sequant 2.6.2 → 2.7.0

package/.claude-plugin/marketplace.json

@@ -8,7 +8,7 @@
     {
       "name": "sequant",
       "description": "AI coding agent orchestrator for Claude Code — resolve GitHub issues end-to-end with isolated git worktrees, quality gates, and an MCP server. Includes 17 skills, workflow MCP tools, and pre/post-tool hooks.",
-      "version": "2.6.2",
+      "version": "2.7.0",
       "author": {
         "name": "sequant-io",
         "email": "hello@sequant.io"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "sequant",
   "description": "AI coding agent orchestrator for Claude Code — resolve GitHub issues end-to-end with isolated git worktrees and quality gates, through spec → exec → qa phases.",
-  "version": "2.6.2",
+  "version": "2.7.0",
   "author": {
     "name": "sequant-io",
     "email": "hello@sequant.io"

package/README.md

@@ -16,6 +16,10 @@ AI coding agents write code well, but leave you to run the workflow around it
 
 See the [CHANGELOG](CHANGELOG.md) for release notes, or the [migration guide](CHANGELOG.md#migration-from-v1x) if upgrading from v1.x.
 
+### What's new in 2.7
+
+- **Trustworthy `--dry-run` previews for `sync` and `update`** — `sequant sync --dry-run` (`-d`) previews the exact set the apply would write (`new` + `modified` + `local-override`) and mutates nothing. Both `sync --dry-run` and `update --dry-run` now exit non-zero when work is pending, so a CI/automation job can gate on the exit code instead of parsing stdout. (`update` is the interactive command; `sync` is the documented non-interactive/CI surface.)
+
 ### What's new in 2.6
 
 - **Boxed Ink TUI is the default for `sequant run`** — on a TTY, `run` now renders the boxed dashboard by default (matching `sequant ready`). Opt out with `--no-tui` (line renderer) or `-s`/`--quiet` (heartbeat-only); non-TTY output auto-degrades.

package/dist/bin/cli.js

@@ -135,6 +135,7 @@ program
     .description("Sync skills and templates from the Sequant package (non-interactive)")
     .option("-f, --force", "Sync even if versions match")
     .option("-q, --quiet", "Suppress output")
+    .option("-d, --dry-run", "Show what sync would write without making changes (exits non-zero if work is pending)")
     .action(syncCommand);
 program
     .command("doctor")

package/dist/marketplace/external_plugins/sequant/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "sequant",
   "description": "AI coding agent orchestrator for Claude Code — resolve GitHub issues end-to-end with isolated git worktrees and quality gates, through spec → exec → qa phases.",
-  "version": "2.6.2",
+  "version": "2.7.0",
   "author": {
     "name": "sequant-io",
     "email": "hello@sequant.io"

package/dist/src/commands/sync.d.ts

@@ -7,6 +7,7 @@
 interface SyncOptions {
     force?: boolean;
     quiet?: boolean;
+    dryRun?: boolean;
 }
 /**
  * Get the version of skills currently installed

package/dist/src/commands/sync.js

@@ -181,7 +181,7 @@ async function updateSkillsVersion() {
     await writeFile(SKILLS_VERSION_PATH, getPackageVersion());
 }
 export async function syncCommand(options = {}) {
-    const { force = false, quiet = false } = options;
+    const { force = false, quiet = false, dryRun = false } = options;
     if (!quiet) {
         console.log(chalk.blue("\nSyncing templates...\n"));
         console.log(chalk.yellow("Note: For seamless auto-updates, install sequant as a Claude Code plugin:\n" +
@@ -231,6 +231,61 @@ export async function syncCommand(options = {}) {
         process.exitCode = 1;
         return;
     }
+    // Preview path: report exactly what the apply would write, then stop without
+    // mutating (#722). This branch is only reached when `force` is set or the
+    // version marker mismatches — i.e. the path that runs `copyTemplates(force:
+    // true)` and rewrites the whole tree. (A matching-version, non-force dry-run
+    // already returned at the report-only short-circuit above, which never
+    // mutates.) `copyTemplates` does NOT protect in-place customizations the way
+    // `update` does — the force copy overwrites them — so the preview counts
+    // `local-override` files alongside `new`/`modified`. Reporting only
+    // new+modified would under-report the write-set, the exact divergence #722
+    // is about.
+    if (dryRun) {
+        const changes = await computeTemplateChanges(manifest.stack, tokens);
+        const newFiles = changes.filter((c) => c.status === "new");
+        const modifiedFiles = changes.filter((c) => c.status === "modified");
+        const localOverrides = changes.filter((c) => c.status === "local-override");
+        const toWrite = [...newFiles, ...modifiedFiles, ...localOverrides];
+        if (!quiet) {
+            console.log(chalk.bold("Summary (dry-run):"));
+            console.log(chalk.green(`  New files: ${newFiles.length}`));
+            console.log(chalk.yellow(`  Modified: ${modifiedFiles.length}`));
+            console.log(chalk.blue(`  Local overrides (overwritten by sync): ${localOverrides.length}`));
+            if (modifiedFiles.length > 0) {
+                console.log(chalk.bold("\nModified files:"));
+                for (const file of modifiedFiles) {
+                    console.log(chalk.yellow(`  ${file.path}`));
+                }
+            }
+            if (newFiles.length > 0) {
+                console.log(chalk.bold("\nNew files:"));
+                for (const file of newFiles) {
+                    console.log(chalk.green(`  ${file.path}`));
+                }
+            }
+            if (localOverrides.length > 0) {
+                console.log(chalk.bold("\nLocal overrides (will be overwritten by sync):"));
+                for (const file of localOverrides) {
+                    console.log(chalk.blue(`  ${file.path}`));
+                }
+            }
+            if (toWrite.length === 0) {
+                console.log(chalk.green("\n✔ Skills are already up to date!"));
+            }
+            else {
+                console.log(chalk.gray("\n(dry-run mode - no changes made)"));
+            }
+        }
+        // Non-zero exit when work is pending so the documented preview surface can
+        // gate CI/automation (the #709 intent): a dry-run reporting nothing must
+        // mean nothing to do. The matching-version short-circuit signals drift the
+        // same way.
+        if (toWrite.length > 0) {
+            process.exitCode = 1;
+        }
+        return;
+    }
     // Copy templates with force to overwrite existing files
     const copyOptions = {
         force: true, // Always overwrite when syncing

package/dist/src/commands/update.js

@@ -167,6 +167,13 @@ export async function updateCommand(options) {
     }
     if (options.dryRun) {
         console.log(chalk.gray("\n(dry-run mode - no changes made)"));
+        // Non-zero exit when work is pending so a CI/automation job can gate on the
+        // preview, matching `sync --dry-run` (#724 / #709 intent): a dry-run that
+        // reports nothing must mean nothing to do. The no-op case short-circuits at
+        // the "Everything is up to date!" return above, so it correctly stays 0.
+        if (applySet.length > 0) {
+            process.exitCode = 1;
+        }
         return;
     }
     // Confirm update. --yes and --force both auto-confirm; otherwise we need a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sequant",
-  "version": "2.6.2",
+  "version": "2.7.0",
   "description": "AI coding agent orchestrator — resolve GitHub issues end-to-end with isolated git worktrees, quality gates, and an MCP server. Works with Claude Code or Aider.",
   "type": "module",
   "bin": {