@levr-one/cli 0.11.10 → 0.12.1

package/dist/{addHandler-DR6q5U_R.js → addHandler-QVX0ltyN.js}

@@ -1,10 +1,10 @@
-import { configureClient } from "./sdk-client-DYv-0CfA.js";
-import { getApiUrl } from "./env-CdwyPHGV.js";
-import "./token-refresh-DeusLK8H.js";
-import { resolveToken } from "./resolve-token-7xb7kG7h.js";
-import "./workspace-store-CnrxyYRB.js";
-import { fetchSites } from "./resolve-workspace-CStHisUb.js";
-import { describeWorkspaces, findWorkspaceByKeyOrName, isScopedMcpUrl, resolveMcpUrl, scopedMcpUrl, servedBySessionApi } from "./find-workspace-T4xuXwtS.js";
+import { configureClient } from "./sdk-client-B4FMd_Fa.js";
+import { getApiUrl } from "./env-CvjMSRd7.js";
+import "./token-refresh-CJB7Qlxy.js";
+import { resolveToken } from "./resolve-token-ByZq05Us.js";
+import "./workspace-store-Bmw104Qa.js";
+import { fetchSites } from "./resolve-workspace-BbK3uYQc.js";
+import { describeWorkspaces, findWorkspaceByKeyOrName, isScopedMcpUrl, resolveMcpUrl, scopedMcpUrl, servedBySessionApi } from "./find-workspace-Bl4rfr73.js";
 import { chmodSync, copyFileSync, existsSync, mkdirSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
 import { basename, delimiter, dirname, join, resolve } from "node:path";
 import { homedir } from "node:os";
@@ -2076,6 +2076,12 @@ function* installSteps(harness, mcpUrl, opts) {
 		if (err instanceof UnsupportedConfigShapeError) return unsupportedShape(path$1, dryRun, scope, err.detail);
 		throw err;
 	}
+	const shared = {};
+	if (def.projectPath) {
+		const root = resolveProjectRoot(env);
+		const ignored = root.isRepo ? isGitIgnored(env, root.root, path$1) : void 0;
+		if (ignored !== void 0) shared.gitIgnored = ignored;
+	}
 	if (alreadyConfigured) return {
 		ok: true,
 		wrote: false,
@@ -2083,7 +2089,8 @@ function* installSteps(harness, mcpUrl, opts) {
 		alreadyConfigured: true,
 		dryRun,
 		scope,
-		preview: nextText
+		preview: nextText,
+		...shared
 	};
 	const backupPath = backupPathFor(path$1, adapter.backupSuffix);
 	if (dryRun) return {
@@ -2095,7 +2102,8 @@ function* installSteps(harness, mcpUrl, opts) {
 		scope,
 		preview: nextText,
 		...replaced,
-		...backupPath ? { backupPath } : {}
+		...backupPath ? { backupPath } : {},
+		...shared
 	};
 	const finalText = nextText.endsWith("\n") ? nextText : `${nextText}\n`;
 	try {
@@ -2114,7 +2122,8 @@ function* installSteps(harness, mcpUrl, opts) {
 		scope,
 		preview: finalText,
 		...replaced,
-		...backupPath ? { backupPath } : {}
+		...backupPath ? { backupPath } : {},
+		...shared
 	};
 }
 /**
@@ -2704,6 +2713,7 @@ function outcomeLine(o, dryRun, switchCommand, entryName) {
 	const harness = getHarness(o.id);
 	const scopeNote = harness ? scopeDef(harness, r.scope)?.note : void 0;
 	const caveat = scopeNote ? ` [${scopeNote}]` : "";
+	const unshared = r.gitIgnored === true && r.scope === "project" ? " [path is git-ignored — not shared via git]" : "";
 	const note = (o.entryName ? ` [as ${o.entryName}]` : "") + (o.fallbackFrom ? ` [${o.fallbackFrom} scope unsupported — used ${r.scope}]` : "");
 	const where = r.path ? ` → ${r.path}` : "";
 	const backup = r.backupPath ? dryRun ? ` [original would be backed up to ${r.backupPath}]` : ` [original backed up to ${r.backupPath}]` : "";
@@ -2712,14 +2722,14 @@ function outcomeLine(o, dryRun, switchCommand, entryName) {
 		if (o.entryName) return `${o.label}: failed [as ${o.entryName}] — ${failureText(o, void 0, o.entryName)}`;
 		return `${o.label}: failed — ${failureText(o, switchCommand, entryName)}`;
 	}
-	if (r.alreadyConfigured) return `${o.label}: already set up (${r.scope})${where}${note}${caveat}`;
+	if (r.alreadyConfigured) return `${o.label}: already set up (${r.scope})${where}${note}${unshared}${caveat}`;
 	if (r.command) {
 		if (r.executed) return `${o.label}: installed (${r.scope}) via \`${r.command}\`${replaced}${note}${caveat}`;
 		return `${o.label} (${r.scope}): run \`${r.command}\`${replaced}${note}${caveat}`;
 	}
-	if (dryRun) return `${o.label}: would update (${r.scope})${where} (dry run — no changes)${backup}${replaced}${note}${caveat}`;
-	if (r.wrote) return `${o.label}: installed (${r.scope})${where}${backup}${replaced}${note}${caveat}`;
-	return `${o.label}: no change (${r.scope})${where}${note}${caveat}`;
+	if (dryRun) return `${o.label}: would update (${r.scope})${where} (dry run — no changes)${backup}${replaced}${note}${unshared}${caveat}`;
+	if (r.wrote) return `${o.label}: installed (${r.scope})${where}${backup}${replaced}${note}${unshared}${caveat}`;
+	return `${o.label}: no change (${r.scope})${where}${note}${unshared}${caveat}`;
 }
 /** Render a report as a plain multi-line summary (used by the CLI + tests). */
 function formatReport(report) {
@@ -2743,7 +2753,9 @@ function nextStepsText(report) {
 	if (report.dryRun) return "Dry run — re-run without --dry-run to apply these changes.";
 	if (!report.outcomes.some((o) => o.result.ok && !o.result.alreadyConfigured && (o.result.wrote || o.result.executed || o.result.command))) return report.outcomes.some((o) => !o.result.ok) ? "Nothing was installed." : "Nothing to do.";
 	const lines = ["Next: restart the client(s) above — each will prompt you to authorize", "Levr once in the browser. Then ask it: \"What issues are assigned to me?\""];
-	if (report.outcomes.some((o) => o.result.scope === "project" && o.result.wrote)) lines.push("", "Project-scoped config was written into this repository — commit it to", "share the Levr MCP with everyone who checks it out.");
+	const projectWrites = report.outcomes.filter((o) => o.result.scope === "project" && o.result.wrote);
+	if (projectWrites.some((o) => o.result.gitIgnored !== true)) lines.push("", "Project-scoped config was written into this repository — commit it to", "share the Levr MCP with everyone who checks it out.");
+	if (projectWrites.some((o) => o.result.gitIgnored === true)) lines.push("", "A project-scoped file above is git-ignored, so it stays on this machine.", "To share it, un-ignore that path (a `!` rule in .gitignore) or use --scope user.");
 	return lines.join("\n");
 }
 

