings.
 
@@ -178,7 +411,7 @@ class; severity; location; evidence read; refutation checked; why it matters; sa
 \`\`\`
 
 Rate as blocking only when the smell materially raises defect risk, blocks planned work, hides behavior, or makes the success claim unverifiable. Style-only cleanup is advisory.
-`;var se=`---
+`;var ce=`---
 name: flow-deslop
 description: Flow guidance for evidence-backed code smell cleanup, AI-slop removal, overengineering reduction, maintainability refactors, and behavior-preserving cleanup. Use when planning, executing, or reviewing broad cleanup/refactor work, code smell findings, duplicated or bloated code, speculative abstractions, dead code, or agent-introduced mess.
 ---
@@ -220,7 +453,73 @@ For each claimed smell removal, verify:
 - **blast radius** — public contracts and downstream callers still work.
 
 Never approve cleanup because it "looks cleaner" without evidence. Tests passing is necessary but not sufficient when the refactor changes structure across files.
-`;var le="# Parallel discovery\n\nUse this only after a serial orientation pass has identified the repo shape and the likely slices. Workers are read-only evidence gatherers; the planner owns the plan.\n\n## Good slices\n\n- Independent modules or packages.\n- Frontend route and backend endpoint pairs.\n- Test, CI, and release surfaces.\n- Risk lenses such as security, persistence, accessibility, migration, or performance.\n- Documentation and operator-contract checks.\n\n## Flow repo default slices\n\nFor this repository, good first-wave slices are:\n\n- Runtime gates: `src/runtime/schema.ts`, `src/runtime/transitions.ts`,\n  `src/runtime/api.ts`, and `tests/runtime-gates.test.ts`.\n- Workspace persistence: `src/runtime/workspace.ts`,\n  `src/runtime/json/strict-object.ts`, and\n  `tests/workspace-persistence.test.ts`.\n- OpenCode adapter surface: `src/adapters/opencode/**`, `src/config-shared.ts`,\n  `src/config.ts`, `src/index.ts`, and surface tests.\n- Distribution and synced skills: `src/distribution/**`, `src/cli.ts`,\n  `skills/**`, and distribution tests.\n- CI, package, and release contract: `.github/workflows/**`, `package.json`,\n  `bun.lock`, `README.md`, and `CHANGELOG.md`.\n- Docs and operator contract: `docs/**`, `README.md`, and skill references.\n\n## Worker prompt\n\n```text\nInspect <slice> for <goal>. Read-only. Do not edit files or call Flow tools.\nReturn: scope inspected; files/commands checked; evidence-backed facts or findings; gaps; suggested feature targets and validation.\n```\n\nFor validation-oriented discovery:\n\n```text\nInspect <slice> for validation risk. Read-only. Do not edit files or call Flow\ntools. You may report commands that should be run, and include raw output only\nfor commands you actually ran. Return: scope inspected; validation-relevant\nfacts; suggested targeted checks; broad-gate implications; gaps.\n```\n\n## Synthesis\n\nConvert only evidence-backed work into plan fields:\n\n- `requirements`: user promises and externally visible acceptance criteria.\n- `decisions`: architecture boundaries, rejected approaches, and scope cuts.\n- feature `targets`: files, modules, routes, commands, docs, or workflows the feature owns.\n- feature `validation`: checks expected to prove the feature.\n\nIf workers disagree, inspect the source artifact yourself. If a candidate finding lacks a concrete citation or refutation pass, make it a review-first deliverable rather than a fix feature.\n";var ce=`# Planning examples
+`;var de=`# Parallel discovery
+
+Use this only after a serial orientation pass has identified the repo shape and the likely slices. Workers are read-only evidence gatherers; the planner owns the plan.
+
+For broad waves, also load \`../../flow/references/parallel-orchestration.md\`.
+Use its pre-fan-out coverage gate and
+\`../../flow/references/handoff-format.md\` response shapes.
+
+## Good slices
+
+- Independent modules or packages.
+- Frontend route and backend endpoint pairs.
+- Test, CI, and release surfaces.
+- Risk lenses such as security, persistence, accessibility, migration, or performance.
+- Documentation and operator-contract checks.
+
+## Flow repo default slices
+
+For this repository, good first-wave slices are:
+
+- Runtime gates: \`src/runtime/schema.ts\`, \`src/runtime/transitions.ts\`,
+  \`src/runtime/api.ts\`, and \`tests/runtime-gates.test.ts\`.
+- Workspace persistence: \`src/runtime/workspace.ts\`,
+  \`src/runtime/json/strict-object.ts\`, and
+  \`tests/workspace-persistence.test.ts\`.
+- OpenCode adapter surface: \`src/adapters/opencode/**\`, \`src/config-shared.ts\`,
+  \`src/config.ts\`, \`src/index.ts\`, and surface tests.
+- Distribution and synced skills: \`src/distribution/**\`, \`src/cli.ts\`,
+  \`skills/**\`, and distribution tests.
+- CI, package, and release contract: \`.github/workflows/**\`, \`package.json\`,
+  \`bun.lock\`, \`README.md\`, and \`CHANGELOG.md\`.
+- Docs and operator contract: \`docs/**\`, \`README.md\`, and skill references.
+
+## Coverage gate
+
+Before spawning workers, state the total discovery scope and one line per slice.
+For countable scopes, confirm that slice counts add back to the total and that
+there are no overlaps, gaps, or empty slices. If the scope is not countable,
+state the completeness rule, such as "all changed files plus callers."
+
+## Worker prompt
+
+\`\`\`text
+Inspect <slice> for <goal>. Read-only. Do not edit files or call Flow tools.
+Return the evidence/review/validation/audit handoff shape from ../../flow/references/handoff-format.md.
+\`\`\`
+
+For validation-oriented discovery:
+
+\`\`\`text
+Inspect <slice> for validation risk. Read-only. Do not edit files or call Flow
+tools. You may report commands that should be run, and include raw output only
+for commands you actually ran. Return the evidence/review/validation/audit
+handoff shape from ../../flow/references/handoff-format.md.
+\`\`\`
+
+## Synthesis
+
+Convert only evidence-backed work into plan fields:
+
+- \`requirements\`: user promises and externally visible acceptance criteria.
+- \`decisions\`: architecture boundaries, rejected approaches, and scope cuts.
+- feature \`targets\`: files, modules, routes, commands, docs, or workflows the feature owns.
+- feature \`validation\`: checks expected to prove the feature.
+
+If workers disagree, inspect the source artifact yourself. If a candidate finding lacks a concrete citation or refutation pass, make it a review-first deliverable rather than a fix feature.
+`;var ue=`# Planning examples
 
 ## Rate limiting feature set
 
@@ -305,7 +604,7 @@ Better plan:
 - Validation that only says "manual testing".
 - Targets that name the entire repo.
 - Features with hidden dependencies instead of \`dependsOn\`.
-`;var de=`---
+`;var pe=`---
 name: flow-plan
 description: Plan Flow work for the v4 skills-first runtime: inspect the repo, decompose a user goal into right-sized features, save a draft with flow_plan_save, and approve it with flow_plan_approve.
 ---
@@ -319,7 +618,7 @@ If \`flow_plan_save\` is unavailable, stop and tell the user to check that \`ope
 ## Inspect first
 
 - Read the files, docs, tests, package scripts, and local conventions that determine the work.
-- For broad discovery, read \`references/parallel-discovery.md\` after a serial orientation pass.
+- For broad discovery, read \`references/parallel-discovery.md\` after a serial orientation pass. Use \`../flow/references/parallel-orchestration.md\` when discovery needs multiple workers, and apply its coverage gate before fan-out.
 - For cleanup/refactor goals, load \`flow-deslop\`.
 - For UI/frontend goals, load \`flow-ui-quality\`.
 - Do not invent findings. Broad "review and fix" goals start with a review-first feature whose deliverable is evidence-backed findings.
@@ -366,7 +665,7 @@ Use \`finalReviewPolicy: "broad"\` only for low-risk, narrow work. Use \`"detail
 After saving, summarize the plan to the user or proceed if they already authorized implementation. Then call \`flow_plan_approve\`. Approved plans are immutable; changing them later requires reset/closure rather than silent edits.
 
 See \`references/planning-examples.md\` for payload examples and decomposition anti-patterns.
-`;var ue=`# Review rubric
+`;var fe=`# Review rubric
 
 Use this to decide whether a \`featureReview\` or \`finalReview\` payload may pass.
 
@@ -454,7 +753,7 @@ When reviewing a findings report, verify findings adversarially:
 - Downgrade or reject findings that do not survive refutation.
 
 Approve only on evidence actually inspected. A review is a claim of coverage, not a courtesy stamp.
-`;var pe=`---
+`;var me=`---
 name: flow-review
 description: Review Flow work in the v4 runtime: inspect feature or final-session changes, classify findings, and return featureReview or finalReview payloads for flow_feature_complete.
 ---
@@ -514,11 +813,12 @@ Use \`status: "failed"\` when any blocking finding remains. Advisory findings ma
 - Large reviews: use \`../flow/references/parallel-orchestration.md\` for
   read-only slices by changed-file group, risk lens, or validation surface.
   Use the named review, audit, evidence, or validation agents from that
-  reference instead of generic subagents. Synthesize the handoffs yourself; only
-  the manager returns the final \`featureReview\` or \`finalReview\` payload.
+  reference instead of generic subagents. Apply its handoff format and
+  verification gates; only the manager returns the final \`featureReview\` or
+  \`finalReview\` payload.
 
 Never approve to unblock completion, fix findings in the review pass, or vouch for validation you did not inspect.
-`;var fe=`# Audit findings rubric
+`;var he=`# Audit findings rubric
 
 What counts as a valid finding when the feature's deliverable is a findings report: a codebase audit, a review-first feature, or any report whose findings a later feature will fix. The commands you run are still governed by \`validation-rubric.md\`; this rubric governs the findings themselves.
 
@@ -538,8 +838,9 @@ A finding that survives this pass is worth reporting. A finding you did not try
 
 For broad audits, use \`../../flow/references/parallel-orchestration.md\` to split
 read-only slices by module, data flow, or risk lens. Workers surface candidates;
-the audit author owns the report. Before blocking severity, dedupe, trace
-guards, fill cross-layer checks, and downgrade missing context.
+the audit author owns the report. Apply its handoff format and verification
+gates. Before blocking severity, dedupe, trace guards, fill cross-layer checks,
+verify contested or high-stakes claims, and downgrade missing context.
 
 ## Every blocking finding records "guards checked"
 
@@ -570,7 +871,7 @@ follow-up order — correctness and persisted/user-input surfaces first
 \`\`\`
 
 Never: promote a hypothesis to blocking severity; cite a line you did not read in context; rate severity against a deployment model the product does not have; pad the report to look thorough — six verified findings outrank nine where three die on first contact.
-`;var me=`# Validation evidence rubric
+`;var ge=`# Validation evidence rubric
 
 Use this before recording \`flow_feature_complete\`.
 
