@apex-actions/cli 0.93.0 → 0.95.0

package/dist/cli/terms/main.js

@@ -39,7 +39,7 @@ const pendingCommand = new Command('pending')
     // Never behind a flag: an operator reading this list is about to write to
     // the people on it, and the product asks them anyway.
     if (outcome.value.pending.length > 0) {
-        console.log(chalk.dim('  they are asked at their next sign-in; the notice by e-mail is yours — docs/run-book/customer-agreement.md'));
+        console.log(chalk.dim('  they are asked at their next sign-in; the notice by e-mail is yours — docs/guides/customer-agreement.md'));
     }
 });
 const acceptCommand = new Command('accept')

package/dist/src/application/dispatch-workflow.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { parseInputs, parseRepository } from '../domain/runs.js';
 /**
  * Trigger a `workflow_dispatch`. Everything the API can refuse — an unknown

package/dist/src/application/index.js

@@ -1,2 +1,2 @@
 export {};
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1

package/dist/src/application/manage-approvals.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 /**
  * Which pull requests from forks wait for approval — a repository's choice (TASK-0355). `every-fork` is ours and the
  * default; the other three are GitHub's. Whatever is chosen, a fork's run gets no secrets.

package/dist/src/application/manage-artifacts.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 /**
  * `target` is either a run id or `owner/repo`. They are told apart by shape
  * rather than by a flag: a run id is a uuid and a repository has a slash, and

package/dist/src/application/manage-caches.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 export const listCaches = async (api, owner, repo) => {
     try {
         const body = await api.listCaches(owner, repo);

package/dist/src/application/manage-environments.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 /** The Account roles a reviewer may name (ADR-0033), exactly as the control plane accepts them. */
 export const REVIEWER_ROLES = ['owner', 'account_admin', 'billing', 'member', 'viewer'];
 const refused = (err) => ({ kind: 'refused', detail: err instanceof Error ? err.message : String(err) });

package/dist/src/application/manage-runners.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { reconstructFleet } from '../domain/fleet-history.js';
 /**
  * List runners *and* what is waiting for them.

package/dist/src/application/manage-secrets.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { targetLabel } from '../domain/secrets.js';
 /**
  * Why the unnamed organisation scope refused: it is the operator organisation's

package/dist/src/application/manage-tokens.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { editedPermissions, tokenEditProblem, tokenRequestProblem } from '../domain/credentials.js';
 import { approve } from './authenticate.js';
 const detail = (err) => (err instanceof Error ? err.message : String(err));

package/dist/src/application/read-logs.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { isLive, selectJobs } from '../domain/runs.js';
 import { resolveRunId } from './resolve-run.js';
 /**

package/dist/src/application/resolve-run.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { isRunId, selectRun } from '../domain/runs.js';
 /**
  * Resolve a selector to a run id.

package/dist/src/application/scan-migration.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { buildChecklist, migrationVerdict, } from '../domain/migration.js';
 /**
  * Scan an organization: find its workflows, ask the engine what runs, and turn

package/dist/src/application/serve-language-server.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 /**
  * Run the language server until the editor closes the connection.
  *

package/dist/src/application/validate-workflows.js

@@ -1,4 +1,4 @@
-// application layer — see ../../../../docs/conventions.md §1
+// application layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { hasErrors } from '../domain/validation.js';
 /** Validate the given files, or every workflow the locator finds. */
 export const validateWorkflows = async (validator, locator, files) => {

package/dist/src/domain/credentials.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 /**
  * A customer's terminal credential, and the browser login that mints one
  * (control-plane ADR-0064).

package/dist/src/domain/departures.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 /** Where a removed repository's clock stands: gone, kept because it was added back, or still waiting. */
 export const repositoryDepartureLine = (d) => {
     const state = d.purgedAt !== null ? `purged ${d.purgedAt}` : d.withdrawnAt !== null ? `kept — added back ${d.withdrawnAt}` : `due ${d.purgeAfter}`;

package/dist/src/domain/fleet-history.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 //
 // How big was the fleet, and when was it nothing?
 //

package/dist/src/domain/grants.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 /**
  * Complimentary access from the terminal (control-plane ADR-0056 as amended by
  * ADR-0079, TASK-0199): the grant and installation shapes the admin API

package/dist/src/domain/index.js

@@ -1,2 +1,2 @@
 export {};
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1

package/dist/src/domain/insight.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // The REST shapes for "what got slower" and "what is flaky", mirroring
 // control-plane/contracts/openapi.yaml, plus the pure decisions the CLI makes
 // about presenting them.

package/dist/src/domain/logsearch.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // The REST shapes for a log search and a structured log view, mirroring
 // control-plane/contracts/openapi.yaml, plus the pure decisions the CLI makes
 // about presenting them.

