@brainervirus/workit-cli 8.39.2 → 8.39.3

package/dist/index.js

@@ -9317,7 +9317,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@brainervirus/workit-cli",
-    version: "8.39.2",
+    version: "8.39.3",
     private: false,
     description: "Workit CLI — setup wizard, doctor, and task control for agentic coding workflows",
     keywords: [
@@ -9355,13 +9355,13 @@ var init_package = __esm(() => {
     },
     dependencies: {
       "@babel/parser": "7.29.9",
-      "@brainervirus/workit-cursor": "^8.39.2",
+      "@brainervirus/workit-cursor": "^8.39.3",
       "@inkjs/ui": "2.0.0",
       ink: "7.1.1",
       react: "19.2.8"
     },
     devDependencies: {
-      "@brainervirus/workit-core": "^8.39.2"
+      "@brainervirus/workit-core": "^8.39.3"
     },
     engines: {
       node: ">=24"
@@ -9462,6 +9462,11 @@ function detectedChecks(root) {
       if (typeof script === "string" && script.trim() !== "")
         add(scriptCheck(pm, name));
     }
+    for (const [name, script] of Object.entries(SCRIPT_CHECK_ALIASES)) {
+      const body = scripts[script];
+      if (typeof body === "string" && body.trim() !== "")
+        add({ ...scriptCheck(pm, script), name });
+    }
   }
   const plain = (name, argv) => ({ name, argv, accepts: [argv] });
   if (read("go.mod") !== null)
@@ -9580,7 +9585,7 @@ function workitAvailable(env = process.env) {
 function checkCommand(args, version, onPath = workitAvailable()) {
   return onPath ? `workit check ${args}` : `npx -y @brainervirus/workit-cli@${version} check ${args}`;
 }
-var SCRIPT_CHECKS, CHECKS_FILE = ".workit/checks.json", LEGACY_CHECKS_FILE = "workit.checks.json", WORKIT_GITIGNORE = `*
+var SCRIPT_CHECKS, SCRIPT_CHECK_ALIASES, CHECKS_FILE = ".workit/checks.json", LEGACY_CHECKS_FILE = "workit.checks.json", WORKIT_GITIGNORE = `*
 !risk-paths
 `, isRecord2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value), SHELL_META, git3 = (cwd, args) => {
   const run = spawnSync7("git", args, {
@@ -9610,6 +9615,7 @@ var SCRIPT_CHECKS, CHECKS_FILE = ".workit/checks.json", LEGACY_CHECKS_FILE = "wo
 }, CHECK_NAME, GATES, sameArgv = (left, right) => left.length === right.length && left.every((item, index) => item === right[index]), workitOnPath;
 var init_check_config = __esm(() => {
   SCRIPT_CHECKS = ["test", "lint", "typecheck", "check"];
+  SCRIPT_CHECK_ALIASES = { packaging: "test:packaging" };
   SHELL_META = /[|&;<>()$`\\*?[\]{}~!#]/u;
   CHECK_NAME = /^[a-z0-9][a-z0-9:._-]{0,63}$/u;
   GATES = ["testing", "verification"];
@@ -15571,6 +15577,7 @@ function recordVerdict(context, input) {
     sessionSource: context.sessionSource ?? "env",
     ...context.sessionBound === true ? { sessionBound: true } : {},
     evidenceRefs: input.evidenceRefs ?? [],
+    ...input.checkEvidence?.length ? { checkEvidence: input.checkEvidence } : {},
     ...untrackedField(context.cwd)
   }, { now: context.now });
 }
@@ -78399,7 +78406,7 @@ var init_resources = __esm(() => {
   init_checks3();
   init_heavy();
   init_heavy_scope();
-  DEFAULT_HEAVY_CHECKS = ["test", "build"];
+  DEFAULT_HEAVY_CHECKS = ["test", "build", "packaging"];
   DEFAULT_LIGHT_CHECKS = ["lint", "typecheck", "format"];
   SIZE = /^(\d+(?:\.\d+)?)([KMGT]?)$/iu;
   PERCENT = /^(\d+(?:\.\d+)?)%$/u;
@@ -78617,28 +78624,39 @@ function countWarnings(log) {
   return redactLog(log).replace(ANSI_COLOR, "").split(`
 `).filter((line) => WARNING_LINE.test(line) && !NO_WARNINGS.test(line)).length;
 }
-function boundedOutput(log, lines, stderr = "") {
+function boundedOutput(log, lines, stderr = "", failed = false) {
   const all = tailLines(log, Number.MAX_SAFE_INTEGER);
   if (all.length === 0)
     return "";
-  let shown = all.slice(-lines);
+  const markers = failed ? [...new Set(all.filter((line) => FAILURE_LINE.test(line)))] : [];
+  const listed = markers.slice(0, MAX_FAILURE_LINES);
+  const more = markers.length - listed.length;
+  const failureRoom = listed.length ? listed.length + 2 + (more > 0 ? 1 : 0) : 0;
