@apexops/cli 0.11.0-next.0 → 0.11.0-next.2

package/assets/client-projections/github-copilot-cli/.github/instructions/apex-automation.instructions.md

@@ -5,7 +5,8 @@ applyTo: ".github/workflows/*.yml, .github/workflows/*.yaml"
 
 # APEX Automation Rules
 
-- Use least-privilege workflow permissions and immutable major action versions.
+- Use least-privilege workflow permissions and pin third-party actions to a full commit SHA (not a major version tag,
+  which is mutable); a version comment alongside the SHA is fine.
 - Use `npm ci` for Node.js dependencies and declare the required Node version.
 - Keep deployment, approval, and secret-bearing operations outside unmanaged workflows.
 - Do not expose credentials in workflow logs or command arguments.

package/assets/config/runtime-bundle.v1.json

@@ -1,31 +1,31 @@
 {
   "schemaVersion": "1.0.0",
-  "bundleVersion": "0.11.0-next.0",
+  "bundleVersion": "0.11.0-next.2",
   "capabilityProtocolVersion": "1.0.0",
   "components": {
     "cli": {
       "source": "local",
-      "version": "0.11.0-next.0"
+      "version": "0.11.0-next.2"
     },
     "contracts": {
       "source": "local",
-      "version": "0.11.0-next.0"
+      "version": "0.11.0-next.2"
     },
     "kernel": {
       "source": "local",
-      "version": "0.11.0-next.0"
+      "version": "0.11.0-next.2"
     },
     "capabilities": {
       "source": "local",
-      "version": "0.11.0-next.0"
+      "version": "0.11.0-next.2"
     },
     "renderers": {
       "source": "local",
-      "version": "0.11.0-next.0"
+      "version": "0.11.0-next.2"
     },
     "customizationBundle": {
       "source": "local",
-      "version": "0.11.0-next.0",
+      "version": "0.11.0-next.2",
       "manifest": "@apexops/cli/assets/customizations/manifest.json",
       "assetManifest": "@apexops/cli/assets/manifest.json",
       "compositionId": "apex-managed-workspace"

package/assets/customizations/.github/agents/apex-codegen.agent.md

@@ -6,7 +6,6 @@ tools:
   - apex/taskContext
   - apex/stageFile
   - apex/generateIac
-  - apex/completeTask
 ---
 
 When calling any `apex/*` MCP tool, include the current session checkout or worktree as the required absolute

package/assets/customizations/.github/instructions/apex-automation.instructions.md

@@ -5,7 +5,8 @@ applyTo: ".github/workflows/*.yml, .github/workflows/*.yaml"
 
 # APEX Automation Rules
 
-- Use least-privilege workflow permissions and immutable major action versions.
+- Use least-privilege workflow permissions and pin third-party actions to a full commit SHA (not a major version tag,
+  which is mutable); a version comment alongside the SHA is fine.
 - Use `npm ci` for Node.js dependencies and declare the required Node version.
 - Keep deployment, approval, and secret-bearing operations outside unmanaged workflows.
 - Do not expose credentials in workflow logs or command arguments.

package/assets/customizations/.github/skills/apex-azure-quotas/SKILL.md

@@ -32,8 +32,9 @@ assume a quota value or infer a quota resource name from an ARM resource type.
    than relying on an ARM type-name assumption.
 3. Calculate available capacity as `limit - (usage + requested demand)` for
    each applicable quota.
-4. Treat a nonpositive result as a capacity blocker; distinguish it from a
-   service hard limit or an unavailable quota surface.
+4. Treat a negative result as a capacity blocker; a result of zero exactly
+   consumes the remaining quota and is still sufficient. Distinguish either
+   case from a service hard limit or an unavailable quota surface.
 5. Compare only regions with equally fresh, compatible evidence and preserve
    the selected region's evidence identifier in the typed decision.
 6. Route insufficient capacity to an authorized quota-request or deployment

package/assets/customizations/.github/skills/apex-azure-quotas/references/capacity-decision-rules.md

@@ -24,9 +24,10 @@ For each required quota, calculate:
 
 `remaining capacity = limit - (current usage + requested demand)`
 
-Capacity is sufficient only when every required quota has positive remaining
-capacity after the requested demand. Preserve the inputs and result in the
-typed planning decision so later validation can repeat the interpretation.
+Capacity is sufficient only when every required quota has nonnegative
+remaining capacity after the requested demand; an exact fit (remaining
+capacity of zero) still passes. Preserve the inputs and result in the typed
+planning decision so later validation can repeat the interpretation.
 
