pi-pstack-native 0.0.0-stage → 1.0.0

package/test/workflow.test.ts

@@ -0,0 +1,408 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { join } from "node:path";
+import type { AgentRecord } from "../src/runtime/types.ts";
+import { workflowPath } from "../src/runtime/home.ts";
+import { writeJsonAtomic } from "../src/runtime/store.ts";
+import { WorkflowEngine, type AgentRunner } from "../src/workflow/engine.ts";
+
+type Run = Parameters<AgentRunner["run"]>[0];
+
+class FakeAgents implements AgentRunner {
+  active = 0;
+  maxActive = 0;
+  started: string[] = [];
+  recovered: string[] = [];
+  records = new Map<string, AgentRecord>();
+  delay = 15;
+
+  async run(spec: Run): Promise<AgentRecord> {
+    this.active++; this.maxActive = Math.max(this.maxActive, this.active); this.started.push(spec.callKey ?? "?");
+    await new Promise((resolve) => setTimeout(resolve, this.delay));
+    this.active--;
+    const failed = spec.task.includes("FAIL");
+    const isolated = spec.isolation === "worktree";
+    const record: AgentRecord = {
+      id: spec.id!, workflowId: spec.workflowId, callKey: spec.callKey, profile: spec.profile,
+      task: spec.task, state: failed ? "failed" : "completed", cwd: isolated ? `/tmp/${spec.callKey}-tree` : spec.cwd, isolation: spec.isolation ?? "shared",
+      ...(isolated ? { worktree: `/tmp/${spec.callKey}-tree`, branch: `pstack-native/${spec.callKey}` } : {}),
+      createdAt: new Date().toISOString(), finishedAt: new Date().toISOString(), attempt: spec.attempt ?? 1, depth: 1,
+      ...(failed ? { error: { code: "TEST", message: "boom", retryable: false, occurredAt: new Date().toISOString() } } : { result: `done:${spec.callKey}` }),
+    };
+    this.records.set(record.id, record); return record;
+  }
+  get(id: string) { return this.records.get(id); }
+  async stop(id: string) { const r = this.records.get(id)!; const n = { ...r, state: "cancelled" as const }; this.records.set(id,n); return n; }
+  async recover(record: AgentRecord) { this.recovered.push(record.callKey ?? "?"); const n = { ...record, state: "completed" as const, result: `resumed:${record.callKey}`, finishedAt: new Date().toISOString() }; this.records.set(record.id,n); return n; }
+}
+
+function fakeCtx(sessionId = "s1"): any {
+  return { cwd: process.cwd(), sessionManager: { getSessionId: () => sessionId } };
+}
+
+async function withHome(fn: (dir: string) => Promise<void>) {
+  const old = process.env.PSTACK_NATIVE_HOME;
+  const dir = mkdtempSync(join(process.cwd(), ".pstack-wf-"));
+  process.env.PSTACK_NATIVE_HOME = dir;
+  try { await fn(dir); } finally { if (old === undefined) delete process.env.PSTACK_NATIVE_HOME; else process.env.PSTACK_NATIVE_HOME = old; rmSync(dir, {recursive:true,force:true}); }
+}
+
+test("parallel graph obeys shared concurrency and completes", async () => withHome(async () => {
+  const agents = new FakeAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: process.cwd(), parentSessionId: "s1", maxConcurrency: 2, nodes: [
+    { key: "a", task: "A" }, { key: "b", task: "B" }, { key: "c", task: "C" },
+  ]});
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  assert.equal(agents.maxActive, 2);
+  assert.equal(Object.values(done.calls).every((c) => c.state === "completed"), true);
+}));
+
+test("chain waits for dependencies in order", async () => withHome(async () => {
+  const agents = new FakeAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: process.cwd(), nodes: [
+    { key: "a", task: "A" },
+    { key: "b", task: "B", dependsOn: ["a"] },
+    { key: "c", task: "C", dependsOn: ["b"] },
+  ]});
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  assert.deepEqual(agents.started, ["a", "b", "c"]);
+}));
+
+test("failed dependency skips downstream work", async () => withHome(async () => {
+  const agents = new FakeAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: process.cwd(), nodes: [
+    { key: "a", task: "FAIL" },
+    { key: "b", task: "must not run", dependsOn: ["a"] },
+  ]});
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "failed");
