openplanr 1.2.7 → 1.2.8

package/dist/services/cascade-service.js

@@ -0,0 +1,189 @@
+/**
+ * Cascade execution for `planr revise` (EPIC-003, FEAT-012).
+ *
+ * Responsibilities:
+ *
+ *   1. **Build cascade order** — top-down: epic → features → stories → tasks.
+ *      The artifact hierarchy is a strict tree; no cycle detection is needed.
+ *   2. **Execute the cascade** — for each artifact in order, call the
+ *      caller-provided `processOne` closure. The cascade stops on
+ *      SIGINT, `[q]uit`, or an unrecoverable agent error, and always
+ *      flushes audit entries immediately so an interrupted run leaves an
+ *      accurate record.
+ *   3. **Progress tracking** — emits a `CascadeProgress` snapshot before
+ *      each artifact, with a rolling ETA.
+ *
+ * This service owns NO rollback logic. Partial cascades that break the
+ * artifact graph are the concern of FEAT-013's post-flight rollback.
+ */
+import { logger } from '../utils/logger.js';
+import { listArtifacts, readArtifact } from './artifact-service.js';
+// ---------------------------------------------------------------------------
+// Cascade order (§1.0)
+// ---------------------------------------------------------------------------
+/**
+ * Resolve the cascade plan for a root artifact, walking its descendants in
+ * top-down order. For an epic root, the plan is:
+ *   EPIC → [features under epic] → [stories under those features] → [tasks under those stories]
+ * For a feature root, the EPIC level is empty and features contain only the root, etc.
+ */
+export async function buildCascadeOrder(projectDir, config, rootType, rootId) {
+    const levels = [
+        { type: 'epic', label: 'epic', artifactIds: [] },
+        { type: 'feature', label: 'features', artifactIds: [] },
+        { type: 'story', label: 'stories', artifactIds: [] },
+        { type: 'task', label: 'tasks', artifactIds: [] },
+    ];
+    if (rootType === 'epic') {
+        levels[0].artifactIds = [rootId];
+        const features = await listArtifacts(projectDir, config, 'feature');
+        for (const f of features) {
+            const featureArtifact = await readArtifact(projectDir, config, 'feature', f.id);
+            if (featureArtifact?.data.epicId === rootId) {
+                levels[1].artifactIds.push(f.id);
+            }
+        }
+        for (const featureId of levels[1].artifactIds) {
+            const stories = await listArtifacts(projectDir, config, 'story');
+            for (const s of stories) {
+                const storyArtifact = await readArtifact(projectDir, config, 'story', s.id);
+                if (storyArtifact?.data.featureId === featureId) {
+                    levels[2].artifactIds.push(s.id);
+                }
+            }
+        }
+        for (const storyId of levels[2].artifactIds) {
+            const tasks = await listArtifacts(projectDir, config, 'task');
+            for (const t of tasks) {
+                const taskArtifact = await readArtifact(projectDir, config, 'task', t.id);
+                if (taskArtifact?.data.storyId === storyId) {
+                    levels[3].artifactIds.push(t.id);
+                }
+            }
+        }
+    }
+    else if (rootType === 'feature') {
+        levels[1].artifactIds = [rootId];
+        const stories = await listArtifacts(projectDir, config, 'story');
+        for (const s of stories) {
+            const storyArtifact = await readArtifact(projectDir, config, 'story', s.id);
+            if (storyArtifact?.data.featureId === rootId) {
+                levels[2].artifactIds.push(s.id);
+            }
+        }
+        for (const storyId of levels[2].artifactIds) {
+            const tasks = await listArtifacts(projectDir, config, 'task');
+            for (const t of tasks) {
+                const taskArtifact = await readArtifact(projectDir, config, 'task', t.id);
+                if (taskArtifact?.data.storyId === storyId) {
+                    levels[3].artifactIds.push(t.id);
+                }
+            }
+        }
+    }
+    else if (rootType === 'story') {
+        levels[2].artifactIds = [rootId];
