@hiveai/cli 0.4.0 → 0.4.1

package/dist/index.js

@@ -382,9 +382,16 @@ See \`.ai/project-context.md\` for the full project context.
 Memories live under \`.ai/memories/\` (personal/team/module).
 
 ## hAIve \u2014 mandatory rules for AI agents
+
+### Session rules
 - **Before** marking a task as done ("Done", "Finished", "C'est fait"), call the MCP prompt \`post_task\`.
 - **Immediately** when an approach fails (wrong API, wrong pattern, wrong assumption), call \`mem_tried\` \u2014 do not wait until the end of the session.
 - When starting a new task, call \`get_briefing\` with the task description to load relevant memories and avoid repeating past mistakes.
+
+### Safety rules \u2014 NEVER violate these
+- If \`get_briefing\` returns an \`action_required\` list, **stop and show each item to the developer** before doing anything. Use the exact \`developer_message\` provided. Wait for explicit confirmation.
+- **Never modify code autonomously** because of a breaking change detected in another project (dependency version bump, API contract change, removed field). Always ask first.
+- When in doubt about a cross-repo change: ask, don't act.
 `;
 var CI_WORKFLOW = `name: haive-sync
 
@@ -946,18 +953,33 @@ function registerSync(program2) {
               if (majorBumps.length > 0) {
                 const slugParts = result.file.replace(/[^a-z0-9]/gi, "-").toLowerCase();
                 const slug = `dep-major-bump-${slugParts}-${Date.now().toString(36)}`;
-                const body = `## Major dependency version bumps detected in \`${result.file}\`
+                const depList = majorBumps.map((c) => `- \u{1F534} **${c.name}** : \`${c.from}\` \u2192 \`${c.to}\``).join("\n");
+                const body = `## \u26A0\uFE0F Action requise \u2014 confirmation humaine obligatoire
+
+Des d\xE9pendances dans \`${result.file}\` ont chang\xE9 de version majeure.
+Une version majeure peut contenir des **breaking changes** qui impactent ce projet.
+
+${depList}
+
+---
+
+**\u{1F6AB} Ne modifie aucun code de fa\xE7on autonome.**
+
+Informe le d\xE9veloppeur avec ce message :
+
+> *\xAB J'ai d\xE9tect\xE9 que ${majorBumps.map((c) => `\`${c.name}\``).join(", ")} a chang\xE9 de version majeure (${majorBumps.map((c) => `${c.from} \u2192 ${c.to}`).join(", ")}). Cela peut introduire des incompatibilit\xE9s dans ce projet. Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ? \xBB*
 
-` + majorBumps.map((c) => `- **${c.name}**: \`${c.from}\` \u2192 \`${c.to}\` (major bump \u2014 check for breaking changes)`).join("\n") + `
+Attends une **confirmation explicite** avant d'agir.
 
