phasegate 0.160.6 → 0.160.8

package/CHANGELOG.md

@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.160.8] - 2026-05-15
+
+### Fixed
+
+- **WI-201 — managed config plan apply path** — adds `config:plan --apply` for applicable config patch plans, records rollback backups before mutating `phasegate.config.json`, advertises managed apply commands in config-plan guidance, and points config edit blocks back to the reviewed dry-run/apply workflow.
+
 ## [0.160.6] - 2026-05-14
 
 ### Fixed

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "phasegate",
-  "version": "0.160.6",
+  "version": "0.160.8",
   "packageManager": "pnpm@10.30.1",
   "description": "Phasegate — AI-agnostic quality defense toolkit. Enforces structural integrity between design intent and code.",
   "license": "MIT",

package/scripts/harness/agent-integration/application/usecases/handle-pre-tool-use-usecase.ts

@@ -2,6 +2,7 @@
  * @layer application
  * @unit agent-integration
  * @story H11-02
+ * @work-item-id WI-201
  *
  * HandlePreToolUseUseCase
  * PreToolUse Hook処理のオーケストレーション
@@ -237,6 +238,31 @@ export class HandlePreToolUseUseCase {
     unitId: string | undefined,
   ): HandlePreToolUseOutput {
     const fp = blockedFilePath ?? "不明なファイル";
+    if (result.dominantCategory === "config" && /(?:^|\/)phasegate\.config\.json$/.test(fp)) {
+      const dryRunCommand = "phasegate config:plan --intent retrofit-bootstrap --dry-run --json";
+      const applyCommand = "phasegate config:plan --intent retrofit-bootstrap --apply --json";
+      const lines = [
+        `Full mode 必須変更が検出されました: ${fp}`,
+        "カテゴリ: config",
+      ];
+      if (result.rejectionRule) {
+        lines.push(`判定ルール: ${result.rejectionRule}`);
+      }
+      if (result.rejectionReason) {
+        lines.push(`理由: ${result.rejectionReason}`);
+      }
+      lines.push(`次のアクション: ${dryRunCommand} で差分を確認し、承認後に ${applyCommand} を実行してください。`);
+
+      return {
+        shouldBlock: true,
+        blockedFilePath,
+        blockReason: "FULL_MODE_REQUIRED",
+        error: { message: lines.join("\n") },
+        fullModeRejectionRule: result.rejectionRule,
+        fullModeDominantCategory: result.dominantCategory,
+        nextAction: `${dryRunCommand} && ${applyCommand}`,
+      };
+    }
     const lines: string[] = [`Full mode 必須変更が検出されました: ${fp}`];
     if (result.dominantCategory) {
       lines.push(`カテゴリ: ${result.dominantCategory}`);
@@ -373,6 +399,11 @@ export class HandlePreToolUseUseCase {
       message: (fp) =>
         `保護ファイルへの書き込みがブロックされました: ${fp}\nバージョン変更を含む package.json の更新は /quick-implementor スキルを使用してください。`,
     },
+    {
+      pattern: /(?:^|\/)phasegate\.config\.json$/,
+      message: (fp) =>
+        `保護ファイルへの書き込みがブロックされました: ${fp}\n設定変更は CLI 経由で計画・適用してください: phasegate config:plan --intent retrofit-bootstrap --dry-run --json / phasegate config:plan --intent retrofit-bootstrap --apply --json`,
+    },
     {
       pattern: /(?:^|\/)harness\.config\.json$/,
       message: (fp) =>

package/scripts/harness/ci-governance/presentation/formatters/ci-template-formatter.ts