@@ -588,6 +889,7 @@ Use the strongest practical tier. For risky work, combine tiers.
 - Each \`validationRun\` entry has \`command\`, \`status\`, and \`summary\`.
 - Completion accepts only passing entries. Failed or skipped checks belong in the summary/notes and must be resolved or explained as blockers.
 - Do not claim a command was run unless it was run in this session or directly reported by a trusted worker with raw output.
+- Worker-reported command output must satisfy \`../../flow/references/verification-gates.md\`: exact command, status, raw outcome summary, coverage, and manager acceptance.
 - Include scope in the summary: what behavior, files, routes, or states the check covered.
 - UI work should include browser or screenshot evidence when the app can run locally.
 - Cleanup/refactor work should show behavior preservation, not only formatting success.
@@ -626,7 +928,7 @@ Broad validation usually means the repo's full check command, full relevant test
 - If validation needs external access, missing credentials, or ambiguous user input, record \`status: "needs_input"\` with an honest \`outcome\`.
 
 Never trim failing output, relabel a failed command as passed, or use "not run" as completion evidence.
-`;var he="---\nname: flow-run\ndescription: Execute one approved Flow feature in the v4 runtime: start a feature with flow_run_start, make scoped changes, gather real validation evidence, obtain review payloads, and complete with flow_feature_complete.\n---\n\n# Flow Run\n\nUse this skill for implementation after a Flow plan is approved. Work one feature at a time.\n\nIf `flow_run_start` is unavailable, stop and tell the user to check that `opencode-plugin-flow` is loaded in OpenCode.\n\n## Start\n\n- Call `flow_status`.\n- Call `flow_run_start` with no `featureId` unless the user or plan requires a specific runnable feature.\n- Treat the returned feature as the sole scope until it is completed, blocked, or reset.\n- Load `flow-deslop` for cleanup/refactor features.\n- Load `flow-ui-quality` for frontend, UX, responsive, accessibility, or visual work.\n\n## Implement\n\n- Read the feature `targets`, `summary`, `validation`, dependencies, and plan `requirements`/`decisions`.\n- Keep edits scoped to the active feature. If new scope appears, stop and replan or defer it to another feature.\n- Preserve unrelated user changes in the worktree.\n- When a wrong assumption invalidates the feature, use `flow_feature_reset`; do not pile patches onto a bad path.\n\n## Validate\n\n- Read `references/validation-rubric.md` before completing.\n- Run the strongest practical checks for the changed behavior.\n- Record concrete command names, status, and observed results. \"Tests pass\" is not evidence.\n- Non-final features complete with `validationScope: \"targeted\"`.\n- The final feature must run a broad project-level gate and use `validationScope: \"broad\"`.\n\nFor broad validation research, risky changes, or unclear coverage, use\n`../flow/references/parallel-orchestration.md` to fan out named Flow workers.\nUse the mode-to-agent mapping in that reference instead of generic subagents.\nWorkers may report command output they actually ran or propose focused checks;\nthe manager decides what is strong enough to record.\n\nFor independent implementation attempts, use candidate workers only with\nexplicit user authorization plus isolated worktrees or exact non-overlapping\npath ownership. Treat their output as candidate patches. The manager inspects,\nmerges, validates, and records Flow state serially.\n\n## Review and complete\n\nBefore `flow_feature_complete`, obtain a `featureReview` payload. Load `flow-review`; for read-only subagent reviews, the manager receives the payload and records it.\n\nFor the final feature, also obtain a `finalReview` payload whose `reviewDepth` equals the approved plan's `finalReviewPolicy`.\n\nComplete with:\n\n```json\n{\n  \"status\": \"ok\",\n  \"featureId\": \"active-feature-id\",\n  \"summary\": \"what changed\",\n  \"artifactsChanged\": [{ \"path\": \"src/file.ts\" }],\n  \"validationRun\": [\n    { \"command\": \"bun test tests/foo.test.ts\", \"status\": \"passed\", \"summary\": \"3 pass, exercised foo behavior\" }\n  ],\n  \"validationScope\": \"targeted\",\n  \"featureReview\": { \"status\": \"passed\", \"summary\": \"review summary\", \"blockingFindings\": [] }\n}\n```\n\nIf genuinely blocked, call `flow_feature_complete` with `status: \"needs_input\"` and an `outcome` that explains the blocker and next step. Never fabricate validation or review evidence to force progress.\n";var ge=`# UI quality rubric
+`;var we="---\nname: flow-run\ndescription: Execute one approved Flow feature in the v4 runtime: start a feature with flow_run_start, make scoped changes, gather real validation evidence, obtain review payloads, and complete with flow_feature_complete.\n---\n\n# Flow Run\n\nUse this skill for implementation after a Flow plan is approved. Work one feature at a time.\n\nIf `flow_run_start` is unavailable, stop and tell the user to check that `opencode-plugin-flow` is loaded in OpenCode.\n\n## Start\n\n- Call `flow_status`.\n- Call `flow_run_start` with no `featureId` unless the user or plan requires a specific runnable feature.\n- Treat the returned feature as the sole scope until it is completed, blocked, or reset.\n- Load `flow-deslop` for cleanup/refactor features.\n- Load `flow-ui-quality` for frontend, UX, responsive, accessibility, or visual work.\n\n## Implement\n\n- Read the feature `targets`, `summary`, `validation`, dependencies, and plan `requirements`/`decisions`.\n- Keep edits scoped to the active feature. If new scope appears, stop and replan or defer it to another feature.\n- Preserve unrelated user changes in the worktree.\n- When a wrong assumption invalidates the feature, use `flow_feature_reset`; do not pile patches onto a bad path.\n\n## Validate\n\n- Read `references/validation-rubric.md` before completing.\n- Run the strongest practical checks for the changed behavior.\n- Record concrete command names, status, and observed results. \"Tests pass\" is not evidence.\n- Non-final features complete with `validationScope: \"targeted\"`.\n- The final feature must run a broad project-level gate and use `validationScope: \"broad\"`.\n\nFor broad validation research, risky changes, or unclear coverage, use\n`../flow/references/parallel-orchestration.md` to fan out named Flow workers.\nUse the mode-to-agent mapping in that reference instead of generic subagents.\nWorkers must use the handoff format and verification gates from that reference.\nThey may report command output they actually ran or propose focused checks; the\nmanager decides what is strong enough to record.\n\nFor independent implementation attempts, use candidate workers only with\nexplicit user authorization plus isolated worktrees or exact non-overlapping\npath ownership. Treat their output as candidate patches. The manager inspects,\nmerges, validates, and records Flow state serially.\n\n## Review and complete\n\nBefore `flow_feature_complete`, obtain a `featureReview` payload. Load `flow-review`; for read-only subagent reviews, the manager receives the payload and records it.\n\nFor the final feature, also obtain a `finalReview` payload whose `reviewDepth` equals the approved plan's `finalReviewPolicy`.\n\nComplete with:\n\n```json\n{\n  \"status\": \"ok\",\n  \"featureId\": \"active-feature-id\",\n  \"summary\": \"what changed\",\n  \"artifactsChanged\": [{ \"path\": \"src/file.ts\" }],\n  \"validationRun\": [\n    { \"command\": \"bun test tests/foo.test.ts\", \"status\": \"passed\", \"summary\": \"3 pass, exercised foo behavior\" }\n  ],\n  \"validationScope\": \"targeted\",\n  \"featureReview\": { \"status\": \"passed\", \"summary\": \"review summary\", \"blockingFindings\": [] }\n}\n```\n\nIf genuinely blocked, call `flow_feature_complete` with `status: \"needs_input\"` and an `outcome` that explains the blocker and next step. Never fabricate validation or review evidence to force progress.\n";var ve=`# UI quality rubric
 
 Use this rubric for frontend planning, implementation, and review.
 
@@ -670,7 +972,7 @@ class; severity; location or screenshot area; evidence inspected; user impact; f
 \`\`\`
 
 Blocking UI findings are issues that prevent task completion, hide required information, break accessibility basics, create incoherent layout at supported sizes, or make the visual success claim unverifiable.
-`;var ve=`# Visual verification workflow
+`;var ye=`# Visual verification workflow
 
 Use this workflow when UI changes can be run locally. Flow execution may create visual evidence; Flow review usually assesses recorded evidence because the reviewer is read-only.
 
@@ -710,7 +1012,7 @@ Record the reason and use the strongest available substitute:
 - code inspection against existing component patterns.
 
 Do not claim visual polish was verified if no visual artifact was inspected.
-`;var we=`---
+`;var be=`---
 name: flow-ui-quality
 description: Flow guidance for UX/UI design, frontend polish, visual quality review, responsive and accessible interfaces, and avoiding generic AI-generated UI. Use when planning, executing, or reviewing frontend pages, components, dashboards, visual redesigns, interaction states, screenshots, or browser-verified UI work.
 ---
@@ -755,13 +1057,11 @@ Approve only when the interface is both useful and inspectable:
 - Screenshot/browser evidence supports the claim whenever feasible.
 