+        const tasks = await listArtifacts(projectDir, config, 'task');
+        for (const t of tasks) {
+            const taskArtifact = await readArtifact(projectDir, config, 'task', t.id);
+            if (taskArtifact?.data.storyId === rootId) {
+                levels[3].artifactIds.push(t.id);
+            }
+        }
+    }
+    else if (rootType === 'task') {
+        levels[3].artifactIds = [rootId];
+    }
+    else {
+        // Non-hierarchy types (quick, backlog, sprint, adr, checklist) — cascade
+        // is a no-op scope that only processes the root. We stash the id at the
+        // tasks level to avoid leaving the plan empty.
+        levels[3].artifactIds = [rootId];
+    }
+    const orderedIds = levels.flatMap((l) => l.artifactIds);
+    return { rootId, rootType, levels, orderedIds };
+}
+/**
+ * Drive the cascade plan through the provided processor. Installs a SIGINT
+ * handler for the duration of the run; on Ctrl+C it waits for the current
+ * artifact to finish (so no half-written files) and then stops. The SIGINT
+ * handler is removed on completion whether or not it fired.
+ */
+export async function executeCascade(options) {
+    const { plan, processor } = options;
+    const signalTarget = options.signalTarget ?? process;
+    const total = plan.orderedIds.length;
+    let completed = 0;
+    let interruptedByUser = false;
+    const sigintHandler = () => {
+        interruptedByUser = true;
+        logger.warn('\nSIGINT received — cascade will stop after current artifact completes.');
+    };
+    signalTarget.once('SIGINT', sigintHandler);
+    const started = Date.now();
+    try {
+        for (const level of plan.levels) {
+            for (const artifactId of level.artifactIds) {
+                if (interruptedByUser) {
+                    return {
+                        completed,
+                        total,
+                        interrupted: { reason: 'sigint', atArtifactId: artifactId },
+                    };
+                }
+                const progress = {
+                    completed,
+                    total,
+                    currentArtifactId: artifactId,
+                    currentLevelLabel: level.label,
+                    etaSeconds: estimateEta(started, completed, total),
+                };
+                options.onProgress?.(progress);
+                let outcome;
+                try {
+                    outcome = await processor({
+                        artifactId,
+                        levelLabel: level.label,
+                        progress,
+                    });
+                }
+                catch (err) {
+                    logger.error(`Cascade aborted at ${artifactId}: ${err instanceof Error ? err.message : String(err)}`);
+                    return {
+                        completed,
+                        total,
+                        interrupted: { reason: 'agent_error', atArtifactId: artifactId },
+                    };
+                }
+                completed++;
+                if (!outcome.continue) {
+                    return {
+                        completed,
+                        total,
+                        interrupted: {
+                            reason: outcome.stopReason === 'q' ? 'q' : 'agent_error',
+                            atArtifactId: artifactId,
+                        },
+                    };
+                }
+            }
+        }
+        return { completed, total };
+    }
+    finally {
+        signalTarget.removeListener('SIGINT', sigintHandler);
+    }
+}
+/**
+ * Estimate seconds remaining based on observed pace. Returns null for the
+ * first couple of samples so the UI doesn't print wildly unstable numbers.
+ */
+function estimateEta(startedMs, completed, total) {
+    if (completed < 2 || total === 0)
+        return null;
+    const elapsed = (Date.now() - startedMs) / 1000;
+    const perItem = elapsed / completed;
+    const remaining = Math.max(0, total - completed);
+    return Math.round(perItem * remaining);
+}
+//# sourceMappingURL=cascade-service.js.map