@@ -1,6 +1,7 @@
 /**
  * @layer presentation
  * @unit ci-governance
+ * @work-item-id WI-200
  */
 
 import type { GenerateCiTemplateOutput } from '../../application/dto/generate-ci-template-output.js';
@@ -15,12 +16,13 @@ export class CiTemplateFormatter {
         lines.push(`  [${err.code}] ${err.message}`);
       }
     } else {
-      lines.push('✓ CI Template Generated');
+      lines.push('✓ CI Template Plan Ready');
       lines.push(`  Template Type: ${output.templateType}`);
       lines.push(`  Preset: ${output.presetRef}`);
       lines.push(`  Trigger: ${output.triggerCondition}`);
       lines.push(`  Validators: ${output.targetValidatorIds.join(', ')}`);
       lines.push(`  Fail on Warning: ${output.failOnWarning}`);
+      lines.push('  Output: no file written; use --render to print template YAML');
     }
 
     return lines.join('\n');

package/scripts/harness/installation/application/usecases/run-install.ts

@@ -2,6 +2,7 @@
 // @layer application
 // @work-item-id WI-146
 // @work-item-id WI-174
+// @work-item-id WI-198
 // @work-item-id WI-175
 // @work-item-id WI-177
 // @work-item-id WI-182
@@ -190,7 +191,7 @@ function renderAgentContextTemplate(
     .replaceAll("{{PHASEGATE_HUSKY_STATE}}", options.includeHusky ? "managed" : "not managed by this setup run")
     .replaceAll("{{PHASEGATE_CI_STATE}}", options.includeCi ? "managed" : "not managed by this setup run")
     .replaceAll("{{PHASEGATE_COMMANDS}}", commands)
-    .replaceAll("{{PHASEGATE_SKILLS}}", options.skillSet === "core" ? "- core skills" : "- all bundled skills")
+    .replaceAll("{{PHASEGATE_SKILLS}}", options.skillSet === "core" ? "- `core skills`" : "- `all bundled skills`")
     .replaceAll("{{PHASEGATE_PRESETS}}", "- `minimal`\n- `standard`\n- `full`\n- `custom`")
     .replaceAll("{{PHASEGATE_USER_SECTION}}", "Project-specific agent instructions go here.");
 }

package/scripts/harness/installation/application/usecases/run-reconcile.ts

@@ -2,6 +2,7 @@
 // @layer application
 // @work-item-id WI-148
 // @work-item-id WI-174
+// @work-item-id WI-198
 
 import { access, chmod, copyFile, lstat, mkdir, readFile, readlink, symlink, writeFile } from "node:fs/promises";
 import { dirname, join, relative, resolve } from "node:path";
@@ -156,12 +157,12 @@ function reconcileManagedMarkdown(existing: string | null, incoming: string): st
 
 function renderAgentContextTemplate(template: string): string {
   const commands = [
-    "- `phasegate doctor`",
-    "- `phasegate phasegate:check-ready`",
-    "- `phasegate validate --layer L2 --format human`",
-    "- `phasegate setup:agent --dry-run`",
-    "- `phasegate config:plan --intent l4-strict --dry-run`",
-  ].join("\n");
+    "phasegate doctor",
+    "phasegate phasegate:check-ready",
+    "phasegate validate --layer L2 --format human",
+    "phasegate setup:agent --dry-run",
+    "phasegate config:plan --intent l4-strict --dry-run",
+  ].map((command) => `- \`${command}\``).join("\n");
   return template
     .replaceAll("{{PHASEGATE_AGENT}}", "both")
     .replaceAll("{{PHASEGATE_SKILLS_MODE}}", "all")
@@ -169,7 +170,7 @@ function renderAgentContextTemplate(template: string): string {
     .replaceAll("{{PHASEGATE_HUSKY_STATE}}", "managed")
     .replaceAll("{{PHASEGATE_CI_STATE}}", "managed")
     .replaceAll("{{PHASEGATE_COMMANDS}}", commands)
-    .replaceAll("{{PHASEGATE_SKILLS}}", "- all bundled skills")
+    .replaceAll("{{PHASEGATE_SKILLS}}", "- `all bundled skills`")
     .replaceAll("{{PHASEGATE_PRESETS}}", "- `minimal`\n- `standard`\n- `full`\n- `custom`")
     .replaceAll("{{PHASEGATE_USER_SECTION}}", "Project-specific agent instructions go here.");
 }
@@ -299,7 +300,7 @@ export class RunReconcileUseCase {
     const matchesManifest = currentHash.equals(entry.hash);
     const rawTemplate = target.templatePath ? await readFile(join(input.harnessRoot, target.templatePath), "utf8") : "";
     const template = target.strategy === "markdown-managed" ? renderAgentContextTemplate(rawTemplate) : rawTemplate;
-    const next = entry.mode === "created" && target.strategy !== "package-json"
+    const next = entry.mode === "created" && target.strategy !== "package-json" && target.strategy !== "markdown-managed"
       ? template
       : this.reconcileContent(target, before, template, input.phasegateVersion);
     const changed = before !== next;