 Never approve a UI change based only on code shape. If users will judge it visually, Flow evidence should include visual inspection.
-`;var ye=[{name:"flow",files:[{relativePath:"SKILL.md",content:re},{relativePath:"references/recovery-playbook.md",content:ne},{relativePath:"references/parallel-orchestration.md",content:ae}]},{name:"flow-plan",files:[{relativePath:"SKILL.md",content:de},{relativePath:"references/planning-examples.md",content:ce},{relativePath:"references/parallel-discovery.md",content:le}]},{name:"flow-run",files:[{relativePath:"SKILL.md",content:he},{relativePath:"references/validation-rubric.md",content:me},{relativePath:"references/audit-rubric.md",content:fe}]},{name:"flow-review",files:[{relativePath:"SKILL.md",content:pe},{relativePath:"references/review-rubric.md",content:ue}]},{name:"flow-deslop",files:[{relativePath:"SKILL.md",content:se},{relativePath:"references/smell-rubric.md",content:ie},{relativePath:"references/refactor-workflow.md",content:oe}]},{name:"flow-ui-quality",files:[{relativePath:"SKILL.md",content:we},{relativePath:"references/ui-rubric.md",content:ge},{relativePath:"references/visual-verification.md",content:ve}]}];var Et=".flow-skill-version";function xe(){return process.env.HOME??process.env.USERPROFILE??""}function Ot(e=xe()){return I(e,".config","opencode","skills")}function Fe(e){return St("sha256").update(e).digest("hex")}function be(e,a){return[`version=${a}`,...e.files.map((t)=>`file=${t.relativePath} sha256=${Fe(t.content)}`),""].join(`
-`)}async function V(e){try{return await It(e,"utf8")}catch(a){if(a.code==="ENOENT")return null;throw a}}function jt(e){let a=new Map;if(!e)return a;for(let t of e.split(/\r?\n/)){let n=/^file=(.+) sha256=([a-f0-9]{64})$/.exec(t)??/^file=(.+)=sha256:([a-f0-9]{64})$/.exec(t);if(n?.[1]&&n[2])a.set(n[1],n[2]);let r=/^hash=sha256:([a-f0-9]{64})$/.exec(t);if(r?.[1]&&!a.has("SKILL.md"))a.set("SKILL.md",r[1])}return a}function ke(e,a){let t=Pt(I(e,...a.split("/")));if(t!==e&&t.startsWith(`${e}${Tt}`))return t;throw Error(`Unsafe skill file path '${a}'.`)}async function Ut(e,a,t){let n=I(t,e.name),r=I(n,Et),i=await V(r),s=jt(i);if(await V(I(n,"SKILL.md"))!==null&&i===null)return{name:e.name,action:"skipped_foreign"};let m=!1,ee=!1;for(let x of e.files){let _=ke(n,x.relativePath),P=await V(_);if(P===x.content)continue;m=!0;let te=s.get(x.relativePath);if(P!==null&&(te?Fe(P)!==te:i!==null))await M(`${_}.backup`,P,"utf8"),ee=!0}if(!m&&i===be(e,a))return{name:e.name,action:"unchanged"};let st=i!==null;for(let x of e.files){let _=ke(n,x.relativePath);await _t(At(_),{recursive:!0}),await M(_,x.content,"utf8")}return await M(r,be(e,a),"utf8"),{name:e.name,action:ee?"updated_with_backup":st?"updated":"installed"}}function Re(){if(process.env.npm_package_version)return process.env.npm_package_version;try{let e=Ct(import.meta.url);for(let a of["../package.json","../../package.json"])try{let t=e(a);if(t.version)return t.version}catch{}}catch{}return"0.0.0"}async function Nt(e,a=xe()){let t=Ot(a);return Promise.all(ye.map((n)=>Ut(n,e,t)))}async function Se(e,a){try{let n=(await Nt(e)).filter((r)=>r.action!=="unchanged"&&r.action!=="skipped_foreign");if(n.length>0)a("info",`Flow synced skills (${n.map((r)=>`${r.name}:${r.action}`).join(", ")}). Restart OpenCode if skills were just installed.`)}catch(t){a("warn",`Flow skill sync failed: ${t instanceof Error?t.message:String(t)}`)}}import{randomUUID as Vt}from"node:crypto";import{mkdir as N,open as Te,readFile as je,rename as Jt,rm as q,writeFile as Ee}from"node:fs/promises";import{homedir as Bt}from"node:os";import{dirname as Oe,isAbsolute as vn,join as F,parse as Gt,resolve as Ue}from"node:path";import{setTimeout as Kt}from"node:timers/promises";function qt(e){let a=[],t=0;while(t<e.length){let n=e[t];if(n==="{"){a.push({isObject:!0,keys:new Set,awaitingKey:!0}),t+=1;continue}if(n==="["){a.push({isObject:!1,keys:new Set,awaitingKey:!1}),t+=1;continue}if(n==="}"||n==="]"){a.pop(),t+=1;continue}if(n===","){let r=a.at(-1);if(r?.isObject)r.awaitingKey=!0;t+=1;continue}if(n===":"){let r=a.at(-1);if(r?.isObject)r.awaitingKey=!1;t+=1;continue}if(n==='"'){let r=t+1;while(r<e.length){if(e[r]==="\\"){r+=2;continue}if(e[r]==='"')break;r+=1}let i=a.at(-1);if(i?.isObject&&i.awaitingKey){let s=JSON.parse(e.slice(t,r+1));if(i.keys.has(s))return s;i.keys.add(s)}t=r+1;continue}t+=1}return null}function _e(e,a){if(e.trim().length===0)return{ok:!1,error:`${a} is empty.`};let t;try{t=JSON.parse(e)}catch(r){return{ok:!1,error:r instanceof Error?`${a} is not valid JSON: ${r.message}`:`${a} is not valid JSON.`}}if(t===null||typeof t!=="object"||Array.isArray(t))return{ok:!1,error:`${a} must be a JSON object.`};let n=qt(e);if(n)return{ok:!1,error:`${a} has duplicate key '${n}'.`};return{ok:!0,value:t}}import{z as o}from"zod";var v=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,C="Feature ids must be lowercase kebab-case",Ie=o.enum(["pending","in_progress","completed","blocked"]),Dt=o.enum(["planning","ready","running","blocked","completed"]),$t=o.enum(["passed","failed"]),Wt=o.enum(["passed","failed"]),J=o.enum(["targeted","broad"]),H=o.enum(["broad","detailed"]),zt=o.object({summary:o.string().min(1),severity:o.enum(["blocking","advisory"]).default("blocking")}).strict(),T=o.object({status:$t,summary:o.string().min(1),blockingFindings:o.array(zt).default([])}).strict(),B=T.extend({reviewDepth:H}).strict(),G=o.object({command:o.string().min(1),status:Wt,summary:o.string().min(1)}).strict(),K=o.object({path:o.string().min(1)}).strict(),Ce=o.object({id:o.string().regex(v,C),title:o.string().min(1),summary:o.string().min(1),status:Ie.default("pending"),targets:o.array(o.string().min(1)).default([]),validation:o.array(o.string().min(1)).default([]),dependsOn:o.array(o.string().regex(v)).default([])}).strict(),Ae=o.object({summary:o.string().min(1),overview:o.string().min(1),requirements:o.array(o.string().min(1)).default([]),decisions:o.array(o.string().min(1)).default([]),finalReviewPolicy:H.default("detailed"),features:o.array(Ce).min(1)}).strict(),E=Ae.omit({features:!0}).extend({finalReviewPolicy:H.optional(),features:o.array(Ce.omit({status:!0}).extend({status:Ie.optional(),targets:o.array(o.string().min(1)).optional(),validation:o.array(o.string().min(1)).optional(),dependsOn:o.array(o.string().regex(v)).optional()}).strict()).min(1)}),Pe=o.object({kind:o.enum(["completed","blocked","needs_input","replan_required"]).default("completed"),summary:o.string().min(1).optional(),resolutionHint:o.string().min(1).optional()}).strict(),Lt=o.object({kind:o.enum(["blocked","needs_input","replan_required"]).default("needs_input"),summary:o.string().min(1),resolutionHint:o.string().min(1).optional()}).strict(),O=o.discriminatedUnion("status",[o.object({status:o.literal("ok"),featureId:o.string().regex(v,C),summary:o.string().min(1),artifactsChanged:o.array(K).default([]),validationRun:o.array(G).default([]),validationScope:J,featureReview:T,finalReview:B.optional(),outcome:Pe.optional()}).strict(),o.object({status:o.literal("needs_input"),featureId:o.string().regex(v,C),summary:o.string().min(1),artifactsChanged:o.array(K).default([]),validationRun:o.array(G).default([]),validationScope:J.optional(),featureReview:T.optional(),finalReview:B.optional(),outcome:Lt}).strict()]).superRefine((e,a)=>{if(e.status==="ok"&&e.outcome?.kind&&e.outcome.kind!=="completed")a.addIssue({code:"custom",path:["outcome","kind"],message:'ok worker results must use outcome.kind "completed".'})}),Mt=o.object({featureId:o.string().regex(v,C),status:o.enum(["completed","blocked","needs_input"]),summary:o.string().min(1),recordedAt:o.string().min(1),artifactsChanged:o.array(K).default([]),validationRun:o.array(G).default([]),validationScope:J.optional(),featureReview:T.optional(),finalReview:B.optional(),outcome:Pe.optional()}).strict(),j=o.object({version:o.literal(2),id:o.string().min(1),goal:o.string().min(1),status:Dt,approval:o.enum(["pending","approved"]),plan:Ae.nullable(),activeFeatureId:o.string().regex(v,C).nullable(),history:o.array(Mt).default([]),closure:o.object({kind:o.enum(["completed","deferred","abandoned"]),summary:o.string().min(1),recordedAt:o.string().min(1)}).strict().nullable(),lastError:o.object({tool:o.string().min(1),summary:o.string().min(1),recovery:o.string().min(1).optional(),recordedAt:o.string().min(1)}).strict().nullable().default(null),timestamps:o.object({createdAt:o.string().min(1),updatedAt:o.string().min(1),completedAt:o.string().min(1).nullable()}).strict()}).strict();class D extends Error{code="INVALID_FLOW_WORKSPACE_ROOT";constructor(e){super(e);this.name="InvalidFlowWorkspaceRootError"}}function X(e){let a=e?.trim();if(!a)return null;let t=Ue(a);return Gt(t).root===t?null:t}function $(e){let a=X(e);if(!a)throw new D("Flow requires a non-root workspace path.");if(a===Ue(process.env.HOME??Bt()))throw new D("Flow refuses to use $HOME itself as a mutable workspace root.");return a}function Ne(e){let a=X(e.worktree)??X(e.directory);if(!a)throw new D("Flow could not resolve a workspace root from tool context.");return $(a)}function W(e){return F(e,".flow")}function Y(e){return F(W(e),"session.json")}function qe(e){return F(W(e),"history")}function Ht(e,a){if(!/^[a-zA-Z0-9_-]+$/.test(a))throw Error("Invalid session id.");return F(qe(e),`${a}.json`)}async function De(e,a){await N(Oe(e),{recursive:!0});let t=`${e}.${process.pid}.${Vt()}.tmp`,n=await Te(t,"w");try{await n.writeFile(a,"utf8"),await n.sync()}catch(i){throw await n.close(),await q(t,{force:!0}),i}await n.close();try{await Jt(t,e)}catch(i){throw await q(t,{force:!0}),i}let r=await Te(Oe(e),"r");try{await r.sync()}finally{await r.close()}}var U=new Map,Xt=30000,Yt=25;async function Zt(e){let a=W(e),t=F(a,"session.lock"),n=Date.now();while(!0)try{return await N(t,{recursive:!1}),async()=>{await q(t,{recursive:!0,force:!0})}}catch(r){let i=r.code;if(i==="ENOENT"){await N(a,{recursive:!0});continue}if(i!=="EEXIST")throw r;if(Date.now()-n>Xt)throw Error(`Timed out waiting for Flow session lock at ${t}.`);await Kt(Yt)}}async function $e(e,a){let t=U.get(e)??Promise.resolve(),n=()=>{},r=new Promise((d)=>{n=d}),i=t.catch(()=>{return}).then(()=>r);U.set(e,i);let s=null;try{return await t.catch(()=>{return}),s=await Zt(e),await a()}finally{try{await s?.()}finally{if(n(),U.get(e)===i)U.delete(e)}}}async function A(e){let a=$(e),t;try{t=await je(Y(a),"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}let n=_e(t,"Flow session file");if(!n.ok)throw Error(n.error);return j.parse(n.value)}async function w(e,a){let t=$(e),n=j.parse(a);return await De(Y(t),`${JSON.stringify(n,null,2)}
