@attalabs/vinaya 0.23.0 → 0.24.0

package/dist/checks/bin/check-quoted-command.js

@@ -4158,8 +4158,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4171,6 +4175,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",
@@ -4434,6 +4440,7 @@ function findWorkspaceEscapes(files, knownPaths, workspaceDirs = DEFAULT_WORKSPA
   return findings;
 }
 // src/commands/doctrine.ts
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join2, sep } from "node:path";
 import matter2 from "gray-matter";
@@ -4457,17 +4464,36 @@ function packageRoot(moduleUrl) {
 
 // src/commands/doctrine.ts
 var ENTRY_SEGMENTS = ["skills", "aeg", "SKILL.md"];
-function resolveDoctrineRoot(pkg = packageRoot(import.meta.url)) {
+function resolveDoctrineRoot(pkg = packageRoot(import.meta.url), cwd = process.cwd()) {
+  return resolveDoctrineRootInfo(pkg, cwd)?.root ?? null;
+}
+function gitToplevel(cwd) {
+  try {
+    return execFileSync2("git", ["-C", cwd, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function resolveDoctrineRootInfo(pkg = packageRoot(import.meta.url), cwd = process.cwd()) {
+  const toplevel = gitToplevel(cwd);
+  if (toplevel !== null) {
+    const treeRoot = join2(toplevel, "aeg-root");
+    if (existsSync2(join2(treeRoot, "roles")))
+      return { root: treeRoot, source: "tree" };
+  }
   const fromSource = !pkg.split(sep).includes("node_modules");
-  const root = fromSource ? join2(dirname2(dirname2(pkg)), "aeg-root") : join2(pkg, "aeg-root");
-  return hasDoctrineEntry(root) ? root : null;
+  const bundleRoot = fromSource ? join2(dirname2(dirname2(pkg)), "aeg-root") : join2(pkg, "aeg-root");
+  return hasDoctrineEntry(bundleRoot) ? { root: bundleRoot, source: "bundle" } : null;
 }
 function hasDoctrineEntry(root) {
   return existsSync2(join2(root, ...ENTRY_SEGMENTS));
 }
 
 // src/lib/config.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, realpathSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname as dirname3, join as join3, resolve } from "node:path";
@@ -4699,7 +4725,7 @@ function trustAnchorRepo() {
       return validated;
   }
   try {
-    const url = execFileSync2("git", ["remote", "get-url", "origin"], {
+    const url = execFileSync3("git", ["remote", "get-url", "origin"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4713,7 +4739,7 @@ function ghFetchTrustAnchorConfig() {
   const repo = trustAnchorRepo();
   if (!repo)
     throw new Error("could not resolve repo identity for the trust-anchor read");
-  return execFileSync2("gh", ["api", `repos/${repo}/contents/${LOCAL_CONFIG_FILENAME}`, "--jq", ".content"], {
+  return execFileSync3("gh", ["api", `repos/${repo}/contents/${LOCAL_CONFIG_FILENAME}`, "--jq", ".content"], {
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
   });
@@ -4777,7 +4803,7 @@ function emitCheckError(error) {
 }
 
 // src/lib/diff-evidence.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { join as join4, relative, resolve as resolve2 } from "node:path";
 
 // src/commands/review-post.ts
@@ -4811,7 +4837,7 @@ function parseChangedLineRanges(diffOutput) {
 function fileDiffAgainst(ref, path) {
   let out;
   try {
-    out = execFileSync3("git", ["diff", `${ref}...HEAD`, "--", path], {
+    out = execFileSync4("git", ["diff", `${ref}...HEAD`, "--", path], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4822,7 +4848,7 @@ function fileDiffAgainst(ref, path) {
 }
 function revParse(ref) {
   try {
-    return execFileSync3("git", ["rev-parse", "--verify", ref], {
+    return execFileSync4("git", ["rev-parse", "--verify", ref], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4832,7 +4858,7 @@ function revParse(ref) {
 }
 function repoRoot() {
   try {
-    return execFileSync3("git", ["rev-parse", "--show-toplevel"], {
+    return execFileSync4("git", ["rev-parse", "--show-toplevel"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4843,7 +4869,7 @@ function repoRoot() {
 function changedFiles(base) {
   let out;
   try {
-    out = execFileSync3("git", ["diff", "--name-only", `${base}...HEAD`], {
+    out = execFileSync4("git", ["diff", "--name-only", `${base}...HEAD`], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();