package/scripts/harness/installation/application/usecases/run-uninstall.ts

@@ -2,6 +2,7 @@
 // @layer application
 // @work-item-id WI-147
 // @work-item-id WI-174
+// @work-item-id WI-199
 
 import { access, copyFile, lstat, mkdir, readFile, readlink, rm, rmdir, writeFile } from "node:fs/promises";
 import { dirname, join, relative, resolve } from "node:path";
@@ -19,6 +20,7 @@ export interface UninstallPlanItem {
   readonly repairMode: RepairMode;
   readonly strategy: StrategyType;
   readonly changed: boolean;
+  readonly protected: boolean;
   readonly summary: string;
   readonly diff: string;
   readonly skillHint: string | null;
@@ -46,6 +48,7 @@ const SHELL_END = "# === phasegate managed (END) ===";
 const MARKDOWN_BEGIN = "<!-- phasegate:managed-section:start -->";
 const MARKDOWN_END = "<!-- phasegate:managed-section:end -->";
 const PHASEGATE_SCRIPT_PREFIX = "phasegate:";
+const PROTECTED_UNINSTALL_PATHS = new Set(["package.json", "package-lock.json"]);
 
 function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -175,7 +178,7 @@ export class RunUninstallUseCase {
       const outcome = await this.planEntry(input, entry);
       outcomes.push({ entry, ...outcome });
       plan.push(outcome.item);
-      if (input.apply && outcome.item.changed && (outcome.item.repairMode === "ai-assisted" || outcome.item.repairMode === "manual") && !input.force) {
+      if (input.apply && outcome.item.changed && this.requiresForce(outcome.item) && !input.force) {
         refused.push({ ...outcome.item, action: "refuse" });
       }
     }
@@ -372,6 +375,14 @@ export class RunUninstallUseCase {
     diff: string,
     skillHint: string | null,
   ): UninstallPlanItem {
-    return { path, action, repairMode, strategy, changed, summary, diff, skillHint };
+    return { path, action, repairMode, strategy, changed, protected: this.isProtectedPath(path), summary, diff, skillHint };
+  }
+
+  private requiresForce(item: UninstallPlanItem): boolean {
+    return item.protected || item.repairMode === "ai-assisted" || item.repairMode === "manual";
+  }
+
+  private isProtectedPath(path: string): boolean {
+    return PROTECTED_UNINSTALL_PATHS.has(path);
   }
 }

package/scripts/harness/installation/presentation/cli/uninstall-handler.ts

@@ -1,6 +1,7 @@
 // @unit installation
 // @layer presentation
 // @work-item-id WI-147
+// @work-item-id WI-199
 
 import type { RunUninstallUseCase } from "../../application/usecases/run-uninstall.js";
 