-`),await We(t),n}async function Z(e,a){let t=$(e);await N(qe(t),{recursive:!0}),await De(Ht(t,a.id),`${JSON.stringify(j.parse(a),null,2)}
-`),await q(Y(t),{force:!0}),await We(t)}async function We(e){let a=F(W(e),".gitignore");try{let t=await je(a,"utf8");if(t.includes("session.lock"))return;await Ee(a,`${t.trimEnd()}
-session.lock/
-`,"utf8")}catch(t){if(t.code!=="ENOENT")throw t;await Ee(a,`session.lock/
-`,"utf8")}}var Qt={"flow-reviewer":{mode:"subagent",hidden:!0,description:"Internal read-only reviewer for Flow-guided work.",prompt:"Load `flow-review`. Inspect the current work read-only, report findings, and do not mutate Flow state.",permission:{edit:"deny",bash:"deny",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-evidence-worker":{mode:"subagent",hidden:!0,description:"Internal read-only evidence worker for Flow planning and execution support.",prompt:"Use Flow evidence mode. Inspect only the assigned slice, do not edit files, do not call state-changing Flow tools, and return scope, evidence inspected, findings or facts, gaps, and suggested Flow follow-ups.",permission:{edit:"deny",bash:"deny",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-validation-worker":{mode:"subagent",hidden:!0,description:"Internal validation worker for Flow check selection and command evidence.",prompt:"Use Flow validation mode. Run only manager-specified commands or propose focused checks, do not edit files, do not call state-changing Flow tools, and report exact command, status, raw outcome summary, coverage, and gaps.",permission:{edit:"deny",bash:"ask",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-audit-worker":{mode:"subagent",hidden:!0,description:"Internal read-only audit worker for refuted or surviving finding candidates.",prompt:"Use Flow audit mode. Inspect only the assigned slice, actively refute candidate findings before reporting them, do not edit files, do not call state-changing Flow tools, and return evidence, guards checked, gaps, and follow-ups.",permission:{edit:"deny",bash:"ask",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-candidate-worker":{mode:"subagent",hidden:!0,description:"Internal candidate implementation worker for isolated Flow worktrees or exact non-overlapping path ownership.",prompt:"Use Flow candidate-implementation mode only when the manager assigned an isolated worktree or exact non-overlapping path ownership. Do not edit .flow/**, do not call state-changing Flow tools, do not complete Flow state, and return changed or proposed patch, verification run, merge risks, and manager follow-ups.",permission:{edit:"ask",bash:"ask",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}}},ea={"flow-auto":{description:"Drive Flow skills against the minimal runtime ledger",template:"Load the `flow` skill and drive the Flow loop until completion or a real blocker: $ARGUMENTS"},"flow-plan":{description:"Create or approve a Flow plan",template:"Load the `flow-plan` skill and plan: $ARGUMENTS"},"flow-run":{description:"Run one approved Flow feature",template:"Load the `flow-run` skill and execute the next approved feature. $ARGUMENTS"},"flow-review":{description:"Run a read-only Flow review",agent:"flow-reviewer",subtask:!0,template:"Load the `flow-review` skill and review: $ARGUMENTS"},"flow-status":{description:"Inspect the active Flow session",template:"Call flow_status and report the session state and next action."}};function ta(){return{agent:Object.fromEntries(Object.entries(Qt).map(([e,a])=>{let t=a.permission?{...a.permission,...a.permission.task?{task:{...a.permission.task}}:{}}:void 0;return[e,{...a,...t?{permission:t}:{}}]})),command:Object.fromEntries(Object.entries(ea).map(([e,a])=>[e,{...a}]))}}function ze(e){let a=ta();e.agent={...e.agent??{},...a.agent},e.command={...e.command??{},...a.command}}function Le(e){return async(a)=>{ze(a)}}function z(e){let a=e?.client,t=a?.app?.log;return(n,r)=>{if(typeof t!=="function")return;try{t.call(a?.app,{body:{service:"opencode-plugin-flow",level:n,message:r}})}catch{}}}import{z as p}from"zod";import{randomUUID as na}from"node:crypto";var aa=null;function h(){return aa?.()??new Date().toISOString()}function u(e){return{ok:!0,value:e}}function l(e,a,t){return{ok:!1,message:e,...a?{recovery:a}:{},...t?{session:t}:{}}}function ra(e){let a=E.parse(e);return{summary:a.summary,overview:a.overview,requirements:a.requirements??[],decisions:a.decisions??[],finalReviewPolicy:a.finalReviewPolicy??"detailed",features:a.features.map((t)=>({id:t.id,title:t.title,summary:t.summary,status:"pending",targets:t.targets??[],validation:t.validation??[],dependsOn:t.dependsOn??[]}))}}function oa(e){let a=new Set;for(let s of e.features){if(a.has(s.id))return`Duplicate feature id '${s.id}'.`;a.add(s.id)}for(let s of e.features)for(let d of s.dependsOn){if(!a.has(d))return`Feature '${s.id}' depends on unknown feature '${d}'.`;if(d===s.id)return`Feature '${s.id}' cannot depend on itself.`}let t=new Set,n=new Set,r=new Map(e.features.map((s)=>[s.id,s]));function i(s){if(n.has(s))return!1;if(t.has(s))return!0;t.add(s);for(let d of r.get(s)?.dependsOn??[])if(i(d))return!0;return t.delete(s),n.add(s),!1}return e.features.some((s)=>i(s.id))?"Feature dependencies contain a cycle.":null}function L(e){let a=h();return{version:2,id:na(),goal:e,status:"planning",approval:"pending",plan:null,activeFeatureId:null,history:[],closure:null,lastError:null,timestamps:{createdAt:a,updatedAt:a,completedAt:null}}}function y(e){return{...e,timestamps:{...e.timestamps,updatedAt:h()}}}function Je(e,a){if(e.approval==="approved"||e.status!=="planning")return l("Approved plans cannot be changed. Reset or start a new session.");let t=ra(a),n=oa(t);if(n)return l(n);return u(y({...e,status:"planning",approval:"pending",plan:t,activeFeatureId:null,history:[],closure:null,lastError:null,timestamps:{...e.timestamps,completedAt:null}}))}function Be(e){if(!e.plan)return l("There is no draft plan to approve.");if(e.approval==="approved"&&e.status==="ready")return u(e);if(e.status!=="planning")return l("Only planning sessions can be approved.");return u(y({...e,approval:"approved",status:"ready"}))}function Me(e,a){return e.status==="pending"&&e.dependsOn.every((t)=>a.has(t))}function ia(e,a){let t=new Set(e.filter((i)=>i.status==="completed").map((i)=>i.id)),n=new Map(e.map((i)=>[i.id,i]));if(a){let i=n.get(a);if(!i)return l(`Feature '${a}' is not in the plan.`);if(i.status==="completed")return l(`Feature '${a}' is already completed.`);if(i.status!=="pending")return l(`Feature '${a}' is ${i.status} and must be reset before it can run.`);if(!Me(i,t))return l(`Feature '${a}' has incomplete dependencies.`);return u(i)}let r=e.find((i)=>Me(i,t));return r?u(r):l("No runnable feature is available.")}function Q(e,a,t){return e.map((n)=>n.id===a?{...n,status:t}:n.status==="in_progress"&&t==="in_progress"?{...n,status:"pending"}:n)}function Ge(e,a){if(e.status==="completed")return l("This Flow session is already completed.");if(!e.plan||e.approval!=="approved")return l("There is no approved plan to run.");if(e.status==="blocked")return l("Blocked features must be reset before rerun.","Call flow_feature_reset for the blocked feature, then start it again.");if(e.activeFeatureId){if(!a||a===e.activeFeatureId){let i=e.plan.features.find((s)=>s.id===e.activeFeatureId);if(i)return u({session:e,feature:i})}return l(`Feature '${e.activeFeatureId}' is already in progress.`)}let t=ia(e.plan.features,a);if(!t.ok)return t;let n={...e.plan,features:Q(e.plan.features,t.value.id,"in_progress")},r=y({...e,status:"running",plan:n,activeFeatureId:t.value.id,lastError:null});return u({session:r,feature:r.plan?.features.find((i)=>i.id===t.value.id)??t.value})}function Ve(e){return e.status==="passed"&&e.blockingFindings.length===0}function sa(e,a){if(!e.plan)return!1;return e.plan.features.every((t)=>t.id===a||t.status==="completed")}function g(e,a,t,n){return l(t,n,{...e,lastError:{tool:a,summary:t,recovery:n,recordedAt:h()}})}function la(e,a){let t=sa(e,a.featureId);if(a.validationRun.length===0)return g(e,"flow_feature_complete","Completion requires recorded validation evidence.","Run the targeted or broad validation command and record the result.");if(!a.validationRun.every((n)=>n.status==="passed"))return g(e,"flow_feature_complete","Completion requires all recorded validation to pass.","Fix failures, rerun validation, then complete the feature.");if(!t&&a.validationScope!=="targeted")return g(e,"flow_feature_complete","Non-final feature completion requires targeted validation.","Record validationScope: targeted for ordinary feature completion.");if(t&&a.validationScope!=="broad")return g(e,"flow_feature_complete","Final feature completion requires broad validation.","Run the project-level gate and record validationScope: broad.");if(!Ve(a.featureReview))return g(e,"flow_feature_complete","Completion requires a passing featureReview with no blocking findings.","Fix or acknowledge the review findings before completing.");if(t){if(!a.finalReview)return g(e,"flow_feature_complete","Final feature completion requires a finalReview.","Run final review and include the finalReview payload.");if(!Ve(a.finalReview))return g(e,"flow_feature_complete","Final completion requires a passing finalReview.","Resolve final review findings before completing the session.");let n=e.plan?.finalReviewPolicy??"detailed";if(a.finalReview.reviewDepth!