package/dist/services/cascade-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cascade-service.js","sourceRoot":"","sources":["../../src/services/cascade-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AASH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAEpE,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,UAAkB,EAClB,MAAuB,EACvB,QAAsB,EACtB,MAAc;IAEd,MAAM,MAAM,GAAmB;QAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE;QAChD,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,EAAE,EAAE;QACvD,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;QACpD,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,EAAE;KAClD,CAAC;IAEF,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACpE,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,MAAM,eAAe,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAChF,IAAI,eAAe,EAAE,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC5C,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;YACjE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;gBACxB,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC5E,IAAI,aAAa,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBAChD,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1E,IAAI,YAAY,EAAE,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;oBAC3C,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACjE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,MAAM,aAAa,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC5E,IAAI,aAAa,EAAE,IAAI,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;gBAC7C,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;YAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACtB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC1E,IAAI,YAAY,EAAE,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;oBAC3C,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9D,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,YAAY,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1E,IAAI,YAAY,EAAE,IAAI,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;gBAC1C,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;IACH,CAAC;SAAM,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAC/B,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;SAAM,CAAC;QACN,yEAAyE;QACzE,wEAAwE;QACxE,+CAA+C;QAC/C,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACxD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;AAClD,CAAC;AAsCD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAA8B;IACjE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,OAAO,CAAC;IACpC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,OAAO,CAAC;IACrD,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;IAErC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,iBAAiB,GAAG,KAAK,CAAC;IAC9B,MAAM,aAAa,GAAG,GAAG,EAAE;QACzB,iBAAiB,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;IACzF,CAAC,CAAC;IACF,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IAE3C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC3B,IAAI,CAAC;QACH,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,KAAK,MAAM,UAAU,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;gBAC3C,IAAI,iBAAiB,EAAE,CAAC;oBACtB,OAAO;wBACL,SAAS;wBACT,KAAK;wBACL,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE;qBAC5D,CAAC;gBACJ,CAAC;gBACD,MAAM,QAAQ,GAAoB;oBAChC,SAAS;oBACT,KAAK;oBACL,iBAAiB,EAAE,UAAU;oBAC7B,iBAAiB,EAAE,KAAK,CAAC,KAAK;oBAC9B,UAAU,EAAE,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,KAAK,CAAC;iBACnD,CAAC;gBACF,OAAO,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,CAAC;gBAE/B,IAAI,OAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,OAAO,GAAG,MAAM,SAAS,CAAC;wBACxB,UAAU;wBACV,UAAU,EAAE,KAAK,CAAC,KAAK;wBACvB,QAAQ;qBACT,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,MAAM,CAAC,KAAK,CACV,sBAAsB,UAAU,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACxF,CAAC;oBACF,OAAO;wBACL,SAAS;wBACT,KAAK;wBACL,WAAW,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,UAAU,EAAE;qBACjE,CAAC;gBACJ,CAAC;gBAED,SAAS,EAAE,CAAC;gBAEZ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;oBACtB,OAAO;wBACL,SAAS;wBACT,KAAK;wBACL,WAAW,EAAE;4BACX,MAAM,EAAE,OAAO,CAAC,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,aAAa;4BACxD,YAAY,EAAE,UAAU;yBACzB;qBACF,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;IAC9B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,cAAc,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,WAAW,CAAC,SAAiB,EAAE,SAAiB,EAAE,KAAa;IACtE,IAAI,SAAS,GAAG,CAAC,IAAI,KAAK,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,MAAM,OAAO,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,IAAI,CAAC;IAChD,MAAM,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,CAAC;IACjD,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;AACzC,CAAC"}