package/dist/checks/bin/check-reader-resolvable-prose.js

@@ -4158,8 +4158,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4171,6 +4175,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",
@@ -4434,6 +4440,7 @@ function findWorkspaceEscapes(files, knownPaths, workspaceDirs = DEFAULT_WORKSPA
   return findings;
 }
 // src/commands/doctrine.ts
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join2, sep } from "node:path";
 import matter2 from "gray-matter";
@@ -4457,17 +4464,36 @@ function packageRoot(moduleUrl) {
 
 // src/commands/doctrine.ts
 var ENTRY_SEGMENTS = ["skills", "aeg", "SKILL.md"];
-function resolveDoctrineRoot(pkg = packageRoot(import.meta.url)) {
+function resolveDoctrineRoot(pkg = packageRoot(import.meta.url), cwd = process.cwd()) {
+  return resolveDoctrineRootInfo(pkg, cwd)?.root ?? null;
+}
+function gitToplevel(cwd) {
+  try {
+    return execFileSync2("git", ["-C", cwd, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function resolveDoctrineRootInfo(pkg = packageRoot(import.meta.url), cwd = process.cwd()) {
+  const toplevel = gitToplevel(cwd);
+  if (toplevel !== null) {
+    const treeRoot = join2(toplevel, "aeg-root");
+    if (existsSync2(join2(treeRoot, "roles")))
+      return { root: treeRoot, source: "tree" };
+  }
   const fromSource = !pkg.split(sep).includes("node_modules");
-  const root = fromSource ? join2(dirname2(dirname2(pkg)), "aeg-root") : join2(pkg, "aeg-root");
-  return hasDoctrineEntry(root) ? root : null;
+  const bundleRoot = fromSource ? join2(dirname2(dirname2(pkg)), "aeg-root") : join2(pkg, "aeg-root");
+  return hasDoctrineEntry(bundleRoot) ? { root: bundleRoot, source: "bundle" } : null;
 }
 function hasDoctrineEntry(root) {
   return existsSync2(join2(root, ...ENTRY_SEGMENTS));
 }
 
 // src/lib/config.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, realpathSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname as dirname3, join as join3, resolve } from "node:path";
@@ -4699,7 +4725,7 @@ function trustAnchorRepo() {
       return validated;
   }
   try {
-    const url = execFileSync2("git", ["remote", "get-url", "origin"], {
+    const url = execFileSync3("git", ["remote", "get-url", "origin"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4713,7 +4739,7 @@ function ghFetchTrustAnchorConfig() {
   const repo = trustAnchorRepo();
   if (!repo)
     throw new Error("could not resolve repo identity for the trust-anchor read");
-  return execFileSync2("gh", ["api", `repos/${repo}/contents/${LOCAL_CONFIG_FILENAME}`, "--jq", ".content"], {
+  return execFileSync3("gh", ["api", `repos/${repo}/contents/${LOCAL_CONFIG_FILENAME}`, "--jq", ".content"], {
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
   });
@@ -4777,7 +4803,7 @@ function emitCheckError(error) {
 }
 
 // src/lib/diff-evidence.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { join as join4, relative, resolve as resolve2 } from "node:path";
 