+  let shown = all.slice(-Math.max(1, lines - failureRoom));
   const errors = tailLines(redactLog(stderr), STDERR_TAIL_LINES);
   let missing = [];
   if (errors.length) {
     const tail = new Set(shown);
     if (errors.some((line) => !tail.has(line))) {
-      shown = all.slice(-Math.max(1, lines - errors.length - 2));
+      shown = all.slice(-Math.max(1, lines - failureRoom - errors.length - 2));
       const kept = new Set(shown);
       missing = errors.filter((line) => !kept.has(line));
     }
   }
   const omitted = all.length - shown.length;
+  const inTail = new Set([...shown, ...missing]);
+  const failures = listed.filter((line) => !inTail.has(line));
+  const failureFooter = failures.length ? `… failures from the omitted lines:
+${failures.join(`
+`)}
+${more > 0 ? `+${more} more failures in the log
+` : ""}` : "";
   const footer = missing.length ? `… the last stderr lines, which the merged log holds earlier:
 ${missing.join(`
 `)}
 ` : "";
   return `${omitted ? `… ${omitted} earlier line${omitted === 1 ? "" : "s"} omitted (the full log is named below; --full streams it)
-` : ""}${shown.join(`
+` : ""}${failureFooter}${shown.join(`
 `)}
 ${footer}`;
 }
@@ -78938,7 +78956,7 @@ async function run12(argv, io) {
 `);
   else {
     if (!options.full)
-      io.stdout(boundedOutput(result.log, OUTPUT_LINES, stderrTail));
+      io.stdout(boundedOutput(result.log, OUTPUT_LINES, stderrTail, !passed));
     io.stderr(`${summary}
 `);
     if (recordError && passed)
@@ -78955,7 +78973,7 @@ async function run12(argv, io) {
     return recordError.code === "busy" ? 4 : recordError.code === "invalid_input" ? 2 : 5;
   return 0;
 }
-var USAGE6 = 'workit check <name> [--full] [--wait <dur> | --no-wait] [--no-lease --reason "<why>"] | workit check [--name <n>] [--shell] [--heavy] [--full] [--wait <dur> | --no-wait] [--timeout <s>] [--task <id>] [--json] -- <cmd…>', OUTPUT_LINES = 60, MAX_UNVERIFIED_RUN_MS, RECORD_TAIL_LINES = 20, RECORD_TAIL_CHARS = 200, posix = (value) => value.split(path53.sep).join("/") || ".", ENGINE_CODES2, FINGERPRINT_VARS, ANSI_COLOR, WARNING_LINE, NO_WARNINGS, STDERR_TAIL_LINES = 10, STDERR_KEEP_CHARS = 65536;
+var USAGE6 = 'workit check <name> [--full] [--wait <dur> | --no-wait] [--no-lease --reason "<why>"] | workit check [--name <n>] [--shell] [--heavy] [--full] [--wait <dur> | --no-wait] [--timeout <s>] [--task <id>] [--json] -- <cmd…>', OUTPUT_LINES = 60, MAX_UNVERIFIED_RUN_MS, RECORD_TAIL_LINES = 20, RECORD_TAIL_CHARS = 200, posix = (value) => value.split(path53.sep).join("/") || ".", ENGINE_CODES2, FINGERPRINT_VARS, ANSI_COLOR, WARNING_LINE, NO_WARNINGS, STDERR_TAIL_LINES = 10, STDERR_KEEP_CHARS = 65536, FAILURE_LINE, MAX_FAILURE_LINES = 15;
 var init_check = __esm(() => {
   init_check_config();
   init_checks3();
@@ -78976,6 +78994,7 @@ var init_check = __esm(() => {
   ANSI_COLOR = new RegExp(`${String.fromCharCode(27)}\\[[0-9;]*m`, "g");
   WARNING_LINE = /^\s*(?:⚠|\[(?:WARN|WARNING|warn|warning)\]|(?:npm\s+)?(?:WARN\s|warn\s)|warn(?:ing)?(?:\[[^\]]*\])?:|\d+:\d+\s+warning\s|\S+\(\d+,\d+\):\s*warning\s|\S+:\d+:\d+:\s*warning\b)/;
   NO_WARNINGS = /\b(?:no|0|zero|none)\s+warnings?\b/i;
+  FAILURE_LINE = /^\s*(?:\(fail\)|FAIL\b|✗|error:)/u;
 });
 
 // packages/workit-cli/src/verbs/lock.ts
@@ -80398,6 +80417,67 @@ var init_pr_lane = __esm(() => {
   init_lane();
 });
 
+// packages/workit-core/src/core/policy/check-evidence.ts
+function neededChecks(lane, configured) {
+  if (lane !== "focused" && lane !== "full")
+    return [];
+  const names = configured.filter((name) => name !== AGGREGATE);
+  return names.length ? names : [...configured];
+}
+function localCheckRows(rows) {
+  return rows.filter((row) => row.type === "check" && row.observer === "workit_cli").map((row) => ({
+    name: String(row.name ?? ""),
+    head: String(row.head ?? ""),
+    dirty: row.dirty === true,
+    passed: row.result === "passed"
+  }));
+}