@@ -33,14 +34,15 @@ export class UninstallHandler {
       input.apply ? "phasegate uninstall apply" : "phasegate uninstall dry-run",
       ...result.plan.map((item) => {
         const hint = item.skillHint ? `; hint: ${item.skillHint}` : "";
-        return `- ${item.path}: ${item.action} (${item.repairMode}, ${item.strategy}); diff: ${item.diff}${hint}`;
+        const protectedMarker = item.protected ? "; protected: true" : "";
+        return `- ${item.path}: ${item.action} (${item.repairMode}, ${item.strategy}${protectedMarker}); diff: ${item.diff}${hint}`;
       }),
     ];
     if (result.backupDir !== null) lines.push(`backups: ${result.backupDir}`);
     if (result.archivedManifestPath !== null) lines.push(`archived manifest: ${result.archivedManifestPath}`);
     if (result.refused.length > 0) {
       lines.push("");
-      lines.push("Refused ai-assisted/manual targets. Re-run with --force after reviewing the hint.");
+      lines.push("Refused protected, ai-assisted, or manual targets. Re-run with --force after reviewing the plan.");
     }
     return {
       stdout: lines.join("\n"),

package/scripts/harness/main.ts

@@ -11,6 +11,9 @@
  * @work-item-id WI-191
  * @work-item-id WI-195
  * @work-item-id WI-196
+ * @work-item-id WI-197
+ * @work-item-id WI-200
+ * @work-item-id WI-201
  *
  * Phasegate CLI エントリポイント。
  * 各Unitの Composition Root からハンドラーを取得し、コマンドに応じてディスパッチする。
@@ -23,6 +26,7 @@ import {
   readFile as fsReadFile,
   readdir as fsReaddir,
   readlink as fsReadlink,
+  rename as fsRename,
   writeFile as fsWriteFile,
 } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
@@ -809,6 +813,12 @@ interface ConfigPatchPreview {
   readonly operations: readonly ConfigPatchOperation[];
 }
 
+interface ConfigApplyResult {
+  readonly changed: boolean;
+  readonly backupPath: string;
+  readonly appliedOperations: readonly ConfigPatchOperation[];
+}
+
 function parseInitPhasePreset(value: string | undefined): InitPhasePreset | undefined {
   if (value === undefined) return undefined;
   if (value === "full" || value === "standard" || value === "minimal" || value === "custom") {
@@ -1265,6 +1275,40 @@ function buildConfigPatchPreview(intent: ConfigChangeIntent, before: unknown | n
   };
 }
 