package/dist/services/diff-service.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Colored diff preview for revise (EPIC-003, FEAT-011 §4.2).
+ *
+ * Wraps the pure `unifiedDiff` utility with chalk formatting. The returned
+ * string is what the CLI prints before asking the user to apply / skip /
+ * edit / re-view / quit.
+ */
+import { type UnifiedDiffOptions } from '../utils/diff.js';
+export interface RenderDiffOptions extends UnifiedDiffOptions {
+    /** Set to false to skip ANSI color codes (useful for tests / non-TTY output). */
+    color?: boolean;
+}
+/**
+ * Produce a unified diff between `oldText` and `newText`, color-coded for
+ * terminal display. Returns the empty string when the two are identical.
+ */
+export declare function renderDiff(oldText: string, newText: string, options?: RenderDiffOptions): string;
+//# sourceMappingURL=diff-service.d.ts.map

package/dist/services/diff-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-service.d.ts","sourceRoot":"","sources":["../../src/services/diff-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,KAAK,kBAAkB,EAAe,MAAM,kBAAkB,CAAC;AAExE,MAAM,WAAW,iBAAkB,SAAQ,kBAAkB;IAC3D,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAgB,UAAU,CACxB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,iBAAsB,GAC9B,MAAM,CAeR"}

package/dist/services/diff-service.js

@@ -0,0 +1,35 @@
+/**
+ * Colored diff preview for revise (EPIC-003, FEAT-011 §4.2).
+ *
+ * Wraps the pure `unifiedDiff` utility with chalk formatting. The returned
+ * string is what the CLI prints before asking the user to apply / skip /
+ * edit / re-view / quit.
+ */
+import chalk from 'chalk';
+import { unifiedDiff } from '../utils/diff.js';
+/**
+ * Produce a unified diff between `oldText` and `newText`, color-coded for
+ * terminal display. Returns the empty string when the two are identical.
+ */
+export function renderDiff(oldText, newText, options = {}) {
+    const raw = unifiedDiff(oldText, newText, options);
+    if (raw.length === 0)
+        return '';
+    if (options.color === false)
+        return raw;
+    return raw
+        .split('\n')
+        .map((line) => {
+        if (line.startsWith('+++') || line.startsWith('---'))
+            return chalk.bold(line);
+        if (line.startsWith('@@'))
+            return chalk.cyan(line);
+        if (line.startsWith('+'))
+            return chalk.green(line);
+        if (line.startsWith('-'))
+            return chalk.red(line);
+        return chalk.dim(line);
+    })
+        .join('\n');
+}
+//# sourceMappingURL=diff-service.js.map

package/dist/services/diff-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diff-service.js","sourceRoot":"","sources":["../../src/services/diff-service.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAA2B,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAOxE;;;GAGG;AACH,MAAM,UAAU,UAAU,CACxB,OAAe,EACf,OAAe,EACf,UAA6B,EAAE;IAE/B,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACnD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;QAAE,OAAO,GAAG,CAAC;IAExC,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9E,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACjD,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/services/evidence-verifier.d.ts

@@ -0,0 +1,71 @@
+/**
+ * Post-flight evidence verification for `planr revise` (EPIC-003, FEAT-011).
+ *
+ * The revise agent emits a ReviseDecision with typed evidence citations. Before
+ * the user ever sees a diff, this verifier checks each citation against the
+ * real repo:
+ *
+ * - `file_exists` / `file_absent` — fs.stat on the ref path
+ * - `grep_match`                   — literal check inside the codebase context
+ *                                    the agent was given; rejects claims the
+ *                                    agent could not have seen
+ * - `sibling_artifact`             — artifact id must exist on disk
+ * - `source_quote`                 — source path must exist on disk (quote
+ *                                    fuzzy-match is best-effort)
+ * - `pattern_rule`                 — rule id must be in the detected pattern
+ *                                    rules for this run
+ *
+ * Unverifiable evidence is dropped with a reason. If a `revise` action has no
+ * surviving evidence after the sweep, the decision is demoted to `flag` with
+ * an explicit ambiguity entry — the agent's judgment wasn't necessarily wrong,
+ * but its *proof* can't be trusted, so a human owns the call.
+ */
+import type { OpenPlanrConfig, ReviseDecision, ReviseEvidence } from '../models/types.js';
+/**
+ * Run-time context the verifier needs. Callers should populate this from the
+ * same inputs used to build the revise prompt, so the verifier checks evidence
+ * against exactly the material the agent had access to.
+ */
+export interface EvidenceVerifierContext {
+    projectDir: string;
+    config: OpenPlanrConfig;
+    /**
+     * Directory of the artifact being verified. Used to resolve relative
+     * evidence refs like `../features/FEAT-001-slug.md` that appear in
+     * markdown cross-reference links (those paths are relative to the
+     * artifact's file location, not to projectDir). Falls back to projectDir
+     * when omitted.
+     */
+    artifactDir?: string;
+    /** Concatenated string from `formatCodebaseContext`; undefined in fast mode. */
+    codebaseContextFormatted?: string;
+    /** Labels (paths or URLs) of declared sources supplied to the agent. */
+    knownSourceRefs: string[];
+    /** Pattern rule ids detected in the codebase context (from pattern-rules). */
+    knownPatternRuleIds: string[];
+}
+export interface DroppedEvidence {
+    evidence: ReviseEvidence;
+    reason: string;
+}
+export interface DecisionVerificationResult {
+    /** Possibly-rewritten decision (evidence filtered; action demoted if needed). */
+    decision: ReviseDecision;
+    /** Evidence items that failed verification and were removed from the decision. */
+    dropped: DroppedEvidence[];
+    /** True when the verifier changed the action (e.g., revise → flag). */
+    demoted: boolean;
+}
+/**
+ * Verify every evidence item in a decision; drop anything unverifiable.
+ * Demote `revise` to `flag` when no verifiable evidence remains.
+ */
+export declare function verifyDecision(decision: ReviseDecision, ctx: EvidenceVerifierContext): Promise<DecisionVerificationResult>;
+interface EvidenceCheck {
+    ok: boolean;
+    reason: string;
+}
+/** Verify a single evidence item. Exported primarily for testing. */
+export declare function verifyEvidence(ev: ReviseEvidence, ctx: EvidenceVerifierContext): Promise<EvidenceCheck>;
+export {};
+//# sourceMappingURL=evidence-verifier.d.ts.map