+  assert.equal(done.calls.a.state, "failed");
+  assert.equal(done.calls.b.state, "skipped");
+  assert.deepEqual(agents.started, ["a"]);
+}));
+
+test("retry reruns a failed call and resets failed downstream work", async () => withHome(async () => {
+  class RetryAgents extends FakeAgents {
+    attempts = new Map<string, number>();
+    override async run(spec: Run): Promise<AgentRecord> {
+      const key = spec.callKey ?? "?";
+      const attempt = (this.attempts.get(key) ?? 0) + 1;
+      this.attempts.set(key, attempt);
+      if (key === "a" && attempt === 1) {
+        this.started.push(key);
+        const failed: AgentRecord = {
+          id: spec.id!, workflowId: spec.workflowId, callKey: key, profile: spec.profile,
+          task: spec.task, state: "failed", cwd: spec.cwd, isolation: spec.isolation ?? "shared",
+          createdAt: new Date().toISOString(), finishedAt: new Date().toISOString(), attempt: spec.attempt ?? 1, depth: 1,
+          error: { code: "INJECTED", message: "first attempt fails", retryable: true, occurredAt: new Date().toISOString() },
+        };
+        this.records.set(failed.id, failed);
+        return failed;
+      }
+      return super.run(spec);
+    }
+  }
+  const agents = new RetryAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: process.cwd(), nodes: [
+    { key: "a", task: "retry this call" },
+    { key: "b", task: "rerun after a succeeds", dependsOn: ["a"] },
+  ] });
+  const first = await engine.run(wf.id, fakeCtx());
+  assert.equal(first.state, "failed");
+  assert.equal(first.calls.a.state, "failed");
+  assert.equal(first.calls.b.state, "skipped");
+
+  const retried = engine.retry(wf.id, "a");
+  assert.equal(retried.state, "created");
+  assert.equal(retried.calls.a.state, "pending");
+  assert.equal(retried.calls.b.state, "pending");
+  const final = await engine.run(wf.id, fakeCtx());
+  assert.equal(final.state, "completed");
+  assert.equal(final.calls.a.attempt, 2);
+  assert.equal(final.calls.b.attempt, 1);
+  assert.deepEqual(agents.attempts, new Map([["a", 2], ["b", 1]]));
+}));
+
+test("restart resumes only the running child and does not rerun completed nodes", async () => withHome(async () => {
+  const agents = new FakeAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: process.cwd(), parentSessionId: "s1", nodes: [
+    { key: "a", task: "A" },
+    { key: "b", task: "B", dependsOn: ["a"] },
+  ]});
+  wf.state = "running";
+  wf.calls.a.state = "completed"; wf.calls.a.result = "already"; wf.calls.a.attempt = 1; wf.calls.a.agentId = "ag_done";
+  wf.calls.b.state = "running"; wf.calls.b.attempt = 1; wf.calls.b.agentId = "ag_resume";
+  writeJsonAtomic(workflowPath(wf.id), wf);
+  agents.records.set("ag_done", { id:"ag_done",workflowId:wf.id,callKey:"a",profile:"worker",task:"A",state:"completed",cwd:process.cwd(),isolation:"shared",createdAt:new Date().toISOString(),attempt:1,depth:1,result:"already" });
+  agents.records.set("ag_resume", { id:"ag_resume",workflowId:wf.id,callKey:"b",profile:"worker",task:"B",state:"running",cwd:process.cwd(),isolation:"shared",createdAt:new Date().toISOString(),attempt:1,depth:1 });
+  engine.recoverSession("s1", fakeCtx());
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  assert.deepEqual(agents.started, []);
+  assert.deepEqual(agents.recovered, ["b"]);
+  assert.equal(done.calls.b.attempt, 1, "process recovery is not a new business attempt");
+}));
+
+test("verifier with one worker dependency runs against that worker worktree", async () => withHome(async () => {
+  class WorktreeAgents extends FakeAgents {
+    specs: Run[] = [];
+    override async run(spec: Run) {
+      this.specs.push(spec);
+      const r = await super.run(spec);
+      if (spec.callKey === "worker") {
+        r.worktree = "/tmp/fake-worker-tree"; r.cwd = r.worktree;
+        this.records.set(r.id,r);
+      }
+      return r;
+    }
+  }
+  const agents = new WorktreeAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: "/repo", nodes: [
+    { key: "worker", profile: "worker", task: "change" },