-**Action:** Review the changelogs for these packages and update any memories anchored to their APIs.
-Run \`haive memory import --from-changelog CHANGELOG.md\` if available.`;
+**Prochaines \xE9tapes (si confirm\xE9) :**
+- Consulter le CHANGELOG : \`haive memory import-changelog --from node_modules/<pkg>/CHANGELOG.md\`
+- V\xE9rifier les m\xE9moires ancr\xE9es : \`haive memory verify\``;
                 const fm = buildFrontmatter({
                   type: "gotcha",
                   slug,
                   scope: "team",
                   status: "validated",
-                  tags: ["dependency", "breaking-change", "auto-generated"],
+                  tags: ["dependency", "breaking-change", "auto-generated", "requires-human-approval"],
                   paths: [result.file],
                   topic: `dep-bump-${slugParts}`
                 });
@@ -965,7 +987,7 @@ Run \`haive memory import --from-changelog CHANGELOG.md\` if available.`;
                 await mkdir3(teamDir, { recursive: true });
                 await writeFile3(
                   path6.join(teamDir, `${fm.id}.md`),
-                  serializeMemory({ frontmatter: fm, body }),
+                  serializeMemory({ frontmatter: { ...fm, requires_human_approval: true }, body }),
                   "utf8"
                 );
                 log(ui.yellow(`   \u2192 memory created: ${fm.id}`));
@@ -994,18 +1016,37 @@ Run \`haive memory import --from-changelog CHANGELOG.md\` if available.`;
           }
           if (breaking.length > 0) {
             const slug = `contract-breaking-${diff.contract.replace(/[^a-z0-9]/gi, "-").toLowerCase()}-${Date.now().toString(36)}`;
-            const body = `## Breaking changes detected in contract: \`${diff.contract}\` (\`${diff.file}\`)
+            const breakingList = breaking.map((c) => `- \u{1F534} **${c.kind}** : ${c.description}`).join("\n");
+            const addList = additive.length > 0 ? `
+
+### Changements non-breaking (additifs)
+` + additive.map((c) => `- \u{1F7E2} ${c.description}`).join("\n") : "";
+            const body = `## \u26A0\uFE0F Action requise \u2014 confirmation humaine obligatoire
+
+Le contrat **\`${diff.contract}\`** (\`${diff.file}\`) a \xE9t\xE9 modifi\xE9.
+Des **breaking changes** ont \xE9t\xE9 d\xE9tect\xE9s \u2014 ce projet consomme peut-\xEAtre ce contrat.
+
+${breakingList}${addList}
+
+---
+
+**\u{1F6AB} Ne modifie aucun code de fa\xE7on autonome.**
+
+Informe le d\xE9veloppeur avec ce message :
+
+> *\xAB J'ai d\xE9tect\xE9 que le contrat \`${diff.contract}\` a chang\xE9 : ${breaking.length} breaking change(s) d\xE9tect\xE9(s). Ce projet d\xE9pend peut-\xEAtre de ce contrat. Veux-tu que j'analyse l'impact et que je propose des mises \xE0 jour ? \xBB*
 
-` + breaking.map((c) => `- \u{1F534} **${c.kind}**: ${c.description}`).join("\n") + (additive.length > 0 ? "\n\n### Additive changes (non-breaking)\n" + additive.map((c) => `- \u{1F7E2} ${c.description}`).join("\n") : "") + `
+Attends une **confirmation explicite** avant d'agir.
 
-**Action:** Review all consumers of this contract and update accordingly.
-Check memories tagged with \`${diff.contract}\` for potentially stale knowledge.`;
+**Prochaines \xE9tapes (si confirm\xE9) :**
+- Rechercher les usages : \`haive memory for-files <fichiers concern\xE9s>\`
+- V\xE9rifier les m\xE9moires li\xE9es : \`haive memory query ${diff.contract}\``;
             const fm = buildFrontmatter({
               type: "gotcha",
               slug,
               scope: "team",
               status: "validated",
-              tags: ["api-contract", "breaking-change", diff.contract, "auto-generated"],
+              tags: ["api-contract", "breaking-change", diff.contract, "auto-generated", "requires-human-approval"],
               paths: [diff.file],
               topic: `contract-breaking-${diff.contract}`
             });
@@ -1013,7 +1054,7 @@ Check memories tagged with \`${diff.contract}\` for potentially stale knowledge.
             await mkdir3(teamDir, { recursive: true });
             await writeFile3(
               path6.join(teamDir, `${fm.id}.md`),
-              serializeMemory({ frontmatter: fm, body }),
+              serializeMemory({ frontmatter: { ...fm, requires_human_approval: true }, body }),
               "utf8"
             );
             log(ui.yellow(`   \u2192 memory created: ${fm.id}`));
@@ -3287,7 +3328,7 @@ Next steps:
 
 // src/index.ts
 var program = new Command32();
-program.name("haive").description("hAIve \u2014 team-first persistent memory layer for AI coding agents").version("0.4.0");
+program.name("haive").description("hAIve \u2014 team-first persistent memory layer for AI coding agents").version("0.4.1");
 registerInit(program);
 registerMcp(program);
 registerBriefing(program);