package/dist/services/evidence-verifier.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-verifier.d.ts","sourceRoot":"","sources":["../../src/services/evidence-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAIH,OAAO,KAAK,EAEV,eAAe,EAEf,cAAc,EACd,cAAc,EACf,MAAM,oBAAoB,CAAC;AAI5B;;;;GAIG;AACH,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,eAAe,CAAC;IACxB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,wBAAwB,CAAC,EAAE,MAAM,CAAC;IAClC,wEAAwE;IACxE,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,8EAA8E;IAC9E,mBAAmB,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,0BAA0B;IACzC,iFAAiF;IACjF,QAAQ,EAAE,cAAc,CAAC;IACzB,kFAAkF;IAClF,OAAO,EAAE,eAAe,EAAE,CAAC;IAC3B,uEAAuE;IACvE,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAClC,QAAQ,EAAE,cAAc,EACxB,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,0BAA0B,CAAC,CAgErC;AAED,UAAU,aAAa;IACrB,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,qEAAqE;AACrE,wBAAsB,cAAc,CAClC,EAAE,EAAE,cAAc,EAClB,GAAG,EAAE,uBAAuB,GAC3B,OAAO,CAAC,aAAa,CAAC,CAwDxB"}

package/dist/services/evidence-verifier.js

@@ -0,0 +1,171 @@
+/**
+ * Post-flight evidence verification for `planr revise` (EPIC-003, FEAT-011).
+ *
+ * The revise agent emits a ReviseDecision with typed evidence citations. Before
+ * the user ever sees a diff, this verifier checks each citation against the
+ * real repo:
+ *
+ * - `file_exists` / `file_absent` — fs.stat on the ref path
+ * - `grep_match`                   — literal check inside the codebase context
+ *                                    the agent was given; rejects claims the
+ *                                    agent could not have seen
+ * - `sibling_artifact`             — artifact id must exist on disk
+ * - `source_quote`                 — source path must exist on disk (quote
+ *                                    fuzzy-match is best-effort)
+ * - `pattern_rule`                 — rule id must be in the detected pattern
+ *                                    rules for this run
+ *
+ * Unverifiable evidence is dropped with a reason. If a `revise` action has no
+ * surviving evidence after the sweep, the decision is demoted to `flag` with
+ * an explicit ambiguity entry — the agent's judgment wasn't necessarily wrong,
+ * but its *proof* can't be trusted, so a human owns the call.
+ */
+import { stat } from 'node:fs/promises';
+import path from 'node:path';
+import { logger } from '../utils/logger.js';
+import { findArtifactTypeById, listArtifacts, readArtifact } from './artifact-service.js';
+/**
+ * Verify every evidence item in a decision; drop anything unverifiable.
+ * Demote `revise` to `flag` when no verifiable evidence remains.
+ */
+export async function verifyDecision(decision, ctx) {
+    const dropped = [];
+    const verified = [];
+    for (const ev of decision.evidence) {
+        const check = await verifyEvidence(ev, ctx);
+        if (check.ok) {
+            verified.push(ev);
+        }
+        else {
+            dropped.push({ evidence: ev, reason: check.reason });
+        }
+    }
+    if (dropped.length > 0) {
+        logger.debug(`evidence-verifier: dropped ${dropped.length}/${decision.evidence.length} citations for ${decision.artifactId}`);
+    }
+    // Demotion rules for a `revise` action. We never silently apply a rewrite
+    // whose evidence base is weak. Two triggers:
+    //
+    //   (a) `verified.length === 0` — no evidence survived at all
+    //   (b) `dropped.length > verified.length` — a majority of the agent's
+    //       evidence was unverifiable. This catches the failure mode where
+    //       the agent cites one true thing and several hallucinated ones;
+    //       without this rule a 1-out-of-6 verification rate passes through
+    //       because at least one citation survives.
+    //
+    // Both rules target `revise` specifically — `flag` decisions are already
+    // asking for human review, and `skip` decisions don't change anything.
+    const shouldDemote = decision.action === 'revise' && (verified.length === 0 || dropped.length > verified.length);
+    if (shouldDemote) {
+        const reason = verified.length === 0
+            ? 'Agent proposed a revision but none of its evidence citations could be verified against the repo. Human review required.'
+            : `Agent proposed a revision but a majority of its evidence citations (${dropped.length}/${dropped.length + verified.length}) could not be verified. Most likely hallucinated — human review required.`;
+        const tag = verified.length === 0 ? 'all evidence unverifiable' : 'majority evidence unverifiable';
+        const ambiguity = {
+            section: '(evidence verification)',
+            reason,
+        };
+        return {
+            decision: {