+    { key: "verify", profile: "verifier", task: "test", dependsOn: ["worker"] },
+  ]});
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  const verify = agents.specs.find((s) => s.callKey === "verify")!;
+  assert.equal(verify.cwd, "/tmp/fake-worker-tree");
+  assert.equal(verify.isolation, "readonly");
+}));
+
+
+test("single writer works in the target checkout while parallel root writers are isolated", async () => withHome(async () => {
+  class CaptureAgents extends FakeAgents { specs: Run[] = []; override async run(spec: Run) { this.specs.push(spec); return super.run(spec); } }
+  const singleAgents = new CaptureAgents();
+  const single = new WorkflowEngine(singleAgents);
+  const one = single.create({ cwd: "/repo", nodes: [{ key: "worker", profile: "worker", task: "change" }] });
+  await single.run(one.id, fakeCtx());
+  assert.equal(singleAgents.specs[0]!.cwd, "/repo");
+  assert.equal(singleAgents.specs[0]!.isolation, "shared");
+
+  const parallelAgents = new CaptureAgents();
+  const parallel = new WorkflowEngine(parallelAgents);
+  const many = parallel.create({ cwd: "/repo", nodes: [
+    { key: "a", profile: "worker", task: "A" },
+    { key: "b", profile: "worker", task: "B" },
+  ]});
+  await parallel.run(many.id, fakeCtx());
+  assert.deepEqual(parallelAgents.specs.map((x) => x.isolation).sort(), ["worktree", "worktree"]);
+}));
+
+test("a writable chain continues in its predecessor workspace", async () => withHome(async () => {
+  class CaptureAgents extends FakeAgents { specs: Run[] = []; override async run(spec: Run) { this.specs.push(spec); return super.run(spec); } }
+  const agents = new CaptureAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: "/repo", nodes: [
+    { key: "a", profile: "worker", task: "A", isolation: "worktree" },
+    { key: "b", profile: "worker", task: "B", dependsOn: ["a"] },
+  ]});
+  await engine.run(wf.id, fakeCtx());
+  const b = agents.specs.find((x) => x.callKey === "b")!;
+  assert.equal(b.cwd, "/tmp/a-tree");
+  assert.equal(b.isolation, "shared");
+}));
+
+test("multiple writer outputs require an integrator and the integrator receives artifact locations", async () => withHome(async () => {
+  const invalid = new WorkflowEngine(new FakeAgents());
+  assert.throws(() => invalid.create({ cwd: "/repo", nodes: [
+    { key: "a", profile: "worker", task: "A" },
+    { key: "b", profile: "worker", task: "B" },
+    { key: "merge", profile: "worker", task: "merge", dependsOn: ["a", "b"] },
+  ]}), /Use profile "integrator"/);
+
+  class CaptureAgents extends FakeAgents { specs: Run[] = []; override async run(spec: Run) { this.specs.push(spec); return super.run(spec); } }
+  const agents = new CaptureAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: "/repo", nodes: [
+    { key: "a", profile: "worker", task: "A" },
+    { key: "b", profile: "worker", task: "B" },
+    { key: "merge", profile: "integrator", task: "combine", dependsOn: ["a", "b"] },
+    { key: "verify", profile: "verifier", task: "verify combined", dependsOn: ["merge"] },
+  ]});
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  const merge = agents.specs.find((x) => x.callKey === "merge")!;
+  assert.equal(merge.cwd, "/repo");
+  assert.equal(merge.isolation, "shared");
+  assert.match(merge.task, /workspace: \/tmp\/a-tree/);
+  assert.match(merge.task, /workspace: \/tmp\/b-tree/);
+  assert.match(merge.task, /explicit integration owner/);
+  const verify = agents.specs.find((x) => x.callKey === "verify")!;
+  assert.equal(verify.cwd, "/repo");
+  assert.equal(verify.isolation, "readonly");
+}));
+
+test("recovery reattaches every saved running call even when more were running than the current cap", async () => withHome(async () => {
+  const agents = new FakeAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: process.cwd(), parentSessionId: "s1", maxConcurrency: 1, nodes: [
+    { key: "a", task: "A" }, { key: "b", task: "B" },
+  ]});
+  wf.state = "running";
+  for (const key of ["a", "b"]) {
+    const id = `ag_${key}`;
+    wf.calls[key]!.state = "running"; wf.calls[key]!.attempt = 1; wf.calls[key]!.agentId = id;
