@hiveai/cli 0.13.5 → 0.13.7

package/dist/index.js

@@ -910,6 +910,10 @@ function registerBriefing(program2) {
       return;
     }
     const ownMemories = await loadMemoriesFromDir3(paths.memoriesDir);
+    const POLICY_TYPES = /* @__PURE__ */ new Set(["decision", "gotcha", "architecture", "convention"]);
+    const anchoredPolicyIds = markerFiles.length > 0 ? ownMemories.map((m) => m.memory).filter(
+      (mem) => POLICY_TYPES.has(mem.frontmatter.type) && mem.frontmatter.status === "validated" && memoryMatchesAnchorPaths(mem, markerFiles)
+    ).map((mem) => mem.frontmatter.id) : [];
     const externalRoots = [];
     if (opts.include && opts.include.length > 0) {
       for (const includePath of opts.include) {
@@ -1063,11 +1067,14 @@ function registerBriefing(program2) {
     if (ids.length > 0) {
       await trackReads(paths, ids).catch(() => {
       });
+    }
+    const markerIds = [.../* @__PURE__ */ new Set([...ids, ...anchoredPolicyIds])];
+    if (markerIds.length > 0) {
       await writeBriefingMarker(paths, {
         task: opts.task ?? "CLI briefing",
         source: "haive-briefing-cli",
         sessionId: process.env.HAIVE_SESSION_ID,
-        memoryIds: ids,
+        memoryIds: markerIds,
         files: filePaths
       }).catch(() => {
       });
@@ -3012,7 +3019,7 @@ ${SEED_FOOTER(stack)}` });
 }
 
 // src/commands/init.ts
-var HAIVE_GITHUB_ACTION_REF = `v${"0.13.5"}`;
+var HAIVE_GITHUB_ACTION_REF = `v${"0.13.7"}`;
 var PROJECT_CONTEXT_TEMPLATE = `# Project context
 
 > Generated by \`haive init\`. Run \`haive init --bootstrap\` to auto-fill from your codebase,
@@ -6065,7 +6072,7 @@ ${m.content}`).join("\n\n---\n\n"),
     return {
       id,
       summary,
-      developer_message: quoteBlock || `Une modification externe potentiellement incompatible a \xE9t\xE9 d\xE9tect\xE9e (${id}). Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ?`
+      developer_message: quoteBlock || `A potentially incompatible external change was detected (${id}). Do you want me to analyze the impact and propose updates?`
     };
   };
   for (const m of outputMemories) {
@@ -7912,7 +7919,7 @@ When done, respond with: "Imported N memories: [list of IDs]" or "Nothing action
   };
 }
 var SERVER_NAME = "haive";
-var SERVER_VERSION = "0.13.5";
+var SERVER_VERSION = "0.13.7";
 function jsonResult(data) {
   return {
     content: [
@@ -9220,26 +9227,26 @@ function registerSync(program2) {
                 const slugParts = result.file.replace(/[^a-z0-9]/gi, "-").toLowerCase();
                 const slug = `dep-major-bump-${slugParts}-${Date.now().toString(36)}`;
                 const depList = majorBumps.map((c) => `- \u{1F534} **${c.name}** : \`${c.from}\` \u2192 \`${c.to}\``).join("\n");
-                const body = `## \u26A0\uFE0F Action requise \u2014 confirmation humaine obligatoire
+                const body = `## \u26A0\uFE0F Action required \u2014 human confirmation required
 
-Des d\xE9pendances dans \`${result.file}\` ont chang\xE9 de version majeure.
-Une version majeure peut contenir des **breaking changes** qui impactent ce projet.
+Dependencies in \`${result.file}\` changed major version.
+A major version can contain **breaking changes** that affect this project.
 
 ${depList}
 
 ---
 
-**\u{1F6AB} Ne modifie aucun code de fa\xE7on autonome.**
+**\u{1F6AB} Do not modify code autonomously.**
 
-Informe le d\xE9veloppeur avec ce message :
+Inform the developer with this message:
 
-> *\xAB J'ai d\xE9tect\xE9 que ${majorBumps.map((c) => `\`${c.name}\``).join(", ")} a chang\xE9 de version majeure (${majorBumps.map((c) => `${c.from} \u2192 ${c.to}`).join(", ")}). Cela peut introduire des incompatibilit\xE9s dans ce projet. Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ? \xBB*
+> *"I detected that ${majorBumps.map((c) => `\`${c.name}\``).join(", ")} changed major version (${majorBumps.map((c) => `${c.from} \u2192 ${c.to}`).join(", ")}). This can introduce incompatibilities in this project. Do you want me to analyze the impact and propose updates?"*
 
-Attends une **confirmation explicite** avant d'agir.
+Wait for **explicit confirmation** before acting.
 