+                ...decision,
+                action: 'flag',
+                evidence: verified, // keep any surviving citations in the flag record
+                revisedMarkdown: undefined,
+                ambiguous: [...decision.ambiguous, ambiguity],
+                rationale: `${decision.rationale} [demoted: ${tag}]`,
+            },
+            dropped,
+            demoted: true,
+        };
+    }
+    return {
+        decision: { ...decision, evidence: verified },
+        dropped,
+        demoted: false,
+    };
+}
+/** Verify a single evidence item. Exported primarily for testing. */
+export async function verifyEvidence(ev, ctx) {
+    switch (ev.type) {
+        case 'file_exists':
+            return (await pathExists(ctx.projectDir, ev.ref, ctx.artifactDir))
+                ? ok()
+                : fail(`cited file does not exist: ${ev.ref}`);
+        case 'file_absent':
+            return (await pathExists(ctx.projectDir, ev.ref, ctx.artifactDir))
+                ? fail(`cited file IS present in the repo, contradicting 'file_absent': ${ev.ref}`)
+                : ok();
+        case 'grep_match':
+            if (!ctx.codebaseContextFormatted) {
+                return fail('grep_match citation requires codebase context, but context was not loaded (fast mode)');
+            }
+            // Require either ref OR quote to appear in the context the agent saw.
+            if (ctx.codebaseContextFormatted.includes(ev.ref) ||
+                (ev.quote && ctx.codebaseContextFormatted.includes(ev.quote))) {
+                return ok();
+            }
+            return fail(`grep_match token not found in codebase context: ${ev.ref}`);
+        case 'sibling_artifact': {
+            const type = findArtifactTypeById(ev.ref);
+            if (!type) {
+                return fail(`sibling_artifact ref is not a recognizable artifact id: ${ev.ref}`);
+            }
+            return (await artifactExists(ctx.projectDir, ctx.config, type, ev.ref))
+                ? ok()
+                : fail(`sibling_artifact not found on disk: ${ev.ref}`);
+        }
+        case 'source_quote':
+            // Source refs are labels/paths declared in .planr/revise.yaml; the
+            // caller has already globbed them, so we validate against that list.
+            return ctx.knownSourceRefs.includes(ev.ref)
+                ? ok()
+                : fail(`source_quote ref is not a declared source: ${ev.ref}`);
+        case 'pattern_rule':
+            return ctx.knownPatternRuleIds.includes(ev.ref)
+                ? ok()
+                : fail(`pattern_rule ref is not a detected pattern rule: ${ev.ref}`);
+        default: {
+            // Exhaustive check — if a new evidence type is added to the TS union
+            // but not here, the compiler will complain.
+            const _exhaustive = ev.type;
+            return fail(`unhandled evidence type: ${String(_exhaustive)}`);
+        }
+    }
+}
+const ok = () => ({ ok: true, reason: '' });
+const fail = (reason) => ({ ok: false, reason });
+async function pathExists(projectDir, ref, artifactDir) {
+    // Choose resolution base:
+    // - Relative refs (`./` or `../`) resolve against the artifact's directory
+    //   when available, because OpenPlanr's cross-reference convention writes
+    //   paths like `../features/FEAT-001-slug.md` relative to the artifact file.
+    // - Everything else (repo-root-style refs like `src/services/foo.ts`) resolves
+    //   against projectDir.
+    const looksRelative = ref.startsWith('./') || ref.startsWith('../');
+    const base = looksRelative && artifactDir ? artifactDir : projectDir;
+    const resolved = path.resolve(base, ref);
+    const normalized = path.normalize(resolved);
+    // Traversal guard — the final path must still land inside projectDir
+    // (after following any `../`). This blocks probes like `../../../etc/passwd`
+    // while allowing legitimate artifact→sibling-dir references.
+    if (!normalized.startsWith(path.normalize(projectDir)))
+        return false;
+    try {
+        await stat(normalized);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+async function artifactExists(projectDir, config, type, id) {
+    // readArtifact is the authoritative existence check — it looks for files
+    // matching `${id}-*.md` in the correct artifact-type directory.
+    const artifact = await readArtifact(projectDir, config, type, id);
+    if (artifact !== null)
+        return true;
+    // Fallback: scan the listing in case id-case or prefix routing differs.
+    const list = await listArtifacts(projectDir, config, type);
+    return list.some((a) => a.id === id);
+}
+//# sourceMappingURL=evidence-verifier.js.map