+    agents.records.set(id, { id, workflowId:wf.id, callKey:key, profile:"worker", task:key, state:"running", cwd:process.cwd(), isolation:"shared", createdAt:new Date().toISOString(), attempt:1,depth:1 });
+  }
+  writeJsonAtomic(workflowPath(wf.id), wf);
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  assert.deepEqual(agents.recovered.sort(), ["a", "b"]);
+  assert.equal(done.calls.a.attempt, 1);
+  assert.equal(done.calls.b.attempt, 1);
+}));
+
+test("reviewer or verifier cannot pretend to inspect several isolated writer artifacts without integration", async () => withHome(async () => {
+  const engine = new WorkflowEngine(new FakeAgents());
+  for (const profile of ["reviewer", "verifier"]) {
+    assert.throws(() => engine.create({ cwd: "/repo", nodes: [
+      { key: "a", profile: "worker", task: "A" },
+      { key: "b", profile: "worker", task: "B" },
+      { key: "check", profile, task: "check both", dependsOn: ["a", "b"] },
+    ]}), /Add an integrator node first/);
+  }
+}));
+
+test("terminal callback wakes async start/recovery but not a synchronous run twice", async () => withHome(async () => {
+  const agents = new FakeAgents();
+  const notified: string[] = [];
+  const engine = new WorkflowEngine(agents, (record) => notified.push(record.id));
+  const sync = engine.create({ cwd: "/repo", nodes: [{ key: "a", task: "A" }] });
+  await engine.run(sync.id, fakeCtx());
+  assert.deepEqual(notified, [], "synchronous run returns its result through the tool and must not wake again");
+
+  const asyncWf = engine.create({ cwd: "/repo", nodes: [{ key: "b", task: "B" }] });
+  engine.start(asyncWf.id, fakeCtx());
+  await engine.run(asyncWf.id, fakeCtx());
+  assert.deepEqual(notified, [asyncWf.id]);
+}));
+
+test("pause stops scheduling new nodes after active work drains; resume continues remaining graph", async () => withHome(async () => {
+  class GateAgents extends FakeAgents {
+    release!: () => void;
+    gate = new Promise<void>((resolve) => { this.release = resolve; });
+    override async run(spec: Run): Promise<AgentRecord> {
+      this.active++; this.maxActive = Math.max(this.maxActive, this.active); this.started.push(spec.callKey ?? "?");
+      if (spec.callKey === "a") await this.gate;
+      this.active--;
+      const record: AgentRecord = {
+        id: spec.id!, workflowId: spec.workflowId, callKey: spec.callKey, profile: spec.profile,
+        task: spec.task, state: "completed", cwd: spec.cwd, isolation: spec.isolation ?? "shared",
+        createdAt: new Date().toISOString(), finishedAt: new Date().toISOString(), attempt: spec.attempt ?? 1, depth: 1,
+        result: `done:${spec.callKey}`,
+      };
+      this.records.set(record.id, record); return record;
+    }
+  }
+  const agents = new GateAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: "/repo", maxConcurrency: 1, nodes: [
+    { key: "a", task: "A" },
+    { key: "b", task: "B", dependsOn: ["a"] },
+  ]});
+  engine.start(wf.id, fakeCtx());
+  while (!agents.started.includes("a")) await new Promise((resolve) => setTimeout(resolve, 1));
+  const paused = engine.pause(wf.id);
+  assert.equal(paused.state, "paused");
+  agents.release();
+  await new Promise((resolve) => setTimeout(resolve, 15));
+  assert.deepEqual(agents.started, ["a"], "pause must not schedule b after a finishes");
+  assert.equal(engine.get(wf.id)!.state, "paused");
+  engine.resume(wf.id, fakeCtx());
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  assert.deepEqual(agents.started, ["a", "b"]);
+}));
+
+test("writer reached through scout cannot collide with an unrelated root writer", async () => withHome(async () => {
+  class CaptureAgents extends FakeAgents {
+    specs: Run[] = [];
+    override async run(spec: Run) { this.specs.push(spec); return super.run(spec); }
+  }
+  const agents = new CaptureAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: "/repo", maxConcurrency: 3, nodes: [
+    { key: "first", profile: "worker", task: "A" },
+    { key: "scout", profile: "scout", task: "inspect" },
+    { key: "second", profile: "worker", task: "B", dependsOn: ["scout"] },