 // src/commands/review-post.ts
@@ -4811,7 +4837,7 @@ function parseChangedLineRanges(diffOutput) {
 function fileDiffAgainst(ref, path) {
   let out;
   try {
-    out = execFileSync3("git", ["diff", `${ref}...HEAD`, "--", path], {
+    out = execFileSync4("git", ["diff", `${ref}...HEAD`, "--", path], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4822,7 +4848,7 @@ function fileDiffAgainst(ref, path) {
 }
 function revParse(ref) {
   try {
-    return execFileSync3("git", ["rev-parse", "--verify", ref], {
+    return execFileSync4("git", ["rev-parse", "--verify", ref], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4832,7 +4858,7 @@ function revParse(ref) {
 }
 function repoRoot() {
   try {
-    return execFileSync3("git", ["rev-parse", "--show-toplevel"], {
+    return execFileSync4("git", ["rev-parse", "--show-toplevel"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4843,7 +4869,7 @@ function repoRoot() {
 function changedFiles(base) {
   let out;
   try {
-    out = execFileSync3("git", ["diff", "--name-only", `${base}...HEAD`], {
+    out = execFileSync4("git", ["diff", "--name-only", `${base}...HEAD`], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();

package/dist/checks/bin/check-registry-gates.js

@@ -4159,8 +4159,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4172,6 +4176,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",

package/dist/checks/bin/check-retired-vocabulary.js

@@ -4158,8 +4158,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4171,6 +4175,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",
@@ -4434,6 +4440,7 @@ function findWorkspaceEscapes(files, knownPaths, workspaceDirs = DEFAULT_WORKSPA
   return findings;
 }
 // src/commands/doctrine.ts
+import { execFileSync as execFileSync2 } from "node:child_process";
 import { existsSync as existsSync2, readdirSync, readFileSync as readFileSync2 } from "node:fs";
 import { dirname as dirname2, join as join2, sep } from "node:path";
 import matter2 from "gray-matter";
@@ -4457,17 +4464,36 @@ function packageRoot(moduleUrl) {
 
 // src/commands/doctrine.ts
 var ENTRY_SEGMENTS = ["skills", "aeg", "SKILL.md"];
-function resolveDoctrineRoot(pkg = packageRoot(import.meta.url)) {
+function resolveDoctrineRoot(pkg = packageRoot(import.meta.url), cwd = process.cwd()) {
+  return resolveDoctrineRootInfo(pkg, cwd)?.root ?? null;
+}
+function gitToplevel(cwd) {
+  try {
+    return execFileSync2("git", ["-C", cwd, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["ignore", "pipe", "pipe"]
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function resolveDoctrineRootInfo(pkg = packageRoot(import.meta.url), cwd = process.cwd()) {
+  const toplevel = gitToplevel(cwd);
+  if (toplevel !== null) {
+    const treeRoot = join2(toplevel, "aeg-root");
+    if (existsSync2(join2(treeRoot, "roles")))
+      return { root: treeRoot, source: "tree" };
+  }
   const fromSource = !pkg.split(sep).includes("node_modules");
-  const root = fromSource ? join2(dirname2(dirname2(pkg)), "aeg-root") : join2(pkg, "aeg-root");
-  return hasDoctrineEntry(root) ? root : null;
+  const bundleRoot = fromSource ? join2(dirname2(dirname2(pkg)), "aeg-root") : join2(pkg, "aeg-root");
+  return hasDoctrineEntry(bundleRoot) ? { root: bundleRoot, source: "bundle" } : null;
 }
 function hasDoctrineEntry(root) {
   return existsSync2(join2(root, ...ENTRY_SEGMENTS));
 }
 