package/dist/{appendHandler-KVsJMxpX.js → appendHandler-DtxLpPu6.js}

@@ -1,12 +1,12 @@
-import { appendActualResult } from "./sdk-client-DYv-0CfA.js";
-import "./env-CdwyPHGV.js";
-import "./token-refresh-DeusLK8H.js";
-import "./resolve-token-7xb7kG7h.js";
-import "./workspace-store-CnrxyYRB.js";
-import "./resolve-workspace-CStHisUb.js";
-import { connect } from "./connect-BgQmrL_0.js";
-import "./sleep-BpJ39Ypm.js";
-import { embedMarkdown, parseTarget, uploadArtifactFile } from "./artifact-upload-BzLxue32.js";
+import { appendActualResult } from "./sdk-client-B4FMd_Fa.js";
+import "./env-CvjMSRd7.js";
+import "./token-refresh-CJB7Qlxy.js";
+import "./resolve-token-ByZq05Us.js";
+import "./workspace-store-Bmw104Qa.js";
+import "./resolve-workspace-BbK3uYQc.js";
+import { connect } from "./connect-DVjgyfls.js";
+import "./sleep-CGBHjsj5.js";
+import { embedMarkdown, parseTarget, uploadArtifactFile } from "./artifact-upload-BvBSevIx.js";
 import { readFileSync } from "node:fs";
 import { basename } from "node:path";
 

