@dharma-ai-labs/agent-fabric 0.2.91 → 0.2.92

package/AGENT_FABRIC_ONBOARDING.md

@@ -65,6 +65,8 @@ For relevant tasks, consult the installed repository manifest, knowledge catalog
 
 Use `dharma skills status --provider <provider> --workspace-id <workspace-id>` and `dharma skills verify --provider <provider> --workspace .` to identify the active signed bundle. Read its `MANIFEST.json`, `knowledge/CATALOG.json`, and included skills through the provider's installed Agent Fabric skill. The repository checkout may also contain a locally initialized catalog; it is not authoritative merely because the file exists. Prefer the active signed release and its source references. Do not edit a managed bundle, catalog, manifest, signature, or trust file in place.
 
+Exception for a relay-executed peer question: its detached task worktree is not the enrolled workspace. The relay checks the signed bundle before execution and supplies receipt-pinned `.dharma-task-knowledge/MANIFEST.json` and `CATALOG.json` inside that temporary worktree. Read those files as data for the question. Do not run `dharma skills verify --workspace .` there or interpret its generic-bootstrap result as the enrolled device's state. If the provider cannot read the supplied files, report the exact denied operation; do not invent a catalog answer or claim the enrolled bundle is absent.
+
 When a teammate asks what a term means, locate its stable concept ID, canonical name, aliases, definition, status, source references, and release generation. If it is absent or conflicting, answer that it is unresolved and request a governed change. Do not silently treat an extracted historical concept as an approved company lexicon term. An organization's repositories have separate catalogs unless a policy explicitly authorizes cross-repository sharing.
 
 To propose a new or corrected term, edit an approved repository source or registered output folder in the normal work branch. A useful definition names the term in a heading, states the meaning and scope, cites the underlying source, distinguishes aliases, and identifies any conflict with existing terminology. Human review may still be required by the repository's lexicon policy. Do not add a fake concept directly to `CATALOG.json`. The running relay observes a stable approved snapshot, evaluates it, and publishes a signed candidate only when policy, disclosure, budget, and quality gates pass. Confirm the candidate/release receipt and that the next signed catalog contains the proposed source reference. A source edit, successful upload, or local snapshot alone is not publication.

package/dist/index.js

@@ -35,7 +35,7 @@ import { withOnboardingStage } from './onboardingStage.js';
 import { waitForRepositoryReadiness } from './repositoryReadinessWait.js';
 import { connectDemoDevice, verifyDemoDevice } from './demoEnrollment.js';
 import { performDemoPeerAction, withDemoDeviceLock } from './demoPeer.js';
-const VERSION = '0.2.91';
+const VERSION = '0.2.92';
 const USAGE = CLI_USAGE;
 const execFileAsync = promisify(execFile);
 const LOCAL_PROVIDER_IDS = ['codex', 'claude', 'agy', 'hermes'];

package/dist/index.test.js

@@ -1752,13 +1752,13 @@ test('relay probe opens an authenticated session without polling or leasing work
         },
         openSession: async (version) => {
             sessions += 1;
-            assert.equal(version, '0.2.91');
+            assert.equal(version, '0.2.92');
             return { ok: true };
         },
     }));
     assert.equal(sessions, 1);
     assert.deepEqual(result, {
-        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.91',
+        ok: true, connected: true, organizationId: 'org_test', deviceId: 'device_test', relayVersion: '0.2.92',
     });
 });
 test('relay probe fails closed when the server does not acknowledge the session', async () => {

package/dist/onboardingContract.test.js

@@ -19,6 +19,9 @@ test('the installed guide names the supported knowledge and peer workflow', asyn
     assert.match(contract, /repositories reply --workspace-id <workspace-id> --question-id <question-id>/);
     assert.match(contract, /reads the response rather than manually sending one/);
     assert.match(contract, /active signed release and its source references/);
+    assert.match(contract, /detached task worktree is not the enrolled workspace/);
+    assert.match(contract, /Do not run `dharma skills verify --workspace \.` there/);
+    assert.match(contract, /report the exact denied operation/);
     assert.match(contract, /source edit, successful upload, or local snapshot alone is not publication/);
     assert.doesNotMatch(contract, /dhab_[A-Za-z0-9_-]+/);
 });

package/dist/onboardingContract.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"onboardingContract.test.js","sourceRoot":"","sources":["../src/onboardingContract.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE9E,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,gDAAgD,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,8DAA8D,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iFAAiF,CAAC,CAAC;AAC5G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,kHAAkH,CAAC,CAAC;IAC3I,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,gFAAgF,CAAC,CAAC;IACzG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,oHAAoH,CAAC,CAAC;IAC7I,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,8EAA8E,CAAC,CAAC;IACvG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,qDAAqD,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,4EAA4E,CAAC,CAAC;IACrG,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC"}
+{"version":3,"file":"onboardingContract.test.js","sourceRoot":"","sources":["../src/onboardingContract.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE9E,IAAI,CAAC,oEAAoE,EAAE,KAAK,IAAI,EAAE;IACpF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,gDAAgD,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,0CAA0C,CAAC,CAAC;IACnE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,4BAA4B,CAAC,CAAC;IACrD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,2BAA2B,CAAC,CAAC;IACpD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,8DAA8D,CAAC,CAAC;IACvF,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iFAAiF,CAAC,CAAC;AAC5G,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,qEAAqE,EAAE,KAAK,IAAI,EAAE;IACrF,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAErD,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,kHAAkH,CAAC,CAAC;IAC3I,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,gFAAgF,CAAC,CAAC;IACzG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,oHAAoH,CAAC,CAAC;IAC7I,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,8EAA8E,CAAC,CAAC;IACvG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,qDAAqD,CAAC,CAAC;IAC9E,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,iDAAiD,CAAC,CAAC;IAC1E,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,sDAAsD,CAAC,CAAC;IAC/E,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,wDAAwD,CAAC,CAAC;IACjF,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,mCAAmC,CAAC,CAAC;IAC5D,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,4EAA4E,CAAC,CAAC;IACrG,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AACvD,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dharma-ai-labs/agent-fabric",
-  "version": "0.2.91",
+  "version": "0.2.92",
   "description": "Local-first CLI for connecting coding agents to Dharma evaluation, orchestration, and signed Skill delivery",
   "license": "MIT",
   "homepage": "https://github.com/dharma-ai-labs/dharma-agent-fabric/tree/main/packages/cli#readme",