package/dist/services/evidence-verifier.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence-verifier.js","sourceRoot":"","sources":["../../src/services/evidence-verifier.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACxC,OAAO,IAAI,MAAM,WAAW,CAAC;AAQ7B,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAwC1F;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,QAAwB,EACxB,GAA4B;IAE5B,MAAM,OAAO,GAAsB,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAqB,EAAE,CAAC;IAEtC,KAAK,MAAM,EAAE,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAC5C,IAAI,KAAK,CAAC,EAAE,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,CAAC,KAAK,CACV,8BAA8B,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,kBAAkB,QAAQ,CAAC,UAAU,EAAE,CAChH,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,6CAA6C;IAC7C,EAAE;IACF,8DAA8D;IAC9D,uEAAuE;IACvE,uEAAuE;IACvE,sEAAsE;IACtE,wEAAwE;IACxE,gDAAgD;IAChD,EAAE;IACF,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,YAAY,GAChB,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAE9F,IAAI,YAAY,EAAE,CAAC;QACjB,MAAM,MAAM,GACV,QAAQ,CAAC,MAAM,KAAK,CAAC;YACnB,CAAC,CAAC,yHAAyH;YAC3H,CAAC,CAAC,uEAAuE,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,4EAA4E,CAAC;QAC5M,MAAM,GAAG,GACP,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,gCAAgC,CAAC;QACzF,MAAM,SAAS,GAAoB;YACjC,OAAO,EAAE,yBAAyB;YAClC,MAAM;SACP,CAAC;QACF,OAAO;YACL,QAAQ,EAAE;gBACR,GAAG,QAAQ;gBACX,MAAM,EAAE,MAAM;gBACd,QAAQ,EAAE,QAAQ,EAAE,kDAAkD;gBACtE,eAAe,EAAE,SAAS;gBAC1B,SAAS,EAAE,CAAC,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;gBAC7C,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,cAAc,GAAG,GAAG;aACrD;YACD,OAAO;YACP,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC7C,OAAO;QACP,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAOD,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,EAAkB,EAClB,GAA4B;IAE5B,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;gBAChE,CAAC,CAAC,EAAE,EAAE;gBACN,CAAC,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnD,KAAK,aAAa;YAChB,OAAO,CAAC,MAAM,UAAU,CAAC,GAAG,CAAC,UAAU,EAAE,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;gBAChE,CAAC,CAAC,IAAI,CAAC,mEAAmE,EAAE,CAAC,GAAG,EAAE,CAAC;gBACnF,CAAC,CAAC,EAAE,EAAE,CAAC;QAEX,KAAK,YAAY;YACf,IAAI,CAAC,GAAG,CAAC,wBAAwB,EAAE,CAAC;gBAClC,OAAO,IAAI,CACT,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,IACE,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;gBAC7C,CAAC,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAC7D,CAAC;gBACD,OAAO,EAAE,EAAE,CAAC;YACd,CAAC;YACD,OAAO,IAAI,CAAC,mDAAmD,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAE3E,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,IAAI,GAAG,oBAAoB,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;YAC1C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC,2DAA2D,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;YACnF,CAAC;YACD,OAAO,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;gBACrE,CAAC,CAAC,EAAE,EAAE;gBACN,CAAC,CAAC,IAAI,CAAC,uCAAuC,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAC5D,CAAC;QAED,KAAK,cAAc;YACjB,mEAAmE;YACnE,qEAAqE;YACrE,OAAO,GAAG,CAAC,eAAe,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;gBACzC,CAAC,CAAC,EAAE,EAAE;gBACN,CAAC,CAAC,IAAI,CAAC,8CAA8C,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAEnE,KAAK,cAAc;YACjB,OAAO,GAAG,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC;gBAC7C,CAAC,CAAC,EAAE,EAAE;gBACN,CAAC,CAAC,IAAI,CAAC,oDAAoD,EAAE,CAAC,GAAG,EAAE,CAAC,CAAC;QAEzE,OAAO,CAAC,CAAC,CAAC;YACR,qEAAqE;YACrE,4CAA4C;YAC5C,MAAM,WAAW,GAAU,EAAE,CAAC,IAAI,CAAC;YACnC,OAAO,IAAI,CAAC,4BAA4B,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,EAAE,GAAG,GAAkB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;AAC3D,MAAM,IAAI,GAAG,CAAC,MAAc,EAAiB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;AAExE,KAAK,UAAU,UAAU,CAAC,UAAkB,EAAE,GAAW,EAAE,WAAoB;IAC7E,0BAA0B;IAC1B,2EAA2E;IAC3E,0EAA0E;IAC1E,6EAA6E;IAC7E,+EAA+E;IAC/E,wBAAwB;IACxB,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,aAAa,IAAI,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,UAAU,CAAC;IACrE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC5C,qEAAqE;IACrE,6EAA6E;IAC7E,6DAA6D;IAC7D,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,IAAI,CAAC,UAAU,CAAC,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,UAAkB,EAClB,MAAuB,EACvB,IAAkB,EAClB,EAAU;IAEV,yEAAyE;IACzE,gEAAgE;IAChE,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACnC,wEAAwE;IACxE,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3D,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACvC,CAAC"}

