@agentsfleet/orly 0.14.0 → 0.14.2

package/README.md

@@ -78,7 +78,7 @@ TypeSafe's Jev model supplies runtime advice through explicit `orly judge` reque
 
 See [releases](https://github.com/agentsfleet/orly/releases) for published versions.
 The install commands below fetch the published package.
-The release workflow publishes 0.14.0 after its version change merges to `main`.
+The release workflow publishes 0.14.2 after its version change merges to `main`.
 
 ---
 

package/docs/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.14.2 — 2026-10-15
+
+The release inventory reads npm 12's pack output, and the API and logging guides cite agentsfleet's current module paths.
+
+- **npm 12** — `npm pack --dry-run --json` now prints one object keyed by package name instead of an array; the release inventory reads both, so `make audit` passes on npm 12.
+- **Guide citations** — the REST API and logging guides cite agentsfleet's `x/mod.rs` module paths, and request parsing points at `fleet/message_steer/mod.rs`.
+
+## 0.14.1 — 2026-10-11
+
+The logging standard names the field for a second failure's code.
+
+- **Role-prefixed codes** — §5 defines `cause_error_code`, `rollback_error_code` and `config_error_code`, and the `<role>_error_code` shape for new roles.
+- **Rust binding** — §8A points a record that reports a second failure at §5.
+
 ## 0.14.0 — 2026-10-08
 
 Retained TypeSafe Jev measurements now carry per-attempt explanations and explicit adoption limits.

package/docs/LOGGING_STANDARD.md

@@ -37,7 +37,7 @@ Documented honestly, not aspirationally. Pre-M62 baseline (the fix-pass converge
 
 - The named module `log` (source: `src/lib/logging/mod.zig`) exposes `scoped(.tag)` returning a logger struct with `.err` / `.warn` / `.info` / `.debug` methods. M62 removed the older free-function helpers (`logErr` / `logErrWithHint` / `logWarnErr`) — there is no compat shim.
 - TypeScript (`cli/src/**`) calls `console.log`/`console.error` directly. No structure. No scope. No severity beyond err vs out.
-- Error-code embedding (`UZ-XXX-NNN`) appears on some `err` lines but not others. The registry (`rustd/crates/afd_core/src/error_code.rs`) is the source of truth, but enforcement is voluntary.
+- Error-code embedding (`UZ-XXX-NNN`) appears on some `err` lines but not others. The registry (`rustd/crates/afd_core/src/error_code/mod.rs`) is the source of truth, but enforcement is voluntary.
 - No collector-friendly format. Logs are a mix of free-form English and ad-hoc `key={value}` fragments.
 
 The proposed standard below is what every new emit must conform to and what the fix-pass converges existing emits toward.
@@ -184,6 +184,21 @@ Embed the code as a struct field on the logger call: `log.err("event_name", .{ .
 
 System-level failures with no domain meaning (e.g. raw `EACCES` from a syscall before we attribute it to a tenant operation) emit without `error_code`. The follow-up rule: if a syscall failure surfaces to a user, it gets attributed to a registry code at the boundary.
 
+**One record, two failures.** Some records report a decision about another
+failure: a gate that fails open, a rollback, a refused configuration. The
+record's `error_code` names the decision. The failure behind it keeps its own
+registry code in a field named for its role:
+
+| Field | Carries the code of |
+|---|---|
+| `cause_error_code` | the failure the decision answers |
+| `rollback_error_code` | a failure in the recovery that followed |
+| `config_error_code` | the configuration read that could not be used |
+
+A new role takes the same `<role>_error_code` shape. `error_code` always names
+the record's own code, so never overwrite it with the cause's code. Never
+embed a code inside a reason sentence either; the field carries it.
+
 ## §6 · PII / secret discipline
 
 > [UNENFORCED → broad principle; no scan covers every log call site in the codebase for credential-shaped values]
@@ -324,12 +339,14 @@ arguments, never positional message formatting.
 
 > [JUDGMENT → RUST-STYLE]
 
-Every `warn` or `error` that maps to a registry code supplies
-`error_code = code` per §5. Hoist field expressions into locals before the macro
-call. The log bridge duplicates field expressions, and LLVM coverage
-instrumentation scores the dead copy; locals preserve evaluation and coverage
-behavior. A trailing string message is §3's optional `msg` and is always the
-last macro argument. Prefer fields alone when they already explain the event.
+Every `warn` or `error` that maps to a registry code supplies `error_code =
+code` per §5. A record that reports a second failure adds its
+`<role>_error_code` per §5, for example `cause_error_code`. Hoist field
+expressions into locals before the macro call. The log bridge duplicates field
+expressions, and LLVM coverage instrumentation scores the dead copy; locals
+preserve evaluation and coverage behavior. A trailing string message is §3's
+optional `msg` and is always the last macro argument. Prefer fields alone when
+they already explain the event.
 
 ```rust
 let code = error_code::INTERNAL_DB_QUERY.as_str();

package/docs/REST_API_DESIGN_GUIDELINES.md

@@ -347,7 +347,7 @@ documentation links. Handlers supply the code and a safe human-readable detail;
 they do not duplicate the registry's response shape.
 
 <!-- oracle-packs:start product.agentsfleet -->
-The `agentsfleet` registry is `rustd/crates/afd_core/src/error_code.rs` and its
+The `agentsfleet` registry is `rustd/crates/afd_core/src/error_code/mod.rs` and its
 family modules. Its handlers use these refusal constructors:
 