package/dist/{artifact-upload-BzLxue32.js → artifact-upload-BvBSevIx.js}

@@ -1,5 +1,5 @@
-import { uploadAttachment } from "./sdk-client-DYv-0CfA.js";
-import { sleep } from "./sleep-BpJ39Ypm.js";
+import { uploadAttachment } from "./sdk-client-B4FMd_Fa.js";
+import { sleep } from "./sleep-CGBHjsj5.js";
 import { constants, promises, readlinkSync, realpathSync, statSync } from "node:fs";
 import path from "node:path";
 import process from "node:process";

package/dist/{attachHandler-DQpK_pVa.js → attachHandler-DXZi2ILT.js}

@@ -1,12 +1,12 @@
-import { appendActualResult, createComment } from "./sdk-client-DYv-0CfA.js";
-import "./env-CdwyPHGV.js";
-import "./token-refresh-DeusLK8H.js";
-import "./resolve-token-7xb7kG7h.js";
-import "./workspace-store-CnrxyYRB.js";
-import "./resolve-workspace-CStHisUb.js";
-import { connect } from "./connect-BgQmrL_0.js";
-import "./sleep-BpJ39Ypm.js";
-import { TargetParseError, embedMarkdown, parseTarget, uploadArtifactFile } from "./artifact-upload-BzLxue32.js";
+import { appendActualResult, createComment } from "./sdk-client-B4FMd_Fa.js";
+import "./env-CvjMSRd7.js";
+import "./token-refresh-CJB7Qlxy.js";
+import "./resolve-token-ByZq05Us.js";
+import "./workspace-store-Bmw104Qa.js";
+import "./resolve-workspace-BbK3uYQc.js";
+import { connect } from "./connect-DVjgyfls.js";
+import "./sleep-CGBHjsj5.js";
+import { TargetParseError, embedMarkdown, parseTarget, uploadArtifactFile } from "./artifact-upload-BvBSevIx.js";
 import { readFileSync } from "node:fs";
 import { basename } from "node:path";
 