-**Prochaines \xE9tapes (si confirm\xE9) :**
-- Consulter le CHANGELOG : \`haive memory import-changelog --from node_modules/<pkg>/CHANGELOG.md\`
-- V\xE9rifier les m\xE9moires ancr\xE9es : \`haive memory verify\``;
+**Next steps (if confirmed):**
+- Check the CHANGELOG: \`haive memory import-changelog --from node_modules/<pkg>/CHANGELOG.md\`
+- Verify anchored memories: \`haive memory verify\``;
                 const fm = buildFrontmatter6({
                   type: "gotcha",
                   slug,
@@ -9287,28 +9294,28 @@ Attends une **confirmation explicite** avant d'agir.
             const breakingList = breaking.map((c) => `- \u{1F534} **${c.kind}** : ${c.description}`).join("\n");
             const addList = additive.length > 0 ? `
 
-### Changements non-breaking (additifs)
+### Non-breaking changes (additive)
 ` + additive.map((c) => `- \u{1F7E2} ${c.description}`).join("\n") : "";
-            const body = `## \u26A0\uFE0F Action requise \u2014 confirmation humaine obligatoire
+            const body = `## \u26A0\uFE0F Action required \u2014 human confirmation required
 
-Le contrat **\`${diff.contract}\`** (\`${diff.file}\`) a \xE9t\xE9 modifi\xE9.
-Des **breaking changes** ont \xE9t\xE9 d\xE9tect\xE9s \u2014 ce projet consomme peut-\xEAtre ce contrat.
+Contract **\`${diff.contract}\`** (\`${diff.file}\`) was modified.
+**Breaking changes** were detected \u2014 this project may consume that contract.
 
 ${breakingList}${addList}
 
 ---
 
-**\u{1F6AB} Ne modifie aucun code de fa\xE7on autonome.**
+**\u{1F6AB} Do not modify code autonomously.**
 
-Informe le d\xE9veloppeur avec ce message :
+Inform the developer with this message:
 
-> *\xAB J'ai d\xE9tect\xE9 que le contrat \`${diff.contract}\` a chang\xE9 : ${breaking.length} breaking change(s) d\xE9tect\xE9(s). Ce projet d\xE9pend peut-\xEAtre de ce contrat. Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ? \xBB*
+> *"I detected that contract \`${diff.contract}\` changed: ${breaking.length} breaking change(s) detected. This project may depend on that contract. Do you want me to analyze the impact and propose updates?"*
 
-Attends une **confirmation explicite** avant d'agir.
+Wait for **explicit confirmation** before acting.
 