+function verdictEvidence(cwd, input) {
+  const lane = branchLane(cwd, { base: input.base ?? null, head: input.head });
+  return checkEvidence({
+    lane: lane.lane,
+    head: input.head,
+    configured: gateCheckNames(loadCheckConfig(cwd), "verification"),
+    local: localCheckRows(input.rows),
+    ci: []
+  });
+}
+function checkEvidence(input) {
+  const ciCovers = input.lane === "focused";
+  const needed = neededChecks(input.lane, input.configured).map((name) => {
+    const last = input.local.findLast((row) => row.name === name && row.head === input.head && !row.dirty);
+    if (last?.passed)
+      return { name, status: "fresh", via: "local", ciCovers };
+    const ci = input.ci.filter((check) => ciMatch(check, name));
+    if (ci.some((check) => check.state === "failing"))
+      return { name, status: "failing", via: "ci", ciCovers };
+    if (last)
+      return { name, status: "failing", via: "local", ciCovers };
+    if (ciCovers && ci.some((check) => check.state === "passing"))
+      return { name, status: "fresh", via: "ci", ciCovers };
+    return { name, status: "missing", via: null, ciCovers };
+  });
+  return {
+    lane: input.lane,
+    head: input.head,
+    needed,
+    satisfied: needed.every((item) => item.status === "fresh")
+  };
+}
+function evidenceLines(doc) {
+  if (!doc.needed.length)
+    return [`evidence: lane ${doc.lane} needs no check run`];
+  return [
+    `evidence for lane ${doc.lane} on ${doc.head.slice(0, 7)}: ${doc.satisfied ? "complete" : "incomplete"}`,
+    ...doc.needed.map((item) => `  ${item.status === "fresh" ? "ok" : "x"} ${item.name}: ${item.status}${item.via ? ` (${item.via})` : item.ciCovers ? " (run it, or green CI covers it)" : " (run workit check " + item.name + " on this head)"}`)
+  ];
+}
+var AGGREGATE = "check", ciMatch = (ci, name) => new RegExp(`(^|[^a-z0-9])${name.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&")}([^a-z0-9]|$)`, "iu").test(ci.name);
+var init_check_evidence = __esm(() => {
+  init_check_config();
+  init_lane();
+});
+
 // packages/workit-core/src/forge/reruns.ts
 import fs27 from "node:fs";
 import path58 from "node:path";
@@ -80614,6 +80694,14 @@ function selectPr(cwd, resolved, options) {
   }
   return success2(found.data.number);
 }
+function evidenceFor(cwd, status, ci = status.checks) {
+  const lane = branchLane(cwd, { base: status.base, head: status.head.sha });
+  const configured = gateCheckNames(loadCheckConfig(cwd), "verification");
+  const read = readLedger(cwd);
+  const local = read.ok ? localCheckRows(read.value.rows) : [];
+  const ciChecks = ci.flatMap((check) => check.state === "skipped" ? [] : [{ name: check.name, state: check.state }]);
+  return checkEvidence({ lane: lane.lane, head: status.head.sha, configured, local, ci: ciChecks });
+}
 function buildStatusDoc(cwd, resolved, status, options) {
   const { forge } = resolved;
   const reruns = rerunCounts(cwd, { repo: forge.repo, pr: status.number, head: status.head.sha });
@@ -80691,6 +80779,7 @@ function buildStatusDoc(cwd, resolved, status, options) {
       passing: status.checks.filter((check) => check.state === "passing").length,
       missingRequired: missing
     },
+    evidence: evidenceFor(cwd, status),
     reviews: { decision: status.reviewDecision, unresolvedThreads: status.threads },
     blockers: status.state === "open" ? blockers.map((blocker) => blocker.reason) : [],
     identity: options.identity ?? null,
@@ -80874,6 +80963,9 @@ var MAX_LOG_TAILS = 5, GITLAB_MERGEABLE, GITHUB_MERGEABLE, NO_CHECKS_GRACE_MS =
 var init_report2 = __esm(() => {
   init_rev();
   init_ledger();
+  init_check_config();
+  init_lane();
+  init_check_evidence();
   init_reruns();
   GITLAB_MERGEABLE = new Set(["mergeable"]);
   GITHUB_MERGEABLE = new Set(["clean", "unstable", "has_hooks"]);
@@ -86620,6 +86712,8 @@ function renderStatus(doc) {
     lines.push(`  - ${thread.path ? `${thread.path}${thread.line ? `:${thread.line}` : ""} ` : ""}@${thread.author ?? "?"}${thread.isBot ? " (bot)" : ""}: ${thread.body}`);