==n)return g(e,"flow_feature_complete",`Final review depth must match the plan policy '${n}'.`,"Record a finalReview whose reviewDepth matches the approved plan.")}return u(void 0)}function Ke(e,a){if(!e.plan||e.status!=="running"||!e.activeFeatureId)return l("No feature is currently running.");let t=O.parse(a);if(t.featureId!==e.activeFeatureId)return l(`Worker result feature '${t.featureId}' does not match active feature '${e.activeFeatureId}'.`);if(t.status==="needs_input"){let m={featureId:t.featureId,status:"needs_input",summary:t.summary,recordedAt:h(),artifactsChanged:t.artifactsChanged,validationRun:t.validationRun,validationScope:t.validationScope,featureReview:t.featureReview,finalReview:t.finalReview,outcome:t.outcome};return u(y({...e,status:"blocked",activeFeatureId:null,plan:{...e.plan,features:Q(e.plan.features,t.featureId,"blocked")},history:[...e.history,m]}))}let n=la(e,t);if(!n.ok)return n;let r={featureId:t.featureId,status:"completed",summary:t.summary,recordedAt:h(),artifactsChanged:t.artifactsChanged,validationRun:t.validationRun,validationScope:t.validationScope,featureReview:t.featureReview,finalReview:t.finalReview,outcome:t.outcome},i=Q(e.plan.features,t.featureId,"completed"),s=i.every((m)=>m.status==="completed"),d=h();return u(y({...e,status:s?"completed":"ready",activeFeatureId:null,plan:{...e.plan,features:i},history:[...e.history,r],closure:s?{kind:"completed",summary:t.summary,recordedAt:d}:null,lastError:null,timestamps:{...e.timestamps,completedAt:s?d:e.timestamps.completedAt}}))}function ca(e,a){let t=new Set([a]),n=!0;while(n){n=!1;for(let r of e){if(t.has(r.id))continue;if(r.dependsOn.some((i)=>t.has(i)))t.add(r.id),n=!0}}return t}function He(e,a){if(!e.plan)return l("There is no active plan to reset.");if(!e.plan.features.some((s)=>s.id===a))return l(`Feature '${a}' is not in the plan.`);let t=ca(e.plan.features,a),n=e.activeFeatureId&&t.has(e.activeFeatureId)?null:e.activeFeatureId,r=e.plan.features.map((s)=>t.has(s.id)?{...s,status:"pending"}:s),i=e.approval!=="approved"?"planning":n?"running":r.some((s)=>s.status==="blocked")?"blocked":"ready";return u(y({...e,status:i,activeFeatureId:n,plan:{...e.plan,features:r},closure:null,lastError:null,timestamps:{...e.timestamps,completedAt:null}}))}function Xe(e,a,t){if(a==="completed"){if(!e.plan||e.approval!=="approved")return l("Cannot close a Flow session as completed without an approved plan.");let r=e.plan.features.filter((i)=>i.status!=="completed");if(r.length>0)return l("Cannot close a Flow session as completed with unfinished features.",`Unfinished features: ${r.map((i)=>i.id).join(", ")}`);if(e.status!=="completed")return l("Cannot close a Flow session as completed before final completion gates pass.")}let n=h();return u(y({...e,status:a==="completed"?"completed":e.status,activeFeatureId:null,closure:{kind:a,summary:t??`Session closed as ${a}.`,recordedAt:n},timestamps:{...e.timestamps,completedAt:a==="completed"?n:e.timestamps.completedAt}}))}function b(e){if(!e)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"Start with /flow-plan <goal>."};let a=e.plan?.features??[],t=a.filter((s)=>s.status==="completed"),n=e.history.at(-1)??null,r=e.status==="blocked"?n:null,i=e.activeFeatureId?a.find((s)=>s.id===e.activeFeatureId):null;return{status:e.status,summary:e.closure?.summary??e.lastError?.summary??r?.summary??e.plan?.summary??"Flow session is active.",nextAction:da(e),session:{id:e.id,goal:e.goal,status:e.status,approval:e.approval,activeFeature:i??null,progress:{completed:t.length,total:a.length},features:a,closure:e.closure,lastError:e.lastError,latestHistoryEntry:n,historyCount:e.history.length,timestamps:e.timestamps}}}function da(e){if(!e.plan)return"Save a plan with flow_plan_save.";if(e.approval!=="approved")return"Approve the plan.";if(e.status==="ready")return"Start the next feature.";if(e.status==="running")return"Complete or reset the active feature.";if(e.status==="blocked")return"Reset the blocked feature or close the session.";if(e.status==="completed")return"Close/archive the session or start a new goal.";return"Inspect session state."}var ua=p.object({goal:p.string().trim().min(1).optional(),plan:E.optional()}).strict(),pa=p.object({featureId:p.string().min(1).optional()}).strict(),fa=p.object({featureId:p.string().min(1)}).strict(),ma=p.object({kind:p.enum(["completed","deferred","abandoned"]),summary:p.string().trim().min(1).optional()}).strict();function R(e){return{status:"error",summary:e.message,...e.recovery?{recovery:e.recovery}:{}}}async function S(e,a){return $e(e,async()=>a(await A(e)))}async function Ye(e){return b(await A(e))}async function Ze(e,a){let t=ua.parse(a??{});return S(e,async(n)=>{let r=t.goal??n?.goal;if(!r)return{status:"missing_goal",summary:"Provide a goal before saving a Flow plan.",nextAction:"/flow-plan <goal>"};if(n?.status==="completed")await Z(e,n);let i=n?.status==="completed"?L(r):n??L(r);if(i.goal!==r){if(i.approval==="approved")return{status:"error",summary:"An approved Flow session already exists for a different goal. Close it before starting a new one."}}let s=i.goal===r?i:L(r),d=t.plan?Je(s,t.plan):{ok:!0,value:s};if(!d.ok)return R(d);let m=await w(e,d.value);return{...b(m),status:"ok",summary:t.plan?"Flow plan saved.":"Flow session ready."}})}async function Qe(e){return S(e,async(a)=>{if(!a)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let t=Be(a);if(!t.ok)return R(t);let n=await w(e,t.value);return{...b(n),status:"ok",summary:"Flow plan approved."}})}async function et(e,a){let t=pa.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=Ge(n,t.featureId);if(!r.ok)return R(r);let i=await w(e,r.value.session);return{...b(i),status:"ok",summary:`Started feature '${r.value.feature.id}'.`,feature:r.value.feature}})}async function tt(e,a){let t=O.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=Ke(n,t);if(!r.ok){if(r.session)await w(e,r.session);return R(r)}let i=await w(e,r.value);return{...b(i),status:"ok",summary:"Feature result recorded."}})}async function at(e,a){let t=fa.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=He(n,t.featureId);if(!r.ok)return R(r);let i=await w(e,r.value);return{...b(i),status:"ok",summary:`Feature '${t.featureId}' reset.`}})}async function nt(e,a){let t=ma.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=Xe(n,t.kind,t.summary);if(!r.ok)return R(r);return await Z(e,r.value),{status:"ok",summary:`Flow session closed as ${t.kind}.`,archivedSessionId:r.value.id,closure:r.value.closure}})}import{tool as f}from"@opencode-ai/plugin";var c=f.schema;function rt(e){return JSON.stringify(e,null,2)}function ha(e){return rt({status:"error",summary:e instanceof Error?e.message:String(e)})}async function k(e,a){try{return rt(await a(Ne(e)))}catch(t){return ha(t)}}function ot(e){return z(e)("info","Creating minimal Flow v4 tool surface."),{flow_status:f({description:"Show the active Flow session and next action",args:{},execute:(a,t)=>k(t,Ye)}),flow_plan_save:f({description:"Create or update a draft Flow plan for the active goal",args:{goal:c.string().optional(),plan:c.any().optional()},execute:(a,t)=>k(t,(n)=>Ze(n,a))}),flow_plan_approve:f({description:"Approve the current draft Flow plan",args:{},execute:(a,t)=>k(t,Qe)}),flow_run_start:f({description:"Start the next runnable approved Flow feature",args:{featureId:c.string().optional()},execute:(a,t)=>k(t,(n)=>et(n,a))}),flow_feature_complete:f({description:"Record a completed or blocked active feature with validation and review evidence",args:{status:c.enum(["ok","needs_input"]),featureId:c.string(),summary:c.string(),artifactsChanged:c.array(c.object({path:c.string()})).optional(),validationRun:c.array(c.object({command:c.string(),status:c.enum(["passed","failed"]),summary:c.string()})).optional(),validationScope:c.enum(["targeted","broad"]).optional(),featureReview:c.any().optional(),finalReview:c.any().optional(),outcome:c.any().optional()},execute:(a,t)=>k(t,(n)=>tt(n,a))}),flow_feature_reset:f({description:"Reset one feature and its dependents to pending",args:{featureId:c.string()},execute:(a,t)=>k(t,(n)=>at(n,a))}),flow_session_close:f({description:"Close and archive the active Flow session",args:{kind:c.enum(["completed","deferred","abandoned"]),summary:c.string().optional()},execute:(a,t)=>k(t,(n)=>nt(n,a))})}}async function it(e){let a=e.worktree??e.directory;if(!a)return null;try{let t=await A(a);if(!t)return null;return["Flow session facts:",`- goal: ${t.goal}`,`- status: ${t.status}`,`- approval: ${t.approval}`,`- active feature: ${t.activeFeatureId??"none"}`,`- progress: ${t.plan?.features.filter((n)=>n.status==="completed").length??0}/${t.plan?.features.length??0}`,"Call flow_status before any Flow action."].join(`
-`)}catch{return null}}function ga(e){return async(a,t)=>{let n=await it(e);if(n)t.system.push(n)}}var va=async(e)=>{let a=z(e);return a("info","Flow v4 plugin initialized."),await Se(Re(),a),{config:Le(e),tool:ot(e),"experimental.chat.system.transform":ga(e),"experimental.session.compacting":async(t,n)=>{let r=await it(e);if(!r)return;n.context=[...n.context??[],r]}}},wa=va;export{wa as default};
-
-//# debugId=7C8AC5AB436E3BC964756E2164756E21