package/dist/src/domain/migration.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // The migration report as the engine produces it (engine ADR-0013,
 // engine/docs/compat-format.md), plus the re-entry checklist built on top.
 //

package/dist/src/domain/notify.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // The REST shapes for notification routing, mirroring
 // control-plane/contracts/openapi.yaml, plus the pure presentation decisions
 // the CLI makes about them.

package/dist/src/domain/outcomediff.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 //
 // How the coexistence outcome diff reads to a person. The comparison itself is
 // the control plane's (ADR-0047); this is the sentence it deserves.

package/dist/src/domain/provenance.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // The REST shapes for "why did this run" and "how do I run it here", mirroring
 // control-plane/contracts/openapi.yaml, plus the pure decisions the CLI makes
 // about presenting them.

package/dist/src/domain/runs.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // What the CLI knows about runs and jobs, and the pure decisions it makes
 // about them. The REST shapes come from control-plane/contracts/openapi.
 /** The run's action-policy findings as `apex logs --summary` prints them: where, which job, the policy's sentence. */

package/dist/src/domain/secrets.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 /** GitHub's two secret stores, as `gh secret --app` names them: every workflow's, and Dependabot's runs' only. */
 export const SECRET_APPS = ['actions', 'dependabot'];
 /** `--app` into a store, or the reason it is not one. Absent is `actions`. */

package/dist/src/domain/spend.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // The REST shapes for a spend report, mirroring control-plane/contracts/openapi.yaml,
 // plus the pure decisions the CLI makes about presenting money.
 /**

package/dist/src/domain/supplychain.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // The REST shapes for the action supply chain, mirroring
 // control-plane/contracts/openapi.yaml, plus the pure decisions the CLI makes
 // about presenting them. No judgement lives here: whether a reference is

package/dist/src/domain/terms.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 /**
  * Why one account is outstanding, in the words an operator writing the notice
  * needs — *never accepted anything* and *accepted words that have since

package/dist/src/domain/validation.js

@@ -1,4 +1,4 @@
-// domain layer — see ../../../../docs/conventions.md §1
+// domain layer — see ../../../../docs/conventions/clean-architecture.md §1
 // Workflow validation results as reported by the engine (engine ADR-0004).
 export const hasErrors = (report) => report.files.some((f) => f.diagnostics.some((d) => d.severity === 'error'));
 export const diagnosticCount = (report) => report.files.reduce((n, f) => n + f.diagnostics.length, 0);

package/dist/src/infrastructure/binary-install.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { execFile } from 'node:child_process';
 import { createHash } from 'node:crypto';
 import { readFileSync } from 'node:fs';

package/dist/src/infrastructure/control-plane-http.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { writeFile } from 'node:fs/promises';
 import { resolve } from 'node:path';
 import { setTimeout as delay } from 'node:timers/promises';

package/dist/src/infrastructure/credentials.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { closeSync, openSync, readFileSync, statSync, writeSync } from 'node:fs';
 import { chmod, mkdir, rename, rm } from 'node:fs/promises';
 import { homedir } from 'node:os';

package/dist/src/infrastructure/device-login.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { existsSync } from 'node:fs';
 import { hostname, platform, release, type } from 'node:os';
 import { headlessReason, isDevicePollError, normaliseUrl } from '../domain/credentials.js';

package/dist/src/infrastructure/engine-binary.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { execFile, spawn } from 'node:child_process';
 import { readdir, readFile } from 'node:fs/promises';
 import { basename, join, resolve } from 'node:path';

package/dist/src/infrastructure/index.js

@@ -1,2 +1,2 @@
 export {};
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1

package/dist/src/infrastructure/loopback-login.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { createHash, randomBytes } from 'node:crypto';
 import { spawn } from 'node:child_process';
 import { createServer } from 'node:http';

package/dist/src/infrastructure/runner-binary.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { spawn } from 'node:child_process';
 const BIN_ENV = 'APEX_RUNNER_BIN';
 const DEFAULT_BIN = 'apex-runner';

package/dist/src/infrastructure/secret-input.js

@@ -1,4 +1,4 @@
-// infrastructure layer — see ../../../../docs/conventions.md §1
+// infrastructure layer — see ../../../../docs/conventions/clean-architecture.md §1
 import { readFile } from 'node:fs/promises';
 import inquirer from 'inquirer';
 import { trimOneNewline } from '../domain/secrets.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apex-actions/cli",
-  "version": "0.93.0",
+  "version": "0.95.0",
   "license": "SEE LICENSE IN LICENSE",
   "//files": "Without this npm ships src, test and the CI config alongside the binary a user installs.",
   "files": [