-**Prochaines \xE9tapes (si confirm\xE9) :**
-- Rechercher les usages : \`haive memory for-files <fichiers concern\xE9s>\`
-- V\xE9rifier les m\xE9moires li\xE9es : \`haive memory search ${diff.contract}\``;
+**Next steps (if confirmed):**
+- Search usages: \`haive memory for-files <affected files>\`
+- Check related memories: \`haive memory search ${diff.contract}\``;
             const fm = buildFrontmatter6({
               type: "gotcha",
               slug,
@@ -12671,7 +12678,7 @@ import {
 } from "@hiveai/core";
 function registerEval(program2) {
   program2.command("eval").description(
-    "Rigorous, repeatable quality eval: do the right memories surface (retrieval) and do the right sensors fire (catch-rate)? Emits a chiffr\xE9 0\u2013100 score. Uses .ai/eval cases via --spec, or auto-synthesizes cases from anchored memories."
+    "Rigorous, repeatable quality eval: do the right memories surface (retrieval) and do the right sensors fire (catch-rate)? Emits a numeric 0\u2013100 score. Uses .ai/eval cases via --spec, or auto-synthesizes cases from anchored memories."
   ).option("--spec <file>", "JSON eval spec ({ retrieval: [...], sensors: [...] })").option("--semantic-only", "self-eval probes by title alone (no anchor files) \u2014 harder retrieval", false).option("-k, --top <n>", "briefing top-k considered a hit", "8").option("--json", "emit JSON", false).option("--out <file>", "write a Markdown report").option("--fail-under <score>", "exit non-zero if the overall score is below this (0\u2013100) \u2014 for CI gates").option("--baseline", "save this run as the baseline (.ai/eval/baseline.json) for future --compare", false).option("--compare", "diff this run against the saved baseline and print the delta", false).option("--baseline-file <path>", "baseline file to read/write (default: .ai/eval/baseline.json)").option("--fail-on-regression", "with --compare, exit non-zero if the score dropped vs the baseline", false).option("--regression-gate", "CI-safe gate: compare against the baseline IF one exists (fail on regression), else no-op", false).option("-d, --dir <dir>", "project root").action(async (opts) => {
     const root = findProjectRoot42(opts.dir);
     const paths = resolveHaivePaths38(root);
@@ -13481,7 +13488,7 @@ function registerDoctor(program2) {
         fix: "Edit .ai/haive.config.json: set autoSessionEnd: true (or re-run `haive init` without --manual)."
       });
     }
-    findings.push(...await collectInstallFindings(root, "0.13.5"));
+    findings.push(...await collectInstallFindings(root, "0.13.7"));
     findings.push(...await collectToolchainFindings(root));
     try {
       const legacyRaw = execSync3("haive-mcp --version", {
@@ -13489,7 +13496,7 @@ function registerDoctor(program2) {
         timeout: 3e3,
         stdio: ["ignore", "pipe", "ignore"]
       }).trim();
-      const cliVersion = "0.13.5";
+      const cliVersion = "0.13.7";
       if (legacyRaw && legacyRaw !== cliVersion) {
         findings.push({
           severity: "warn",
@@ -14644,7 +14651,10 @@ function registerEnforce(program2) {
   ).option("-d, --dir <dir>", "project root").option("--explain", "group findings by blocking/review/info and show repair commands", false).option("--json", "emit JSON", false).action(async (opts) => {
     const report = await buildFinishReport(opts.dir);
     printReport(report, Boolean(opts.json), Boolean(opts.explain));
-    if (report.should_block) process.exit(2);
+    if (report.should_block) {
+      if (!opts.json) printNextRequiredAction(report);
+      process.exit(2);
+    }
   });
   enforce.command("session-start").description("Claude Code SessionStart hook: inject briefing and write a local briefing marker.").option("-d, --dir <dir>", "project root").option("--task <text>", "task text to rank memories").option("--source <name>", "marker source", "claude-session-start").option("--session-id <id>", "agent session id").action(async (opts) => {
     const payload = await readHookPayload();
@@ -15085,7 +15095,7 @@ async function buildEnforcementReport(dir, stage, sessionId) {
       findings: [{ severity: "info", code: "enforcement-off", message: "hAIve enforcement is disabled." }]
     });
   }
-  findings.push(...await inspectIntegrationVersions(root, "0.13.5"));
+  findings.push(...await inspectIntegrationVersions(root, "0.13.7"));
   if (config.enforcement?.requireBriefingFirst !== false && stage !== "ci") {
     const hasBriefing = await hasRecentBriefingMarker2(paths, sessionId);
     findings.push(hasBriefing ? { severity: "ok", code: "briefing-loaded", message: "A recent hAIve briefing marker exists." } : {
@@ -15688,11 +15698,22 @@ async function verifyGithubActionsForHead(root, status) {
     }];
   }
   if (runs.length === 0) {
+    const headMsg = (await runCommand4("git", ["log", "-1", "--pretty=%B"], root).catch(() => "")).trim();
+    if (/\[skip ci\]|\[ci skip\]|\[no ci\]|\*\*\*NO_CI\*\*\*|skip-checks: *true/i.test(headMsg)) {
+      return [{
+        severity: "error",
+        code: "github-actions-skipped-by-message",
+        message: "No GitHub Actions runs for HEAD because the HEAD commit message contains a CI-skip directive ([skip ci] / [ci skip] / [no ci]) \u2014 this skips the WHOLE push, including code.",
+        fix: "Reword the HEAD commit so its message (subject AND body) does not contain the literal skip-ci directive \u2014 write it as 'skip-ci'. Then re-push, or trigger CI manually with `gh workflow run <workflow.yml> --ref <branch>`.",