 // src/lib/config.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
+import { execFileSync as execFileSync3 } from "node:child_process";
 import { existsSync as existsSync3, mkdirSync, readFileSync as readFileSync3, realpathSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname as dirname3, join as join3, resolve } from "node:path";
@@ -4699,7 +4725,7 @@ function trustAnchorRepo() {
       return validated;
   }
   try {
-    const url = execFileSync2("git", ["remote", "get-url", "origin"], {
+    const url = execFileSync3("git", ["remote", "get-url", "origin"], {
       encoding: "utf-8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4713,7 +4739,7 @@ function ghFetchTrustAnchorConfig() {
   const repo = trustAnchorRepo();
   if (!repo)
     throw new Error("could not resolve repo identity for the trust-anchor read");
-  return execFileSync2("gh", ["api", `repos/${repo}/contents/${LOCAL_CONFIG_FILENAME}`, "--jq", ".content"], {
+  return execFileSync3("gh", ["api", `repos/${repo}/contents/${LOCAL_CONFIG_FILENAME}`, "--jq", ".content"], {
     encoding: "utf-8",
     stdio: ["ignore", "pipe", "pipe"]
   });
@@ -4777,7 +4803,7 @@ function emitCheckError(error) {
 }
 
 // src/lib/diff-evidence.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 import { join as join4, relative, resolve as resolve2 } from "node:path";
 
 // src/commands/review-post.ts
@@ -4811,7 +4837,7 @@ function parseChangedLineRanges(diffOutput) {
 function fileDiffAgainst(ref, path) {
   let out;
   try {
-    out = execFileSync3("git", ["diff", `${ref}...HEAD`, "--", path], {
+    out = execFileSync4("git", ["diff", `${ref}...HEAD`, "--", path], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4822,7 +4848,7 @@ function fileDiffAgainst(ref, path) {
 }
 function revParse(ref) {
   try {
-    return execFileSync3("git", ["rev-parse", "--verify", ref], {
+    return execFileSync4("git", ["rev-parse", "--verify", ref], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4832,7 +4858,7 @@ function revParse(ref) {
 }
 function repoRoot() {
   try {
-    return execFileSync3("git", ["rev-parse", "--show-toplevel"], {
+    return execFileSync4("git", ["rev-parse", "--show-toplevel"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();
@@ -4843,7 +4869,7 @@ function repoRoot() {
 function changedFiles(base) {
   let out;
   try {
-    out = execFileSync3("git", ["diff", "--name-only", `${base}...HEAD`], {
+    out = execFileSync4("git", ["diff", "--name-only", `${base}...HEAD`], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "pipe"]
     }).trim();

package/dist/checks/bin/check-review-gate.js

@@ -4157,8 +4157,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4170,6 +4174,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",

package/dist/checks/bin/check-single-plan-pr.js

@@ -4157,8 +4157,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4170,6 +4174,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",

package/dist/checks/bin/check-test-plan.js

@@ -4154,8 +4154,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4167,6 +4171,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",

package/dist/checks/bin/check-token-collection-wired.js

@@ -4158,8 +4158,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4171,6 +4175,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",

package/dist/checks/bin/check-token-report.js

@@ -4157,8 +4157,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4170,6 +4174,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",

package/dist/checks/bin/check-workspace-escape.js

@@ -4158,8 +4158,12 @@ function isNewDiskStateFile(path, status) {
   return ANY_DEPTH_TRANCHES_MD.test(path) || TOKENS_FILE.test(path);
 }
 // ../../packages/aeg-core/src/main-branch-refusal.ts
+function pushesAnyBranchRef(pushRefs) {
+  return pushRefs.split(`
+`).map((line) => line.trim()).filter((line) => line.length > 0).some((line) => line.split(/\s+/)[2]?.startsWith("refs/heads/") === true);
+}
 function checkMainBranchRefusal(facts) {
-  const { currentSymbolicBranch, defaultBranch } = facts;
+  const { currentSymbolicBranch, defaultBranch, pushRefs = null } = facts;
   if (currentSymbolicBranch === null)
     return null;
   if (defaultBranch === null) {
@@ -4171,6 +4175,8 @@ function checkMainBranchRefusal(facts) {
     };
   }
   if (currentSymbolicBranch === defaultBranch) {
+    if (pushRefs !== null && !pushesAnyBranchRef(pushRefs))
+      return null;
     return {
       reason: "on-default-branch",
       severity: "error",