+`;var ke=[{name:"flow",files:[{relativePath:"SKILL.md",content:ie},{relativePath:"references/recovery-playbook.md",content:re},{relativePath:"references/parallel-orchestration.md",content:ne},{relativePath:"references/handoff-format.md",content:ae},{relativePath:"references/verification-gates.md",content:oe}]},{name:"flow-plan",files:[{relativePath:"SKILL.md",content:pe},{relativePath:"references/planning-examples.md",content:ue},{relativePath:"references/parallel-discovery.md",content:de}]},{name:"flow-run",files:[{relativePath:"SKILL.md",content:we},{relativePath:"references/validation-rubric.md",content:ge},{relativePath:"references/audit-rubric.md",content:he}]},{name:"flow-review",files:[{relativePath:"SKILL.md",content:me},{relativePath:"references/review-rubric.md",content:fe}]},{name:"flow-deslop",files:[{relativePath:"SKILL.md",content:ce},{relativePath:"references/smell-rubric.md",content:le},{relativePath:"references/refactor-workflow.md",content:se}]},{name:"flow-ui-quality",files:[{relativePath:"SKILL.md",content:be},{relativePath:"references/ui-rubric.md",content:ve},{relativePath:"references/visual-verification.md",content:ye}]}];var Nt=".flow-skill-version";function Re(){return process.env.HOME??process.env.USERPROFILE??""}function Dt(e=Re()){return I(e,".config","opencode","skills")}function Se(e){return Pt("sha256").update(e).digest("hex")}function xe(e,a){return[`version=${a}`,...e.files.map((t)=>`file=${t.relativePath} sha256=${Se(t.content)}`),""].join(`
+`)}async function V(e){try{return await Et(e,"utf8")}catch(a){if(a.code==="ENOENT")return null;throw a}}function $t(e){let a=new Map;if(!e)return a;for(let t of e.split(/\r?\n/)){let n=/^file=(.+) sha256=([a-f0-9]{64})$/.exec(t)??/^file=(.+)=sha256:([a-f0-9]{64})$/.exec(t);if(n?.[1]&&n[2])a.set(n[1],n[2]);let r=/^hash=sha256:([a-f0-9]{64})$/.exec(t);if(r?.[1]&&!a.has("SKILL.md"))a.set("SKILL.md",r[1])}return a}function Fe(e,a){let t=Ot(I(e,...a.split("/")));if(t!==e&&t.startsWith(`${e}${qt}`))return t;throw Error(`Unsafe skill file path '${a}'.`)}async function Wt(e,a,t){let n=I(t,e.name),r=I(n,Nt),i=await V(r),s=$t(i);if(await V(I(n,"SKILL.md"))!==null&&i===null)return{name:e.name,action:"skipped_foreign"};let m=!1,ee=!1;for(let x of e.files){let _=Fe(n,x.relativePath),P=await V(_);if(P===x.content)continue;m=!0;let te=s.get(x.relativePath);if(P!==null&&(te?Se(P)!==te:i!==null))await M(`${_}.backup`,P,"utf8"),ee=!0}if(!m&&i===xe(e,a))return{name:e.name,action:"unchanged"};let dt=i!==null;for(let x of e.files){let _=Fe(n,x.relativePath);await Tt(jt(_),{recursive:!0}),await M(_,x.content,"utf8")}return await M(r,xe(e,a),"utf8"),{name:e.name,action:ee?"updated_with_backup":dt?"updated":"installed"}}function _e(){if(process.env.npm_package_version)return process.env.npm_package_version;try{let e=Ut(import.meta.url);for(let a of["../package.json","../../package.json"])try{let t=e(a);if(t.version)return t.version}catch{}}catch{}return"0.0.0"}async function zt(e,a=Re()){let t=Dt(a);return Promise.all(ke.map((n)=>Wt(n,e,t)))}async function Ie(e,a){try{let n=(await zt(e)).filter((r)=>r.action!=="unchanged"&&r.action!=="skipped_foreign");if(n.length>0)a("info",`Flow synced skills (${n.map((r)=>`${r.name}:${r.action}`).join(", ")}). Restart OpenCode if skills were just installed.`)}catch(t){a("warn",`Flow skill sync failed: ${t instanceof Error?t.message:String(t)}`)}}import{randomUUID as Ht}from"node:crypto";import{mkdir as q,open as Ue,readFile as Ne,rename as Xt,rm as N,writeFile as je}from"node:fs/promises";import{homedir as Yt}from"node:os";import{dirname as Oe,isAbsolute as _n,join as F,parse as Zt,resolve as De}from"node:path";import{setTimeout as Qt}from"node:timers/promises";function Lt(e){let a=[],t=0;while(t<e.length){let n=e[t];if(n==="{"){a.push({isObject:!0,keys:new Set,awaitingKey:!0}),t+=1;continue}if(n==="["){a.push({isObject:!1,keys:new Set,awaitingKey:!1}),t+=1;continue}if(n==="}"||n==="]"){a.pop(),t+=1;continue}if(n===","){let r=a.at(-1);if(r?.isObject)r.awaitingKey=!0;t+=1;continue}if(n===":"){let r=a.at(-1);if(r?.isObject)r.awaitingKey=!1;t+=1;continue}if(n==='"'){let r=t+1;while(r<e.length){if(e[r]==="\\"){r+=2;continue}if(e[r]==='"')break;r+=1}let i=a.at(-1);if(i?.isObject&&i.awaitingKey){let s=JSON.parse(e.slice(t,r+1));if(i.keys.has(s))return s;i.keys.add(s)}t=r+1;continue}t+=1}return null}function Ce(e,a){if(e.trim().length===0)return{ok:!1,error:`${a} is empty.`};let t;try{t=JSON.parse(e)}catch(r){return{ok:!1,error:r instanceof Error?`${a} is not valid JSON: ${r.message}`:`${a} is not valid JSON.`}}if(t===null||typeof t!=="object"||Array.isArray(t))return{ok:!1,error:`${a} must be a JSON object.`};let n=Lt(e);if(n)return{ok:!1,error:`${a} has duplicate key '${n}'.`};return{ok:!0,value:t}}import{z as o}from"zod";var w=/^[a-z0-9]+(?:-[a-z0-9]+)*$/,C="Feature ids must be lowercase kebab-case",Ae=o.enum(["pending","in_progress","completed","blocked"]),Mt=o.enum(["planning","ready","running","blocked","completed"]),Vt=o.enum(["passed","failed"]),Bt=o.enum(["passed","failed"]),B=o.enum(["targeted","broad"]),H=o.enum(["broad","detailed"]),Gt=o.object({summary:o.string().min(1),severity:o.enum(["blocking","advisory"]).default("blocking")}).strict(),T=o.object({status:Vt,summary:o.string().min(1),blockingFindings:o.array(Gt).default([])}).strict(),G=T.extend({reviewDepth:H}).strict(),J=o.object({command:o.string().min(1),status:Bt,summary:o.string().min(1)}).strict(),K=o.object({path:o.string().min(1)}).strict(),Pe=o.object({id:o.string().regex(w,C),title:o.string().min(1),summary:o.string().min(1),status:Ae.default("pending"),targets:o.array(o.string().min(1)).default([]),validation:o.array(o.string().min(1)).default([]),dependsOn:o.array(o.string().regex(w)).default([])}).strict(),Te=o.object({summary:o.string().min(1),overview:o.string().min(1),requirements:o.array(o.string().min(1)).default([]),decisions:o.array(o.string().min(1)).default([]),finalReviewPolicy:H.default("detailed"),features:o.array(Pe).min(1)}).strict(),E=Te.omit({features:!0}).extend({finalReviewPolicy:H.optional(),features:o.array(Pe.omit({status:!0}).extend({status:Ae.optional(),targets:o.array(o.string().min(1)).optional(),validation:o.array(o.string().min(1)).optional(),dependsOn:o.array(o.string().regex(w)).optional()}).strict()).min(1)}),Ee=o.object({kind:o.enum(["completed","blocked","needs_input","replan_required"]).default("completed"),summary:o.string().min(1).optional(),resolutionHint:o.string().min(1).optional()}).strict(),Jt=o.object({kind:o.enum(["blocked","needs_input","replan_required"]).default("needs_input"),summary:o.string().min(1),resolutionHint:o.string().min(1).optional()}).strict(),U=o.discriminatedUnion("status",[o.object({status:o.literal("ok"),featureId:o.string().regex(w,C),summary:o.string().min(1),artifactsChanged:o.array(K).default([]),validationRun:o.array(J).default([]),validationScope:B,featureReview:T,finalReview:G.optional(),outcome:Ee.optional()}).strict(),o.object({status:o.literal("needs_input"),featureId:o.string().regex(w,C),summary:o.string().min(1),artifactsChanged:o.array(K).default([]),validationRun:o.array(J).default([]),validationScope:B.optional(),featureReview:T.optional(),finalReview:G.optional(),outcome:Jt}).strict()]).superRefine((e,a)=>{if(e.status==="ok"&&e.outcome?.kind&&e.outcome.kind!=="completed")a.addIssue({code:"custom",path:["outcome","kind"],message:'ok worker results must use outcome.kind "completed".'})}),Kt=o.object({featureId:o.string().regex(w,C),status:o.enum(["completed","blocked","needs_input"]),summary:o.string().min(1),recordedAt:o.string().min(1),artifactsChanged:o.array(K).default([]),validationRun:o.array(J).default([]),validationScope:B.optional(),featureReview:T.optional(),finalReview:G.optional(),outcome:Ee.optional()}).strict(),j=o.object({version:o.literal(2),id:o.string().min(1),goal:o.string().min(1),status:Mt,approval:o.enum(["pending","approved"]),plan:Te.nullable(),activeFeatureId:o.string().regex(w,C).nullable(),history:o.array(Kt).default([]),closure:o.object({kind:o.enum(["completed","deferred","abandoned"]),summary:o.string().min(1),recordedAt:o.string().min(1)}).strict().nullable(),lastError:o.object({tool:o.string().min(1),summary:o.string().min(1),recovery:o.string().min(1).optional(),recordedAt:o.string().min(1)}).strict().nullable().default(null),timestamps:o.object({createdAt:o.string().min(1),updatedAt:o.string().min(1),completedAt:o.string().min(1).nullable()}).strict()}).strict();class D extends Error{code="INVALID_FLOW_WORKSPACE_ROOT";constructor(e){super(e);this.name="InvalidFlowWorkspaceRootError"}}function X(e){let a=e?.trim();if(!a)return null;let t=De(a);return Zt(t).root===t?null:t}function $(e){let a=X(e);if(!a)throw new D("Flow requires a non-root workspace path.");if(a===De(process.env.HOME??Yt()))throw new D("Flow refuses to use $HOME itself as a mutable workspace root.");return a}function $e(e){let a=X(e.worktree)??X(e.directory);if(!a)throw new D("Flow could not resolve a workspace root from tool context.");return $(a)}function W(e){return F(e,".flow")}function Y(e){return F(W(e),"session.json")}function We(e){return F(W(e),"history")}function ea(e,a){if(!/^[a-zA-Z0-9_-]+$/.test(a))throw Error("Invalid session id.");return F(We(e),`${a}.json`)}async function ze(e,a){await q(Oe(e),{recursive:!0});let t=`${e}.${process.pid}.${Ht()}.tmp`,n=await Ue(t,"w");try{await n.writeFile(a,"utf8"),await n.sync()}catch(i){throw await n.close(),await N(t,{force:!0}),i}await n.close();try{await Xt(t,e)}catch(i){throw await N(t,{force:!0}),i}let r=await Ue(Oe(e),"r");try{await r.sync()}finally{await r.close()}}var O=new Map,ta=30000,aa=25;async function na(e){let a=W(e),t=F(a,"session.lock"),n=Date.now();while(!0)try{return await q(t,{recursive:!1}),async()=>{await N(t,{recursive:!0,force:!0})}}catch(r){let i=r.code;if(i==="ENOENT"){await q(a,{recursive:!0});continue}if(i!=="EEXIST")throw r;if(Date.now()-n>ta)throw Error(`Timed out waiting for Flow session lock at ${t}.`);await Qt(aa)}}async function Le(e,a){let t=O.get(e)??Promise.resolve(),n=()=>{},r=new Promise((d)=>{n=d}),i=t.catch(()=>{return}).then(()=>r);O.set(e,i);let s=null;try{return await t.catch(()=>{return}),s=await na(e),await a()}finally{try{await s?.()}finally{if(n(),O.get(e)===i)O.delete(e)}}}async function A(e){let a=$(e),t;try{t=await Ne(Y(a),"utf8")}catch(r){if(r.code==="ENOENT")return null;throw r}let n=Ce(t,"Flow session file");if(!n.ok)throw Error(n.error);return j.parse(n.value)}async function v(e,a){let t=$(e),n=j.parse(a);return await ze(Y(t),`${JSON.stringify(n,null,2)}