package/dist/services/git-service.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Git integration for `planr revise` (EPIC-003, FEAT-011 + FEAT-013).
+ *
+ * Two responsibilities:
+ *
+ * 1. **Clean-tree gate (FEAT-011 §2.0):** revise refuses to run with a dirty
+ *    working tree by default. Users can override with `--allow-dirty`, but
+ *    post-flight rollback depends on a clean pre-run state, so the gate is
+ *    the load-bearing safety net.
+ *
+ * 2. **Capture + rollback anchor (FEAT-013 §4.0):** before bulk writes,
+ *    revise captures HEAD and the set of touched paths so a post-flight
+ *    graph-integrity failure can restore via `git checkout`.
+ *
+ * All git operations use `execFile` (not shell), matching the pattern in
+ * github-service.ts. If git is not available or the project is not a git
+ * repo, clean-tree checks fail closed (revise refuses to run) unless
+ * --allow-dirty is passed, because without git there is no safety net.
+ */
+export type GitTreeStatus = {
+    kind: 'clean';
+    head: string;
+} | {
+    kind: 'dirty';
+    head: string;
+    changedPaths: string[];
+} | {
+    kind: 'not-a-repo';
+    reason: string;
+} | {
+    kind: 'git-missing';
+    reason: string;
+};
+export interface GitCleanTreeCheckOptions {
+    allowDirty: boolean;
+}
+export interface GitCleanTreeCheckResult {
+    ok: boolean;
+    status: GitTreeStatus;
+    /** User-facing message describing why the gate opened or closed. */
+    message: string;
+}
+/**
+ * Inspect the working tree. Never throws — always returns a typed status so
+ * callers can render errors consistently.
+ */
+export declare function inspectGitTree(projectDir: string): Promise<GitTreeStatus>;
+/**
+ * The clean-tree gate: clean → pass; dirty → pass only when --allow-dirty;
+ * missing git / not a repo → fail closed unless --allow-dirty was passed
+ * (because without git there is no post-flight rollback safety net).
+ */
+export declare function checkCleanTree(projectDir: string, options: GitCleanTreeCheckOptions): Promise<GitCleanTreeCheckResult>;
+/**
+ * Restore a set of paths from HEAD — the primitive FEAT-013's post-flight
+ * rollback invokes when graph integrity breaks after writes. Paths are
+ * relative to `projectDir`. Empty list is a no-op.
+ */
+export declare function checkoutPaths(projectDir: string, relativePaths: string[]): Promise<void>;
+//# sourceMappingURL=git-service.d.ts.map

package/dist/services/git-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-service.d.ts","sourceRoot":"","sources":["../../src/services/git-service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAQH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACtC;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5C,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,OAAO,CAAC;CACrB;AAED,MAAM,WAAW,uBAAuB;IACtC,EAAE,EAAE,OAAO,CAAC;IACZ,MAAM,EAAE,aAAa,CAAC;IACtB,oEAAoE;IACpE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAuC/E;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CA0DlC;AAED;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAM9F"}