+  ]});
+  const done = await engine.run(wf.id, fakeCtx());
+  assert.equal(done.state, "completed");
+  assert.deepEqual(agents.specs.filter((spec) => spec.profile === "worker").map((spec) => spec.isolation), ["worktree", "worktree"]);
+}));
+
+test("hidden multi-writer artifacts require integration before verification or further writes", () => withHome(async () => {
+  const engine = new WorkflowEngine(new FakeAgents());
+  const prefix = [
+    { key: "a", profile: "worker", task: "A" },
+    { key: "b", profile: "worker", task: "B" },
+    { key: "summary", profile: "synthesizer", task: "summarize", dependsOn: ["a", "b"] },
+  ];
+  assert.throws(() => engine.create({ cwd: "/repo", nodes: [
+    ...prefix, { key: "verify", profile: "verifier", task: "check", dependsOn: ["summary"] },
+  ]}), /Add an integrator node first/);
+  assert.throws(() => engine.create({ cwd: "/repo", nodes: [
+    ...prefix, { key: "next", profile: "worker", task: "continue", dependsOn: ["summary"] },
+  ]}), /Use profile "integrator"/);
+}));
+
+test("single writer artifact propagates through synthesizer to verifier", async () => withHome(async () => {
+  class CaptureAgents extends FakeAgents { specs: Run[] = []; override async run(spec: Run) { this.specs.push(spec); return super.run(spec); } }
+  const agents = new CaptureAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: "/repo", nodes: [
+    { key: "a", profile: "worker", task: "A", isolation: "worktree" },
+    { key: "summary", profile: "synthesizer", task: "summarize", dependsOn: ["a"] },
+    { key: "verify", profile: "verifier", task: "verify", dependsOn: ["summary"] },
+  ]});
+  assert.equal((await engine.run(wf.id, fakeCtx())).state, "completed");
+  const verifier = agents.specs.find((spec) => spec.callKey === "verify")!;
+  assert.equal(verifier.cwd, "/tmp/a-tree");
+  assert.equal(verifier.isolation, "readonly");
+}));
+
+test("two incomparable writers cannot share a single predecessor lane", () => withHome(async () => {
+  const engine = new WorkflowEngine(new FakeAgents());
+  assert.throws(() => engine.create({ cwd: "/repo", nodes: [
+    { key: "base", profile: "worker", task: "base" },
+    { key: "fork1", profile: "worker", task: "A", dependsOn: ["base"] },
+    { key: "fork2", profile: "worker", task: "B", dependsOn: ["base"] },
+  ]}), /Concurrent writable calls/);
+}));
+
+test("shared override and writable readonly override fail closed", () => withHome(async () => {
+  const engine = new WorkflowEngine(new FakeAgents());
+  assert.throws(() => engine.create({ cwd: "/repo", nodes: [
+    { key: "a", profile: "worker", task: "A", isolation: "shared" },
+    { key: "b", profile: "worker", task: "B" },
+  ]}), /requires a worktree/);
+  assert.throws(() => engine.create({ cwd: "/repo", nodes: [
+    { key: "a", profile: "worker", task: "A", isolation: "readonly" },
+  ]}), /cannot use readonly isolation/);
+}));
+
+test("integrator receives upstream artifact paths hidden behind a summary", async () => withHome(async () => {
+  class CaptureAgents extends FakeAgents { specs: Run[] = []; override async run(spec: Run) { this.specs.push(spec); return super.run(spec); } }
+  const agents = new CaptureAgents();
+  const engine = new WorkflowEngine(agents);
+  const wf = engine.create({ cwd: "/repo", nodes: [
+    { key: "a", task: "A" }, { key: "b", task: "B" },
+    { key: "summary", profile: "synthesizer", task: "summarize", dependsOn: ["a", "b"] },
+    { key: "merge", profile: "integrator", task: "merge", dependsOn: ["summary"] },
+    { key: "verify", profile: "verifier", task: "check", dependsOn: ["merge"] },
+  ]});
+  assert.equal((await engine.run(wf.id, fakeCtx())).state, "completed");
+  const merge = agents.specs.find((spec) => spec.callKey === "merge")!;
+  assert.match(merge.task, /a: workspace: \/tmp\/a-tree/);
+  assert.match(merge.task, /b: workspace: \/tmp\/b-tree/);
+  assert.equal(agents.specs.find((spec) => spec.callKey === "verify")!.cwd, "/repo");
+}));

package/test/worktree.test.ts