 ## Decision Outcomes
 

package/assets/customizations/.github/skills/apex-azure-quotas/references/operational-checklist.md

@@ -13,8 +13,9 @@
 
 - Compute remaining capacity from the observed limit, usage, and requested
   demand, then retain each source value in the decision record.
-- Treat nonpositive remaining capacity as a blocker. Treat an unsupported or
-  unavailable quota surface as indeterminate, not unlimited capacity.
+- Treat negative remaining capacity as a blocker; a remainder of zero is an
+  exact fit and still sufficient. Treat an unsupported or unavailable quota
+  surface as indeterminate, not unlimited capacity.
 - Do not compare region alternatives whose evidence freshness or scope differs.
 
 ## Handoff

package/assets/customizations/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.11.0-next.0",
+  "version": "0.11.0-next.2",
   "bundle": {
     "id": "apex-managed-workspace",
     "authority": "npm:@apexops/cli",

package/assets/manifest.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
   "sources": {
-    "customizations": "0.11.0-next.0",
+    "customizations": "0.11.0-next.2",
     "config": "1.0.0"
   },
   "composition": {
@@ -113,7 +113,7 @@
         "client-projections/github-copilot-cli/tools/schemas/governance-baseline.schema.json",
         "client-projections/github-copilot-cli/tools/scripts/collect-governance-baseline.ps1"
       ],
-      "digest": "4de867fab21bd2f4915825b9d63532af567b2ba625b6739f4d2cf0e6db03b3cc"
+      "digest": "1e17a10b0c7e1a32fd0fda9fb8fbaf1d1c583fbf0753f881258c6f42d0bcd25d"
     }
   ],
   "files": [
@@ -201,10 +201,10 @@
         "target": ".github/instructions/apex-automation.instructions.md",
         "adapterVersion": "1.12.0",
         "sourcePath": ".github/instructions/apex-automation.instructions.md",
-        "sourceHash": "314b2339cd73f3baefd776add4c0d3546296d216585e209ecf7f54d2530e2e24"
+        "sourceHash": "69433467b72ff8a3787757c278f00d3d5a4fb41af424e188c8bfefa6e03f4ff0"
       },
-      "sha256": "314b2339cd73f3baefd776add4c0d3546296d216585e209ecf7f54d2530e2e24",
-      "bytes": 554
+      "sha256": "69433467b72ff8a3787757c278f00d3d5a4fb41af424e188c8bfefa6e03f4ff0",
+      "bytes": 658
     },
     {
       "path": "client-projections/github-copilot-cli/.github/instructions/apex-azure-yaml.instructions.md",
@@ -567,7 +567,7 @@
         "path": "config/runtime-bundle.v1.json",
         "mapping": "config"
       },
-      "sha256": "abc938c1b40d107dd7eca48005d9946f9e2ceab0b35ecb8ab83e28e6e1475f56",
+      "sha256": "02b331c863523d8a1ed16e8d4612a1412a6bf089a13648e2ae6314dc88ea412b",
       "bytes": 2039
     },
     {
@@ -597,8 +597,8 @@
         "path": "customizations/.github/agents/apex-codegen.agent.md",
         "mapping": "customizations"
       },
-      "sha256": "4215d2a40ce2532cd26311108fda7b6c34f2b4546d3b7fe72e04675f99668a44",
-      "bytes": 2171
+      "sha256": "82ba0be03b4b5cd684a556b05709aeb568b3e5e83fefc11c3115fcce1150a5b7",
+      "bytes": 2149
     },
     {
       "path": "customizations/.github/agents/apex-validator.agent.md",
@@ -667,8 +667,8 @@
         "path": "customizations/.github/instructions/apex-automation.instructions.md",
         "mapping": "customizations"
       },
-      "sha256": "314b2339cd73f3baefd776add4c0d3546296d216585e209ecf7f54d2530e2e24",
-      "bytes": 554
+      "sha256": "69433467b72ff8a3787757c278f00d3d5a4fb41af424e188c8bfefa6e03f4ff0",
+      "bytes": 658
     },
     {
       "path": "customizations/.github/instructions/apex-azure-yaml.instructions.md",
@@ -1427,8 +1427,8 @@
         "path": "customizations/.github/skills/apex-azure-quotas/SKILL.md",
         "mapping": "customizations"
       },
-      "sha256": "f17a9ab32c888b0f6258bb302bdb6c7a2df3e4132385a82ec9dcf2508f313fce",
-      "bytes": 2422
+      "sha256": "4542d93e3b9f57087d63a460c80d4fbcf1ac37739dbd76a68582c96991213317",
+      "bytes": 2510
     },
     {
       "path": "customizations/.github/skills/apex-azure-quotas/references/capacity-decision-rules.md",
@@ -1437,8 +1437,8 @@
         "path": "customizations/.github/skills/apex-azure-quotas/references/capacity-decision-rules.md",
         "mapping": "customizations"
       },
-      "sha256": "6e831ebb361f76db3a8a752540349bacaac7da9e11b0493301f0151c4bee639e",
-      "bytes": 2203
+      "sha256": "e7f638cc89b8824c0992684cbb07a1cd187883d8d5433c7a68d2d8940ca223ac",
+      "bytes": 2262
     },
     {
       "path": "customizations/.github/skills/apex-azure-quotas/references/operational-checklist.md",
@@ -1447,8 +1447,8 @@
         "path": "customizations/.github/skills/apex-azure-quotas/references/operational-checklist.md",
         "mapping": "customizations"
       },
-      "sha256": "fd983530d8acbb645a156f3ffbde7217da4658480607ef3fcedb3d4e34fdc70e",
-      "bytes": 994
+      "sha256": "dfacc42126f01687714073fc189364a8b94a6551d5103d2bcdebe4ac2cce196a",
+      "bytes": 1051
     },
     {
       "path": "customizations/.github/skills/apex-azure-rbac/SKILL.md",
@@ -2007,7 +2007,7 @@
         "path": "customizations/manifest.json",
         "mapping": "customizations"
       },
-      "sha256": "a2c250d17f34c65be920dbd194faf286bca378f904286d88242290664037093d",
+      "sha256": "fbb48048657cd2172a01bfdb19b1a9cff50ebdc2e3d835c0614f015b025a04e9",
       "bytes": 11788
     },
     {
@@ -2044,6 +2044,6 @@
   "lock": {
     "algorithm": "sha256",
     "canonicalization": "apex-bundled-assets-v1",
-    "digest": "683304394ea56f03d050bbd25e276a504c1c2de3355ab4ab45055d729d7e618e"
+    "digest": "abb9ece91fab6908cd858ca198d0524957a97d7a78e49178ace20f6d3542d52d"
   }
 }