package/dist/cli.js

@@ -1,5 +1,6 @@
 #!/usr/bin/env node
 import { COMPLETION_SHELLS } from "./completionHandler-O2G_WZLf.js";
+import { gatesInspectCommand } from "./inspect-B8tG9g0q.js";
 import { buildApplication, buildCommand, buildRouteMap, proposeCompletions, run, text_en } from "@stricli/core";
 import chalk from "chalk";
 import { existsSync, readFileSync } from "node:fs";
@@ -223,7 +224,7 @@ Examples:
 		aliases: { y: "yes" }
 	},
 	loader: async () => {
-		const { mcpAddHandler } = await import("./addHandler-DR6q5U_R.js");
+		const { mcpAddHandler } = await import("./addHandler-QVX0ltyN.js");
 		return mcpAddHandler;
 	}
 });
@@ -272,7 +273,7 @@ Examples:
 		aliases: { d: "device-code" }
 	},
 	loader: async () => {
-		const { loginHandler } = await import("./loginHandler-DE0L1ehF.js");
+		const { loginHandler } = await import("./loginHandler-C9Oi92IY.js");
 		return loginHandler;
 	}
 });
@@ -291,7 +292,7 @@ Examples:
 	},
 	parameters: {},
 	loader: async () => {
-		const { logoutHandler } = await import("./logoutHandler-S4TFYFwz.js");
+		const { logoutHandler } = await import("./logoutHandler-Cf5aI1wq.js");
 		return logoutHandler;
 	}
 });
@@ -311,7 +312,7 @@ Examples:
 	},
 	parameters: {},
 	loader: async () => {
-		const { statusHandler } = await import("./statusHandler-BNiWlC7e.js");
+		const { statusHandler } = await import("./statusHandler-BQXn93-r.js");
 		return statusHandler;
 	}
 });
@@ -440,7 +441,7 @@ levr attach --manifest or later uploads.`
 		}
 	},
 	loader: async () => {
-		const { pushHandler } = await import("./pushHandler-DdNyVQ5t.js");
+		const { pushHandler } = await import("./pushHandler-CXFZt3SO.js");
 		return pushHandler;
 	}
 });
@@ -560,7 +561,7 @@ Examples:
 		}
 	},
 	loader: async () => {
-		const { importHandler } = await import("./importHandler-zw5GKb-S.js");
+		const { importHandler } = await import("./importHandler-uFdalKtw.js");
 		return importHandler;
 	}
 });
@@ -581,7 +582,7 @@ Examples:
 	},
 	parameters: {},
 	loader: async () => {
-		const { listHandler } = await import("./listHandler-YA-0RkwS.js");
+		const { listHandler } = await import("./listHandler-BW92JLCl.js");
 		return listHandler;
 	}
 });
@@ -619,7 +620,7 @@ Examples:
 		flags: {}
 	},
 	loader: async () => {
-		const { selectHandler } = await import("./selectHandler-Cejme5nY.js");
+		const { selectHandler } = await import("./selectHandler-D6cvq60S.js");
 		return selectHandler;
 	}
 });
@@ -636,7 +637,7 @@ Examples:
 	},
 	parameters: {},
 	loader: async () => {
-		const { currentHandler } = await import("./currentHandler-u89l068v.js");
+		const { currentHandler } = await import("./currentHandler-QhCywr3S.js");
 		return currentHandler;
 	}
 });
@@ -646,14 +647,21 @@ Examples:
 const gatesRunCommand = buildCommand({
 	docs: {
 		brief: "Run a deliverable's gate commands and report the raw results",
-		fullDescription: `Verify a deliverable's gates, run every local command EXACTLY as the
-server returned it (/bin/bash -c, from the current directory — run it from the
-repo root), and report the raw exit code and output tails so the server can
-derive each verdict.
-
-Each command is printed before it runs; use --dry-run to read them first. The
-server validates every local command before handing it out: a command that
-fails its check comes back as a verification error, never as a command to run.
+		fullDescription: `Verify a deliverable's gates, run every local command from the current
+directory (run it from the repo root), and report the raw exit code and output
+tails so the server can derive each verdict.
+
+File checks (inspect ops, printed as \`npx @levr-one/cli gates inspect '…'\`)
+run inside this CLI and spawn nothing. Every other command runs EXACTLY as the
+server returned it, in /bin/bash -c (or sh).
+
+Each command is printed before it runs; use --dry-run to read them first. A
+dry run runs nothing locally and shows, per command, where it would run
+(\`runs\`) and the server's approval (\`approval\`). It still calls the
+server's verify, which records state there. A \`confirm\` approval is not
+prompted for yet: the command runs. The server validates every local command
+before handing it out: a command that fails its check comes back as a
+verification error, never as a command to run.
 