 ```rust
@@ -626,12 +626,12 @@ When in doubt, mirror an existing handler:
 | Pattern | Look at |
 |---------|---------|
 | Read, edit and purge one resource | `rustd/crates/afd_api_tenant/src/handler/fleet/detail.rs` |
-| Request parsing and its refusal sentences | `rustd/crates/afd_api_tenant/src/handler/fleet/detail_request.rs` |
-| Keyset pagination | `rustd/crates/afd_api_tenant/src/handler/tenant/models.rs` |
-| Platform plane, operator-held | `rustd/crates/afd_api_operator/src/handler/admin/platform_keys.rs` |
-| Streaming (Server-Sent Events) | `rustd/crates/afd_api_tenant/src/handler/stream.rs` |
+| Request parsing and its refusal sentences | `rustd/crates/afd_api_tenant/src/handler/fleet/message_steer/mod.rs` |
+| Keyset pagination | `rustd/crates/afd_api_tenant/src/handler/tenant/models/mod.rs` |
+| Platform plane, operator-held | `rustd/crates/afd_api_operator/src/handler/admin/platform_keys/mod.rs` |
+| Streaming (Server-Sent Events) | `rustd/crates/afd_api_tenant/src/handler/stream/mod.rs` |
 | Signature-proven ingress | `rustd/crates/afd_api_ingress/src/handler/webhook/receive_route.rs` |
-| A runner speaking for itself | `rustd/crates/afd_api_runner/src/handler/runner/lease.rs` |
+| A runner speaking for itself | `rustd/crates/afd_api_runner/src/handler/runner/lease/mod.rs` |
 
 <!-- oracle-packs:end -->
 ## §8 — Handler signature rule

package/docs/RULE_ENFORCEMENT.md

@@ -6,7 +6,7 @@ regenerates this file and fails on any difference. To update it, run
 
 | Rule document | enforced by | judged | acknowledged | classified | trigger |
 |---|---|--:|--:|--:|---|
-| `docs/LOGGING_STANDARD.md` | `LOG` → `logging.sh` | 10 | 13 | 28/28 | mechanical |
+| `docs/LOGGING_STANDARD.md` | `LOG` → `logging.sh` | 10 | 13 | 30/30 | mechanical |
 | `docs/REST_API_DESIGN_GUIDELINES.md` | — | 0 | 0 | 0/67 | mechanical |
 | `docs/SCHEMA_CONVENTIONS.md` | — | 0 | 0 | 0/17 | mechanical |
 | `docs/DOCUMENTATION_RULES.md` | — | 0 | 0 | 0/22 | latent |
@@ -14,7 +14,7 @@ regenerates this file and fails on any difference. To update it, run
 | `docs/CHANGELOG_VOICE.md` | — | 0 | 0 | 0/3 | latent |
 | `docs/VERIFY_TIERS.md` | — | 0 | 0 | 0/4 | uncited |
 | `docs/greptile-learnings/RULES.md` | — | 0 | 0 | 0/115 | mechanical |
-| **corpus** | | | | **28/278** | |
+| **corpus** | | | | **30/280** | |
 
 ## How to read this
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsfleet/orly",
-  "version": "0.14.0",
+  "version": "0.14.2",
   "description": "Repository-scoped engineering harness: renders agent rules, materialises the gates that enforce them, and proves the PR boundary \u2014 for any coding agent.",
   "license": "MIT",
   "type": "module",

package/src/release_inventory.test.ts

@@ -4,6 +4,7 @@ import { dirname, join } from "node:path";
 
 import { cleanupTemporaryDirectories, git, newRepository, ROOT } from "./gates_test_support";
 import { UNSCOPED_ENVIRONMENT } from "./git_env";
+import { inventory, packEntries } from "../evals/release/inventory";
 
 const INVENTORY = "evals/release/inventory.json";
 const REVIEWED_RECORD = "evals/release/reviewed.json";
@@ -78,3 +79,17 @@ test("inventory and review records require an external snapshot binding", () =>
     expect(row.package).toBeFalse();
   }
 }, TEST_TIMEOUT_MS);
+
+test("npm pack output is read in both the array and the keyed-object shape", () => {
+  const entry = { files: [{ path: "bin/orly" }, { path: "README.md" }] };
+  expect(packEntries(JSON.stringify([entry]))).toEqual([entry]);
+  expect(packEntries(JSON.stringify({ "@agentsfleet/orly": entry }))).toEqual([entry]);
+});
+
+test("the inventory of this checkout marks the package manifest as packed", () => {
+  const result = inventory();
+  const manifest = result.files.find((file) => file.path === "package.json");
+  expect(result.totals.packed).toBeGreaterThan(0);
+  expect(manifest?.package).toBe(true);
+  expect(result.files.filter((file) => file.package).length).toBe(result.totals.packed);
+}, TEST_TIMEOUT_MS);