+`),await Me(t),n}async function Z(e,a){let t=$(e);await q(We(t),{recursive:!0}),await ze(ea(t,a.id),`${JSON.stringify(j.parse(a),null,2)}
+`),await N(Y(t),{force:!0}),await Me(t)}var qe=["session.json","history/","session.lock/",".gitignore",""].join(`
+`);async function Me(e){let a=F(W(e),".gitignore");try{if((await Ne(a,"utf8")).trim()==="session.lock/")await je(a,qe,"utf8")}catch(t){if(t.code!=="ENOENT")throw t;await je(a,qe,"utf8")}}var ra={"flow-reviewer":{mode:"subagent",hidden:!0,description:"Internal read-only reviewer for Flow-guided work.",prompt:"Load `flow-review`. Inspect the current work read-only, report coverage, evidence-backed findings, confidence, gaps, and manager follow-ups, and do not mutate Flow state.",permission:{edit:"deny",bash:"deny",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-evidence-worker":{mode:"subagent",hidden:!0,description:"Internal read-only evidence worker for Flow planning and execution support.",prompt:"Use Flow evidence mode. Inspect only the assigned slice, do not edit files, do not call state-changing Flow tools, and return coverage, evidence inspected, confidence-tagged findings or facts, gaps, and manager follow-ups.",permission:{edit:"deny",bash:"deny",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-validation-worker":{mode:"subagent",hidden:!0,description:"Internal validation worker for Flow check selection and command evidence.",prompt:"Use Flow validation mode. Run only manager-specified commands or propose focused checks, do not edit files, do not call state-changing Flow tools, and report exact command, status, raw outcome summary, coverage, confidence, gaps, and manager follow-ups.",permission:{edit:"deny",bash:"ask",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-audit-worker":{mode:"subagent",hidden:!0,description:"Internal read-only audit worker for refuted or surviving finding candidates.",prompt:"Use Flow audit mode. Inspect only the assigned slice, actively refute candidate findings before reporting them, do not edit files, do not call state-changing Flow tools, and return coverage, evidence, guards checked, confidence, gaps, and manager follow-ups.",permission:{edit:"deny",bash:"ask",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-candidate-worker":{mode:"subagent",hidden:!0,description:"Internal candidate implementation worker for isolated Flow worktrees or exact non-overlapping path ownership.",prompt:"Use Flow candidate-implementation mode only when the manager assigned an isolated worktree or exact non-overlapping path ownership. Do not edit .flow/**, do not call state-changing Flow tools, do not complete Flow state, and return changed or proposed patch, verification run, coverage, confidence, merge risks, and manager follow-ups.",permission:{edit:"ask",bash:"ask",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}},"flow-verifier-worker":{mode:"subagent",hidden:!0,description:"Internal verifier worker for checking Flow worker claims against cited evidence.",prompt:"Use Flow verifier mode. Verify only the assigned claims against the provided sources, commands, counts, or current docs. Do not generate new scope, do not edit files, do not call state-changing Flow tools, and return supported, partly-supported, unsupported, or source-not-found per claim with evidence, confidence, gaps, and manager follow-ups.",permission:{edit:"deny",bash:"ask",task:{"*":"deny"},"flow_*":"deny",flow_status:"allow"}}},oa={"flow-auto":{description:"Drive Flow skills against the minimal runtime ledger",template:"Load the `flow` skill and drive the Flow loop until completion or a real blocker: $ARGUMENTS"},"flow-plan":{description:"Create or approve a Flow plan",template:"Load the `flow-plan` skill and plan: $ARGUMENTS"},"flow-run":{description:"Run one approved Flow feature",template:"Load the `flow-run` skill and execute the next approved feature. $ARGUMENTS"},"flow-review":{description:"Run a read-only Flow review",agent:"flow-reviewer",subtask:!0,template:"Load the `flow-review` skill and review: $ARGUMENTS"},"flow-status":{description:"Inspect the active Flow session",template:"Call flow_status and report the session state and next action."}};function ia(){return{agent:Object.fromEntries(Object.entries(ra).map(([e,a])=>{let t=a.permission?{...a.permission,...a.permission.task?{task:{...a.permission.task}}:{}}:void 0;return[e,{...a,...t?{permission:t}:{}}]})),command:Object.fromEntries(Object.entries(oa).map(([e,a])=>[e,{...a}]))}}function Ve(e){let a=ia();e.agent={...e.agent??{},...a.agent},e.command={...e.command??{},...a.command}}function Be(e){return async(a)=>{Ve(a)}}function z(e){let a=e?.client,t=a?.app?.log;return(n,r)=>{if(typeof t!=="function")return;try{t.call(a?.app,{body:{service:"opencode-plugin-flow",level:n,message:r}})}catch{}}}import{z as p}from"zod";import{randomUUID as la}from"node:crypto";var sa=null;function h(){return sa?.()??new Date().toISOString()}function u(e){return{ok:!0,value:e}}function l(e,a,t){return{ok:!1,message:e,...a?{recovery:a}:{},...t?{session:t}:{}}}function ca(e){let a=E.parse(e);return{summary:a.summary,overview:a.overview,requirements:a.requirements??[],decisions:a.decisions??[],finalReviewPolicy:a.finalReviewPolicy??"detailed",features:a.features.map((t)=>({id:t.id,title:t.title,summary:t.summary,status:"pending",targets:t.targets??[],validation:t.validation??[],dependsOn:t.dependsOn??[]}))}}function da(e){let a=new Set;for(let s of e.features){if(a.has(s.id))return`Duplicate feature id '${s.id}'.`;a.add(s.id)}for(let s of e.features)for(let d of s.dependsOn){if(!a.has(d))return`Feature '${s.id}' depends on unknown feature '${d}'.`;if(d===s.id)return`Feature '${s.id}' cannot depend on itself.`}let t=new Set,n=new Set,r=new Map(e.features.map((s)=>[s.id,s]));function i(s){if(n.has(s))return!1;if(t.has(s))return!0;t.add(s);for(let d of r.get(s)?.dependsOn??[])if(i(d))return!0;return t.delete(s),n.add(s),!1}return e.features.some((s)=>i(s.id))?"Feature dependencies contain a cycle.":null}function L(e){let a=h();return{version:2,id:la(),goal:e,status:"planning",approval:"pending",plan:null,activeFeatureId:null,history:[],closure:null,lastError:null,timestamps:{createdAt:a,updatedAt:a,completedAt:null}}}function y(e){return{...e,timestamps:{...e.timestamps,updatedAt:h()}}}function Ke(e,a){if(e.approval==="approved"||e.status!=="planning")return l("Approved plans cannot be changed. Reset or start a new session.");let t=ca(a),n=da(t);if(n)return l(n);return u(y({...e,status:"planning",approval:"pending",plan:t,activeFeatureId:null,history:[],closure:null,lastError:null,timestamps:{...e.timestamps,completedAt:null}}))}function He(e){if(!e.plan)return l("There is no draft plan to approve.");if(e.approval==="approved"&&e.status==="ready")return u(e);if(e.status!=="planning")return l("Only planning sessions can be approved.");return u(y({...e,approval:"approved",status:"ready"}))}function Ge(e,a){return e.status==="pending"&&e.dependsOn.every((t)=>a.has(t))}function ua(e,a){let t=new Set(e.filter((i)=>i.status==="completed").map((i)=>i.id)),n=new Map(e.map((i)=>[i.id,i]));if(a){let i=n.get(a);if(!i)return l(`Feature '${a}' is not in the plan.`);if(i.status==="completed")return l(`Feature '${a}' is already completed.`);if(i.status!=="pending")return l(`Feature '${a}' is ${i.status} and must be reset before it can run.`);if(!Ge(i,t))return l(`Feature '${a}' has incomplete dependencies.`);return u(i)}let r=e.find((i)=>Ge(i,t));return r?u(r):l("No runnable feature is available.")}function Q(e,a,t){return e.map((n)=>n.id===a?{...n,status:t}:n.status==="in_progress"&&t==="in_progress"?{...n,status:"pending"}:n)}function Xe(e,a){if(e.status==="completed")return l("This Flow session is already completed.");if(!e.plan||e.approval!=="approved")return l("There is no approved plan to run.");if(e.status==="blocked")return l("Blocked features must be reset before rerun.","Call flow_feature_reset for the blocked feature, then start it again.");if(e.activeFeatureId){if(!a||a===e.activeFeatureId){let i=e.plan.features.find((s)=>s.id===e.activeFeatureId);if(i)return u({session:e,feature:i})}return l(`Feature '${e.activeFeatureId}' is already in progress.`)}let t=ua(e.plan.features,a);if(!t.ok)return t;let n={...e.plan,features:Q(e.plan.features,t.value.id,"in_progress")},r=y({...e,status:"running",plan:n,activeFeatureId:t.value.id,lastError:null});return u({session:r,feature:r.plan?.features.find((i)=>i.id===t.value.id)??t.value})}function Je(e){return e.status==="passed"&&e.blockingFindings.length===0}function pa(e,a){if(!e.plan)return!1;return e.plan.features.every((t)=>t.id===a||t.status==="completed")}function g(e,a,t,n){return l(t,n,{...e,lastError:{tool:a,summary:t,recovery:n,recordedAt:h()}})}function fa(e,a){let t=pa(e,a.featureId);if(a.validationRun.length===0)return g(e,"flow_feature_complete","Completion requires recorded validation evidence.","Run the targeted or broad validation command and record the result.");if(!a.validationRun.every((n)=>n.status==="passed"))return g(e,"flow_feature_complete","Completion requires all recorded validation to pass.","Fix failures, rerun validation, then complete the feature.");if(!t&&a.validationScope!=="targeted")return g(e,"flow_feature_complete","Non-final feature completion requires targeted validation.","Record validationScope: targeted for ordinary feature completion.");if(t&&a.validationScope!