 Guided gates are listed, not run: perform them and report what you observed
 with report_gate_results step_results[].
@@ -697,6 +705,11 @@ Examples:
 				kind: "boolean",
 				default: false,
 				brief: "Show detailed output"
+			},
+			ci: {
+				kind: "boolean",
+				default: false,
+				brief: "Declare this run is CI. On GitHub Actions, attach an OIDC token (audience levr:<workspace_id>); without one the server records the run as unverified"
 			}
 		},
 		aliases: {
@@ -705,7 +718,7 @@ Examples:
 		}
 	},
 	loader: async () => {
-		const { gatesRunHandler } = await import("./runHandler-BFDjtxbt.js");
+		const { gatesRunHandler } = await import("./runHandler-itaAVn4U.js");
 		return gatesRunHandler;
 	}
 });
@@ -818,7 +831,7 @@ Examples:
 		}
 	},
 	loader: async () => {
-		const { attachHandler } = await import("./attachHandler-DQpK_pVa.js");
+		const { attachHandler } = await import("./attachHandler-DXZi2ILT.js");
 		return attachHandler;
 	}
 });
@@ -894,14 +907,14 @@ Examples:
 		}
 	},
 	loader: async () => {
-		const { resultAppendHandler } = await import("./appendHandler-KVsJMxpX.js");
+		const { resultAppendHandler } = await import("./appendHandler-DtxLpPu6.js");
 		return resultAppendHandler;
 	}
 });
 
 //#endregion
 //#region package.json
-var version = "0.11.10";
+var version = "0.12.1";
 
 //#endregion
 //#region src/app.ts
@@ -922,7 +935,10 @@ const workspaceRoutes = buildRouteMap({
 	docs: { brief: "Manage workspace selection" }
 });
 const gatesRoutes = buildRouteMap({
-	routes: { run: gatesRunCommand },
+	routes: {
+		inspect: gatesInspectCommand,
+		run: gatesRunCommand
+	},
 	docs: { brief: "Run a deliverable's gates and report the raw results" }
 });
 const resultRoutes = buildRouteMap({

package/dist/{connect-BgQmrL_0.js → connect-DVjgyfls.js}

@@ -1,6 +1,6 @@
-import { client, configureClient } from "./sdk-client-DYv-0CfA.js";
-import { resolveToken } from "./resolve-token-7xb7kG7h.js";
-import { resolveWorkspace } from "./resolve-workspace-CStHisUb.js";
+import { client, configureClient } from "./sdk-client-B4FMd_Fa.js";
+import { resolveToken } from "./resolve-token-ByZq05Us.js";
+import { resolveWorkspace } from "./resolve-workspace-BbK3uYQc.js";
 
 //#region src/utils/connect.ts
 /**

package/dist/{currentHandler-u89l068v.js → currentHandler-QhCywr3S.js}

@@ -1,4 +1,4 @@
-import { loadWorkspace } from "./workspace-store-CnrxyYRB.js";
+import { loadWorkspace } from "./workspace-store-Bmw104Qa.js";
 
 //#region src/commands/workspace/currentHandler.ts
 function currentHandler() {

package/dist/{find-workspace-T4xuXwtS.js → find-workspace-Bl4rfr73.js}

@@ -1,4 +1,4 @@
-import { getApiUrl } from "./env-CdwyPHGV.js";
+import { getApiUrl } from "./env-CvjMSRd7.js";
 
 //#region src/mcp/url.ts
 const KNOWN_MCP_URLS = {

package/dist/{importHandler-zw5GKb-S.js → importHandler-uFdalKtw.js}

@@ -1,9 +1,9 @@
-import { authGetProfileV1, client, configureClient } from "./sdk-client-DYv-0CfA.js";
-import { getApiUrl, getTeamId } from "./env-CdwyPHGV.js";
-import "./token-refresh-DeusLK8H.js";
-import { resolveToken } from "./resolve-token-7xb7kG7h.js";
-import "./workspace-store-CnrxyYRB.js";
-import { resolveWorkspace } from "./resolve-workspace-CStHisUb.js";
+import { authGetProfileV1, client, configureClient } from "./sdk-client-B4FMd_Fa.js";
+import { getApiUrl, getTeamId } from "./env-CvjMSRd7.js";
+import "./token-refresh-CJB7Qlxy.js";
+import { resolveToken } from "./resolve-token-ByZq05Us.js";
+import "./workspace-store-Bmw104Qa.js";
+import { resolveWorkspace } from "./resolve-workspace-BbK3uYQc.js";
 import chalk from "chalk";
 import { createReadStream } from "node:fs";
 import { basename } from "node:path";