+function configPlanBackupPath(rootDir: string, now: Date): string {
+  const stamp = now.toISOString().replaceAll(":", "-");
+  return join(rootDir, ".phasegate", "backups", `phasegate.config.${stamp}.json`);
+}
+
+async function applyConfigPlan(rootDir: string, plan: Awaited<ReturnType<typeof buildConfigChangePlan>>): Promise<ConfigApplyResult> {
+  const patch = plan.configPatch;
+  if (patch.applicability !== "applicable") {
+    throw new Error(`config plan is not applicable: ${patch.blockedReason ?? patch.applicability}`);
+  }
+  if (patch.operations.length === 0) {
+    throw new Error("config plan has no operations to apply.");
+  }
+  if (!isPlainRecord(patch.after)) {
+    throw new Error("config plan after-state must be a JSON object.");
+  }
+
+  const configPath = join(rootDir, patch.path);
+  const backupPath = configPlanBackupPath(rootDir, new Date());
+  await fsMkdir(dirname(backupPath), { recursive: true });
+  const beforeText = patch.before === null ? "" : `${JSON.stringify(patch.before, null, 2)}\n`;
+  await fsWriteFile(backupPath, beforeText, "utf8");
+
+  const tempPath = `${configPath}.tmp-${process.pid}-${Date.now()}`;
+  await fsWriteFile(tempPath, `${JSON.stringify(patch.after, null, 2)}\n`, "utf8");
+  await fsRename(tempPath, configPath);
+
+  return {
+    changed: true,
+    backupPath: backupPath.slice(rootDir.length + 1),
+    appliedOperations: patch.operations,
+  };
+}
+
 function hasStructuredInstallError(value: unknown): boolean {
   return isPlainRecord(value) && isPlainRecord(value.error);
 }
@@ -1282,7 +1326,7 @@ async function buildConfigChangePlan(rootDir: string, intent: ConfigChangeIntent
       targets: ["phasegate.config.json: layers.L4.enabled", "phasegate.config.json: layers.L4.failOnWarning"],
       managedTargets: ["phasegate.config.json"],
       externalActions: [],
-      commands: ["phasegate validate --layer L4 --fail-on-warning --format human"],
+      commands: ["phasegate config:plan --intent l4-strict --apply --json", "phasegate validate --layer L4 --fail-on-warning --format human"],
       validations: ["phasegate phasegate:detect-drift --json", "phasegate phasegate:check-ready"],
       risks: ["L4 findings may be advisory today but become blocking when fail-on-warning is enabled."],
     },
@@ -1298,7 +1342,7 @@ async function buildConfigChangePlan(rootDir: string, intent: ConfigChangeIntent
       targets: [".github/workflows/phasegate-aidlc-gate.yml", "phasegate.config.json"],
       managedTargets: [".github/workflows/phasegate-aidlc-gate.yml", "phasegate.config.json"],
       externalActions: [{ id: "github-actions-first-run", label: "Trigger or inspect the first GitHub Actions PhaseGate run.", command: null, blocking: false }],
-      commands: ["phasegate install --with-ci --apply", "phasegate validate --layer L4 --fail-on-warning"],
+      commands: ["phasegate install --with-ci --apply", "phasegate config:plan --intent ci-fail-on-warning --apply --json", "phasegate validate --layer L4 --fail-on-warning"],
       validations: ["phasegate doctor", "phasegate ci:generate-template --type aidlc-gate --render"],
       risks: ["Existing warning-only projects may start failing CI after rollout."],
     },
@@ -1314,7 +1358,7 @@ async function buildConfigChangePlan(rootDir: string, intent: ConfigChangeIntent
       targets: ["phasegate.config.json: quickMode"],
       managedTargets: ["phasegate.config.json"],
       externalActions: [],
-      commands: ["phasegate check-change-category --paths <changed-files> --format json"],
+      commands: ["phasegate config:plan --intent quick-mode-strict --apply --json", "phasegate check-change-category --paths <changed-files> --format json"],
       validations: ["phasegate ci-check --quick --dry-run", "phasegate phasegate:check-ready"],
       risks: ["More changes will require Full Mode validation before commit."],
     },
@@ -1322,7 +1366,7 @@ async function buildConfigChangePlan(rootDir: string, intent: ConfigChangeIntent
       targets: ["phasegate.config.json: planningMode.default", "phasegate.config.json: phaseDependencies.override", "phasegate.config.json: quickMode.relaxedGates"],
       managedTargets: ["phasegate.config.json"],
       externalActions: [],
-      commands: ["phasegate baseline --dry-run", "phasegate config:plan --intent retrofit-bootstrap --json"],
+      commands: ["phasegate baseline --dry-run", "phasegate config:plan --intent retrofit-bootstrap --json", "phasegate config:plan --intent retrofit-bootstrap --apply --json"],
       validations: ["phasegate validate-metadata docs/inception/_shared/*.md", "phasegate check-phase-gate --level 2"],
       risks: ["Manual planning mode accepts existing retrofit planning evidence; review the patch before applying it to avoid weakening greenfield projects."],
     },
@@ -1330,7 +1374,7 @@ async function buildConfigChangePlan(rootDir: string, intent: ConfigChangeIntent
       targets: ["phasegate.config.json: planningMode.default"],
       managedTargets: ["phasegate.config.json"],
       externalActions: [],
-      commands: ["phasegate config:plan --intent planning-mode-relax --json"],
+      commands: ["phasegate config:plan --intent planning-mode-relax --json", "phasegate config:plan --intent planning-mode-relax --apply --json"],
       validations: ["phasegate check-phase-gate --level 2", "phasegate phasegate:check-ready"],
       risks: ["Manual planning mode reduces PhaseGate's QA enforcement for plan documents until strict planning is restored."],
     },
@@ -1973,13 +2017,42 @@ async function main(): Promise<void> {
       }
 