   if (doc.truncated)
     lines.push("(lists truncated at the page cap)");
+  if (doc.evidence)
+    lines.push(...evidenceLines(doc.evidence));
   if (doc.blockers.length)
     lines.push(`blockers: ${doc.blockers.join(", ")}`);
   if (doc.identity?.note)
@@ -86636,6 +86730,7 @@ var forgeDeps, MAX_REASON = 500, usage4 = (io, message, line) => emit(io, fail2(
   now: forgeDeps.now
 }), short = (sha) => sha ? sha.slice(0, 7) : "?";
 var init_forge_common = __esm(() => {
+  init_check_evidence();
   init_resolve();
   init_vcs_config();
   init_duration();
@@ -90105,6 +90200,16 @@ async function run22(argv, io) {
   const refusal = claimed === null ? null : sessionClaimRefusal(io.env, claimed, io.cwd, { token, flag: acting.source === "flag" });
   if (refusal)
     return emit(io, fail2("blocked", refusal.error, { unblock: refusal.unblock }));
+  const evidence = values.self !== true && (rest[0] === "verified" || rest[0] === "tests-verified") ? verdictCheckEvidence(io.cwd, target.value, values.base ?? null) : null;
+  const redCheck = evidence?.needed.find((item) => item.status === "failing");
+  if (redCheck)
+    return emit(io, fail2("blocked", `check_failing: the configured check "${redCheck.name}" is failing on ${evidence?.head.slice(0, 12)} (${redCheck.via ?? "local"} run); a ${rest[0]} verdict cannot be recorded`, {
+      unblock: `fix it, then workit check ${redCheck.name} on this head, or record failed/blocked`
+    }));
+  const missingChecks = evidence?.needed.filter((item) => item.status === "missing") ?? [];
+  if (missingChecks.length)
+    io.stderr(`warning: no fresh run on ${evidence?.head.slice(0, 12)} of the configured check${missingChecks.length === 1 ? "" : "s"} ${missingChecks.map((item) => item.name).join(", ")}; the verdict records it as missing
+`);
   const bound = claimed !== null && issuedTokenMatches(io.cwd, claimed, token);
   const verdict = await recorded(recordVerdict({ ...context, ...bound ? { sessionBound: true } : {} }, {
     result: rest[0],
@@ -90113,6 +90218,13 @@ async function run22(argv, io) {
     surface: values.surface ?? null,
     self: values.self === true,
     evidenceRefs: values.evidence,
+    ...evidence?.needed.length ? {
+      checkEvidence: evidence.needed.map(({ name, status, via }) => ({
+        name,
+        status,
+        via
+      }))
+    } : {},
     ..."derivedFrom" in acting ? { derivedFrom: acting.derivedFrom } : {}
   }));
   if (verdict.ok && verdict.value.selfReason === "flag" && !passedTestOn(io.cwd, verdict.value))
@@ -90129,6 +90241,13 @@ async function run22(argv, io) {
   ].join(`
 `));
 }
+function verdictCheckEvidence(cwd, branch, base) {
+  const head = branch === null ? headSha(cwd) : resolveRef(cwd, branch);
+  const ledger = readLedger(cwd);
+  if (!head || !ledger.ok)
+    return null;
+  return verdictEvidence(cwd, { head, base, rows: ledger.value.rows });
+}
 function standingFanout(io, values) {
   if (values.fanout !== undefined) {
     const name = values.fanout.trim();
@@ -90273,6 +90392,7 @@ var init_ledger2 = __esm(() => {
   init_fanout();
   init_rev();
   init_host_session();
+  init_check_evidence();
   init_implicit_task();
   init_output();
   OPTIONS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brainervirus/workit-cli",
-  "version": "8.39.2",
+  "version": "8.39.3",
   "private": false,
   "description": "Workit CLI — setup wizard, doctor, and task control for agentic coding workflows",
   "keywords": [
@@ -38,13 +38,13 @@
   },
   "dependencies": {
     "@babel/parser": "7.29.9",
-    "@brainervirus/workit-cursor": "^8.39.2",
+    "@brainervirus/workit-cursor": "^8.39.3",
     "@inkjs/ui": "2.0.0",
     "ink": "7.1.1",
     "react": "19.2.8"
   },
   "devDependencies": {
-    "@brainervirus/workit-core": "^8.39.2"
+    "@brainervirus/workit-core": "^8.39.3"
   },
   "engines": {
     "node": ">=24"