@@ -0,0 +1,39 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { execFileSync } from "node:child_process";
+import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { createWorktree, isWorktreeDirty, removeWorktree } from "../src/worktree/manager.ts";
+
+function git(cwd: string, ...args: string[]) { return execFileSync("git", args, {cwd,encoding:"utf8"}).trim(); }
+
+test("worktree manager isolates writers and refuses dirty cleanup", async () => {
+  const base = mkdtempSync(join(process.cwd(), ".pstack-git-"));
+  const home = mkdtempSync(join(process.cwd(), ".pstack-home-"));
+  const old = process.env.PSTACK_NATIVE_HOME; process.env.PSTACK_NATIVE_HOME = home;
+  try {
+    git(base,"init","-q"); git(base,"config","user.email","test@example.com"); git(base,"config","user.name","test");
+    writeFileSync(join(base,"x.txt"),"one\n"); git(base,"add","x.txt"); git(base,"commit","-qm","init");
+    const wt = await createWorktree(base,"owner-1");
+    writeFileSync(join(wt.path,"x.txt"),"two\n");
+    assert.equal(await isWorktreeDirty(wt.path), true);
+    await assert.rejects(() => removeWorktree(wt), /Refusing to remove dirty worktree/);
+    git(wt.path,"checkout","--","x.txt");
+    await removeWorktree(wt);
+  } finally {
+    if (old === undefined) delete process.env.PSTACK_NATIVE_HOME; else process.env.PSTACK_NATIVE_HOME = old;
+    rmSync(base,{recursive:true,force:true}); rmSync(home,{recursive:true,force:true});
+  }
+});
+
+test('worktree audit compares the explicit PR parent, not a hard-coded default branch',async()=>{
+ const {auditWorktree}=await import('../src/worktree/manager.ts');
+ const base=mkdtempSync(join(process.cwd(),'.audit-git-')),home=mkdtempSync(join(process.cwd(),'.audit-home-')),old=process.env.PSTACK_NATIVE_HOME;process.env.PSTACK_NATIVE_HOME=home;
+ try{
+  git(base,'init','-q','-b','main');git(base,'config','user.email','test@example.invalid');git(base,'config','user.name','Test');writeFileSync(join(base,'x'),'base');git(base,'add','.');git(base,'commit','-qm','base');
+  const wt=await createWorktree(base,'audit-owner','main');writeFileSync(join(wt.path,'unit'),'unit');git(wt.path,'add','.');git(wt.path,'commit','-qm','unit');
+  const notMerged=await auditWorktree(wt,'main');assert.equal(notMerged.merged,false);assert.equal(notMerged.ahead,1);assert.equal(notMerged.dirty,false);
+  git(base,'branch','parent',git(wt.path,'rev-parse','HEAD'));const merged=await auditWorktree(wt,'parent');assert.equal(merged.merged,true);assert.equal(merged.ahead,0);assert.equal(merged.comparisonBase,'parent');
+  await assert.rejects(auditWorktree(wt,'--all'));await removeWorktree(wt);
+ }finally{if(old===undefined)delete process.env.PSTACK_NATIVE_HOME;else process.env.PSTACK_NATIVE_HOME=old;rmSync(base,{recursive:true,force:true});rmSync(home,{recursive:true,force:true});}
+});

package/tsconfig.build.json

@@ -0,0 +1,12 @@
+{
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": false,
+    "rewriteRelativeImportExtensions": true,
+    "outDir": "dist",
+    "rootDir": "src",
+    "declaration": true
+  },
+  "include": ["src/**/*.ts"],
+  "exclude": ["test", "dist"]
+}

package/tsconfig.json

@@ -0,0 +1,17 @@
+{
+  "compilerOptions": {
+    "target": "ES2022",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "lib": ["ES2022"],
+    "types": ["node"],
+    "noEmit": true,
+    "strict": true,
+    "noImplicitAny": false,
+    "skipLibCheck": true,
+    "allowImportingTsExtensions": true,
+    "esModuleInterop": true,
+    "forceConsistentCasingInFileNames": true
+  },
+  "include": ["src/**/*.ts", "test/**/*.ts"]
+}

package/vendor/upstream/0.15.17/pstack/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Lauren Tan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/vendor/upstream/0.15.17/pstack/skills/architect/SKILL.md

@@ -0,0 +1,79 @@
+---
+name: architect
+description: "Sketch types, signatures, and module structure before code, then stay in the loop while implementation fills in. Use for /architect, 'architect this', 'design this', or non-trivial work where jumping to code would lock in the wrong shape."