       case "config:plan": {
-        const KNOWN_CONFIG_PLAN_FLAGS = ["--intent", "--dry-run", "--json"];
+        const KNOWN_CONFIG_PLAN_FLAGS = ["--intent", "--dry-run", "--apply", "--json"];
         const flagError = validateKnownFlags(args, KNOWN_CONFIG_PLAN_FLAGS);
         if (flagError) {
           console.error(flagError);
           process.exit(2);
         }
+        const apply = hasFlag(args, "--apply");
+        if (apply && hasFlag(args, "--dry-run")) {
+          console.error("Error: --apply and --dry-run cannot be used together.");
+          process.exit(2);
+        }
         const plan = await buildConfigChangePlan(rootDir, parseConfigChangeIntent(parseFlag(args, "--intent")));
+        if (apply) {
+          try {
+            const applyResult = await applyConfigPlan(rootDir, plan);
+            const output = { ...plan, applyResult };
+            if (json) {
+              console.log(JSON.stringify(output, null, 2));
+            } else {
+              console.log(`phasegate config:plan apply (${plan.intent})`);
+              console.log(`changed: ${applyResult.changed}`);
+              console.log(`backup: ${applyResult.backupPath}`);
+              console.log("Applied operations:");
+              for (const operation of applyResult.appliedOperations) console.log(`- ${operation.op} ${operation.pointer}`);
+            }
+            process.exit(0);
+          } catch (error) {
+            const message = error instanceof Error ? error.message : String(error);
+            if (json) {
+              console.log(JSON.stringify({ intent: plan.intent, refused: true, error: message, configPatch: plan.configPatch }, null, 2));
+            } else {
+              console.error(`Error: ${message}`);
+            }
+            process.exit(1);
+          }
+        }
         if (json) {
           console.log(JSON.stringify(plan, null, 2));
         } else {
@@ -2402,6 +2475,16 @@ async function main(): Promise<void> {
         break;
       }
 
+      case "status": {
+        console.error("Warning: 'phasegate status' is deprecated; use 'phasegate phasegate:status'.");
+        const mod = createHarnessApiModule();
+        const flags: Record<string, boolean | string> = {};
+        if (json) flags.json = true;
+        await mod.handlers.status.handle({}, flags);
+        if (!json) await printStoryReflectionStatusLine(rootDir);
+        break;
+      }
+
       case "phasegate:lint": {
         const mod = createHarnessApiModule();
         const flags: Record<string, boolean | string> = {};
@@ -2420,6 +2503,15 @@ async function main(): Promise<void> {
         break;
       }
 
+      case "complete-check": {
+        console.error("Warning: 'phasegate complete-check' is deprecated; use 'phasegate phasegate:complete-check'.");
+        const mod = createHarnessApiModule();
+        const flags: Record<string, boolean | string> = {};
+        if (json) flags.json = true;
+        await mod.handlers.completeCheck.handle({}, flags);
+        break;
+      }
+
       case "phasegate:impact-analysis": {
         const mod = createHarnessApiModule();
         const storyId = args[1] && !args[1].startsWith("--") ? args[1] : (parseFlag(args, "--story-id") ?? "");
@@ -2466,6 +2558,11 @@ Examples:
   phasegate ci:generate-template --preset strict --type pre-commit --render`);
           process.exit(0);
         }
+        const flagError = validateKnownFlags(args.slice(1), ["--preset", "--type", "--render", "--json", "--help"]);
+        if (flagError !== null) {
+          console.error(flagError);
+          process.exit(2);
+        }
         const mod = buildCiGovernance(rootDir, harnessRoot);
         const presetId = parseFlag(args, "--preset") ?? "standard";
         const templateType = parseFlag(args, "--type") ?? "aidlc-gate";