=="broad")return g(e,"flow_feature_complete","Final feature completion requires broad validation.","Run the project-level gate and record validationScope: broad.");if(!Je(a.featureReview))return g(e,"flow_feature_complete","Completion requires a passing featureReview with no blocking findings.","Fix or acknowledge the review findings before completing.");if(t){if(!a.finalReview)return g(e,"flow_feature_complete","Final feature completion requires a finalReview.","Run final review and include the finalReview payload.");if(!Je(a.finalReview))return g(e,"flow_feature_complete","Final completion requires a passing finalReview.","Resolve final review findings before completing the session.");let n=e.plan?.finalReviewPolicy??"detailed";if(a.finalReview.reviewDepth!==n)return g(e,"flow_feature_complete",`Final review depth must match the plan policy '${n}'.`,"Record a finalReview whose reviewDepth matches the approved plan.")}return u(void 0)}function Ye(e,a){if(!e.plan||e.status!=="running"||!e.activeFeatureId)return l("No feature is currently running.");let t=U.parse(a);if(t.featureId!==e.activeFeatureId)return l(`Worker result feature '${t.featureId}' does not match active feature '${e.activeFeatureId}'.`);if(t.status==="needs_input"){let m={featureId:t.featureId,status:"needs_input",summary:t.summary,recordedAt:h(),artifactsChanged:t.artifactsChanged,validationRun:t.validationRun,validationScope:t.validationScope,featureReview:t.featureReview,finalReview:t.finalReview,outcome:t.outcome};return u(y({...e,status:"blocked",activeFeatureId:null,plan:{...e.plan,features:Q(e.plan.features,t.featureId,"blocked")},history:[...e.history,m]}))}let n=fa(e,t);if(!n.ok)return n;let r={featureId:t.featureId,status:"completed",summary:t.summary,recordedAt:h(),artifactsChanged:t.artifactsChanged,validationRun:t.validationRun,validationScope:t.validationScope,featureReview:t.featureReview,finalReview:t.finalReview,outcome:t.outcome},i=Q(e.plan.features,t.featureId,"completed"),s=i.every((m)=>m.status==="completed"),d=h();return u(y({...e,status:s?"completed":"ready",activeFeatureId:null,plan:{...e.plan,features:i},history:[...e.history,r],closure:s?{kind:"completed",summary:t.summary,recordedAt:d}:null,lastError:null,timestamps:{...e.timestamps,completedAt:s?d:e.timestamps.completedAt}}))}function ma(e,a){let t=new Set([a]),n=!0;while(n){n=!1;for(let r of e){if(t.has(r.id))continue;if(r.dependsOn.some((i)=>t.has(i)))t.add(r.id),n=!0}}return t}function Ze(e,a){if(!e.plan)return l("There is no active plan to reset.");if(!e.plan.features.some((s)=>s.id===a))return l(`Feature '${a}' is not in the plan.`);let t=ma(e.plan.features,a),n=e.activeFeatureId&&t.has(e.activeFeatureId)?null:e.activeFeatureId,r=e.plan.features.map((s)=>t.has(s.id)?{...s,status:"pending"}:s),i=e.approval!=="approved"?"planning":n?"running":r.some((s)=>s.status==="blocked")?"blocked":"ready";return u(y({...e,status:i,activeFeatureId:n,plan:{...e.plan,features:r},closure:null,lastError:null,timestamps:{...e.timestamps,completedAt:null}}))}function Qe(e,a,t){if(a==="completed"){if(!e.plan||e.approval!=="approved")return l("Cannot close a Flow session as completed without an approved plan.");let r=e.plan.features.filter((i)=>i.status!=="completed");if(r.length>0)return l("Cannot close a Flow session as completed with unfinished features.",`Unfinished features: ${r.map((i)=>i.id).join(", ")}`);if(e.status!=="completed")return l("Cannot close a Flow session as completed before final completion gates pass.")}let n=h();return u(y({...e,status:a==="completed"?"completed":e.status,activeFeatureId:null,closure:{kind:a,summary:t??`Session closed as ${a}.`,recordedAt:n},timestamps:{...e.timestamps,completedAt:a==="completed"?n:e.timestamps.completedAt}}))}function b(e){if(!e)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"Start with /flow-plan <goal>."};let a=e.plan?.features??[],t=a.filter((s)=>s.status==="completed"),n=e.history.at(-1)??null,r=e.status==="blocked"?n:null,i=e.activeFeatureId?a.find((s)=>s.id===e.activeFeatureId):null;return{status:e.status,summary:e.closure?.summary??e.lastError?.summary??r?.summary??e.plan?.summary??"Flow session is active.",nextAction:ha(e),session:{id:e.id,goal:e.goal,status:e.status,approval:e.approval,activeFeature:i??null,progress:{completed:t.length,total:a.length},features:a,closure:e.closure,lastError:e.lastError,latestHistoryEntry:n,historyCount:e.history.length,timestamps:e.timestamps}}}function ha(e){if(!e.plan)return"Save a plan with flow_plan_save.";if(e.approval!=="approved")return"Approve the plan.";if(e.status==="ready")return"Start the next feature.";if(e.status==="running")return"Complete or reset the active feature.";if(e.status==="blocked")return"Reset the blocked feature or close the session.";if(e.status==="completed")return"Close/archive the session or start a new goal.";return"Inspect session state."}var ga=p.object({goal:p.string().trim().min(1).optional(),plan:E.optional()}).strict(),wa=p.object({featureId:p.string().min(1).optional()}).strict(),va=p.object({featureId:p.string().min(1)}).strict(),ya=p.object({kind:p.enum(["completed","deferred","abandoned"]),summary:p.string().trim().min(1).optional()}).strict();function R(e){return{status:"error",summary:e.message,...e.recovery?{recovery:e.recovery}:{}}}async function S(e,a){return Le(e,async()=>a(await A(e)))}async function et(e){return b(await A(e))}async function tt(e,a){let t=ga.parse(a??{});return S(e,async(n)=>{let r=t.goal??n?.goal;if(!r)return{status:"missing_goal",summary:"Provide a goal before saving a Flow plan.",nextAction:"/flow-plan <goal>"};if(n?.status==="completed")await Z(e,n);let i=n?.status==="completed"?L(r):n??L(r);if(i.goal!==r){if(i.approval==="approved")return{status:"error",summary:"An approved Flow session already exists for a different goal. Close it before starting a new one."}}let s=i.goal===r?i:L(r),d=t.plan?Ke(s,t.plan):{ok:!0,value:s};if(!d.ok)return R(d);let m=await v(e,d.value);return{...b(m),status:"ok",summary:t.plan?"Flow plan saved.":"Flow session ready."}})}async function at(e){return S(e,async(a)=>{if(!a)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let t=He(a);if(!t.ok)return R(t);let n=await v(e,t.value);return{...b(n),status:"ok",summary:"Flow plan approved."}})}async function nt(e,a){let t=wa.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=Xe(n,t.featureId);if(!r.ok)return R(r);let i=await v(e,r.value.session);return{...b(i),status:"ok",summary:`Started feature '${r.value.feature.id}'.`,feature:r.value.feature}})}async function rt(e,a){let t=U.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=Ye(n,t);if(!r.ok){if(r.session)await v(e,r.session);return R(r)}let i=await v(e,r.value);return{...b(i),status:"ok",summary:"Feature result recorded."}})}async function ot(e,a){let t=va.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=Ze(n,t.featureId);if(!r.ok)return R(r);let i=await v(e,r.value);return{...b(i),status:"ok",summary:`Feature '${t.featureId}' reset.`}})}async function it(e,a){let t=ya.parse(a??{});return S(e,async(n)=>{if(!n)return{status:"missing_session",summary:"No active Flow session exists.",nextAction:"/flow-plan <goal>"};let r=Qe(n,t.kind,t.summary);if(!r.ok)return R(r);return await Z(e,r.value),{status:"ok",summary:`Flow session closed as ${t.kind}.`,archivedSessionId:r.value.id,closure:r.value.closure}})}import{tool as f}from"@opencode-ai/plugin";var c=f.schema;function st(e){return JSON.stringify(e,null,2)}function ba(e){return st({status:"error",summary:e instanceof Error?e.message:String(e)})}async function k(e,a){try{return st(await a($e(e)))}catch(t){return ba(t)}}function lt(e){return z(e)("info","Creating minimal Flow v4 tool surface."),{flow_status:f({description:"Show the active Flow session and next action",args:{},execute:(a,t)=>k(t,et)}),flow_plan_save:f({description:"Create or update a draft Flow plan for the active goal",args:{goal:c.string().optional(),plan:c.any().optional()},execute:(a,t)=>k(t,(n)=>tt(n,a))}),flow_plan_approve:f({description:"Approve the current draft Flow plan",args:{},execute:(a,t)=>k(t,at)}),flow_run_start:f({description:"Start the next runnable approved Flow feature",args:{featureId:c.string().optional()},execute:(a,t)=>k(t,(n)=>nt(n,a))}),flow_feature_complete:f({description:"Record a completed or blocked active feature with validation and review evidence",args:{status:c.enum(["ok","needs_input"]),featureId:c.string(),summary:c.string(),artifactsChanged:c.array(c.object({path:c.string()})).optional(),validationRun:c.array(c.object({command:c.string(),status:c.enum(["passed","failed"]),summary:c.string()})).optional(),validationScope:c.enum(["targeted","broad"]).optional(),featureReview:c.any().optional(),finalReview:c.any().optional(),outcome:c.any().optional()},execute:(a,t)=>k(t,(n)=>rt(n,a))}),flow_feature_reset:f({description:"Reset one feature and its dependents to pending",args:{featureId:c.string()},execute:(a,t)=>k(t,(n)=>ot(n,a))}),flow_session_close:f({description:"Close and archive the active Flow session",args:{kind:c.enum(["completed","deferred","abandoned"]),summary:c.string().optional()},execute:(a,t)=>k(t,(n)=>it(n,a))})}}async function ct(e){let a=e.worktree??e.directory;if(!a)return null;try{let t=await A(a);if(!t)return null;return["Flow session facts:",`- goal: ${t.goal}`,`- status: ${t.status}`,`- approval: ${t.approval}`,`- active feature: ${t.activeFeatureId??"none"}`,`- progress: ${t.plan?.features.filter((n)=>n.status==="completed").length??0}/${t.plan?.features.length??0}`,"Call flow_status before any Flow action."].join(`
+`)}catch{return null}}function ka(e){return async(a,t)=>{let n=await ct(e);if(n)t.system.push(n)}}var xa=async(e)=>{let a=z(e);return a("info","Flow v4 plugin initialized."),await Ie(_e(),a),{config:Be(e),tool:lt(e),"experimental.chat.system.transform":ka(e),"experimental.session.compacting":async(t,n)=>{let r=await ct(e);if(!r)return;n.context=[...n.context??[],r]}}},Fa=xa;export{Fa as default};
+
+//# debugId=77F331211D1168FA64756E2164756E21