+disable-model-invocation: true
+---
+
+# Architect
+
+Sketch types, function signatures, class shapes, and module boundaries with `not implemented` bodies and pseudocode. Synthesize across multiple model perspectives, then fill in code against the chosen sketch.
+
+## Start
+
+Open a todolist with one entry per phase before starting.
+
+1. Ground
+2. Sketch
+3. Agree
+4. Implement
+5. Scrap
+
+## Phase A: Ground the problem
+
+Build a real mental model of every system the new code touches. Run the **how** skill over the relevant subsystems. Naming a file isn't grounding. Produce the architectural explanation `how` prescribes. If the design redefines ownership or layering, also run the **why** skill on the existing shape so the rationale becomes a constraint, not a guess.
+
+Skip Phase A only when the work is genuinely greenfield with no surrounding system to integrate.
+
+## Phase B: Sketch
+
+Run the **arena** skill with the design-sketch task and the Phase A grounding artifacts. Pass `references/runner-prompt.md` as each runner's prompt.
+
+Take the runners from the `architect runners` line in the `pstack-models.mdc` rule, in place of the `arena runners` line. If the rule or that line is missing, use `claude-opus-5-5-xhigh` and `grok-4.7-xhigh-fast`. Alias and rejected entries follow the runner rules in the **arena** skill's Phase A.
+
+Design it twice. Require at least two structurally distinct candidates before synthesis, even when the first looks sufficient. This is the **exhaust-the-design-space** principle skill made concrete. Whole-shape alternatives, not point fixes inside one shape.
+
+Screen every candidate against [`references/design-red-flags.md`](references/design-red-flags.md) before synthesis. Assume the next contributor is an agent that sees only the files it opened, copies the nearest example, and takes the shortest path that compiles. Prefer the design where a change that looks right from one file is right for the whole repo.
+
+Compare viable candidates on interface depth. Prefer the design that hides more complexity behind a smaller, simpler public surface. A rich interface can keep call chains short by concentrating capability instead of scattering it across layers.
+
+Arena returns one synthesized design package. Its synthesis decision fills the rationale's "Synthesis decision" section.
+
+## Phase C: Agree (opt-in)
+
+Default: proceed directly to implementation with the synthesized design. No human checkpoint.
+
+Opt in to a checkpoint when the invoker explicitly asks: "/architect with checkpoint," "stop and show me before implementing," or similar. Then surface the synthesized design and pause for sign-off.
+
+The synthesis can ship as its own commit either way, as the "scaffold first" mode of the **foundational-thinking** principle skill. Planned and scoped breakage during fill-in is fine, per the **outcome-oriented-execution** principle skill. For adversarial pressure on the design before implementing, run the **interrogate** skill on the synthesized sketch.
+
+If the human pushes back on the shape (in a checkpoint or after the fact), treat that as Phase A evidence. Re-ground and re-run Phase B before writing more code.