package/dist/version.d.ts

@@ -1,4 +1,4 @@
-export declare const APEX_VERSION: "0.11.0-next.0";
+export declare const APEX_VERSION: "0.11.0-next.2";
 export declare const MINIMUM_NODE_VERSION: "24.21.0";
 export declare function meetsMinimumVersion(current: string, minimum: string): boolean;
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,4 +1,4 @@
-export const APEX_VERSION = "0.11.0-next.0";
+export const APEX_VERSION = "0.11.0-next.2";
 export const MINIMUM_NODE_VERSION = "24.21.0";
 export function meetsMinimumVersion(current, minimum) {
     const currentParts = current.split(".").map(Number);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apexops/cli",
-  "version": "0.11.0-next.0",
+  "version": "0.11.0-next.2",
   "description": "Portable no-shell CLI and MCP facade for APEX",
   "license": "MIT",
   "repository": {
@@ -32,10 +32,10 @@
     "assets"
   ],
   "dependencies": {
-    "@apexops/capabilities": "0.11.0-next.0",
-    "@apexops/contracts": "0.11.0-next.0",
-    "@apexops/kernel": "0.11.0-next.0",
-    "@apexops/renderers": "0.11.0-next.0",
+    "@apexops/capabilities": "0.11.0-next.2",
+    "@apexops/contracts": "0.11.0-next.2",
+    "@apexops/kernel": "0.11.0-next.2",
+    "@apexops/renderers": "0.11.0-next.2",
     "@modelcontextprotocol/server": "2.3.1",
     "@sinclair/typebox": "0.34.52",
     "ajv": "8.20.0",