@dharma-ai-labs/agent-fabric 0.2.62 → 0.2.63

package/AGENT_FABRIC_ONBOARDING.md

@@ -12,6 +12,8 @@ The private setup envelope contains the organization, intended recipient, policy
 4. Read the complete JSON result. Verify the organization, member, device, repository identity, provider, and enrollment state. If the command returns a pending or blocked stage, preserve the correlation data and continue only through the supported recovery path.
 5. Confirm provider readiness with `dharma providers list`, enrollment with `dharma status`, and the connected repository with `dharma repositories status --repo . --json`.
 
+Do not modify Dharma or customer product code to work around a failed onboarding step. Do not create a workaround pull request. Do not invent credentials, and do not bypass enrollment, weaken device approval, or substitute a local implementation for the released CLI and platform contract. When setup blocks, report the exact failed stage, non-sensitive error, and correlation ID. Continue only through the CLI's supported retry, reconciliation, rollback, or browser-authorized re-enrollment path.
+
 Verify the installed native skill with the literal command for the active provider: `dharma skills verify --provider codex --workspace .`, `dharma skills verify --provider claude --workspace .`, `dharma skills verify --provider agy --workspace .`, or `dharma skills verify --provider hermes --workspace .`. The result must say `ready: true`.
 
 Do not claim readiness merely because the package installed. Full readiness requires the shared repository package, role registration, first-learning disposition, relay, and synchronization receipts described below.

package/dist/index.js

@@ -31,7 +31,7 @@ import { adoptRepositoryCandidate, pollRepositoryCandidate, synchronizeRepositor
 import { registerRepositoryRoleMetadata, discoverRepositoryRoleMetadata } from './repositoryRoleMetadata.js';
 import { askRepositoryRoleQuestion, readRepositoryRoleReply } from './repositoryRoleQuestion.js';
 import { deriveRepositoryRole } from './repositoryRoleDerivation.js';
-const VERSION = '0.2.62';
+const VERSION = '0.2.63';
 const USAGE = CLI_USAGE;
 const execFileAsync = promisify(execFile);
 const LOCAL_PROVIDER_IDS = ['codex', 'claude', 'agy', 'hermes'];

package/dist/index.test.js

@@ -1567,13 +1567,13 @@ test('relay probe opens an authenticated session without polling or leasing work
         },
         openSession: async (version) => {
             sessions += 1;
-            assert.equal(version, '0.2.62');
+            assert.equal(version, '0.2.63');
             return { ok: true };
         },
     }));
     assert.equal(sessions, 1);
     assert.deepEqual(result, {
-        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.62',
+        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.63',
     });
 });
 test('relay probe fails closed when the server does not acknowledge the session', async () => {

package/dist/onboardingContract.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=onboardingContract.test.d.ts.map

package/dist/onboardingContract.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboardingContract.test.d.ts","sourceRoot":"","sources":["../src/onboardingContract.test.ts"],"names":[],"mappings":""}

package/dist/onboardingContract.test.js

@@ -0,0 +1,14 @@
+import assert from 'node:assert/strict';
+import { readFile } from 'node:fs/promises';
+import test from 'node:test';
+const contractUrl = new URL('../AGENT_FABRIC_ONBOARDING.md', import.meta.url);
+test('the installed onboarding contract forbids product-code workarounds', async () => {
+    const contract = await readFile(contractUrl, 'utf8');
+    assert.match(contract, /Do not modify Dharma or customer product code/i);
+    assert.match(contract, /Do not create a workaround pull request/i);
+    assert.match(contract, /Do not invent credentials/i);
+    assert.match(contract, /do not bypass enrollment/i);
+    assert.match(contract, /exact failed stage, non-sensitive error, and correlation ID/i);
+    assert.match(contract, /supported retry, reconciliation, rollback, or browser-authorized re-enrollment/i);
+});
+//# sourceMappingURL=onboardingContract.test.js.map

package/dist/onboardingContract.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboardingContract.test.js","sourceRoot":"","sources":["../src/onboardingContract.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE9E,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,gDAAgD,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,8DAA8D,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iFAAiF,CAAC,CAAC;AAC5G,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dharma-ai-labs/agent-fabric",
-  "version": "0.2.62",
+  "version": "0.2.63",
   "description": "Local-first CLI for connecting coding agents to Dharma evaluation, orchestration, and signed Skill delivery",
   "license": "MIT",
   "homepage": "https://github.com/dharma-ai-labs/dharma-agent-fabric/tree/main/packages/cli#readme",