+
+## Phase D: Implement against the sketch
+
+Replace `not implemented` bodies with code, pseudocode with logic. The synthesized sketch is the contract. Deviations from it are signal to surface, not friction to absorb silently. If a function needs a parameter the sketch didn't anticipate, ask whether the sketch was wrong, the requirement was missed, or the implementation is overreaching.
+
+## Phase E: Scrap when the architecture is wrong
+
+If implementation keeps producing friction the sketch can't absorb, throw the sketch out. Don't bolt fixes onto a wrong design, per the **redesign-from-first-principles** and **fix-root-causes** principle skills.
+
+The signal is a *pattern*, not single instances. Tells:
+
+- The same shape of workaround appearing repeatedly across unrelated code.
+- Multiple unrelated edge cases that all need special-case branches.
+- Types that need escape hatches (`any`, casts, optional fields always set in practice) to compile.
+- The "we need a lock" reflex when the sketch said the state wasn't shared.
+- Callers having to know the abstraction's internal rules to use it.
+- Two or more independent Phase D deviations of the same shape across the implementation.
+
+Use judgment. A few edge cases don't condemn an architecture. Some problems are legitimately complex. Complexity in the data is not complexity in the design.
+
+When you scrap:
+
+1. Re-run the **how** skill over what's been built.
+2. Redesign as if the new constraints had been day-one assumptions, per redesign-from-first-principles.
+3. Subtract before adding, per the **subtract-before-you-add** principle skill. The new sketch should be smaller than the old one before it grows.
+4. Return to Phase B and re-run arena.
+
+## Outputs
+
+The caller's usage is written first and the type sketch derived from it. One file with new types and signatures for small changes. Module map plus type definitions for larger work. The rationale ships alongside, shaped per `references/rationale-template.md`, including the usage sketch and the synthesis decision.

package/vendor/upstream/0.15.17/pstack/skills/architect/references/design-red-flags.md

@@ -0,0 +1,57 @@
+# Design red flags
+
+Screen every candidate before synthesis. A red flag is a reason to revise or reject the shape.
+
+## Shallow module
+
+A shallow module exposes a large interface while hiding little complexity. Judge depth by the capability and policy hidden behind the public surface relative to the size of that surface. Prefer a simple interface backed by substantial behavior.
+
+Do not confuse a deep module with a deep call chain. A deep call chain scatters understanding across layers. A deep module concentrates capability behind one interface.
+
+Look for these signs:
+
+- Callers coordinate several methods to complete one operation.
+- Public options expose internal stages or implementation choices.
+- Learning the interface does not save the caller from learning the implementation.
+
+## Information leakage
+
+Information leakage makes multiple modules depend on the same internal decision. A representation, policy, or protocol detail appears in more than one place, so changing it requires coordinated edits.
+
+Public re-exports of transport or wire types are leakage. Parse external data into domain types behind the interface. Keep storage schemas, framework objects, and protocol details private.
+
+## Temporal decomposition
+
+Temporal decomposition organizes modules by execution order instead of the knowledge they own. Separate load, validate, transform, and save stages often repeat one representation and its invariants across several boundaries.
+
+Group code around domain knowledge and ownership. Methods that run at different times can still belong to one module when they protect the same decisions.
+
+## Pass-through method
+
+A pass-through method forwards the same arguments to another method with the same shape. It adds a layer without hiding complexity.
+
+Remove it or move responsibility to the module that can complete the operation. Keep a forwarding boundary only when it adds policy, adaptation, or a distinct abstraction.
+
+## Split ownership
+
+More than one module writes the same state or keeps its own copy of it. An agent that edits one writer can't see the others, so their rules diverge.
+
+Give each piece of state one owner. Other modules read it or ask the owner to change it.
+
+## Two ways to do one task
+
+The design supports more than one way to do the same task. An agent copies whichever way it finds first, so every way keeps gaining callers.
+
+Keep one way. Move callers off the others and delete them in the same change.
+
+## Importable internals
+
+A caller can import a module's internals. An agent takes the shortest path that compiles, so it imports them directly and they become part of the interface.
+
+Make internals unreachable from outside the module, so an import from outside fails the build.
+
+## Hand-synced list
+
+Two or more places list the same items, and adding an item means editing every list. An agent that sees one list updates only that one.
+
+Keep one list and derive the others from it. If a list can't be derived, make the build fail when the lists disagree.