+        reason: "GitHub scans the entire commit message; a code commit whose message includes a skip-ci directive silently skips CI for the whole push.",
+        impact: 60
+      }];
+    }
     return [{
       severity: "error",
       code: "github-actions-runs-missing",
       message: "No GitHub Actions runs were found for HEAD.",
-      fix: "Wait for GitHub to create the workflow runs, or verify that the push was not skipped by a `[skip ci]` head commit; rerun `haive enforce finish` after the runs appear.",
+      fix: "Wait for GitHub to create the workflow runs, or verify that the push was not skipped by a skip-ci head commit; rerun `haive enforce finish` after the runs appear.",
       impact: 50
     }];
   }
@@ -15707,21 +15728,35 @@ async function verifyGithubActionsForHead(root, status) {
     }];
   }
   const failed = runs.filter((run) => run.conclusion !== "success");
-  if (failed.length > 0) {
+  const failedCore = failed.filter((run) => !isExternalTransientWorkflow(run));
+  const failedExternal = failed.filter((run) => isExternalTransientWorkflow(run));
+  if (failedCore.length > 0) {
     return [{
       severity: "error",
       code: "github-actions-failed",
-      message: `${failed.length}/${runs.length} GitHub Actions workflow run(s) for HEAD did not pass: ${formatGithubRunNames(failed)}.`,
+      message: `${failedCore.length}/${runs.length} GitHub Actions workflow run(s) for HEAD did not pass: ${formatGithubRunNames(failedCore)}.`,
       fix: "Inspect the failed run logs with `gh run view <run-id> --log`, fix the issue, push the fix, then rerun `haive enforce finish`.",
       impact: 80
     }];
   }
+  if (failedExternal.length > 0) {
+    return [{
+      severity: "info",
+      code: "github-actions-external-transient",
+      message: `${failedExternal.length} external/transient workflow run(s) for HEAD did not pass (non-blocking): ${formatGithubRunNames(failedExternal)}. All core workflows passed.`,
+      fix: "External integrations can fail on transient network/timeout. Re-run with `gh run rerun <run-id>` if you want them green \u2014 not required to finish."
+    }];
+  }
   return [{
     severity: "ok",
     code: "github-actions-pass",
     message: `All ${runs.length} GitHub Actions workflow run(s) for HEAD completed successfully.`
   }];
 }
+function isExternalTransientWorkflow(run) {
+  const label = `${run.workflowName ?? ""} ${run.name ?? ""}`.toLowerCase();
+  return /\bsonar(qube|cloud)?\b|\bcodeql\b|\bsnyk\b|\bcodecov\b/.test(label);
+}
 async function githubRemoteForCurrentBranch(root) {
   const branch = (await runCommand4("git", ["branch", "--show-current"], root).catch(() => "")).trim();
   const branchRemote = branch ? (await runCommand4("git", ["config", "--get", `branch.${branch}.remote`], root).catch(() => "")).trim() : "";
@@ -15871,6 +15906,13 @@ function printFinding(finding, explain = false) {
   if (explain && finding.memory_ids?.length) console.log(ui.dim(`  memories: ${finding.memory_ids.join(", ")}`));
   if (finding.fix) console.log(ui.dim(`${explain ? "  repair: " : "  fix: "}${finding.fix}`));
 }
+function printNextRequiredAction(report) {
+  const blocker = report.findings.find((f) => f.severity === "error" && f.fix);
+  if (!blocker) return;
+  console.log("");
+  console.log(ui.bold("\u2192 NEXT REQUIRED ACTION") + ui.dim(`  (${blocker.code})`));
+  for (const line of blocker.fix.split("\n")) console.log(`  ${line}`);
+}
 async function applyLightweightRepairs(root, paths) {
   await applyAutopilotRepairs(root, paths, {
     applyConfig: false,
@@ -15974,13 +16016,13 @@ async function readStdin2(maxBytes) {
     setTimeout(finish, 2e3);
   });
 }
+var ATOMIC_STAGE_EXCLUDE = ["/.usage/", "/.runtime/", "/.cache/"];
 async function stageResyncedArtifacts(root, paths) {
-  const rel = path51.relative(root, paths.projectContext);
-  const tracked = await runCommand4("git", ["ls-files", "--error-unmatch", "--", rel], root).then(() => true).catch(() => false);
-  if (!tracked) return;
-  const unchanged = await runCommand4("git", ["diff", "--quiet", "--", rel], root).then(() => true).catch(() => false);
-  if (unchanged) return;
-  await runCommand4("git", ["add", "--", rel], root).catch(() => {
+  const aiRel = path51.relative(root, paths.haiveDir);
+  const out = await runCommand4("git", ["diff", "--name-only", "--", aiRel], root).catch(() => "");
+  const toStage = out.split("\n").map((line) => line.trim()).filter(Boolean).filter((file) => !ATOMIC_STAGE_EXCLUDE.some((excl) => `/${file}`.includes(excl)));
+  if (toStage.length === 0) return;
+  await runCommand4("git", ["add", "--", ...toStage], root).catch(() => {
   });
 }
 function runCommand4(cmd, args, cwd) {
@@ -16500,7 +16542,7 @@ function warnNum(n) {
 
 // src/index.ts
 var program = new Command58();
-program.name("haive").description("hAIve - repo-native memory and context policy for coding-agent harnesses").version("0.13.5").option("--advanced", "show maintenance and experimental commands in help");
+program.name("haive").description("hAIve - repo-native memory and context policy for coding-agent harnesses").version("0.13.7").option("--advanced", "show maintenance and experimental commands in help");
 registerInit(program);
 registerWelcome(program);
 registerResolveProject(program);